<?xml version="1.0" encoding="UTF-8"?>
<bom version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.7.10</version>
        <hashes>
          <hash alg="MD5">1cc7f6a0382f8bb2f758d6a6ea401d1b</hash>
          <hash alg="SHA-1">a4297947a1f2d7d453105db542651614bbd37f38</hash>
          <hash alg="SHA-256">bd0fdd8f2f2116eee5e715aeac1580f19eb7a10ec2b6f805b53567067658e872</hash>
          <hash alg="SHA-512">9cde8352a427e10b96cae01348fc7cfe5d4aa9cd0a5e5dd93b414ce3bb7d112993c3b3004e53af52567fbfa16de0704ec59a5556a635ad70571fd124ae389f39</hash>
          <hash alg="SHA-384">93d7bf5b5c735347edfbfbd66810273ca840f9a322b816d22d44c3d8e8255c09e86570bb23712aeb0cade0f478be5aeb</hash>
          <hash alg="SHA3-384">4467f16e9ca32190a6e49c65339eb28ee5e8c78f4e918fcf95128a4b7648898de56ccb43eacfad0c9391ef8cdb7d629a</hash>
          <hash alg="SHA3-256">ed2996c99b483e969221d5e9a40f562ea2ab85442d361d72a90e85266a3ed781</hash>
          <hash alg="SHA3-512">c8e6ea9ddc38edc77e284b3bf541663e84752bdc59ed1935799847a48a14ea2fa531b61008fefcba37d732a56702a11ac112437b9b80d18f4ecc8ef0ecfb32cf</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-settings-builder@4.0.0-alpha-9?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-settings-builder</name>
      <version>4.0.0-alpha-9</version>
      <description>The effective settings builder, with inheritance and password decryption.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-settings-builder@4.0.0-alpha-9?type=jar</purl>
      <externalReferences><reference type="website"><url>https://maven.apache.org/ref/4.0.0-alpha-9/maven-settings-builder/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-4.0.0-alpha-9/maven-settings-builder</url></reference></externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
      <property name="cdx:reproducible">enabled</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-builder-support@4.0.0-alpha-9?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-builder-support</name>
      <version>4.0.0-alpha-9</version>
      <description>Support for descriptor builders (model, setting, toolchains)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">afbc8e930538fd82b4b711f97b30d43e</hash>
        <hash alg="SHA-1">2770524bd7c42e317b88106ba1193a57468c21a6</hash>
        <hash alg="SHA-256">df289e97d6546f992ad9691210cc6fa522cc5bb7000311b106e58e812250bcae</hash>
        <hash alg="SHA-512">594d34a031ee75da7bc77a87797875084d0cb54e814301815a8689d061ebcbbd42e542b60353988af5820644bb9d8753bbb684664c95bb202cf720fbb3958b42</hash>
        <hash alg="SHA-384">6c7277e56eccac90088062a088c6698aef3a5c570ec923d80bb8998e45773d1a0844178b0d4e73a6958dbfcc125d19a6</hash>
        <hash alg="SHA3-384">880518f4d72a7b961d49cf36b425b22cc256ccb00da281bacbed48409870c34ec8bdbfb613b8496a2e831c388f31f319</hash>
        <hash alg="SHA3-256">6e134fd280731b3ebd91b026f31bb64b1957cf0f45a4ffde15fbe5bd4aeb79c3</hash>
        <hash alg="SHA3-512">c19504db9a35884e85c29ea498a1f4745c597247b9d8c3870717466d321a5cf09777af1d4ed0acdb8bcc29dd691bb9f721f8b2768b42baf876b596e98ac2e06d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-builder-support@4.0.0-alpha-9?type=jar</purl>
      <externalReferences><reference type="website"><url>https://maven.apache.org/ref/4.0.0-alpha-9/maven-builder-support/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-4.0.0-alpha-9/maven-builder-support</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.inject/javax.inject@1?type=jar">
      <group>javax.inject</group>
      <name>javax.inject</name>
      <version>1</version>
      <description>The javax.inject API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">289075e48b909e9e74e6c915b3631d2e</hash>
        <hash alg="SHA-1">6975da39a7040257bd51d21a231b76c915872d38</hash>
        <hash alg="SHA-256">91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff</hash>
        <hash alg="SHA-512">e126b7ccf3e42fd1984a0beef1004a7269a337c202e59e04e8e2af714280d2f2d8d2ba5e6f59481b8dcd34aaf35c966a688d0b48ec7e96f102c274dc0d3b381e</hash>
        <hash alg="SHA-384">ac04c9f03ccbe35a25deb8b50280a0ca01dbe6aff0dd795d55af6112bfe3cd5817eb82f32fb18378d86cd64b07597190</hash>
