{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.4",
  "serialNumber" : "urn:uuid:91c75c6c-5838-4885-a188-e6526e16ae62",
  "version" : 1,
  "metadata" : {
    "timestamp" : "2024-11-06T09:02:49Z",
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin makeBom compile+provided+runtime+system",
        "version" : "2.7.6",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "639c35c7f79c5514f3abe11247999b70"
          },
          {
            "alg" : "SHA-1",
            "content" : "649239e622d8d454bb9ab6fafd6746c85cd11b7d"
          },
          {
            "alg" : "SHA-256",
            "content" : "1e3bc10146c370fe8b8f0a2edcb64329907d61dbc2f445db6ac1034cd3221ce3"
          },
          {
            "alg" : "SHA-512",
            "content" : "894a4b5762d32c88cc58ae1a35a3cc3d45a3c494accadb31b55b5832af65f60c0f8164623521a81de73e3ed6a4c994cca0f1951c8368b9d07fb41c82eaa84bbd"
          },
          {
            "alg" : "SHA-384",
            "content" : "3c385acc773a41056fb58ea27096c8ec86d46d8bd74a2eee9cf0913051981611afc68cf13a88d31af16590a489a97c0e"
          },
          {
            "alg" : "SHA3-384",
            "content" : "93695160055039f4791ecebd61c7aa6130f074f50a823de6e5aff7217c35548062829ec2b930658c2702cd47ea3118a1"
          },
          {
            "alg" : "SHA3-256",
            "content" : "4c9f5d3ab2b6ab9b4b4a8968a7ee2373b85a496bec34eefd96ed7c8260d2a45b"
          },
          {
            "alg" : "SHA3-512",
            "content" : "c2af46fe07c4be746fdc0b54e9eb3285231055c5401bcfb34c2d9392efe27fe9c16a0edd91615970bfae3f4a59846e89c3d88a6a36d4ba110a6d140a04fe184d"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.orc",
      "name" : "orc-mapreduce",
      "version" : "1.8.8",
      "description" : "An implementation of Hadoop's mapred and mapreduce input and output formats for ORC files. They use the core reader and writer, but present the data to the user in Writable objects.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.orc/orc-mapreduce@1.8.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://orc.apache.org/orc-mapreduce"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/orc-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-apache-parent/tree/apache-24/orc/orc-mapreduce"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.orc/orc-mapreduce@1.8.8?type=jar"
    }
  },
  "components" : [
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.orc",
      "name" : "orc-core",
      "version" : "1.8.8",
      "description" : "The core reader and writer for ORC files. Uses the vectorized column batch for the in memory representation.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ad41e30dba36573c8e953eb624b65fab"
        },
        {
          "alg" : "SHA-1",
          "content" : "a3032356e24503789555abd3d035aa658f51185e"
        },
        {
          "alg" : "SHA-256",
          "content" : "c45c7844363c690c5c709ee9911358894ca99a7f6aef02434b0c96a8e7f3cf9c"
        },
        {
          "alg" : "SHA-512",
          "content" : "af9a0fd783c6458ad73a82c3c4b19f66b7dd76351e1d8ffa5d45d72688c7f57642181581ad081706b145f6bac30658cd87408079d5c43dea7962b6120f2b0772"
        },
        {
          "alg" : "SHA-384",
          "content" : "dadd96b4a5eda744e1ead2c0cec0792abb2afcb7ffe8d9a1972bcfd26e5bed28e2d1d7cd260a8a4f2a939c6bfbee1b53"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c9a43fc30c9a01e64cf4ec3eeb41f24566a6c20f6239759bfeec05befcd3e7472d40dd51076ddf4f6bf45fa68558cff8"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2e93c44f953be0ef9b092d48eb8a54eaff23fcf7b8760f620c0b9ff8d796d4b4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "cdb4699e0526f5d28b7886ef5e58b1e0267d8c24b16e2631872c1b70fc6152bb94a5eaf7d938350fa7c63cc1a4792e45cc6ef31aa1afed178671b964b3d88df0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.orc/orc-core@1.8.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://orc.apache.org/orc-core"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/orc-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-apache-parent/tree/apache-24/orc/orc-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.orc/orc-core@1.8.8?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.orc",
