<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:396fd939-4659-3a82-b56d-6a24e496e585" version="1" xmlns="http://cyclonedx.org/schema/bom/1.6">
  <metadata>
    <lifecycles>
      <lifecycle>
        <phase>build</phase>
      </lifecycle>
    </lifecycles>
    <tools>
      <components>
        <component type="library">
          <author>OWASP Foundation</author>
          <group>org.cyclonedx</group>
          <name>cyclonedx-maven-plugin</name>
          <version>2.9.1</version>
          <description>CycloneDX Maven plugin</description>
          <hashes>
            <hash alg="MD5">9c7a565cf28cce58557d0c621c5ea4b1</hash>
            <hash alg="SHA-1">be882d5a22050bfa9d19090b1420c188617d0e1c</hash>
            <hash alg="SHA-256">698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249</hash>
            <hash alg="SHA-512">c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0</hash>
            <hash alg="SHA-384">d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb</hash>
            <hash alg="SHA3-384">80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f</hash>
            <hash alg="SHA3-256">142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699</hash>
            <hash alg="SHA3-512">af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b</hash>
          </hashes>
        </component>
      </components>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.jena/jena-fuseki-main@5.5.0?type=jar">
      <publisher>Apache Jena</publisher>
      <group>org.apache.jena</group>
      <name>jena-fuseki-main</name>
      <version>5.5.0</version>
      <description>Fuseki is a SPARQL 1.1 Server which provides the SPARQL query, 
  SPARQL update and SPARQL graph store protocols.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.jena/jena-fuseki-main@5.5.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://jena.apache.org/jena-fuseki-main/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/JENA</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@jena.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/jena.git/jena-fuseki/jena-fuseki-main</url>
        </reference>
      </externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
      <property name="cdx:reproducible">enabled</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.jena/jena-fuseki-core@5.5.0?type=jar">
      <publisher>Apache Jena</publisher>
      <group>org.apache.jena</group>
      <name>jena-fuseki-core</name>
      <version>5.5.0</version>
      <description>Fuseki is a SPARQL 1.1 Server which provides the SPARQL query, 
  SPARQL update and SPARQL graph store protocols.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8705bc8d092ccb3ad2e9a5ec21e8d415</hash>
        <hash alg="SHA-1">2115f5bf08c387304a3c181f02e68b38d7010f8e</hash>
        <hash alg="SHA-256">a85df0919216132d5d1a8683cdebc322cf68ec3fe8571c792b22d231e232497d</hash>
        <hash alg="SHA-512">84c56ac53cc9afc5d7211b19e6b0c4810dc9025798753f7fb373671b6896925cfc5363ee2d6d6bf17aa69ac9d1fe73442ea7b66d685bd1e9367d9f01e10204d0</hash>
        <hash alg="SHA-384">52ae1cb20559494f5ecc1b661e3e9827f68085f430d3d2f2fc3bd9ceb2c594c0f896d1903cfb7f2d6bfed84c800cde7e</hash>
        <hash alg="SHA3-384">285ee4563475946c03344ffa522a2c2d9ffd6a566fe22a3b74b4e54bf99e362b094ba2fb84f2a5b1117e45749b2fd462</hash>
        <hash alg="SHA3-256">15a37c179bc7113d21be10808f34a46d7183acf28930f9d05a5d2a389e9490c6</hash>
        <hash alg="SHA3-512">f11c1d01c12ce3119019c1a88bdc28708ea62f2213126e2388222907b928fc823fc834cc829b16ebf27a0e7d345064af0474144159c93932345ed1c1cbb1768d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.jena/jena-fuseki-core@5.5.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://jena.apache.org/jena-fuseki-core/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/JENA</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@jena.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/jena.git/jena-fuseki/jena-fuseki-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.jena/jena-rdfpatch@5.5.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.jena</group>
      <name>jena-rdfpatch</name>
      <version>5.5.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">fe8c7b340aa61940bb4d5ccae2fb6e56</hash>
        <hash alg="SHA-1">757b77f4dc028b75f771358571447050ae7d5ef9</hash>
        <hash alg="SHA-256">ce8bf68f997b68fc7064fa350c67e09284d5ae7f50639598b823ad2c67bf2194</hash>
        <hash alg="SHA-512">8baed47341c08fe424fdf09b57c03d9ab7e49e407c48c88a34a0dd794271585bc1bb139f9690e0a8a1ee91c435f8018b67eb8a25a91120e663481e987cdfc74f</hash>
        <hash alg="SHA-384">533b8a2b3cf2833ae7870abda5ab7bc263efa9f95fd627ed314306f3f323874ec5fef0c00e3ccc98856d6234b1e169f8</hash>
        <hash alg="SHA3-384">eff4efe26d222b00741ad08ff76f5d4ee37f005e2095f34250f1b2f39850f37edd20f3026d4850bccf208278bf7693b5</hash>
        <hash alg="SHA3-256">e1148c481ae844132d14a7fdaae8ea5c7e36f99ca9916122c167a2af7abcf4a5</hash>
        <hash alg="SHA3-512">1088c295ba7fc5ad50c2f62aeee25bf07477fa731bd0a22702360759daf5f7521b565967e920d29665c0391b2c42ac025253ee634d6ac44141ca6765ffe03a3a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.jena/jena-rdfpatch@5.5.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://jena.apache.org/jena-rdfpatch/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/JENA</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@jena.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/jena.git/jena-rdfpatch</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.jena/jena-shacl@5.5.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.jena</group>
      <name>jena-shacl</name>
      <version>5.5.0</version>
      <description>SHACL engine for Apache Jena</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6a8d529c01340ec97fc88d34d284f871</hash>
        <hash alg="SHA-1">96ee8799f9c7ac0e2a81f4cdd213db32e8c101e0</hash>
        <hash alg="SHA-256">c2f7b87124fac2f34892ac465628394c0827f3a2a9b00db44f202c2bdd9177db</hash>
        <hash alg="SHA-512">65037c96e3b457d0baf02dadf52b28010d30e58fb9bc8d5e64bf9ec0f6f0c5fe98fa4a44496e87cdbfad1f91181d796ec008d2e081b4729c2c86c4d38dff262f</hash>
        <hash alg="SHA-384">bd101410cdd4cd5d0c814fe2ab3917e920b8e1dc18c9b249c83da54083133080626f944be8cf05f9a83be034992a16cf</hash>
        <hash alg="SHA3-384">bcef8343671b2ce1bd0ea7d3a54ebb15381dd222c1975e01bffccef1b17baa7991b737bd9c9c290747b52e6de4af7c2e</hash>
        <hash alg="SHA3-256">7f24770f876da87c97438968ca81f9b31965d780b314555bd77fe291bc2507ae</hash>
        <hash alg="SHA3-512">1ba74df01f8e1baaae177b4ff5a624a8f57dccdd507421978e77bc3f86b4ab4939c107b9d0eacdff4f759fc4cceb31da12487d0ffe4dd3e1ce33a3c7eb4f7d97</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.jena/jena-shacl@5.5.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://jena.apache.org/jena-shacl/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/JENA</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@jena.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/jena.git/jena-shacl</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.jena/jena-shex@5.5.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.jena</group>
      <name>jena-shex</name>
      <version>5.5.0</version>
      <description>ShEx</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8b377c409f485868bf704ba4c1fa0d48</hash>
        <hash alg="SHA-1">33f6019553000da69fa78febcef61b2a68520406</hash>
        <hash alg="SHA-256">f5a8c1d40268da52ae8cccf6adcadf5714a7f9cb74ceb8a3dfb481655caa1cbc</hash>
        <hash alg="SHA-512">ef5083278d851d6ce9a45237b38e84f2c8184e8b737f01ba96e98a5a7934a967ea62f35db66d48a2b82e0fd7bef163668835e03460d46af13c019086da8b0743</hash>
        <hash alg="SHA-384">80c9901c8b21014a429157c9f4f35797c2809185332a3ce4367d0c94f07f828dced117741364541bf73203ac06ae03e2</hash>
        <hash alg="SHA3-384">d851a9b2ff2bbb4e0cd0671bbb0d527d5c6bde141f04abd276c1383fc5d7c7999dc22934b815658fd01222d8ed6886b6</hash>
        <hash alg="SHA3-256">f5fcd97ced3f80621d86cc97d4729c3aabd6f35d867fbb171154da0bbe31cbb3</hash>
        <hash alg="SHA3-512">210219a9cdb66b2086feee6b94410a925e2ef66c50d90cdb28fbbe0a200c12bbe89b22d544e26fb4c749df30a91f3e285f939a157ab0219f43cbffb16bec3b7c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.jena/jena-shex@5.5.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://jena.apache.org/jena-shex/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/JENA</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@jena.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/jena.git/jena-shex</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.jena/jena-tdb1@5.5.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.jena</group>
      <name>jena-tdb1</name>
      <version>5.5.0</version>
      <description>TDB is a storage subsystem for Jena and ARQ, it is a native triple store providing persistent storage of triples/quads.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d3f577b796c91c96a650e5cbfb4b449a</hash>
        <hash alg="SHA-1">43b17947c3a45c2a151dbc53c81de09fde5d6bca</hash>
        <hash alg="SHA-256">8aa3b03537608f3e2e62febc20bc1cbff60377bc79cdf4aacf50f1611f765fd3</hash>
        <hash alg="SHA-512">21aea2f6c1a83780488977f21e6b7e14310010f50d212f2d43cc37ae5890314be9c10920de5de1ee0543be8ae1cb88a0ed5822c79782e5f3e1f72f27d45b3bad</hash>
        <hash alg="SHA-384">411dd1480a1a8f5cb2ad9bc97e23fe604c638adfc5f19a293a4883ca357c4faa2b18d4c6c07e0778c31e4327cc7fa4ec</hash>
        <hash alg="SHA3-384">35900f20a705bddda787600f47d5962f13a183470b173aab3ef6894112f09644a9222c1cbaa676e23431bb5094b3d9e1</hash>
        <hash alg="SHA3-256">7ce12ca9399379b53a1e0739f8b3f726c925970c1daf06c6e56d44272006add5</hash>
        <hash alg="SHA3-512">ca1de038c7011c6022cfe25536cd5d4faa74980f24ddb5540218ffb9fadabe4f2829a2f0a96db6538f9e8f8f0ce8fbe9f8628e19dc10096cad9a82a5ce9ef906</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.jena/jena-tdb1@5.5.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://jena.apache.org/jena-tdb1/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/JENA</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@jena.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/jena.git/jena-tdb1</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.jena/jena-tdb2@5.5.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.jena</group>
      <name>jena-tdb2</name>
      <version>5.5.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d5721024f1efb6c48fe688c7e639c9fd</hash>
        <hash alg="SHA-1">94382514abef25ed27ca2e158e7dab483f0c21d9</hash>
        <hash alg="SHA-256">78ee8fc8cf5323564ebbbd47f886bd6aed9bd92c79545e07b3c690b03d53ae8c</hash>
        <hash alg="SHA-512">9a8ac2912957ce08bd7115818231e1167a15c7af7bec9f66d83a15bd81b4f9a13f51f1efed02bc99fb119158c6680d3a27aecf71a352c1ec458f38f16253b7bc</hash>
        <hash alg="SHA-384">367ff014cf8af16c12cf19bd78b9a5e55c0c3a179923147f4690dfbaee2cee75dc5dee8ae8864f69067b06f32dba898f</hash>
        <hash alg="SHA3-384">6533e386b80aba86f451083a42e7937547516ba0da94c3e0caf2e0f77efae9aabf6e1bfe2b20fda0a4ae5bdecaf26726</hash>
        <hash alg="SHA3-256">6fdb5d9d8fe56feb550184982d6ad4bd93e962eccd51dc1b17b1693c26c82d4a</hash>
        <hash alg="SHA3-512">bee8828328cbe92c4b92af65c6bc664e1dabd3b0a29291ac4d8ae0bcfdacf284b33d6b8675656e49ef6eb550621410bc83627df19e31720f52e0d1b488e90e95</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.jena/jena-tdb2@5.5.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://jena.apache.org/jena-tdb2/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/JENA</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@jena.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/jena.git/jena-tdb2</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.jena/jena-dboe-storage@5.5.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.jena</group>
      <name>jena-dboe-storage</name>
      <version>5.5.0</version>
      <description>Triplestore database storage</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1b1702fb1fc7e5ed26c363cc9f696efd</hash>
        <hash alg="SHA-1">77115aaa31c48013e0c7bf49064532d805fec0d0</hash>
        <hash alg="SHA-256">ed4a38b967758da14604471f02896d425740a8dadcb8252cd4827bde446b16af</hash>
        <hash alg="SHA-512">79da2e0bad8b4d6bd586998b9d51a27356e4990d2b874d57505abdb3bc390a53a230b9287b9588c98b48a576d7f99209c460911bc82b75e502549418647bc1c0</hash>
        <hash alg="SHA-384">cdf1fbb0fa09082870224a12f4c4e72806356b22ffeb0fbe3b7bfe76c0eb3ca8ec60887a4d38dff06e5dbf5c24514b62</hash>
        <hash alg="SHA3-384">3c3a4c3bc1afa458522d76d1ec741d8a16344f62921f9a915fe78c2187493140fb2e097dc4596f06f79fa998a5f4573a</hash>
        <hash alg="SHA3-256">f6254d7dd694ff1310ee462af5ef833d1a19c99cb2c84698ef1cec0afcca9dc4</hash>
        <hash alg="SHA3-512">5d4cc47f239d505e73a5e9a11e29cdd46c32a854f8aeaf575acc39f9931ab1448f27d0cd12fae589e95651765f64e90bb9921b1f1f9f5d6f0121a22851594c0b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.jena/jena-dboe-storage@5.5.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://jena.apache.org/jena-dboe-storage/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/JENA</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@jena.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/jena.git/jena-db/jena-dboe-storage</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.jena/jena-dboe-trans-data@5.5.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.jena</group>
      <name>jena-dboe-trans-data</name>
      <version>5.5.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">924a31dad58d9d3ea58d6ca38461fb98</hash>
        <hash alg="SHA-1">f641b6addc4112d2c253b6c193414861d5009cb9</hash>
        <hash alg="SHA-256">f0a8e186e03e9f409c0b5830e80b3f062b22ea66723aa3cae803895be7b882e6</hash>
        <hash alg="SHA-512">a2c3bb062502261f5b2ed1a42719abea56425a8c098af7fd4d7d7b3ca0a4f21a4f61951a4cf25710fe660b3b2bf036a493f819e3446e0d03140b663148e5601f</hash>
        <hash alg="SHA-384">a04e48c8c729f1a0e0955d0c4e996e9788ac5f81496d3b13028fb2cd6c4e313b44074b84710d963251a327c37b9e6276</hash>
        <hash alg="SHA3-384">1b5b786d192eac0bac9500f2b20d258126f32108a8242e51b1c9c444de5a8f41727ef8da152b822e28e338f8d0905926</hash>
        <hash alg="SHA3-256">7d0820a29cbea0ac1f263ab111ceaa90d7a24a136e713b838ddd4ae0f1e56478</hash>
        <hash alg="SHA3-512">db3a9c02e61b0a44af2fea7dc4200c32a80425dbdb77f8808c75342aa7c9e177bf85b6bc76e4a021a7524be911a8f7e6ecf53c433ee9f2e6d86cd06e00b44aeb</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.jena/jena-dboe-trans-data@5.5.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://jena.apache.org/jena-dboe-trans-data/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/JENA</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@jena.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/jena.git/jena-db/jena-dboe-trans-data</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.jena/jena-dboe-transaction@5.5.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.jena</group>
      <name>jena-dboe-transaction</name>
      <version>5.5.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6bcdf61243b3b15eaef5bef1e74bf813</hash>
        <hash alg="SHA-1">1b462797df6a4cb9f63ddf88d09ab0bd180651f2</hash>
        <hash alg="SHA-256">45216659c2e0646466916ec036f713e7b7273523e3a2f6eb0d7a5a6f53e4667d</hash>
        <hash alg="SHA-512">7ff4a44579f5cb1cd79829e86b681be611e9ed9e5d6b3fa677eab060af3454e40d557934009ae51801820ccf5a21ff91fd2fc0d5f9dc5055e1da6fa29122fe9b</hash>
        <hash alg="SHA-384">e4a16e9a59e5d191f2f24a58df7ee14fe77a5888de4a7508555a1fb537942882d95d305e9ded159c356f4452ed65ced5</hash>
        <hash alg="SHA3-384">054f77a623045409daf17d0760907c940410091b388bb28167257d1260944f202bfe3f7b432aaba81df21b85c0164d50</hash>
        <hash alg="SHA3-256">204f17015439d702d389f90f061068c4d4ca47b49209860380fc386dc146691b</hash>
        <hash alg="SHA3-512">20251122ea3bb1237b274fc0cf38b1a8c63e52c7052c204289c611e697cb7cedefbdab336a083d0a4fe0fd99cd04e87fdbb7b27c41f8bff6a6947ab1285d5a95</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.jena/jena-dboe-transaction@5.5.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://jena.apache.org/jena-dboe-transaction/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/JENA</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@jena.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/jena.git/jena-db/jena-dboe-transaction</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.jena/jena-dboe-base@5.5.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.jena</group>
      <name>jena-dboe-base</name>
      <version>5.5.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">828a632f5661c083dd26f78a61b697ee</hash>
        <hash alg="SHA-1">bd84e493e4fa93450207c0458d110a0c47c5cf13</hash>
        <hash alg="SHA-256">61a9ba6f107264738028b15a5c52f14a4f86b01df598e6417cb8ed20aadd00e4</hash>
        <hash alg="SHA-512">fda55595a0b96ae4445b9f0142b45cd694b8c73a3fdc55c6ad6f811763ab62ce0419f67c646a7c071614cd1b8ed713b3991c30c49c788bbe62be445d4dd7496e</hash>
        <hash alg="SHA-384">3a4b177aacf69387343b5ae96a8c993696cecae44650c8e85f3b1bf6a350d1acb11dca9dceab729ed95468f95a29cce2</hash>
        <hash alg="SHA3-384">5ac56d116ca6d32d6c638d1f559f5fd8e6855b9ae36a8d816f66eced948a8419a7daa00cd38ae26edecf56f169969241</hash>
        <hash alg="SHA3-256">f866f0b45b0b76696aa1bf9a8cf3accbf972fb05393fa16c9d4ae41b275992cf</hash>
        <hash alg="SHA3-512">9f6fc94a229d42ec14da86be117d05b9eb8a7e5b27cb96fbf9383b9d4b398c82f9e6930aaa2c2b3f49bc1af63fc575e7c1c393897e402930046ddf62b5f45d0a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.jena/jena-dboe-base@5.5.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://jena.apache.org/jena-dboe-base/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/JENA</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@jena.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/jena.git/jena-db/jena-dboe-base</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.jena/jena-dboe-index@5.5.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.jena</group>
      <name>jena-dboe-index</name>
      <version>5.5.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2474fbbf58fa60eb84b8659aeea8c786</hash>
        <hash alg="SHA-1">482179b6309e97ad192d674bd3f07b88698f60d9</hash>
        <hash alg="SHA-256">90d994f29b027c94e03c417dc7482d2ec2675f6f70426d7c8f3b43b6697a2c58</hash>
        <hash alg="SHA-512">b0de724eb93b1aa12212fb35821b83f7dcd59e5207ccf44a40e5c9a0047d1d866c6afed7d29567af110b13d48baa0aa7f5c1c5af2a77f6ac856813ff9737ff21</hash>
        <hash alg="SHA-384">0d6fb1ef6391d8bc6a51f4d99e6e11919aee1cfa62391045e33c53fdfee69ad71875ef9930b72d0b60ffffa677007019</hash>
        <hash alg="SHA3-384">ddbe4459eb4d4154a273fec63cf38ccc4cbada2eb9b12f32cf50cfc62d0a1d78e560a739d23d15d35edf71a63f47564c</hash>
        <hash alg="SHA3-256">bbf2a4d06d99dc9ce8baf76b9464b85087b79cfd6b21ae8e1ca2ca5eb0d8180b</hash>
        <hash alg="SHA3-512">9c989eed4ca45cc832f0c1b3a33755d6f205dab2bb3a78eaf7a9e9a6fdffa3e79411a8fd0293f43071dfcdda7567f3b473a35e4cc1e52c965f0c5c7f6d0c877b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.jena/jena-dboe-index@5.5.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://jena.apache.org/jena-dboe-index/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/JENA</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@jena.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/jena.git/jena-db/jena-dboe-index</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.jena/jena-rdfconnection@5.5.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.jena</group>
      <name>jena-rdfconnection</name>
      <version>5.5.0</version>
      <description>RDF Connection</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a78e46c2e59ba1c88c97cde709bdf2a1</hash>
        <hash alg="SHA-1">74cc4e2d65bf7f2b27a27cab662c9ff902395ee8</hash>
