<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:6f247485-ba05-3bee-af74-acf2c59bf747" version="1" xmlns="http://cyclonedx.org/schema/bom/1.6">
  <metadata>
    <lifecycles>
      <lifecycle>
        <phase>build</phase>
      </lifecycle>
    </lifecycles>
    <tools>
      <components>
        <component type="library">
          <author>OWASP Foundation</author>
          <group>org.cyclonedx</group>
          <name>cyclonedx-maven-plugin</name>
          <version>2.9.1</version>
          <description>CycloneDX Maven plugin</description>
          <hashes>
            <hash alg="MD5">9c7a565cf28cce58557d0c621c5ea4b1</hash>
            <hash alg="SHA-1">be882d5a22050bfa9d19090b1420c188617d0e1c</hash>
            <hash alg="SHA-256">698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249</hash>
            <hash alg="SHA-512">c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0</hash>
            <hash alg="SHA-384">d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb</hash>
            <hash alg="SHA3-384">80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f</hash>
            <hash alg="SHA3-256">142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699</hash>
            <hash alg="SHA3-512">af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b</hash>
          </hashes>
        </component>
      </components>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-couchdb@2.25.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-couchdb</name>
      <version>2.25.1</version>
      <description>CouchDB appender for Log4j.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-couchdb@2.25.1?type=jar</purl>
      <externalReferences>
        <reference type="vulnerability-assertion">
          <url>https://logging.apache.org/cyclonedx/vdr.xml</url>
        </reference>
        <reference type="website">
          <url>https://logging.apache.org/log4j/2.x/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/logging-log4j2/actions</url>
        </reference>
        <reference type="distribution">
          <url>https://logging.apache.org/log4j/2.x/download.html</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/apache/logging-log4j2/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/logging-log4j2</url>
        </reference>
      </externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
      <property name="cdx:reproducible">enabled</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.25.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-core</name>
      <version>2.25.1</version>
      <description>A versatile, industrial-grade, and reference implementation of the Log4j API.
    It bundles a rich set of components to assist various use cases:
    Appenders targeting files, network sockets, databases, SMTP servers;
    Layouts that can render CSV, HTML, JSON, Syslog, etc. formatted outputs;
    Filters that can be configured using log event rates, regular expressions, scripts, time, etc.
    It contains several extension points to introduce custom components, if needed.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ec95ac453934a56229ace160e28aa791</hash>
        <hash alg="SHA-1">32b3a228d5a30a4528b6c7354fe6cff9524d89e7</hash>
        <hash alg="SHA-256">78c232747855464b182f0abf78a99a22c88d4d270ff585343dab55576d7420e2</hash>
        <hash alg="SHA-512">f980579477a00759882e43ec60842a3f79264d16cb4823de271444a2919e2e8733fedb46cebb30e809824ba131ddc10bef32106cc1afa3057659a29a24937479</hash>
        <hash alg="SHA-384">315e67f907336d270474f093848798eef8d4c4f54774f90c6a8d065e7adb2f3e3ed35dacb5f1d83c72a558dee9085370</hash>
        <hash alg="SHA3-384">460c886d36b4531e1ff85b5e9f4d213afd49eddd1e1d7fdd4382b8b773835aa93a8bc0068e68192dcbe9327fb29fc10b</hash>
        <hash alg="SHA3-256">e96193dbf004e7c140952ddc58dcbbafd038b9994dce87203b5f4ea4df9012ec</hash>
        <hash alg="SHA3-512">32c56681fdfceaf68209432abbf1cefb434809855c66f9fb2a980238585c62122d270a360b2c4b3850ff6080fe810445809d5b7c164c81667fdeb495b5f36392</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-core@2.25.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://logging.apache.org/log4j/2.x/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/logging-log4j2/actions</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/apache/logging-log4j2/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/logging-log4j2</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.25.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-api</name>
      <version>2.25.1</version>
      <description>The logging API of the Log4j project.
    Library and application code can log through this API.
    It contains a simple built-in implementation (`SimpleLogger`) for trivial use cases.
