{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.5",
  "serialNumber" : "urn:uuid:b8a6cc32-ce2f-3350-b638-cafa720fce67",
  "version" : 1,
  "metadata" : {
    "lifecycles" : [
      {
        "phase" : "build"
      }
    ],
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.8.0",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "76ffec6a7ddd46b2b24517411874eb99"
          },
          {
            "alg" : "SHA-1",
            "content" : "5b0d5b41975b53be4799b9621b4af0cfc41d44b6"
          },
          {
            "alg" : "SHA-256",
            "content" : "6852aa0f4e42a2db745bab80e384951a6a65b9215d041081d675780999027e81"
          },
          {
            "alg" : "SHA-512",
            "content" : "417de20fcdcb11c9713bacbd57290d8e68037fdb4553fd31b8cb08bd760ad52dc65ea88ad4be15844ad3fd5a4d3e440d2f70326f2fe1e63ec78e059c9a883f8d"
          },
          {
            "alg" : "SHA-384",
            "content" : "5eb755c6492e7a7385fa9a1e1f4517875bcb834b2df437808a37a2d6f5285df428741762305980315a63fcef1406597d"
          },
          {
            "alg" : "SHA3-384",
            "content" : "0fe16a47cf7aab0b22251dafcc39939b68e8f1778093309d8d2060b51a08df445a8b8ed5a9561669faf2e55f907c76d8"
          },
          {
            "alg" : "SHA3-256",
            "content" : "3e5a1eb5ab7d0797498862794709ff8eaaa071fe4cc9ec77f52db7e2f97ef487"
          },
          {
            "alg" : "SHA3-512",
            "content" : "59281a3e29e76270d7f44b40b5b9f05e55f1ae3ec716d80add806f360940809e3813998ac7c5758043b8e248aed73b86e37dc506cdb4cde03c16bb617d8e5a3a"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-resolver-provider",
      "version" : "4.0.0-rc-3",
      "description" : "Components completing Maven Resolver for utilizing Maven POM and repository metadata.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-resolver-provider@4.0.0-rc-3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/4.0.0-rc-3/maven-compat-modules/maven-resolver-provider/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-4.0.0-rc-3/maven-compat-modules/maven-resolver-provider"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-resolver-provider@4.0.0-rc-3?type=jar"
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      },
      {
        "name" : "cdx:reproducible",
        "value" : "enabled"
      }
    ]
  },
  "components" : [
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-api-annotations",
      "version" : "4.0.0-rc-3",
      "description" : "Maven 4 API - Java meta annotations.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "96b5b2f5b18528b61c398ff9fb5cd847"
        },
        {
          "alg" : "SHA-1",
          "content" : "f652ee9045c76d6dfc501ac2d365bdc8c3f26e60"
        },
        {
          "alg" : "SHA-256",
          "content" : "5d3490f72ad3a7e82be88b27629f37c59fd2531bae511c3b13866420d5d862bd"
        },
        {
          "alg" : "SHA-512",
          "content" : "981839b8d7a94e88c56e89e312292f606762cbc8b3c3957745c6545c760a2d7ebbc4e8a7378003295837037a980a7ab3c40ff50bb505c142e9a3259df45a3459"
        },
        {
          "alg" : "SHA-384",
          "content" : "6fa30dec470c0502a380646a0b4c4e262c1a5947868ea8a478e0992a4f6399df95c4b78991a73b0f61047db59b2a3b39"
        },
        {
          "alg" : "SHA3-384",
          "content" : "de8b3cb1c6f1c0d84c16267e7935502b5bfdc8d04df953fa9124056b6e69ebc158277cece2dcc214fc956d2018eccdc6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "dbf236892e6ee9500d19b61116bd49c2eafd07c9d5b0c2f46edc26718648d0bc"
        },
        {
          "alg" : "SHA3-512",
          "content" : "83af4c17071557359d31c6671bbb9e3873e908cd920c1e14a502423cca80756141d0857ad13bb3569c922ffba14a3599c2d780da3d9fe3ed95f047ac1a5eb374"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-api-annotations@4.0.0-rc-3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/4.0.0-rc-3/api/maven-api-annotations/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-4.0.0-rc-3/api/maven-api-annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-api-annotations@4.0.0-rc-3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-api-xml",
      "version" : "4.0.0-rc-3",
      "description" : "Maven 4 API - Immutable XML.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a11e0353fc2043755afa58e8a022e3d3"
        },
        {
          "alg" : "SHA-1",
          "content" : "468c5a0d904c52d2d3d094da1f8d286308b7892d"
        },
        {
          "alg" : "SHA-256",
          "content" : "f3e3b3642373c69d4c7441d40eba0765e1d744e992b62194452f5ea5451dfdba"
        },
        {
          "alg" : "SHA-512",
          "content" : "9b5a45e3e7ec7dd262a197f7ecbdefc6e60a1ae3b1c38d4247570baff08db1b8567117d79949cc548fecbdedc20200fefe3da4df69748fd44e7f014cb84bf2c3"
        },
        {
          "alg" : "SHA-384",
          "content" : "4733af392762af74fb29f7390127d5619aade922380a50c382387898e08f697ea0a0ce605c17157675ee2bb094327c5c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "80ebfe6e74a8316a8616e29fcfd4662d9fd7873d8be85d2243ff0847cedc292e195d7f2e884eb5d5cb7ea6325e0fb1be"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6f63313c138921a04eebbad7b5e9afc1dbd797f7ec72b240b798799549d75a8f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e6ed72023c1b2cca0c36833595aca624a319691f42d7fd09f8bc1f84bd9341714d7bfd56340e09b8fedb7e2df9d6bc3592af7ba18b6944714c8246d503345091"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-api-xml@4.0.0-rc-3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/4.0.0-rc-3/api/maven-api-xml/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-4.0.0-rc-3/api/maven-api-xml"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-api-xml@4.0.0-rc-3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-api-metadata",
      "version" : "4.0.0-rc-3",
      "description" : "Maven 4 API - Immutable Repository Metadata model.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "34c459edc4603b0cc99ddaa2507be91b"
        },
        {
          "alg" : "SHA-1",
          "content" : "3ee5a0fafed31fad1ec61db845a16b538a73c70f"
        },
        {
          "alg" : "SHA-256",
          "content" : "dd346dde9f11ea854c2519e40aaaab375559a60a43e3b1e6463b805bb88ce2d9"
        },
        {
          "alg" : "SHA-512",
          "content" : "2655f42dd75f9c61f9a7f387aaa14a43d7b559773d1a4a1599a0b1c41ffe48c02a7669581cb4106ca88728f4b7a74601afaf778bff92d3854a1207b6f6e77e9b"
        },
        {
          "alg" : "SHA-384",
          "content" : "baa1901569ebdad0dbd5e4f8c712f8f03e8be7382df666e8ff3e8d8feab0546fe3e5fb957526ce668204a6dcca21cfe8"
        },
        {
          "alg" : "SHA3-384",
          "content" : "292a8f30bdc42ce3ce8340466e079fb54fe049a596545eabd1f501d5b1e9283817fbc2382d58fa91d1aeb9b471fd66db"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9f83b936a4057350e42919abe4a6a0ab1406e4d5bf467fda7736658b6bfaace9"
        },
        {
          "alg" : "SHA3-512",
          "content" : "11f5c76b099e6a1d5b6fb287e236ce8d08205471746dd6fc2ef19f3990bb3a7d02047d7fc2826d52806401dc266f001496972298d01ae229636a4062c69b8dff"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-api-metadata@4.0.0-rc-3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/4.0.0-rc-3/api/maven-api-metadata/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-4.0.0-rc-3/api/maven-api-metadata"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-api-metadata@4.0.0-rc-3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-api-spi",
      "version" : "4.0.0-rc-3",
      "description" : "Maven 4 API - Maven SPI.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "dbd222eccea856e84af63d40b323cfb2"
        },
        {
          "alg" : "SHA-1",
          "content" : "dd84b0e9dd6265fd013e1a68ed66e8c447e6b521"
        },
        {
          "alg" : "SHA-256",
          "content" : "69dc1e9ef3865f7c6c09125eb797867aa6e55573e79570519279f2aafa817613"
        },
        {
          "alg" : "SHA-512",
          "content" : "95109026b8671a78b18fceaf94e05706a06ff157ef5338198bf51e11adf6aad5b853257e97d99aa1523622f775b9ec0f1cb6e4b4930d6ed2fa85d72eb48a9f52"
        },
        {
          "alg" : "SHA-384",
          "content" : "fedf7d59e3c16b74001a41995795bc0fe3db4f12e0758bb49ca51b5b7bbb2548edfcbce2dd0af6ffc9e623c1693e61bd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "951fc34ed7422e8879ca53b520217a1e60523523e5899942f80f8dee06e7170c985c4c7e0c22a8a32d3063d9b9d96763"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f1b9ea85dd9ba5800fba42fdb2eb146a31f4e6bfbb3d0fa2633351617636fb20"
        },
        {
          "alg" : "SHA3-512",
          "content" : "eddacaa5bc42890535e388b8b14597a96519544a6850b626127a1476da82ab95a04a6555ff38ab8a1602ea4901930fbf33dad03203ac3614cc1fbef3681058dd"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-api-spi@4.0.0-rc-3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/4.0.0-rc-3/api/maven-api-spi/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-4.0.0-rc-3/api/maven-api-spi"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-api-spi@4.0.0-rc-3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-api-model",
      "version" : "4.0.0-rc-3",
      "description" : "Maven 4 API - Immutable Model for Maven POM (Project Object Model).",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "890ecb7b7bafc680d74d9d2f19f98594"
        },
        {
          "alg" : "SHA-1",
          "content" : "cf36f4e9f96341a261b03b742a6415d80b66c5b8"
        },
        {
          "alg" : "SHA-256",
          "content" : "7208a02aeca7534e361d5e16aa71fd53cd7bfe8f8acaf51d4610f312794691c8"
        },
        {
          "alg" : "SHA-512",
          "content" : "db287633575dff5f07c0ec2231aa530d0a7d3fb03bb2be75db198416e6f31b057d4e8f60ab932fe23901f494a0500c26bcbad841c42d0063b4a741dbf517b554"
        },
        {
          "alg" : "SHA-384",
          "content" : "452eebd3201fc39a3a50ba16ad8434e40d9b71006364e31b0b6d7d4a0325c0f7c8cc47eb6f42121fbc325addca0d3f4e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1da38961a3c32b468d61620db14501af8049eae18a974c469cfd98ce2e48f0d0ef9c3b36663277b4d17b60ca7ee90205"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7d8c77e760a792d01b0327077a26240eaf42c36225975158534a42bcac3548ae"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8e711de9864035e66296dd33b2170e91004d47219e0a766271c43cd109865e9d02ffcd32704070e7a93a4109215183f4156359f1c2d51a5b383b795a103815a0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-api-model@4.0.0-rc-3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/4.0.0-rc-3/api/maven-api-model/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-4.0.0-rc-3/api/maven-api-model"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-api-model@4.0.0-rc-3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-api-di",
      "version" : "4.0.0-rc-3",
      "description" : "Maven 4 API - Dependency Injection",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0ebae2a4f62a781e66a8666cd0b1c5c0"
        },
        {
          "alg" : "SHA-1",
          "content" : "fb958725ff4b6f7fc1719ac843d827179a0e45ac"
        },
        {
          "alg" : "SHA-256",
          "content" : "a325978f2d9d05756a426fd35ef1180a90fbad1f0477e11bca7dd0dd8f6f754e"
        },
        {
          "alg" : "SHA-512",
          "content" : "3d1ca85bb4bd7010157ab61cf16e07efefc176c91d352a284a8f698b6c80dbb6cabb31c338ef13a6672b830b300623ffada1622735e85c2255b808a2fb9c341e"
        },
        {
          "alg" : "SHA-384",
          "content" : "f6869a4f0d0ede1eee0ce97c2d9a4ad327c5e465afd639cea94a09422236efc337dfa729090f88df5da6637ed9473cc1"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a9d86d400a660f2a5fa9d36ec8f588b4d334dea27040058e7ffe730a9ef2509443606f9f56a09b34eb2819f81b29bab8"
