<?xml version="1.0" encoding="UTF-8"?>
<bom version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.7.10</version>
        <hashes>
          <hash alg="MD5">1cc7f6a0382f8bb2f758d6a6ea401d1b</hash>
          <hash alg="SHA-1">a4297947a1f2d7d453105db542651614bbd37f38</hash>
          <hash alg="SHA-256">bd0fdd8f2f2116eee5e715aeac1580f19eb7a10ec2b6f805b53567067658e872</hash>
          <hash alg="SHA-512">9cde8352a427e10b96cae01348fc7cfe5d4aa9cd0a5e5dd93b414ce3bb7d112993c3b3004e53af52567fbfa16de0704ec59a5556a635ad70571fd124ae389f39</hash>
          <hash alg="SHA-384">93d7bf5b5c735347edfbfbd66810273ca840f9a322b816d22d44c3d8e8255c09e86570bb23712aeb0cade0f478be5aeb</hash>
          <hash alg="SHA3-384">4467f16e9ca32190a6e49c65339eb28ee5e8c78f4e918fcf95128a4b7648898de56ccb43eacfad0c9391ef8cdb7d629a</hash>
          <hash alg="SHA3-256">ed2996c99b483e969221d5e9a40f562ea2ab85442d361d72a90e85266a3ed781</hash>
          <hash alg="SHA3-512">c8e6ea9ddc38edc77e284b3bf541663e84752bdc59ed1935799847a48a14ea2fa531b61008fefcba37d732a56702a11ac112437b9b80d18f4ecc8ef0ecfb32cf</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.plugins/maven-compiler-plugin@3.12.1?type=maven-plugin">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.plugins</group>
      <name>maven-compiler-plugin</name>
      <version>3.12.1</version>
      <description>The Compiler Plugin is used to compile the sources of your project.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.plugins/maven-compiler-plugin@3.12.1?type=maven-plugin</purl>
      <externalReferences><reference type="website"><url>https://maven.apache.org/plugins/maven-compiler-plugin/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-compiler-plugin/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MCOMPILER</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven-compiler-plugin/tree/maven-compiler-plugin-3.12.1</url></reference></externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeAggregateBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
      <property name="cdx:reproducible">enabled</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.10.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.plugin-tools</group>
      <name>maven-plugin-annotations</name>
      <version>3.10.2</version>
      <description>Java annotations to use in Mojos</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b06dba2d701e028fca2951e22043af00</hash>
        <hash alg="SHA-1">631e7bece9413b0aa45daefff48e48b291a4de66</hash>
        <hash alg="SHA-256">96ecaa2fd230ec1689976f3916650695c2b6b204f8418fc49121deb4a27ccaa5</hash>
        <hash alg="SHA-512">9ea3923ea1bcf82dcca9b974bd929b1c548b92bb7201740fc4b0949ee20c64129dc7be643efdaf3411d83470377ccd935c9baa0ada98239dc76ebce5438d7a62</hash>
        <hash alg="SHA-384">f74139ea1da450e4c002fdce86c49c63ecca4002ea84bb6c602aa703eaf96691bb44861cc4fb5de836a0c648239abb0b</hash>
        <hash alg="SHA3-384">e3dbc5a77496443d6759a4119902bc07db622eee1dba1d71aef343272ef518e4897c09f3fb7fb5e6d61a0b4a689fee1b</hash>
        <hash alg="SHA3-256">4cb335f11a845f0a63991fcbc4dc054a03955fcef8f96cedff77b10915f910dc</hash>
        <hash alg="SHA3-512">e9a6d3803e2229c43cad870c622ffa1c913011c7ef4314d0e2604a972af4fa2f3c7164f99b534c5421e48c7b38fdcf1854da2689b763000505a1679f3a3e25b6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.10.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://maven.apache.org/plugin-tools/maven-plugin-annotations</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-plugin-tools/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MPLUGIN</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven-plugin-tools/tree/maven-plugin-tools-3.10.2/maven-plugin-annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-plugin-api@3.2.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-plugin-api</name>
      <version>3.2.5</version>
      <description>The API for plugins - Mojos - development.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">11a402fb287811b6a249a553e9af5383</hash>
        <hash alg="SHA-1">5c6893f4ac5425d07c4053f3c4e27b2a3b37c516</hash>
        <hash alg="SHA-256">194a6f0ce889ed3b0d8a9bc4d3c79541e878098b7e303e4ac76c1031850772c3</hash>
        <hash alg="SHA-512">ace85ef74fb6a582afe6edb8282d4f09e2e4d5899e7471a0169cb8ccae9bc93d664b9c3e7f7be753434e1b30290447d87a3226969045cfb4e3e15b3ca2a596fa</hash>
        <hash alg="SHA-384">0e796a4fe15828a8b8fc7f642c8cf7932c7b15de868b72eb222f95b91d55fd5281fd679f8a1cfaebfc3d1eeaca794edd</hash>
        <hash alg="SHA3-384">70e29b854f16306beb41c1bc287002e7b214daa65bca7823b60a440a8e766721f4a00fe238453bb55ef0ee0068413c50</hash>
        <hash alg="SHA3-256">4d13e0b021bbe138eaa6a9a753ffc1bd557a70c38b5314fdb540dd052dbcc592</hash>
        <hash alg="SHA3-512">f53db7d4858d810175e662f7b4f12fdf0df1b1d637b2532871d90b4427199795f7ea919dabf7d4e29ac0d166c0e096b7ac20126216c9c9252877bb65bfbdbb9e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-plugin-api@3.2.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://maven.apache.org/ref/3.2.5/maven-plugin-api</url></reference><reference type="build-system"><url>https://builds.apache.org/job/maven-3.x/</url></reference><reference type="distribution"><url>http://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/MNG</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/maven-users</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.2.5/maven-plugin-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-model@3.2.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-model</name>
      <version>3.2.5</version>
      <description>Model for Maven POM (Project Object Model)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">16ceccebac412654c427dcd66df4f6f9</hash>
        <hash alg="SHA-1">ced305476a43e8a042a59e94ef38b3291d9ce1e7</hash>
        <hash alg="SHA-256">8d439cc1661349dab1c69eed0f831336d187e162cc6d68aa4deefcff57ee0624</hash>
        <hash alg="SHA-512">5f67231329c4d1fceec84684f69b3e2a840c4acac8a3af927036e6cc05fe35562fc6a17b104ddc52d8d863fdf70160aeda99259cbc3b08d63b217f52cb8a7658</hash>
        <hash alg="SHA-384">b341f59c5756a7ad161dda15c114ee027d111b2fc5982ed1e9af1882cad87acb6628b08a971f04a5c5716c094416fda2</hash>
        <hash alg="SHA3-384">1257f33ca5d743223771ee8eb7b99044382d882a08f9d5a22b9fa4b496a47685fd172172602e5ddd824c2fd1c9ebcfef</hash>
        <hash alg="SHA3-256">b605e9ef6debcdb6d4764279fe245db460dce5a0dda70ba35efee6b6c3c97ed4</hash>
        <hash alg="SHA3-512">480cec8773bb9f4d1d3dc72b2d49a1bfadda0e7b485d23b0bfc493e815b0cb86e98cd08b516f27086d908035960549e381dde07d32220d14b3dde891b2a84da0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-model@3.2.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://maven.apache.org/ref/3.2.5/maven-model</url></reference><reference type="build-system"><url>https://builds.apache.org/job/maven-3.x/</url></reference><reference type="distribution"><url>http://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/MNG</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/maven-users</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.2.5/maven-model</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M2?type=jar">
      <publisher>The Eclipse Foundation</publisher>
      <group>org.eclipse.sisu</group>
      <name>org.eclipse.sisu.plexus</name>
      <version>0.9.0.M2</version>
      <description>Plexus-JSR330 adapter; adds Plexus support to the Sisu-Inject container</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">98e320df2caac742b2ae33d938c69df8</hash>
        <hash alg="SHA-1">31456dd2293197bb282c03168f6767acca3dec96</hash>
        <hash alg="SHA-256">9500d303ce467e26d129dda8559c3f3a91277d41ab49d2c4b4a5779536a62fc1</hash>
        <hash alg="SHA-512">907bb88258ba9d9ae465db219de803074a677193f3a5a05cc36c7fcf413123f50742bab231d3eb783395448bb487934f85b12972efe36b77a32e235524bef4ec</hash>
        <hash alg="SHA-384">8eb92a65730622e93791bc4c6435113596473d69f3d8dd5348c42ea47c2a93017674fafb34f5d5a48ef210638d37640d</hash>
        <hash alg="SHA3-384">e97753b0913e87a430a7e6ce8467a2903670edbc87cba4282cd401137983b15cb9c4361c7504e139bb10119d9d7ddfde</hash>
        <hash alg="SHA3-256">883521331173ce90227bec1c5848ffc2f2a45e83eaa29d0376fb80e633c462c0</hash>
        <hash alg="SHA3-512">3429abb8aecac539bbf04bd6f6ba339c71d7156ec0861f27de86e1664312bb30dcd076a317dad0bbdefad89dbd03fbcf56003e16551c3320e2bf223424998c16</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.eclipse.org/sisu/org.eclipse.sisu.plexus/</url></reference><reference type="build-system"><url>https://ci.eclipse.org/sisu/job/sisu.plexus/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse/sisu.plexus/issues</url></reference><reference type="mailing-list"><url>http://dev.eclipse.org/mhonarc/lists/sisu-dev/</url></reference><reference type="vcs"><url>https://github.com/eclipse/sisu.plexus/org.eclipse.sisu.plexus</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.annotation/javax.annotation-api@1.2?type=jar">
      <publisher>GlassFish Community</publisher>
      <group>javax.annotation</group>
      <name>javax.annotation-api</name>
      <version>1.2</version>
      <description>Common Annotations for the JavaTM Platform API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">75fe320d2b3763bd6883ae1ede35e987</hash>
        <hash alg="SHA-1">479c1e06db31c432330183f5cae684163f186146</hash>
        <hash alg="SHA-256">5909b396ca3a2be10d0eea32c74ef78d816e1b4ead21de1d78de1f890d033e04</hash>
        <hash alg="SHA-512">2453330b27a0822bba440c28b98ae1d83d60d97dfa2d040562dd5126b3548e0caa040fea3b886ac6feb0a858e6c1bc45b6c5472b180f1f14792e5ca33e355959</hash>