        <hash alg="SHA3-384">fca090ecb1edeacb9fe865dc515cd1d109b323cd742d4a9733ff199a96ee96e0db4f924079520b9c189ef750f255475d</hash>
        <hash alg="SHA3-256">5b0054e39e522de0e0ffc4034d12f72270291fb24d94d5ffc9c4d69c25035fc6</hash>
        <hash alg="SHA3-512">fb290f5a70b1efc1dff12f40a0b2d7b94019f66da42e78010c0b8e61f222c4f267b67e356a9e9c346eb801e5515e36243888f280c5cb95c2dd69016a30cadeb9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/javax.inject/javax.inject@1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://code.google.com/p/atinject/</url></reference><reference type="vcs"><url>http://code.google.com/p/atinject/source/checkout</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-interpolation@1.26?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-interpolation</name>
      <version>1.26</version>
      <description>The Plexus project provides a full software stack for creating and executing software projects.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1049ae9f5cd8cf618abf5bc5805e6b94</hash>
        <hash alg="SHA-1">25b919c664b79795ccde0ede5cee0fd68b544197</hash>
        <hash alg="SHA-256">b3b5412ce17889103ea564bcdfcf9fb3dfa540344ffeac6b538a73c9d7182662</hash>
        <hash alg="SHA-512">6c3b40442adf721d325ee9cbf935d758223a04b3bd8e0f3b60fdb652175c1ca65a6010f7ea8288617ffa73cb1f19d2737c79c403d343b285e0f9afb1729caa60</hash>
        <hash alg="SHA-384">93dcdffb567f4b7d24eecf9fb0733243ebfe1fd80c92fe69532fed9d1727a58ffa5ce7da4ab26b5c6aa8a6a59beb3844</hash>
        <hash alg="SHA3-384">7489d45be45f74f7639db3b18ae6075d32d84adfaa9c4568f3fe2b2fc35c7de73ffce6f42e494466a8c81e78747b0f17</hash>
        <hash alg="SHA3-256">62145ec219beb405063de848cb54e0d63efc8c255322998858d7df74f8d1ae18</hash>
        <hash alg="SHA3-512">12fba4d2ffab1f89003e375bf74df3fc5d0f831906f9716f2ab2fc5a4ca7084c8a61500b24c5fa0ded27d1cef14b030df70b34c148c138136070e27f7cc41536</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-interpolation@1.26?type=jar</purl>
      <externalReferences><reference type="website"><url>http://codehaus-plexus.github.io/plexus-interpolation/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/codehaus-plexus/plexus-interpolation/issues</url></reference><reference type="mailing-list"><url>http://archive.plexus.codehaus.org/user</url></reference><reference type="vcs"><url>http://github.com/codehaus-plexus/plexus-interpolation/tree/plexus-interpolation-1.26/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-settings@4.0.0-alpha-9?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-settings</name>
      <version>4.0.0-alpha-9</version>
      <description>Maven Settings model.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c1d4aa070ceaeccac6c9d348e798b17f</hash>
        <hash alg="SHA-1">79c05913033314c387caa1a710ea3d520cdf1277</hash>
        <hash alg="SHA-256">e646a6aa789930a2e001c2aaa04168e908ed4d0df104ecf02e828f3080deda60</hash>
        <hash alg="SHA-512">24bc563991984a5934a5aa55173b9d25ca82d1d937a89bafa05feb85744e49141368462702ff72d93a5db80ba9a2fd75147592d909344135f6788efb892a2e06</hash>
        <hash alg="SHA-384">9c69e5d9cdaaae6f1f437d6e14ca28c821685cb51db7ee607170c113edcd0247fdd6465349655475aff15ff5f649ac73</hash>
        <hash alg="SHA3-384">74cefa9244b64867b44a32d9c691870e8ae7285f570c070f306268b6fe2bf31b1d40756f2e78ef240727b06f80837306</hash>
        <hash alg="SHA3-256">180827c28ae350b6a46db12ff8ca02c87bdaca0171eba527f49632105e20ff6d</hash>
        <hash alg="SHA3-512">f0df2d29744f51dfce6c288cff263d33056135650da68edca5bd6980c212bd90d5c910c5cca7c732dd6709348d3a66ae4496cc2d6ac38bf2b538be02f66baf74</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-settings@4.0.0-alpha-9?type=jar</purl>
      <externalReferences><reference type="website"><url>https://maven.apache.org/ref/4.0.0-alpha-9/maven-settings/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-4.0.0-alpha-9/maven-settings</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-api-settings@4.0.0-alpha-9?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-api-settings</name>
      <version>4.0.0-alpha-9</version>