        },
        {
          "alg" : "SHA3-256",
          "content" : "27f3c461519090460ff2e13db95b275725038c38db2bd65aa82a034eff577d84"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2a342965d4504313098282be17a1d0b0dd8c35f6e06a093fb0c1e3fde001b65526b6147e6d93d1d07f0d01f071aa233f839cc83088e710b746820c97dd5df075"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-api-di@4.0.0-rc-3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/4.0.0-rc-3/api/maven-api-di/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-4.0.0-rc-3/api/maven-api-di"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-api-di@4.0.0-rc-3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-api-core",
      "version" : "4.0.0-rc-3",
      "description" : "Maven 4 API - Maven Core API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "10070e6bbdc24654fdcbbeec137f9be4"
        },
        {
          "alg" : "SHA-1",
          "content" : "068583fb442b67d70c5df67cd30ca28144d11412"
        },
        {
          "alg" : "SHA-256",
          "content" : "f5ef65b6b707160439f6e0548d66b74e8ac19686aa741619e3c8e7955bb7a2ba"
        },
        {
          "alg" : "SHA-512",
          "content" : "ca3f62c6cf919d2fc823ee66fcbd6572779797a926d028c82df638ee2ee2e8586dbe5b66398674d2c68c7214c042664ca0213c8ea25749d55916cef045555874"
        },
        {
          "alg" : "SHA-384",
          "content" : "94bc26295b5ed73469a3cb76a735c6ec337ab21a6ee788d086731f01330ef81d5dcc77a89c4c9bbf68de58e08ea79022"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9d714c155030e95ca3616ae7444c7a79f597ed5e227a5d4463a181ef9d5d5ddb67e7aac05e7fe2f52947174ba54d8894"
        },
        {
          "alg" : "SHA3-256",
          "content" : "94bddb468bba20efb845f50c417e6f73e13c2d3e4c8e89b9403d9295deec3dff"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ddd81bc03f3fa49262044f0abebc47f7449d854ededcdd5e02ce7c5de99331b49ee508f552be7a3377cb43a47691d34a9040bcdb5a7d3a40ce02e54fa27c664f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-api-core@4.0.0-rc-3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/4.0.0-rc-3/api/maven-api-core/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-4.0.0-rc-3/api/maven-api-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-api-core@4.0.0-rc-3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-api-settings",
      "version" : "4.0.0-rc-3",
      "description" : "Maven 4 API - Immutable Settings model.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b2ccadf1597b5c93dfdbbf9d9cfe5a0c"
        },
        {
          "alg" : "SHA-1",
          "content" : "ae574e921eb6b50e2776a1da0c4a155a02d8549b"
        },
        {
          "alg" : "SHA-256",
          "content" : "4f5e43e45efd4c92d6cef4f8f64171ac62298b612ea39d086dff82f468f67bfd"
        },
        {
          "alg" : "SHA-512",
          "content" : "925147a515c6962bbccc451da897bd444993e7934da7e99c74b2aaa1e5a247a7729720ce15a29383eb2d590c343027f6fb9a0417e653672ad20f3513d8769a3f"
        },
        {
          "alg" : "SHA-384",
          "content" : "fccc47ee5b48e42c56101c49c4d8a9e4d3394c33f03007c99f2f6bc7a15c6a1b42150dfc69f666b6a38b3ace86130924"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ba9c24b276a1e5e47075469dc27cc2cb977d7ecd96e4fa1d1eebf9648450e8311bbf8c7142e91d13438600e27a9d2964"
        },
        {
          "alg" : "SHA3-256",
          "content" : "27c8363df5f768dc307ee064ad1690e44b5443e1035e01b1da7d1423d481fad5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1707533d3817fd2f581cfedb86dbb0c5639608640831eeff58576aff70784ce25ae58fc95cac00cb0d1c485388cde6a63c2ee1df84d7436635400a8796add8db"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-api-settings@4.0.0-rc-3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/4.0.0-rc-3/api/maven-api-settings/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-4.0.0-rc-3/api/maven-api-settings"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-api-settings@4.0.0-rc-3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-api-toolchain",
      "version" : "4.0.0-rc-3",
      "description" : "Maven 4 API - Immutable Toolchain model.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1035abd7d2724cbe409c01db9cc48329"
        },
        {
          "alg" : "SHA-1",
          "content" : "ecc34e26f14024d441d2d602ee063793afb8a908"
        },
        {
          "alg" : "SHA-256",
          "content" : "0faebfcd9142c4fadf47a9024ca5bec52a693c298cfdf2e24f3749af163bae09"
        },
        {
          "alg" : "SHA-512",
          "content" : "934478da70f9cde50c3c1995d1a86618f9df8fe9ccfb3f2df32b03bca9abed2b8560c639291a52545c61d0e3a3e30ac0622e52e18e9b35fba4d5727e959ae87d"
        },
        {
          "alg" : "SHA-384",
          "content" : "87e5ec876a1e3bf0833793b7f7ab713198a896a4378d45165e14510cc60a30a32473eacb56fabe36fa6a4a7276d0cc0d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "622a545eab0bf2f33bc0b9ce2941c1b649c519882969c3c9227b708cbcfc859ff70a7864dbdce31f3e793400a4e7a3a5"
        },
        {
          "alg" : "SHA3-256",
          "content" : "285ea8ee34ae6df361332877b487a61457474ac5828fc6ef6b7306ebb2a1347e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1ec32eb6bc12561f0335a1330167bad16c0382e55e8e93a7a2e2f961448c7f06000694e897357da3a403415d00cfd8695c2404c8dc2b3a863a3a14a6436fb6b2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-api-toolchain@4.0.0-rc-3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/4.0.0-rc-3/api/maven-api-toolchain/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-4.0.0-rc-3/api/maven-api-toolchain"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-api-toolchain@4.0.0-rc-3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-api-plugin",
      "version" : "4.0.0-rc-3",
      "description" : "Maven 4 API - Immutable Plugin model.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "424a9ed23d2441e75df13c4b28307c95"
        },
        {
          "alg" : "SHA-1",
          "content" : "98e047a219c03976ac3ecd15d17262b4b795b20f"
        },
        {
          "alg" : "SHA-256",
          "content" : "841b52f2cecb43a21836d25bf667b9ca40e2e0d4e66980859029c5f2d4e88365"
        },
        {
          "alg" : "SHA-512",
          "content" : "048ab30cf9824305e2b1861d705e4526572ad3a8f9ec57db8ad32c94192717cf07eb19059a5bb779f0e06ed6df8a00582c4d50a35293f94fa401a73823df255e"
        },
        {
          "alg" : "SHA-384",
          "content" : "a6c2bd94a2bcebb50e651157b68899e85e3287de00107d110ec90168a3e4f1fe47028c2a5123714c788946fff74e296e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7f0769b97a6000b428364ccb35227e22887c975b2ebe323f81924515485a833ea23bbc2f76224b3a020a7933115b0f0f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "cd8b8919a3063ddc4f68fc8bd9639a6ec373ff0b7b35e8700458353791668add"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2249023c85aa2f24847de0517a69e8fcf8a90179ac0eea50bdc47a9593ccbad69d8eb39764131c29227451233673191fafb31d5450626e3bac8aca0478cf16a5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-api-plugin@4.0.0-rc-3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/4.0.0-rc-3/api/maven-api-plugin/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-4.0.0-rc-3/api/maven-api-plugin"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-api-plugin@4.0.0-rc-3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-xml",
      "version" : "4.0.0-rc-3",
      "description" : "Provides the implementation classes for the Maven XML",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "55b91d86e76ad3905501c240a9bb688b"
        },
        {
          "alg" : "SHA-1",
          "content" : "e54fd93fbd6d25d2390022a83f7a2795e1c2fce1"
        },
        {
          "alg" : "SHA-256",
          "content" : "063c424cb47f75164125d5eea25167b931dd694e34268d50247374e74211dd19"
        },
        {
          "alg" : "SHA-512",
          "content" : "80622c6cd1705a717a2b68b17c84fff913ad317b2df51017e7f88b260262279575eaf319812a78fd6892fbb94c7371659e14a385c0d4b40c1f5b15b7b6ca39f8"
        },
        {
          "alg" : "SHA-384",
          "content" : "d9d72d2a0ff65647952c9d7a3dd001dcc68bb930699927bb84c95523ff2aa3e10f8c185689e12d49a1ffa9e557e1ed65"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d5df5d5b0ae1767597fc32c5a6e30324f122a0127f2fab8ab747563fa7151dcdd9321d462d1b2d0e8dc53516a7ae6b87"
        },
        {
          "alg" : "SHA3-256",
          "content" : "345278da5983653555702d4022742c56e3ad0ca4dbb8759b6994ba75fae86d58"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b4c3040041697d16b31292bc4524c0d97bce01a666fb8afcbdfe99bfb3d149add9004695e8e26580d09a10db7d7bebb3033977ec5191176a1c5c3372d5dc5fc5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-xml@4.0.0-rc-3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/4.0.0-rc-3/maven-impl-modules/maven-xml/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-4.0.0-rc-3/maven-impl-modules/maven-xml"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-xml@4.0.0-rc-3?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.woodstox",
      "name" : "woodstox-core",
      "version" : "7.1.0",
      "description" : "Woodstox is a high-performance XML processor that implements Stax (JSR-173), SAX2 and Stax2 APIs",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f8b70141712cd2ac67800ba036f0aa13"
        },
        {
          "alg" : "SHA-1",
          "content" : "95341048cfb852aa05037e6cc83069b8664728c5"
        },
        {
          "alg" : "SHA-256",
          "content" : "81266920a1cdc47306a8a2b4726c99ec89b3fbf31c2470e4f5e477d9d857ca9f"
        },
        {
          "alg" : "SHA-512",
          "content" : "257260a61892f52a94979c512cc86d3cfaf83c8c1ef231f15033f27c1af4c2b7928b7df9ac0005ef617746193273fe2df68ac0164d5f51e47be580506464b857"
        },
        {
          "alg" : "SHA-384",
          "content" : "698b3d685100988b264f0d025b01c64723b1033aa063e70cdcfef5743d1a83d7a2a1b94fbba99dc638f3dca2a498a980"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a835755da983be214c4d2a43633b8ea51103b274a43b45184610615f0f747904a1967f3c99670471b24024ba61cfd1b3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1ab326e9b6f5c668645360b9c372e3abbf29574087b863c90f247d017b5d91c8"
        },
        {
          "alg" : "SHA3-512",
          "content" : "cc58b8aa1cf72672c0adba7ecc58463ae7718a033b8f9d95c3038a96bc61f6241d938e0b2950a850e9afbd035e5580687ea20d391fb58ce1596694bc118a0e7f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/woodstox"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/woodstox/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/woodstox"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.1.0?type=jar"
    },
    {
      "publisher" : "fasterxml.com",
      "group" : "org.codehaus.woodstox",
      "name" : "stax2-api",
      "version" : "4.2.2",
      "description" : "Stax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6949cace015c0f408f0b846e3735d301"
        },
        {
          "alg" : "SHA-1",
          "content" : "b0d746cadea928e5264f2ea294ea9a1bf815bbde"
        },
        {
          "alg" : "SHA-256",
          "content" : "a61c48d553efad78bc01fffc4ac528bebbae64cbaec170b2a5e39cf61eb51abe"
        },
        {
          "alg" : "SHA-512",
          "content" : "1c0587ecb4c5a659ce2ae1fe36ffc12636a8ecba549a29f2cf91cb4d1d36a335c05f35776f480488d40d894230389f76aeeb363887026c6ef5c565995c17b7c6"
        },
        {
          "alg" : "SHA-384",
          "content" : "3b617db8307a081df858a4110f5b8fec51c06355762506cbc4be5557fb06959f0499f7e672103d46f71c66bae472a7bd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "22a3150713f7072962e26c286a1ef97d849b10d7f1251c56ae34252f247127b56dd189daa758c64776b4196ee0060517"