        <hash alg="SHA-384">37a46eaa1d011969d28ff0daaecd67a560169b3ae70c40102331d85a71139ca07110169fe367f484735914ce5c6b86c0</hash>
        <hash alg="SHA3-384">e2f8df1aad5867355fd1d3de2374d077e3ad885e6bddac3ce7c7bc72a34097e33bc5dfe960f839a7feb515bd5a92ffd1</hash>
        <hash alg="SHA3-256">2e2acc7429faecd2e74c0c441209b1a5b0ccbc245ccd8391425c4b1e4b2fbc94</hash>
        <hash alg="SHA3-512">9a28cb34c7761e695ccea04cc6df1e0f9cd18fef59bf50d5943ddc06802e616bc2bd55211e863c65f7f7661f963ba8ee9e569324642b87bc1703dc6f07cba5e3</hash>
      </hashes>
      <licenses>
        <expression>(CDDL-1.0 OR GPL-2.0-with-classpath-exception)</expression>
      </licenses>
      <purl>pkg:maven/javax.annotation/javax.annotation-api@1.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://jcp.org/en/jsr/detail?id=250</url></reference><reference type="distribution"><url>https://maven.java.net/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://java.net/jira/browse/GLASSFISH</url></reference><reference type="vcs"><url>http://java.net/projects/glassfish/sources/svn/show/tags/javax.annotation-api-1.2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.enterprise/cdi-api@1.2?type=jar">
      <publisher>JBoss by Red Hat, Inc.</publisher>
      <group>javax.enterprise</group>
      <name>cdi-api</name>
      <version>1.2</version>
      <description>APIs for CDI (Contexts and Dependency Injection for Java EE)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2a8c973affa178efb89e6c50f78d79da</hash>
        <hash alg="SHA-1">53bba91dc3968adf411e076df020cf207283d7dc</hash>
        <hash alg="SHA-256">cc5ce2cbc62fe96bf59af00bba00bde823a1094462b4364747863510b76c0518</hash>
        <hash alg="SHA-512">d73772ea4b1d63828ea2aaa71edb788026065bf5ffbc54fed2d86ca88f08f61199bf9df734941531a3eaf1aea5858b3a37034240f92bec6e1e4e72ce5364c791</hash>
        <hash alg="SHA-384">fbb55bbf43e02c72e0f0dc86569a5666b1fb1b48f97081b00d22e911b152fa0fd0d997bc0816473a70a74da3fbe0c273</hash>
        <hash alg="SHA3-384">bda81740c8fbdf902116bca4bd821c492e99bcc7987d6251ccac98431d1e0cc0c7caf9e6f0acb84be3c86b8e42703944</hash>
        <hash alg="SHA3-256">8cae07e6827d09807cee9c64be0edbefb243b77d254b810d1311ad96d22c9011</hash>
        <hash alg="SHA3-512">6c7268ca95f9c4fca0f24a1d8f14778669fdba4b69a6efacd39dfc033b1093e521bd8424a3f3984388866bd402c5db8d8902382bc5a01ab7f65dfdd1d091af14</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/javax.enterprise/cdi-api@1.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://cdi-spec.org</url></reference><reference type="build-system"><url>http://hudson.jboss.org</url></reference><reference type="distribution"><url>https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://jira.jboss.org/browse/CDI</url></reference><reference type="vcs"><url>scm:git:git@github.com:cdi-spec/cdi.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M2?type=jar">
      <publisher>The Eclipse Foundation</publisher>
      <group>org.eclipse.sisu</group>
      <name>org.eclipse.sisu.inject</name>
      <version>0.9.0.M2</version>
      <description>JSR330-based container; supports classpath scanning, auto-binding, and dynamic auto-wiring</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">eb805c5b2e22c8002877f0caadc6a87c</hash>
        <hash alg="SHA-1">5ace70e1ea696d156f5034a42a615df13a52003a</hash>
        <hash alg="SHA-256">9b62bcfc352a2ec87da8b01e37c952a54d358bbb1af3f212648aeafe7ab2dbb5</hash>
        <hash alg="SHA-512">89544822c6c11a165f36e8bc29d9c69c9bcf85635234367cd9e8065273d891d1e9a8118a283502b20d00594db9c123e59901caf118b92424690fd6b3f60f2cc9</hash>
        <hash alg="SHA-384">7c1331d3ac0f1908861c96a6d0d32dcd9bfaf3bf1c0a403e6b69ffa88ba2d1b1deddfa9a59c92be43d443688e1e0282d</hash>
        <hash alg="SHA3-384">e9f6df518234899f3f7e82d934c4e66164ccb567f8cf232a234a93c414bf6717ad199d2c6dffd8196ccc9826d113fd34</hash>
        <hash alg="SHA3-256">f1646c76c126c31fdbdf4b0833b53246f34314ed3a5480d56d579d29c8759fb7</hash>
        <hash alg="SHA3-512">e4d125178fea97856067ef119d2d6864235056d8aba53b57171aefd36d14e4b54d25a417ca18af19f720efb9b32eae4a1d339e79c1687570735f359cad01f5c2</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.eclipse.org/sisu/org.eclipse.sisu.inject/</url></reference><reference type="build-system"><url>https://ci.eclipse.org/sisu/job/sisu.inject/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse/sisu.inject/issues</url></reference><reference type="mailing-list"><url>http://dev.eclipse.org/mhonarc/lists/sisu-dev/</url></reference><reference type="vcs"><url>https://github.com/eclipse/sisu.inject/org.eclipse.sisu.inject</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-artifact@3.2.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-artifact</name>
      <version>3.2.5</version>
      <description>Maven is a software build management and
    comprehension tool. Based on the concept of a project object model:
    builds, dependency management, documentation creation, site
    publication, and distribution publication are all controlled from
    the declarative file. Maven can be extended by plugins to utilise a
    number of other development tools for reporting or the build
    process.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6ca73ba6de24218f238a45d8a06e519b</hash>
        <hash alg="SHA-1">bf5ce89d5f7ff57f2a33e78067ba97e62bae007d</hash>
        <hash alg="SHA-256">270385907ecfbcb256fe5afb883869fd57a5c021b5242693743ef787605c6335</hash>
        <hash alg="SHA-512">7be445c021ac2438a9f37d37db159ba5875b32d74ee901a07462f266f1847c97e69cffd3f51058e468539bfa322c270f6bb50852cbb38e39806011386fb08ed8</hash>
        <hash alg="SHA-384">c918bb72c186b84a6990db3749fdf0dbf819f815fde27242276cac59d9da826f00433794f53987ebc844ff6df3768616</hash>
        <hash alg="SHA3-384">8474a49852cbb6c371540445a4b7d1844d1c94f440052762988483657511d383decc574a09446e25ec11178ab2da35e7</hash>
        <hash alg="SHA3-256">c9c137b9a7a9e7de7a7d6be505ed6feef5f4558c8a5a4f03f3ab7b0127953d69</hash>
        <hash alg="SHA3-512">9a8b08a6435c8874897c0de5b919784135621656c7a7254bc5d00c9487a5186ef03faea91a988a955a08c87c56367c8a61fe9b11ff080c8d5fa40b1a75433a07</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-artifact@3.2.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://maven.apache.org/ref/3.2.5/maven-artifact</url></reference><reference type="build-system"><url>https://builds.apache.org/job/maven-3.x/</url></reference><reference type="distribution"><url>http://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/MNG</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/maven-users</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.2.5/maven-artifact</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-core@3.2.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-core</name>
      <version>3.2.5</version>
      <description>Maven Core classes.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0988ce2795bb72277a0199179154d398</hash>
        <hash alg="SHA-1">fbec7cf0df4fbc2896a6768ae59053877c05c241</hash>
        <hash alg="SHA-256">4f1a0af8997e1daf778b91c5ae9e973f92df699439d909fdec7fc6055c09de12</hash>
        <hash alg="SHA-512">0173f2ad5720466164832da561b8558a1e75786457548ce3d51c5b15c9a08b5c797b1964e1b4398dc31c747917da604fb50a24a747ad1bab16de714002de60a9</hash>
        <hash alg="SHA-384">a680dfb67da5b1e63f0acfe9bcf3fa123e8b164c92735a4537d74c802bc4ce27a6b95865b536f375f054be6b1f7da0ac</hash>
        <hash alg="SHA3-384">292348c2a3f87955e69756bf50bb771ef617d116004dc0562d75ba3fc7155fe3656e9cf8fca96b1882332cb395cb146e</hash>
        <hash alg="SHA3-256">c99bd5901c26db07e360ce8341b6141ed91ebfeaa8f753c8bbb9fc896cfe8573</hash>
        <hash alg="SHA3-512">16f6c6e120fae8fc0eee3792fffe9d0b74b2188f8fe809d54cdc7287b483c550c121e5f188687d96a3a7b19baf66c728047c121362bddeedd7c7ab63afee7017</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-core@3.2.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://maven.apache.org/ref/3.2.5/maven-core</url></reference><reference type="build-system"><url>https://builds.apache.org/job/maven-3.x/</url></reference><reference type="distribution"><url>http://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/MNG</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/maven-users</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.2.5/maven-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-settings@3.2.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-settings</name>
      <version>3.2.5</version>
      <description>Maven Settings model.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9f78e75d76e2f92c08cbbc859bf6e272</hash>
        <hash alg="SHA-1">52179da78893ed7afea98d980c55e658fb04d9b4</hash>
        <hash alg="SHA-256">1874d4ee660b935675a60bdb2ef63e0ff5a81769f4fc04a035fa9d4c4e238224</hash>
        <hash alg="SHA-512">8e2e132534781f316060fe02eecde47dac20c50fbdc30a9e98efc74a1df58e22601319d779fb6d1fa121fab3860ffa61842ab34c04b4e733bf3a6daab5cd1b36</hash>
        <hash alg="SHA-384">f38f547bf3eaedf9f224fd7635ac2b227a381846e80e802a7b664f0652a28487e87710236f016ea3dc4888df9cdb05b3</hash>
        <hash alg="SHA3-384">7fdda9bea5f4b7b380ea763568685780804b4a32d09298bd9959c3aff228e271888dbfb4b1401c5fc6f588f3d7ad637d</hash>
        <hash alg="SHA3-256">d8a3e3fcd8ef17ee6543de61d7294b05acb2d1cd248ad44b86a5ce7e27aca51e</hash>