      <description>Maven 4 API - Immutable Settings model.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">63d40661245bcc198a72f4d008116deb</hash>
        <hash alg="SHA-1">ac943a4f75dd39428a5456ea7eebb51de9f6898e</hash>
        <hash alg="SHA-256">31b0f4e598668819830bfd0c14c93166cf986edcb5048a689f261e6bf88e12a4</hash>
        <hash alg="SHA-512">232f8f3175d4a8bdb115e50b128cdea4ba70986af9955885ce5be32669ad2dcb19721be57839d5f5b11edd0bdccf68da39dcd6ad1edcb488a60f579778fdef0f</hash>
        <hash alg="SHA-384">03413a346eea6884a49c58532363bb872f25d10c5689bd4ad953ee3628a76454b06a6ad38610787fbb37c73f387c1d66</hash>
        <hash alg="SHA3-384">b4f4a2d00a309d63ead9fbe3f7716ca0636c67a349baa145e2a4112737567ac2c0d5de0c7f4ae2e28e68b39b023e532c</hash>
        <hash alg="SHA3-256">ccd1de9897b9f8157bc5d5dfee4c56fe889de9697c1b6289402feb9b3e14c165</hash>
        <hash alg="SHA3-512">5af5fe3d7bfe9a5e7b3b85a35915812760e375304706a251ce2cd350536fd0c787ace64bf0ce5db11515adc01878a0a09173dfd1bf9655d0915b07c6b3ea9d04</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-api-settings@4.0.0-alpha-9?type=jar</purl>
      <externalReferences><reference type="website"><url>https://maven.apache.org/ref/4.0.0-alpha-9/api/maven-api-settings/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-4.0.0-alpha-9/api/maven-api-settings</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-api-xml@4.0.0-alpha-9?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-api-xml</name>
      <version>4.0.0-alpha-9</version>
      <description>Maven 4 API - Immutable XML.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3578da899bfa57dfb269b0ef04f6059d</hash>
        <hash alg="SHA-1">b3c6e54002f8ec8df8c913b7ae36998ff4418d97</hash>
        <hash alg="SHA-256">29b2628d0f028119715916849c19eed45b32cdc67eb13551798c73afa4aa23d6</hash>
        <hash alg="SHA-512">518d67ab785c832ebc44e3d250580e40e5c6777113539d7e1929cda33f68a8770f34c24f979ed1142d0a6bb6d1a716084ce7589e92dcb7e5a9b1ebdf4671e64f</hash>
        <hash alg="SHA-384">14791b6bbc1961dbef917d71e1b4b1405ec2cd7c7c0ae6ff94b9d19cec0aa53f3bfcdcecc9361ad17bdc566c97fdb24e</hash>
        <hash alg="SHA3-384">e3ae1c0404fccd53dafa7a8439a26b6763b4f6f3e0b30f387c69e613413e4bcc35208ec73ec16f19879d6e92c6ecf855</hash>
        <hash alg="SHA3-256">3177be6134a2167baf033550de5952da8d15d57b4d297bca703d0ea6e3df99fc</hash>
        <hash alg="SHA3-512">46fde3bee7226392ab9bddbe905d07e88b6c615dfe3e1c8a4a3b256bf3bb30e0710ae7c5799e33fdd6f5133a3917a4c6e62e919219ae19573d53d78f5065de5f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-api-xml@4.0.0-alpha-9?type=jar</purl>
      <externalReferences><reference type="website"><url>https://maven.apache.org/ref/4.0.0-alpha-9/api/maven-api-xml/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-4.0.0-alpha-9/api/maven-api-xml</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-api-meta@4.0.0-alpha-9?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-api-meta</name>
      <version>4.0.0-alpha-9</version>
      <description>Maven 4 API - Java meta annotations.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a6ba88c6145aa21ed3360c633fb3746c</hash>
        <hash alg="SHA-1">5d7a76734ec7ccef673dab5d02ed7f8d08a7f11c</hash>
        <hash alg="SHA-256">32c4f5cadbab680c34952f9cb570457a1383ccec4c9a57b0392607d7191c6949</hash>
        <hash alg="SHA-512">a9c7e2dcf666265af2f09fcd069c47d86f799eb8069cc465734ff617b01545434691f511599f1450d7926bdb5b062b0b0a3cec6aa284a2bb22c98aba149165ea</hash>
        <hash alg="SHA-384">1c01bbf09228d3b113ff8ccb9c5709372d6e25678f1138e58259b07af35c7512864c9bfdee6b4984a3e48bc6aa727d11</hash>
        <hash alg="SHA3-384">f77013eebcbdb8253f6e5e2d62d1dd96fec9b27f8109ff3341a3fd6c5899eb720ce8330220455401ffbe542f18f2ca89</hash>
        <hash alg="SHA3-256">d224b2a03c4205a8e1dc8ae87ee47f9bc1791592ba230a400b4efae8f2be31b6</hash>
        <hash alg="SHA3-512">bed22929619201515e21f026b64f6f918fb302215d8f3d3132b705a2cc50950def1890d04d44a4fbe790b632438a2c9c466a2d7ca527e72fafad19a354543ae3</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-api-meta@4.0.0-alpha-9?type=jar</purl>