        },
        {
          "alg" : "SHA3-256",
          "content" : "174868c81672068b42ccde35310d4dad60f457b795101e99588c28b0eebdefc2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c88de5a2137e3b63b632ef24799a677c998b76e736407f1e8c6af85d1b6a94c76bc20d26e6cac847d8383ab6760f1b5c2ae7574fba21e1e6a96de7cdd38f0e39"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-2-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://github.com/FasterXML/stax2-api"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/stax2-api/issues"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/stax2-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-support",
      "version" : "4.0.0-rc-3",
      "description" : "Provides the Maven 4 Model Support",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a109cee5cebb2e8beca015edf9e83dca"
        },
        {
          "alg" : "SHA-1",
          "content" : "9e5b1e97bbe9f3eae3369b1c7c5ee5f57602a92a"
        },
        {
          "alg" : "SHA-256",
          "content" : "d0e7c70887c09c2039c224d9c47489c6ac93bef27b3d387e862da9e06681d45c"
        },
        {
          "alg" : "SHA-512",
          "content" : "00d3a0a03945aba3a230ef5c23bd7e801a924adaf674ee8e9947a8eacbcca8df9e43f78371d29e8dec011442fba15069bd0e37c38bf05373471bab38b89107d2"
        },
        {
          "alg" : "SHA-384",
          "content" : "15eb0e8f97bf6b6bd24c9f90a41e2491da9abf12f6c74b89d27587246ef8243785f66170931926a91244d9cb3cd4d63d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5568dcbe595461f6ad21299d8dde500a0e36fdede2e4226e821fc336107a66761f250e6dca4a647946568900e76a9a4c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b475703ff8066b2fb866b3cd0e788d86f797939dc8bddbad0d6ac2eb6293015e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "549fecd97bbda8b4bb48bc80b15ebe5bc315d19bd35ee5e283664fed38cc2850ae0354b0ee7a85f3bdefb8b02e62c7f6f6a154d5b49117ff2f1dbb8e263a644e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-support@4.0.0-rc-3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/4.0.0-rc-3/maven-impl-modules/maven-support/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-4.0.0-rc-3/maven-impl-modules/maven-support"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-support@4.0.0-rc-3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-model",
      "version" : "4.0.0-rc-3",
      "description" : "Model for Maven POM (Project Object Model)",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "13e4a8cd8648b8cf31a8d290eaa5aaf5"
        },
        {
          "alg" : "SHA-1",
          "content" : "65eb37972c30d89864bd78921ed69b8f1399893a"
        },
        {
          "alg" : "SHA-256",
          "content" : "5414a8b23f5932bd4b2ea4b5d2e188620ff60bf3fd5b2bb16a7d4d63d39e6248"
        },
        {
          "alg" : "SHA-512",
          "content" : "a37409fec7d88ac9cbffe0b5b1092eccac5ca133bf0f81e52a7e99682cb54756dd7fcc0b666ad217e2ee5aaedd90a01258a6cf0ab5d882867f136837de65a0e7"
        },
        {
          "alg" : "SHA-384",
          "content" : "6080797090aff48a9e3aed4f4d6d7bd5364f72e9d76284aa28addbff286eace99b4fcefb80288df9158c618b7ecc43db"
        },
        {
          "alg" : "SHA3-384",
          "content" : "246b33194cee4a36179785650c1b3e085f42e3429b9c8259b45f6b3ba5c3633fa9e8ad11d8632df49009078685e26cbe"
        },
        {
          "alg" : "SHA3-256",
          "content" : "816b6bd1d61f100042a63b741ec7778af18da27c4afd39413e19e3bbf08aabf5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "09dfda4f4af8a50df7a6d41dcd4eff4fc2587f522fc72fb1cf913845ed943adfb3f440ec7aa98b0be53acf058e268cbd73c49b744b4389d3039913d156b6401c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-model@4.0.0-rc-3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/4.0.0-rc-3/maven-compat-modules/maven-model/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-4.0.0-rc-3/maven-compat-modules/maven-model"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-model@4.0.0-rc-3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-model-builder",
      "version" : "4.0.0-rc-3",
      "description" : "The effective model builder, with inheritance, profile activation, interpolation, ...",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c5fbaf571e69757f6202d083eb0d64f4"
        },
        {
          "alg" : "SHA-1",
          "content" : "62f14c5c6caac1e4cd733bc88f605505cebda635"
        },
        {
          "alg" : "SHA-256",
          "content" : "f9f53bf648ada66efd5ca4a4d31e435cb101f42fc51b7e85fc7cbad7c7901c14"
        },
        {
          "alg" : "SHA-512",
          "content" : "336d77ca7626aea6ade0076001c3f7c103dae326119150368bba19fdebc15424be6bcfdb7939d60bf3d86819ff31040ee9288a56675f1aeec33ae95beb0842cb"
        },
        {
          "alg" : "SHA-384",
          "content" : "0050d90e08ff5d04c37a3e7b499460ae637139400b2fa94dc9c42e729a4ead5ba5a0baa543d0d674bb8c4b8b9301a78e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "89caeca2fc6dfc849642a6d751c27684a8d33edf796925a5c6934440ea3ae483b7a40931d3f22c0853244994c9d493cf"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0a475a62d0407624dce2e85f28daa43f85a18392add73fe9f2a3c86a4fd6a623"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a462036110e2eea133de8887dd7caba4461f2d8aa8b28c1195fa142b805848c07882e4a178f350baf9165b474179811a30613655f32de6ee84d4908d08e9e375"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-model-builder@4.0.0-rc-3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/4.0.0-rc-3/maven-compat-modules/maven-model-builder/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-4.0.0-rc-3/maven-compat-modules/maven-model-builder"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-model-builder@4.0.0-rc-3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-artifact",
      "version" : "4.0.0-rc-3",
      "description" : "Maven is a software build management and comprehension tool. Based on the concept of a project object model: builds, dependency management, documentation creation, site publication, and distribution publication are all controlled from the declarative file. Maven can be extended by plugins to utilise a number of other development tools for reporting or the build process.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "809d03c78c817c440172a07c364d68a3"
        },
        {
          "alg" : "SHA-1",
          "content" : "df102d8a8d973c54bf3eb02b482d54e784aa007a"
        },
        {
          "alg" : "SHA-256",
          "content" : "fefad6c28ff188d7a69ada304eb7967163fd83ce84bf0a42ad85f86e9a31dafd"
        },
        {
          "alg" : "SHA-512",
          "content" : "59369846d11640afbc2204482ef48b8d1e936d4326ec55710ca382ae55435bcef2d2d9fea8a4123022f136294505e4638a059923cf99eea5d794b309026550b5"
        },
        {
          "alg" : "SHA-384",
          "content" : "88e5316b3cd34a4bd62946a2fc041ba03fd42606dbed730fddd920f176fabc0a409c866dd7c5a1c14f6e9aa41fb5e12f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a1db756bd66960b7940a7f9c4e40ec019373edb5ee0a52857252a433f2ac5b46de876b6fe9a34322980b7a2f05360dc1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "965be7abe20bec3a37a2b75cdf7cca3f2c1367c897aa9cc33fd70617adb4130e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c371767661e77d4b574bd823cc9c0de11d1e0261de5b83efd07068c47f4ecce0aa13a7b2ba28d07934acaebf12dc8ce9a1440a35ab9050e75ce9f6c7acd0253d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-artifact@4.0.0-rc-3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/4.0.0-rc-3/maven-compat-modules/maven-artifact/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-4.0.0-rc-3/maven-compat-modules/maven-artifact"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-artifact@4.0.0-rc-3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-builder-support",
      "version" : "4.0.0-rc-3",
      "description" : "Support for descriptor builders (model, setting, toolchains)",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8a04973ac8e3badb93d6e681a445f63c"
        },
        {
          "alg" : "SHA-1",
          "content" : "36539746a3cc329f2445d7506d8332db53d93ad2"
        },
        {
          "alg" : "SHA-256",
          "content" : "cbba8801716569d012f4ee51b514a01f971656bba7753dc7204fe1b53483b540"
        },
        {
          "alg" : "SHA-512",
          "content" : "b741bc1bc138268314ff105d6145b5debcfdce6972964484d874e69e523cbefc7dff8b85fcd938891a0fc7fae2d5180eb66f35de6ae0ca82ea5b7fc82a38efa7"
        },
        {
          "alg" : "SHA-384",
          "content" : "bb83489d56301a0323f8d8df7d3aab8063c6ffa90740b163bc3f1aefce490984e4a0b4c7ed66cace031a90a0d0b4ff73"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0ce3fab8e352dd3f2b23bdddd6387b983982d70074c1f71ecddc3446ee3137794f375f8fd305365dda7be7841348d3c7"
        },
        {
          "alg" : "SHA3-256",
          "content" : "027a1b46c89c2b6889996b58d96582e878e304d3071df5a934a5ea75eff9d929"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1ff5e1a6e9770af32a32a54fbd34968359263439dcf2dd1cb3fa05ff921213ed1ebdaccc1dc88e0bf3ee6137f57a575e5357574db7a170618c405edfad2a38fb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-builder-support@4.0.0-rc-3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/4.0.0-rc-3/maven-compat-modules/maven-builder-support/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-4.0.0-rc-3/maven-compat-modules/maven-builder-support"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-builder-support@4.0.0-rc-3?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-interpolation",
      "version" : "1.27",
      "description" : "The Plexus project provides a full software stack for creating and executing software projects.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c2edbe0dbc934692794aaeac6006055a"
        },
        {
          "alg" : "SHA-1",
          "content" : "8dc73f4ff5eafcbb7ec035ba54736e828b272533"
        },
        {
          "alg" : "SHA-256",
          "content" : "3fb4fb6143fdf964024c3cb738551524b9ea84e5c211cd660c559ad0703e5230"
        },
        {
          "alg" : "SHA-512",
          "content" : "34ae1399e75560d6aec6743ce37e10d2236342ec58145c3fdd7b03340f4ed3ef500f824c845d452dbb8c3f14d118c855707de4a080074fa572daf7ccfef4dddf"
        },
        {
          "alg" : "SHA-384",
          "content" : "cf31f04d414db3c864a403628707df8b36c379a984d75804e5cbfeeea5fea54d2510620de045c0b01a7745063b3135fb"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9a439b4e81260659af067e91d5e2482337dc718cd32abc08562e9a90fee45da6a0cbfffdc7190b13ba662ed3153fcde1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d8cd271924ed99a870e9f8c17796e2ab0a3e69350465508517992bee0cea6bbe"
        },
        {
          "alg" : "SHA3-512",
          "content" : "75a3e2cbde1c45b70c1b4103620f76673db127e17518e2ca51cff1e6d7a84041e495c71171490004650d6476679d009594db2557898e231962bea3744914c501"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.27?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-pom/plexus-interpolation/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-interpolation/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/mojohaus-dev"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/codehaus-plexus/plexus-interpolation/tree/plexus-interpolation-1.27/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.27?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-repository-metadata",
      "version" : "4.0.0-rc-3",
      "description" : "Per-directory local and remote repository metadata.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "93c6c667769775f8fc283bbdd7f8c32e"