        <hash alg="SHA3-512">ae62e75c8acbeffbc571a3205d8969e89b470448be178eea2a24d2f42436cdb530fb619c7e935d961aee0fdaba27546f92d3f65e9e22ed5ebbde409b8a547ca6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-settings@3.2.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://maven.apache.org/ref/3.2.5/maven-settings</url></reference><reference type="build-system"><url>https://builds.apache.org/job/maven-3.x/</url></reference><reference type="distribution"><url>http://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/MNG</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/maven-users</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.2.5/maven-settings</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-settings-builder@3.2.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-settings-builder</name>
      <version>3.2.5</version>
      <description>The effective settings builder, with inheritance and password decryption.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c48b8a83cd03a5672f07b559ca1a5307</hash>
        <hash alg="SHA-1">7fd98de76398a3ff5c1d9a7b85f26cb65a862578</hash>
        <hash alg="SHA-256">9c5a014ceb8abb55e997dcc41d17bbe0ae145db574be6b7186e75950c241269f</hash>
        <hash alg="SHA-512">f2015ad44aaa0b217e5e0d1e22c366136cd44588961cdca2104c4d9bf7d5067e4952880c537a86a669f1ca0169344012a4ca896a3ea3fed2fd7615ff3a12a208</hash>
        <hash alg="SHA-384">28eb1569383d19df9a7c0568193b733c60ce22ff2bed3eff79bd1773178d65fe237045ffe1423b5bf31fd8fd7395619d</hash>
        <hash alg="SHA3-384">bdca020f5b246ba30a38fd9a21e90e44cf323cfcff5616dfab2e69bf4ecb942ecb4f20e728eb14fe094a534c4737eaa8</hash>
        <hash alg="SHA3-256">397da0ae4301b4328dcaa5cdbda657e5d16100aec9beb56b8ef79c9cc00c433f</hash>
        <hash alg="SHA3-512">03db8e98beb008195127f4e68ecb5f02e921450c5f24ea6e77552be9258ff65c8377d888c15e95c5aeb3a83783c370289914b79ff702917a9f4d467bc7bedbfd</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-settings-builder@3.2.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://maven.apache.org/ref/3.2.5/maven-settings-builder</url></reference><reference type="build-system"><url>https://builds.apache.org/job/maven-3.x/</url></reference><reference type="distribution"><url>http://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/MNG</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/maven-users</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.2.5/maven-settings-builder</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-repository-metadata@3.2.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-repository-metadata</name>
      <version>3.2.5</version>
      <description>Per-directory local and remote repository metadata.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">bda12e2d6070d417a6118c6ba769fd4f</hash>
        <hash alg="SHA-1">17049c63ce63654c112eeb82797edee49f8a4601</hash>
        <hash alg="SHA-256">62b517b77f24edebdee0e382ecddb44bb6632b7c08c528d625aed7d2980df12b</hash>
        <hash alg="SHA-512">487f49f1a2da4c39d92d2460864c7cff8efb2fdbe05ac89346a675b5964c4dc4c4551c43a28a423c55e7184f5fe0e517258c5427b2611f171e601794e8e00c55</hash>
        <hash alg="SHA-384">b49837b04166dac3e7667a0a006c889c7c39b8efb41ff6e1ddd9fbeb0c14ca426f8be4bd62813a92c93020ebdd61bc48</hash>
        <hash alg="SHA3-384">3da3119e454ee311d0a7cbafb30bf36637594986431a926164915571ff3b93847da94af5db6599bf7ad27ed9fb43e32e</hash>
        <hash alg="SHA3-256">e86def0032615109e1e61718e8edf7389d03d4934c59b520e2627a9093f78c8b</hash>
        <hash alg="SHA3-512">9c20fdaaadff92d2937bc36b92b5dcdf84f659afd1b617dd3284914845ce417c796b625aba608b59e602ac41c98f6757efe9a3b8fef695ba4f28c18ded0ffbc4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-repository-metadata@3.2.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://maven.apache.org/ref/3.2.5/maven-repository-metadata</url></reference><reference type="build-system"><url>https://builds.apache.org/job/maven-3.x/</url></reference><reference type="distribution"><url>http://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/MNG</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/maven-users</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.2.5/maven-repository-metadata</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-model-builder@3.2.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-model-builder</name>
      <version>3.2.5</version>
      <description>The effective model builder, with inheritance, profile activation, interpolation, ...</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a216c67dae851a4cedb4b431a674eba2</hash>
        <hash alg="SHA-1">7a32f3966fab463df9cdae95fd6df8c2e561e3ae</hash>
        <hash alg="SHA-256">cc5321269d080ad6694458f53186be5391a21c488ab3a7d6dd73123c7681879d</hash>
        <hash alg="SHA-512">a25a612d607e301e3041a0c6edd708a096d23ec6e2e1fc1bc092e1f6b9a6974ba9f5b256007ca2b9a9d23a45b84b2d7b49f38e31ebe42844ad438ad4da92b922</hash>
        <hash alg="SHA-384">36a95790b1b09f903ad1f245318d1874ca2f6a5f8d592f5b9a1c1a182f8f5ed0923f7d1c672ec117b503c33f10107f4e</hash>
        <hash alg="SHA3-384">0eb54a8b97a5d03a4d74dc7c4e6438823b602da24d3c4434ea88e1068668e69f9f17c45687404dbdf84508660d4ead62</hash>
        <hash alg="SHA3-256">3cc2d6070a9c4db3ca2589b1e47097cbb8fd62742d271ee5e8241abc9dc3d1fa</hash>
        <hash alg="SHA3-512">e092aee17c316f4c7649b43b930432a85640ca2b32d00eb4d6a0a5ce0c820a1bffa3a7a6800293b685617f08fb431366aeb499af84550acf5aa86febcb337e10</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-model-builder@3.2.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://maven.apache.org/ref/3.2.5/maven-model-builder</url></reference><reference type="build-system"><url>https://builds.apache.org/job/maven-3.x/</url></reference><reference type="distribution"><url>http://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/MNG</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/maven-users</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.2.5/maven-model-builder</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-aether-provider@3.2.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-aether-provider</name>
      <version>3.2.5</version>
      <description>Extensions to Aether for utilizing Maven POM and repository metadata.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5b6cc79c8c8abc3c92ae7d57c4cbb078</hash>
        <hash alg="SHA-1">dfddf469d20b877b184dda5d6e60f0c75f558a72</hash>
        <hash alg="SHA-256">703944b922d5351aad53b842f7dd38439b7213425f13c6c7f034b8b699b7d578</hash>
        <hash alg="SHA-512">8ce9984b76364e162f8f31c99222c9b996813f2e12e6a8406d6a438d857855f8255e2f0403af281b081e6bc6e95374cb9faa9cff3f35214de1005c477f408299</hash>
        <hash alg="SHA-384">619bcb4fcf830a43b75b5bb3545173aa302102ead74ac3addee28f278d906841292130c4f515a15319893a3617fdd5ea</hash>
        <hash alg="SHA3-384">502aed022268a41bf0583c2a2d6413ac524d8c57b49c9530e4906556e3f773c346c25d3c915085b70b1d4eb56388a1e9</hash>
        <hash alg="SHA3-256">420420738f280be8d8167376df04b1a1baec6b353365cb226fcf487ac087ee2e</hash>
        <hash alg="SHA3-512">c10c2512042c8e52f72483b9063c510e6c109a07e745a847c460fab956c5a5bbc7b8dd13532628a686a8acbb2312ec13bc6740433f5e9cf750d9c04b90b1ba1c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-aether-provider@3.2.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://maven.apache.org/ref/3.2.5/maven-aether-provider</url></reference><reference type="build-system"><url>https://builds.apache.org/job/maven-3.x/</url></reference><reference type="distribution"><url>http://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/MNG</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/maven-users</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.2.5/maven-aether-provider</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.aether/aether-spi@1.0.0.v20140518?type=jar">
      <publisher>The Eclipse Foundation</publisher>
      <group>org.eclipse.aether</group>
      <name>aether-spi</name>
      <version>1.0.0.v20140518</version>
      <description>The service provider interface for repository system implementations and repository connectors.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">51c5870c01f48af3231ce6499464827a</hash>
        <hash alg="SHA-1">985a9a12b904fb3bafd4dc6b49f6a084845703a1</hash>
        <hash alg="SHA-256">a3266d127a4e9f4aa9c4fa0986e31eec784e866f79112e1840d1667e17c10fb2</hash>
        <hash alg="SHA-512">8074048d24d05c20da7adda6b8de93249e9e22b7fb62612b74c9f5623b093a7f23ba2cc2e77808542ee5dca6352b0e40e4f755dbd2a63f83a16d24b180bc19fc</hash>
        <hash alg="SHA-384">fa6d14091ab9b0ff63337e31cd0270640e1a84675733963c2d186ad1a6d2f8f64360431b81124e9c5f3d700ef8269374</hash>
        <hash alg="SHA3-384">5f12b67abc816c2b349cd9e7f0cf7320c0a780d6e4a81970fb84b671ae7b39839c7fba37e5ab75a3044ed93687bc737d</hash>
        <hash alg="SHA3-256">539f920cee955ac715fc4ea32fcb8f42adb81a0a923711683a47231cfc99deb7</hash>
        <hash alg="SHA3-512">a0c69f8c37301220994cc3c53ff810e66f4d3975eee386ed1d875a9e709d6f2a131474c9c7247ce6b7019551d909ef4d478ea2160db817c6a69741e70d025435</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.aether/aether-spi@1.0.0.v20140518?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.eclipse.org/aether/aether-spi/</url></reference><reference type="build-system"><url>https://hudson.eclipse.org/aether/job/aether-core/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://bugs.eclipse.org/bugs/buglist.cgi?query_format=specific&amp;bug_status=__open__&amp;product=Aether</url></reference><reference type="mailing-list"><url>http://dev.eclipse.org/mhonarc/lists/aether-dev/</url></reference><reference type="vcs"><url>http://git.eclipse.org/c/aether/aether-core.git/tree/aether-spi/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.aether/aether-impl@1.0.0.v20140518?type=jar">
