{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.5",
  "serialNumber" : "urn:uuid:def5ffb6-c18a-31cd-a95b-c09d7d84aea1",
  "version" : 1,
  "metadata" : {
    "lifecycles" : [
      {
        "phase" : "build"
      }
    ],
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.8.0",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "76ffec6a7ddd46b2b24517411874eb99"
          },
          {
            "alg" : "SHA-1",
            "content" : "5b0d5b41975b53be4799b9621b4af0cfc41d44b6"
          },
          {
            "alg" : "SHA-256",
            "content" : "6852aa0f4e42a2db745bab80e384951a6a65b9215d041081d675780999027e81"
          },
          {
            "alg" : "SHA-512",
            "content" : "417de20fcdcb11c9713bacbd57290d8e68037fdb4553fd31b8cb08bd760ad52dc65ea88ad4be15844ad3fd5a4d3e440d2f70326f2fe1e63ec78e059c9a883f8d"
          },
          {
            "alg" : "SHA-384",
            "content" : "5eb755c6492e7a7385fa9a1e1f4517875bcb834b2df437808a37a2d6f5285df428741762305980315a63fcef1406597d"
          },
          {
            "alg" : "SHA3-384",
            "content" : "0fe16a47cf7aab0b22251dafcc39939b68e8f1778093309d8d2060b51a08df445a8b8ed5a9561669faf2e55f907c76d8"
          },
          {
            "alg" : "SHA3-256",
            "content" : "3e5a1eb5ab7d0797498862794709ff8eaaa071fe4cc9ec77f52db7e2f97ef487"
          },
          {
            "alg" : "SHA3-512",
            "content" : "59281a3e29e76270d7f44b40b5b9f05e55f1ae3ec716d80add806f360940809e3813998ac7c5758043b8e248aed73b86e37dc506cdb4cde03c16bb617d8e5a3a"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-settings",
      "version" : "4.0.0-rc-3",
      "description" : "Maven Settings model.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-settings@4.0.0-rc-3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/4.0.0-rc-3/maven-compat-modules/maven-settings/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-4.0.0-rc-3/maven-compat-modules/maven-settings"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-settings@4.0.0-rc-3?type=jar"
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      },
      {
        "name" : "cdx:reproducible",
        "value" : "enabled"
      }
    ]
  },
  "components" : [
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-api-settings",
      "version" : "4.0.0-rc-3",
      "description" : "Maven 4 API - Immutable Settings model.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b2ccadf1597b5c93dfdbbf9d9cfe5a0c"
        },
        {
          "alg" : "SHA-1",
          "content" : "ae574e921eb6b50e2776a1da0c4a155a02d8549b"
        },
        {
          "alg" : "SHA-256",
          "content" : "4f5e43e45efd4c92d6cef4f8f64171ac62298b612ea39d086dff82f468f67bfd"
        },
        {
          "alg" : "SHA-512",
          "content" : "925147a515c6962bbccc451da897bd444993e7934da7e99c74b2aaa1e5a247a7729720ce15a29383eb2d590c343027f6fb9a0417e653672ad20f3513d8769a3f"
        },
        {
          "alg" : "SHA-384",
          "content" : "fccc47ee5b48e42c56101c49c4d8a9e4d3394c33f03007c99f2f6bc7a15c6a1b42150dfc69f666b6a38b3ace86130924"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ba9c24b276a1e5e47075469dc27cc2cb977d7ecd96e4fa1d1eebf9648450e8311bbf8c7142e91d13438600e27a9d2964"
        },
        {
          "alg" : "SHA3-256",
          "content" : "27c8363df5f768dc307ee064ad1690e44b5443e1035e01b1da7d1423d481fad5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1707533d3817fd2f581cfedb86dbb0c5639608640831eeff58576aff70784ce25ae58fc95cac00cb0d1c485388cde6a63c2ee1df84d7436635400a8796add8db"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-api-settings@4.0.0-rc-3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/4.0.0-rc-3/api/maven-api-settings/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-4.0.0-rc-3/api/maven-api-settings"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-api-settings@4.0.0-rc-3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-api-xml",
      "version" : "4.0.0-rc-3",
      "description" : "Maven 4 API - Immutable XML.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a11e0353fc2043755afa58e8a022e3d3"
        },
        {
          "alg" : "SHA-1",
          "content" : "468c5a0d904c52d2d3d094da1f8d286308b7892d"
        },
        {
          "alg" : "SHA-256",