    Production applications are recommended to use Log4j API in combination with a fully-fledged implementation, such as Log4j Core.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">efcc09f4d0eca5b7aa983f38caa08a8d</hash>
        <hash alg="SHA-1">c7acbbd6f110cd1457c628da46245e355b1ee57a</hash>
        <hash alg="SHA-256">20b9c77c0a9e54d1063a39e551dcaf98c7d8e7a4994648f84d0b9e14c71f7215</hash>
        <hash alg="SHA-512">0422500e4522ad2752f363758ff0abea55b73195cf38784328b9ed17f4b3356546923d6b7c67de4a6bbb8d54e42063e6df2f4548eb6136da99a0452437b20aae</hash>
        <hash alg="SHA-384">6ef565b0557127fa87aafaea4534c2a8fbb133f8e3533997331350184e4a8831924005727fcd30cbfdc74b07ae17e93b</hash>
        <hash alg="SHA3-384">461685e33a6a19d084bcf8fd5f8f8975429518473bc105bf4115ef2a728d5b8042654c3fa6bc217267be385e8c44b96a</hash>
        <hash alg="SHA3-256">c00b35a0112be5c33a759d39862e5f76aa992bffb5b7033a3be169d4b4ec7550</hash>
        <hash alg="SHA3-512">95a8eaef0c3b57c0ce194a84c9954eaac5ce9296c3a4c57d3b13aadddfaa36d1e0529b72efb6a8c69f9c76c7395172d2ce5ae9a7f4b902b47982d3371ea826db</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-api@2.25.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://logging.apache.org/log4j/2.x/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/logging-log4j2/actions</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/apache/logging-log4j2/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/logging-log4j2</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.lightcouch/lightcouch@0.2.0?type=jar">
      <group>org.lightcouch</group>
      <name>lightcouch</name>
      <version>0.2.0</version>
      <description>CouchDB Java API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4d57ffa83f5e7bd0111e0129f379243b</hash>
        <hash alg="SHA-1">fa50dd777e5754fe6e4c12fdd4edaf9ac2be5210</hash>
        <hash alg="SHA-256">a96c4c39de494cac5c77c3f03515ad52063789fb4a1de965209b2a889b666300</hash>
        <hash alg="SHA-512">9e1c5ce26f462da468612a1c20a951690710b2c3cf89bef8e1466296d0a7160383e31369a5f4a5e5aae90cd1598b99cf2ca3964c6a8f83c1d58ca47ceb4b28cf</hash>
        <hash alg="SHA-384">82719bf5dfc39d6964abaeee9ab3dda6a0194979445e96fca43abc027ea043d1490b6e33fff16f2a1f3be13217ab7047</hash>
        <hash alg="SHA3-384">2cdba399287b772190e638996f8c6c182a83b4310f8d0b89b6b71e7d3ca0b52844eef27251cc467314655d7f1f85c171</hash>
        <hash alg="SHA3-256">2e37e13f51cc841f825686cb33f8ea0f1c5f713d657d9563c46cd2aad0d5cdd2</hash>
        <hash alg="SHA3-512">38c455d2420481c8f2041a5d5df862d80acd7b9912d5fcbfdd1a672b8a70240bc795de3b1dc00a21a7c1b386d0a46fcc362ac6856e47594c1154af2bf3fb86e7</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.lightcouch/lightcouch@0.2.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.lightcouch.org</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://lightcouch@github.com/lightcouch/LightCouch.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.httpcomponents</group>
      <name>httpclient</name>
      <version>4.5.14</version>
      <description>Apache HttpComponents Client</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2cb357c4b763f47e58af6cad47df6ba3</hash>
        <hash alg="SHA-1">1194890e6f56ec29177673f2f12d0b8e627dec98</hash>
        <hash alg="SHA-256">c8bc7e1c51a6d4ce72f40d2ebbabf1c4b68bfe76e732104b04381b493478e9d6</hash>
        <hash alg="SHA-512">a084ef30fb0a2a25397d8fab439fe68f67e294bf53153e2e1355b8df92886d40fe6abe35dc84f014245f7158e92641bcbd98019b4fbbd9e5a0db495b160b4ced</hash>
