{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.6",
  "serialNumber" : "urn:uuid:2a2aca76-022c-301e-aff6-51da6c7fd6fe",
  "version" : 1,
  "metadata" : {
    "lifecycles" : [
      {
        "phase" : "build"
      }
    ],
    "tools" : {
      "components" : [
        {
          "type" : "library",
          "author" : "OWASP Foundation",
          "group" : "org.cyclonedx",
          "name" : "cyclonedx-maven-plugin",
          "version" : "2.9.1",
          "description" : "CycloneDX Maven plugin",
          "hashes" : [
            {
              "alg" : "MD5",
              "content" : "9c7a565cf28cce58557d0c621c5ea4b1"
            },
            {
              "alg" : "SHA-1",
              "content" : "be882d5a22050bfa9d19090b1420c188617d0e1c"
            },
            {
              "alg" : "SHA-256",
              "content" : "698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249"
            },
            {
              "alg" : "SHA-512",
              "content" : "c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0"
            },
            {
              "alg" : "SHA-384",
              "content" : "d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb"
            },
            {
              "alg" : "SHA3-384",
              "content" : "80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f"
            },
            {
              "alg" : "SHA3-256",
              "content" : "142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699"
            },
            {
              "alg" : "SHA3-512",
              "content" : "af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b"
            }
          ]
        }
      ]
    },
    "component" : {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-model@4.0.0-rc-5?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-model",
      "version" : "4.0.0-rc-5",
      "description" : "Model for Maven POM (Project Object Model)",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-model@4.0.0-rc-5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/4.0.0-rc-5/maven-compat-modules/maven-model/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/maven/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-4.0.0-rc-5/maven-compat-modules/maven-model"
        }
      ]
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      },
      {
        "name" : "cdx:reproducible",
        "value" : "enabled"
      }
    ]
  },
  "components" : [
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-api-model@4.0.0-rc-5?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-api-model",
      "version" : "4.0.0-rc-5",
      "description" : "Maven 4 API - Immutable Model for Maven POM (Project Object Model).",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "dd5eb313f68b0ac6d375a6d7da3e7ffe"
        },
        {
          "alg" : "SHA-1",
          "content" : "b35053f2671b45a56b9c1cabb573c3ad6eace225"
        },
        {
          "alg" : "SHA-256",
          "content" : "ae84c4f45d85452e2df29714eca4ff8719fbfc25a7b39368755f18a58c6b0b5d"
        },
        {
          "alg" : "SHA-512",
          "content" : "0d2f6480c8637d1e3dbbc1d35ffe3ab6e638ecf7dd70024e8afb5c61d18fb45e2ef3a784675ffa2b3c3d975e4ad6be02c293d596b1dea9cd9f4ee4906d545aed"
        },
        {
          "alg" : "SHA-384",
          "content" : "3b6d89df328503a185f0fd4e7f953ab340ab173de99eb71d6891f7f5f51faadf2150df0148ef15aef2ddf0d1861ad7dd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7dea4025d4c1432b4bd99b3f372834051d305ca59a20333bb74e6a1c3f1a6d66cf2dc2dbf820006f3929f694fda95b15"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6222d38195cd6908d9456bc5e65d51306d41f7b9316fdbf0f3825a32951abebe"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3b61345e523fd0048f8e2549601875963bdf759c71a26933f1f7be8681178088307dd5273e3cc24d94ef5a943a30f9a010bea79bf1abc508387a2bd5b0713b00"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-api-model@4.0.0-rc-5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/4.0.0-rc-5/api/maven-api-model/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/maven/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-4.0.0-rc-5/api/maven-api-model"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-api-xml@4.0.0-rc-5?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-api-xml",