        <hash alg="SHA-256">59d41db6f8d291a251bef3c438d88ba1fe99efa682870741ca6f46637b94ccec</hash>
        <hash alg="SHA-512">12448340414a67373f19e51d9bc44216d99957b7fa916b5df768211bd9afe926f572af8d0d0275958e9e663df5e9a0b0b0de6c601c321f37c93780cb4356ad52</hash>
        <hash alg="SHA-384">8749766b28bc794772d9147c5a8817716965100f2d5bb31e03500ea4ba8daa5ecab98a934318902d7668c83850223d43</hash>
        <hash alg="SHA3-384">d7cc2a4544ee996d7f37322307543f810138c4f1d6663a871c3326e6d5a9409941f8c1688956f53d867ce258e52485f6</hash>
        <hash alg="SHA3-256">12b823a3ef0ef3db10fbc0d0a0784b991b134c382b38676d7b00a75d04ea0132</hash>
        <hash alg="SHA3-512">7c3f6614789a1896b815169bc7d1565c0c4ed7c0d4e67717f92ada62d00754a8f9c2d51a918ef267fe57fcf670556351369cd9d670c3b45feeed4114b69cf696</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.jena/jena-rdfconnection@5.5.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://jena.apache.org/jena-rdfconnection/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/JENA</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@jena.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/jena.git/jena-rdfconnection</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-fileupload2-jakarta-servlet6@2.0.0-M4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-fileupload2-jakarta-servlet6</name>
      <version>2.0.0-M4</version>
      <description>The Apache Commons FileUpload Jakarta component provides a simple yet flexible means of adding support for multipart
    file upload functionality to Jakarta servlets and web applications.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d899475473487be05a7202a4a72dcb4f</hash>
        <hash alg="SHA-1">bb4c5ec509150db182dd5928a43b85d2ca82e273</hash>
        <hash alg="SHA-256">af35ced3bc2caacdcccda520dcf7ae4185f45de22ca2ca8b15145017b97ea02f</hash>
        <hash alg="SHA-512">cdbe0de8ee9784e31d59ec518a8350872cf3503c3321c244aa225236073554b866739f91f7c5d907fa5f9669df76a1f9f96757979bd3065f40d0f1d4fd3fb823</hash>
        <hash alg="SHA-384">831fc02acfe822824452c449e26e504a1327e5de145fafd9fe41b8b1c08194ff1ba053ffad30cc70774f774fb4fba8d1</hash>
        <hash alg="SHA3-384">ca91afc297f8f1efff757c408025d42b537e60dff6b7605eb758e01c1422c1dadd1e1b81ba4dbd0d4a761f752844634d</hash>
        <hash alg="SHA3-256">1eac1058a6d7bd28b69aec6e97698844eeb48f5d7b9fdc536997961a8cb89ccd</hash>
        <hash alg="SHA3-512">1057a6eebce0df860c9d919f3180c37543ec76a69633356139b42fe94c7a6e2cef833aae1864e5853e0c79d7e38a92cab3231458afaee93cc95bcbdc15e6a24d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-fileupload2-jakarta-servlet6@2.0.0-M4?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-fileupload/commons-fileupload2-jakarta-servlet6/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-parent/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/FILEUPLOAD</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=commons-fileupload.git/commons-fileupload2-jakarta-servlet6</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-fileupload2-core@2.0.0-M4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-fileupload2-core</name>
      <version>2.0.0-M4</version>
      <description>The Apache Commons FileUpload Core component provides the framework for a simple yet flexible means of adding support for multipart
    file upload functionality to servlets, portlets, and web applications.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e7fb1d376a2cab4732c3c12acf69413d</hash>
        <hash alg="SHA-1">3284839791dc0130ad07d594a05c7c8750aa4dd6</hash>
        <hash alg="SHA-256">d285cd8cdde3d9466208b37c7750454b0b280ea773b19b050ae1e2ddb09e6991</hash>
        <hash alg="SHA-512">c2dcb708c0c9f70e53b1704088512a1cd566921734079e008f665fe9bfbdd06b05e24fed352a06a1e2f27e576a72ba81006cc0d85d684b1a08d3f6f54213a777</hash>
        <hash alg="SHA-384">46538a44217a3cbf048ca330dc4a804c21a5f8a9770daa5de7ef8eba8a03155df5fc1c9e84ab4a6cc9604e5c90da2129</hash>
        <hash alg="SHA3-384">b11c98a9268f0cfff7456a4945a281e0588955c86205cdc42c2d410191fad4528b004aa2e2cc8ae16c19c58719ca20a9</hash>
        <hash alg="SHA3-256">a93c199eb039d6603181037c73d8c3c080e2c53ebc76e610f784a5d5f85f05fd</hash>
        <hash alg="SHA3-512">1d5a8d6a6b341e19f3352764f7100659788ca4a11807ea3d261de1cd7c6b3676b8c24b64baa18ebcb5135bf07e35607ae1903a44b11048a149f2966a24a67b29</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-fileupload2-core@2.0.0-M4?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-fileupload/commons-fileupload2-core/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-parent/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/FILEUPLOAD</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=commons-fileupload.git/commons-fileupload2-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-io/commons-io@2.19.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-io</group>
      <name>commons-io</name>
      <version>2.19.0</version>
      <description>The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3d1fd45f9d2a247c1d05ab1e98c07160</hash>
        <hash alg="SHA-1">1f8d4a99ba72b77aa69101175efc79b0c7dcdd7e</hash>
        <hash alg="SHA-256">824268919b4b62f9f40f08c54381de5993b078f58667e332d17348ae019d72b9</hash>
        <hash alg="SHA-512">98ad3cb92c31b51461c44d06c223a425c3ee8254ad3ddfdc3724e7d14444d2eeac3b054f70be5d4500268f712c1f08779fd5e4360437b4a883c406c0dc3a2c7c</hash>
        <hash alg="SHA-384">b3a8950070de2372be3c05444c203a13e0727bd5ef8c446b7c731dce37d3622509b93a7ffedac2a81b707b73c73bc8d1</hash>
        <hash alg="SHA3-384">9243e8e5354232583e1a269592a4f19e4ee4dc681cf942c10a146be1e4036bcd71bd3f59df78f1916e20c03d7d9bcfd0</hash>
        <hash alg="SHA3-256">b9994550c1fe3140f52b9e2e663f2a4ad1ccc6ca4f19fd3626bfc689ae2f4a6d</hash>
        <hash alg="SHA3-512">e0f4331c5e19afe2d23470066d6d870ac16fdb9b5892cc79d84cfc987d486e28912e9caa3f77fdf1a5de88ae3f8b2e439a5d5ecbf042dcf7c7bca8c89f3d5f92</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/commons-io/commons-io@2.19.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-io/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-parent/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/IO</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=commons-io.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.servlet</group>
      <name>jakarta.servlet-api</name>
      <version>6.1.0</version>
      <description>Eclipse Enterprise for Java (EE4J) is an open source initiative to create standard APIs,
        implementations of those APIs, and technology compatibility kits for Java runtimes
        that enable development, deployment, and management of server-side and cloud-native applications.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">314c930b3e40ac1abc3529c7c9942f09</hash>
        <hash alg="SHA-1">1169a246913fe3823782af7943e7a103634867c5</hash>
        <hash alg="SHA-256">8a31f465f3593bf2351531a5c952014eb839da96a605b5825b93dd54714c48c4</hash>
        <hash alg="SHA-512">8651fc14b79e284fe29dff5b2cadbf6748615ececde798c42687472f4f6fd1f80ee05ec53794021c62a11abed0c0170bb08b28d3f9cd7f562eb320bc9870ddec</hash>
        <hash alg="SHA-384">48b2a26351619286ffe41d25e5e61cbc0eb8a5a648a205d0f8db48178278cb16850469fe8dbc219aee0ee37f4081c248</hash>
        <hash alg="SHA3-384">2047f0b88a12619fb3f07a98048fc405e9cec4ddee6af2a2efc06c1172d2bebefc6c23bdb4df0a1054060f91d5cc5617</hash>
        <hash alg="SHA3-256">4b506d06772f32251cadc40251623ebd4f3144531249ce4821787b1a9c4a55b3</hash>
        <hash alg="SHA3-512">07632a67f7ca7b460cfc3042ecf97f9097e7d7638209434def89a3bd55da5a31e287f32def27ce776d5775ec0629979abb08fe2836d88d638802194af0320fe0</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://projects.eclipse.org/projects/ee4j.servlet</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/servlet-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/servlet-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/servlet-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>2.0.17</version>
      <description>The slf4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b6480d114a23683498ac3f746f959d2f</hash>
        <hash alg="SHA-1">d9e58ac9c7779ba3bf8142aff6c830617a7fe60f</hash>
        <hash alg="SHA-256">7b751d952061954d5abfed7181c1f645d336091b679891591d63329c622eb832</hash>
        <hash alg="SHA-512">9a3e79db6666a6096a3021bb2e1d918f30f589d8de51d6b600f8ebd92515a510ae2d8f87919cc2dfa8365d64f10194cac8dfa0fb950160eef0e9da06f6caaeb9</hash>
        <hash alg="SHA-384">6ea24f814a9b6ece428cfd0535e2f3b8927005745ef61006b50fdb5a90126ee5ea05650155382b3b755c5bce38ef3944</hash>
        <hash alg="SHA3-384">9b1015052f0ec43f9be09764e131834157599611cb52f6fe591c4ac6a8ab4817518f2a4b8871e5e738c8678e93af5557</hash>
        <hash alg="SHA3-256">00559b4f4066b4917ba4fe2a6f23111eaeada321112d030910d218ced9084b5e</hash>
        <hash alg="SHA3-512">9579c2f7e7516e177c2d493ccc9eb8150978cf19f6f09b28d116f6935239fd56dc6af2b62b3336f79b0b462445550cd1fb5377a07001a6f44aaab6a32fa2fa47</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/license/mit/</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.slf4j.org</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/qos-ch/slf4j/slf4j-parent/slf4j-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.micrometer/micrometer-core@1.15.1?type=jar">
      <group>io.micrometer</group>
      <name>micrometer-core</name>
      <version>1.15.1</version>
      <description>Core module of Micrometer containing instrumentation API and implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8690031a36815538dbd3efab48e0bef6</hash>
        <hash alg="SHA-1">52959bd15d21f9a9dd55ac59f0149b16c6d5a06e</hash>
        <hash alg="SHA-256">5d9fbc17664de839c062e2d3b909a9358a96bfc8ce46efd86113eae1d98a5483</hash>
        <hash alg="SHA-512">7a651cde13b6a9532224495aca47514a9d9893089b9266a7a6f2ad1bce83c3b3623e8c4516ea01740714e412f75e4f52ce68f2e33f1f7868a700b1fa751c49a6</hash>
        <hash alg="SHA-384">2ac75aef1a8c9200579cc47141ffdb8eae3a67d23794bd215104839248b50915494e7925ca90a0a6e37945d771dcec0e</hash>
        <hash alg="SHA3-384">ae2fa0defc831b2c103a7bf06890bde241a692963c75db645379dd33ba3cdf86e2479bd83c850d9f9a20abd9f168e505</hash>
        <hash alg="SHA3-256">1a78b3b23f4e7592ce3e9f7c4c6393d918f3a502c94ad70b5596a5be27ad01cd</hash>
        <hash alg="SHA3-512">6fee81e79bafd50bebab236bca5b9c7398815bad694ceeca3675ec134421f7e813b28560d270a80d531fab1b8aa7a85735812a478b7ff716fcd9ccb2a35b4535</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.micrometer/micrometer-core@1.15.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/micrometer-metrics/micrometer</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.micrometer/micrometer-commons@1.15.1?type=jar">
      <group>io.micrometer</group>
      <name>micrometer-commons</name>
      <version>1.15.1</version>
      <description>Module containing common code</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f1c36f57453c7cbaad9052a7f36b0c70</hash>
        <hash alg="SHA-1">43cbe2327f4e3f5cbfda6be64418c66b9b62f4ec</hash>
        <hash alg="SHA-256">6799381c0809a74b80fd4bfaa10b4278f6adb0331a641013ff89dff4cc1f3484</hash>
        <hash alg="SHA-512">e31e2c8299d0efc83363dbd3e4b5be49c405e03bdebda2223aa6f18f502e4e6156829a3f3d64596d1b0ee9894a8a2dc6a183a8cdb8cbbd3826a349eb561a0599</hash>
        <hash alg="SHA-384">3aa12a5d5d736038481c7762ee09b4a7f7d29e3a73b9a083f6c60cc626fd5f2b958166d4fb50966b724e8c027fdf785d</hash>
        <hash alg="SHA3-384">a1d6d60c0b2bce88b8499ca5e1f4fb1694df51cef3af4d57ebbe5fb6ccc1f6082f0515f8da77eade0302ae281951afac</hash>
        <hash alg="SHA3-256">a64833d9bd9b160dfeea47a8b25e3cde5510fe4223afe13fafa0f941ea229467</hash>
        <hash alg="SHA3-512">26135440ac4c2a56e9b91aab7668c2d12e3c663a83fc7d3148fff67ba42c0f62288f94c5648f3fb7f9300eb389ad74f92da9d315e78cbcda12c831a05e081521</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.micrometer/micrometer-commons@1.15.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/micrometer-metrics/micrometer</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.micrometer/micrometer-observation@1.15.1?type=jar">
      <group>io.micrometer</group>
      <name>micrometer-observation</name>
      <version>1.15.1</version>
      <description>Module containing Observation related code</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d20752e5ff946e2371fe8f195100579f</hash>
        <hash alg="SHA-1">3d0a62a46350707984e3600297cc8e08c4722399</hash>
        <hash alg="SHA-256">5008b13db990cdaa3fa1b6f518f6f9535a7ea84421424a2a25aa88870ffbb31d</hash>
        <hash alg="SHA-512">1688cf0364002adb928bed6c508a1e5881524d7c50a0356911957ab5e44c99391726dbe0099a49e9130fa32ffbd668c0847d3f28ba995492aa9d2edd4d55a3c8</hash>
        <hash alg="SHA-384">2696b9bc16743318f63e869209a31cf1f56fa571b43b75db466c38bbeacc849abf79ccc02b8eb64006e4baec6f188c36</hash>
        <hash alg="SHA3-384">704020d057185e84b037a00b534a87504aa41d3172c535834c8903da5be503914c556c97afa3845845d9f2adb18f66b3</hash>
        <hash alg="SHA3-256">4a0a3c72e04cef7d1070c8ce0a81f6ce63c8330a6ea3e766c9113249ff856138</hash>
        <hash alg="SHA3-512">f7c4fb47388f3774fce79d0a26ecde03ee56601fb6252fb392212596ad2c7e993c77da64411fed3d7998646ab7c5007903247fb758a347746026403717c5001a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.micrometer/micrometer-observation@1.15.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/micrometer-metrics/micrometer</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.hdrhistogram/HdrHistogram@2.2.2?type=jar">
      <group>org.hdrhistogram</group>
      <name>HdrHistogram</name>
      <version>2.2.2</version>
      <description>HdrHistogram supports the recording and analyzing sampled data value
        counts across a configurable integer value range with configurable value
        precision within the range. Value precision is expressed as the number of
        significant digits in the value recording, and provides control over value
        quantization behavior across the value range and the subsequent value
        resolution at any given level.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">41f807bf0c681d6f692c408a6e217eaf</hash>
        <hash alg="SHA-1">7959933ebcc0f05b2eaa5af0a0c8689fa257b15c</hash>
        <hash alg="SHA-256">22d1d4316c4ec13a68b559e98c8256d69071593731da96136640f864fa14fad8</hash>
        <hash alg="SHA-512">fb28f1bc3a3d4430474ea87a0833d56dc3d1303c98918122d93c630ebdb0d1323bbf8feb9ffdc7dddd1908105858e6959bdfdd3889ca5803cecde93a974ab6b7</hash>
        <hash alg="SHA-384">fa19cf4674dee37cb5114689cccafeadbb7989e17768b814cb431806a0f69c7b37093b6e100430bd571a45d87a319758</hash>
        <hash alg="SHA3-384">fc0a9e2e5284bc2f911c5e2fdf9eec6cfa1973b6cfb1362822580d6c8768c73ebd1c8056b6e4e5302940f6b5ec4c74b7</hash>
        <hash alg="SHA3-256">79af553410abf4d3bbfa64374dfdf8777ce49d28b4c67a615e6d4a78e97d0498</hash>
        <hash alg="SHA3-512">5b2b1795ed1ea55b5a3566bb1f4170a4367b7893256809fdb428df9405857c8454196badf3681abaf536260ed6f293c096a3f3c9d72f0f04830e8fe71d49410a</hash>
      </hashes>
      <licenses>
        <license>
          <id>CC0-1.0</id>
        </license>
        <license>
          <id>BSD-2-Clause</id>
          <url>https://opensource.org/licenses/BSD-2-Clause</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.hdrhistogram/HdrHistogram@2.2.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://hdrhistogram.github.io/HdrHistogram/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/HdrHistogram/HdrHistogram/issues</url>
        </reference>
        <reference type="vcs">
          <url>scm:git:git://github.com/HdrHistogram/HdrHistogram.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.latencyutils/LatencyUtils@2.0.3?type=jar">
      <group>org.latencyutils</group>
      <name>LatencyUtils</name>
      <version>2.0.3</version>
      <description>LatencyUtils is a package that provides latency recording and reporting utilities.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2ad12e1ef7614cecfb0483fa9ac6da73</hash>
        <hash alg="SHA-1">769c0b82cb2421c8256300e907298a9410a2a3d3</hash>
        <hash alg="SHA-256">a32a9ffa06b2f4e01c5360f8f9df7bc5d9454a5d373cd8f361347fa5a57165ec</hash>
        <hash alg="SHA-512">bb81a42498c65389366205f4e07cee336920e2f05cc0daae213f2784b1d0ce9a908b038daec20478f23eb00b2bf704f96c5b00f63c99615193ab2a3cc4a9f890</hash>
        <hash alg="SHA-384">16ca4640dc9d848e6c6d15441897e1b5a9f27f34207b0bb456dd54d8f267b73b348092e548e78634144de44ba3515205</hash>
        <hash alg="SHA3-384">406c2b5c6f64b0c090568e479b5e6136a04a4e77f8eea65d32b4e2b01deebcdf6a0a851240cdb740c25b5a5e61e6c179</hash>
        <hash alg="SHA3-256">50ae828358301033542fd7c412e86ee318d5451f89a182e2a679aaf18099d26d</hash>
        <hash alg="SHA3-512">456c337b9fb385579aae707409ed6a04d08e5fc87b1a46733dca617c22c625bf253dc4747e0cdbf5e7d8b48102d2938cb482b6b688a79aab645a7459c592258f</hash>
      </hashes>
      <licenses>
        <license>
          <id>CC0-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.latencyutils/LatencyUtils@2.0.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://latencyutils.github.io/LatencyUtils/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/LatencyUtils/LatencyUtils/issues</url>
        </reference>
        <reference type="vcs">
          <url>scm:git:git://github.com/LatencyUtils/LatencyUtils.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.micrometer/micrometer-registry-prometheus@1.15.1?type=jar">
      <group>io.micrometer</group>
      <name>micrometer-registry-prometheus</name>
      <version>1.15.1</version>
      <description>MeterRegistry implementation for Prometheus using io.prometheus:prometheus-metrics-core. If you have compatibility issues with this module, you can go back to io.micrometer:micrometer-registry-prometheus-simpleclient that uses io.prometheus:simpleclient_common.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9cae54cd23ccda6ea66afed5a159edd3</hash>
        <hash alg="SHA-1">f917af80741649d65c474fea5f2311bd0c889b38</hash>
        <hash alg="SHA-256">51ea3aa96d9f3323a97a2d9ff0b141cce9a0bcfcccb0408fcc6e79bb3f935f5d</hash>
        <hash alg="SHA-512">b21ef4d11a208717cbcb6053ef04f982defd462d6321b353c09ba91c39636402f70e857f94d03ec0092e8f8b7ef7f006acfbf26482abad75cca25171c9640a8f</hash>
        <hash alg="SHA-384">1e4c2125d7784bd8dff1e06b4a41cbfa6f22f5667b38ca14cc7209948f51a1bbc370cd54145dc00328c2c6641a83a131</hash>
        <hash alg="SHA3-384">2ed52254d148e6f22580918c5ee027594de9e92884e212adc58730196673e7d62ce5f0c84d061667bf81f5a47a57797d</hash>
        <hash alg="SHA3-256">75f98c28f38a4b12a70fadd0a7c178a3ca45bd42ae627c6f7a5eed53d0bede70</hash>
        <hash alg="SHA3-512">8bb92eb1962a4c2d5d53e4c0f06b7e92a02a26ddae20b150850349f8efce6e2b391bfa93c2e18737ae6390c9070580e0cde59067f5a790c07d80c33ee1fe9121</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.micrometer/micrometer-registry-prometheus@1.15.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/micrometer-metrics/micrometer</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.prometheus/prometheus-metrics-core@1.3.8?type=jar">
      <group>io.prometheus</group>
      <name>prometheus-metrics-core</name>
      <version>1.3.8</version>
      <description>Core Prometheus metric types</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">77ec15956732728427e1bf0afe75ab6c</hash>
        <hash alg="SHA-1">f8ff4ed31754ac60d68a5331936a762907bb3101</hash>
        <hash alg="SHA-256">60481a48156195a5c9f21dbeec8b4aff90ba25327ec66a3dcd0faa5bf698229d</hash>
        <hash alg="SHA-512">b149cf347486c87f34e504625cb04936e0fe165b800be3301b968f6f40a534a7edb318da1b2558a326a2fa5fb6c32fbdd2379616cf7499b79cfc7924c100b921</hash>
        <hash alg="SHA-384">358eb5b5fb97b2945162c01880a32b7fa35fad84ee6a50d0bf73804156fda79c4fc28da6ad4d3522cf29bb324b4eff8d</hash>
        <hash alg="SHA3-384">46fd893950b168f7301d6ce1890262edd29bd351d597e01edbc1c3d1e9bd54db8a5d8fb6464227bf9b0885da6f4c2629</hash>