        <hash alg="SHA-384">c8ccaa1fa8ba7c421413e3c30375bd9c31284e837c476fd831e18043ad4187e92166f49554123108891241bed674b95d</hash>
        <hash alg="SHA3-384">9a17dfcf12b2af3a9b006ec369f9bc78ba322348bf1a01146e0d4f3fec2bed6cbe8b2193fac5b4d5a0c3036c06477510</hash>
        <hash alg="SHA3-256">48f0a61b691e22dec9d6db8e0b58be4ca17a42a2846c82f0875de21f72bb0faa</hash>
        <hash alg="SHA3-512">4ad2c9adc761b7e813330f0dcad3f9978702896c7d0cbf81f60a472d550e320b1527be425ba597c8c9352d587e32e1d46ceb4c73e99c70a6190df4c699a7c2a9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://hc.apache.org/httpcomponents-client-ga</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://issues.apache.org/jira/browse/HTTPCLIENT</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/httpcomponents-client/tree/4.5.14/httpclient</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.httpcomponents</group>
      <name>httpcore</name>
      <version>4.4.16</version>
      <description>Apache HttpComponents Core (blocking I/O)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">28d2cd9bf8789fd2ec774fb88436ebd1</hash>
        <hash alg="SHA-1">51cf043c87253c9f58b539c9f7e44c8894223850</hash>
        <hash alg="SHA-256">6c9b3dd142a09dc468e23ad39aad6f75a0f2b85125104469f026e52a474e464f</hash>
        <hash alg="SHA-512">168026436a6bcf5e96c0c59606638abbdc30de4b405ae55afde70fdf2895e267a3d48bba6bdadc5a89f38e31da3d9a9dc91e1cab7ea76f5e04322cf1ec63b838</hash>
        <hash alg="SHA-384">ba9ceaee1a37ca3201d6a1315ecb0327b495489efd0baa155c219c475df8d3eb69fe77ab0026563db406497626da6562</hash>
        <hash alg="SHA3-384">b9dc44dcc7cc86d5036f26d54c4003a2d72808ae7b07a0808bb53505c6d4281b5ad213eb1f3d0fef1113dec57cb0dfe1</hash>
        <hash alg="SHA3-256">fd8ab51846476c6c18822151c9ec07b39a9633010b5d20ea937fc6910407bc64</hash>
        <hash alg="SHA3-512">b42fa528242981a9d70e4f68ab75a24292df5112c44c21b6f18cb9201ce747885ba1d4dc69bc3d14d0da46a6c2638f937c11bc45749abeb55dc89ddada90cdda</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://hc.apache.org/httpcomponents-core-ga</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://issues.apache.org/jira/browse/HTTPCORE</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/httpcomponents-core/tree/4.4.16/httpcore</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-logging/commons-logging@1.3.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-logging</group>
      <name>commons-logging</name>
      <version>1.3.5</version>
      <description>Apache Commons Logging is a thin adapter allowing configurable bridging to other,
    well-known logging systems.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9ca067b073153c86c2da350c0f2cdf70</hash>
        <hash alg="SHA-1">a3fcc5d3c29b2b03433aa2d2f2d2c1b1638924a1</hash>
        <hash alg="SHA-256">6d7a744e4027649fbb50895df9497d109f98c766a637062fe8d2eabbb3140ba4</hash>
        <hash alg="SHA-512">b6d66333cec2746cc410ca3b27099c4647618a1855783bac064c75eec95c643dab184010e5c875aca3c7fa827aed144488a1820604a043bbff93116de509f915</hash>
        <hash alg="SHA-384">bbfc26f81852dfe8df41b9cd1da6e755b223c51e824898490f96e2aaefb42e5484408f8a245b244bfe4e08170295ee72</hash>
        <hash alg="SHA3-384">5e17863103757beb582b316f90a02f57f0ea7702b2146d6b318ab0f1105a3e0190dd1dc7b031550a68c047cadd23c114</hash>
        <hash alg="SHA3-256">c01a09df81fae75d398ef61b168c8f7d70291b480961d392c59bdd1498c254cb</hash>