      <publisher>The Eclipse Foundation</publisher>
      <group>org.eclipse.aether</group>
      <name>aether-impl</name>
      <version>1.0.0.v20140518</version>
      <description>An implementation of the repository system.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">819d1c095629b2bd9ed0980395c91b7d</hash>
        <hash alg="SHA-1">a5ee67be2c99dfb95ad61235d749c92ae09c926e</hash>
        <hash alg="SHA-256">9a9b60e685385225f08e662cb9f60d96610b0987f0f47bbf3f0c92df8a897d00</hash>
        <hash alg="SHA-512">594b84397a652e481e1ed14a7b53b554bf3e851410b99189f78d9aa4dfa872f02e9e536255357799d934d1171607a36d38e7e9ff6409d04f4e88aded914f215b</hash>
        <hash alg="SHA-384">5b38a890f624b378fc5e4e067aee2273f24b6f1dd3ef72ae0dd450bdfdfa873e7f814beab8150b9e0c6957275d81b29e</hash>
        <hash alg="SHA3-384">874dfeaf12482b845a1204927e7ab0848511c46b323864c0d01ce501e41c530f4106c73b410a00f0b5524fd702af0f08</hash>
        <hash alg="SHA3-256">38cbb58e4ddabaa86483d16bfbb5065d2e742820484a15d96e4aad3fea49273a</hash>
        <hash alg="SHA3-512">a2363558799963e4ffb1a1eec2fb0410c1a2a769177f55ac535c50e3b676e626e8dfa0b54e0db9d734641c829d416e6196faeccd3092e6b66168da17b8c7242e</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.aether/aether-impl@1.0.0.v20140518?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.eclipse.org/aether/aether-impl/</url></reference><reference type="build-system"><url>https://hudson.eclipse.org/aether/job/aether-core/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://bugs.eclipse.org/bugs/buglist.cgi?query_format=specific&amp;bug_status=__open__&amp;product=Aether</url></reference><reference type="mailing-list"><url>http://dev.eclipse.org/mhonarc/lists/aether-dev/</url></reference><reference type="vcs"><url>http://git.eclipse.org/c/aether/aether-core.git/tree/aether-impl/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.aether/aether-api@1.0.0.v20140518?type=jar">
      <publisher>The Eclipse Foundation</publisher>
      <group>org.eclipse.aether</group>
      <name>aether-api</name>
      <version>1.0.0.v20140518</version>
      <description>The application programming interface for the repository system.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b05ef5410dad83a4e9ba50e08e0dbbf4</hash>
        <hash alg="SHA-1">be68e917f454dcd841865ad7cf9b7615b26a51f7</hash>
        <hash alg="SHA-256">84b98521684ab22f9528470fa6d8ab68a230e1b211623c989ba7016c306eb773</hash>
        <hash alg="SHA-512">41addf7be0094decb6b4d6c11811b7a7edcc280d60f8a5cb3346d963422cacea84b6dcba7a00fa4a93c69a44b7dc5afd0960b8f56e60ae36f6c8e97ab52ffb5e</hash>
        <hash alg="SHA-384">44e821c90b238407402910a378e17ff3d845f26252bc74ad4b62c4f04bec6aa0a68ecc068eb8ed98ecd11d1b3b628d1f</hash>
        <hash alg="SHA3-384">284850d6126cbf7ecd63c54970fa1e359c17d7c720a2a56ac37d45a091a46506fb9e5c95bcfd4104534e0efd7d3bd802</hash>
        <hash alg="SHA3-256">46af39fc94d4514f2f3705bf8980a98c8a6dbb5d254919eb694518411f0e561b</hash>
        <hash alg="SHA3-512">37fabd5b33c819b890186116a31d127e5737282a1422eb2f42a330b59fab518f6a9f31f1e744521ae1d2a6addf61817eae36c1f8e1db06437484da6e23728d1b</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.aether/aether-api@1.0.0.v20140518?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.eclipse.org/aether/aether-api/</url></reference><reference type="build-system"><url>https://hudson.eclipse.org/aether/job/aether-core/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://bugs.eclipse.org/bugs/buglist.cgi?query_format=specific&amp;bug_status=__open__&amp;product=Aether</url></reference><reference type="mailing-list"><url>http://dev.eclipse.org/mhonarc/lists/aether-dev/</url></reference><reference type="vcs"><url>http://git.eclipse.org/c/aether/aether-core.git/tree/aether-api/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.aether/aether-util@1.0.0.v20140518?type=jar">
      <publisher>The Eclipse Foundation</publisher>
      <group>org.eclipse.aether</group>
      <name>aether-util</name>
      <version>1.0.0.v20140518</version>
      <description>A collection of utility classes to ease usage of the repository system.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">08495ee7ecf90f0b528e7d65471532af</hash>
        <hash alg="SHA-1">7df5ba98ce8b78985d75fdd8c2981fe69234ef85</hash>
        <hash alg="SHA-256">aff0951639837c4e3a4699a421fa79f410032f603f5c6a5bba435e98531f3984</hash>
        <hash alg="SHA-512">ec43fd01a81d7f8e027603c4627d50eff58eb53e970b6888b0fe07d2963876075d05fc9a5e39f957904b4bc9bd6d729b9d17a15852064939b7a59f322830747e</hash>
        <hash alg="SHA-384">f6cb988a67a2d93ddcae222408b43d92fe6ede0bbc3646115a246a9a088a418ec50be729efd9eed4cada828eaa171946</hash>
        <hash alg="SHA3-384">a7f597f411b6993c91db48a33e0588f83b25a8d065a15a59d71510771a0c55473b9d63719bcadbae09a4ea6dfc20a50b</hash>
        <hash alg="SHA3-256">c381aa336fff73f9c0cee17ebdce8605ac0c6fe1a548768b58b1f854e8db473b</hash>
        <hash alg="SHA3-512">1d7b47331f01856f80ee1adfd0293350747e6e8640c725ce928c4415c64df57f71ef783bbfcdcdc505c53b7f02f4a48a4258be30eb2b7b32afcd547216e8a587</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.aether/aether-util@1.0.0.v20140518?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.eclipse.org/aether/aether-util/</url></reference><reference type="build-system"><url>https://hudson.eclipse.org/aether/job/aether-core/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://bugs.eclipse.org/bugs/buglist.cgi?query_format=specific&amp;bug_status=__open__&amp;product=Aether</url></reference><reference type="mailing-list"><url>http://dev.eclipse.org/mhonarc/lists/aether-dev/</url></reference><reference type="vcs"><url>http://git.eclipse.org/c/aether/aether-core.git/tree/aether-util/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.sonatype.sisu/sisu-guice@3.2.3?classifier=no_aop&amp;type=jar">
      <publisher>Google, Inc.</publisher>
      <group>org.sonatype.sisu</group>
      <name>sisu-guice</name>
      <version>3.2.3</version>
      <description>Patched build of Guice: a lightweight dependency injection framework for Java 6 and above</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">733be430711a32f2b9ba72da565cab2f</hash>
        <hash alg="SHA-1">6b8262f32ff7b60881aed3e7aa9d81fdb48330e9</hash>
        <hash alg="SHA-256">004af7012b6d11ab585ae841130ff091dcad6531d7bf13db4d7deac91589eef4</hash>
        <hash alg="SHA-512">6cbd0095a564aa76423a835c08ee3c12f61eecae241f1c19fb4909f6b5355143e901766e9c7ae97953f70adbec79b8561cbc1e02af51c23552599ed5cb2b5ce2</hash>
        <hash alg="SHA-384">1af7c634c87fc8ec7245c0ada7031f43c54df00072fc637604d3043f43e319368e65e234457b53313364ecfb0c03b6fc</hash>
        <hash alg="SHA3-384">6f95906cf706a0cac5a023d4236bf38a44c5a1abf350e87c8317c2c1aa2a4b34924479ebfa3705f146062f6c2bb29839</hash>
        <hash alg="SHA3-256">d7f517ba0884569b13bd46d218472ab948567bb311307c63cbb0a00b611cc4ab</hash>
        <hash alg="SHA3-512">ef046f737e580bc9682d724665c9b1485475c2d10122776dda545891a7913773af6439b9e22e136a27cefddf9dfa4649a1e32107c7bcb9edb2cb9f5aac05160a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.sonatype.sisu/sisu-guice@3.2.3?classifier=no_aop&amp;type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/google/guice/sisu-guice</url></reference><reference type="build-system"><url>https://travis-ci.org/google/guice</url></reference><reference type="distribution"><url>https://repository.sonatype.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://github.com/google/guice/issues/</url></reference><reference type="mailing-list"><url>http://groups.google.com/group/google-guice/topics</url></reference><reference type="vcs"><url>http://github.com/sonatype/sisu-guice/sisu-guice</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/aopalliance/aopalliance@1.0?type=jar">
      <group>aopalliance</group>
      <name>aopalliance</name>
      <version>1.0</version>
      <description>AOP Alliance</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">04177054e180d09e3998808efa0401c7</hash>
        <hash alg="SHA-1">0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8</hash>
        <hash alg="SHA-256">0addec670fedcd3f113c5c8091d783280d23f75e3acb841b61a9cdb079376a08</hash>
        <hash alg="SHA-512">3f44a932d8c00cfeee2eb057bcd7c301a2d029063e0a916e1e20b3aec4877d19d67a2fd8aaf58fa2d5a00133d1602128a7f50912ffb6cabc7b0fdc7fbda3f8a1</hash>
        <hash alg="SHA-384">4dddf44338b5aff9580da2532b81c0ac3e1d09e1f28c6db871a55cad442b705dd7791eb07f9d4577d49d0be3673ba783</hash>
        <hash alg="SHA3-384">2bd64cbaf769c6e4e85e34f7a6119d89e16fbf55af3fc5d6cbd52eb214c367dec1ac7b9062ee0fb35a2e0acfc7c477e1</hash>
        <hash alg="SHA3-256">d4a726b2bf8aa58197021a7d8fca674b4b2790d4c48de43a92f728866a91c2f0</hash>
        <hash alg="SHA3-512">830bc3f8328be76897990e9b9fc42eef02623115e456af96ad09b20900ad615519c8c8de60155ac04fb332eaa9510110d52edd13911af76271c71d91cbd789cc</hash>
      </hashes>
      <licenses>
        <license>
          <name>Public Domain</name>
        </license>
      </licenses>
      <purl>pkg:maven/aopalliance/aopalliance@1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://aopalliance.sourceforge.net</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.guava/guava@16.0.1?type=jar">
      <group>com.google.guava</group>
      <name>guava</name>
      <version>16.0.1</version>
      <description>Guava is a suite of core and expanded libraries that include
    utility classes, google's collections, io classes, and much
    much more.