        <hash alg="SHA3-256">7d42617d3a1aa9577783d0230b33f6abea37dbacd69ced58df729834b54a2aa7</hash>
        <hash alg="SHA3-512">0018776bfe031e1e060f47f2e8efc8c301c294dcc608dfd324cf2f200ab817cdc7b1a4fdee2d1cdb44eb2188d413b973598b536d542dfa8b5d2d15059d6a4cac</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.prometheus/prometheus-metrics-core@1.3.8?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://github.com/prometheus/client_java/client_java/prometheus-metrics-core</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.prometheus/prometheus-metrics-model@1.3.8?type=jar">
      <group>io.prometheus</group>
      <name>prometheus-metrics-model</name>
      <version>1.3.8</version>
      <description>Data model for read-only immutable Prometheus metrics snapshots.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0d16d8b773273166c06620d078b6818d</hash>
        <hash alg="SHA-1">7756e3d1d8189aa7d015bd228281b1c6487bd140</hash>
        <hash alg="SHA-256">a6867cb04299e3e468e26588548e9215163373e0a58f1b7301dd59fe6f3648fa</hash>
        <hash alg="SHA-512">35e313ab150bf6a5d690bec533d4edaaab874953a264d82d2568852c8680637c6f2982eb8c93741d55a1a67d6db6159db4db006115dafe2a997dd6b474d7604e</hash>
        <hash alg="SHA-384">e25d78bb13097386463f2c3e25f2fbcde11350924b7c0376ab0bf13d38da77009a4586b9d99a678c46750f52128e4343</hash>
        <hash alg="SHA3-384">16e0a482bbf00e220c532169ceaa2a21201af6e53311cfd171fd005cbfff34055511a55c55a381c3e1d45d0f82714851</hash>
        <hash alg="SHA3-256">4fbeb99e280eef64276e61d714197ed02076f483241892dee567ebb6cd4a17cb</hash>
        <hash alg="SHA3-512">8461a69e42c6ea8c433f78bd48131ca293792b00b06c40e23658821e66ed6157381d4f2bdd9cec3703ebd408f05051c3b6c3729e06a4cd424bc64ff44b1ddf12</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.prometheus/prometheus-metrics-model@1.3.8?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://github.com/prometheus/client_java/client_java/prometheus-metrics-model</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.prometheus/prometheus-metrics-config@1.3.8?type=jar">
      <group>io.prometheus</group>
      <name>prometheus-metrics-config</name>
      <version>1.3.8</version>
      <description>Configuration for Prometheus metrics and exposition formats.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">89b2660b1ead159de4345db1a3fac807</hash>
        <hash alg="SHA-1">52accd09788c6c3ce4e02134c899f938cff5ed5f</hash>
        <hash alg="SHA-256">c77160b8881d6906c5b414427ac1bff1c64019f5eb0687188d1138c86148e8ff</hash>
        <hash alg="SHA-512">cbf844dfa996224ca84145d30e15b5f104dc788e8132c23504279a95893828a17a33e42589df4700301d57c1b06275b22934686a9c9c810129d74ccb91635b88</hash>
        <hash alg="SHA-384">6285138ae5cff50b1c6e45bdf7adf515cff59777866b79be6024bc143d3f67ed1d9326a3536cb42959a39503652fdd17</hash>
        <hash alg="SHA3-384">ad842ad63521dbff3923d9ab0043246027abc0d142823659ff97ad44e20851a2502d4243d25f22d5d638402df9100ae2</hash>
        <hash alg="SHA3-256">765efb496d6c1cd944c079e5298ef22039cca771799e30bd3c7adc3ba1989640</hash>
        <hash alg="SHA3-512">e9920b181d534d5c0f64ec7a00c2dabc73d9145298ec0585e13b37eff537e798a4872d07df484f9f0bf3f02c6853ba44fe7f6013cfff610cb6b0b433bae9b543</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.prometheus/prometheus-metrics-config@1.3.8?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://github.com/prometheus/client_java/client_java/prometheus-metrics-config</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.prometheus/prometheus-metrics-tracer-common@1.3.8?type=jar">
      <group>io.prometheus</group>
      <name>prometheus-metrics-tracer-common</name>
      <version>1.3.8</version>
      <description>Common Module for Prometheus integrations with distributed tracing libraries.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a7e88fa848d88c8deb10e5d3d2d4eda5</hash>
        <hash alg="SHA-1">277bbdedfcb1070418bb508514a208e8027e2b40</hash>
        <hash alg="SHA-256">cea71463f5f1ad009ef03d1ab60693a94de498e6306f3af7ed8142093f093fab</hash>
        <hash alg="SHA-512">0ad724caa0e482d61c11b646426db8e96f8613e02eb0a646dd44f5484b981bddd7dab89be19f78055309df197382d7f9ca883419b1b9fd3651eb6397aa29eacd</hash>
        <hash alg="SHA-384">f56756be3cbcb96d4afd7ffdadf5fcf12f05a280dfabfbe1947bcfd6846f38bf49f44d2077d252fb6b1d38f7f512d8ee</hash>
        <hash alg="SHA3-384">4bb001db63b62d446c67081c53a82e6bdc110ec254e49eff9f7102df7aed7a305590df77c995ec720bc599c6b4924184</hash>
        <hash alg="SHA3-256">95f29f840aaf1e5269d3e9f670ff2c6a9949a3a3a21d3f15bca8186d5893d67c</hash>
        <hash alg="SHA3-512">c7023dfb47ce9b0f95215dd3ba0cb34cf614afd15097853a58aa9ec69a8154fb85730d141429fabf0b1991e250c97fe81474b2ec13cf24414cc435094cef7ec1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.prometheus/prometheus-metrics-tracer-common@1.3.8?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://github.com/prometheus/client_java/client_java/prometheus-metrics-tracer/prometheus-metrics-tracer-common</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.prometheus/prometheus-metrics-exposition-formats@1.3.8?type=jar">
      <group>io.prometheus</group>
      <name>prometheus-metrics-exposition-formats</name>
      <version>1.3.8</version>
      <description>Prometheus exposition formats.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ee5b7fc5be515adab5488c5e19c8c13d</hash>
        <hash alg="SHA-1">ab8015094d99c43b1ff8c49d509e9e0247f33b45</hash>
        <hash alg="SHA-256">5c82c0541fa6fc1267be1a04b2087f3da1196da5624b2124ac8f9d2ecbe25897</hash>
        <hash alg="SHA-512">516d1623e5aa6f21b501608860a4345e244e49459314141d30831f3c74c67124eaa4771278ec6a9930ef9eab71f2be8dd3242bdaa3ce56c3f3a79724737d53fd</hash>
        <hash alg="SHA-384">64d4e5e29d1bbcfee4f54325cd828fce6978e2392b426fa3d772ac43872b012b427c1ad4f126bcec0d7567e34dca4a7c</hash>
        <hash alg="SHA3-384">91c83db6fd7d62943ab588f410675cc2bc10af9f0d00c7d4779f4fb149676bc8f8ab71bc8da4f0c0572038b92e8854dd</hash>
        <hash alg="SHA3-256">a6ca79bf292c59083c58410910e13c36c8fedf21e4d6cfe690572c20a0021959</hash>
        <hash alg="SHA3-512">62245684e669836d7a946e6f4cc73fd65a78346f13e5be92ea2cc683191c1574602d159ddd7f87c3cbacba11526cdf51bd265811e0ce457e860691b4f218254f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.prometheus/prometheus-metrics-exposition-formats@1.3.8?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://github.com/prometheus/client_java/client_java/prometheus-metrics-exposition-formats</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.prometheus/prometheus-metrics-exposition-formats-no-protobuf@1.3.8?type=jar">
      <group>io.prometheus</group>
      <name>prometheus-metrics-exposition-formats-no-protobuf</name>
      <version>1.3.8</version>
      <description>Prometheus exposition formats without shaded Protobuf classes.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2f76d25db085260ca10676023b99434f</hash>
        <hash alg="SHA-1">93c1534937ecde80bd2d24f830cdcad9058376a3</hash>
        <hash alg="SHA-256">77ddbbe172116b17220ec252fddc16efa05a0bbcc3314a321a6bce7d2a24b79c</hash>
        <hash alg="SHA-512">cb5a5e3ca8750996978690b7a9f2bbf0cbb632579c59fca104db1d2506f62b2192559bbe2977a731618c1ec4002195b0955dc3ffe39c3be49c4f318a50d4e055</hash>
        <hash alg="SHA-384">0d40e5e97597396b47fbadac5d4dd851ac1721fcc9ce9c09c598728a38f8f14031d6e56d7fda292a5e45449e46e4d630</hash>
        <hash alg="SHA3-384">3f4ec936d7f62cc5a986193b434b636d7fd1921cc0b6a89d1e6236b474361a5cd40e589d6346b11f70eb8a4aaa4eeea7</hash>
        <hash alg="SHA3-256">dc641f8e9e41b256773f3c68d3551fa020dc99978924d7438ed88f01c6f70e0d</hash>
        <hash alg="SHA3-512">7772981be0a4f4989fc26e960ec913f1eebea4b63c5945c91bbcd97424171b04be2615773edf09220093beef2651b2b8210a91a9095e5a3d9a9f61f9ba29f2b4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.prometheus/prometheus-metrics-exposition-formats-no-protobuf@1.3.8?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://github.com/prometheus/client_java/client_java/prometheus-metrics-exposition-formats-no-protobuf</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.prometheus/prometheus-metrics-exposition-textformats@1.3.8?type=jar">
      <group>io.prometheus</group>
      <name>prometheus-metrics-exposition-textformats</name>
      <version>1.3.8</version>
      <description>Prometheus exposition text formats.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">425f958ab8ad034a2f82ff4acc391962</hash>
        <hash alg="SHA-1">e2a898da4f6ec4513726b43b963418d64f0fadcb</hash>
        <hash alg="SHA-256">db62aed4b146cd6f40b51c9f80a5b4a927cd357328f561d6e9b9e16458a8b79e</hash>
        <hash alg="SHA-512">7f07c1ae69dec5bbcdeed74034d3c810060657b21504580e156282a4b7a2f9a7cfc832f3f01408afe33c7c6dfd2f0b002ae7bd12b4d245dd9b1ba7685094bc41</hash>
        <hash alg="SHA-384">6b168b85c788c1349f6f2150b3e5b8f44d8f23af7f8998138d4a9c0df8def54d27cd99122828d656e424f6a3f91f596b</hash>
        <hash alg="SHA3-384">90adbcdda0aebbdb46699c1d301dd81bb26e75a488458dbe12d22c03797aa31e220ce1c0ef7a6c37ec6cc14c96c7b781</hash>
        <hash alg="SHA3-256">8d1162844ad49ba93d7bd388dcec8de39071e9addfb2ec26407cedf731e5e691</hash>
        <hash alg="SHA3-512">2b48aec040a0587eee6dace0e3f7cb7f1eaf850b4af517c3680ff4c9bb8d93f517286e42d6cca3a79ad4b072efe28909b37370e0d4e3d5b73248203191e33e1a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.prometheus/prometheus-metrics-exposition-textformats@1.3.8?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://github.com/prometheus/client_java/client_java/prometheus-metrics-exposition-textformats</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.jena/jena-fuseki-access@5.5.0?type=jar">
      <publisher>Apache Jena</publisher>
      <group>org.apache.jena</group>
      <name>jena-fuseki-access</name>
      <version>5.5.0</version>
      <description>Fuseki is a SPARQL 1.1 Server which provides the SPARQL query, 
  SPARQL update and SPARQL graph store protocols.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7e733f3d97e175db4e92dd89793a2565</hash>
        <hash alg="SHA-1">3ee269090c74a7819f4eedd8de4fea1d0f4738bd</hash>
        <hash alg="SHA-256">048d064f3c770640def0c71f53bc8e0728e43b355db7cba06075f2f1f54c86a4</hash>
        <hash alg="SHA-512">2ab063f06d5ba1fb517596e74a39d2f27123511e25085f3be5918af4f815622b93f166c2468d03cc8dac56eee2d7c39b02300f3c04c68d4a8fb1d988267ab1ef</hash>
        <hash alg="SHA-384">a6f3fc4cfd19f94833146cd26acf1374bc139d4100e2d429b05a03576de3e57712e9f040694367f4b2b3d545b1ffb7f8</hash>
        <hash alg="SHA3-384">783c8b421d704bcf212d2f8f01d2d02080a0a7710c53b34fe583acaeb4b282afdb99d3beaf0a4e33c0ac77e15b6f5b15</hash>
        <hash alg="SHA3-256">d03e68b7ecd930bbb05f2dcbe77dbfb727a18ce34e7f061841ab6f4c4c3b9f00</hash>
        <hash alg="SHA3-512">300abe573c45d2a3069e9e72895ed949005bf9f1e0ff8ea2bf6e9d3f30d5fea85235e77d322a7f6815dd7544d13bda6e7dbf8fd3e0735e34180942d23c55e764</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.jena/jena-fuseki-access@5.5.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://jena.apache.org/jena-fuseki-access/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/JENA</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@jena.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/jena.git/jena-fuseki/jena-fuseki-access</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.jena/jena-cmds@5.5.0?type=jar">
      <publisher>Apache Jena</publisher>
      <group>org.apache.jena</group>
      <name>jena-cmds</name>
      <version>5.5.0</version>
      <description>Command line tools</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">47583b711eb6ef93a01d98cdfaa69fcb</hash>
        <hash alg="SHA-1">f3ec6d2460ba3305c99956f1e9e7d64fcbdf22d3</hash>
        <hash alg="SHA-256">f2a292df413912860434dc2af58debcf8af4b83845d5271548b3f8441f8800c8</hash>
        <hash alg="SHA-512">6fb4930dc8a2342bb69c49e66285c7c449ff044eda77cfccce4591dd9f29ee9d3f479ed4eed924c8e4b34cd9cdc8ebe82b12e686eef79b54110870f91cba40bd</hash>
        <hash alg="SHA-384">6097a2d3bcce8ef844602a5e1e55bafe803f4cd2906c6811332d490ab377257bc6ffef3dcdecae9c513d6ab522ea2b4f</hash>
        <hash alg="SHA3-384">60266503b9b4a01f8fc99461dbfe9f005a503777487570dbbadc0dfcdc3e3c1459e6e6dd96aa2f8b8d3be0496290de5f</hash>
        <hash alg="SHA3-256">49b35e07990df6205a434450e0d5e374f4d42987ea25bfc1d0c5bc18f0ba33a4</hash>
        <hash alg="SHA3-512">1ef12084a98d375a852e677b60d96535948a5d429e090ac33e3442f75e850f76edd4ecf16dd15524d98c06c70b3dd897c7becf33808bb71c60a77ceed318044e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.jena/jena-cmds@5.5.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://jena.apache.org/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/JENA</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@jena.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/jena.git/jena-cmds</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.jena/jena-core@5.5.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.jena</group>
      <name>jena-core</name>
      <version>5.5.0</version>
      <description>Jena is a Java framework for building Semantic Web applications. It provides a programmatic environment for RDF, RDFS and OWL, SPARQL and includes a rule-based inference engine.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a22c2831ea933c8174cd70180946668b</hash>
        <hash alg="SHA-1">b9ce5364514e6e94708ac52bc1031f0a6482840f</hash>
        <hash alg="SHA-256">068ab3d6b3445fc56d4c8f5d1801fc324550e28fe881c1e39165dfa2d6e971e4</hash>
        <hash alg="SHA-512">2f54b2eb4a639d944549bc10db7f4d35b3daa67691a31495151249125f8290edc36a5ed73b065d5e0a4f33e57b55d4a2f2498e75cbc8956c41ef1e8513970bfd</hash>
        <hash alg="SHA-384">1ae75d811b8c85356ea947bc2cea356e18cbbea95b8b7b2e69270309f9d542965a97106d4988e62270c6207c01385035</hash>
        <hash alg="SHA3-384">ea04cfffb1d29452ced9db1163bea6087892594a00f54c9bd306abe79345b48e9a7b897cbd15bdb186e9d70ce7f29e67</hash>
        <hash alg="SHA3-256">3ade102fd20b868415407ce81f4572ec4a60665fcab11763c9d3b51a3ef355b6</hash>
        <hash alg="SHA3-512">4ecfaa7660c5e70ae15af12d6611d4bf05067787323c54fd7cdcd0e953af398aaf9d4792f0d51a7fe89d816c749b05e7742e5e8b3d7def6f7f25dbf2af048de8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.jena/jena-core@5.5.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://jena.apache.org/jena-core/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/JENA</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@jena.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/jena.git/jena-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.jena/jena-base@5.5.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.jena</group>
      <name>jena-base</name>
      <version>5.5.0</version>
      <description>This module contains non-RDF library code and the common system runtime.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0a5755d2768331831233aa6e0f82dfd7</hash>
        <hash alg="SHA-1">5c4f19eaa10f2d065cf78b29c077e52ab991bbd4</hash>
        <hash alg="SHA-256">b9d14a5c5524a465f9c7b1e9b467617ce3713e0d5dbed384a67b65afe0bf2609</hash>
        <hash alg="SHA-512">78f49076ce63369e0ca405d6ca11bba21a685e998c89267891ebb67f8929943ba7e151913380b43fcdfe8857d2ffa3e49d1f233e1f581c0ea17674914ae549aa</hash>
        <hash alg="SHA-384">a531e14fdceb02ab74310a02558f059ef3e74b03624148c3c85ec7ac8a1b3ee66cbc063fb786ffb53543ac7e86da0e48</hash>
        <hash alg="SHA3-384">ef54266f685a793e2488fb97d0ccee06fb38f7fc53900fa4861fffb8a9c7c4f3f1ebe629d3d5b237d80b378088a19669</hash>
        <hash alg="SHA3-256">427187afc6000cc83e1fc17e5b8490f665d96c45021be6ca1bac06455ccd73b0</hash>
        <hash alg="SHA3-512">7c450810db5e73f860baecb143313b3a9f0b82895e8f850af160f10e1c8ae611564a2dbb96db9121ccae852dbc603e9ad98ba1dd038762c48b31071ebf160389</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.jena/jena-base@5.5.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://jena.apache.org/jena-base/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/JENA</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@jena.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/jena.git/jena-base</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-csv@1.14.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-csv</name>
      <version>1.14.0</version>
      <description>The Apache Commons CSV library provides a simple interface for reading and writing CSV files of various types.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a99fea24d864189c1aee1575f43f2e22</hash>
        <hash alg="SHA-1">c7cc057084126ea93617b2b809abf82432d8f9f5</hash>
        <hash alg="SHA-256">2f34d69f89dc94d606e250d5eb26205923e5dbc2c3891d3575f86c849f7f8726</hash>
        <hash alg="SHA-512">a8f3e364fe76155f8a6a201bedec52d8e09b712752c37fd3380f71da397dd78aae01718060b8ce96f8e0ab692d33b29c04a4cb6ee3b0a374d17c3f6456abb3ab</hash>
        <hash alg="SHA-384">5ff36928bdb5b680efbdb781ba193e0a5b46316fc711aaa3cd54f3ab0cd1319cc16c39f362c398c0af546d33aaf50143</hash>
        <hash alg="SHA3-384">48ee648d11b34d83ae39d1f71a68ab252b73be822276a0d5a34f2b0f7102fc8fb6b56c7df9f60b65a307c43cbb640eb2</hash>
        <hash alg="SHA3-256">69739b61cc7a685503e02147d5a0e88ae3a09182e3d4fce7c6a81f058f006c3f</hash>
        <hash alg="SHA3-512">5ffb4b19e48e26af9ab361467304f4ed119ae0375fc637613d1f6c562357201f6c0c50a049c51268c367ab4b880d59e39557efd42f28cfbe41640157c1e40d03</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-csv@1.14.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-csv/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-csv/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CSV</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=commons-csv.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-codec/commons-codec@1.18.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-codec</group>
      <name>commons-codec</name>
      <version>1.18.0</version>
      <description>The Apache Commons Codec component contains encoders and decoders for
     formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these
     widely used encoders and decoders, the codec package also maintains a
     collection of phonetic encoding utilities.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2abf189633424b9292fd57a3192c0ed5</hash>
        <hash alg="SHA-1">ee45d1cf6ec2cc2b809ff04b4dc7aec858e0df8f</hash>
        <hash alg="SHA-256">ba005f304cef92a3dede24a38ad5ac9b8afccf0d8f75839d6c1338634cf7f6e4</hash>
        <hash alg="SHA-512">4d974c2203dd6780da6e50ec1c7d8ff727f9ed55fba706fdc50b9484fc5da5e03b67bc6ad2f0d9ae74f823ecce04a40c513bbabd8bf9e91ac8fec04cd3519ffa</hash>
        <hash alg="SHA-384">75d428b434c25041068005fd48f720ddfec8a9fc044b8df53a668828894e9ad542b92601a224d618200e3953ee3c8966</hash>
        <hash alg="SHA3-384">b0d03e9b6b548ec3b7e3c0ddc644cf40d36203606fd69be3fccc72c86b0e048bb6c8e7bd74afb77e371e839bce7cc6aa</hash>
        <hash alg="SHA3-256">c33f900364c7ba15976e262ac26dbe4ece516bed72278da0e6c636d2c7ffabe6</hash>
        <hash alg="SHA3-512">fefe6c1c33f63b9a873a522f8b1f605e4197ed9fe849af650ad8791503cb58cf3d4facafe4f46e070ea11ccfbaec1084e11294154531a07d8ec18ea9c40d9769</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/commons-codec/commons-codec@1.18.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-codec/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-parent/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CODEC</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/commons-codec</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-compress@1.27.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-compress</name>
      <version>1.27.1</version>
      <description>Apache Commons Compress defines an API for working with
compression and archive formats. These include bzip2, gzip, pack200,
LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,
Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1db4bd87b0082044c6e7a6af0b977a3e</hash>
        <hash alg="SHA-1">a19151084758e2fbb6b41eddaa88e7b8ff4e6599</hash>
        <hash alg="SHA-256">293d80f54b536b74095dcd7ea3cf0a29bbfc3402519281332495f4420d370d16</hash>
        <hash alg="SHA-512">5e1fcf9f552ab86beceef6743609e97d700dcbaa5b5ee58858e765c1238cd4dbca2852e1eb415bc2a09dad478d31197ddf09b2ba148dd30be8c9ecd565775226</hash>
        <hash alg="SHA-384">307707c885a45c1725e940b9e42d75871d47442fcc31ec9d8fa56af2e1a2372eed178ebf86c61b5a577465a2674c0f1f</hash>
        <hash alg="SHA3-384">b87d7b7f6f0db51fcfb4bf0adf31795dc0083564dcc524df345fbbe3546c8357b61ebef793654003a5bcc2e7368bc3a4</hash>
        <hash alg="SHA3-256">39b8fb032df8934793dddf257ec49d0d7cd16a75e45bea716a21aa0278901621</hash>
        <hash alg="SHA3-512">40f6d1a9074546b05b42b3841c95b23e21df6f3e2bbe8bbe2905e9676ae51da768df315819cdffaa4f703ea3aec7aeb89f8f3b07c82ea2df3a936d425d606634</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-compress@1.27.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-compress/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-parent/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/COMPRESS</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=commons-compress.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-collections4</name>
      <version>4.5.0</version>
      <description>The Apache Commons Collections package contains types that extend and augment the Java Collections Framework.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d564105594035b363b193d8ce3c18b98</hash>
        <hash alg="SHA-1">e5cf89f0c6e132fc970bd9a465fdcb8dbe94f75a</hash>
        <hash alg="SHA-256">00f93263c267be201b8ae521b44a7137271b16688435340bf629db1bac0a5845</hash>
        <hash alg="SHA-512">ee43c513ac9dcbd7dd23b5cbb4ea5f65a2e10cdfbb403d080b87e778b3b45062315522297c41eca514a9a946228ad7650f0a572d5b78effb8260dd8084131988</hash>
        <hash alg="SHA-384">73db8eb3e79569b3fa62aefdce413e6ea250b9853953cb75b9d5ce0f2f35b59b6e86ef708326a608ff20d95bdade8522</hash>
        <hash alg="SHA3-384">7a9c035fa846cdcebd4331eb86ed31a67595518299a8bee54597c1eb663aee63214553a561a510b929035266c2a4800b</hash>
        <hash alg="SHA3-256">614c41bfd8f9c6c1c1e5667c5be45587c3021b780937ad62f54d17051f425086</hash>
        <hash alg="SHA3-512">3cfd12ec2d03ed29b682123cedae422a4c6dc459034a7e0ab5f00ccd422cb9a2ec423a08b953119c426569b888157a6d80aa0e0c63debea50c5c54c481e2eff5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-collections/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-parent/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/COLLECTIONS</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=commons-collections.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.github.ben-manes.caffeine/caffeine@3.2.2?type=jar">
      <group>com.github.ben-manes.caffeine</group>
      <name>caffeine</name>
      <version>3.2.2</version>
      <description>A high performance caching library</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">202a61e2492ad488df931367241a110c</hash>
        <hash alg="SHA-1">8b0a31cb57ac00e18161d5586759912bd2637398</hash>
        <hash alg="SHA-256">c74a6c72221dfb76eb92f2bb40108ea561a7da2f315dc3b1e64afa8f077f210c</hash>
        <hash alg="SHA-512">94179e3a03e58e292632d58036149438be2d9fd6156187650828868f05964f4ecd39bb6e788d9fb71a76cab9421a324aa62b2909aef850d9c48042ff497ee0d1</hash>
        <hash alg="SHA-384">d7efd8d2ffc45d5342bf87213a70a5c06dbabb19a4d75e6da6240ae468746a83a7ddb68db416a1d4c3ecd96cd6ecab08</hash>
        <hash alg="SHA3-384">08b0d9f875300ed08e14a2c96f8176d65570b854283fcc1ae3346300cc447ad0f3378235877c04bbf82fbf215e326c5d</hash>
        <hash alg="SHA3-256">6d471055eae75f0eb3282a76ace6e41089701c365446a25f9f436a0dd1b0572d</hash>
        <hash alg="SHA3-512">c9504d397ad0e47b012ed04f014939a649e4f949739003d340a7f7929bae7e00ad17a29b112fa8c24536d2fc3f11aa69c541f47f550064cb8cc48c71ca1e53b6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.github.ben-manes.caffeine/caffeine@3.2.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/ben-manes/caffeine</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/ben-manes/caffeine</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jspecify/jspecify@1.0.0?type=jar">
      <group>org.jspecify</group>
      <name>jspecify</name>
      <version>1.0.0</version>
      <description>An artifact of well-named and well-specified annotations to power static analysis checks</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9133aba420d0ca3b001dbb6ae9992cf6</hash>
        <hash alg="SHA-1">7425a601c1c7ec76645a78d22b8c6a627edee507</hash>
        <hash alg="SHA-256">1fad6e6be7557781e4d33729d49ae1cdc8fdda6fe477bb0cc68ce351eafdfbab</hash>
        <hash alg="SHA-512">efded31ef5b342f09422935076e599789076431e93a746685c0607e7de5592719ba6aacde0be670b3f064d1e85630d58d5bce6b34aed2a288fdb34f745efb7bc</hash>
        <hash alg="SHA-384">814f860e5a44ead6c457676841eef471a8b87be31b84c60a8a4477a18a9cbcb6e3c2ae700969d5c5e52309d961e0537a</hash>
        <hash alg="SHA3-384">c8844e5b71e5ecfbb7366097ce34af2f5863d86d5ccc3f9ec384d8ade4b60ccc8124c7fc88664f1afd2b0962fc8775bf</hash>
        <hash alg="SHA3-256">4b4f08ad7606a3ac62997779484919a302267b26d26ee19125f8a7eea60e8a71</hash>
        <hash alg="SHA3-512">65c6845ebae981cb81b61107707ced39f5b377dae970b47606ef482aaf10e3729def0da40d9377c43abbfb483a5ceae039b0d51c129c50a6d36ad351a5d6b01e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.jspecify/jspecify@1.0.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://jspecify.org/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jspecify/jspecify/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.github.andrewoma.dexx/collection@0.7?type=jar">
      <group>com.github.andrewoma.dexx</group>
      <name>collection</name>
      <version>0.7</version>
      <description>Persistent (immutable) collection library</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6e1baaccf9e57842c7e944cef39bc680</hash>
        <hash alg="SHA-1">264efc08bdcd22126bd429aaea9efaf5158b2b90</hash>
        <hash alg="SHA-256">e50cbc8379325ee17e8127eed7eb88fb70b94ba16e5e3d97e12401a1fc248fb8</hash>
        <hash alg="SHA-512">0708323a51db1dd3b4768ee844be5c83523ebc61c4e2ff07e6f952d8891dbc0f8e499f5d9bfb09bf48c99e492dc1804807a2e518b464d1a986407522e9dfea0d</hash>
        <hash alg="SHA-384">19f9b9011d7f94d975b14b97aef8df35fb1a5cd215c35f3b3283d5cf0effdd8de3315907bce35bc9c12e006b6fcf8990</hash>
        <hash alg="SHA3-384">38954676b168659dd560568f62cdd8fedd3a8ef7d54bb430d64311b7b3b21cfb481fb7a16ad1efabc5c586b66b20eed7</hash>
        <hash alg="SHA3-256">3545d1a0d3d9dee1bcfb2c4aac44e013910fd117e6cd6417e26217bad8014a7a</hash>
        <hash alg="SHA3-512">cc5998ac73b9d795c70690a6a83c633143ca1bb997091fb332134d94f095f89f7e581d20a89afb21455a143f824304c7eeb206d34ce8b8edd43e76606058b71b</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/license/mit/</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.github.andrewoma.dexx/collection@0.7?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/andrewoma/dexx</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/andrewoma/dexx</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.jena/jena-iri@5.5.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.jena</group>
      <name>jena-iri</name>
      <version>5.5.0</version>
      <description>The IRI module provides an implementation of the IRI and URI specifications (RFC 3987 and 3986) which are used across Jena in order to comply with relevant W3C specifications for RDF and SPARQL which require conformance to these specifications.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">659ec1bf5619d1284b391b263129e557</hash>
        <hash alg="SHA-1">3543da3386d87f7761260f513ab32b804beac411</hash>
        <hash alg="SHA-256">ae3104e31f1f7a259f1eb7feddc572f2eff3c0c0e44745ee70b5f2dc359246ed</hash>
        <hash alg="SHA-512">b593792516dfe47c3a8bb2e73940a0789199b38ecbb5d5d04421b460b0b2bed7a5f38d48180af172e0af3f7c3e5fac948ef3ca408238e6794dbc363e37820455</hash>
        <hash alg="SHA-384">b76c913f51685f52be6156bd1d140158f3208482589d722bcd5c24467fa2c16f3edbcef4fd1920f0b7065bb7c860f930</hash>
        <hash alg="SHA3-384">90352dd725f9dbc35db322623170783ec05a23c23285cd89c96a53a603f0859c0ac2d5b3d56eeabdf0413ba770611244</hash>
        <hash alg="SHA3-256">07b605e5db43283b9a1f8d9317314d3496dc1d71d68ea7544e74fef1800cdd9d</hash>
        <hash alg="SHA3-512">9a1c00cf7744854075eefbc755f1c3fdb2092029662be3047894a094793a02ed9f31558d8bd7d3f27586e08afe804e2fd93bb3180353c0e721d0a9b32a6eb518</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.jena/jena-iri@5.5.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://jena.apache.org/jena-iri/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/JENA</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@jena.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/jena.git/jena-iri</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.roaringbitmap/RoaringBitmap@1.3.0?type=jar">
      <group>org.roaringbitmap</group>
      <name>RoaringBitmap</name>
      <version>1.3.0</version>
      <description>Roaring bitmaps are compressed bitmaps (also called bitsets) which tend to outperform conventional compressed bitmaps such as WAH or Concise.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5ea65118238dc208252d95ff1868599c</hash>
        <hash alg="SHA-1">a46ce7a2dc494da69700ab421f081b1583857f6d</hash>
        <hash alg="SHA-256">73443a71a2e2401c7d518a487983539fcaf5f9652efbd178f929e7b6d36881d0</hash>
        <hash alg="SHA-512">1134d4e3c9bb8ff130583e10d00487131c1aab456b625f9289935b660046b07c9acdee0a1dbe9c1fae145c2b1b9897460b1aa3cc0574fc2be976a9781965d7c1</hash>
        <hash alg="SHA-384">0fe7bd9414e4705c41d8eafbfc2ffaf255230fd3804e0c9b2f0847d3124d9b1677df49cf2cfa880c43c45043353f7d2b</hash>
        <hash alg="SHA3-384">0350386ab16e071e5c17406a2dfbd4290fa841fcf7240b93760553588b90a64df79c21e54202b7f25c310446bd65ae64</hash>
        <hash alg="SHA3-256">eac8bd4158fa85c6158a7cbd6fdeda29401ac80d8272cdf2cd7e7c541d887f91</hash>
        <hash alg="SHA3-512">b3be67fad3ce4fbf4a1a77956d632538b0cb68c92d9ec7fe39799ca21a40491d859422d94686722872596c4a89ca0499622927f65174b9a88f0b3641bc58f5eb</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.roaringbitmap/RoaringBitmap@1.3.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/RoaringBitmap/RoaringBitmap</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/RoaringBitmap/RoaringBitmap/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/RoaringBitmap/RoaringBitmap</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.jena/jena-arq@5.5.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.jena</group>
      <name>jena-arq</name>
      <version>5.5.0</version>
      <description>SPARQL 1.1 query engine and RDF parsers for Apache Jena</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">507934ddaaf61621f01534967c339d15</hash>
        <hash alg="SHA-1">87ace3b1c84aa10519d56ef73394e907a6a766d2</hash>
        <hash alg="SHA-256">959dd65ca3922a347aa81dad291b73d6ee22790f475fa4845c417b0eb91bf876</hash>
        <hash alg="SHA-512">6a3ca9c59ac6c87f1c5b6b0a5a460331c2370388de9a2c2b9c7829c7b72696a28142b3b6981a037655f4b80cd29ce83a1a239ba7b16f18145d8601cf29cc1a7f</hash>
        <hash alg="SHA-384">fbd302ccc6b70a3ad10f698f556e6fd100fc7b85fda7fce2ad4fd72c1c063b6393b972e00181048bdfd466344fb57dfd</hash>
        <hash alg="SHA3-384">5751e76495fd1b6ace5d108398316f64aa2f56ee958b9d0c51941057ea5823d283ac3f2d7f182b2bfd19135f7cd98089</hash>
        <hash alg="SHA3-256">c1cb18714ce2c1c4378b40d246c50f454de310dd609b0d64cf5c0054906ab702</hash>
        <hash alg="SHA3-512">a889aaed5e14bf87c8329b609f8aac55e6bae31010ee65b092fac8b6d44a072835deaca80fe677424b387dd852790316a0eecc5a547255871905ad527e74384c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.jena/jena-arq@5.5.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://jena.apache.org/jena-arq/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/JENA</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@jena.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/jena.git/jena-arq</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.code.gson/gson@2.13.1?type=jar">
      <group>com.google.code.gson</group>
      <name>gson</name>
      <version>2.13.1</version>
      <description>Gson JSON library</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d82c16b045ce4832679d70f26a67b30c</hash>
        <hash alg="SHA-1">853ce06c11316b33a8eae5e9095da096a9528b8f</hash>
        <hash alg="SHA-256">94855942d4992f112946d3de1c334e709237b8126d8130bf07807c018a4a2120</hash>
        <hash alg="SHA-512">4c13440cd080c13a160a13a8f350816487b3c2a77aed8ea900721af07a595f6b2f414ac5fb6a628011e9d366a5c4c3c5633f5efa669700144b659dfe4d14419b</hash>
        <hash alg="SHA-384">6885615e03106d8fce81f944a8bdb8fbc4f8c237df1cb08f54ee7b99359e8ef61a4ccff5988654caaab7aa5c12b1a8d9</hash>
        <hash alg="SHA3-384">3081761a4473de6e8b60c77cbcf936359931cd0346fcd5c37e7e171ad7b7bb6edafd642d717e330bac76424e76a96e0b</hash>
        <hash alg="SHA3-256">cfe7d63307f9a13d265c5ccf80794f7b9cf637e5019add01c499259aeb23f589</hash>
        <hash alg="SHA3-512">c01c15b52fc6859de901173c0f17becb3976a5a9f35c1ff15262d675f8519a5430de3ad2756951f660b8b137ed479db9af0a17af26eb30daff2af29ae6fa1307</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.code.gson/gson@2.13.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/google/gson</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/google/gson/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/google/gson/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.38.0?type=jar">
      <publisher>Google LLC</publisher>
      <group>com.google.errorprone</group>
      <name>error_prone_annotations</name>
      <version>2.38.0</version>
      <description>Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">912f8206614000252841d89cb0461895</hash>
        <hash alg="SHA-1">fc0ae991433e8590ba51cd558421478318a74c8c</hash>
        <hash alg="SHA-256">6661d5335090a5fc61dd869d2095bc6c1e2156e3aa47a6e4ababdf64c99a7889</hash>
        <hash alg="SHA-512">b13fdb7e06ec1f12ea1d63b0ff942c239e4decb391d736a1f7d46c9aa9e2744e9391be4398a02a78d551a96969622e65b75bbd31e5bf67a5938716765f451f3a</hash>
        <hash alg="SHA-384">47be5289bf8ca3f9dfe2d22e4baf6defc71dabb5476f878a240412e336d77d81148b2f79ffc0702079e48bd67ad7fd22</hash>
        <hash alg="SHA3-384">53f3f57b51ea34afd38e1270fbe08dfcf1e2dcfb50f4ac9369bb625febb75611c9e5d8bb09f4dfcb504b5d0b9ac47443</hash>
        <hash alg="SHA3-256">02eaa5431cda49a9e702cac4ad8051d88397e1d5219a0ef65673dae8eaf9c70d</hash>
        <hash alg="SHA3-512">0307dfc76cae6d539d93649ef3ccb85937d62f6f74be212e8a05ae1cc892f3b63a5c03cd6f61ace9f5dbd0f8dfb0baf086eaf3cd10bbefd22640966d00686dac</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.errorprone/error_prone_annotations@2.38.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://errorprone.info/error_prone_annotations</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/google/error-prone/error_prone_annotations</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/jcl-over-slf4j@2.0.17?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>jcl-over-slf4j</name>
      <version>2.0.17</version>
      <description>JCL 1.2 implemented over SLF4J</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4fcd46ca51e55b9fd9b0db34474927e0</hash>
        <hash alg="SHA-1">76ea503eb688f06556a9ba69995d7eab63e34531</hash>
        <hash alg="SHA-256">affd06771589ebfe454bb11315a4f466ecaa135b95f3e7939534cf1d2fd7064c</hash>
        <hash alg="SHA-512">7efb2771bad2e643b0e814cd78ab4f9af3ea166643700776618c397e9755ca11f4b7c00030562a619932c9d2ec5114fd253ece3abbc3db2f1a064431d8990733</hash>
        <hash alg="SHA-384">96fd8b2732de79c40e5e6613e324d2845dc6e19bf31bc7f3e9fa6730fa527cd16579ba9eb7915481faae1e9a32dc82fd</hash>
        <hash alg="SHA3-384">252a3e6847dafd84955a71724d71641b5c6508bcbbc1f2457fdb18994b61f6d78b08cbd40d5c430743950e351ec79835</hash>
        <hash alg="SHA3-256">4c066cec2c40de9b5743f43d99b629d60de937718f69ffd837bbe5902682ee92</hash>
        <hash alg="SHA3-512">3334a1fff0751378abe8e010ca9716a85a15a90450265699c32886d2e8f9ff63df89237667a262350d860dbfb2f20fffff14e9a094f0bd2acf990dd543c2b86f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/jcl-over-slf4j@2.0.17?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.slf4j.org</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/qos-ch/slf4j/slf4j-parent/jcl-over-slf4j</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.apicatalog/titanium-json-ld@1.6.0?type=jar">
      <group>com.apicatalog</group>
      <name>titanium-json-ld</name>
      <version>1.6.0</version>
      <description>A JSON-LD 1.1 Processor &amp; API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7c339c899931bd63804d34f776642606</hash>
        <hash alg="SHA-1">de460eb8ed5f9ccf2cda123c8abf323c73a11b05</hash>
        <hash alg="SHA-256">64e3b7e7dc5209d175e1b9fdc271436a030ef6c76895e2f889e3b1eeb258cc87</hash>
        <hash alg="SHA-512">0e20cf1dcb4fe28aea15f996cae78008549d2088b76c9247a954970bb2d9d98763d62ff14ef09d027ce047c30c5f37c93bc60009507f69b0a1e4555a6e9eb84e</hash>
        <hash alg="SHA-384">0dd5c5735507e8d3c428291e1da039d11035fad667f7ed4c404679d2e8ad077b8cf355fb6949b46e6dba8d022e35db20</hash>
        <hash alg="SHA3-384">569c9d246f7e04abb308cc38e2183917cdc590c28653b30bcb4b15366f2d7200ed5dc0c25af6cce9ab0bb4c9e285f33d</hash>
        <hash alg="SHA3-256">3faeef37846d641b97851b3b91e169a26b3e5cd52f5ef2783c32d79486060cd2</hash>
        <hash alg="SHA3-512">db943da1706e7482e9b1425c3b6bc07db41ae427eb98ff3209b54585d44958ed45b0cc612ae6ddb8d85e04ac0b4a847ccc319cd994083957eaf38ea68251829a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.apicatalog/titanium-json-ld@1.6.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/filip26/titanium-json-ld</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/filip26/titanium-json-ld/tree/main</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.apicatalog/titanium-jcs@1.0.0?type=jar">
      <group>com.apicatalog</group>
      <name>titanium-jcs</name>
      <version>1.0.0</version>
      <description>An implementation of the RFC 8785 JSON Canonicalization Scheme (JCS) specification in Java, utilizing Jakarta JSON Processing.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2097fa4da73119a0169abc62dcb5feeb</hash>
        <hash alg="SHA-1">c5c8b42eeffcf848195427856e870f59826e066b</hash>
        <hash alg="SHA-256">0f658492a25b3b8d56896115f930a367d26308283f3a2560fb54845b60ea3a81</hash>
        <hash alg="SHA-512">1a206ba6777c685aba51194201fd9b04d63aeff36b74b651e78004ef6b313d609a619832b6886045d40e113687da769f5fec89a371b6565aaccabefab662f302</hash>
        <hash alg="SHA-384">e56ea18704860195b5c4d5de0893b6c1d16ba64def2e1de002815ac9501eb5b2c89fe541fb9ce3ad7421798f4acd3264</hash>
        <hash alg="SHA3-384">88a1f09c0dba5f939afd7f5b62ec8b57fc885cd052fa61f61a7cbf175f43c3efe258840e3aa3aea9f155661dfff26e0b</hash>
        <hash alg="SHA3-256">5dcbfa8fb8974a648020851261c7d73a4e2c0d898cf0209121310c17831bd24a</hash>
        <hash alg="SHA3-512">bad1d6820c20e94ebe3454f782cb32d864677abdf4418d0e0ce3e72ed59bc9d295dc33376c47b729c151d8d390790dd84f82238ea506138516f720abbcc2ecbf</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.apicatalog/titanium-jcs@1.0.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/filip26/titanium-jcs</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/filip26/titanium-jcs/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/filip26/titanium-jcs/tree/main</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.apicatalog/titanium-rdf-api@1.0.0?type=jar">
      <group>com.apicatalog</group>
      <name>titanium-rdf-api</name>
      <version>1.0.0</version>