        <hash alg="SHA3-512">1ce4f4219542c8f1f0b52f9d2d916d8b11136f7a800bbb24ca93a28a800121e7c48af410076213d05dd715b37b110aa59a7a9609415e0cc5daed89bb13fc4668</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/commons-logging/commons-logging@1.3.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-logging/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-parent/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/LOGGING</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/commons-logging</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-codec/commons-codec@1.18.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-codec</group>
      <name>commons-codec</name>
      <version>1.18.0</version>
      <description>The Apache Commons Codec component contains encoders and decoders for
     formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these
     widely used encoders and decoders, the codec package also maintains a
     collection of phonetic encoding utilities.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2abf189633424b9292fd57a3192c0ed5</hash>
        <hash alg="SHA-1">ee45d1cf6ec2cc2b809ff04b4dc7aec858e0df8f</hash>
        <hash alg="SHA-256">ba005f304cef92a3dede24a38ad5ac9b8afccf0d8f75839d6c1338634cf7f6e4</hash>
        <hash alg="SHA-512">4d974c2203dd6780da6e50ec1c7d8ff727f9ed55fba706fdc50b9484fc5da5e03b67bc6ad2f0d9ae74f823ecce04a40c513bbabd8bf9e91ac8fec04cd3519ffa</hash>
        <hash alg="SHA-384">75d428b434c25041068005fd48f720ddfec8a9fc044b8df53a668828894e9ad542b92601a224d618200e3953ee3c8966</hash>
        <hash alg="SHA3-384">b0d03e9b6b548ec3b7e3c0ddc644cf40d36203606fd69be3fccc72c86b0e048bb6c8e7bd74afb77e371e839bce7cc6aa</hash>
        <hash alg="SHA3-256">c33f900364c7ba15976e262ac26dbe4ece516bed72278da0e6c636d2c7ffabe6</hash>
        <hash alg="SHA3-512">fefe6c1c33f63b9a873a522f8b1f605e4197ed9fe849af650ad8791503cb58cf3d4facafe4f46e070ea11ccfbaec1084e11294154531a07d8ec18ea9c40d9769</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/commons-codec/commons-codec@1.18.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-codec/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-parent/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CODEC</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/commons-codec</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.code.gson/gson@2.8.2?type=jar">
      <group>com.google.code.gson</group>
      <name>gson</name>
      <version>2.8.2</version>
      <description>Gson JSON library</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2330bde3467e7cfec44d38e74f27dab8</hash>
        <hash alg="SHA-1">3edcfe49d2c6053a70a2a47e4e1c2f94998a49cf</hash>
        <hash alg="SHA-256">b7134929f7cc7c04021ec1cc27ef63ab907e410cf0588e397b8851181eb91092</hash>
        <hash alg="SHA-512">c0c6dc5d609950a6ee3c7e5ea493da0e6906a18f38fc5a23cc792c1e09e0e892344b4ae2dd35879d6101533e485784e1eca5052e0aef44a724ca8a8ee4d73f04</hash>
        <hash alg="SHA-384">a13aa32f5ff53344b9e03b5fe0e0bd7a71455389f7b6c967a226a6f7c59607820fc640975965131fba52673cb702bb50</hash>
        <hash alg="SHA3-384">b147dd1dac004141b3695a794d6d19e9f1d9d70ca3f527e8723f0e769c1e031c20c903b41ded8638682a7f4e0b0ffabc</hash>
        <hash alg="SHA3-256">7477669136592b13d5720aacd77f33df85f8afa11d1de540c8c924bc7a7400da</hash>
        <hash alg="SHA3-512">04f2699f97fd1ca0cc3bcdbe3871f71d3c71592a51c002e607b73a866f564ff3586d5353340f9ad6fde27afe7ff9d7683e55a3be776e7c99f708f4754114cc54</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.code.gson/gson@2.8.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/google/gson/gson</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/google/gson/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/google/gson/gson/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/biz.aQute.bnd/biz.aQute.bnd.annotation@7.1.0?type=jar">