    Guava has only one code dependency - javax.annotation,
    per the JSR-305 spec.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a68693df58191585d9af914cfbe6067a</hash>
        <hash alg="SHA-1">5fa98cd1a63c99a44dd8d3b77e4762b066a5d0c5</hash>
        <hash alg="SHA-256">a896857d07845d38c7dc5bbc0457b6d9b0f62ecffda010e5e9ec12d561f676d3</hash>
        <hash alg="SHA-512">a9df202229a7955b70f35f33c9662bb0e7fec9e972c1fbac95fcf77ebacf18fea7e834dd60dcec1c8b6894393c75c480e08067e661cc234dea4829b952b7a2c4</hash>
        <hash alg="SHA-384">acc4ff89db23b3e6711f2be79f7c0d430f59327a3f1c9b3dd542e5618c6fec0d74357cf18c4c98c5915c587d4bcd9cbf</hash>
        <hash alg="SHA3-384">2408da9af0df3c949d93b1b6c642f8afd96210a641521ada29b80f19611ddc9505273de86cfa57440531e4f0234a985b</hash>
        <hash alg="SHA3-256">a7042d5a5d683bf80eafdac37adc3d10075ade64edb82daae574bb49cf2fe9cd</hash>
        <hash alg="SHA3-512">e57cd5702d6e2bd8ac39b31eb638b77ff33d15e2498efff2c6ffee9cbf556c466dd98a7ad8d49b085302a32a6f15e1c7a0593e2cc4db90559a38daceba43221f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.guava/guava@16.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://code.google.com/p/guava-libraries/guava</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://code.google.com/p/guava-libraries/issues</url></reference><reference type="vcs"><url>http://code.google.com/p/guava-libraries/source/browse/guava</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-interpolation@1.21?type=jar">
      <publisher>Codehaus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-interpolation</name>
      <version>1.21</version>
      <description>The Plexus project provides a full software stack for creating and executing software projects.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6629656495f4e5eac4f244fe3b252ea1</hash>
        <hash alg="SHA-1">f92de59d295f16868001644acc21720f3ec9eb15</hash>
        <hash alg="SHA-256">aba7980581027ad5fc74a27ee4d64aad74932fdb32694967242d03fc50290d1f</hash>
        <hash alg="SHA-512">073168d32e16e4e67598558ebbb68778740185e6dcb87d68ab2a68ab867c2acbf2af5c1e8fc82dcb8b2062e46ddc36b6024c00cd5c2fffe794b4610d5f13a66d</hash>
        <hash alg="SHA-384">2ce80945419fddaf00d2d7110d8b0c61975dde40d6b8b643262eff84263974c5551391f5028a995d84c46c65a0ab954e</hash>
        <hash alg="SHA3-384">b887e8ac5cc4fc4427a50c94b6e6aa3d69862dc8880d97999854a397a48f1c57761ab5b8cb3f47045c4d986021a1e395</hash>
        <hash alg="SHA3-256">68a85fb904f7d5a8241b24383f8f90601c47e2a013576e9af9f9ccadcc935d35</hash>
        <hash alg="SHA3-512">7784d80c733fce282ac416c21fc883894679a48a63f5afa50dadd6ff554babc80188fc13eec959e0adcc4e49711c06b338aa5b8f5df80f2abb36394923e32088</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-interpolation@1.21?type=jar</purl>
      <externalReferences><reference type="website"><url>http://plexus.codehaus.org/plexus-components/plexus-interpolation</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/PLXCOMP</url></reference><reference type="mailing-list"><url>http://archive.plexus.codehaus.org/user</url></reference><reference type="vcs"><url>http://github.com/sonatype/plexus-interpolation</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-classworlds@2.5.2?type=jar">
      <publisher>Codehaus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-classworlds</name>
      <version>2.5.2</version>
      <description>A class loader framework</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">53b54feee8cef6b843bd6748bda4bfa7</hash>
        <hash alg="SHA-1">4abb111bfdace5b8167db4c0ef74644f3f88f142</hash>
        <hash alg="SHA-256">b2931d41740490a8d931cbe0cfe9ac20deb66cca606e679f52522f7f534c9fd7</hash>
        <hash alg="SHA-512">5bbbce8880a8513ba1314c202005de96fe263b48f45d5cd6a3a3577fdfe7ccd88c2b908093eec237e6624f5dbba664dfb8aa82939cc540bb6652c0f4eea7b333</hash>
        <hash alg="SHA-384">27df83d9e2eb2730f1b0480aead44e0ed8c5243c0e3d96642e564917ee621f3c8b3217a4f3ae4f640fe9f8a0b67a43da</hash>
        <hash alg="SHA3-384">0ed9e4f4bcb3baecda4730667de8d8c93edbfcb1c97d7cf203eac5de3c783c6bc2881b196505b4c0bb10eecc58cb2212</hash>
        <hash alg="SHA3-256">96476ac810a44f0026e4d32bf571b4597735f0bf06a722128104147484b851f7</hash>
        <hash alg="SHA3-512">0da78c61970ad7c2f351727d89361270458559a7448083c5f369547a19cc7a9afc4f3b939e829e87bef06406cd0d4cb57a5b6749d4692d71da37dd4bd090fe41</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-classworlds@2.5.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://plexus.codehaus.org/plexus-classworlds/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/PLX</url></reference><reference type="mailing-list"><url>http://archive.plexus.codehaus.org/user</url></reference><reference type="vcs"><url>http://github.com/sonatype/plexus-classworlds</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar">
      <publisher>Codehaus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-component-annotations</name>
      <version>1.5.5</version>
      <description>Plexus Component "Java 5" Annotations, to describe plexus components properties in java sources with
    standard annotations instead of javadoc annotations.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ef37dcdb84030422db428b63c4354e5b</hash>
        <hash alg="SHA-1">c72f2660d0cbed24246ddb55d7fdc4f7374d2078</hash>
        <hash alg="SHA-256">4df7a6a7be64b35bbccf60b5c115697f9ea3421d22674ae67135dde375fcca1f</hash>
        <hash alg="SHA-512">2ea4afb8888f157483c6a8e99852fa8a80e90a3cf0756b3b22c73a8bc59a4aa3d7b50b975a1d810f28a090023b268dab49af14e8f8e33c7553fa61315afe06b2</hash>
        <hash alg="SHA-384">94193ec354f65fa8427b4b5115d1f47cb3bd70b0589c612cb5c604d8a2ddf0cce1d8683bf70c5576c27fc3dad33f0ac0</hash>
        <hash alg="SHA3-384">eccd004db31d02566b743eb55bcfbc7161aca472a4ab3e86fbb437f0bc19bdb666830a6168646b6d569a09f2af4c4fbc</hash>
        <hash alg="SHA3-256">b739989c677fee5136fea5f48524f385bd6a161eb8d606772b05afc10d94c827</hash>
        <hash alg="SHA3-512">58bf57dfa292eeeee95108a732ec5fd9e75cc08e23c94b2335e137c05159b565224529db6348448f973d057c37c84007c417d47de52875d09209a6873a43e218</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://plexus.codehaus.org/plexus-containers/plexus-component-annotations/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/PLX</url></reference><reference type="mailing-list"><url>http://archive.plexus.codehaus.org/user</url></reference><reference type="vcs"><url>http://fisheye.codehaus.org/browse/plexus/plexus-containers/tags/plexus-containers-1.5.5/plexus-component-annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.3?type=jar">
      <group>org.sonatype.plexus</group>
      <name>plexus-sec-dispatcher</name>
      <version>1.3</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">53160199f5667de3fca69b723173639b</hash>
        <hash alg="SHA-1">dedc02034fb8fcd7615d66593228cb71709134b4</hash>
        <hash alg="SHA-256">3b0559bb8432f28937efe6ca193ef54a8506d0075d73fd7406b9b116c6a11063</hash>
        <hash alg="SHA-512">8b609608e4ce1346fdd3a0793d66dbdb893d6af046594ccc456eaceabca3f7a251cc8a6f1cad22fc17688911d0842cc84fa2303027fdf241c77f4078905aaacd</hash>
        <hash alg="SHA-384">539392b84ed3dfeeaa97c42a4befa559a05d18baabcadda2537b18fe8f340e11823ce0646e8931b92a4cfb24cd39d981</hash>
        <hash alg="SHA3-384">9355f99fc6e1c5f4eaa73417b730adfed5d5d20528171aea4b487b8a75028a900d67abd923df025dffd20f32edff69ab</hash>
        <hash alg="SHA3-256">b6185018455b1ffd854f9d5ef2ba2dc5750ad4c68789854e4c2440bd91ada76c</hash>
        <hash alg="SHA3-512">323c863614c94d12508265454a5c598358a0b5b2fb18400d1ab457cf3a161c7e31079ada7ab8ed5d1b28d1e4dee9ab8f82cfb84ad40b42d69e330562d1a69da7</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.3?type=jar</purl>
      <externalReferences><reference type="website"><url>http://spice.sonatype.org/plexus-sec-dispatcher</url></reference><reference type="build-system"><url>https://grid.sonatype.org/ci/view/Spice/</url></reference><reference type="distribution"><url>http://repository.sonatype.org/content/repositories/releases</url></reference><reference type="issue-tracker"><url>https://issues.sonatype.org/browse/SPICE</url></reference><reference type="vcs"><url>http://svn.sonatype.org/spice/tags/plexus-sec-dispatcher-1.3</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.sonatype.plexus/plexus-cipher@1.4?type=jar">
      <group>org.sonatype.plexus</group>
      <name>plexus-cipher</name>
      <version>1.4</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7b2d6fcf0d5800d5b1ce09d98d98dcaf</hash>
        <hash alg="SHA-1">50ade46f23bb38cd984b4ec560c46223432aac38</hash>
        <hash alg="SHA-256">5a15fdba22669e0fdd06e10dcce6320879e1f7398fbc910cd0677b50672a78c4</hash>
        <hash alg="SHA-512">deb948be3a9f6a2fa74adca17e54b1074948267b3a35dd4000d92c559d0387650770ccee096ad8f01dd51c36caf63878dc0bcf57dfb1f2e3e1a9d51204096617</hash>
        <hash alg="SHA-384">29d6722d6d4c412a98ed95f1fd6620047b22ce8d7e3160bcc49ca616a016b57be0c4d35daa8896ef93a80bcff77725ec</hash>
        <hash alg="SHA3-384">2f27b64dcb2dcc7b16eb24487c67363a2977d4d695b97ebea829b7301c444e07cbf8a8b0471332c81b3d3ee393388834</hash>
        <hash alg="SHA3-256">ef83ecf09c7bda0c412b6acdf558171f4f5f1065a68359916ecffcbea8e3475d</hash>
        <hash alg="SHA3-512">1a8b406ab9d63cb3af63e56a09bbde88e404041a1b70c68487c1c0009c24d042cea9ee2325ad99c0aee845ec61ff17a69ae14843f08de2f5af90cd5bb617e34c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.sonatype.plexus/plexus-cipher@1.4?type=jar</purl>