      <description>A collection of straightforward interfaces for processing RDF statements and facilitating seamless interoperability and data exchange across various libraries.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">cb1d28dd49c5fdd68c4cac303e7c049e</hash>
        <hash alg="SHA-1">5367b3ddc236368906749407aa4b2b4900752404</hash>
        <hash alg="SHA-256">1c414428e51cc08f3147f154d955860422e491c4856d2613bb63797a0450b161</hash>
        <hash alg="SHA-512">569f4f3dedd79d981046d680bdf0274c8e235c585b875a924cbfc0a5cedbd54a25ea16405e447a9dba0794d37d0bcd5728f8f1322bb48bf74d6242f55c2a949b</hash>
        <hash alg="SHA-384">6abe3bfe26b7acd123f18598522d868060b75d61e1a540a0167779bbf21bcf648fff022a4f8ab678bd650b20dab707bd</hash>
        <hash alg="SHA3-384">7e7d825171bbbf7f508cbb0028e1b3fc43f5db95f33096c720f10be271f3b28b9a824b8764f1f168f4b5686ddc44eb0c</hash>
        <hash alg="SHA3-256">c25eae60144d8a6329f68350bfc6ec3feebdf9df1a80d1896908c60d852f530b</hash>
        <hash alg="SHA3-512">39f131088cf98757784c24fd0a327847b896fd1409e05d5477facc9bed06118f189118d7ed8383dd3164f3b84d072eb31e166c4c40d030aa16cd24784da62ae2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.apicatalog/titanium-rdf-api@1.0.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/filip26/titanium-rdf-api</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/filip26/titanium-rdf-api/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/filip26/titanium-rdf-api/tree/main</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.apicatalog/titanium-rdf-n-quads@1.0.0?type=jar">
      <group>com.apicatalog</group>
      <name>titanium-rdf-n-quads</name>
      <version>1.0.0</version>
      <description>A Java implementation of a streaming RDF N-Quads reader and writer, optimized for efficient parsing, serialization, and handling of large RDF datasets. It enables scalable processing of RDF statements in a memory-efficient, streaming fashion. Formerly a part of Titanium JSON-LD.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8da8b5ef70819072bbc4264551347079</hash>
        <hash alg="SHA-1">c475e20341cd94ee2ed25a23833e30a44ce75369</hash>
        <hash alg="SHA-256">3fe1e678c648ca6671cbdda614b58799656bd8fd48a185688b372cc3444649c6</hash>
        <hash alg="SHA-512">c4826c899ed834687f9c61626cac588437f1c0eb30a93ff7c5068dea3127ce0c74e0d9987c341a01b3d4d466fb7edf964b12e49aabcfb24916e792dc3afb4860</hash>
        <hash alg="SHA-384">65f9266c5e0c569ec06db3878ac13ffdcbfd7c280b058347c40b65a973e59a1a2f9028626dde79a3a3aa89bc42aa2b9e</hash>
        <hash alg="SHA3-384">cb82b88f8b354f9837795d7a88f2e700c307017c33d2e773ed4b47247cc52652680e61ceab654d6774e2762fe1e8c7fc</hash>
        <hash alg="SHA3-256">5df37268efef3ed8b7fa6f36c4e198df99ee15dfd1a0596f05b20a630727220d</hash>
        <hash alg="SHA3-512">8598a58712a2d39bbcb74fc57922eb1e46874e27dbbe8fb2f39c5f3dc959e80cd79d5400ea601ea4c61541ac7bc392b986e74fa4993b8805e163b1b33689df0a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.apicatalog/titanium-rdf-n-quads@1.0.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/filip26/titanium-rdf-n-quads</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/filip26/titanium-rdf-n-quads/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/filip26/titanium-rdf-n-quads/tree/main</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish/jakarta.json@2.0.1?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish</group>
      <name>jakarta.json</name>
      <version>2.0.1</version>
      <description>Default provider for Jakarta JSON Processing</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">217370baa683188d6085c079a0988909</hash>
        <hash alg="SHA-1">da6c75e591cf2a89ddc479cbdbd8fe5f41d3efc9</hash>
        <hash alg="SHA-256">52539b39498b86ca9910b0eacc608a8c78de8db3842caa84bc87169372202cc0</hash>
        <hash alg="SHA-512">3a7240c34098be4fc81769ec528a5afcc90e509d092a5e4edca27b2e92a3edfd6814bf60598fe6b856bec42c3002e64af286b6b8cae90cad06db276c6cbc10dc</hash>
        <hash alg="SHA-384">aef48cccd89f11a491844d85be814ee882e760fe384d76c74259269c7c514115665f7ce1711124577079024a7b2127e2</hash>
        <hash alg="SHA3-384">b35d0fe7b5fb661733c6dda6c09cef82a48db6358d2c26d15935c713e3873307add4ea0fd01df7ef5fd762da380ab0d5</hash>
        <hash alg="SHA3-256">2d8d3ccc88d35b0254c3967f7fbe1c22b581ad9b25a92954570395ee1680a034</hash>
        <hash alg="SHA3-512">a96804fb8d283352d133f05624aeaafca23e349ff3a55c4d1843a9dca9665bd941862bb27990d0f73f99ab9aadab3ab768b333ecb445830fc6cb8c704ca9ee8b</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
          <url>https://www.eclipse.org/legal/epl-2.0</url>
        </license>
        <license>
          <name>GNU General Public License, version 2 with the GNU Classpath Exception</name>
          <url>https://projects.eclipse.org/license/secondary-gpl-2.0-cp</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish/jakarta.json@2.0.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-ee4j/jsonp</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/ee4j/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jsonp/jakarta.json</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.protobuf/protobuf-java@4.31.1?type=jar">
      <group>com.google.protobuf</group>
      <name>protobuf-java</name>
      <version>4.31.1</version>
      <description>Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an
    efficient yet extensible format.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4987ffc8ba1965e5546bdcf49dcfffe2</hash>
        <hash alg="SHA-1">1828b20315b63d5f71b3c61b094494a8f1acdc5a</hash>
        <hash alg="SHA-256">d60dfe7c68a0d38a248cca96924f289dc7e1966a887ee7cae397701af08575ae</hash>
        <hash alg="SHA-512">004fa2bcb5bac222a96e0d2d6590fa7e768c2be63f1acd0b8da0c0e583539b932d8df6bda9989c679cf25e5977bedcff386690e8a305816ab44b9dd44ba2d149</hash>
        <hash alg="SHA-384">97b9c3f171bbdf1e72338a57cfe095768fd5dad297e4c699f1f0424976f184801667e66b029ee80b9950431bd6335b1e</hash>
        <hash alg="SHA3-384">02fec81acf70c02e57050e0916956fa67af1c5261f8517285d1d9eba72be9fe108fc4f93b0307b0c1e95884695a4fb4c</hash>
        <hash alg="SHA3-256">f885f98a6e71360652d92b3620e0374b3efb01311a79e614ab666b49b48a5b1a</hash>
        <hash alg="SHA3-512">58a1feb51486d3c571d91e1daaef679cab71e9a82a521855e87048a1ff3ddbcb68718a5b33f4b13b8df12ec269ffc394814d0c0e442ed1dc592404b3c6fc62cc</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
          <url>https://opensource.org/licenses/BSD-3-Clause</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.protobuf/protobuf-java@4.31.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://developers.google.com/protocol-buffers/protobuf-java/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/protocolbuffers/protobuf/protobuf-java</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.thrift/libthrift@0.22.0?type=jar">
      <group>org.apache.thrift</group>
      <name>libthrift</name>
      <version>0.22.0</version>
      <description>Thrift is a software framework for scalable cross-language services development.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3537832acee011a73666b9855eaba7b4</hash>
        <hash alg="SHA-1">81ad6824994b2908eee1bc0c855e462816293c79</hash>
        <hash alg="SHA-256">dfd26d55b0c88e065ec795cdf8a823128021eebd310e4895cbb4289b56445383</hash>
        <hash alg="SHA-512">cebd7c4f24c2dc4893cf89f2f7b74175ab3c0c049e89c926e7f46cf40ab8bf396f6e53c84e75c3d35daf562224c6cfe12ba181e8535672e7a46a78865de29eb4</hash>
        <hash alg="SHA-384">8810c3f0ab2da33838c9c619d3d5661f886ec9e9121b25cd8c0a6fb97c807db62075dfc0be64ca2057b29f457111cdbe</hash>
        <hash alg="SHA3-384">7ad24272f9f7109645809bf59c37b0c7b8267670de4afb32d88814e9e7271ec30aba257ebd0d7c51cd977eed2f4b45e3</hash>
        <hash alg="SHA3-256">0496bd7a1e14ac33719818d3635c54c75d63471d36886f3f06f70ae0304cf784</hash>
        <hash alg="SHA3-512">6013876da50aa56a81cbea2f039322f4701ad762626e162153bd09700603d0f389faec9eaa9af35be5edb12c46fee9ffddc61ea9b7e10b06b3f3edf294e0ef6c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.thrift/libthrift@0.22.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://thrift.apache.org/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/thrift</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-lang3</name>
      <version>3.18.0</version>
      <description>Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.

  The code is tested using the latest revision of the JDK for supported
  LTS releases: 8, 11, 17 and 21 currently.
  See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml
  
  Please ensure your build environment is up-to-date and kindly report any build issues.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">48b9886957920a4cdb602780ca345087</hash>
        <hash alg="SHA-1">fb14946f0e39748a6571de0635acbe44e7885491</hash>
        <hash alg="SHA-256">4eeeae8d20c078abb64b015ec158add383ac581571cddc45c68f0c9ae0230720</hash>
        <hash alg="SHA-512">c2c9d497fc1be411050f4011b2407764b78aa098eb42925af8a197eabdbc25b507f09fb898805e9bed4815f35236a508ee5b096e36f363df4d407232d50fc832</hash>
        <hash alg="SHA-384">4fb3f101106e4ce3666d5c15d276ba86f7683a0ef35f0384edfcd579ea454275edbb7400795d265ec3a38e39997e79b8</hash>
        <hash alg="SHA3-384">aada7e3612cf3f6190a19fa7c3db74df1e13ec56b300be9bb4317d261d5877c84ab59ba9a09168becdbd82cd41961395</hash>
        <hash alg="SHA3-256">306d286d0bd7549c203cc802fd755d354c4f7926fa023f4e83623ba1a6261250</hash>
        <hash alg="SHA3-512">f6f1ecc684e309d7b9fc5c343792508fee935cd2119d962721662c5af88e4864ba6f47a863e083714f315f926c156de1970cd2fb577449bdfdc7bf98a4a451fa</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-lang/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-lang/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/LANG</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/commons-lang.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.jena/jena-iri3986@5.5.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.jena</group>
      <name>jena-iri3986</name>
      <version>5.5.0</version>
      <description>The IRI module provides an implementation of the IRI and URI specifications (RFC 3987 and 3986).</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7d9c389127c1dfb1a3b74ba348a5798b</hash>
        <hash alg="SHA-1">bde1b8aa79d840c69ef68741b0ffeec9fbb42e9f</hash>
        <hash alg="SHA-256">d883f9b8d4b93f63b8c97b544e6455ad3698604a5234238f782a5d80478118f1</hash>
        <hash alg="SHA-512">e32a992a3c9026fd0d3d14e4c7ddd688034975ea1667bb5fc226cb1f91845e67990a2de5db1e1c2d63d3103e1702289bb7710a89199a8d099da6057f1fd31d4c</hash>
        <hash alg="SHA-384">e30acc10980e402224434776d27acca4e963dc225c1dd9a08cfe2cde607a0541a93553e72c9c5d1154adbaa3b1f471e8</hash>
        <hash alg="SHA3-384">96d1f7b3c4466c3207e1e6b362dacd4b2e2dd47a5897082969576a17b10c7312881e640af8b83abe87218ece83215bf3</hash>
        <hash alg="SHA3-256">e0cb46496c3e4ce26694b22f77cae189c2087899ba78297dbd0e28cfda70c288</hash>
        <hash alg="SHA3-512">311f2d66b1992b1f0b617528997972fc0ed4d64ac9240e02d3661aefecbebbe255ac0cdfe0f7730ec08970f823386a30d419f2580450f70b2776600011d81032</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.jena/jena-iri3986@5.5.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://jena.apache.org/jena-iri3986/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/JENA</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@jena.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/jena.git/jena-iri3986</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.jena/jena-langtag@5.5.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.jena</group>
      <name>jena-langtag</name>
      <version>5.5.0</version>
      <description>Implementation of RFC 5646 (BCP-47) Language tags</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">857e50b93eabcccebf7dc7f36f7c428e</hash>
        <hash alg="SHA-1">745e98cf8ef505fe384635a6e81eac78845a52a8</hash>
        <hash alg="SHA-256">0c99333dbb7ecda2219ee0b7ada0e6f3b9b8400a32b95c879d2765619e7bc801</hash>
        <hash alg="SHA-512">e0db50ce929aee53f01b996e63d22025f62fa65a4853442fc834246e006c5f0c722a53b97472dc9b2ac6a00d0d9d07822b2987282f83ffb94b8c7ae7d4e12802</hash>
        <hash alg="SHA-384">0b2101e464205a17af2e24af8e682629c71ee01203e171e67e9b9476f02868cbbc87ac9f25331ad392062285b89d1439</hash>
        <hash alg="SHA3-384">8d739e1b50a1e17c04e6a5000bb0d6238dc0f86fb93904bcf3c2b80e3d89124c36a0442e645342eb61ecc6536425b470</hash>
        <hash alg="SHA3-256">d374878b585fb30400ca3e8050cc71cafca8e577d7dc1d54a8b63e2cb424fcd0</hash>
        <hash alg="SHA3-512">a4b8e12659d59c37096f66d16de7b203b2e93df64b5818fb36dfae4f4090f39f8cffdf779c68d16b1d2f9bde334b8e8c15d8ae06c006b6635481739daf3528dc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.jena/jena-langtag@5.5.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://jena.apache.org/jena-langtag/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/JENA</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@jena.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/jena.git/jena-langtag</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-cli/commons-cli@1.9.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-cli</group>
      <name>commons-cli</name>
      <version>1.9.0</version>
      <description>Apache Commons CLI provides a simple API for presenting, processing, and validating a Command Line Interface.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ef66360f30909f8372d6358dfc5d1b6c</hash>
        <hash alg="SHA-1">e1cdfa8bf40ccbb7440b2d1232f9f45bb20a1844</hash>
        <hash alg="SHA-256">d3d530d0f28fd0fbbffe2b0b338f70e8cb96f1605579e2e3abd4db29cac24e69</hash>
        <hash alg="SHA-512">d516a6869a31902df2c2e3318acde973a2b2423b5eb573ece5b9eb85f620a2dd25194f0e4efc972b9c0ea054003ee3ffc463b18ffb2428e47d85b88568c36482</hash>
        <hash alg="SHA-384">96c19d2776e7c590df7479256d1bb64814b918e2abff8fc247a084a877c063a3e9a196fa3774f2b1d811c822217fbe45</hash>
        <hash alg="SHA3-384">30d57c3f1b44d24eb143e911966310044ebd231690000aac4d80d34230937c590691be4d95d916ab67b5a2352dc0a71a</hash>
        <hash alg="SHA3-256">737d6fadc7df28fba6fd5dc4a8ec83347d46ad790cafb66341ea971f47ca3080</hash>
        <hash alg="SHA3-512">5f8bd02833a656acd4ec072827f283333547ff9781f7d855d626346629a52e63c3202f03acbac9b0bdebe044bd5536010cbdd686d0f3d10fdec4f5cd1b4494b9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/commons-cli/commons-cli@1.9.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-cli/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-parent/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CLI</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=commons-cli.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-servlet@12.0.23?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty.ee10</group>
      <name>jetty-ee10-servlet</name>
      <version>12.0.23</version>
      <description>Jetty Servlet Container</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9848296e30b8b24ff4c862daddd189ab</hash>
        <hash alg="SHA-1">0cfb3fd22fe5f298437932ae2b595c8bdbd393f0</hash>
        <hash alg="SHA-256">49697e659c72b544638e7e2220c85ce006045da57655375223b9239bcb170f1f</hash>
        <hash alg="SHA-512">af29293f84e92d44d80de14ad84ac7bcd4d2e2a95c66ad0234eaf280ebc8384922a1c6eb09613b090016da02ea6a5581e28e8995a2359dd6a31397a89d015c23</hash>
        <hash alg="SHA-384">d5f2978cbc519bd7a951cd85406c7f789ee8a13e6148e33dd6acfa027a469782e3db25b1ccc926345059e2a55c108a23</hash>
        <hash alg="SHA3-384">6263ff5b4f48c3f5e01b079e666366500975a550c03d0d4eb93ecc93ac7fea9d52e699e3f47f0d3d25e8743a1dac8bef</hash>
        <hash alg="SHA3-256">cad083a559458f21fdebed0710dee328ed99845615c9bd1111426a39adff0f5f</hash>
        <hash alg="SHA3-512">bf4158443d67cf4b998f704522bbf8b7826dc784a9b6ed0edbc52b35a88a93df280a7d86231655be17716429e4dee1b482e6718021adf5f83afa7fba0e5f9a5d</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-servlet@12.0.23?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://jetty.org/jetty-ee10/jetty-ee10-servlet</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repo.maven.apache.org/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jetty/jetty.project/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://www.eclipse.org/lists/jetty-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jetty/jetty.project/jetty-ee10/jetty-ee10-servlet</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty/jetty-server@12.0.23?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty</group>
      <name>jetty-server</name>
      <version>12.0.23</version>
      <description>The legacy jetty server artifact.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">72b7e31da28a1d1edb919e0b3f29aa7a</hash>
        <hash alg="SHA-1">c8618ac7741fd278dba2ff77c3cf5229e2235356</hash>
        <hash alg="SHA-256">c3f0241496a1c71c7050bcd9de0531e66ec09087ffecd9ba951fe33f2456cf42</hash>
        <hash alg="SHA-512">46e56ae593e369516ca107a547543d992c65e18dc414008fd9337175c570c26707faf179547f69d2a649e21cfd0bf20e117c59d8f8c03f1a7202f1c5515c4082</hash>
        <hash alg="SHA-384">baf2d73c919302bfff9a06654257ba9d4145665b0a55ac335a8e4fd8fdd801ffae7b71bada33f6ad5a8f0fef1f42df98</hash>
        <hash alg="SHA3-384">af7cedf516b95e2897d194a4c3ea24bd455de4fb3473f7b069855b12d70c3feb1ea45e1ad0873b58fecdb3dfa835615b</hash>
        <hash alg="SHA3-256">606120563090e10e96c63b9e47b71dc477e8a4bd0ca128b2818a0bb73e75e9ca</hash>
        <hash alg="SHA3-512">5223686334318a8a854bb3b67c06145e0c1cc8ba4b33ec441d315e8b94ecb206bc07ed70a85656e386e65b482365dfebc294133a202fee6444a59174e1cf8536</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty/jetty-server@12.0.23?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://jetty.org/jetty-core/jetty-server</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repo.maven.apache.org/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jetty/jetty.project/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://www.eclipse.org/lists/jetty-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jetty/jetty.project/jetty-core/jetty-server</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty/jetty-session@12.0.23?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty</group>
      <name>jetty-session</name>
      <version>12.0.23</version>
      <description>The common jetty session implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d6488a7531c878b0f90cd646b9f847eb</hash>
        <hash alg="SHA-1">a8fb8b2d7c85a6d7d7fc317cb8c7ecd3b31e5e27</hash>
        <hash alg="SHA-256">ab37362935611b8f855c8bcddea97cd6fcd7e4f46aaa05b425a53926503c5e20</hash>
        <hash alg="SHA-512">b0d7da46da8e944a65965be6f7a3880990af1b9210165505a6f48f60f386416ee657ad8cbf3bb03b2643087ce333a9ed63b499d25fa1e0fd44ab2af68162941e</hash>
        <hash alg="SHA-384">6512f730e3880649ea42cf5b0c83e25b9f0b578f31b8094729b196643f19e91414ba4b3059f695626905d9a7584e72ac</hash>
        <hash alg="SHA3-384">b3d359b37ac8af451085500a13a75269729556a4abf5b7704b6e856459bfec8882763fa78ff7f04970cd77a1a794d27f</hash>
        <hash alg="SHA3-256">60638773d8f7f71592b47dc7eb4f705ac15da5e4879803fd2a13c1299cc1460c</hash>
        <hash alg="SHA3-512">b3e96738be53359d26cddf6f4b9eb758a10d4a5baa2ef8a419ffb06bf4603b755c5063aa95d06d2fdff8c635b1333f0e85c67a197582bc9a065614af3d0aee5b</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty/jetty-session@12.0.23?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://jetty.org/jetty-core/jetty-session</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repo.maven.apache.org/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jetty/jetty.project/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://www.eclipse.org/lists/jetty-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jetty/jetty.project/jetty-core/jetty-session</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-servlets@12.0.23?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty.ee10</group>