        },
        {
          "alg" : "SHA-1",
          "content" : "3aace6db022854861f509d113b384b0ed6c295cb"
        },
        {
          "alg" : "SHA-256",
          "content" : "564b6c79d4a9567d1d86592c915a6d95d48e152e6fec5984467f60e5ff9cd67c"
        },
        {
          "alg" : "SHA-512",
          "content" : "deef3edc2ceefc80bc5e20b5d8707bb27510b57a4e4387c4142a6b16973e3408290e51d0aa10580f1f646cf4165a80ff2d0d05245fbac6536d6f6831741841b6"
        },
        {
          "alg" : "SHA-384",
          "content" : "09f848da845ab9e1f35be8d23e88bbc041f0f6c2d49bc73534d948f80cbc522a144788c907a8f9240e60d8c5e3c81e11"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4f19d16828bff58f5bf2a4df2a58c67d655d7686b7fcc90c4fecb7dafd8d902bb7b6512021fa9474691f336535522c52"
        },
        {
          "alg" : "SHA3-256",
          "content" : "72454d5fb994ff73f6286e13f964db90201e6ac1361e86b0d69d060a8d8aabe1"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0e828050b90fa07097dd20c20818f020b1728f4bd6fab93f6146c28f53465ecf493706f1214d1729cb8ae196f070a07275be8215fdcb2a6660e3b6ac4e168972"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-repository-metadata@4.0.0-rc-3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/4.0.0-rc-3/maven-compat-modules/maven-repository-metadata/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-4.0.0-rc-3/maven-compat-modules/maven-repository-metadata"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-repository-metadata@4.0.0-rc-3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.resolver",
      "name" : "maven-resolver-api",
      "version" : "2.0.7",
      "description" : "The application programming interface for the repository system.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "405278d249dfe71d07d1320beed67074"
        },
        {
          "alg" : "SHA-1",
          "content" : "aacb6dd11e3a3e07f0d1acaec055e5e39b9d869e"
        },
        {
          "alg" : "SHA-256",
          "content" : "1cc517753bd14e94b77c16a8258963f12a5a50907b778e60bb2c8e3ac4c4f8b7"
        },
        {
          "alg" : "SHA-512",
          "content" : "eca726a67663822037affa3c226fb860419b91b1156d4e1038d0558d4724c029323792ad04b7a4eecd9851dea37a6c94cf64d52f5e4bb01a705d7f0419c28509"
        },
        {
          "alg" : "SHA-384",
          "content" : "8077512a174315fabb6229acf09261822c0c3960b1b21d85c9bec7dd3359297190b08568833cfc291150e9ac321e4407"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5ed820551e7ac611f4ce0a4349182bb5e7693d9f19f1c9c990b5590a156eed48c6b34449bc7b5a2704056850513392d9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "899ef5fd44294f6b08420bf2e749b3a20b041cdaa4eba8bbf5bf16adda99289a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "674444372f332013b8aafee6d33a2f88d993adef06b674a423a1ef58cdfdacbacb05ccfce0cb15d5ff4311519fc41d5b9d1f3a475b0d6356a9a5727b694afcdd"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.resolver/maven-resolver-api@2.0.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/resolver/maven-resolver-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MRESOLVER"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-resolver/tree/maven-resolver-2.0.7/maven-resolver-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-api@2.0.7?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.resolver",
      "name" : "maven-resolver-spi",
      "version" : "2.0.7",
      "description" : "The service provider interface for repository system implementations and repository connectors.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d36fe04208dc4f48cfb49dade982912d"
        },
        {
          "alg" : "SHA-1",
          "content" : "d83f6087029d28c11a85d899c78a3e24696555e5"
        },
        {
          "alg" : "SHA-256",
          "content" : "8e08e6cabf5b80c555955e1285109127dcffffa47978e8dc4349607643ca5f58"
        },
        {
          "alg" : "SHA-512",
          "content" : "84a4b0ab7520112186f89567355f0e63c13d86918b8f1f85a51034f58d9c10f531e5af03a7cf12e0ff40dc41088d92babfb27c4abeb5fd45b005d3400861b944"
        },
        {
          "alg" : "SHA-384",
          "content" : "8d0a8ef97d955bcd42fbc9cf850bb7e40c1782af47d5d1afc8ba3d830096b3e9db71bb196079305df99f0df58bc028a7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "75dd52334f68d09738ae182e49d08006a3da69f340fb94b005f18909e8a34f612c013aa898bbc9be4fd5289b8b36cf99"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3357f208a2b1f948d568eb12c4bbc9138ee94d81e2319d6680ae322dccb0e920"
        },
        {
          "alg" : "SHA3-512",
          "content" : "15a7c2b5bad0145b627bed40ab003450bee516893d57d1bedefe9860114fc36f422be729ffc305102317cb9824ec0918a4993d9ab66698e1aec6c81ff8a864ef"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@2.0.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/resolver/maven-resolver-spi/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MRESOLVER"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-resolver/tree/maven-resolver-2.0.7/maven-resolver-spi"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@2.0.7?type=jar"
    },
    {
      "group" : "com.google.code.gson",
      "name" : "gson",
      "version" : "2.12.1",
      "description" : "Gson JSON library",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6901ee290ab94954f46a32a30062c773"
        },
        {
          "alg" : "SHA-1",
          "content" : "4e773a317740b83b43cfc3d652962856041697cb"
        },
        {
          "alg" : "SHA-256",
          "content" : "ebee13d5fb7477cd7f1cc010e0c356df8ca80709715248da97f79e35ccb4fbec"
        },
        {
          "alg" : "SHA-512",
          "content" : "fafc369544e2d4a89f32c353dcbd012410a64a315a3cae9165d4ead6f8960aef5f77ced84c374d6a09af117748adca571b0426eb0e2864f584debb59707ebc03"
        },
        {
          "alg" : "SHA-384",
          "content" : "eb24025aba39a08bb673e538824ecaa14c45acdec5fd0f24375f746dfecbf3f328a86d1e4dc47df24394b1059ad9dfb8"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e881f0ed39f3cac50753bcae7bff488f19d2a6923d2ad44674a63b95b86c34300fd9126bfebea005d908668ec9e5fb80"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5536a5f2678a6faca03e427e8976550ba933fc60e548ed5fa92f8378013d386e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "227b91fdb9aaa5b36dfd3921a69a5bcb8848cbb16dd478f67aa4098708877d76e4cc458567e9f4079d8161a4c5d5e36c53dfcb2e0e37f86155f3e6ed65ddea2a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.code.gson/gson@2.12.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/gson"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/gson/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/gson/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.code.gson/gson@2.12.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.resolver",
      "name" : "maven-resolver-util",
      "version" : "2.0.7",
      "description" : "A collection of utility classes to ease usage of the repository system.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9e57f4ee78e14d0b8bf6466115cd3f94"
        },
        {
          "alg" : "SHA-1",
          "content" : "ffdc69403c32a7050b04605ef64bfea9b973b58b"
        },
        {
          "alg" : "SHA-256",
          "content" : "0c56c2dd5aaeacc531b5a9e564124a32610f88875822545ee89eea79cdb7755b"
        },
        {
          "alg" : "SHA-512",
          "content" : "3d55421d741933b32b622fcf60e1c27c7bdb823151239ae28c66edae9d948729f4b84059836ee2925b368196fb9e7008b23c91052f9a3be78ec5f15187fb6de5"
        },
        {
          "alg" : "SHA-384",
          "content" : "4abfbaf59a575a65990c8f6a9718f2c085c62063e5d8c8a7ab499d2411f5f31012fbf13ac608e63ce9da3138e4aaeed0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4059b6af9d050e2b8b2a31b623a473f8809d9d67bfbd329ec45bc756b00a8e0ad591e9adbf28d01b42a2bcdbf8f2c756"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6856593079df5fd2fa67b22d0a7e77214dbedf5a789cbcfaf34131c2700f03f1"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a24d790ab890debe5e6689ddca3a88db6575c95189ba26edd27fbfdd94423a83df3b211215bf03fd8224ca4a1ef19bf8574ffb7230e19b33984ff740ca967436"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.resolver/maven-resolver-util@2.0.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/resolver/maven-resolver-util/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MRESOLVER"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-resolver/tree/maven-resolver-2.0.7/maven-resolver-util"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-util@2.0.7?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.resolver",
      "name" : "maven-resolver-impl",
      "version" : "2.0.7",
      "description" : "An implementation of the repository system.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1d13ead0e18c89ecdf32183cca42edaf"
        },
        {
          "alg" : "SHA-1",
          "content" : "568af770bc2875648771bfca20736e237d66dadd"
        },
        {
          "alg" : "SHA-256",
          "content" : "a09e61fb4ce391d5363b6752332b331fefad483fb22ed3f7a4f1ea9f99b112bb"
        },
        {
          "alg" : "SHA-512",
          "content" : "13f56ac23c9295f2697dd91e557660cec7e6ce2d3b74016650001b52311daf43d425a0c12e4421f86e253c82a983547e31a0efa0ae309f8f2f0b5c90efc079a7"
        },
        {
          "alg" : "SHA-384",
          "content" : "254e3f2d61af47ec7bd5da6970a53b7d1904195d771ef8e897e8942f324903ef99fb94aac29cfd262ba04a2c083e3322"
        },
        {
          "alg" : "SHA3-384",
          "content" : "957a32ce3b28f5b139f42d6d15c3ab1c625e60b2977c07e4f6492e9f3ac34a825c125c7e92cfbafd0098ba257e6465d1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "05c9ca93c34ce880434256e5a4c8f3084690abc79cdb7be5e4e6d6499e8058d3"
        },
        {
          "alg" : "SHA3-512",
          "content" : "15697975ae6c83b4e81a378b7b255d0a36253f6fea176e2553edb78c8caae4709ef3c0e3fff20380bbf43f4340bbfafbb568762a15ed8232ab5b13130064b8f0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@2.0.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/resolver/maven-resolver-impl/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MRESOLVER"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-resolver/tree/maven-resolver-2.0.7/maven-resolver-impl"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@2.0.7?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.resolver",
      "name" : "maven-resolver-named-locks",
      "version" : "2.0.7",
      "description" : "A synchronization utility implementation using Named locks.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4a96adb31796f5b8151a1e5e131328e7"
        },
        {
          "alg" : "SHA-1",
          "content" : "d2724b4822b76f9a79a552f369ef81e129fd24f4"
        },
        {
          "alg" : "SHA-256",
          "content" : "20e101e8a883566ed3afaf349dac765b1d18c66bd93c4b6df6aec5a64441a0cc"
        },
        {
          "alg" : "SHA-512",
          "content" : "83592c27059f0551d450beeca9a978214d09fd9f8663e678d8b5c88522aebf84aa458a52a389345e4702309410e248ca68bc4d71cffbab71fb2ab7bcbcc5e8da"
        },
        {
          "alg" : "SHA-384",
          "content" : "534d0e31fe8e8c04948c63961b684a0d6e709c6628dd1f8959442ae3c58f565d54147fa271165c84e8ac8a95d32026f4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "92afd029251bfad644d1c19e61f6250132c16c586ea40f83f2343555b566108cc45f7a9966dd0807eccacbadac0f22aa"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b6263b9deecbb2553a4c73bf427246108aec0cb6d18121f678872295c29bba15"
        },
        {
          "alg" : "SHA3-512",