      "name" : "orc-shims",
      "version" : "1.8.8",
      "description" : "A shim layer for supporting various versions of Hadoop dynamically. This module uses a higher version of Hadoop so that we can create shims that let us use new features of Hadoop without having a hard dependency on the latest version.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "407aee5eaa6bb145e329c354ea240644"
        },
        {
          "alg" : "SHA-1",
          "content" : "d314eb892d6b09ded3bff444d7e144ab25dbd97c"
        },
        {
          "alg" : "SHA-256",
          "content" : "f0a8c943e0ad5ad30210bc113f3c48a9c077d2243dbe4edcc765eeea2b4e7097"
        },
        {
          "alg" : "SHA-512",
          "content" : "d32d216c7621446cf689d77293576815efde0db835cdc4f252e8c861a2373d48e1e002436b1bc2054a79ac2186f0aabb90a1581048d209d9056eb7faa0f0f290"
        },
        {
          "alg" : "SHA-384",
          "content" : "53893873650a309230b76331edfda6db46963260acaf141e7779d511ea36f906b216ec36e21841c6c521daeef0b95c38"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e6fb6e1270f6e388409b934aad8fe61f190369e2b8112bb8145fa90e43fcd145699ea00b97326ff6e0dd7e514cd08e73"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1c8fafe6b26959d949544bc4acb54a900f67867d3213f6167b88159d3f395c73"
        },
        {
          "alg" : "SHA3-512",
          "content" : "799b83e80cec1f83682e6e2b4e1f6d0b29ba01c41e457210629bf174df2117830eb72b84a00a2f1abc362d7647eda7c0a20c4a8b7e08edd1099b649560812e87"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.orc/orc-shims@1.8.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://orc.apache.org/orc-shims"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/orc-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-apache-parent/tree/apache-24/orc/orc-shims"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.orc/orc-shims@1.8.8?type=jar"
    },
    {
      "group" : "com.google.protobuf",
      "name" : "protobuf-java",
      "version" : "3.17.3",
      "description" : "Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an efficient yet extensible format.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cd233934a824c6eb401aef8ff4e4448b"
        },
        {
          "alg" : "SHA-1",
          "content" : "313b1861fa9312dd71e1033a77c2e64fb1a94dd3"
        },
        {
          "alg" : "SHA-256",
          "content" : "4ac549b192694141958049f060a1c826a33342f619e108ced8c17d9877f5e3ed"
        },
        {
          "alg" : "SHA-512",
          "content" : "4f61a3cbd4edd44361330d561b1404cf614f0468b4b8287bc25ded775e4ecdbb8d829dcc669891b1434f6950e4184a86f447a028ef02abcdd5d720a04999620f"
        },
        {
          "alg" : "SHA-384",
          "content" : "8b4052e989e80aa5b000d037e90b323f194b7035b97c0d32f76280ace1efea90d1564a1c2b3e51478aa7ca37f819e67b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7fbbf882df45263001a7d6785e60ac2535c775d9cf99816d5564a1a5b828c6a5721d9d98f21251ede5d510e020583d72"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8e14cf74febfe130ad2d5b237d0777ec9d712126746deb33bb17a16bd28e2ced"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e3c291805a35ddafe676f73f71d0578011ea5a10fde580dc2320e3acb202282e2c30dd575356c9ac0e7410df877a64477f9a8c7a7fe3638beb53eeae50b20b83"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.protobuf/protobuf-java@3.17.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://developers.google.com/protocol-buffers/protobuf-java/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/protocolbuffers/protobuf/protobuf-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.protobuf/protobuf-java@3.17.3?type=jar"