      "version" : "4.0.0-rc-5",
      "description" : "Maven 4 API - Immutable XML.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e541356b7a494d0adbfc993ce05ee33d"
        },
        {
          "alg" : "SHA-1",
          "content" : "ce8ed38969c0a74b1f55c2851385cc35b7ad90c0"
        },
        {
          "alg" : "SHA-256",
          "content" : "358851a87edd0ddd566a437470ea021ba851a0487ec4d14825ff04db03ff5877"
        },
        {
          "alg" : "SHA-512",
          "content" : "0ed4deea6ede635f4e8644d9a5b4f20c357d3aa899b51b7b9433ea560fcbb0a4012a9ddb3df6af65f9fe014dc69c24a205fcadb95bac897a490905126802a09b"
        },
        {
          "alg" : "SHA-384",
          "content" : "1b11cb6540c0411d65a81653e524ef341a7771ae971337b15c170ef109b67dfab95b8de23a642371994c9598dcaf583a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b3c9f283454f808ea1559c2ad818666aebaf3323c22c98e5e096cb517bd7f9d95c81dbb85a29a20e7d6c101c0c1d64a4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4f109e6260b67977102658b88e77a8ae67651eace01ae6a57f2fd23e0154fd2f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c0263448f4e826a71d707c9b428095c7eca4af01292a0c10110362f51cdc576f2aba478f641fadc530e505dfd70914283b16a9630ca370c4bc4fd5ea23884fdd"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-api-xml@4.0.0-rc-5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/4.0.0-rc-5/api/maven-api-xml/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/maven/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-4.0.0-rc-5/api/maven-api-xml"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-api-annotations@4.0.0-rc-5?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-api-annotations",
      "version" : "4.0.0-rc-5",
      "description" : "Maven 4 API - Java meta annotations.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f2ccc2fc2fa3a27291560204fb567b6e"
        },
        {
          "alg" : "SHA-1",
          "content" : "acea1e7a144da8eee886bc7675f32518cc306ab8"
        },
        {
          "alg" : "SHA-256",
          "content" : "1f7325c01a0ac5a5206caff09fa388520c6505dab850178f452d2c6aad3d3c83"
        },
        {
          "alg" : "SHA-512",
          "content" : "e534c2238743d8776e02ff8369ee8906084ab343479931e0ae77c51ed5d45391fee17b548a2128384004634ca50b7827fd271573cad06e71a8bee7c3913baae3"
        },
        {
          "alg" : "SHA-384",
          "content" : "45bc6ea2e37927698be654399ee9bbddfc5c16e27f53fffb53fe55f6dbfa5bd6ae45195ebd46f976049bd3bb630497c7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0cf2123c640f3e056016dd11d3e55c0e23be6ef7c0cd6b4aa8ca78317e5c001d63b0f945bb37fca6ea588802f22d3637"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0b2c06f7f02761609154ef98f67803f2a55843f298edfb006fbf756e05d14bf4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "114da623f4eb3e9e619e8dfa140c1ad8468fd5aef91e173fcd4205433f5bf9740e61845480409e70856539644a3433abf2b0687d826bbb29e5f9915e8c717042"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-api-annotations@4.0.0-rc-5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/4.0.0-rc-5/api/maven-api-annotations/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/maven/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-4.0.0-rc-5/api/maven-api-annotations"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-support@4.0.0-rc-5?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-support",
      "version" : "4.0.0-rc-5",
      "description" : "Provides the Maven 4 Model Support",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9f449f08bc31e766141dc695ad34c576"
        },
        {
          "alg" : "SHA-1",
          "content" : "a667c6929d152ae40b2452a24e9134659af5b489"
        },
        {
          "alg" : "SHA-256",
          "content" : "8aa38846ab0aba23d72e4afcd71ec13e65e0b979255a6e7946338d4586600b65"
        },
        {
          "alg" : "SHA-512",
          "content" : "10b923b10af571a5ecc4d5c7988dbadb3accca5100af1f45f9df39f38f15372cf2f1a6ed6a551a812d7b2400b293ec3d66a5d41fda1eaf4aed57ecce1c4af0a0"
        },
        {
          "alg" : "SHA-384",