          "content" : "577a7de38c936b5bd94368b35854ac7fdf496c45f504792de393a976e019e7fb887b22c443fc61d5115c90cc5a9ae6e0530c118cf1493e043003bf6ff9970511"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.resolver/maven-resolver-named-locks@2.0.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/resolver/maven-resolver-named-locks/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MRESOLVER"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-resolver/tree/maven-resolver-2.0.7/maven-resolver-named-locks"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-named-locks@2.0.7?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.resolver",
      "name" : "maven-resolver-connector-basic",
      "version" : "2.0.7",
      "description" : "A repository connector implementation for repositories using URI-based layouts.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "63ea97fbf2e3cffc89a57a523a005c8c"
        },
        {
          "alg" : "SHA-1",
          "content" : "f41365bab2457aac5e3afd51b6ff280d3c81d22e"
        },
        {
          "alg" : "SHA-256",
          "content" : "838bee2394883f3e09226bd085803b4186754aaaccc7a23ac299797ff108af84"
        },
        {
          "alg" : "SHA-512",
          "content" : "8fe68e3f454abb8897d9cd698630ceef56f359f610ff84603313d1bef8060e88853cb372a57518f929d9ad6daa911009a2d89ff1024894cf72dce374f914564a"
        },
        {
          "alg" : "SHA-384",
          "content" : "ca710ebb139955e33004303251412fede67b6b5bac20473f1af5ccdac580747d093d82f699fe470c76d27565ac2b6602"
        },
        {
          "alg" : "SHA3-384",
          "content" : "94097157752bc417013996932502f7d7668b50c2c716794613551f53f4b29352c1e532c8bf43f0ab3d5a506e56a25cf3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "64672b3273fc678e34b7040a89f88dd2abec2bfdad960f97a32b7eab266a3560"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f02d8cc13369f1556cd4609a9b3d11099811644ca97e7e99af94d52e65a4b25b3fc936f0c64f9651c2e28f44f166a04726b07d0105f6b0ef1a41425a927c935d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.resolver/maven-resolver-connector-basic@2.0.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/resolver/maven-resolver-connector-basic/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MRESOLVER"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-resolver/tree/maven-resolver-2.0.7/maven-resolver-connector-basic"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-connector-basic@2.0.7?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.resolver",
      "name" : "maven-resolver-transport-file",
      "version" : "2.0.7",
      "description" : "A transport implementation for repositories using file:// URLs.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3d1cd1f4fd5ff6745224fd36bdf96c03"
        },
        {
          "alg" : "SHA-1",
          "content" : "10677a84a1075aaadf8eb3d7bd50686bd5796953"
        },
        {
          "alg" : "SHA-256",
          "content" : "fe847d0c52fa243d069d7a42be2cce6a29e64aeb693d6d810bb723cfa1097973"
        },
        {
          "alg" : "SHA-512",
          "content" : "ae376a0484758cfe68f308bdc80bdc56bcabb03d3d69384f7b9694569a1c8dda147fff25c8aee91678ee2cbd815e7f65e5eb1732ec3eb97eaa17774eddb44a81"
        },
        {
          "alg" : "SHA-384",
          "content" : "66024944a44cf9e94d5d5c1f4336299d22ba5052a7b01d5e1480c10b90322875a272812c5466628fefcca5bd344baa50"
        },
        {
          "alg" : "SHA3-384",
          "content" : "80356f16450b84a7e0f77c1dc0c84f6dec9934eeb07b47cd3713c6a7a00c0e7061c7917fa4cd75d62f09072d04b398d5"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2d2323e2bf6fffb9baab7b9c5fffbba3dbf867b599d547a545859625850177e4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "631b320326ddcc38fe7cb4f6e2c6cebbed35ac3e927f7ad1dececdd244abdf1c6513dd066c4a7fc3bfbcd6d96cb52a3519e4c3d438092797e893b4280e9a3b18"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.resolver/maven-resolver-transport-file@2.0.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/resolver/maven-resolver-transport-file/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MRESOLVER"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-resolver/tree/maven-resolver-2.0.7/maven-resolver-transport-file"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-transport-file@2.0.7?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.resolver",
      "name" : "maven-resolver-transport-apache",
      "version" : "2.0.7",
      "description" : "A transport implementation for repositories using http:// and https:// URLs.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "970fd72ddea38891737a84c4581e23d0"
        },
        {
          "alg" : "SHA-1",
          "content" : "bda67688cd1b269c59913db281ef0a4464359459"
        },
        {
          "alg" : "SHA-256",
          "content" : "ab25b24ddd0e06a2bd2e2018ee07984f0edf4d36d1cc57c386c4f3fdb6bfdfad"
        },
        {
          "alg" : "SHA-512",
          "content" : "8bf001de4e2ae4221175874ca04cb380c833f63ad23054533d50d81015e1145bc0d340751998f411bcb182f30f21dad2f4074aec4aecb69987e9245768b53851"
        },
        {
          "alg" : "SHA-384",
          "content" : "3db69872ee9f42a88bbd32ba84fe5057c920bc0c32feb35e8ef9818a04b2db68ff32b4f2d37809e33b26293e0c5f899d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "00f6fbe6065e7245de860767332b45e8f69aaf146cac1d8a91f7cd0e022fe7815c05706473e5557ffe558216910d48c1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "38b0bd1236078495b1688b42b83d7059bc0dda8ef2f814495492b8935ff8e01d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0c139243b251c19edb855e8fe381028185051d66a6bfff9f368d30c9ec098264620b1216cbbffd1fcea6a7e5e506926e0e6d2802caaff702d8ba831b9f013243"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.resolver/maven-resolver-transport-apache@2.0.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/resolver/maven-resolver-transport-apache/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MRESOLVER"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-resolver/tree/maven-resolver-2.0.7/maven-resolver-transport-apache"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-transport-apache@2.0.7?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents",
      "name" : "httpclient",
      "version" : "4.5.14",
      "description" : "Apache HttpComponents Client",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2cb357c4b763f47e58af6cad47df6ba3"
        },
        {
          "alg" : "SHA-1",
          "content" : "1194890e6f56ec29177673f2f12d0b8e627dec98"
        },
        {
          "alg" : "SHA-256",
          "content" : "c8bc7e1c51a6d4ce72f40d2ebbabf1c4b68bfe76e732104b04381b493478e9d6"
        },
        {
          "alg" : "SHA-512",
          "content" : "a084ef30fb0a2a25397d8fab439fe68f67e294bf53153e2e1355b8df92886d40fe6abe35dc84f014245f7158e92641bcbd98019b4fbbd9e5a0db495b160b4ced"
        },
        {
          "alg" : "SHA-384",
          "content" : "c8ccaa1fa8ba7c421413e3c30375bd9c31284e837c476fd831e18043ad4187e92166f49554123108891241bed674b95d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9a17dfcf12b2af3a9b006ec369f9bc78ba322348bf1a01146e0d4f3fec2bed6cbe8b2193fac5b4d5a0c3036c06477510"
        },
        {
          "alg" : "SHA3-256",
          "content" : "48f0a61b691e22dec9d6db8e0b58be4ca17a42a2846c82f0875de21f72bb0faa"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4ad2c9adc761b7e813330f0dcad3f9978702896c7d0cbf81f60a472d550e320b1527be425ba597c8c9352d587e32e1d46ceb4c73e99c70a6190df4c699a7c2a9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://hc.apache.org/httpcomponents-client-ga"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTTPCLIENT"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/httpcomponents-client/tree/4.5.14/httpclient"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents",
      "name" : "httpcore",
      "version" : "4.4.16",
      "description" : "Apache HttpComponents Core (blocking I/O)",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "28d2cd9bf8789fd2ec774fb88436ebd1"
        },
        {
          "alg" : "SHA-1",
          "content" : "51cf043c87253c9f58b539c9f7e44c8894223850"
        },
        {
          "alg" : "SHA-256",
          "content" : "6c9b3dd142a09dc468e23ad39aad6f75a0f2b85125104469f026e52a474e464f"
        },
        {
          "alg" : "SHA-512",
          "content" : "168026436a6bcf5e96c0c59606638abbdc30de4b405ae55afde70fdf2895e267a3d48bba6bdadc5a89f38e31da3d9a9dc91e1cab7ea76f5e04322cf1ec63b838"
        },
        {
          "alg" : "SHA-384",
          "content" : "ba9ceaee1a37ca3201d6a1315ecb0327b495489efd0baa155c219c475df8d3eb69fe77ab0026563db406497626da6562"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b9dc44dcc7cc86d5036f26d54c4003a2d72808ae7b07a0808bb53505c6d4281b5ad213eb1f3d0fef1113dec57cb0dfe1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fd8ab51846476c6c18822151c9ec07b39a9633010b5d20ea937fc6910407bc64"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b42fa528242981a9d70e4f68ab75a24292df5112c44c21b6f18cb9201ce747885ba1d4dc69bc3d14d0da46a6c2638f937c11bc45749abeb55dc89ddada90cdda"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://hc.apache.org/httpcomponents-core-ga"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTTPCORE"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/httpcomponents-core/tree/4.4.16/httpcore"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-codec",
      "name" : "commons-codec",
      "version" : "1.18.0",
      "description" : "The Apache Commons Codec component contains encoders and decoders for formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2abf189633424b9292fd57a3192c0ed5"
        },
        {
          "alg" : "SHA-1",
          "content" : "ee45d1cf6ec2cc2b809ff04b4dc7aec858e0df8f"
        },
        {
          "alg" : "SHA-256",
          "content" : "ba005f304cef92a3dede24a38ad5ac9b8afccf0d8f75839d6c1338634cf7f6e4"
        },
        {
          "alg" : "SHA-512",
          "content" : "4d974c2203dd6780da6e50ec1c7d8ff727f9ed55fba706fdc50b9484fc5da5e03b67bc6ad2f0d9ae74f823ecce04a40c513bbabd8bf9e91ac8fec04cd3519ffa"
        },
        {
          "alg" : "SHA-384",
          "content" : "75d428b434c25041068005fd48f720ddfec8a9fc044b8df53a668828894e9ad542b92601a224d618200e3953ee3c8966"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b0d03e9b6b548ec3b7e3c0ddc644cf40d36203606fd69be3fccc72c86b0e048bb6c8e7bd74afb77e371e839bce7cc6aa"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c33f900364c7ba15976e262ac26dbe4ece516bed72278da0e6c636d2c7ffabe6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fefe6c1c33f63b9a873a522f8b1f605e4197ed9fe849af650ad8791503cb58cf3d4facafe4f46e070ea11ccfbaec1084e11294154531a07d8ec18ea9c40d9769"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-codec/commons-codec@1.18.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-codec/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CODEC"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/commons-codec"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.18.0?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "jcl-over-slf4j",
      "version" : "2.0.17",
      "description" : "JCL 1.2 implemented over SLF4J",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4fcd46ca51e55b9fd9b0db34474927e0"
        },
        {
          "alg" : "SHA-1",
          "content" : "76ea503eb688f06556a9ba69995d7eab63e34531"
        },
        {
          "alg" : "SHA-256",
          "content" : "affd06771589ebfe454bb11315a4f466ecaa135b95f3e7939534cf1d2fd7064c"
        },
        {
          "alg" : "SHA-512",