      <externalReferences><reference type="website"><url>https://maven.apache.org/ref/4.0.0-alpha-9/api/maven-api-meta/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-4.0.0-alpha-9/api/maven-api-meta</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-xml-impl@4.0.0-alpha-9?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-xml-impl</name>
      <version>4.0.0-alpha-9</version>
      <description>Provides the implementation classes for the Maven API XML</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2bf5500ff3f58cf1af9d7c2a2d96cfc8</hash>
        <hash alg="SHA-1">1ce26ef01fb26c663073fa6dcef50bb2dbcc170a</hash>
        <hash alg="SHA-256">26e702b881d57ae4ee88d02c00940ba64063705ee69205ae8958bf839a8b06b1</hash>
        <hash alg="SHA-512">0315318601d52d43d1b85d28e255616cc7ed9977fa55a5e5ecd00053040f232606e49aeae260dd63cfa2ed541fc0bd8aad2278e3f4cd79ebead96c4ead8d442a</hash>
        <hash alg="SHA-384">43e060965fef838374d03fc951b5d263ce27a456e97b898e9d0d8dbbe85122c558dba8e5c94712a906be11dedbee98ab</hash>
        <hash alg="SHA3-384">8bf78a8daa005c82d76a7232141081776aa9488c6d2fd49cb252dd166a5b80fb4cce99cd256b2d7d69e6b0f20e5508b7</hash>
        <hash alg="SHA3-256">59c224eb1122494773115fe1528a530661290b165445e81b9600a80f125bf05c</hash>
        <hash alg="SHA3-512">239ccfd1f8f5a2c14fda136817891b2fbbd7ab99bc6638818a51c45c9c8c2e5cf1ac6e5b177b88180f9a425059e67bc5081ff6060ac39fcc758ee62afbb28496</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-xml-impl@4.0.0-alpha-9?type=jar</purl>
      <externalReferences><reference type="website"><url>https://maven.apache.org/ref/4.0.0-alpha-9/maven-xml-impl/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-4.0.0-alpha-9/maven-xml-impl</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M2?type=jar">
      <publisher>The Eclipse Foundation</publisher>
      <group>org.eclipse.sisu</group>
      <name>org.eclipse.sisu.plexus</name>
      <version>0.9.0.M2</version>
      <description>Plexus-JSR330 adapter; adds Plexus support to the Sisu-Inject container</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">98e320df2caac742b2ae33d938c69df8</hash>
        <hash alg="SHA-1">31456dd2293197bb282c03168f6767acca3dec96</hash>
        <hash alg="SHA-256">9500d303ce467e26d129dda8559c3f3a91277d41ab49d2c4b4a5779536a62fc1</hash>
        <hash alg="SHA-512">907bb88258ba9d9ae465db219de803074a677193f3a5a05cc36c7fcf413123f50742bab231d3eb783395448bb487934f85b12972efe36b77a32e235524bef4ec</hash>
        <hash alg="SHA-384">8eb92a65730622e93791bc4c6435113596473d69f3d8dd5348c42ea47c2a93017674fafb34f5d5a48ef210638d37640d</hash>
        <hash alg="SHA3-384">e97753b0913e87a430a7e6ce8467a2903670edbc87cba4282cd401137983b15cb9c4361c7504e139bb10119d9d7ddfde</hash>
        <hash alg="SHA3-256">883521331173ce90227bec1c5848ffc2f2a45e83eaa29d0376fb80e633c462c0</hash>
        <hash alg="SHA3-512">3429abb8aecac539bbf04bd6f6ba339c71d7156ec0861f27de86e1664312bb30dcd076a317dad0bbdefad89dbd03fbcf56003e16551c3320e2bf223424998c16</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.eclipse.org/sisu/org.eclipse.sisu.plexus/</url></reference><reference type="build-system"><url>https://ci.eclipse.org/sisu/job/sisu.plexus/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse/sisu.plexus/issues</url></reference><reference type="mailing-list"><url>http://dev.eclipse.org/mhonarc/lists/sisu-dev/</url></reference><reference type="vcs"><url>https://github.com/eclipse/sisu.plexus/org.eclipse.sisu.plexus</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar">
      <publisher>GlassFish Community</publisher>
      <group>javax.annotation</group>
      <name>javax.annotation-api</name>
      <version>1.3.2</version>
      <description>Common Annotations for the JavaTM Platform API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2ab1973eefffaa2aeec47d50b9e40b9d</hash>
        <hash alg="SHA-1">934c04d3cfef185a8008e7bf34331b79730a9d43</hash>
        <hash alg="SHA-256">e04ba5195bcd555dc95650f7cc614d151e4bcd52d29a10b8aa2197f3ab89ab9b</hash>
        <hash alg="SHA-512">679cf44c3b9d635b43ed122a555d570292c3f0937c33871c40438a1a53e2058c80578694ec9466eac9e280e19bfb7a95b261594cc4c1161c85dc97df6235e553</hash>