      <publisher>Bndtools</publisher>
      <group>biz.aQute.bnd</group>
      <name>biz.aQute.bnd.annotation</name>
      <version>7.1.0</version>
      <description>bnd Annotations Library</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">664c398da304527f42ab13a0f8036025</hash>
        <hash alg="SHA-1">2f2be18c936d08cf46ea6cfa0043f34afdf38705</hash>
        <hash alg="SHA-256">f69c2de3a695c113d125ac8053c92a680a3ce9d02ea25845095cf2d4626a7663</hash>
        <hash alg="SHA-512">b29e68403ff0b0cd0efacf23a466390b922ef464f79b49c25518864839a1cd86329ace0a7214c6f0ce99056019d857301994bbb71dea0c35dd94511edd789ca4</hash>
        <hash alg="SHA-384">71a5290b7cde52d3cae668492cfb368c6955a176dd7442a93e0f26f2258806c56b45869436ad9f336ad3f7a316b45838</hash>
        <hash alg="SHA3-384">84c2757373413bfaedba04dc84329bf01b26c02a417d87674842f147a05e4001ed154efecc0f43d4473b8a7ba5175296</hash>
        <hash alg="SHA3-256">f3cd557e7b9b6f8996ea1006cce7d4b007fbd3b1fc27b62dacdece5e38988d9e</hash>
        <hash alg="SHA3-512">2059f5cb86d9d1b71479d2217107584fb0ff880f064a2cae0dd916d840e660314aaa746d4e6451c15ae56a500bc4e18191b40662ee4eda52aa3b0c33ea82c94b</hash>
      </hashes>
      <licenses>
        <license>
          <name>(Apache-2.0 OR EPL-2.0)</name>
          <url>https://opensource.org/licenses/Apache-2.0,https://opensource.org/licenses/EPL-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/biz.aQute.bnd/biz.aQute.bnd.annotation@7.1.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://bnd.bndtools.org/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/bndtools/bnd</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.osgi/org.osgi.resource@1.0.0?type=jar">
      <publisher>OSGi Alliance</publisher>
      <group>org.osgi</group>
      <name>org.osgi.resource</name>
      <version>1.0.0</version>
      <description>OSGi Companion Code for org.osgi.resource Version 1.0.0.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7d857a4203e2996fab0cf070133e43df</hash>
        <hash alg="SHA-1">343c88949132984b3f2d4175a72c40b77dc65619</hash>
        <hash alg="SHA-256">81fc50f1f1d38a4af28e131907d4afe213249aab05060484edca0e60c4af9b4a</hash>
        <hash alg="SHA-512">4e798790856f83f50832db80bfab64dfceeff1c509d7dde43e74a9f9192ea7a7d5ea77b9b1e81291fa6ba3dcef5ab8fa791ca8093a72a08d7ca6f6499e13e506</hash>
        <hash alg="SHA-384">73038c395166552b64b6b5469bd8056584f48d19b5762df2e8bd2770405ed8f6071e397a87d9a7ed39f8c2e0e8ab85b2</hash>
        <hash alg="SHA3-384">e06c8a460b3bf06d6cb22237aeffa6afd2eadd9461096c67b768a14603ad8aaa88f891d03cf0a273a99d86906c1c8eb3</hash>
        <hash alg="SHA3-256">1097cfd20e80ce368fd828a23ad7c32a202cebd92106f6ebb88ba55ca74349ee</hash>
        <hash alg="SHA3-512">d7b710e1e0484badb875f326c602c90df6705df48b0f057320919a5255d3ecbddd7053eabc68787480a70aebd7e553e9f51728112e1fa0846c849366b7e8d69b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.osgi/org.osgi.resource@1.0.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.osgi.org/</url>
        </reference>
        <reference type="vcs">
          <url>https://osgi.org/git/build.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.osgi/org.osgi.service.serviceloader@1.0.0?type=jar">
      <publisher>OSGi Alliance</publisher>
      <group>org.osgi</group>
      <name>org.osgi.service.serviceloader</name>
      <version>1.0.0</version>
      <description>OSGi Companion Code for org.osgi.service.serviceloader Version 1.0.0.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4943f0102a6d893c4dd77f369a5f0537</hash>