          "content" : "7efb2771bad2e643b0e814cd78ab4f9af3ea166643700776618c397e9755ca11f4b7c00030562a619932c9d2ec5114fd253ece3abbc3db2f1a064431d8990733"
        },
        {
          "alg" : "SHA-384",
          "content" : "96fd8b2732de79c40e5e6613e324d2845dc6e19bf31bc7f3e9fa6730fa527cd16579ba9eb7915481faae1e9a32dc82fd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "252a3e6847dafd84955a71724d71641b5c6508bcbbc1f2457fdb18994b61f6d78b08cbd40d5c430743950e351ec79835"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4c066cec2c40de9b5743f43d99b629d60de937718f69ffd837bbe5902682ee92"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3334a1fff0751378abe8e010ca9716a85a15a90450265699c32886d2e8f9ff63df89237667a262350d860dbfb2f20fffff14e9a094f0bd2acf990dd543c2b86f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.17?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-parent/jcl-over-slf4j"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.17?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "2.0.17",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b6480d114a23683498ac3f746f959d2f"
        },
        {
          "alg" : "SHA-1",
          "content" : "d9e58ac9c7779ba3bf8142aff6c830617a7fe60f"
        },
        {
          "alg" : "SHA-256",
          "content" : "7b751d952061954d5abfed7181c1f645d336091b679891591d63329c622eb832"
        },
        {
          "alg" : "SHA-512",
          "content" : "9a3e79db6666a6096a3021bb2e1d918f30f589d8de51d6b600f8ebd92515a510ae2d8f87919cc2dfa8365d64f10194cac8dfa0fb950160eef0e9da06f6caaeb9"
        },
        {
          "alg" : "SHA-384",
          "content" : "6ea24f814a9b6ece428cfd0535e2f3b8927005745ef61006b50fdb5a90126ee5ea05650155382b3b755c5bce38ef3944"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9b1015052f0ec43f9be09764e131834157599611cb52f6fe591c4ac6a8ab4817518f2a4b8871e5e738c8678e93af5557"
        },
        {
          "alg" : "SHA3-256",
          "content" : "00559b4f4066b4917ba4fe2a6f23111eaeada321112d030910d218ced9084b5e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9579c2f7e7516e177c2d493ccc9eb8150978cf19f6f09b28d116f6935239fd56dc6af2b62b3336f79b0b462445550cd1fb5377a07001a6f44aaab6a32fa2fa47"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-parent/slf4j-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-utils",
      "version" : "4.0.1",
      "description" : "A collection of various utility classes to ease working with strings, files, command lines and more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0fa4c6aabfa676c4a1a1bf0c7473f684"
        },
        {
          "alg" : "SHA-1",
          "content" : "2162c639aa9b081ef2a0be9d41643513e284bf99"
        },
        {
          "alg" : "SHA-256",
          "content" : "96b9cc44439191d2d0635974e2d44e768736b4fb2abcb65f94cd95e41912fa8b"
        },
        {
          "alg" : "SHA-512",
          "content" : "ecf609d495c9e7728476ca35d4290c94d862c393afc6a98090571f4047d4184d1c5231fd6af4bc68fe7d832eca26171f86af5ec590d6f2f70740b720a6f636b5"
        },
        {
          "alg" : "SHA-384",
          "content" : "713234f501e1911062a1e4272e10ab355c7dfb8f67ee1068dd35e71f6c1bd97becf4cf41a242877f8272db4028408e3c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "615f7639ab790d564b7b96ba58bc30fe38e65348ab6f1d5fa3cc6e96924badea397fb6ceeef1ba3f4bfe738d9c7d9797"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2ea14f0fa9b179ee6a286b3973bcb11ab30f419aa0f4bc02bfaaaa65ac984de2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e21bf0de988be9861c589574c742b5f94558baf69e965d103e9b8bdb24bbe3a805bff45c5358f515749b5e9061af2ab4b99f6328babc3c396fc04f1cfd4b5fcc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-utils/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-utils/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/mojohaus-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/codehaus-plexus/plexus-utils/tree/plexus-utils-4.0.1/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-xml",
      "version" : "4.0.4",
      "description" : "A collection of various utility classes to ease working with XML.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cdfee6d6af39fca120b782338ec616d4"
        },
        {
          "alg" : "SHA-1",
          "content" : "81419c08701143a41034b410b208dc45fc7cd476"
        },
        {
          "alg" : "SHA-256",
          "content" : "069e78b537108dc6124a67073fc998264791f6b6499e955a38e72bb3e4fe1adf"
        },
        {
          "alg" : "SHA-512",
          "content" : "0637a09fe9c4828b8da9012888342e46856de89e7bb47966de731bf344560146efe00572dae481288ef53e74541d2c693b5be1ffdf75b19b20ffa1000871d408"
        },
        {
          "alg" : "SHA-384",
          "content" : "501a8b7c92fc9ddbdbd394f58464e1c286514cddd60b3e1965ebb47abd16e23fbed3cbda675ce93aca9922237ac3227b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "db54d2c12c71c38f451cf0aed2cf1982b6ff8471a62ace070bea7e3b24c613ff504a1359f43eb268886a683baebdba36"
        },
        {
          "alg" : "SHA3-256",
          "content" : "474ce5c901783836a1b1fd90acf17a26c434da44d518c00ddf15f6c538af3906"
        },
        {
          "alg" : "SHA3-512",
          "content" : "55b956ef8fe4853b35c72811df5bc8b51c77e758e995aed20dfe280a561bf1e3265b56cca8b5d7a28e640367af2615cb8b51d0dfbf732f48e82bce2f86c7bf77"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-xml@4.0.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-xml/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-xml/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/mojohaus-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/codehaus-plexus/plexus-xml/tree/plexus-xml-4.0.4/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-xml@4.0.4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-xml-impl",
      "version" : "4.0.0-alpha-9",
      "description" : "Provides the implementation classes for the Maven API XML",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2bf5500ff3f58cf1af9d7c2a2d96cfc8"
        },
        {
          "alg" : "SHA-1",
          "content" : "1ce26ef01fb26c663073fa6dcef50bb2dbcc170a"
        },
        {
          "alg" : "SHA-256",
          "content" : "26e702b881d57ae4ee88d02c00940ba64063705ee69205ae8958bf839a8b06b1"
        },
        {
          "alg" : "SHA-512",
          "content" : "0315318601d52d43d1b85d28e255616cc7ed9977fa55a5e5ecd00053040f232606e49aeae260dd63cfa2ed541fc0bd8aad2278e3f4cd79ebead96c4ead8d442a"
        },
        {
          "alg" : "SHA-384",
          "content" : "43e060965fef838374d03fc951b5d263ce27a456e97b898e9d0d8dbbe85122c558dba8e5c94712a906be11dedbee98ab"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8bf78a8daa005c82d76a7232141081776aa9488c6d2fd49cb252dd166a5b80fb4cce99cd256b2d7d69e6b0f20e5508b7"
        },
        {
          "alg" : "SHA3-256",
          "content" : "59c224eb1122494773115fe1528a530661290b165445e81b9600a80f125bf05c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "239ccfd1f8f5a2c14fda136817891b2fbbd7ab99bc6638818a51c45c9c8c2e5cf1ac6e5b177b88180f9a425059e67bc5081ff6060ac39fcc758ee62afbb28496"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-xml-impl@4.0.0-alpha-9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/4.0.0-alpha-9/maven-xml-impl/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-4.0.0-alpha-9/maven-xml-impl"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-xml-impl@4.0.0-alpha-9?type=jar"
    },
    {
      "group" : "javax.inject",
      "name" : "javax.inject",
      "version" : "1",
      "description" : "The javax.inject API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "289075e48b909e9e74e6c915b3631d2e"
        },
        {
          "alg" : "SHA-1",
          "content" : "6975da39a7040257bd51d21a231b76c915872d38"
        },
        {
          "alg" : "SHA-256",
          "content" : "91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff"
        },
        {
          "alg" : "SHA-512",
          "content" : "e126b7ccf3e42fd1984a0beef1004a7269a337c202e59e04e8e2af714280d2f2d8d2ba5e6f59481b8dcd34aaf35c966a688d0b48ec7e96f102c274dc0d3b381e"
        },
        {
          "alg" : "SHA-384",
          "content" : "ac04c9f03ccbe35a25deb8b50280a0ca01dbe6aff0dd795d55af6112bfe3cd5817eb82f32fb18378d86cd64b07597190"
        },
        {
          "alg" : "SHA3-384",
          "content" : "fca090ecb1edeacb9fe865dc515cd1d109b323cd742d4a9733ff199a96ee96e0db4f924079520b9c189ef750f255475d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5b0054e39e522de0e0ffc4034d12f72270291fb24d94d5ffc9c4d69c25035fc6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fb290f5a70b1efc1dff12f40a0b2d7b94019f66da42e78010c0b8e61f222c4f267b67e356a9e9c346eb801e5515e36243888f280c5cb95c2dd69016a30cadeb9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/javax.inject/javax.inject@1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://code.google.com/p/atinject/"
        },
        {
          "type" : "vcs",
          "url" : "http://code.google.com/p/atinject/source/checkout"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.inject/javax.inject@1?type=jar"
    },
    {
      "publisher" : "The Eclipse Foundation",
      "group" : "org.eclipse.sisu",
      "name" : "org.eclipse.sisu.plexus",
      "version" : "0.9.0.M3",
      "description" : "Plexus-JSR330 adapter; adds Plexus support to the Sisu-Inject container",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "964e7bc9837b270566f18b87af65f5d7"
        },
        {
          "alg" : "SHA-1",
          "content" : "b493c7abcc6e04fa0a6a20d489a3db0395c76f70"
        },
        {
          "alg" : "SHA-256",
          "content" : "c99674d3773e26154885661711f0b6d63aa5008f5cc99227a236756d4ad9de5e"
        },
        {
          "alg" : "SHA-512",
          "content" : "68c5df01ad522917d954b62cb3b11376b3446920e8d5cb35737de508e6acd91a36b34144933f427bbe1d29dca9097ba9dd2431c713fe18069f271a80b519f051"
        },
        {
          "alg" : "SHA-384",
          "content" : "bd39a6cc9c18c62e64393da231b61efbf5bdeb8c0306e455bbc6e33f4b614e14023ccfbec83c943994da6684ab453092"
        },
        {
          "alg" : "SHA3-384",
          "content" : "aa3ca83152de61ee92ba94f655190b61aa25520db903489656485a56aa9314a453a91284c0fb377dffb8160580a610c2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "434081d9dbbd4ffedafa88010d4db9a699fd2bc736e8b12b3bf3cede21f30aa9"
        },
        {
          "alg" : "SHA3-512",
          "content" : "86e4c864bdfcbcb7d58ac08d80b2c1406cadf10424c92889d1cb181f924af19b28d53210f77cb2b0515faa7ac6fff2dacd25ae1b62c419a798bdfd2a9f3108ae"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.eclipse.org/sisu/org.eclipse.sisu.plexus/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/sisu/job/sisu.inject/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/sisu.inject/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/sisu-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/sisu.inject/org.eclipse.sisu.plexus"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M3?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-component-annotations",
      "version" : "2.1.0",
      "description" : "Plexus Component \"Java 5\" Annotations, to describe plexus components properties in java sources with standard annotations instead of javadoc annotations.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "141fd7a2ae613cb17d25ecd54b43eb3f"
        },
        {
          "alg" : "SHA-1",
          "content" : "2f2147a6cc6a119a1b51a96f31d45c557f6244b9"
        },
        {
          "alg" : "SHA-256",
          "content" : "bde3617ce9b5bcf9584126046080043af6a4b3baea40a3b153f02e7bbc32acac"
        },
        {