          "content" : "f3e3b3642373c69d4c7441d40eba0765e1d744e992b62194452f5ea5451dfdba"
        },
        {
          "alg" : "SHA-512",
          "content" : "9b5a45e3e7ec7dd262a197f7ecbdefc6e60a1ae3b1c38d4247570baff08db1b8567117d79949cc548fecbdedc20200fefe3da4df69748fd44e7f014cb84bf2c3"
        },
        {
          "alg" : "SHA-384",
          "content" : "4733af392762af74fb29f7390127d5619aade922380a50c382387898e08f697ea0a0ce605c17157675ee2bb094327c5c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "80ebfe6e74a8316a8616e29fcfd4662d9fd7873d8be85d2243ff0847cedc292e195d7f2e884eb5d5cb7ea6325e0fb1be"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6f63313c138921a04eebbad7b5e9afc1dbd797f7ec72b240b798799549d75a8f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e6ed72023c1b2cca0c36833595aca624a319691f42d7fd09f8bc1f84bd9341714d7bfd56340e09b8fedb7e2df9d6bc3592af7ba18b6944714c8246d503345091"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-api-xml@4.0.0-rc-3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/4.0.0-rc-3/api/maven-api-xml/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-4.0.0-rc-3/api/maven-api-xml"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-api-xml@4.0.0-rc-3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-api-annotations",
      "version" : "4.0.0-rc-3",
      "description" : "Maven 4 API - Java meta annotations.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "96b5b2f5b18528b61c398ff9fb5cd847"
        },
        {
          "alg" : "SHA-1",
          "content" : "f652ee9045c76d6dfc501ac2d365bdc8c3f26e60"
        },
        {
          "alg" : "SHA-256",
          "content" : "5d3490f72ad3a7e82be88b27629f37c59fd2531bae511c3b13866420d5d862bd"
        },
        {
          "alg" : "SHA-512",
          "content" : "981839b8d7a94e88c56e89e312292f606762cbc8b3c3957745c6545c760a2d7ebbc4e8a7378003295837037a980a7ab3c40ff50bb505c142e9a3259df45a3459"
        },
        {
          "alg" : "SHA-384",
          "content" : "6fa30dec470c0502a380646a0b4c4e262c1a5947868ea8a478e0992a4f6399df95c4b78991a73b0f61047db59b2a3b39"
        },
        {
          "alg" : "SHA3-384",
          "content" : "de8b3cb1c6f1c0d84c16267e7935502b5bfdc8d04df953fa9124056b6e69ebc158277cece2dcc214fc956d2018eccdc6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "dbf236892e6ee9500d19b61116bd49c2eafd07c9d5b0c2f46edc26718648d0bc"
        },
        {
          "alg" : "SHA3-512",
          "content" : "83af4c17071557359d31c6671bbb9e3873e908cd920c1e14a502423cca80756141d0857ad13bb3569c922ffba14a3599c2d780da3d9fe3ed95f047ac1a5eb374"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-api-annotations@4.0.0-rc-3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/4.0.0-rc-3/api/maven-api-annotations/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-4.0.0-rc-3/api/maven-api-annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-api-annotations@4.0.0-rc-3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-xml",
      "version" : "4.0.0-rc-3",
      "description" : "Provides the implementation classes for the Maven XML",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "55b91d86e76ad3905501c240a9bb688b"
        },
        {
          "alg" : "SHA-1",
          "content" : "e54fd93fbd6d25d2390022a83f7a2795e1c2fce1"
        },
        {
          "alg" : "SHA-256",
          "content" : "063c424cb47f75164125d5eea25167b931dd694e34268d50247374e74211dd19"
        },
        {
          "alg" : "SHA-512",
          "content" : "80622c6cd1705a717a2b68b17c84fff913ad317b2df51017e7f88b260262279575eaf319812a78fd6892fbb94c7371659e14a385c0d4b40c1f5b15b7b6ca39f8"
        },
        {
          "alg" : "SHA-384",
          "content" : "d9d72d2a0ff65647952c9d7a3dd001dcc68bb930699927bb84c95523ff2aa3e10f8c185689e12d49a1ffa9e557e1ed65"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d5df5d5b0ae1767597fc32c5a6e30324f122a0127f2fab8ab747563fa7151dcdd9321d462d1b2d0e8dc53516a7ae6b87"
        },
        {
          "alg" : "SHA3-256",
          "content" : "345278da5983653555702d4022742c56e3ad0ca4dbb8759b6994ba75fae86d58"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b4c3040041697d16b31292bc4524c0d97bce01a666fb8afcbdfe99bfb3d149add9004695e8e26580d09a10db7d7bebb3033977ec5191176a1c5c3372d5dc5fc5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-xml@4.0.0-rc-3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/4.0.0-rc-3/maven-impl-modules/maven-xml/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-4.0.0-rc-3/maven-impl-modules/maven-xml"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-xml@4.0.0-rc-3?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-xml",