        <hash alg="SHA-384">fc0058495e54efb6e05a34e3ff422e7c8347bcc77d6d9b87e9253424968dee6ef6a215c318d7e54f8705276be81f0682</hash>
        <hash alg="SHA3-384">ed6464b715de6ced0d9981a3f28140824946a4b7a02ffaff6116c833bb36e8f77a6282ce63c0d82cfe841d4fd6916891</hash>
        <hash alg="SHA3-256">ecfc9bef24ae28cf94c6775ecf6e2086d90a25d8d5476a4f6bb24001601b6cd0</hash>
        <hash alg="SHA3-512">f2b333527faedf504f60aa70a3d491972fa76f7e61e6351027f74613f41001157656824fe312b6e1df6dc4979704fe2a745b618d5368a97fe0bf8749739de9e2</hash>
      </hashes>
      <licenses>
        <expression>(CDDL-1.0 OR GPL-2.0-with-classpath-exception)</expression>
      </licenses>
      <purl>pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://jcp.org/en/jsr/detail?id=250</url></reference><reference type="distribution"><url>https://maven.java.net/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/javaee/javax.annotation/issues</url></reference><reference type="mailing-list"><url>javaee-spec@javaee.groups.io</url></reference><reference type="vcs"><url>https://github.com/javaee/javax.annotation</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-component-annotations</name>
      <version>2.1.0</version>
      <description>Plexus Component "Java 5" Annotations, to describe plexus components properties in java sources with
    standard annotations instead of javadoc annotations.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">141fd7a2ae613cb17d25ecd54b43eb3f</hash>
        <hash alg="SHA-1">2f2147a6cc6a119a1b51a96f31d45c557f6244b9</hash>
        <hash alg="SHA-256">bde3617ce9b5bcf9584126046080043af6a4b3baea40a3b153f02e7bbc32acac</hash>
        <hash alg="SHA-512">cc534fda54272f074fe9edd581a6c3e1ea98127340c7f852c4b4953a44dad048ace22dfa10f30d6adcdfc15efd319dac778a03ebbe20de7779fd1df640506e88</hash>
        <hash alg="SHA-384">dd102351fada419b7e66f38b62868db4141cf93863b8117926564dd883b4a3960d9c9682b346f7106cdaa2a4138c794f</hash>
        <hash alg="SHA3-384">2b335733d7683e8bae312b0608af7c17b1aa22a1b9cbc4cc11549faf6bacc51c7591f1073aac99e5d70fdea31c6253c4</hash>
        <hash alg="SHA3-256">2e9f44d1c5df160563d3cedaf01929682fb3e0432beca7c782d8ba0324fb32b1</hash>
        <hash alg="SHA3-512">5051e4210310ec60fae9f32284a93da3cff63bf43a7dda30eaf2715d24cfc7f2353a6c2731521f4d6ef32e7a3e2526b6a41c8a11b0889c8dbf7ffc7914812641</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://codehaus-plexus.github.io/plexus-containers/plexus-component-annotations/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://github.com/codehaus-plexus/plexus-containers/issues</url></reference><reference type="mailing-list"><url>http://archive.plexus.codehaus.org/user</url></reference><reference type="vcs"><url>https://github.com/codehaus-plexus/plexus-containers/plexus-component-annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-classworlds@2.6.0?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-classworlds</name>
      <version>2.6.0</version>
      <description>A class loader framework</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">67e722b27e3a33b33c1b263b99dd7c43</hash>
        <hash alg="SHA-1">8587e80fcb38e70b70fae8d5914b6376bfad6259</hash>
        <hash alg="SHA-256">52f77c5ec49f787c9c417ebed5d6efd9922f44a202f217376e4f94c0d74f3549</hash>
        <hash alg="SHA-512">6a58048d9db54e603b9cfd35373cf695b66dd860bec878c663b4fc53b6b3d44dd5b0c92e7603654911b1f78e63ef277cf6b272fe069a360989138550545f274d</hash>
        <hash alg="SHA-384">e839707ea5c4351f2703c6861ee4d58e08df0f7509110af13d4b3824e6ec5cfd65508fa80cc3f222baf5cf6c4ab5d5ac</hash>
        <hash alg="SHA3-384">75389fc7ed9aa3ad33ff317b0d41851fe0073b37aa8c33081722bfafb851493fb0e3b9629f924026fc32841f01399695</hash>
        <hash alg="SHA3-256">3aef41be29373137c58c415693b312c95e048731dce519ab88649eae9ba0e492</hash>