          "alg" : "SHA-512",
          "content" : "cc534fda54272f074fe9edd581a6c3e1ea98127340c7f852c4b4953a44dad048ace22dfa10f30d6adcdfc15efd319dac778a03ebbe20de7779fd1df640506e88"
        },
        {
          "alg" : "SHA-384",
          "content" : "dd102351fada419b7e66f38b62868db4141cf93863b8117926564dd883b4a3960d9c9682b346f7106cdaa2a4138c794f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2b335733d7683e8bae312b0608af7c17b1aa22a1b9cbc4cc11549faf6bacc51c7591f1073aac99e5d70fdea31c6253c4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2e9f44d1c5df160563d3cedaf01929682fb3e0432beca7c782d8ba0324fb32b1"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5051e4210310ec60fae9f32284a93da3cff63bf43a7dda30eaf2715d24cfc7f2353a6c2731521f4d6ef32e7a3e2526b6a41c8a11b0889c8dbf7ffc7914812641"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://codehaus-plexus.github.io/plexus-containers/plexus-component-annotations/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://github.com/codehaus-plexus/plexus-containers/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://archive.plexus.codehaus.org/user"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/codehaus-plexus/plexus-containers/plexus-component-annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-classworlds",
      "version" : "2.8.0",
      "description" : "A class loader framework",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "92089dee35db6423c2128559238430cb"
        },
        {
          "alg" : "SHA-1",
          "content" : "5d0d8c71b61b38ce127a46702a453f9aa09a4ee2"
        },
        {
          "alg" : "SHA-256",
          "content" : "081b40e0eab033cd5ac72d2501bfff4f5fd2a3eef827051111730ea152681c72"
        },
        {
          "alg" : "SHA-512",
          "content" : "3f8eeaf5089244ca8e0eec46ab0d57924dd187375413ddf55edf5881a2fd17f7b4a12abd0b402e8a2d5c8428bff87809f40921eda9f6ddc20585e861825618ec"
        },
        {
          "alg" : "SHA-384",
          "content" : "b689762c3c4a75b2f6eda24e97c6d77c1a550b755baa1d7f6b3151f413421380232d5474f3c1b2a15665651d8909b456"
        },
        {
          "alg" : "SHA3-384",
          "content" : "929e03c89948c96515c8ff58da7653c1396e261b7c5b7d22575634f7266496d655397864ab2e129778af759993f57520"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a1006c9de6b5f60a8e2ee5839c2fbc128158f6008458e42e65123e7bb2e3cbbc"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5a813f86a7246cd2f0021d1d6891497128cefcbb2258d3865dc41eb7f4fb5f21c5875f21418a8bbff2b6b100ed0523e7101b7937aa84b6be87a808cfee73e50d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.8.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-classworlds/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-classworlds/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/mojohaus-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/codehaus-plexus/plexus-classworlds/tree/plexus-classworlds-2.8.0/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.8.0?type=jar"
    },
    {
      "publisher" : "The Eclipse Foundation",
      "group" : "org.eclipse.sisu",
      "name" : "org.eclipse.sisu.inject",
      "version" : "0.9.0.M3",
      "description" : "JSR330-based container; supports classpath scanning, auto-binding, and dynamic auto-wiring",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "643a13084e0ac59cdda06319e1b348ea"
        },
        {
          "alg" : "SHA-1",
          "content" : "3665002ba4d16dfa779ef658a63d0608c4bd898b"
        },
        {
          "alg" : "SHA-256",
          "content" : "15335c4dcf082f599fb8eddcfb58d6a7e9a9c97de2883c257089a479b9b24522"
        },
        {
          "alg" : "SHA-512",
          "content" : "76267078f3dd887fd7c4a0931d0ae057d5f51478f712ce4bb5530cfa5c2aa18a8dbe935b32c1afb01a4e2cde44d30579baf5868b8b63ee066ea0714fd9d8a81c"
        },
        {
          "alg" : "SHA-384",
          "content" : "d24164f8aaae165de8533530b90168228e7d107a5eeb63997bf6e2d41f1adfaabf29aa9ab4f08e3445c69aa57f6c09b8"
        },
        {
          "alg" : "SHA3-384",
          "content" : "aab9bce13f047bcdd8d47420f80e88a314f3566bf7edcd7d37cf286865f45586fda8745793eb2a54c506759f9654bd5b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d9e302304b0f99703243f697f72b12e42df692553c08ef9d2d2e0eb83847eab7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8ac0b60618e01e819fcabcfd210176310d98f9856b49cafd5dfb451393b791b1ed43fc17e359c5868662dc76e0059e23a152c5564f7ce94ca4720bd092cb29d0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.eclipse.org/sisu/org.eclipse.sisu.inject/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/sisu/job/sisu.inject/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/sisu.inject/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/sisu-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/sisu.inject/org.eclipse.sisu.inject"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M3?type=jar"
    },
    {
      "publisher" : "Google, Inc.",
      "group" : "com.google.inject",
      "name" : "guice",
      "version" : "6.0.0",
      "description" : "Guice is a lightweight dependency injection framework for Java 8 and above",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4f1f2450f527c2076b85227f413b4e25"
        },
        {
          "alg" : "SHA-1",
          "content" : "9b422c69c4fa1ea95b2615444a94fede9b02fc40"
        },
        {
          "alg" : "SHA-256",
          "content" : "b4d4f7ec5e8fc17b4f98dee9d3f6cf6ae3ae13e2e5ed4b2f7bbf09bc4bb675d5"
        },
        {
          "alg" : "SHA-512",
          "content" : "a08ac6ee607d6420ad33789773556fcedb0444fc5e8863546ced71552c5dae0729314458aece36c89e338a321e40839ee6e133ba19bfee1d1cd701c623c21823"
        },
        {
          "alg" : "SHA-384",
          "content" : "9944897a476e9357c7fb52380a8dc3d2cd03a38ea83d787f8bb1203045f3263b665dc7b4108956e6bc08c67a00fe3be8"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3671e60e9dfd3fbf28242f9a1bd278a5d3e0678b62b27fd401ae45c8acadf3f8a3e34cfa163108e5aca4a6a78d7845d8"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4894765f315bfcea4f5fa1a191c22458848108008b2f5c1c12e3689433e8aef3"
        },
        {
          "alg" : "SHA3-512",
          "content" : "644d5203a8a7bbbe4a82337b0ce85310f0069add4fd132bc5450dbb993f0481cd0e1cca623d6d5b775d774b2a78195a62cdc14c405695117552fb1b221a37ea0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.inject/guice@6.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guice/guice"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/google/guice"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guice/issues/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://groups.google.com/group/google-guice/topics"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guice/guice"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.inject/guice@6.0.0?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.inject",
      "name" : "jakarta.inject-api",
      "version" : "2.0.1",
      "description" : "Jakarta Dependency Injection",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "72003bf6efcc8455d414bbd7da86c11c"
        },
        {
          "alg" : "SHA-1",
          "content" : "4c28afe1991a941d7702fe1362c365f0a8641d1e"
        },
        {
          "alg" : "SHA-256",
          "content" : "f7dc98062fccf14126abb751b64fab12c312566e8cbdc8483598bffcea93af7c"
        },
        {
          "alg" : "SHA-512",
          "content" : "f186b2ada470abba1cc3b4f8c4373d940fb7c71a051b2c26f7c204ad4dfb69235fbf3f9c33da36d744cb90f52d921c51d76c0ff263bacb35eafb66cab83dc47d"
        },
        {
          "alg" : "SHA-384",
          "content" : "405bd297a73901f013d48a0da028d04d400f3e61f4997c0e7297eb08120670a0e242e0002db8f130c33ab16cb02feb2d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4db7e54434d0a208c876868f5595b808f2728c0455feaa752ab7b569a2186fc37cb891c9aa0076de3d08f6da6ff06eba"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3a5aba9f1ff1a130b76af886123eb375fa578498490df3dc60bb7ce7d59e9404"
        },
        {
          "alg" : "SHA3-512",
          "content" : "00bba8efc2d6e7f0a509b321868d75f1aaf0681a750d089d913bde8424ab7bb88aadf49de6e291e352523e4f8c117b1b48033ff31d4d665dcc43c4c6ea000ba9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/eclipse-ee4j/injection-api"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/ee4j/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/injection-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar"
    },
    {
      "group" : "aopalliance",
      "name" : "aopalliance",
      "version" : "1.0",
      "description" : "AOP Alliance",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "04177054e180d09e3998808efa0401c7"
        },
        {
          "alg" : "SHA-1",
          "content" : "0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8"
        },
        {
          "alg" : "SHA-256",
          "content" : "0addec670fedcd3f113c5c8091d783280d23f75e3acb841b61a9cdb079376a08"
        },
        {
          "alg" : "SHA-512",
          "content" : "3f44a932d8c00cfeee2eb057bcd7c301a2d029063e0a916e1e20b3aec4877d19d67a2fd8aaf58fa2d5a00133d1602128a7f50912ffb6cabc7b0fdc7fbda3f8a1"
        },
        {
          "alg" : "SHA-384",
          "content" : "4dddf44338b5aff9580da2532b81c0ac3e1d09e1f28c6db871a55cad442b705dd7791eb07f9d4577d49d0be3673ba783"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2bd64cbaf769c6e4e85e34f7a6119d89e16fbf55af3fc5d6cbd52eb214c367dec1ac7b9062ee0fb35a2e0acfc7c477e1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d4a726b2bf8aa58197021a7d8fca674b4b2790d4c48de43a92f728866a91c2f0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "830bc3f8328be76897990e9b9fc42eef02623115e456af96ad09b20900ad615519c8c8de60155ac04fb332eaa9510110d52edd13911af76271c71d91cbd789cc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Public Domain"
          }
        }
      ],
      "purl" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://aopalliance.sourceforge.net"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar"
    },
    {
      "group" : "com.google.guava",
      "name" : "guava",
      "version" : "33.4.0-jre",
      "description" : "Guava is a suite of core and expanded libraries that include utility classes, Google's collections, I/O classes, and much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5732af16367192820c7bf177e9b29512"
        },
        {
          "alg" : "SHA-1",
          "content" : "03fcc0a259f724c7de54a6a55ea7e26d3d5c0cac"
        },
        {
          "alg" : "SHA-256",
          "content" : "b918c98a7e44dbe94ebd9fe3e40cddaadb5a93e6a78eb6008b42df237241e538"
        },
        {
          "alg" : "SHA-512",
          "content" : "778bd20c3ad83dd17d742368814cf97f28f3ec5723ef952a634290dbe0b4ced8c2a8f878d710fed10223d4393c510df39583c78921c592f605a0bb7003d98f84"
        },
        {
          "alg" : "SHA-384",
          "content" : "4beba310b95d9d0d6ecceec863b056ec84a3b4d8a6591b8ee3c85e4cbaf6d744a70021b1e5779d90bdb66aa6e2b9c69e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8ba470051b86bda40cf096d27f11f887f4080a8fff36b7823b0dd63a8875b043f33ebb649f44f6f2f3fcc749f61357ce"
        },
        {
          "alg" : "SHA3-256",
          "content" : "05caa13e6a20cec5bf02c6e49dfd9863f43edbd6778ae39dc8c89d7d3b4f559b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d829570cb2b9e446cd3afa17d523501fc4c13736ff0d1e59167bd9f0a83e2eebd489dc6e728ea06b24695d53db91fce5bc265f8a127852082a194b8a006628dd"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/guava@33.4.0-jre?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guava"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/google/guava/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava/guava"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/guava@33.4.0-jre?type=jar"