          "content" : "420b489446be2e5a4ac63f1a2dc5e0d5d9c123ba0f477b58947ea54209f2c23a3fe4776899adf790d255c413a48abb93"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9b408609f293b598aae68e2819639b83c5bbc039dc39399229286e19fa96382a896fb068210f4338ed6b562f7580346a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "179bc57845cd76c5834af83c61b9b09657ce946c65b2a26b36dd75cbeb37e0b5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "886f631301e80cc3d5563b631b163f0d45ea111ff6b42d2809e5e4eaf2f2d0ee2d481826d959675c6bac4ee02f590b6632c50763513f4d8610597740d223c3be"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-support@4.0.0-rc-5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/4.0.0-rc-5/maven-impl-modules/maven-support/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/maven/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-4.0.0-rc-5/maven-impl-modules/maven-support"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-api-settings@4.0.0-rc-5?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-api-settings",
      "version" : "4.0.0-rc-5",
      "description" : "Maven 4 API - Immutable Settings model.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "631f9ca76750d017acf80513fe2cfc82"
        },
        {
          "alg" : "SHA-1",
          "content" : "962ba9781e4664c60173387c38c45f2fccc058b3"
        },
        {
          "alg" : "SHA-256",
          "content" : "0917a779806f101337b41692c88cd236da521b33c9665de6843d582b19d63658"
        },
        {
          "alg" : "SHA-512",
          "content" : "df4a485798fa645ce9344125b85f8cac510f3d66e79691be4e3835debce7d3886eaf0557f2e4047029dd5cad0a7b7bd970b7c0a626d351d4bddd407f72a2a8c6"
        },
        {
          "alg" : "SHA-384",
          "content" : "c7f52decaab2a0ea01f57f3f2c50636af35852744b55f4507023ab6ec62542493739a38c327c3bc1c082916bd1b9a79f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d7ee43fa8eddfc3977b838c91e44179e6a602229a45bf7a761e960766a71ea2beec0a7c4fd844b9a5b340a671a5f298c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7cdac06f3fd540ec9eb8802b95122dfcbdc484bf9e628caab73429f5a853cb87"
        },
        {
          "alg" : "SHA3-512",
          "content" : "010ae9ba30d40120503c8004c833057edc8b7a96e274820736d93b42d8c5436a0e03313d9e016388767b43ccbfcd2306c66da0f93377d9da06d446e95e1876bb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-api-settings@4.0.0-rc-5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/4.0.0-rc-5/api/maven-api-settings/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/maven/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-4.0.0-rc-5/api/maven-api-settings"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-api-toolchain@4.0.0-rc-5?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-api-toolchain",
      "version" : "4.0.0-rc-5",
      "description" : "Maven 4 API - Immutable Toolchain model.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "46a24f0d7997955725f04f92fc19c4c0"
        },
        {
          "alg" : "SHA-1",
          "content" : "d2b05a3e1dbe76ac06612b0aa547b6bf89407540"
        },
        {
          "alg" : "SHA-256",
          "content" : "c9c596ee2845b45a977adcf3a7446d55d6b076045a656bb08c3f5cae70129dda"
        },
        {
          "alg" : "SHA-512",
          "content" : "eb3643a85ae3d2d7dd537c969275084e91d4de7dd068940a730209dd416a9b98fa96feb94d54e80add005b95fab6257f05a9e81074a6040e90f18b3fc39e1cb6"
        },
        {
          "alg" : "SHA-384",
          "content" : "07df9275e3031b1fae4ed5023fe4feb15371540562d4a08800b50f1376889b27e5fdb7150f147e3509d39f4ed2cc04af"
        },
        {
          "alg" : "SHA3-384",
          "content" : "56ec3ba3b223c815e41d2c02aea861ed54c71570c5c30a7bbeb1eb8c8125eff2099394ed644a75a12eba2a0776d4e137"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a18695ba5ac23b630f132091ebb0577c54a021ea14315ba4eeb37b83591e1612"
        },
        {
          "alg" : "SHA3-512",
          "content" : "35b1b7c4e095516522b667d19658bb865a271fadc566d31f94d91053e49a71686199d313fed99309c43c4ee0b001af1c9fd1ebd602fc25366a3d9f45a1c0d557"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-api-toolchain@4.0.0-rc-5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/4.0.0-rc-5/api/maven-api-toolchain/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/maven/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-4.0.0-rc-5/api/maven-api-toolchain"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-api-metadata@4.0.0-rc-5?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-api-metadata",
      "version" : "4.0.0-rc-5",