      <externalReferences><reference type="website"><url>http://spice.sonatype.org/plexus-cipher</url></reference><reference type="build-system"><url>https://grid.sonatype.org/ci/view/Spice/</url></reference><reference type="distribution"><url>http://repository.sonatype.org/content/repositories/releases</url></reference><reference type="issue-tracker"><url>https://issues.sonatype.org/browse/SPICE</url></reference><reference type="vcs"><url>http://svn.sonatype.org/spice/tags/plexus-cipher-1.4</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.shared/maven-shared-utils@3.4.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.shared</group>
      <name>maven-shared-utils</name>
      <version>3.4.2</version>
      <description>Shared utilities for use by Maven core and plugins</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">53a038f77a81cb5816ad2b1c7daa8711</hash>
        <hash alg="SHA-1">bfa28296272a5915b08de9f11f34a94b0a818fd0</hash>
        <hash alg="SHA-256">b613357e1bad4dfc1dead801691c9460f9585fe7c6b466bc25186212d7d18487</hash>
        <hash alg="SHA-512">71db8a485a6436cb305276ea9d748f578e1a8ffa1346c8570f7038684ce53d320584174634aeffa1b51629af0171a2d6572854eb07236a83236ad1d9949988e9</hash>
        <hash alg="SHA-384">8f7e2c449282244fea3151ac0c956b42bb7ae6cb2397ca8b18952aea802d33cccad6e08a5f515fc34e52bacfece18862</hash>
        <hash alg="SHA3-384">72ec6c2c5de8cd074bd59dbb8215005bedc9de58795484ec2792fa867eaf13547aaca81daaf06f1ec117d29b21e70cd0</hash>
        <hash alg="SHA3-256">5cf6de29555bde0317d641e8a7afd7d1ed84dddff92c80f8493b4a2873d26c41</hash>
        <hash alg="SHA3-512">836acb2525ddc3b352da7db824e00c0831b25f46cb32a77c1e578b39978621e3c47da3554a901749af15b3981620875a4c4492f421a1833d8eb8e50c4804eff8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.shared/maven-shared-utils@3.4.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://maven.apache.org/shared/maven-shared-utils/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-shared-utils/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/issues/?jql=project%20%3D%20MSHARED%20AND%20component%20%3D%20maven-shared-utils</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven-shared-utils/tree/maven-shared-utils-3.4.2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>1.7.36</version>
      <description>The slf4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">872da51f5de7f3923da4de871d57fd85</hash>
        <hash alg="SHA-1">6c62681a2f655b49963a5983b8b0950a6120ae14</hash>
        <hash alg="SHA-256">d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0</hash>
        <hash alg="SHA-512">f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b</hash>
        <hash alg="SHA-384">2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a</hash>
        <hash alg="SHA3-384">3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b</hash>
        <hash alg="SHA3-256">ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881</hash>
        <hash alg="SHA3-512">14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.slf4j.org</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j/slf4j-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-io/commons-io@2.11.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-io</group>
      <name>commons-io</name>
      <version>2.11.0</version>
      <description>The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3b4b7ccfaeceeac240b804839ee1a1ca</hash>
        <hash alg="SHA-1">a2503f302b11ebde7ebc3df41daebe0e4eea3689</hash>
        <hash alg="SHA-256">961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908</hash>
        <hash alg="SHA-512">5bd78eed456ede30119319c5bed8e3e4c443b6fd7bdb3a7a5686647bd83094d0c3e2832a7575cfb60e4ef25f08106b93476939d3adcfecf5533cc030b3039e10</hash>
        <hash alg="SHA-384">114f1e324d90ad887c177876d410f5787a8e8da6c48d4b2862d365802c0efded3a88cb24046976bf6276cadad3712f0f</hash>
        <hash alg="SHA3-384">80288c03ad4d80d69f91d056ffc5570d49a9c76bf54ad2dff0121ecde26a560df76d05156f281f5c6db2a38ff07a873d</hash>
        <hash alg="SHA3-256">5adfb5ccaf5f21a549422f426118a9542673926fcd18c68390cf813e791dcf6c</hash>
        <hash alg="SHA3-512">7573f47f0babb53cefdc7c2309a0b982d800139064537b0797da442853d081010ad7c3c74a500598a0f800639a5d540eca21963ea652c68613907059bd4278c2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-io/commons-io@2.11.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-io/</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/IO</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-io.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.shared/maven-shared-incremental@1.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.shared</group>
      <name>maven-shared-incremental</name>
      <version>1.1</version>
      <description>Various utility classes and plexus components for supporting 
    incremental build functionality in maven plugins.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8a48e08aa027a7ac33fcc85054512021</hash>
        <hash alg="SHA-1">9d017a7584086755445c0a260dd9a1e9eae161a5</hash>
        <hash alg="SHA-256">61988e54486a5dc38f06c70fdae5b108556c63bd433697b9f4305fcdb30fa40e</hash>
        <hash alg="SHA-512">d92da9a0f7e7f70605246805bac7bc83ae31eca7666242d8eebdbde4b8e6c2b6d99f54a7fb37624747412e413456a6b08bc3ca10205440debc5676d163ea275e</hash>
        <hash alg="SHA-384">acbfa91d1c843574d12c70c5df63b482fffa7109f95513dea8e4ec00983b9df194461d7d5f0cd2896b723e222bd30a70</hash>
        <hash alg="SHA3-384">e606d2a49b176f664feb60e1617f898c5fc2ffb81ab25af92f9c0ecdbbc21a78f829dbcf6784755f5dc2a1d8b3e59333</hash>
        <hash alg="SHA3-256">c3a97f2bfe761d2dcd90025c9841bd5b54f034fac592c9d9e3c7958a11f4cb15</hash>
        <hash alg="SHA3-512">89a5712745e1ecdefeccb9c7f206c44124141473f114e428df2ae4242de88c9eb3eea11adfb8e7fd608d316fda694ab9b45124ccd5ea8c0845b6b6127d7877ee</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.shared/maven-shared-incremental@1.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://maven.apache.org/shared/maven-shared-incremental/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/maven-shared/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://jira.codehaus.org/browse/MSHARED/component/15650</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/maven-users</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/maven/shared/tags/maven-shared-incremental-1.1</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-java@1.2.0?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-java</name>
      <version>1.2.0</version>
      <description>Plexus Languages maintains shared language features.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">fc0976d9a939e5afe5c543f72438f290</hash>
        <hash alg="SHA-1">3f161764aac786d64c4cac26511215369250d4fd</hash>
        <hash alg="SHA-256">4d2d63cdcad46feba432110ef64bcdc8f8fad48538fda5cd2253686b45a94304</hash>
        <hash alg="SHA-512">c221a9b754734d0500e0cb0eda7f2cf748c48ffaad3f07d170459f0cdda5575ef44226767ce42ca5a7a642e4b5d74275c26af00122d2ab1371c8f5e5d948cf00</hash>
        <hash alg="SHA-384">8633d8002af703254e55aa900e75eb0562fc7ee693165b5911edd6c50012315673d8ac1f3b4a4dfb6438507ee961044c</hash>
        <hash alg="SHA3-384">1e203a3cac6acfda699bcbc02c8c3069786b8a0879ae756fe02460ba127dd1ab48e491cff07bf11a9bd2ab4b17ef2353</hash>
        <hash alg="SHA3-256">b53da143673fe37a0a0dc1e9c0eb4a5c16183c68d93b434db65005ead6972846</hash>
        <hash alg="SHA3-512">dba737997787bef494596fa70774884b8107b6f51393cacce8e74dc1fe7808403000ba47c5b3bfdb280a9a7d266ccec7d002e8720380de88e076c130afad6068</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-java@1.2.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://codehaus-plexus.github.io/plexus-pom/plexus-languages/plexus-java/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://github.com/codehaus-plexus/plexus-languages/issues</url></reference><reference type="mailing-list"><url>https://groups.google.com/forum/#!forum/mojohaus-dev</url></reference><reference type="vcs"><url>https://github.com/codehaus-plexus/plexus-languages/tree/plexus-languages/plexus-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.ow2.asm/asm@9.6?type=jar">
      <publisher>OW2</publisher>
      <group>org.ow2.asm</group>
      <name>asm</name>
      <version>9.6</version>
      <description>ASM, a very small and fast Java bytecode manipulation framework</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6f8bccf756f170d4185bb24c8c2d2020</hash>
        <hash alg="SHA-1">aa205cf0a06dbd8e04ece91c0b37c3f5d567546a</hash>
        <hash alg="SHA-256">3c6fac2424db3d4a853b669f4e3d1d9c3c552235e19a319673f887083c2303a1</hash>
        <hash alg="SHA-512">01a5ea6f5b43bf094c52a50e18325a60af7bb02e74d24f9bc2c727d43e514578fd968b30ff22f9d2720caec071458f9ff82d11a21fbb1ebc42d8203e737c4b52</hash>
        <hash alg="SHA-384">80e0a92442db343baea7bab9bb1d0b7037c98d6aa54172820b21ea45e51dfea42b7670aa39e938d0f88ad4466004a19a</hash>
        <hash alg="SHA3-384">98a43a49425054d14574e75aa034e3758b8f0ac382c705773cd80be4065df6b198ba106f443d1d389a8d2a027586f122</hash>
        <hash alg="SHA3-256">df966c1a8edf2f5dc378e60468399b60d9d27481241462b75a61033b06f95578</hash>
        <hash alg="SHA3-512">5f2cfa6ca6e369f5e94861652da88c12c0554ea4aa0c8472393011aacadeda2309d00d9817417debac5d1c4e01bb9584cb9c438eff63bd10ed89666bb9cffed7</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
          <url>https://opensource.org/licenses/BSD-3-Clause</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.ow2.asm/asm@9.6?type=jar</purl>
      <externalReferences><reference type="website"><url>http://asm.ow2.io/</url></reference><reference type="distribution"><url>https://repository.ow2.org/nexus/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://gitlab.ow2.org/asm/asm/issues</url></reference><reference type="mailing-list"><url>https://mail.ow2.org/wws/arc/asm/</url></reference><reference type="vcs"><url>https://gitlab.ow2.org/asm/asm/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.thoughtworks.qdox/qdox@2.0.3?type=jar">