        <hash alg="SHA3-512">312eff142f86b9e110131dcca69527fbec80478e463fed5a34e2bd628673bce7be9ddb6fe0cda7fab2a119d1f310629413740019e686e9162194984ab6e06bf4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-classworlds@2.6.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://codehaus-plexus.github.io/plexus-classworlds/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://github.com/codehaus-plexus/plexus-classworlds/issues</url></reference><reference type="mailing-list"><url>http://archive.plexus.codehaus.org/user</url></reference><reference type="vcs"><url>http://github.com/codehaus-plexus/plexus-classworlds/tree/plexus-classworlds-2.6.0/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-xml@4.0.1?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-xml</name>
      <version>4.0.1</version>
      <description>A collection of various utility classes to ease working with XML.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">33b3cbfce10fbae18749358d9803fcc7</hash>
        <hash alg="SHA-1">736d992ca3f42181ae6ddf8d9d184105e4ebd751</hash>
        <hash alg="SHA-256">a5b13d1a8efb8e9240d9a32b7a7da87b5dfff563e7737f7005d334af861f1f62</hash>
        <hash alg="SHA-512">2c26eb899e5140aabee1d592b965a50ee34463d2a86ca388cfb94a5ae4f6514541a8ba880135122a9589566012537c47932687f8e854f4d66779a38c47856567</hash>
        <hash alg="SHA-384">d0af58c3d41930a2bd6a4c998e0b49682fe40632ab2dd700eac1ff41b2de4ce6e7ef03a7cb999d14a393fb5603f13b30</hash>
        <hash alg="SHA3-384">d755fb0bbd118738dcc6e80407ab762f4103e0b212d53de9431197a7330231a768e7d7b7137f02c45163fbb61f1c3188</hash>
        <hash alg="SHA3-256">28b0de82ff98f0479a497f129de1a9f2ad9b3ae5cd43f4db26794c2fd6945756</hash>
        <hash alg="SHA3-512">fb45f6d819422c4b2e7b40a5df4edb8b194080cb6ad6c7079a6f43543dc968b1219392e13f6bd950d1207d2d421cddb6cf77d5e6f3f0389512686e7dc81be265</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-xml@4.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://codehaus-plexus.github.io/plexus-xml/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/codehaus-plexus/plexus-xml/issues</url></reference><reference type="mailing-list"><url>https://groups.google.com/forum/#!forum/mojohaus-dev</url></reference><reference type="vcs"><url>https://github.com/codehaus-plexus/plexus-xml/tree/plexus-xml-4.0.1/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.woodstox/woodstox-core@6.5.1?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.woodstox</group>
      <name>woodstox-core</name>
      <version>6.5.1</version>
      <description>Woodstox is a high-performance XML processor that implements Stax (JSR-173),
SAX2 and Stax2 APIs</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">961dd4b2afedf95293dfdd8adfc8f211</hash>
        <hash alg="SHA-1">c6e52e84fe959e69a243c83ec7d24cd889444ddf</hash>
        <hash alg="SHA-256">c928d60665c6415fb1c39775cf95cfc44f7f4580cf5ab01b1c380ebffd76887f</hash>
        <hash alg="SHA-512">d9b3cf6aaac85d8c349e7a24ad30f7e23b7765f1b7ce2fdf301bf2240b9c7ee184bdd938e58be6df9ac90e97e3b8c7b34f8fa9da27d1ed8de78765a8345b18f2</hash>
        <hash alg="SHA-384">d51e67aae26449a2cdffa90a08b09cc805b85da3e758011a0945fc8b0ee8c18e98c6f94f0c0cf46b7a49e7370073068c</hash>
        <hash alg="SHA3-384">2e731b74e4814647b1a320cd2f1b9f9914db1cb07510e69fb4dda33c6b1586fb2ee9e3f5af027c98dd0d33e2ed4b19de</hash>
        <hash alg="SHA3-256">f84ca4c9bb77abb6e61930c7debee48497b2febc30d48329c6b15546dd00371b</hash>
        <hash alg="SHA3-512">257aea7a23c4631eaaa942763e639d239660f29cfb7190f0b112abf6301a214fcc8e84b118ba73d92861a5f441bee479908a4831352ce2278d3d40ef51067894</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.woodstox/woodstox-core@6.5.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/woodstox</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/woodstox/issues</url></reference><reference type="vcs"><url>https://github.com/FasterXML/woodstox</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar">
      <publisher>fasterxml.com</publisher>
      <group>org.codehaus.woodstox</group>
      <name>stax2-api</name>
      <version>4.2.1</version>
      <description>tax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">af8377bc7882332e22456616a9f164f6</hash>
        <hash alg="SHA-1">a3f7325c52240418c2ba257b103c3c550e140c83</hash>
        <hash alg="SHA-256">678567e48b51a42c65c699f266539ad3d676d4b1a5b0ad7d89ece8b9d5772579</hash>
        <hash alg="SHA-512">00efc5d4d17540fb180c5b20d456630a8b3262dff46676689ae916ba16f0fbd9b1a71c7badfb254faad6597f94fed1edb96f77c15f40178eaf4d8cd35cea5e8d</hash>