        <hash alg="SHA-1">3728ff37909c6a3c1870b3e851342d9f2bd3cc63</hash>
        <hash alg="SHA-256">8f876ce2a9aa4e95b1f1952950255103e2487425050a654f3285447ba601c154</hash>
        <hash alg="SHA-512">a7def4cb7a8ed992645faa80a780e0b30bd39c1587b5bcb65fe170d10842d0d880c2849edd50c64807fe0e4b9cc0051337d1b161d0d390465d9e63a762861c49</hash>
        <hash alg="SHA-384">1e480694b8a541da4cd1e044d3f3ea3cd55152515ac022b80d865b6654242506c2138daabb4e71c30d36b12b9aaf676d</hash>
        <hash alg="SHA3-384">7f076af200ae9c2bd9f235b949aee01a1a758c8aac10fee8b98ec2497197d2029117d5627eb0eabd9b42979eb1baa009</hash>
        <hash alg="SHA3-256">83b1dce69c4c899176eb6e368e434ecb77dfed7c436530b8c5d08b9b6f2430aa</hash>
        <hash alg="SHA3-512">5debde53a7ead231dcd907467d59728f59cae4eb3b967c19808f78890bd97d2f04657cad9c093e88f9818338b0b3b38a57c66400ebcff61fbb26d18e9f7bf8ed</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.osgi/org.osgi.service.serviceloader@1.0.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.osgi.org/</url>
        </reference>
        <reference type="vcs">
          <url>https://osgi.org/git/build.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.38.0?type=jar">
      <publisher>Google LLC</publisher>
      <group>com.google.errorprone</group>
      <name>error_prone_annotations</name>
      <version>2.38.0</version>
      <description>Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">912f8206614000252841d89cb0461895</hash>
        <hash alg="SHA-1">fc0ae991433e8590ba51cd558421478318a74c8c</hash>
        <hash alg="SHA-256">6661d5335090a5fc61dd869d2095bc6c1e2156e3aa47a6e4ababdf64c99a7889</hash>
        <hash alg="SHA-512">b13fdb7e06ec1f12ea1d63b0ff942c239e4decb391d736a1f7d46c9aa9e2744e9391be4398a02a78d551a96969622e65b75bbd31e5bf67a5938716765f451f3a</hash>
        <hash alg="SHA-384">47be5289bf8ca3f9dfe2d22e4baf6defc71dabb5476f878a240412e336d77d81148b2f79ffc0702079e48bd67ad7fd22</hash>
        <hash alg="SHA3-384">53f3f57b51ea34afd38e1270fbe08dfcf1e2dcfb50f4ac9369bb625febb75611c9e5d8bb09f4dfcb504b5d0b9ac47443</hash>
        <hash alg="SHA3-256">02eaa5431cda49a9e702cac4ad8051d88397e1d5219a0ef65673dae8eaf9c70d</hash>
        <hash alg="SHA3-512">0307dfc76cae6d539d93649ef3ccb85937d62f6f74be212e8a05ae1cc892f3b63a5c03cd6f61ace9f5dbd0f8dfb0baf086eaf3cd10bbefd22640966d00686dac</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.errorprone/error_prone_annotations@2.38.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://errorprone.info/error_prone_annotations</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/google/error-prone/error_prone_annotations</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.osgi/org.osgi.annotation.bundle@2.0.0?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.osgi</group>
      <name>org.osgi.annotation.bundle</name>
      <version>2.0.0</version>
      <description>OSGi Companion Code for org.osgi.annotation.bundle Version 2.0.0</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">19115314a0ce4cfb711a811dcc0be0a3</hash>
        <hash alg="SHA-1">f5c2cd6e670c3c5d440d3003efd5ef2ead5c68eb</hash>
        <hash alg="SHA-256">b9c9546ec5be3ebc2e85ba4919150ad76d64594805282fc895133a47d264a7ae</hash>
        <hash alg="SHA-512">f16b8983240ba3c08d6bc78e2eae92e89eb528f32a705961d90b463def0a5ed1ba08cc3d0be38b5dcfb946c6f759df772e122fb769e58e8c20aa79a489a1fd21</hash>
        <hash alg="SHA-384">88217b7d3a2d9a0a3f005162b95d68ba2bd29629688b2c32e93e4587d89fe6bd468f5c62ef422ebf2b609d402e62ff56</hash>