    },
    {
      "group" : "io.airlift",
      "name" : "aircompressor",
      "version" : "0.21",
      "description" : "Compression algorithms",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "43f5c177aaca2ba4e4ad78e4d6f3e992"
        },
        {
          "alg" : "SHA-1",
          "content" : "0d1efd839d539481952a9757834054239774f057"
        },
        {
          "alg" : "SHA-256",
          "content" : "e968bd7f31641ae94ea4ae12971337bdfab794349cc0baa9ccd54553cce712ac"
        },
        {
          "alg" : "SHA-512",
          "content" : "5a2eb2c1fabc5159e00371ebb4ba7532705de7587980af3c7c92c942794f2e21e1af0a82427372eab632a0b1bd52895afa799b62b7f42512c52cf55fdccb4386"
        },
        {
          "alg" : "SHA-384",
          "content" : "ef54231df593357c29984e81d6605f1177cb0c77c496c80097f401ab75b74943429a351d7b09202ed4e1cad127106c97"
        },
        {
          "alg" : "SHA3-384",
          "content" : "da57b8b7eeb50adbefa2f15c55021a5b59b433456c9b0f975909bfb6a1e46e40e43464ba3778374e4b460003a9c0ceba"
        },
        {
          "alg" : "SHA3-256",
          "content" : "54bc06a3cf9a7c6d39960552f3f1373fbf78db0a5d53a90cbb19c283ec98df1c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "538b5668f9f50947d91eb8b64eedeba0b5825117ad24d6649803c04c7fb9767a8190376ee84e990c38ebf34d3962b275ac585d6e6ca424784d30b74bfdde1dce"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.airlift/aircompressor@0.21?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://github.com/airlift/aircompressor"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/airlift/aircompressor/tree/master"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.airlift/aircompressor@0.21?type=jar"
    },
    {
      "group" : "org.jetbrains",
      "name" : "annotations",
      "version" : "17.0.0",
      "description" : "A set of annotations used for code inspection support and code documentation.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7b06437ed47fa7b4a8ec8909f4fb9022"
        },
        {
          "alg" : "SHA-1",
          "content" : "8ceead41f4e71821919dbdb7a9847608f1a938cb"
        },
        {
          "alg" : "SHA-256",
          "content" : "195fb0da046d55bb042e91543484cf1da68b02bb7afbfe031f229e45ac84b3f2"
        },
        {
          "alg" : "SHA-512",
          "content" : "839ec18d4a6f930ecd39827ebd4013c13a7176003543b8f60056770179032648faf1651e9e73109e811881b68a39757ca7e39731a61ff4a3461637b196fe4f7b"
        },
        {
          "alg" : "SHA-384",
          "content" : "c9d045a68ef2b0d5b12aa00b636e43af22de4c02f4dfcc6b5b7b04fdd57c98c7246decd2e5dc3eb9f1b10d929ac33a11"
        },
        {
          "alg" : "SHA3-384",
          "content" : "25ad733b460552705dd624634191beb909a6ed35f2475723faa06551d9542b87e724266f5f6003350c39965a92b5e54c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f731cde48fa6a20e57e97a829184492cfa5fe0e14a5082e7810205c2b9f1ac1c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b6698f9d65c0a364854717e64edd5df4fb1c97300d4dc3cc7ae7194b0b7b9e826b3d800dd362e2ad05417dac6ee3b2164294796c3ae46f4cbed840c2481b79b1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.jetbrains/annotations@17.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/JetBrains/java-annotations"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/JetBrains/java-annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.jetbrains/annotations@17.0.0?type=jar"
    },
    {
      "publisher" : "ThreeTen.org",
      "group" : "org.threeten",
      "name" : "threeten-extra",
      "version" : "1.7.1",
      "description" : "Additional functionality that enhances JSR-310 dates and times in Java SE 8 and later",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5994a4f9bc61fe4bfae13fab1253ac47"
        },
        {
          "alg" : "SHA-1",
          "content" : "caddbd1f234f87b0d65e421b5d5032b6a473f67b"
        },
        {
          "alg" : "SHA-256",