      <group>com.thoughtworks.qdox</group>
      <name>qdox</name>
      <version>2.0.3</version>
      <description>QDox is a high speed, small footprint parser for extracting class/interface/method definitions from source files
    complete with JavaDoc @tags. It is designed to be used by active code generators or documentation tools.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1a599568ea16556d01a008d9e062ac89</hash>
        <hash alg="SHA-1">d70143d2a58e7b16a8ec73a495508d43a085d83b</hash>
        <hash alg="SHA-256">ff70c10165714fe9546c418a65d74ecd5d57623ba408cecde9428f0a609b5d1c</hash>
        <hash alg="SHA-512">f1844c1a1752c6ab7bea4832736f2c9461bc1d36e2e65138f2893e480570f1fc84cb85a5f729cf58f3a63a2d81a753df7007f71ebe2ba456a48cdc51d8579ccb</hash>
        <hash alg="SHA-384">f6a83584cf037c08560e5471ce257b07bd09550a02f625f2f233df19d9af5e2c92e37412c669043113dce68609887aa3</hash>
        <hash alg="SHA3-384">8a6cd623c815df9ccd5312801bbe3502cbe445cfcabee41f927681345a3f25f92a1e4e918d11069701a781e8dcae93d5</hash>
        <hash alg="SHA3-256">418e8d630ec38db537ffb540ecdcadccf7966d2435762d3a7f8aaff052fd7558</hash>
        <hash alg="SHA3-512">3b63526f33059844fe153b66f52f181a75342c81698f08efb2e796f9d0e9ccfc16f76e3857bde68ee2fbc23c9453f7148c75ce3cd64d7d1b3de05fc87f62bf2c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.thoughtworks.qdox/qdox@2.0.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/paul-hammant/qdox</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/paul-hammant/qdox/issues</url></reference><reference type="vcs"><url>https://github.com/paul-hammant/qdox</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-compiler-api@2.14.2?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-compiler-api</name>
      <version>2.14.2</version>
      <description>Plexus Compilers component's API to manipulate compilers.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ff75b0f6390c4414ad1ec8c4d41ee81b</hash>
        <hash alg="SHA-1">3248b2f9fabc658838bbb9d3efcf8ba04e607e5c</hash>
        <hash alg="SHA-256">de36c9c6a5833d38a11b9ce2bdcc5467947b178fb97e8e6bdfb7a25e17e5958c</hash>
        <hash alg="SHA-512">553952c487b390b784e6253d8b494ecdf56aaeb723dcddb4029f758335f63c26ff6c79d67e882b0dbd9d206a808a537a28f22b3575352fbc9b7e9cd8c3f20679</hash>
        <hash alg="SHA-384">51da99b41d692125f183cdf632819d7d2d12487799d9a1becf8ceff24ce8da8196bc83319c32a9560bf0ec3f070400f3</hash>
        <hash alg="SHA3-384">4572f319a8bc22bd7b72cce4cf0fc4c8ab0df267ae1c1cb2c8f3956a720b80a95f22805072fe143c7d9b255c901c65aa</hash>
        <hash alg="SHA3-256">91965a893a84657bd9fb09188bb40345a49c77ba3206f4bf6770df2ef9a613ff</hash>
        <hash alg="SHA3-512">a38dbd4c19d58e0696bed642e89c18d290141cf8999e1246161a801e6425e2c30ab759e2a34d720625dc69df181965137036035516dbab74f882d6ca51b7aded</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-compiler-api@2.14.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://codehaus-plexus.github.io/plexus-pom/plexus-compiler/plexus-compiler-api/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/codehaus-plexus/plexus-compiler/issues</url></reference><reference type="mailing-list"><url>https://groups.google.com/forum/#!forum/mojohaus-dev</url></reference><reference type="vcs"><url>http://github.com/codehaus-plexus/plexus-compiler/tree/plexus-compiler-2.14.2/plexus-compiler-api/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-compiler-manager@2.14.2?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-compiler-manager</name>
      <version>2.14.2</version>
      <description>Plexus Compiler is a Plexus component to use different compilers through a uniform API.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">699707af03e20d44d1c7e806e7321128</hash>
        <hash alg="SHA-1">e805fe53bd57ab79ca9071ce9f7eb8999c116637</hash>
        <hash alg="SHA-256">6a010efd29eac4a54487dc0548069bf8588412b4f820da7bc37b7d4663c9f394</hash>
        <hash alg="SHA-512">f7d3f69eb3641bd6c7b1715ec9872d9927b432130d2815fc894e7056bd68a1f24a08b1a8a884c86af3f809e6a31834d3ed45519887945027b75482d860d0ad39</hash>
        <hash alg="SHA-384">3b12204c367ae6ef2c3ed94d0326643b3bff69c355f7cf16bbcb005cc2587569806529e217f176ea8930091ec93e5174</hash>
        <hash alg="SHA3-384">c652dbcc438d12148329bdb32eb1b05830c921a1710bc243a8732dbdb9285dc792e54559c294dba150cdb7a062eb361b</hash>
        <hash alg="SHA3-256">17d04ee80ba19eedc42387f91a714b0a80c69900136580171329c935a4f60aa1</hash>
        <hash alg="SHA3-512">21114177b2d38bb2d839560624629f441f32bdfbae59583da192dbf06db8b1f2e44fd42e85ccd1fb861f49ba027f0da703e3b15f0f9b20dba280774ef98bffcf</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-compiler-manager@2.14.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://codehaus-plexus.github.io/plexus-pom/plexus-compiler/plexus-compiler-manager/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/codehaus-plexus/plexus-compiler/issues</url></reference><reference type="mailing-list"><url>https://groups.google.com/forum/#!forum/mojohaus-dev</url></reference><reference type="vcs"><url>http://github.com/codehaus-plexus/plexus-compiler/tree/plexus-compiler-2.14.2/plexus-compiler-manager/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.inject/javax.inject@1?type=jar">
      <group>javax.inject</group>
      <name>javax.inject</name>
      <version>1</version>
      <description>The javax.inject API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">289075e48b909e9e74e6c915b3631d2e</hash>
        <hash alg="SHA-1">6975da39a7040257bd51d21a231b76c915872d38</hash>
        <hash alg="SHA-256">91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff</hash>
        <hash alg="SHA-512">e126b7ccf3e42fd1984a0beef1004a7269a337c202e59e04e8e2af714280d2f2d8d2ba5e6f59481b8dcd34aaf35c966a688d0b48ec7e96f102c274dc0d3b381e</hash>
        <hash alg="SHA-384">ac04c9f03ccbe35a25deb8b50280a0ca01dbe6aff0dd795d55af6112bfe3cd5817eb82f32fb18378d86cd64b07597190</hash>
        <hash alg="SHA3-384">fca090ecb1edeacb9fe865dc515cd1d109b323cd742d4a9733ff199a96ee96e0db4f924079520b9c189ef750f255475d</hash>
        <hash alg="SHA3-256">5b0054e39e522de0e0ffc4034d12f72270291fb24d94d5ffc9c4d69c25035fc6</hash>
        <hash alg="SHA3-512">fb290f5a70b1efc1dff12f40a0b2d7b94019f66da42e78010c0b8e61f222c4f267b67e356a9e9c346eb801e5515e36243888f280c5cb95c2dd69016a30cadeb9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/javax.inject/javax.inject@1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://code.google.com/p/atinject/</url></reference><reference type="vcs"><url>http://code.google.com/p/atinject/source/checkout</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-compiler-javac@2.14.2?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-compiler-javac</name>
      <version>2.14.2</version>
      <description>Javac Compiler support for Plexus Compiler component.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">39ca6f20bf02ef8a0293d0fece726838</hash>
        <hash alg="SHA-1">c53424413a61e768a192eac63d7a336055a5a3dc</hash>
        <hash alg="SHA-256">dd33abf8a86648193d442c960c153649f1fda6668b858c1a0adb6b71c041b8a3</hash>
        <hash alg="SHA-512">df69472e6dcb1601e11b1e02ab983e1f853a99aea46b6bec0b42f26f950e21d2021c01ca6eff1ec059669bb699064c412a53238570877b067517a599bff0bf38</hash>
        <hash alg="SHA-384">7524af34563ea95b0e2c606ab4ce37831b403480e17de010b8ebfb07c8f02723b42459ba1860e9281a40f653d98361dc</hash>
        <hash alg="SHA3-384">f982fab0b366a26b66eef3250471ddf080a928a4960c2b34585e60ae65c43f7517b1770fd40158de21dfb2b1d7ab01ab</hash>
        <hash alg="SHA3-256">1a0bcc2b099a7455068cc809684acea41b862b658ccdbfa7db06d364a7338313</hash>
        <hash alg="SHA3-512">b6584c0d242ec643943079f8f644d6f44931610feb4156e7009ec5e1560f932ccbe654c923187337edead4d78d361444240c5b11355720901aa2d063a243c099</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-compiler-javac@2.14.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://codehaus-plexus.github.io/plexus-pom/plexus-compiler/plexus-compilers/plexus-compiler-javac/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/codehaus-plexus/plexus-compiler/issues</url></reference><reference type="mailing-list"><url>https://groups.google.com/forum/#!forum/mojohaus-dev</url></reference><reference type="vcs"><url>http://github.com/codehaus-plexus/plexus-compiler/tree/plexus-compiler-2.14.2/plexus-compilers/plexus-compiler-javac/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.0?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-utils</name>
      <version>4.0.0</version>
      <description>A collection of various utility classes to ease working with strings, files, command lines and
    more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">16481d9d3af602d73a6355e79d2de889</hash>
        <hash alg="SHA-1">ff00a04ba971655ed10e9fb93bce0ed3014e9477</hash>
        <hash alg="SHA-256">270cd703b48c6e5c8c691f1875f22d62d22cfe072c73ae2f5814d83d68c1da0b</hash>
        <hash alg="SHA-512">1c4dde3e36c37c4b3b3860b54848fc5fbb80f536d2efe095a06629aa782044aeb693adeda3106ac8c773069e766f3def616990c0444597d20c0bc9f1d7348bd1</hash>
        <hash alg="SHA-384">5f855b2f6b40c05d9ed6b7b7a0c79d808c69f0fae0bb5d2ce5840c74775831a7def6f5309c484988e73474e255823b20</hash>
        <hash alg="SHA3-384">7a4a3edf24e631d8504be8f2318a59a3f86aa5c73d0fe74d6d6fdd048b0cbf6a922f6147438f51efae62b5a1a556dcea</hash>
        <hash alg="SHA3-256">a00b1a81452b80c9e518cb32e4192b59721fdd75aabe9c8fa55289a7a619ec31</hash>