        <hash alg="SHA3-384">c7ee64dd3e235d900d01d8629b82245303d34a006e1edcd2571ef736d9c6256dcb718be326ad4909cb6d2cea26118ea9</hash>
        <hash alg="SHA3-256">9adcacb036caf30d17a13fcd5952a35e011678b1dbfabafdff73dba065ace8a3</hash>
        <hash alg="SHA3-512">76bec6bb2cdbc8da043760a7aedd51203c8d70b740c9b8de0ba6b0cf9ad991a58059566e7f62dee30606f32d267b2596d5bd5e885c73e336ae7fff6cf7f970db</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.osgi/org.osgi.annotation.bundle@2.0.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://docs.osgi.org/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/osgi/osgi</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.osgi/org.osgi.annotation.versioning@1.1.2?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.osgi</group>
      <name>org.osgi.annotation.versioning</name>
      <version>1.1.2</version>
      <description>OSGi Companion Code for org.osgi.annotation.versioning Version 1.1.2</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a61b3b8d09c85ad296c61e21bf77ec70</hash>
        <hash alg="SHA-1">dc3cd4ec96c0b3c5459fe00694bd73a816ecf93e</hash>
        <hash alg="SHA-256">f51f235e80df8ffbc30ef1b557b6ea38a696632d675404ec117e952978b8b863</hash>
        <hash alg="SHA-512">a4c612bec624a168f25f0923d51925bbc914686673eeebd5b2442998b876f05855e2b0a6e6e9aca4a6533ed3156b0d24f94c3e508ee9778e1b2e469be318afa3</hash>
        <hash alg="SHA-384">68a2046f083a2e77304622a56d07c0e73ba88534af4a87b5428cebf8b638c40ce21bbac089a8b5520ad488c946b633ea</hash>
        <hash alg="SHA3-384">930734f6979650191d51cd8bf1f9ab4548d307950735aa98e2dbda7aecc19b49d01a3b968824f6df2ffafce65e122c60</hash>
        <hash alg="SHA3-256">513392d0e8ddd873d04c5cf4f402a9cfe094413832bb859fe37b70fd0512dd12</hash>
        <hash alg="SHA3-512">3d2bd7d2eb784a9fab4b09c42adb0722363079235340f1915bb82a99f1c5e616ee8f3dc34d2c90b941d2651dcb4f393c7fea3e23b579456a696604148d10f22b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.osgi/org.osgi.annotation.versioning@1.1.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://docs.osgi.org/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/osgi/osgi</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.github.spotbugs/spotbugs-annotations@4.8.6?type=jar">
      <group>com.github.spotbugs</group>
      <name>spotbugs-annotations</name>
      <version>4.8.6</version>
      <description>Annotations the SpotBugs tool supports</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0806b237c67c69869506ce3ced9a722f</hash>
        <hash alg="SHA-1">1dcffed3e561ed32134a0dff4717f19bc2fdf4d8</hash>
        <hash alg="SHA-256">4548b74a815ed44f5480ca4f06204a8b00809dc7e5f6a825a9edf18f40377b65</hash>
        <hash alg="SHA-512">ebe5bca26efc72b82c168b65f8f4b1b55768e0464edb9e732e48bcb05b3de7e761e50f0da46e96f02258b4bc4443f4e4a5e7d53956b17161674238b564f6018d</hash>
        <hash alg="SHA-384">ed8acfde5a975f6aa24930caf2889cddeee21226497ca7ca403a25afdc2a6a32d7a6d53cc117143401e3698c87b33159</hash>
        <hash alg="SHA3-384">eca5720d9a38a2dfe8667dd73003e4fd6d3a0503219d4aea539570374bdbe9157dfe945502de2d40b4f20a4caebd2100</hash>
        <hash alg="SHA3-256">59bcae1d85e982281500f515c27f49c292f5b0f57a69204859f9c5243a64917f</hash>
        <hash alg="SHA3-512">0b77811020ea0052e4b799add234754e2f3437b28f0f4f51f49df9de7bad5d97b4262aed175cc16f2d110a7c49adf88d99dc8f12bb2751ca6bff845ba09c473a</hash>
      </hashes>
      <licenses>
        <license>
          <id>LGPL-2.1-only</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.github.spotbugs/spotbugs-annotations@4.8.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://spotbugs.github.io/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/spotbugs/spotbugs/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar">