          "content" : "9bbcbe09a631320bdc3325bbb04c93068473bc0e04b85e2ef3e42314d5a7dacf"
        },
        {
          "alg" : "SHA-512",
          "content" : "1ae1558df2e6e33a0a463e0204dc084bc2bcff6b27ebc983743533bee65f3e42915737a7e2f2096047b2ae5cb8363413964aab0f4eaed0b5f0d5865de56e9336"
        },
        {
          "alg" : "SHA-384",
          "content" : "df9dd8ee46fdd640c3abe5d5168570d29028bc94e931b505f3d36fac01da60ac90f2ed706f37b7eaa3aa8a23538488ff"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b04a101b95978ba6e1f563f66514df8c67c0023e06dd2228bc0408a1e5647ab79729a9d96eed9637fe648c38e7082a54"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ad70878a6b0ce64410e63bc8581b4ab17b1c5d6aa7f8e426c56263f8e43e93c4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "21e406429ab0acbdf15b8861d12198f3e798671d724e1eef7fc098f84187cc9c89126564e235de725e02f5e4a419797ba5b957d2187d486c2b0957afc8f4b7f8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.threeten/threeten-extra@1.7.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.threeten.org/threeten-extra"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/content/repositories/threeten-releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/ThreeTen/threeten-extra/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/ThreeTen/threeten-extra"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.threeten/threeten-extra@1.7.1?type=jar"
    },
    {
      "group" : "com.esotericsoftware",
      "name" : "kryo-shaded",
      "version" : "4.0.2",
      "description" : "Fast, efficient Java serialization. This contains the shaded reflectasm jar to prevent conflicts with other versions of asm.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "27717b481916c44eed34ea7a68782ed5"
        },
        {
          "alg" : "SHA-1",
          "content" : "e8c89779f93091aa9cb895093402b5d15065bf88"
        },
        {
          "alg" : "SHA-256",
          "content" : "a4899f57fef456b9ec66f730e7b493ecb3dc494cc5758721ed9c18416fd2d3b6"
        },
        {
          "alg" : "SHA-512",
          "content" : "21d3500194117f5f34951c7374bdde658be18b842866ea68f16ef47453d4dd31b11d384af2dab3ac4340b015b414402f6b45d4e6a10354fbda5bd8a17e4ce3e3"
        },
        {
          "alg" : "SHA-384",
          "content" : "33c8d09ba00c14a077e82f2d7c1a54496a21d20896505d1d97cd30f22d9cb773e060061abc43fc14f15b6619ba4f0c86"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c94e3943033fd712c2793ac4f16abe9cf6e9ae083b5597fe5645d63b8a2ec5c938e1c62f37b3c684cd397f7ec7f70536"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9d32ce48c6be860e309472479af5dbf8cff17bd3140a6aa775adca5eabba7894"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3bd68742bf12417ba93160a8919f4a7d83d3df0717f5c83c1b152872f195e8a695df24cf643e0e3669b807214247bd8cfc2ee31e0affe07f20a0411c52072872"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.esotericsoftware/kryo-shaded@4.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/EsotericSoftware/kryo/kryo-shaded"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/EsotericSoftware/kryo/kryo-shaded"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.esotericsoftware/kryo-shaded@4.0.2?type=jar"
    },
    {
      "group" : "com.esotericsoftware",
      "name" : "minlog",
      "version" : "1.3.0",
      "description" : "Minimal overhead Java logging",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5ab0ee168b90e0ad7010b159e603d304"
        },
        {
          "alg" : "SHA-1",
          "content" : "ff07b5f1b01d2f92bb00a337f9a94873712f0827"
        },
        {
          "alg" : "SHA-256",
          "content" : "f7b399d3a5478a4f3e0d98bd1c9f47766119c66414bc33aa0f6cde0066f24cc2"
        },
        {
          "alg" : "SHA-512",
          "content" : "ca319c94b7fd8a275dcc3c5102fc01d73071ac77f5e14b4fc5b6547f96574a4fff0e8cb7b0b0d5006e71faa00575a91defdbfc92a94d9d38dd65520d4ab52000"
        },
        {