      <name>jetty-ee10-servlets</name>
      <version>12.0.23</version>
      <description>Utility Servlets from Jetty</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d9feef632126bea23beb93a5c6e76a92</hash>
        <hash alg="SHA-1">78a3b55e755decc4c2955e134611b6835e0a222f</hash>
        <hash alg="SHA-256">827f89043b2976e5e3379bca4c7a44654971cf2c1566579de48dae367976fb99</hash>
        <hash alg="SHA-512">626974de0fdce90f15607761b7356192b4914c40336240c7dd738665fd0b08a1dbceb00bd3fda3bf6dfb84ff5dfc728b1a769542e3aec09930148e67d49b5594</hash>
        <hash alg="SHA-384">c96858a95475a2450ba7a8c92220e044c214054edaad700ea3d74596cd9cf59ef861c661975af71b9561ebb67fae361a</hash>
        <hash alg="SHA3-384">8fa9f9964665b60c4b0f0e984db48aba148a1cd61e744a4f8dfd21b6d87fe8a96316c5f6d594bd36167fa3f40888c264</hash>
        <hash alg="SHA3-256">af243996bd53efe2903987d9dce8495ae1bb3261a8ec781b87e5f75fa3c75dc4</hash>
        <hash alg="SHA3-512">32c597c82400a364f433d4ad5a14744ebbe98ef1a2674aa58ef607c3bf04f3cc532100790cfa936bf2949c8ae9041e54e606bb129a05787a692da2da5ee85f7f</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-servlets@12.0.23?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://jetty.org/jetty-ee10/jetty-ee10-servlets</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repo.maven.apache.org/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jetty/jetty.project/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://www.eclipse.org/lists/jetty-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jetty/jetty.project/jetty-ee10/jetty-ee10-servlets</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty/jetty-http@12.0.23?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty</group>
      <name>jetty-http</name>
      <version>12.0.23</version>
      <description>The Eclipse Jetty Project</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3b99a4a607b071b70a0da86ff3014e9b</hash>
        <hash alg="SHA-1">d4d3aa4670df0ec8a9b3abe15e14bf340f7e044e</hash>
        <hash alg="SHA-256">2abcaace6620fc33ae1858009079baa801702990eec664b8847722206945589d</hash>
        <hash alg="SHA-512">7bcd346d14a7330bee811671b1d7a8b7f85845491a3071bc600a78aeffef9387ff0a2211be20e8f9352a618d36a4698c320a0830ae0822a931a971cb4a38c9c7</hash>
        <hash alg="SHA-384">446de5cdef3fb35e81ec45728540fa936af30d6da627aa4b15505e36f256a4534fe984cfd789081221c7aa6545ffb19c</hash>
        <hash alg="SHA3-384">5656ddabeb2c0aabad14a3f08cee3c5b668ff0bd6ca995acb86750cf72acda2689e64af6b8e0f18db0279483cd5d1bb1</hash>
        <hash alg="SHA3-256">eb8434b7a9ac5a3df52221471ff7bfa6f0975c5f7c8ffa5c90960ce59a02042c</hash>
        <hash alg="SHA3-512">68893ce20a20e19d669a6efab5ec107ad5d5b9619e27f8fde3a3d1a53ef5ae11c7fb9779a89cf15594b367e9b008a3d5f4b1dae6d8df7c1ff3388892bf478b17</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty/jetty-http@12.0.23?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://jetty.org/jetty-core/jetty-http</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repo.maven.apache.org/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jetty/jetty.project/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://www.eclipse.org/lists/jetty-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jetty/jetty.project/jetty-core/jetty-http</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty/jetty-io@12.0.23?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty</group>
      <name>jetty-io</name>
      <version>12.0.23</version>
      <description>The Eclipse Jetty Project</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">241d6b456e55ce888b1be73ac1688b3d</hash>
        <hash alg="SHA-1">a9175176e1ace74311f91d9a5f491efc387b4e90</hash>
        <hash alg="SHA-256">6974d8e9be69d39b2c0308d44699cef0d96132bbb636abf0e1226184b66b1b5e</hash>
        <hash alg="SHA-512">e2866b4f32c2ccde4658be506c119889e66d56da07ac318c5350db757ccf7bb0ff458670f4a9436aa7788cba6b2db14e609db50d9c859cfd0151ccf28659631b</hash>
        <hash alg="SHA-384">8540d0f7dc68b8914556de291c16624e4525427a4e3d7a4c9cf3b73921fc093a9095c4ae91a653bc1c5c85518bb09d04</hash>
        <hash alg="SHA3-384">4bec011189cbc0cf3cb7a88648d0d9f44784cf3af161853d5cc282ba207614cf19f1cfc96e83ce08440510b1487b0e34</hash>
        <hash alg="SHA3-256">01dddbcd698e521de196fafad6f30714fd3770ddd229f0a49ecabd47f250115f</hash>
        <hash alg="SHA3-512">73c1386cd425cb80812d7e6382f62f54a2d22dd18317e42164e5e119319b98cbede04c6ea1e708a0ef1d2fa18fd07795e94cf3cb79d1ebc840632800975e0571</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty/jetty-io@12.0.23?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://jetty.org/jetty-core/jetty-io</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repo.maven.apache.org/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jetty/jetty.project/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://www.eclipse.org/lists/jetty-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jetty/jetty.project/jetty-core/jetty-io</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty/jetty-util@12.0.23?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty</group>
      <name>jetty-util</name>
      <version>12.0.23</version>
      <description>Utility classes for Jetty</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">549493de63f1d651b9dfa7b9eb47bcf3</hash>
        <hash alg="SHA-1">aa47d314a3af553d9797ec0a89ab60c0b069fea2</hash>
        <hash alg="SHA-256">742518cb7ce7151fa2b6c54819e9b65204c0f9da1193812261fa5655618e2c97</hash>
        <hash alg="SHA-512">263da580f21d80c76abc105d9246bfbffd9866b37b662bfeb8de0dcefec6b4bae8be9c617294a937cbae1412f805bfe206b880d0acb2ee906897c0e911eae781</hash>
        <hash alg="SHA-384">b014a59225848421517d21735bab2146d86603a7b5b75ffe87c862c7731052462c258a28a2f5e789bffef318c535aaac</hash>
        <hash alg="SHA3-384">326370f5d0117a412e6429d9cc4f80e1166b468423cdd25510d0da8ddc4f860f64af2a0311a7b21049773370441e3b33</hash>
        <hash alg="SHA3-256">35c0d54187be0556efaa90659771ec9986917bd2bf1a9103c490907dbd2c3d86</hash>
        <hash alg="SHA3-512">d03b1c5f2d6bf69b8422a67ba61e58cbfae5a6805f5a1a531226db25eb90eb877f9f5bf709c7d5839ef71c8a706bdb1ea2faeb39651d9d8c3ddf3a4ceddff3cd</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty/jetty-util@12.0.23?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://jetty.org/jetty-core/jetty-util</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repo.maven.apache.org/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jetty/jetty.project/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://www.eclipse.org/lists/jetty-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jetty/jetty.project/jetty-core/jetty-util</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty/jetty-security@12.0.23?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty</group>
      <name>jetty-security</name>
      <version>12.0.23</version>
      <description>The common Jetty security implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3289ec4e64c0daa1fcb79656eff0f62d</hash>
        <hash alg="SHA-1">c6e862c78ce45dca1374d157e92eedc4450aa141</hash>
        <hash alg="SHA-256">b4e4c14f8c1bfd0a4939adada33ea7449199b2523d00d211488ff81799bb3c0c</hash>
        <hash alg="SHA-512">5cae1a6f90ee4f6e9c2d8a1fb6d89c94f7aa5e742ce14620ce6d8728b7cc719775a695d65d40680ae0d8b4cdd28f464863d5d8ecc3ea83ee3c739cbd11324292</hash>
        <hash alg="SHA-384">a124150c574dcb6408aa99ef4a49f2dc365a52fd4673e8b28d4967e63672126ed01ac5b745c6570068aa17a888e050bf</hash>
        <hash alg="SHA3-384">367b91eefc4992dd4d6bfe3d6cfabde7e2aa9b0043ddf6e05ce6d53ddc02825454b72a773aaa39e9baea506049d91fc6</hash>
        <hash alg="SHA3-256">79add3e7ad1d7649cb9c4fb0ed6794beb62906c652dafa9faf8378faae8f5643</hash>
        <hash alg="SHA3-512">d1d9b9452df16ca3e9dd6f0b78dd43472041e38c36dd81a500041efeb9af0efb9e4d938b6bef58f51054e69a6afc2b4cef5b793e3dc13851c850bbc03ed988ec</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty/jetty-security@12.0.23?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://jetty.org/jetty-core/jetty-security</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repo.maven.apache.org/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jetty/jetty.project/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://www.eclipse.org/lists/jetty-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jetty/jetty.project/jetty-core/jetty-security</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty/jetty-xml@12.0.23?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty</group>
      <name>jetty-xml</name>
      <version>12.0.23</version>
      <description>The jetty xml utilities.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b4165223cd37807d5543d3c9edfa2f83</hash>
        <hash alg="SHA-1">94709c13e0d38a40504f30064edc034356f5b5a1</hash>
        <hash alg="SHA-256">de4301cce2787a8abcbe2da1c60003540e2c80d361b55b843e9849bebe720f5f</hash>
        <hash alg="SHA-512">eb24665a264223b07ea2a48e84fa7150ec9e65364b61cd4ad8fe766e1d471e8039be4c58723372d843d8bae4f5e4a52a69116e01871d73a62be2f3e33156dd27</hash>
        <hash alg="SHA-384">e160c1e63df9e247e09d958ba021adf649c51ce18b7f174565b424c7f83f297a15032a3e42d51b07fcbe56f90e16a8d9</hash>
        <hash alg="SHA3-384">e4e07dfa7748099529f502240a5afcec969e1e06d0b2bce9be039d8fa7e38398617fbb54aecb967124fe736b475592d5</hash>
        <hash alg="SHA3-256">bd3eca6f0e937c60537c184543e186905f11d0fba91f31af2cac43517227d9e0</hash>
        <hash alg="SHA3-512">23a5b89b231d37d0f0768a3cf9e38c9ed82a8b9a9bbe153765f2206b12aa46c176e179c7f1b75eefae7243d3817fe7a0fdaccad9b8cf9e93a383a543aa937808</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty/jetty-xml@12.0.23?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://jetty.org/jetty-core/jetty-xml</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repo.maven.apache.org/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jetty/jetty.project/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://www.eclipse.org/lists/jetty-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jetty/jetty.project/jetty-core/jetty-xml</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.shiro/shiro-core@2.0.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.shiro</group>
      <name>shiro-core</name>
      <version>2.0.5</version>
      <description>Apache Shiro is a powerful and flexible open-source security framework that cleanly handles
        authentication, authorization, enterprise session management, single sign-on and cryptography services.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">449f5bee6cbd3dce3bc56132b5c48c65</hash>
        <hash alg="SHA-1">26f142c73465eb18f4a15464cd7686b5b18e55fe</hash>
        <hash alg="SHA-256">79cf8e35a479f0b1b707668fdb8ac3a700c51570b32406078b9720e14d8117e7</hash>
        <hash alg="SHA-512">e6a3d37f768546e0d9b495092c5036e3672d0ead890473236039dc93557b168ef785b0f78dfcd22590e19538a22c2d9e9c2c986b97692aa09e1b5e4168255230</hash>
        <hash alg="SHA-384">ed4e2c77e8437c430fef4931ae42728ab773caa9fec195a4f1ec58be6c9328fbc3cecc8bb45a322f3bcc0cb3984a16a4</hash>
        <hash alg="SHA3-384">6f86a8a18c706c9fb209364db4e675773939a84816bdfe992ad204046cb587616b38e6b91849790ed31d9c7b8e1d3bc0</hash>
        <hash alg="SHA3-256">a8af15d329d7a367961eaee0eccdea93230e5b3ff2d611ee2d52aaac035e97ce</hash>
        <hash alg="SHA3-512">76b95f2efb4a4c47f8675f3ff91651273afa1e617353abe126648c98d3f4e7a37d4192c438e3240a68347587155e4dafd5c87a0b779925be8ac645167ae6e836</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.shiro/shiro-core@2.0.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://shiro.apache.org/shiro-core/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/Shiro/</url>
        </reference>
        <reference type="distribution">
          <url>https://shiro.apache.org/download.html</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/shiro/tree/shiro-root-2.0.5/shiro-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.shiro/shiro-lang@2.0.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.shiro</group>
      <name>shiro-lang</name>
      <version>2.0.5</version>
      <description>The lang module encapsulates only language-specific utilities that are used by various
        other modules. It exists to augment what we would have liked to see in the JDK but does not exist.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">27d1394350896e80c7ed0b7c356577a7</hash>
        <hash alg="SHA-1">dd139c047c1192ef1585517d081a31ef5d1166b4</hash>
        <hash alg="SHA-256">469c1cc7d92235b922ac3253820a8fedf1bc1aaad08e81457c114ca1b1097db7</hash>
        <hash alg="SHA-512">cf8814533e7c8b0f06693cdfd153f4f0ccf82ca4161810e1baf145031f27308d8e66126e99274ee9fe83a79b64bf2674bc728b315e8cadf0392e173d9f1ed52f</hash>
        <hash alg="SHA-384">c0c973a2a5359ef05cda2071bfe3a9f769719a2dc7041913f2473a2b96a695c3ecfaebdb31dae4920e0815bc516c5436</hash>
        <hash alg="SHA3-384">e7b6d80f06d12c526914145c318e4c9455898bede28220868397f87d53b8139fdf321836f853064719191e15bd352e4e</hash>
        <hash alg="SHA3-256">214d947b3acb9a60888e3c6a63c1bb118439baa7abbfcf596579fa160a066f5d</hash>
        <hash alg="SHA3-512">2eb224a847432c97b6b72f115b92d24b0401de323abeb39cb2c99c5d14a6d037e927f9bb8995fc9da361b1ddd0bc876ffba3ec14377d4383e0ee95d412d43676</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.shiro/shiro-lang@2.0.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://shiro.apache.org/shiro-lang/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/Shiro/</url>
        </reference>
        <reference type="distribution">
          <url>https://shiro.apache.org/download.html</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/shiro/tree/shiro-root-2.0.5/shiro-lang</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.shiro/shiro-cache@2.0.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.shiro</group>
      <name>shiro-cache</name>
      <version>2.0.5</version>
      <description>Apache Shiro is a powerful and flexible open-source security framework that cleanly handles
        authentication, authorization, enterprise session management, single sign-on and cryptography services.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">58c8b9d18ee8be8e7bfe9d176ac40ee2</hash>
        <hash alg="SHA-1">c8e872e547883bd37c19a08cf7ca2488436da1d1</hash>
        <hash alg="SHA-256">079bc1900e8a641a84c79fda8d4099b57edd89fa9da48e2843e9ee490c32e3cd</hash>
        <hash alg="SHA-512">77d56fcc9507183f86c00f9bcd91e9ffffc10dec7380615b6e9276910babb693f9ec843b9189c0904de5a5ab51afa22de67b4888f59955f2aedb9ded692ca103</hash>
        <hash alg="SHA-384">a82b462904296178c56b8294c48349995e325ddad7c8a47f8b093a58a2bd1e72cf00d4a3bba1cb09c9e046860028ac79</hash>
        <hash alg="SHA3-384">c443b2174504c416a002df3033e09f8e3022240292363f61d73981fc76d60ca7818212e239d6950dde8b53998aa1ce42</hash>
        <hash alg="SHA3-256">03716e62051b6dc0d1e37b25405215d828e72f46dafd10e4f8a3c45b5fd53be7</hash>
        <hash alg="SHA3-512">52ec8ec0fb017f7855c414356d0123e1f6f16899726d89819a3af62a1755d2cc38145edaf3bbd9290dfa806819ea9a5aa22d3fef8ca2ddebe8a35d31aa5005e5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.shiro/shiro-cache@2.0.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://shiro.apache.org/shiro-cache/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/Shiro/</url>
        </reference>
        <reference type="distribution">
          <url>https://shiro.apache.org/download.html</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/shiro/tree/shiro-root-2.0.5/shiro-cache</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.shiro/shiro-crypto-hash@2.0.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.shiro</group>
      <name>shiro-crypto-hash</name>
      <version>2.0.5</version>
      <description>Apache Shiro is a powerful and flexible open-source security framework that cleanly handles
        authentication, authorization, enterprise session management, single sign-on and cryptography services.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e47c2f06fd8a7faeb563d7e2610c7685</hash>
        <hash alg="SHA-1">6cd73eb43664d43a755b0b6aea4899a7237757d0</hash>
        <hash alg="SHA-256">fb0ee14235a72d51087a2c2424d09853024226571b5cc7a8633b433d3f486e98</hash>
        <hash alg="SHA-512">71f791a9e26feeb52008f13c3783b67983c57921c46cc0b74393f5c348c7229ee39c967298875fb4dc28457f3cb3258141e2003fb7b09ba2f7db29ae2a15327c</hash>
        <hash alg="SHA-384">127c159360c5cda1166bdfe6a42e49ee31c135182579228b67049c88649d44705b936836c043dd53eaa14813ce8c33c5</hash>
        <hash alg="SHA3-384">cb7650c0867aeb79d1d834780f924479ba17d1022934e12fe814dcb0674c722dba56828976bae597e6f59713d2a84f97</hash>
        <hash alg="SHA3-256">ec463330682b0ae6065709bdc97a10205ac10b432183382d57d76538f6487c85</hash>
        <hash alg="SHA3-512">0a690dded3c84b53e3b5e59a4e788ac83fee0807c37ed6a86a38ca4bcf7c8e7f2ce88751ec976e58e2fb8d16f959e6f721b3e7e4caf9a108d95d8947feafa51d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.shiro/shiro-crypto-hash@2.0.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://shiro.apache.org/shiro-crypto/shiro-crypto-hash/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/Shiro/</url>
        </reference>
        <reference type="distribution">
          <url>https://shiro.apache.org/download.html</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/shiro/tree/shiro-root-2.0.5/shiro-crypto/shiro-crypto-hash</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.shiro/shiro-crypto-core@2.0.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.shiro</group>
      <name>shiro-crypto-core</name>
      <version>2.0.5</version>
      <description>Apache Shiro is a powerful and flexible open-source security framework that cleanly handles
        authentication, authorization, enterprise session management, single sign-on and cryptography services.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1360b9ba4e2c7046ac74c6bac4aa2576</hash>
        <hash alg="SHA-1">ed43c07a35ebb68fb225fd9f8867ccdec8f874bd</hash>
        <hash alg="SHA-256">5ab0c3a57596468d3fe4e6570740683f9c2bb7d2f5831caba9af78db22108c59</hash>
        <hash alg="SHA-512">266c524aad1524f610713cc1c7cec93a9aeb60a69d9a45724c631c8fd2dd0770b20436e9adefa19bd4d723335b65c22cdb0f33f1de95f9ac24ee48ceda081b33</hash>
        <hash alg="SHA-384">835be8679e477fd015f25cbe75c1940af4acfb348966c0678836bc0950a75ddb65c1488cdab0db4789d0155a7c5f2d4c</hash>
        <hash alg="SHA3-384">f35d1292dd8305ad78d21ad64f8f382e10b85cf0d22d9f78b8d9d080037c90b47ea98349f440d082278c97dc088b2f2a</hash>
        <hash alg="SHA3-256">90714371b71d0f842fcb998da71601c9e5ff16351823f2753959c1631f81cecb</hash>
        <hash alg="SHA3-512">df2f17e6386ade59e4051648db1ce7840d36c3cf1acc964df6bbcd23d017683e966f3e5625e745b689349d3f40548ca01990b904c405216c13c30b3bc7256ac1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.shiro/shiro-crypto-core@2.0.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://shiro.apache.org/shiro-crypto/shiro-crypto-core/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/Shiro/</url>
        </reference>
        <reference type="distribution">
          <url>https://shiro.apache.org/download.html</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/shiro/tree/shiro-root-2.0.5/shiro-crypto/shiro-crypto-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.bouncycastle/bcprov-jdk18on@1.81?type=jar">
      <group>org.bouncycastle</group>
      <name>bcprov-jdk18on</name>
      <version>1.81</version>
      <description>The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains the JCA/JCE provider and low-level API for the BC Java version 1.81 for Java 8 and later.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3913a176dc36b31e867be5360f3ee524</hash>
        <hash alg="SHA-1">d17c094daef57dbd80af71687a475aa6df7cbe54</hash>
        <hash alg="SHA-256">249f396412b0c0ce67f25c8197da757b241b8be3ec4199386c00704a2457459b</hash>