      <group>com.google.code.findbugs</group>
      <name>jsr305</name>
      <version>3.0.2</version>
      <description>JSR305 Annotations for Findbugs</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">dd83accb899363c32b07d7a1b2e4ce40</hash>
        <hash alg="SHA-1">25ea2e8b0c338a877313bd4672d3fe056ea78f0d</hash>
        <hash alg="SHA-256">766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7</hash>
        <hash alg="SHA-512">bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804</hash>
        <hash alg="SHA-384">ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4</hash>
        <hash alg="SHA3-384">9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1</hash>
        <hash alg="SHA3-256">223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff</hash>
        <hash alg="SHA3-512">3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://findbugs.sourceforge.net/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://code.google.com/p/jsr-305/</url>
        </reference>
      </externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-couchdb@2.25.1?type=jar">
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.25.1?type=jar"/>
      <dependency ref="pkg:maven/org.lightcouch/lightcouch@0.2.0?type=jar"/>
      <dependency ref="pkg:maven/biz.aQute.bnd/biz.aQute.bnd.annotation@7.1.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.38.0?type=jar"/>
      <dependency ref="pkg:maven/org.osgi/org.osgi.annotation.bundle@2.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.osgi/org.osgi.annotation.versioning@1.1.2?type=jar"/>
      <dependency ref="pkg:maven/com.github.spotbugs/spotbugs-annotations@4.8.6?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.25.1?type=jar">
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.25.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.25.1?type=jar"/>
    <dependency ref="pkg:maven/org.lightcouch/lightcouch@0.2.0?type=jar">
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.gson/gson@2.8.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar">
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar"/>
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.3.5?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.18.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar"/>
    <dependency ref="pkg:maven/commons-logging/commons-logging@1.3.5?type=jar"/>
    <dependency ref="pkg:maven/commons-codec/commons-codec@1.18.0?type=jar"/>
    <dependency ref="pkg:maven/com.google.code.gson/gson@2.8.2?type=jar"/>
    <dependency ref="pkg:maven/biz.aQute.bnd/biz.aQute.bnd.annotation@7.1.0?type=jar">
      <dependency ref="pkg:maven/org.osgi/org.osgi.resource@1.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.osgi/org.osgi.service.serviceloader@1.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.osgi/org.osgi.resource@1.0.0?type=jar"/>
    <dependency ref="pkg:maven/org.osgi/org.osgi.service.serviceloader@1.0.0?type=jar"/>
    <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.38.0?type=jar"/>
    <dependency ref="pkg:maven/org.osgi/org.osgi.annotation.bundle@2.0.0?type=jar">
      <dependency ref="pkg:maven/org.osgi/org.osgi.annotation.versioning@1.1.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.osgi/org.osgi.annotation.versioning@1.1.2?type=jar"/>
    <dependency ref="pkg:maven/com.github.spotbugs/spotbugs-annotations@4.8.6?type=jar">
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
  </dependencies>
</bom>