    },
    {
      "group" : "com.google.guava",
      "name" : "failureaccess",
      "version" : "1.0.2",
      "description" : "Contains com.google.common.util.concurrent.internal.InternalFutureFailureAccess and InternalFutures. Most users will never need to use this artifact. Its classes are conceptually a part of Guava, but they're in this separate artifact so that Android libraries can use them without pulling in all of Guava (just as they can use ListenableFuture by depending on the listenablefuture artifact).",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3f75955b49b6758fd6d1e1bd9bf777b3"
        },
        {
          "alg" : "SHA-1",
          "content" : "c4a06a64e650562f30b7bf9aaec1bfed43aca12b"
        },
        {
          "alg" : "SHA-256",
          "content" : "8a8f81cf9b359e3f6dfa691a1e776985c061ef2f223c9b2c80753e1b458e8064"
        },
        {
          "alg" : "SHA-512",
          "content" : "ff4ee76aa661708989d53d45576cff3beea9ebbd86481dbbf2ee8c81bb22f882097b430588312b711025f0e890f22c6799d722ccd422a6a7278de08660fe2f51"
        },
        {
          "alg" : "SHA-384",
          "content" : "85a7bd379da27ad57a4e5c02099fef206083caa52244597ac858a921b48e2912cfa7ef0e7d0c7a10ab2dd8d0f7d6ada0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "652b22d09b297320e62ac254801e7d3a0fd2a8038461c5cbf7a53a27d681f62b768b964aa62c864453c4e7af217c8c4a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a650b2f7982affc2dbb7e2807fbb0fbf58b74fd8dc111cc6dc5e95a00179b7e3"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2c5ee7629a8fb1c952f437b80fcd1cff86c54ff81de02eda1eb73c0bbfe38d3f072946f8c6396c7f1e46e16a6d44ad393dfe6fd2dd96f75ebb854263d36bb193"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/failureaccess@1.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guava/failureaccess"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/google/guava"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava/failureaccess"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/failureaccess@1.0.2?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.apache.maven/maven-resolver-provider@4.0.0-rc-3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-api-annotations@4.0.0-rc-3?type=jar",
        "pkg:maven/org.apache.maven/maven-api-xml@4.0.0-rc-3?type=jar",
        "pkg:maven/org.apache.maven/maven-api-metadata@4.0.0-rc-3?type=jar",
        "pkg:maven/org.apache.maven/maven-api-spi@4.0.0-rc-3?type=jar",
        "pkg:maven/org.apache.maven/maven-api-core@4.0.0-rc-3?type=jar",
        "pkg:maven/org.apache.maven/maven-xml@4.0.0-rc-3?type=jar",
        "pkg:maven/org.apache.maven/maven-support@4.0.0-rc-3?type=jar",
        "pkg:maven/org.apache.maven/maven-model@4.0.0-rc-3?type=jar",
        "pkg:maven/org.apache.maven/maven-model-builder@4.0.0-rc-3?type=jar",
        "pkg:maven/org.apache.maven/maven-repository-metadata@4.0.0-rc-3?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-api@2.0.7?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@2.0.7?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-util@2.0.7?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@2.0.7?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-connector-basic@2.0.7?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-transport-file@2.0.7?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-transport-apache@2.0.7?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-xml@4.0.4?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M3?type=jar",
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M3?type=jar",
        "pkg:maven/com.google.inject/guice@6.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-api-annotations@4.0.0-rc-3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-api-xml@4.0.0-rc-3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-api-annotations@4.0.0-rc-3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-api-metadata@4.0.0-rc-3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-api-annotations@4.0.0-rc-3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-api-spi@4.0.0-rc-3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-api-annotations@4.0.0-rc-3?type=jar",
        "pkg:maven/org.apache.maven/maven-api-model@4.0.0-rc-3?type=jar",
        "pkg:maven/org.apache.maven/maven-api-core@4.0.0-rc-3?type=jar",
        "pkg:maven/org.apache.maven/maven-api-di@4.0.0-rc-3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-api-model@4.0.0-rc-3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-api-annotations@4.0.0-rc-3?type=jar",
        "pkg:maven/org.apache.maven/maven-api-xml@4.0.0-rc-3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-api-core@4.0.0-rc-3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-api-annotations@4.0.0-rc-3?type=jar",
        "pkg:maven/org.apache.maven/maven-api-di@4.0.0-rc-3?type=jar",
        "pkg:maven/org.apache.maven/maven-api-model@4.0.0-rc-3?type=jar",
        "pkg:maven/org.apache.maven/maven-api-settings@4.0.0-rc-3?type=jar",
        "pkg:maven/org.apache.maven/maven-api-toolchain@4.0.0-rc-3?type=jar",
        "pkg:maven/org.apache.maven/maven-api-plugin@4.0.0-rc-3?type=jar",
        "pkg:maven/org.apache.maven/maven-api-xml@4.0.0-rc-3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-api-di@4.0.0-rc-3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-api-settings@4.0.0-rc-3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-api-annotations@4.0.0-rc-3?type=jar",
        "pkg:maven/org.apache.maven/maven-api-xml@4.0.0-rc-3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-api-toolchain@4.0.0-rc-3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-api-annotations@4.0.0-rc-3?type=jar",
        "pkg:maven/org.apache.maven/maven-api-xml@4.0.0-rc-3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-api-plugin@4.0.0-rc-3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-api-annotations@4.0.0-rc-3?type=jar",
        "pkg:maven/org.apache.maven/maven-api-xml@4.0.0-rc-3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-xml@4.0.0-rc-3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-api-xml@4.0.0-rc-3?type=jar",
        "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.1.0?type=jar",
        "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.1.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-support@4.0.0-rc-3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-api-model@4.0.0-rc-3?type=jar",
        "pkg:maven/org.apache.maven/maven-api-settings@4.0.0-rc-3?type=jar",
        "pkg:maven/org.apache.maven/maven-api-toolchain@4.0.0-rc-3?type=jar",
        "pkg:maven/org.apache.maven/maven-api-metadata@4.0.0-rc-3?type=jar",
        "pkg:maven/org.apache.maven/maven-xml@4.0.0-rc-3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-model@4.0.0-rc-3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-api-model@4.0.0-rc-3?type=jar",
        "pkg:maven/org.apache.maven/maven-api-xml@4.0.0-rc-3?type=jar",
        "pkg:maven/org.apache.maven/maven-api-annotations@4.0.0-rc-3?type=jar",
        "pkg:maven/org.apache.maven/maven-support@4.0.0-rc-3?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-xml@4.0.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-xml@4.0.4?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-xml-impl@4.0.0-alpha-9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-xml-impl@4.0.0-alpha-9?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-api-xml@4.0.0-rc-3?type=jar",
        "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.1.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-model-builder@4.0.0-rc-3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-api-annotations@4.0.0-rc-3?type=jar",
        "pkg:maven/org.apache.maven/maven-api-model@4.0.0-rc-3?type=jar",
        "pkg:maven/org.apache.maven/maven-model@4.0.0-rc-3?type=jar",
        "pkg:maven/org.apache.maven/maven-artifact@4.0.0-rc-3?type=jar",
        "pkg:maven/org.apache.maven/maven-builder-support@4.0.0-rc-3?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.27?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-xml@4.0.4?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-artifact@4.0.0-rc-3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-builder-support@4.0.0-rc-3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.27?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-repository-metadata@4.0.0-rc-3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-api-annotations@4.0.0-rc-3?type=jar",
        "pkg:maven/org.apache.maven/maven-api-metadata@4.0.0-rc-3?type=jar",
        "pkg:maven/org.apache.maven/maven-support@4.0.0-rc-3?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-xml@4.0.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-api@2.0.7?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@2.0.7?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven.resolver/maven-resolver-api@2.0.7?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.12.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.code.gson/gson@2.12.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-util@2.0.7?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven.resolver/maven-resolver-api@2.0.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@2.0.7?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven.resolver/maven-resolver-api@2.0.7?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@2.0.7?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-named-locks@2.0.7?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-util@2.0.7?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-named-locks@2.0.7?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-connector-basic@2.0.7?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven.resolver/maven-resolver-api@2.0.7?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@2.0.7?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-util@2.0.7?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-transport-file@2.0.7?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven.resolver/maven-resolver-api@2.0.7?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@2.0.7?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-transport-apache@2.0.7?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven.resolver/maven-resolver-api@2.0.7?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@2.0.7?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-util@2.0.7?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.18.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
        "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.17?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-codec/commons-codec@1.18.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.17?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/javax.inject/javax.inject@1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.8.0?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-xml@4.0.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.8.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.inject/guice@6.0.0?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
        "pkg:maven/aopalliance/aopalliance@1.0?type=jar",
        "pkg:maven/com.google.guava/guava@33.4.0-jre?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/guava@33.4.0-jre?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.guava/failureaccess@1.0.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/failureaccess@1.0.2?type=jar",
      "dependsOn" : [ ]
    }
  ]
}