          "alg" : "SHA-384",
          "content" : "3f9b5b7fd91332ad64d235024d486e24b00760e714713153a61f10e6867bc3e5b617a7bf0bed889a01f0cdb435415d6a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "53f87e7d1c0615c0d443cf8f1dc2d83cbe8c72ba18061a68ec4d8dea8020a21aed04fec338e7eb2d566acac1f7f267b0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5eb8dd240a7196fc28a6c312148513f6c3d4af48abb46e1744bd730f479b0dd0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7573361d0b824f2db4fc9d06aab133021a2e07b5f32be296781eb105b3f6002314520fea1f2c856d0e4a0522ea5ff6a5cb046f1a832f2d772999cd17e36d7bd4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.esotericsoftware/minlog@1.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/EsotericSoftware/minlog"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/EsotericSoftware/minlog"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.esotericsoftware/minlog@1.3.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.12.0",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "19fe50567358922bdad277959ea69545"
        },
        {
          "alg" : "SHA-1",
          "content" : "c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e"
        },
        {
          "alg" : "SHA-256",
          "content" : "d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e"
        },
        {
          "alg" : "SHA-512",
          "content" : "fbdbc0943cb3498b0148e86a39b773f97c8e6013740f72dbc727faeabea402073e2cc8c4d68198e5fc6b08a13b7700236292e99d4785f2c9989f2e5fac11fd81"
        },
        {
          "alg" : "SHA-384",
          "content" : "c34b8a0e0eba2168ad56fedeb7a1d710b6f1d3f1ce6aae99a4e0247bd120efbbadc8dcb2f731045b8a16e3efd30604dc"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8ad6ebe7754bf0caa8cda7e59c0e95360d76e06a7ad6aeec5637985519dbd1dd06e7eed04711039f36ec4c49de280def"
        },
        {
          "alg" : "SHA3-256",
          "content" : "18ef639b2aeeb5aedffb18dbf20c79f33e300d99fb31b131689639cc470e6e4c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fbea96114dcf4f31cfaaa99987be756ddda3a6c74f8c835461997df794d54b92da1f60fe5c3f1f2a43cb8c5f5db7f4048bef77c70993673c7a93f3660fffc8da"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-lang/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-lang.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.hadoop",
      "name" : "hadoop-common",
      "version" : "2.7.3",
      "description" : "Apache Hadoop Common",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "eb51c886a594444d397825a00da2bd4b"
        },
        {
          "alg" : "SHA-1",
          "content" : "9ffd994953fc4397830a1241a15c9121aebd9574"
        },
        {
          "alg" : "SHA-256",
          "content" : "b7698cbbcfaf93818f2388db63198948bba5f24bd9a2b378c0081f6d945c30a4"
        },
        {
          "alg" : "SHA-512",
          "content" : "eb4138ca54f8dbf7edfc1ab39dcf75995b73520696682c87fdfab5d2a058839e345853b18cee0f00b5160e79ad65cb38a7c33e611bb285d740e229282c694202"
        },
        {
          "alg" : "SHA-384",
          "content" : "d77ca13ef7694da13b30c326b8ef5ce8a48506438670817533c4f61b3697c6f5498c5b0294b04c34c8bdbfbb594121ab"
        },
        {
          "alg" : "SHA3-384",
          "content" : "99a592a0202bfd10a6c9420ae9e04543788c52d30c0e9ff5f8e45805dc723b6efb3ba6dcd11e28ac437e00bb2e9b831e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fa6ac1f9800f580a7fca7aa081a73bc30796a049d1408f7fd492d09f2d22e2e2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a68a24242aaa49717a498ca4c42600696ea540cd4b5df1548c9402fc6ba8c4eaeafc08abbc82074679a24df9cd2f24ee80614b511db884d913d2f929ff592f4f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hadoop/hadoop-common@2.7.3?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hadoop/hadoop-common@2.7.3?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.hadoop",
      "name" : "hadoop-annotations",
      "version" : "2.7.3",