      "version" : "4.0.4",
      "description" : "A collection of various utility classes to ease working with XML.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cdfee6d6af39fca120b782338ec616d4"
        },
        {
          "alg" : "SHA-1",
          "content" : "81419c08701143a41034b410b208dc45fc7cd476"
        },
        {
          "alg" : "SHA-256",
          "content" : "069e78b537108dc6124a67073fc998264791f6b6499e955a38e72bb3e4fe1adf"
        },
        {
          "alg" : "SHA-512",
          "content" : "0637a09fe9c4828b8da9012888342e46856de89e7bb47966de731bf344560146efe00572dae481288ef53e74541d2c693b5be1ffdf75b19b20ffa1000871d408"
        },
        {
          "alg" : "SHA-384",
          "content" : "501a8b7c92fc9ddbdbd394f58464e1c286514cddd60b3e1965ebb47abd16e23fbed3cbda675ce93aca9922237ac3227b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "db54d2c12c71c38f451cf0aed2cf1982b6ff8471a62ace070bea7e3b24c613ff504a1359f43eb268886a683baebdba36"
        },
        {
          "alg" : "SHA3-256",
          "content" : "474ce5c901783836a1b1fd90acf17a26c434da44d518c00ddf15f6c538af3906"
        },
        {
          "alg" : "SHA3-512",
          "content" : "55b956ef8fe4853b35c72811df5bc8b51c77e758e995aed20dfe280a561bf1e3265b56cca8b5d7a28e640367af2615cb8b51d0dfbf732f48e82bce2f86c7bf77"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-xml@4.0.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-xml/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-xml/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/mojohaus-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/codehaus-plexus/plexus-xml/tree/plexus-xml-4.0.4/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-xml@4.0.4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-xml-impl",
      "version" : "4.0.0-alpha-9",
      "description" : "Provides the implementation classes for the Maven API XML",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2bf5500ff3f58cf1af9d7c2a2d96cfc8"
        },
        {
          "alg" : "SHA-1",
          "content" : "1ce26ef01fb26c663073fa6dcef50bb2dbcc170a"
        },
        {
          "alg" : "SHA-256",
          "content" : "26e702b881d57ae4ee88d02c00940ba64063705ee69205ae8958bf839a8b06b1"
        },
        {
          "alg" : "SHA-512",
          "content" : "0315318601d52d43d1b85d28e255616cc7ed9977fa55a5e5ecd00053040f232606e49aeae260dd63cfa2ed541fc0bd8aad2278e3f4cd79ebead96c4ead8d442a"
        },
        {
          "alg" : "SHA-384",
          "content" : "43e060965fef838374d03fc951b5d263ce27a456e97b898e9d0d8dbbe85122c558dba8e5c94712a906be11dedbee98ab"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8bf78a8daa005c82d76a7232141081776aa9488c6d2fd49cb252dd166a5b80fb4cce99cd256b2d7d69e6b0f20e5508b7"
        },
        {
          "alg" : "SHA3-256",
          "content" : "59c224eb1122494773115fe1528a530661290b165445e81b9600a80f125bf05c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "239ccfd1f8f5a2c14fda136817891b2fbbd7ab99bc6638818a51c45c9c8c2e5cf1ac6e5b177b88180f9a425059e67bc5081ff6060ac39fcc758ee62afbb28496"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-xml-impl@4.0.0-alpha-9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/4.0.0-alpha-9/maven-xml-impl/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-4.0.0-alpha-9/maven-xml-impl"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-xml-impl@4.0.0-alpha-9?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.woodstox",
      "name" : "woodstox-core",
      "version" : "7.1.0",
      "description" : "Woodstox is a high-performance XML processor that implements Stax (JSR-173), SAX2 and Stax2 APIs",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f8b70141712cd2ac67800ba036f0aa13"
        },
        {
          "alg" : "SHA-1",
          "content" : "95341048cfb852aa05037e6cc83069b8664728c5"
        },
        {
          "alg" : "SHA-256",
          "content" : "81266920a1cdc47306a8a2b4726c99ec89b3fbf31c2470e4f5e477d9d857ca9f"
        },
        {
          "alg" : "SHA-512",