      "description" : "Maven 4 API - Immutable Repository Metadata model.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b6b6e310090cf73084b755bed6311b5d"
        },
        {
          "alg" : "SHA-1",
          "content" : "b54a0454ee696822c44be5114a1b1596b542946e"
        },
        {
          "alg" : "SHA-256",
          "content" : "b349f78dfbe02657f3eada2cd6e1a8196466817b50734aad60db6f8f6c5be0a5"
        },
        {
          "alg" : "SHA-512",
          "content" : "fedd813d3d40ff67f9dee56215d0db2e50d8f6d94c53583f7a5cf3eff2dbb7d5ae023e0adaa26249968ec5483db2d47a16b56a8c4551708acc4ce733e4b9d04b"
        },
        {
          "alg" : "SHA-384",
          "content" : "328ae949cfc5ea0ff776cf36d56c46cd6136c77c1c4ca1dcd981dca5f5fece41d600254af3dbdc9d9ac9a02b1b7f0a10"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1c85a13e7033d1877adf2fd3ce248e180505a11d7fe98603aa7fd9aaebd03f123c8390e405ebd6e6599879037a897c02"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9ec05ef8acfd423d245ea236db280edd48aa444a1f371cd9103aabe487753a96"
        },
        {
          "alg" : "SHA3-512",
          "content" : "61a3781af37df30e99e5003f713510c0a5c55290c5a9bc57e20aec0bd9eb3f476b7db44f43c84e9337622dbed67c58e1e7334a03706a9e72c230519201ae381e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-api-metadata@4.0.0-rc-5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/4.0.0-rc-5/api/maven-api-metadata/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/maven/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-4.0.0-rc-5/api/maven-api-metadata"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-api-plugin@4.0.0-rc-5?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-api-plugin",
      "version" : "4.0.0-rc-5",
      "description" : "Maven 4 API - Immutable Plugin model.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1f9c72ee59cf819ae3fda265ea706191"
        },
        {
          "alg" : "SHA-1",
          "content" : "f076cb01121c4b6fabf1e9f54dc3f331d7d05f14"
        },
        {
          "alg" : "SHA-256",
          "content" : "c17a94c34221e8373316206d9c0b57ea673cd11de54097296ae230bf428582ce"
        },
        {
          "alg" : "SHA-512",
          "content" : "1c71bc3ca6a8283a25b24ebf7d7cb9b744e6811c2b91392a5e9b061e795128a58888796db3cff95e747dff4038dccc21382f7578ddb70560db82c3be25c8662b"
        },
        {
          "alg" : "SHA-384",
          "content" : "4614f45941e886ba33c7891f69773d9d40e6f1a7e5b51b1d114d2382028b66460e29cb37eeedfce6480631c400edc0d6"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4e33a892e6426e7c298bbd9f15857b9e27f8fdbb9f9075d5d54d4baf755eb5cb30ff731d3495d64c25742cbad9093c40"
        },
        {
          "alg" : "SHA3-256",
          "content" : "323db2f214f5b302dd446b76ad4a5d3bc3ac37d64602b4270676bc1363e23e48"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2b451d43f95a8ef2ad544a6373c7173118ffb4118cbd1993882485eb53ba4e2bb7902b2c3891431afa347a5d1434a7113707ceb42423d4d960fee22964a5105e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-api-plugin@4.0.0-rc-5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/4.0.0-rc-5/api/maven-api-plugin/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/maven/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-4.0.0-rc-5/api/maven-api-plugin"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-xml@4.0.0-rc-5?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-xml",
      "version" : "4.0.0-rc-5",
      "description" : "Provides the implementation classes for the Maven XML",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2834107a6c48f05ae45d46dcd463fa3b"
        },
        {
          "alg" : "SHA-1",
          "content" : "7d1d56eada2b4f1bc83bbc1c5dc40925f2ac3c2d"
        },
        {
          "alg" : "SHA-256",
          "content" : "a4b7ad3e3410e0feb6438ebb6231c8e02449cd02fcf6451baed820008a103564"
        },
        {
          "alg" : "SHA-512",
          "content" : "a6c8648bdb13e38241fca24f0d14b807daf26d9fc3b5b5d00685e6f1f63a4392d6b42c37468401dde2d9ce512603b9282c6d5fa377651efec6dc8ab655f867e3"
        },
        {
          "alg" : "SHA-384",