        <hash alg="SHA-512">e44c612fd4658ae5ee9f451b865e4f490ed73bb229e772c4c14769b1d14ba1879b130983e87557609ee815d7c56f8b339b37e00404088e5bc5f0c3715880f4eb</hash>
        <hash alg="SHA-384">ec82fd783817fb3634813258ba4e4c82cffa9f0d23d849ec0c1749de2b04a2e1f432e43545eb5f06acc52a9bd5c43921</hash>
        <hash alg="SHA3-384">772d4b813c9733b70d7fd1fe2c5fedbfa5fec05f0bdf21afd49c26c40777b4b7048a6fa4e662da7e7f3b8d69c5b792bf</hash>
        <hash alg="SHA3-256">472a56ef6828dab569e4d7e14c8844ddb25c35ad4be363b4ada7b1f4c02aead8</hash>
        <hash alg="SHA3-512">6c68600dbb4c6b9b32a3dd3fcf5bc056b8ce0aaba6e243fc96014dc702eb29e7236f6da1ac584bb42bd69c03b135c4d222901c4bf9bdd22d05a1b9f9a1d1ac5d</hash>
      </hashes>
      <licenses>
        <license>
          <name>Bouncy Castle Licence</name>
          <url>https://www.bouncycastle.org/licence.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.bouncycastle/bcprov-jdk18on@1.81?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://www.bouncycastle.org/download/bouncy-castle-java/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/bcgit/bc-java/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/bcgit/bc-java</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.shiro.crypto/shiro-hashes-argon2@2.0.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.shiro.crypto</group>
      <name>shiro-hashes-argon2</name>
      <version>2.0.5</version>
      <description>Apache Shiro is a powerful and flexible open-source security framework that cleanly handles
        authentication, authorization, enterprise session management, single sign-on and cryptography services.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7a47c523571eba132689b0cddd87be2b</hash>
        <hash alg="SHA-1">ce8fab7b46ae62e1cdc4c6b30d30809b17d5c668</hash>
        <hash alg="SHA-256">5a1c5505a078dd1a3e4eecd05da075c0f42022b4bb234678f6b4312f252c5b0d</hash>
        <hash alg="SHA-512">f77e74ddbe53b608563a9d7e864c57d1b8e36da5b24df8fc7941754122459635e8e6915129793a746d9a227fe36fd1095e5b30d97c499c4cf82f38366f8cd643</hash>
        <hash alg="SHA-384">86aa9ce35137559025b934bdb8f97fcc1e426368300c6f0870a76077297add95a9b7c36c8d052c527ea855eca612f4ed</hash>
        <hash alg="SHA3-384">1cd0617610a37ea3855c3a23b00f6ce45f443b2c8e2bad843a0e86011c42c414d540d3ffd8505f8917b24b2de3cb61dd</hash>
        <hash alg="SHA3-256">538960d68713d1852ed52934a654ea999a96e088ca324cd418d731f05ec7cb6b</hash>
        <hash alg="SHA3-512">83e9b093b67b743fe65f52fba963acca6da9d2c3e1deb861e6d10dbb79367a358353279bafedbe0fabfaf0071be382f116d25d529d65502d766fb15d07d61411</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.shiro.crypto/shiro-hashes-argon2@2.0.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://shiro.apache.org/shiro-crypto/shiro-crypto-support/hashes/shiro-hashes-argon2/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/Shiro/</url>
        </reference>
        <reference type="distribution">
          <url>https://shiro.apache.org/download.html</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/shiro/tree/shiro-root-2.0.5/shiro-crypto/shiro-crypto-support/hashes/shiro-hashes-argon2</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.shiro.crypto/shiro-hashes-bcrypt@2.0.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.shiro.crypto</group>
      <name>shiro-hashes-bcrypt</name>
      <version>2.0.5</version>
      <description>Apache Shiro is a powerful and flexible open-source security framework that cleanly handles
        authentication, authorization, enterprise session management, single sign-on and cryptography services.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">673c9ff55e056a0f152ea09551dc9907</hash>
        <hash alg="SHA-1">1c90746bb3addb7eb375f9b7eb8b16ba43b82b6a</hash>
        <hash alg="SHA-256">68f57d2992796ffcc72012adaabd39e916201b359e31421855fd5a6919ea309a</hash>
        <hash alg="SHA-512">8cd513b9a963ea5281886f34836c2c90c6f779ef083f840e5c6a9bb3511639f0cc63b951f4115e16a760e829c2a654825049587418fe1f67b3f1edfd53857b6d</hash>
        <hash alg="SHA-384">6f32d27977aef6085c1c0465cd1f88f7db37eb268c29954cb1721c7702e07334fdac14fc66acd4832fca41fdbe95553f</hash>
        <hash alg="SHA3-384">3e270d8e36eb5ef7dfa2a849fbea0aa5e750d0b8ac9718315f9d3ef1957abc636a8f0c0ea30dff154c46b34d3ea73b25</hash>
        <hash alg="SHA3-256">2f3eb29a77606f43d86fd2458ee8602d09edd7f1363863fc950cd909be92dbac</hash>
        <hash alg="SHA3-512">2faaaed336a53e84c9eb3362bb17cab41f0dde891eff47aa3ac88e2124c152a050d7efc3134b554a094846a5d574d80773bafa29acbc47f4e5b63bb4d3bd106a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.shiro.crypto/shiro-hashes-bcrypt@2.0.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://shiro.apache.org/shiro-crypto/shiro-crypto-support/hashes/shiro-hashes-bcrypt/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/Shiro/</url>
        </reference>
        <reference type="distribution">
          <url>https://shiro.apache.org/download.html</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/shiro/tree/shiro-root-2.0.5/shiro-crypto/shiro-crypto-support/hashes/shiro-hashes-bcrypt</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.shiro/shiro-crypto-cipher@2.0.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.shiro</group>
      <name>shiro-crypto-cipher</name>
      <version>2.0.5</version>
      <description>Apache Shiro is a powerful and flexible open-source security framework that cleanly handles
        authentication, authorization, enterprise session management, single sign-on and cryptography services.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">13a4e0529d016e3f1f4aaf44d7cc40d4</hash>
        <hash alg="SHA-1">d47cdf37622a9c4dc6378b52f7cba69f14498c53</hash>
        <hash alg="SHA-256">299513f46e822ede09cb68abbadf0f0bd8aefb9733af059bb27ba5a11a5aa240</hash>
        <hash alg="SHA-512">ef0c9e6ebbc657b2485b91a1d90f3d6380668bc913bf6773a45cb6fe2a86d8227e1902ecb36d00aa6a37b79c2fb0e78b2aa457f5942d9a82d45e73b38b8b02c7</hash>
        <hash alg="SHA-384">3b98a8d57adc155c9cb0c03123cfd4a6b07ad467f5ec3d466977c505fbebebe094e807fed801372e2a4555526cbb81c4</hash>
        <hash alg="SHA3-384">50d462e62bfe58bd6bdae141b02e3901f8445c4f9e8fdc907ea25e5d2c356111891fda75d6054454c95d5005d949b77a</hash>
        <hash alg="SHA3-256">7b9c1516ce324b6b1741f822514fdbd80a8dbd0097ec3c777e5de7a90ef50e98</hash>
        <hash alg="SHA3-512">12487701ee8f19a6414d132a7d412cf482b48f4080ed724e87de860270f9e4fe8035d5ec007432a2b5957d5044b8733a1ae8ff1b9c3fe522080fec89d2418f99</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.shiro/shiro-crypto-cipher@2.0.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://shiro.apache.org/shiro-crypto/shiro-crypto-cipher/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/Shiro/</url>
        </reference>
        <reference type="distribution">
          <url>https://shiro.apache.org/download.html</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/shiro/tree/shiro-root-2.0.5/shiro-crypto/shiro-crypto-cipher</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.shiro/shiro-config-core@2.0.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.shiro</group>
      <name>shiro-config-core</name>
      <version>2.0.5</version>
      <description>Apache Shiro is a powerful and flexible open-source security framework that cleanly handles
        authentication, authorization, enterprise session management, single sign-on and cryptography services.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">51d14facfc71a59944816a5f44aefbfe</hash>
        <hash alg="SHA-1">c305ec92183e187150cd03e907e52c2ef37a74f3</hash>
        <hash alg="SHA-256">548c841247c67847f63f1dc608e8cf988eda7ccfbe927dc33f4785a9d61f3f1f</hash>
        <hash alg="SHA-512">1c6a4ac93c275cbecce3aabe9e108492d867c5fc65cde979eb6b67755cd87a6353277069c04b4825d30f38ed3148d430e9c6e112fe545161269eb532a3ba2e1b</hash>
        <hash alg="SHA-384">d3abbe74355b013133d363bfab7060fff45cc260a876e8a034f6581cc72d8d77a0fbd0e40c8f51704deead579fec0553</hash>
        <hash alg="SHA3-384">0e787e0cf2fc08d1d5da49b86c2d3ecbf53f8836031eb754d789f93a671fa2131200a9e01adbaeb0d29959133e1e951e</hash>
        <hash alg="SHA3-256">9a38b887da1f3e37e7a4e67cae8dfbc4eab082e571759b502981d36beda4ec48</hash>
        <hash alg="SHA3-512">268ee24a732f481647cb8eb82bd79a1d7a538d7971b628ab6593bb6bf798405d4e7bac39dea1714192ac9e4c2c8b14d9bce67756daed6376e98b98f036ffdd06</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.shiro/shiro-config-core@2.0.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://shiro.apache.org/shiro-config/shiro-config-core/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/Shiro/</url>
        </reference>
        <reference type="distribution">
          <url>https://shiro.apache.org/download.html</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/shiro/tree/shiro-root-2.0.5/shiro-config/shiro-config-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.shiro/shiro-config-ogdl@2.0.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.shiro</group>
      <name>shiro-config-ogdl</name>
      <version>2.0.5</version>
      <description>Support for Shiro's Object Graph Definition Language (mostly used in Ini configuration) where
        declared name/value pairs are interpreted to create an object graph</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1235d59e54485e4a98f9b1dc1c41336f</hash>
        <hash alg="SHA-1">da3755f7b2c2d276550072d16fc9c9faa900a87f</hash>
        <hash alg="SHA-256">860fd1737dfe5d570171835880238f87898658a66568a1a0b159bb832f369adc</hash>
        <hash alg="SHA-512">af7cc1e69af604dcb4c23b97ea4e9a474d71de53b3c3603fa870c3a52816742f8cf4ef43651e7e74b8d6424428def19c6fb7a4c493d066aec186756ac57e0c9e</hash>
        <hash alg="SHA-384">245f90376c3289afc491152cd0397957533f95e5c92ff62a23f1883cd8925598d13d976e8f2e4d64c8cc7ea1f15e027d</hash>
        <hash alg="SHA3-384">4cbb441b2f9d4a37993a525d54f970a4814c3fafdaf01e8f0529d213031057663c69345e794b2502341fbb5d3b425cb3</hash>
        <hash alg="SHA3-256">513500111bbf56dbcb1aef0887daad34929a19f21d0a44eaf5bda98ac226650b</hash>
        <hash alg="SHA3-512">96ef886a5021b4bb4e19777a659f5ad08b86460217641f15337a91483ccd2ac90149c676266aea1d06f507565997d4a8b3546e9303b97cf2ed8e933752ee687b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.shiro/shiro-config-ogdl@2.0.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://shiro.apache.org/shiro-config/shiro-config-ogdl/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/Shiro/</url>
        </reference>
        <reference type="distribution">
          <url>https://shiro.apache.org/download.html</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/shiro/tree/shiro-root-2.0.5/shiro-config/shiro-config-ogdl</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-beanutils/commons-beanutils@1.11.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-beanutils</group>
      <name>commons-beanutils</name>
      <version>1.11.0</version>
      <description>Apache Commons BeanUtils provides an easy-to-use but flexible wrapper around reflection and introspection.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">32ed51f196dfda19e0dc1ce53eeed29e</hash>
        <hash alg="SHA-1">ac03ea606d13de04c2e4508227680faff151f491</hash>
        <hash alg="SHA-256">9e44ba68ec9a3f21286fa2a8bbb003b735c0f69101bb43144b79f4f8aaa74709</hash>
        <hash alg="SHA-512">4348670579601bc1151de2f27414635c4ea0b4b53061d116c09ba319e2c4f8e91d0cb0713a964668bd5189105ac1e2b6590881850880bf5ff23cc6409f270420</hash>
        <hash alg="SHA-384">a349c6a1e0a48cbf8d3528e4a39257db1b912c2ef060853837aa14d941154e9adc43248309ab6db7e8ac7730db7b081b</hash>
        <hash alg="SHA3-384">f3afdd778bb54bc6a9e41b5c31cf98078f005542b87cd0a3713d8e5152ff7eb6d9e2ed3206ce453a3af6f869fa714cbf</hash>
        <hash alg="SHA3-256">6dd4ec6d993b5792c51b5d6c4ea3b56f35b1c1f0ea65b182cb55c2432315aa68</hash>
        <hash alg="SHA3-512">fdcaa942f7377fdb36c7977273c1e2177d23e7b13162db1a0e5d3958d87a8c77d08cd6797a7c30cf755d492fa75d0642de5678dfe1d5a936569dccde5549e512</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/commons-beanutils/commons-beanutils@1.11.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-beanutils</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-parent/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/BEANUTILS</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=commons-beanutils.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-collections</group>
      <name>commons-collections</name>
      <version>3.2.2</version>
      <description>Types that extend and augment the Java Collections Framework.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f54a8510f834a1a57166970bfc982e94</hash>
        <hash alg="SHA-1">8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5</hash>
        <hash alg="SHA-256">eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8</hash>
        <hash alg="SHA-512">51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16</hash>
        <hash alg="SHA-384">dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073</hash>
        <hash alg="SHA3-384">8ce03528e4a6e95c44283b56eca87e6a6d3bf1363411a55b538f4f9110cf7470581ea5c73925e877ddab08dba0603f40</hash>
        <hash alg="SHA3-256">fd3d6134b5f07077b82ccf93d148dacf7c4ce5c971209510edd0e77e3e38c19e</hash>
        <hash alg="SHA3-512">c2a523916fb7c7d55a05d5e3d9e9b33000733f4b20a71be174e4e093e3f06ea78ad831edd1505527da7388105f8647efb7d5666ba852c90b4e2d5bb74256efbc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-collections/commons-collections@3.2.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://commons.apache.org/collections/</url>
        </reference>
        <reference type="build-system">
          <url>https://continuum-ci.apache.org/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://issues.apache.org/jira/browse/COLLECTIONS</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>http://svn.apache.org/viewvc/commons/proper/collections/trunk</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.shiro/shiro-event@2.0.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.shiro</group>
      <name>shiro-event</name>
      <version>2.0.5</version>
      <description>Apache Shiro is a powerful and flexible open-source security framework that cleanly handles
        authentication, authorization, enterprise session management, single sign-on and cryptography services.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">60cd12dae3908edcdf9243fd8c84c865</hash>
        <hash alg="SHA-1">248cf0052cd901a81c9a902bde7f043ea9d24a5c</hash>
        <hash alg="SHA-256">2af7868b3a217f8cab6b44926504b137998016d40c54ca94850dd4072f3a6957</hash>
        <hash alg="SHA-512">ac3280a0431c5406e86a55770f40a13c9eae7a8bef5f33548e58b6f3d500f0f27d9eb98b98539a44b917cccdd2223240bfb1c00cf1b75e6240f93c8d2495cd5f</hash>
        <hash alg="SHA-384">baef13d48bbeb17e8537a1723a602bd2ed1d735f3289adf0cdfc02c5eeeeb762b65d100c34e61aa3b6d9a841ab6f8c25</hash>
        <hash alg="SHA3-384">7f2cb9fe1bc6b2c64fb60ff74c42df2ffa4db6058d43d4e4117bd244751675f8b08124864a5cbb0d1bb2491162d6ff8c</hash>
        <hash alg="SHA3-256">e6a24df6887f149a30ceb56941adab0a87b6e74e7c85b3c62aabf51d6d693056</hash>
        <hash alg="SHA3-512">e9697cc2651d5ed07aa4ecb2c5bb4db1422e12ab2a73b91c3201220b35fc8bd2d755e0f3afba3d5a5f38ba1ee307e183537c12837bc5a4b650f72b2d5a163bf9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.shiro/shiro-event@2.0.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://shiro.apache.org/shiro-event/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/Shiro/</url>
        </reference>
        <reference type="distribution">
          <url>https://shiro.apache.org/download.html</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/shiro/tree/shiro-root-2.0.5/shiro-event</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.shiro/shiro-web@2.0.5?classifier=jakarta&amp;type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.shiro</group>
      <name>shiro-web</name>
      <version>2.0.5</version>
      <description>Apache Shiro is a powerful and flexible open-source security framework that cleanly handles
        authentication, authorization, enterprise session management, single sign-on and cryptography services.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">97c0d19a7f0210790aa1dffc11d16425</hash>
        <hash alg="SHA-1">9b56abb04a0d7d595b6b02c67ce07ece3d52676f</hash>
        <hash alg="SHA-256">25f01522f6491e819229f681346b876f8df9ecf47acf938bd9f091101e54830d</hash>
        <hash alg="SHA-512">c5168620141ce4899a5a02b72422a73ad38db358c8c8ffe737a8592f29d6244d4af9bf97bfa3721ce2ad6e4f92458d41c528bb36fd50857049f91d0e393a181e</hash>
        <hash alg="SHA-384">29ae21ef5941bc566d011d1f3acfd97e4495599ed2159ae17aab9503455fa07a0f96e3abc5dc030ece551acf5d8f8946</hash>
        <hash alg="SHA3-384">236a49a917c2269dce34ac1ca748c28cded24c7925fdf4b9b4fd60fe87b0fbad538ed88c7c6e0ac9741bba8f35b7b57f</hash>
        <hash alg="SHA3-256">cadcce11ed060e5f460599a347bd8f059d49a875eb6a362930e06ddb6f750609</hash>
        <hash alg="SHA3-512">646a97957a4330cedab48960dbe6367396d1bd591d7f64c8096dc594dad8d25ccb141953587c38127451b60da555cffd6d6db181e82d157137689bb443ffc574</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.shiro/shiro-web@2.0.5?classifier=jakarta&amp;type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://shiro.apache.org/shiro-web/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/Shiro/</url>
        </reference>
        <reference type="distribution">
          <url>https://shiro.apache.org/download.html</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/shiro/tree/shiro-root-2.0.5/shiro-web</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.owasp.encoder/encoder@1.3.1?type=jar">
      <publisher>OWASP (Open Web-Application Security Project)</publisher>
      <group>org.owasp.encoder</group>
      <name>encoder</name>
      <version>1.3.1</version>
      <description>The OWASP Encoders package is a collection of high-performance low-overhead
        contextual encoders, that when utilized correctly, is an effective tool in
        preventing Web Application security vulnerabilities such as Cross-Site
        Scripting.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c826f7776c4d03adcbf1a2bceef84627</hash>
        <hash alg="SHA-1">1ebf20e19ddc3fa952f4e2af220a20b085ce87ba</hash>
        <hash alg="SHA-256">c9c56c8970c7cb11b231913ba5190ce930f8fd4fac2bd918810642dc3848e757</hash>
        <hash alg="SHA-512">98ef238bbdd93e0dc18928e5d876cb3f264f2d1808cd6dc5eda3fca2f3a20b2dd53d5872b413a261ca9e0ff2726cd5b067ea14921eddc3e5c8e9d73b570b3133</hash>
        <hash alg="SHA-384">c482fe5793c29646104f72b52838f8fd674d1a0b5428f07e7f4204d05a8ea373946a014e172c0f56e44e36800ac633be</hash>
        <hash alg="SHA3-384">64f0325baa1a8e16729f6b98722904a3ae9c066e6393cf38eeb01138e8594253aa819798c5dd2f484c7344cc57d16a11</hash>
        <hash alg="SHA3-256">fb3692482e597d06305b67fc60ca0d1f5eafce6e74b4bdfebba0acd06108d897</hash>
        <hash alg="SHA3-512">2a118e5d9129545fcf17675704ec3429f88beb015ca7d161d2488d81d3b29c5000ce41d4997204dd915ff5ea41dc5dfa013df636e1197d9c3b0cc6835089e9c7</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.owasp.encoder/encoder@1.3.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://www.owasp.org/index.php/OWASP_Java_Encoder_Project/encoder</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/owasp/owasp-java-encoder/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://github.com/OWASP/owasp-java-encoder/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/owasp/owasp-java-encoder/encoder</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-slf4j2-impl@2.25.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-slf4j2-impl</name>
      <version>2.25.1</version>
      <description>SLF4J 2 provider (binding) for the Apache Log4j API.