          "content" : "257260a61892f52a94979c512cc86d3cfaf83c8c1ef231f15033f27c1af4c2b7928b7df9ac0005ef617746193273fe2df68ac0164d5f51e47be580506464b857"
        },
        {
          "alg" : "SHA-384",
          "content" : "698b3d685100988b264f0d025b01c64723b1033aa063e70cdcfef5743d1a83d7a2a1b94fbba99dc638f3dca2a498a980"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a835755da983be214c4d2a43633b8ea51103b274a43b45184610615f0f747904a1967f3c99670471b24024ba61cfd1b3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1ab326e9b6f5c668645360b9c372e3abbf29574087b863c90f247d017b5d91c8"
        },
        {
          "alg" : "SHA3-512",
          "content" : "cc58b8aa1cf72672c0adba7ecc58463ae7718a033b8f9d95c3038a96bc61f6241d938e0b2950a850e9afbd035e5580687ea20d391fb58ce1596694bc118a0e7f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/woodstox"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/woodstox/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/woodstox"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.1.0?type=jar"
    },
    {
      "publisher" : "fasterxml.com",
      "group" : "org.codehaus.woodstox",
      "name" : "stax2-api",
      "version" : "4.2.2",
      "description" : "Stax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6949cace015c0f408f0b846e3735d301"
        },
        {
          "alg" : "SHA-1",
          "content" : "b0d746cadea928e5264f2ea294ea9a1bf815bbde"
        },
        {
          "alg" : "SHA-256",
          "content" : "a61c48d553efad78bc01fffc4ac528bebbae64cbaec170b2a5e39cf61eb51abe"
        },
        {
          "alg" : "SHA-512",
          "content" : "1c0587ecb4c5a659ce2ae1fe36ffc12636a8ecba549a29f2cf91cb4d1d36a335c05f35776f480488d40d894230389f76aeeb363887026c6ef5c565995c17b7c6"
        },
        {
          "alg" : "SHA-384",
          "content" : "3b617db8307a081df858a4110f5b8fec51c06355762506cbc4be5557fb06959f0499f7e672103d46f71c66bae472a7bd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "22a3150713f7072962e26c286a1ef97d849b10d7f1251c56ae34252f247127b56dd189daa758c64776b4196ee0060517"
        },
        {
          "alg" : "SHA3-256",
          "content" : "174868c81672068b42ccde35310d4dad60f457b795101e99588c28b0eebdefc2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c88de5a2137e3b63b632ef24799a677c998b76e736407f1e8c6af85d1b6a94c76bc20d26e6cac847d8383ab6760f1b5c2ae7574fba21e1e6a96de7cdd38f0e39"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-2-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://github.com/FasterXML/stax2-api"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/stax2-api/issues"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/stax2-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.apache.maven/maven-settings@4.0.0-rc-3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-api-settings@4.0.0-rc-3?type=jar",
        "pkg:maven/org.apache.maven/maven-api-xml@4.0.0-rc-3?type=jar",
        "pkg:maven/org.apache.maven/maven-api-annotations@4.0.0-rc-3?type=jar",
        "pkg:maven/org.apache.maven/maven-xml@4.0.0-rc-3?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-xml@4.0.4?type=jar",
        "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.1.0?type=jar",
        "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-api-settings@4.0.0-rc-3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-api-annotations@4.0.0-rc-3?type=jar",
        "pkg:maven/org.apache.maven/maven-api-xml@4.0.0-rc-3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-api-annotations@4.0.0-rc-3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-api-xml@4.0.0-rc-3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-api-annotations@4.0.0-rc-3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-xml@4.0.0-rc-3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-api-xml@4.0.0-rc-3?type=jar",
        "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.1.0?type=jar",
        "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.1.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-xml@4.0.4?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-xml-impl@4.0.0-alpha-9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-xml-impl@4.0.0-alpha-9?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-api-xml@4.0.0-rc-3?type=jar",
        "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.1.0?type=jar"
      ]
    }
  ]
}