          "content" : "94576835da894b458b67821bf8c86c2e0a81cf4fd611843158c8a49324bb9621b9b3f45b3791817f141f136661b0acff"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e08cc1fd311c0c88d0f0293d72c973a05f604ce07dbabdb0d7353bb0e63aab296f82762febdc6a0c9c01fe1fca749929"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b29e4b83b5f616c5f54f3b167eccea4fbbe868eacbfbd08b65b3acb5f29d54c2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "dd73b09ae12e924a25591b5f9c718f505ba8d7a331bf6f79a14b70709d20e725ab5087b7b321fb63ef5e1011a14d2be3c1e9eee74b623a363e99bcec2e0159a4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-xml@4.0.0-rc-5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/4.0.0-rc-5/maven-impl-modules/maven-xml/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/maven/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-4.0.0-rc-5/maven-impl-modules/maven-xml"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.1.1?type=jar",
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.woodstox",
      "name" : "woodstox-core",
      "version" : "7.1.1",
      "description" : "Woodstox is a high-performance XML processor that implements Stax (JSR-173), SAX2 and Stax2 APIs",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "971ff236679f7b35a7c13c0d02c0170e"
        },
        {
          "alg" : "SHA-1",
          "content" : "76baad1b94513ea896e0a17388890a4c81edd0e0"
        },
        {
          "alg" : "SHA-256",
          "content" : "02b9d022e9d47704ff8a7a859a0dbfd3b2882a8311eb7ff1e180f760ccda2712"
        },
        {
          "alg" : "SHA-512",
          "content" : "28105d6409766966123d4e212dba555c4776bfeb538093d3739ef113de5c6d6e92453aabc16915bfb76124a5dcc82b57f3cd13b42ea2e4038a4495285c642d3a"
        },
        {
          "alg" : "SHA-384",
          "content" : "ca02f505f335a975e71c4a549bc3707c35b3592d2ac2fc2cf8887dfde44ae76b753ad2174e4971bb33bb1ab6c8c6b3c7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1efac262497c761e493337361dbc388ac01634dbda5322a8ee7742b0b25a26cc039c3e3653bf2302fbc31883c8030703"
        },
        {
          "alg" : "SHA3-256",
          "content" : "10a216995fc4e318dcb0be7b9ae00c07536fbc81e6119f0bf1e36716146f674d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "924b1cb6ba79666c4fc13f1b057b376de471cfe60e68daca71ed51355abbd0de6799441ddd81df786317dd2c533cc1d3a9671f759e3a480d99c2d772eaa5ddda"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.1.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/woodstox"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://central.sonatype.com/api/v1/publisher"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/woodstox/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/woodstox"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar",
      "publisher" : "fasterxml.com",
      "group" : "org.codehaus.woodstox",
      "name" : "stax2-api",
      "version" : "4.2.2",
      "description" : "Stax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6949cace015c0f408f0b846e3735d301"
        },
        {
          "alg" : "SHA-1",
          "content" : "b0d746cadea928e5264f2ea294ea9a1bf815bbde"
        },
        {
          "alg" : "SHA-256",
          "content" : "a61c48d553efad78bc01fffc4ac528bebbae64cbaec170b2a5e39cf61eb51abe"
        },
        {
          "alg" : "SHA-512",
          "content" : "1c0587ecb4c5a659ce2ae1fe36ffc12636a8ecba549a29f2cf91cb4d1d36a335c05f35776f480488d40d894230389f76aeeb363887026c6ef5c565995c17b7c6"
        },
        {
          "alg" : "SHA-384",
          "content" : "3b617db8307a081df858a4110f5b8fec51c06355762506cbc4be5557fb06959f0499f7e672103d46f71c66bae472a7bd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "22a3150713f7072962e26c286a1ef97d849b10d7f1251c56ae34252f247127b56dd189daa758c64776b4196ee0060517"
        },
        {
          "alg" : "SHA3-256",
          "content" : "174868c81672068b42ccde35310d4dad60f457b795101e99588c28b0eebdefc2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c88de5a2137e3b63b632ef24799a677c998b76e736407f1e8c6af85d1b6a94c76bc20d26e6cac847d8383ab6760f1b5c2ae7574fba21e1e6a96de7cdd38f0e39"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-2-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://github.com/FasterXML/stax2-api"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/stax2-api/issues"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/stax2-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-xml@4.1.0?type=jar",
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-xml",
      "version" : "4.1.0",