        <hash alg="SHA3-512">42b3c2d6910c6d71adf998d6d189923ca758d89c8ab40948495bf9b80d2f4cc737cd13737370988a79853902b53a9cc33edcda17aecf7d7616981c470ffa9080</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-utils@4.0.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://codehaus-plexus.github.io/plexus-pom/plexus-utils/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://github.com/codehaus-plexus/plexus-utils/issues</url></reference><reference type="mailing-list"><url>https://groups.google.com/forum/#!forum/mojohaus-dev</url></reference><reference type="vcs"><url>https://github.com/codehaus-plexus/plexus-utils/tree/master/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-xml@3.0.0?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-xml</name>
      <version>3.0.0</version>
      <description>A collection of various utility classes to ease working with XML in Maven 3.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">cccca4a03a8367cd20e4efaead5fba0b</hash>
        <hash alg="SHA-1">d16b91678bc3734276886132923d6919c935c9f7</hash>
        <hash alg="SHA-256">d2622dc9339b16f5b8c9cad2add440e965831d0e16f19ae1de24e1202b0de536</hash>
        <hash alg="SHA-512">31b68a025ab2658fe59d5fbb79a2425560392e3db2746b0ab805846a58816c4235dd6d50ed3ed2d4919f7494e058075371bb29694f4aaae370c9e0caa2e55245</hash>
        <hash alg="SHA-384">2d341bb6b29b67afe31595657ff478406476408b61bb7a1deda3ec951582e27d0195cbb5dde87124ff803858c5235258</hash>
        <hash alg="SHA3-384">12be70d2675d56eda84b7b072f38f5d94a55d308d87f9d0459014cd3c0819185fe3eecdcb264e321e5f9e1d6e9592ff7</hash>
        <hash alg="SHA3-256">5e42a7729ae31a57ad3538e49bd169ef8b23261aa529766c122dbd7fae13921e</hash>
        <hash alg="SHA3-512">6cdb47b7317ba0ab5f0507c45453c2c67967a845b3a83a72f06441d09d70bc9adfedc4993672f98a6ac814e73fa575afc6dca97d7940242c517cdf2e32f1fc29</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-xml@3.0.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://codehaus-plexus.github.io/plexus-xml/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/codehaus-plexus/plexus-xml/issues</url></reference><reference type="mailing-list"><url>https://groups.google.com/forum/#!forum/mojohaus-dev</url></reference><reference type="vcs"><url>https://github.com/codehaus-plexus/plexus-xml/tree/plexus-xml-3.0.0/</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.maven.plugins/maven-compiler-plugin@3.12.1?type=maven-plugin">
      <dependency ref="pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.10.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-plugin-api@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-artifact@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-core@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.shared/maven-shared-utils@3.4.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.shared/maven-shared-incremental@1.1?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-java@1.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-compiler-api@2.14.2?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-compiler-manager@2.14.2?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-compiler-javac@2.14.2?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.10.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven/maven-plugin-api@3.2.5?type=jar">
      <dependency ref="pkg:maven/org.apache.maven/maven-model@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-artifact@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-model@3.2.5?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven/maven-artifact@3.2.5?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M2?type=jar">
      <dependency ref="pkg:maven/javax.annotation/javax.annotation-api@1.2?type=jar"/>
      <dependency ref="pkg:maven/javax.enterprise/cdi-api@1.2?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M2?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-classworlds@2.5.2?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/javax.annotation/javax.annotation-api@1.2?type=jar"/>
    <dependency ref="pkg:maven/javax.enterprise/cdi-api@1.2?type=jar">
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
    <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M2?type=jar"/>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar"/>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-classworlds@2.5.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven/maven-core@3.2.5?type=jar">
      <dependency ref="pkg:maven/org.apache.maven/maven-model@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-settings@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-settings-builder@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-repository-metadata@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-artifact@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-plugin-api@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-model-builder@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-aether-provider@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.aether/aether-impl@1.0.0.v20140518?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.aether/aether-api@1.0.0.v20140518?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.aether/aether-util@1.0.0.v20140518?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M2?type=jar"/>
      <dependency ref="pkg:maven/org.sonatype.sisu/sisu-guice@3.2.3?classifier=no_aop&amp;type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-interpolation@1.21?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-classworlds@2.5.2?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar"/>
      <dependency ref="pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-settings@3.2.5?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-settings-builder@3.2.5?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-interpolation@1.21?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-settings@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-interpolation@1.21?type=jar"/>
    <dependency ref="pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.3?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.sonatype.plexus/plexus-cipher@1.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.sonatype.plexus/plexus-cipher@1.4?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven/maven-repository-metadata@3.2.5?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-model-builder@3.2.5?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-interpolation@1.21?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-model@3.2.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-aether-provider@3.2.5?type=jar">
      <dependency ref="pkg:maven/org.apache.maven/maven-model@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-model-builder@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-repository-metadata@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.aether/aether-api@1.0.0.v20140518?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.aether/aether-spi@1.0.0.v20140518?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.aether/aether-util@1.0.0.v20140518?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.aether/aether-impl@1.0.0.v20140518?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.aether/aether-api@1.0.0.v20140518?type=jar"/>
    <dependency ref="pkg:maven/org.eclipse.aether/aether-spi@1.0.0.v20140518?type=jar">
      <dependency ref="pkg:maven/org.eclipse.aether/aether-api@1.0.0.v20140518?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.aether/aether-util@1.0.0.v20140518?type=jar">
      <dependency ref="pkg:maven/org.eclipse.aether/aether-api@1.0.0.v20140518?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.aether/aether-impl@1.0.0.v20140518?type=jar">
      <dependency ref="pkg:maven/org.eclipse.aether/aether-api@1.0.0.v20140518?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.aether/aether-spi@1.0.0.v20140518?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.aether/aether-util@1.0.0.v20140518?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.sonatype.sisu/sisu-guice@3.2.3?classifier=no_aop&amp;type=jar">
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
      <dependency ref="pkg:maven/aopalliance/aopalliance@1.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/guava@16.0.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/aopalliance/aopalliance@1.0?type=jar"/>
    <dependency ref="pkg:maven/com.google.guava/guava@16.0.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven.shared/maven-shared-utils@3.4.2?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.11.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    <dependency ref="pkg:maven/commons-io/commons-io@2.11.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven.shared/maven-shared-incremental@1.1?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-java@1.2.0?type=jar">
      <dependency ref="pkg:maven/org.ow2.asm/asm@9.6?type=jar"/>
      <dependency ref="pkg:maven/com.thoughtworks.qdox/qdox@2.0.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.ow2.asm/asm@9.6?type=jar"/>
    <dependency ref="pkg:maven/com.thoughtworks.qdox/qdox@2.0.3?type=jar"/>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-compiler-api@2.14.2?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-compiler-manager@2.14.2?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-compiler-api@2.14.2?type=jar"/>
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-xml@3.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-xml@3.0.0?type=jar"/>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-compiler-javac@2.14.2?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.0?type=jar"/>
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-compiler-api@2.14.2?type=jar"/>
    </dependency>
  </dependencies>
</bom>