        <hash alg="SHA-384">97a6a9f0cc666776e4a4f08729c303d2a602ce5c25ee633cd6c54c72f12d11e9d43634ca6ca4ef7da5973a52030384da</hash>
        <hash alg="SHA3-384">683a1f110ab84333e7517dabe175b91d7ea2fbead2f9d02acf798c588a7508bc67580642afa8d57441bc56ce610d5b0f</hash>
        <hash alg="SHA3-256">5e8e54209fb6b580e928e703ef11645aff1a21dfd47cca2dc0e53d0befaef09c</hash>
        <hash alg="SHA3-512">d79338a481605c94e144c967cb7adbc6cfd06ee6a1182b5ebc8cd8ad3deedd707931e404aa197bc94d3b5a5d82a2e6dd6a2f6cc9dafc42ce3ad5061076b05199</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-4-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://github.com/FasterXML/stax2-api</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/stax2-api/issues</url></reference><reference type="vcs"><url>http://github.com/FasterXML/stax2-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-sec-dispatcher</name>
      <version>2.0</version>
      <description>The Plexus project provides a full software stack for creating and executing software projects.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e68635a721630177ac70173e441336b6</hash>
        <hash alg="SHA-1">f89c5080614ffd0764e49861895dbedde1b47237</hash>
        <hash alg="SHA-256">873139960c4c780176dda580b003a2c4bf82188bdce5bb99234e224ef7acfceb</hash>
        <hash alg="SHA-512">ad4e814c8baff780a4eee064903e52b09ae00420a59fb075ef72dbb8d64d12d3d5009b03d56c15f93587d931c3a7f06cad6351ab2dc9415ccc6eeab0daebeb07</hash>
        <hash alg="SHA-384">4af3426b6409cce7d5fcda4e2af407fc2dbae9873e06d98332bcd032c0039d9080a291e42223ea2bbef9825d3d63493f</hash>
        <hash alg="SHA3-384">41720858dd5804f9cb26a8878c16dbdf0372a90e99c037809fe76c3de2c5517ba252af8f8cdf534c1a09900702e6a917</hash>
        <hash alg="SHA3-256">50fa723aefb551a3fd5888375d01f1d776c534cdf833baea392818e9bfa8166e</hash>
        <hash alg="SHA3-512">a43f823d31b377c0c7ec8d36ace69e5dbcdaf4dc4ebb45ff0561fea9e12d74c06090ee24b29b06769d4031693faf5d7e3146583d3a64bfaef6b7c79773a8831f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://codehaus-plexus.github.io/plexus-sec-dispatcher/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/codehaus-plexus/plexus-sec-dispatcher/issues</url></reference><reference type="mailing-list"><url>http://archive.plexus.codehaus.org/user</url></reference><reference type="vcs"><url>https://github.com/codehaus-plexus/plexus-sec-dispatcher.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.0?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-utils</name>
      <version>4.0.0</version>
      <description>A collection of various utility classes to ease working with strings, files, command lines and
    more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">16481d9d3af602d73a6355e79d2de889</hash>
        <hash alg="SHA-1">ff00a04ba971655ed10e9fb93bce0ed3014e9477</hash>
        <hash alg="SHA-256">270cd703b48c6e5c8c691f1875f22d62d22cfe072c73ae2f5814d83d68c1da0b</hash>
        <hash alg="SHA-512">1c4dde3e36c37c4b3b3860b54848fc5fbb80f536d2efe095a06629aa782044aeb693adeda3106ac8c773069e766f3def616990c0444597d20c0bc9f1d7348bd1</hash>
        <hash alg="SHA-384">5f855b2f6b40c05d9ed6b7b7a0c79d808c69f0fae0bb5d2ce5840c74775831a7def6f5309c484988e73474e255823b20</hash>
        <hash alg="SHA3-384">7a4a3edf24e631d8504be8f2318a59a3f86aa5c73d0fe74d6d6fdd048b0cbf6a922f6147438f51efae62b5a1a556dcea</hash>
        <hash alg="SHA3-256">a00b1a81452b80c9e518cb32e4192b59721fdd75aabe9c8fa55289a7a619ec31</hash>
        <hash alg="SHA3-512">42b3c2d6910c6d71adf998d6d189923ca758d89c8ab40948495bf9b80d2f4cc737cd13737370988a79853902b53a9cc33edcda17aecf7d7616981c470ffa9080</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-utils@4.0.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://codehaus-plexus.github.io/plexus-pom/plexus-utils/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://github.com/codehaus-plexus/plexus-utils/issues</url></reference><reference type="mailing-list"><url>https://groups.google.com/forum/#!forum/mojohaus-dev</url></reference><reference type="vcs"><url>https://github.com/codehaus-plexus/plexus-utils/tree/master/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-cipher</name>