      "description" : "A collection of various utility classes to ease working with XML.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4c5a511a744416c2690f6c930285898d"
        },
        {
          "alg" : "SHA-1",
          "content" : "32595f415fe9fc87d92be9058e0274dad8631e7d"
        },
        {
          "alg" : "SHA-256",
          "content" : "86e6a7f07484e8b1f7af66d97d3ba3cb3d692a5461b4b1d0a2b7670cf5748e89"
        },
        {
          "alg" : "SHA-512",
          "content" : "c183471d1b9bbb1b0685b1d205a3ab02a2199b725e72257213551d709857d1630319d3cc58b2bf586c7b55f55eb7112e4d54a03ac34a00e3a7d0636eed780292"
        },
        {
          "alg" : "SHA-384",
          "content" : "b96b095b0f968206d4905aa75c0343cb5cb8b3714d41bb8bddc8dc0ce94b2fa723f0bb88e82e56ba9b828e56a13b164c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "32dac13cc3654a4ce25b43abd63630f94c1123b13ad5741dc5b0e64551c413446c1af4ebfb69e1a244ac5c2914c1cccd"
        },
        {
          "alg" : "SHA3-256",
          "content" : "bf6bf2f053a9872a7d54f80b30a349d15d3e41e66a1645ff6deb52fc7439b31a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e898c32d85b2734fd37a3321e86a4c2cad5a33fcd5ae7a785458d0e71958e5dc10c6db11968be304593db9b424bff8851a2251ba819a002d02a2d61e838ce277"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-xml@4.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-xml/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-xml/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/mojohaus-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/codehaus-plexus/plexus-xml/tree/plexus-xml-4.1.0/"
        }
      ]
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.apache.maven/maven-model@4.0.0-rc-5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-api-model@4.0.0-rc-5?type=jar",
        "pkg:maven/org.apache.maven/maven-api-xml@4.0.0-rc-5?type=jar",
        "pkg:maven/org.apache.maven/maven-api-annotations@4.0.0-rc-5?type=jar",
        "pkg:maven/org.apache.maven/maven-support@4.0.0-rc-5?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-xml@4.1.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-api-model@4.0.0-rc-5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-api-annotations@4.0.0-rc-5?type=jar",
        "pkg:maven/org.apache.maven/maven-api-xml@4.0.0-rc-5?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-api-annotations@4.0.0-rc-5?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-api-xml@4.0.0-rc-5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-api-annotations@4.0.0-rc-5?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-support@4.0.0-rc-5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-api-model@4.0.0-rc-5?type=jar",
        "pkg:maven/org.apache.maven/maven-api-settings@4.0.0-rc-5?type=jar",
        "pkg:maven/org.apache.maven/maven-api-toolchain@4.0.0-rc-5?type=jar",
        "pkg:maven/org.apache.maven/maven-api-metadata@4.0.0-rc-5?type=jar",
        "pkg:maven/org.apache.maven/maven-api-plugin@4.0.0-rc-5?type=jar",
        "pkg:maven/org.apache.maven/maven-xml@4.0.0-rc-5?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-api-settings@4.0.0-rc-5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-api-annotations@4.0.0-rc-5?type=jar",
        "pkg:maven/org.apache.maven/maven-api-xml@4.0.0-rc-5?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-api-toolchain@4.0.0-rc-5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-api-annotations@4.0.0-rc-5?type=jar",
        "pkg:maven/org.apache.maven/maven-api-xml@4.0.0-rc-5?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-api-metadata@4.0.0-rc-5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-api-annotations@4.0.0-rc-5?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-api-plugin@4.0.0-rc-5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-api-annotations@4.0.0-rc-5?type=jar",
        "pkg:maven/org.apache.maven/maven-api-xml@4.0.0-rc-5?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-xml@4.0.0-rc-5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-api-xml@4.0.0-rc-5?type=jar",
        "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.1.1?type=jar",
        "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.1.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-xml@4.1.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-xml@4.0.0-rc-5?type=jar"
      ]
    }
  ]
}