    It forwards SLF4J 2 calls to the Log4j API.
    This effectively allows using Log4j as an implementation of SLF4J 2.
    (Refer to the `log4j-to-slf4j` artifact for forwarding the Log4j API to SLF4J.)</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">5fb0cc7936e1667df14ed96146945f05</hash>
        <hash alg="SHA-1">a5ed4c3e2effa2575a4dde13f9101bfe23ccfb1a</hash>
        <hash alg="SHA-256">7db3c92b2d7245fa56b2e015732a7fcae0039e6b8a207969fd9472d1e83e9ddb</hash>
        <hash alg="SHA-512">59d85156f68b142b6c9edd41b5909d8d9a004769b284ed7b7774e2914524e0a5f844d863e3e69e17adabef8617e22c4cb7602b5435e2d495c4d2022ffa772e69</hash>
        <hash alg="SHA-384">c169d9839d0044d468ed06c61c0a5bb1dc0ffc5c05129950e90b9214b05e65f3d0fbc2f3ababdbff338e853b6892718d</hash>
        <hash alg="SHA3-384">31b5b30ded97c02f99715f5d7700bb2f42f9d640e79fef01da3e4562acd65cbf67a6c08efe7def61103de75afb47c1fa</hash>
        <hash alg="SHA3-256">1c92991b3e705b5aa9978fb544a374100932476eb7fff46531c9cd049c88b49f</hash>
        <hash alg="SHA3-512">9b0d494189034d2561b6e909f7246ccae6faa35d4041e04168983f2b05c3f8ded84b7edffa08d2dadadbbc2b5e2f3c9f84c7ae4addbe16bf108304111e2af02c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-slf4j2-impl@2.25.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://logging.apache.org/log4j/2.x/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/logging-log4j2/actions</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/apache/logging-log4j2/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/logging-log4j2</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.25.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-api</name>
      <version>2.25.1</version>
      <description>The logging API of the Log4j project.
    Library and application code can log through this API.
    It contains a simple built-in implementation (`SimpleLogger`) for trivial use cases.
    Production applications are recommended to use Log4j API in combination with a fully-fledged implementation, such as Log4j Core.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">efcc09f4d0eca5b7aa983f38caa08a8d</hash>
        <hash alg="SHA-1">c7acbbd6f110cd1457c628da46245e355b1ee57a</hash>
        <hash alg="SHA-256">20b9c77c0a9e54d1063a39e551dcaf98c7d8e7a4994648f84d0b9e14c71f7215</hash>
        <hash alg="SHA-512">0422500e4522ad2752f363758ff0abea55b73195cf38784328b9ed17f4b3356546923d6b7c67de4a6bbb8d54e42063e6df2f4548eb6136da99a0452437b20aae</hash>
        <hash alg="SHA-384">6ef565b0557127fa87aafaea4534c2a8fbb133f8e3533997331350184e4a8831924005727fcd30cbfdc74b07ae17e93b</hash>
        <hash alg="SHA3-384">461685e33a6a19d084bcf8fd5f8f8975429518473bc105bf4115ef2a728d5b8042654c3fa6bc217267be385e8c44b96a</hash>
        <hash alg="SHA3-256">c00b35a0112be5c33a759d39862e5f76aa992bffb5b7033a3be169d4b4ec7550</hash>
        <hash alg="SHA3-512">95a8eaef0c3b57c0ce194a84c9954eaac5ce9296c3a4c57d3b13aadddfaa36d1e0529b72efb6a8c69f9c76c7395172d2ce5ae9a7f4b902b47982d3371ea826db</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-api@2.25.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://logging.apache.org/log4j/2.x/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/logging-log4j2/actions</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/apache/logging-log4j2/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/logging-log4j2</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.25.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-core</name>
      <version>2.25.1</version>
      <description>A versatile, industrial-grade, and reference implementation of the Log4j API.
    It bundles a rich set of components to assist various use cases:
    Appenders targeting files, network sockets, databases, SMTP servers;
    Layouts that can render CSV, HTML, JSON, Syslog, etc. formatted outputs;
    Filters that can be configured using log event rates, regular expressions, scripts, time, etc.
    It contains several extension points to introduce custom components, if needed.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">ec95ac453934a56229ace160e28aa791</hash>
        <hash alg="SHA-1">32b3a228d5a30a4528b6c7354fe6cff9524d89e7</hash>
        <hash alg="SHA-256">78c232747855464b182f0abf78a99a22c88d4d270ff585343dab55576d7420e2</hash>
        <hash alg="SHA-512">f980579477a00759882e43ec60842a3f79264d16cb4823de271444a2919e2e8733fedb46cebb30e809824ba131ddc10bef32106cc1afa3057659a29a24937479</hash>
        <hash alg="SHA-384">315e67f907336d270474f093848798eef8d4c4f54774f90c6a8d065e7adb2f3e3ed35dacb5f1d83c72a558dee9085370</hash>
        <hash alg="SHA3-384">460c886d36b4531e1ff85b5e9f4d213afd49eddd1e1d7fdd4382b8b773835aa93a8bc0068e68192dcbe9327fb29fc10b</hash>
        <hash alg="SHA3-256">e96193dbf004e7c140952ddc58dcbbafd038b9994dce87203b5f4ea4df9012ec</hash>
        <hash alg="SHA3-512">32c56681fdfceaf68209432abbf1cefb434809855c66f9fb2a980238585c62122d270a360b2c4b3850ff6080fe810445809d5b7c164c81667fdeb495b5f36392</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-core@2.25.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://logging.apache.org/log4j/2.x/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/logging-log4j2/actions</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/apache/logging-log4j2/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/logging-log4j2</url>
        </reference>
      </externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.jena/jena-fuseki-main@5.5.0?type=jar">
      <dependency ref="pkg:maven/org.apache.jena/jena-fuseki-core@5.5.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.jena/jena-fuseki-access@5.5.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.jena/jena-cmds@5.5.0?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-servlet@12.0.23?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-servlets@12.0.23?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-security@12.0.23?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-xml@12.0.23?type=jar"/>
      <dependency ref="pkg:maven/org.apache.shiro/shiro-core@2.0.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.shiro/shiro-web@2.0.5?classifier=jakarta&amp;type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-slf4j2-impl@2.25.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.jena/jena-fuseki-core@5.5.0?type=jar">
      <dependency ref="pkg:maven/org.apache.jena/jena-rdfpatch@5.5.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.jena/jena-shacl@5.5.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.jena/jena-shex@5.5.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.jena/jena-tdb1@5.5.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.jena/jena-tdb2@5.5.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.jena/jena-rdfconnection@5.5.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-fileupload2-jakarta-servlet6@2.0.0-M4?type=jar"/>
      <dependency ref="pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
      <dependency ref="pkg:maven/io.micrometer/micrometer-core@1.15.1?type=jar"/>
      <dependency ref="pkg:maven/io.micrometer/micrometer-registry-prometheus@1.15.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.jena/jena-rdfpatch@5.5.0?type=jar">
      <dependency ref="pkg:maven/org.apache.jena/jena-arq@5.5.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.jena/jena-arq@5.5.0?type=jar">
      <dependency ref="pkg:maven/org.apache.jena/jena-core@5.5.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.gson/gson@2.13.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/jcl-over-slf4j@2.0.17?type=jar"/>
      <dependency ref="pkg:maven/com.apicatalog/titanium-json-ld@1.6.0?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish/jakarta.json@2.0.1?type=jar"/>
      <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@4.31.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.thrift/libthrift@0.22.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.jena/jena-core@5.5.0?type=jar">
      <dependency ref="pkg:maven/org.apache.jena/jena-base@5.5.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.jena/jena-iri3986@5.5.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.jena/jena-iri@5.5.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.jena/jena-langtag@5.5.0?type=jar"/>
      <dependency ref="pkg:maven/org.roaringbitmap/RoaringBitmap@1.3.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.jena/jena-base@5.5.0?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-csv@1.14.0?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.19.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.27.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar"/>
      <dependency ref="pkg:maven/com.github.ben-manes.caffeine/caffeine@3.2.2?type=jar"/>
      <dependency ref="pkg:maven/com.github.andrewoma.dexx/collection@0.7?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-csv@1.14.0?type=jar">
      <dependency ref="pkg:maven/commons-io/commons-io@2.19.0?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.18.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-io/commons-io@2.19.0?type=jar"/>
    <dependency ref="pkg:maven/commons-codec/commons-codec@1.18.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.27.1?type=jar">
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.18.0?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.19.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar"/>
    <dependency ref="pkg:maven/com.github.ben-manes.caffeine/caffeine@3.2.2?type=jar">
      <dependency ref="pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"/>
    <dependency ref="pkg:maven/com.github.andrewoma.dexx/collection@0.7?type=jar"/>
    <dependency ref="pkg:maven/org.apache.jena/jena-iri3986@5.5.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.jena/jena-iri@5.5.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.jena/jena-langtag@5.5.0?type=jar"/>
    <dependency ref="pkg:maven/org.roaringbitmap/RoaringBitmap@1.3.0?type=jar"/>
    <dependency ref="pkg:maven/com.google.code.gson/gson@2.13.1?type=jar">
      <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.38.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.38.0?type=jar"/>
    <dependency ref="pkg:maven/org.slf4j/jcl-over-slf4j@2.0.17?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.apicatalog/titanium-json-ld@1.6.0?type=jar">
      <dependency ref="pkg:maven/com.apicatalog/titanium-jcs@1.0.0?type=jar"/>
      <dependency ref="pkg:maven/com.apicatalog/titanium-rdf-api@1.0.0?type=jar"/>
      <dependency ref="pkg:maven/com.apicatalog/titanium-rdf-n-quads@1.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.apicatalog/titanium-jcs@1.0.0?type=jar"/>
    <dependency ref="pkg:maven/com.apicatalog/titanium-rdf-api@1.0.0?type=jar"/>
    <dependency ref="pkg:maven/com.apicatalog/titanium-rdf-n-quads@1.0.0?type=jar">
      <dependency ref="pkg:maven/com.apicatalog/titanium-rdf-api@1.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.glassfish/jakarta.json@2.0.1?type=jar"/>
    <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@4.31.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.thrift/libthrift@0.22.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.jena/jena-shacl@5.5.0?type=jar">
      <dependency ref="pkg:maven/org.apache.jena/jena-arq@5.5.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.jena/jena-shex@5.5.0?type=jar">
      <dependency ref="pkg:maven/org.apache.jena/jena-arq@5.5.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.jena/jena-tdb1@5.5.0?type=jar">
      <dependency ref="pkg:maven/org.apache.jena/jena-arq@5.5.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.jena/jena-tdb2@5.5.0?type=jar">
      <dependency ref="pkg:maven/org.apache.jena/jena-dboe-storage@5.5.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.jena/jena-dboe-storage@5.5.0?type=jar">
      <dependency ref="pkg:maven/org.apache.jena/jena-dboe-trans-data@5.5.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.jena/jena-dboe-trans-data@5.5.0?type=jar">
      <dependency ref="pkg:maven/org.apache.jena/jena-dboe-transaction@5.5.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.jena/jena-dboe-index@5.5.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.jena/jena-dboe-transaction@5.5.0?type=jar">
      <dependency ref="pkg:maven/org.apache.jena/jena-dboe-base@5.5.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.jena/jena-dboe-base@5.5.0?type=jar">
      <dependency ref="pkg:maven/org.apache.jena/jena-arq@5.5.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.jena/jena-dboe-index@5.5.0?type=jar">
      <dependency ref="pkg:maven/org.apache.jena/jena-dboe-base@5.5.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.jena/jena-rdfconnection@5.5.0?type=jar">
      <dependency ref="pkg:maven/org.apache.jena/jena-arq@5.5.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.commons/commons-fileupload2-jakarta-servlet6@2.0.0-M4?type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-fileupload2-core@2.0.0-M4?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.19.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.commons/commons-fileupload2-core@2.0.0-M4?type=jar">
      <dependency ref="pkg:maven/commons-io/commons-io@2.19.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar"/>
    <dependency ref="pkg:maven/io.micrometer/micrometer-core@1.15.1?type=jar">
      <dependency ref="pkg:maven/io.micrometer/micrometer-commons@1.15.1?type=jar"/>
      <dependency ref="pkg:maven/io.micrometer/micrometer-observation@1.15.1?type=jar"/>
      <dependency ref="pkg:maven/org.hdrhistogram/HdrHistogram@2.2.2?type=jar"/>
      <dependency ref="pkg:maven/org.latencyutils/LatencyUtils@2.0.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.micrometer/micrometer-commons@1.15.1?type=jar"/>
    <dependency ref="pkg:maven/io.micrometer/micrometer-observation@1.15.1?type=jar">
      <dependency ref="pkg:maven/io.micrometer/micrometer-commons@1.15.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.hdrhistogram/HdrHistogram@2.2.2?type=jar"/>
    <dependency ref="pkg:maven/org.latencyutils/LatencyUtils@2.0.3?type=jar"/>
    <dependency ref="pkg:maven/io.micrometer/micrometer-registry-prometheus@1.15.1?type=jar">
      <dependency ref="pkg:maven/io.micrometer/micrometer-core@1.15.1?type=jar"/>
      <dependency ref="pkg:maven/io.prometheus/prometheus-metrics-core@1.3.8?type=jar"/>
      <dependency ref="pkg:maven/io.prometheus/prometheus-metrics-tracer-common@1.3.8?type=jar"/>
      <dependency ref="pkg:maven/io.prometheus/prometheus-metrics-exposition-formats@1.3.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.prometheus/prometheus-metrics-core@1.3.8?type=jar">
      <dependency ref="pkg:maven/io.prometheus/prometheus-metrics-model@1.3.8?type=jar"/>
      <dependency ref="pkg:maven/io.prometheus/prometheus-metrics-config@1.3.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.prometheus/prometheus-metrics-model@1.3.8?type=jar"/>
    <dependency ref="pkg:maven/io.prometheus/prometheus-metrics-config@1.3.8?type=jar"/>
    <dependency ref="pkg:maven/io.prometheus/prometheus-metrics-tracer-common@1.3.8?type=jar"/>
    <dependency ref="pkg:maven/io.prometheus/prometheus-metrics-exposition-formats@1.3.8?type=jar">
      <dependency ref="pkg:maven/io.prometheus/prometheus-metrics-exposition-formats-no-protobuf@1.3.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.prometheus/prometheus-metrics-exposition-formats-no-protobuf@1.3.8?type=jar">
      <dependency ref="pkg:maven/io.prometheus/prometheus-metrics-exposition-textformats@1.3.8?type=jar"/>
      <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@4.31.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.prometheus/prometheus-metrics-exposition-textformats@1.3.8?type=jar">
      <dependency ref="pkg:maven/io.prometheus/prometheus-metrics-model@1.3.8?type=jar"/>
      <dependency ref="pkg:maven/io.prometheus/prometheus-metrics-config@1.3.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.jena/jena-fuseki-access@5.5.0?type=jar">
      <dependency ref="pkg:maven/org.apache.jena/jena-fuseki-core@5.5.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.jena/jena-cmds@5.5.0?type=jar">
      <dependency ref="pkg:maven/org.apache.jena/jena-core@5.5.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.jena/jena-arq@5.5.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.jena/jena-rdfpatch@5.5.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.jena/jena-shacl@5.5.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.jena/jena-shex@5.5.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.jena/jena-tdb1@5.5.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.jena/jena-tdb2@5.5.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.jena/jena-iri3986@5.5.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.jena/jena-langtag@5.5.0?type=jar"/>
      <dependency ref="pkg:maven/commons-cli/commons-cli@1.9.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-cli/commons-cli@1.9.0?type=jar"/>
    <dependency ref="pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-servlet@12.0.23?type=jar">
      <dependency ref="pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-security@12.0.23?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-server@12.0.23?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-session@12.0.23?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.jetty/jetty-security@12.0.23?type=jar">
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-server@12.0.23?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.jetty/jetty-server@12.0.23?type=jar">
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-http@12.0.23?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-io@12.0.23?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.jetty/jetty-http@12.0.23?type=jar">
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-io@12.0.23?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-util@12.0.23?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.jetty/jetty-io@12.0.23?type=jar">
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-util@12.0.23?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.jetty/jetty-util@12.0.23?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.jetty/jetty-session@12.0.23?type=jar">
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-server@12.0.23?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-servlets@12.0.23?type=jar">
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-http@12.0.23?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-io@12.0.23?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-util@12.0.23?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.jetty/jetty-xml@12.0.23?type=jar">
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-util@12.0.23?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.shiro/shiro-core@2.0.5?type=jar">
      <dependency ref="pkg:maven/org.apache.shiro/shiro-lang@2.0.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.shiro/shiro-cache@2.0.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.shiro/shiro-crypto-hash@2.0.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.shiro.crypto/shiro-hashes-argon2@2.0.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.shiro.crypto/shiro-hashes-bcrypt@2.0.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.shiro/shiro-crypto-cipher@2.0.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.shiro/shiro-config-core@2.0.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.shiro/shiro-config-ogdl@2.0.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.shiro/shiro-event@2.0.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.shiro/shiro-lang@2.0.5?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.shiro/shiro-cache@2.0.5?type=jar">
      <dependency ref="pkg:maven/org.apache.shiro/shiro-lang@2.0.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.shiro/shiro-crypto-hash@2.0.5?type=jar">
      <dependency ref="pkg:maven/org.apache.shiro/shiro-lang@2.0.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.shiro/shiro-crypto-core@2.0.5?type=jar"/>
      <dependency ref="pkg:maven/org.bouncycastle/bcprov-jdk18on@1.81?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.shiro/shiro-crypto-core@2.0.5?type=jar">
      <dependency ref="pkg:maven/org.apache.shiro/shiro-lang@2.0.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.bouncycastle/bcprov-jdk18on@1.81?type=jar"/>
    <dependency ref="pkg:maven/org.apache.shiro.crypto/shiro-hashes-argon2@2.0.5?type=jar">
      <dependency ref="pkg:maven/org.apache.shiro/shiro-crypto-hash@2.0.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.shiro.crypto/shiro-hashes-bcrypt@2.0.5?type=jar">
      <dependency ref="pkg:maven/org.apache.shiro/shiro-crypto-hash@2.0.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.shiro/shiro-crypto-cipher@2.0.5?type=jar">
      <dependency ref="pkg:maven/org.apache.shiro/shiro-lang@2.0.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.shiro/shiro-crypto-core@2.0.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.shiro/shiro-config-core@2.0.5?type=jar">
      <dependency ref="pkg:maven/org.apache.shiro/shiro-lang@2.0.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.shiro/shiro-config-ogdl@2.0.5?type=jar">
      <dependency ref="pkg:maven/org.apache.shiro/shiro-lang@2.0.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.shiro/shiro-config-core@2.0.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.shiro/shiro-event@2.0.5?type=jar"/>
      <dependency ref="pkg:maven/commons-beanutils/commons-beanutils@1.11.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.shiro/shiro-event@2.0.5?type=jar">
      <dependency ref="pkg:maven/org.apache.shiro/shiro-lang@2.0.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-beanutils/commons-beanutils@1.11.0?type=jar">
      <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.shiro/shiro-web@2.0.5?classifier=jakarta&amp;type=jar">
      <dependency ref="pkg:maven/org.owasp.encoder/encoder@1.3.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.owasp.encoder/encoder@1.3.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-slf4j2-impl@2.25.1?type=jar">
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.25.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.25.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.25.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.25.1?type=jar">
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.25.1?type=jar"/>
    </dependency>
  </dependencies>
</bom>