      <version>2.0</version>
      <description>The Plexus project provides a full software stack for creating and executing software projects.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">55d612839faf248cbe3e273969c002c2</hash>
        <hash alg="SHA-1">425ea8e534716b4bff1ea90f39bd76be951d651b</hash>
        <hash alg="SHA-256">9a7f1b5c5a9effd61eadfd8731452a2f76a8e79111fac391ef75ea801bea203a</hash>
        <hash alg="SHA-512">8f187b07867a7c29d77454aae4b76479300238d9c4e777c1afa2aebe33b88dab916e29111dd55acac1341849f4579fe91a5470fdd45ccba0e05709c2ce3a1d65</hash>
        <hash alg="SHA-384">6973eefe06a8992aa8db1775c0f43a84cbef54eeea9122a5a30c362af3e4fb13b6cbd6fba229142e2a4495f97d71f409</hash>
        <hash alg="SHA3-384">ea780d218f96e61005c5582bf3785ddbb33b53ccb4efbffd76ab58166cf261d3c256d52fea28759380684b7e9b0db8eb</hash>
        <hash alg="SHA3-256">e2e51d5350ffdce341464ddcdf9ae60108bff40bf5174dc6be43e33ffcd84af9</hash>
        <hash alg="SHA3-512">f3e17ea31bdefc8094ba3495b8231ec7f90c7175839b009d9fd230110b66ac4c68c912fda1a6e644d93dbce639d738e2535f1ade5841e072a604f5f8ac536729</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://codehaus-plexus.github.io/plexus-cipher/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/codehaus-plexus/plexus-cipher/issues</url></reference><reference type="mailing-list"><url>http://archive.plexus.codehaus.org/user</url></reference><reference type="vcs"><url>http://github.com/codehaus-plexus/plexus-cipher</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.maven/maven-settings-builder@4.0.0-alpha-9?type=jar">
      <dependency ref="pkg:maven/org.apache.maven/maven-builder-support@4.0.0-alpha-9?type=jar"/>
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-interpolation@1.26?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-settings@4.0.0-alpha-9?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-builder-support@4.0.0-alpha-9?type=jar"/>
    <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-interpolation@1.26?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven/maven-settings@4.0.0-alpha-9?type=jar">
      <dependency ref="pkg:maven/org.apache.maven/maven-api-settings@4.0.0-alpha-9?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-xml-impl@4.0.0-alpha-9?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-xml@4.0.1?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.woodstox/woodstox-core@6.5.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-api-settings@4.0.0-alpha-9?type=jar">
      <dependency ref="pkg:maven/org.apache.maven/maven-api-xml@4.0.0-alpha-9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-api-xml@4.0.0-alpha-9?type=jar">
      <dependency ref="pkg:maven/org.apache.maven/maven-api-meta@4.0.0-alpha-9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-api-meta@4.0.0-alpha-9?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven/maven-xml-impl@4.0.0-alpha-9?type=jar">
      <dependency ref="pkg:maven/org.apache.maven/maven-api-xml@4.0.0-alpha-9?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.woodstox/woodstox-core@6.5.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M2?type=jar">
      <dependency ref="pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-classworlds@2.6.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar"/>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar"/>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-classworlds@2.6.0?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.woodstox/woodstox-core@6.5.1?type=jar">
      <dependency ref="pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar"/>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-xml@4.0.1?type=jar">
      <dependency ref="pkg:maven/org.apache.maven/maven-xml-impl@4.0.0-alpha-9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar"/>
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.0?type=jar"/>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar">
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
    </dependency>
  </dependencies>
</bom>