      "description" : "Apache Hadoop Annotations",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "04144ea13aa1d654c3f57894153baa05"
        },
        {
          "alg" : "SHA-1",
          "content" : "0a55da50d8b25df34dc4ecab9cbd3a5a24664594"
        },
        {
          "alg" : "SHA-256",
          "content" : "d59b24615f1e1050e4bc987955a936f479a51058ae2ee59d751536ae75e563d1"
        },
        {
          "alg" : "SHA-512",
          "content" : "216fbe0ad11c0d0eef67d8ab26707d1b6c1d3925c22ff37dc3eac94e4b0f18dec9a6592a37307f111c00ace9f8e6910ae08036c073cef69f89925243f5d894d0"
        },
        {
          "alg" : "SHA-384",
          "content" : "660c92e9d48fa5fa8edd09f4947dfca50df6130eb0d4e09da269128b0a0e0fa1d9739b95054d31aa24f5d5c9abc1fca8"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b5fcdbeaff9e6fd5d152bc9fb3ed3866f77656bdfe2e518781983a07324cc16df8507e80d5d64a37264b8b15f54761ab"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8436ec90de888199a34ac84c85957a2afb829c6fac69ad42f388182d2b2ad8a6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1a22c69b423147b7ef19267b1c3930480c3219d4a21329e84069a7a0610972bc8855e0aa48b22910881c3af5b1b192c3b3f8f2c4e40af7c3328f2b7cd21c9bba"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hadoop/hadoop-annotations@2.7.3?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hadoop/hadoop-annotations@2.7.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-cli",
      "name" : "commons-cli",
      "version" : "1.5.0",
      "description" : "Apache Commons CLI provides a simple API for presenting, processing and validating a Command Line Interface.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6c3b2052160144196118b1f019504388"
        },
        {
          "alg" : "SHA-1",
          "content" : "dc98be5d5390230684a092589d70ea76a147925c"
        },
        {
          "alg" : "SHA-256",
          "content" : "bc8bb01fc0fad250385706e20f927ddcff6173f6339b387dc879237752567ac6"
        },
        {
          "alg" : "SHA-512",
          "content" : "b78ac2b418e9e9e7d0bc866664577199d320408a6f03151b3789bac365c986dd526df853599e633d7e50fe136cbf3eb9ce50c9cfa0ad38c3cc8d8ee416f61c40"
        },
        {
          "alg" : "SHA-384",
          "content" : "a7a2daa807c4007c506b5100f0a9b526c0052c4e1f6b699904ef9d2aba8195b6003dc4d47ca133b15e2f3e830bdbe6c4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "44ca97514a2e34b5bf3de9b5d45c8e871f6eee517db7f3c4b4476eb3e8dfe9a9d8760f3181114708288c373727b42475"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a0a47001d3a293f129ffc21f17f575a9d23ce5b88b440e651e4cd01edd0cc421"
        },
        {
          "alg" : "SHA3-512",
          "content" : "483dae23d6827a105d17847c8c813527f19042b65c4d09635dfc4bfd25990fe3ba2a997540460fd5b1d72ca3add9a38ca8b32004680764db972a9bb62f7f68d8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-cli/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CLI"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-cli.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-math3",
      "version" : "3.1.1",
      "description" : "The Math project is a library of lightweight, self-contained mathematics and statistics components addressing the most common practical problems not immediately available in the Java programming language or commons-lang.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "505ece0d2261b037101e6c4bdf541ca7"
        },
        {
          "alg" : "SHA-1",
          "content" : "6719d757a98ff24a83d9d727bef9cec83f59b6e1"
        },
        {
          "alg" : "SHA-256",
          "content" : "a07e39d31c46032879f0a48ae1bd0142b17dd67664c008b50216e9891f346c54"
        },
        {
          "alg" : "SHA-512",
          "content" : "4716722ee06853789f5539f3b3f9726b3ddf3b358b3ee136196b9beaa63741df72a8a23b71f3864c565d5f945d19291beeb02053d8d98ec83119b7142c17ee23"
        },
        {
          "alg" : "SHA-384",
          "content" : "def2a41220a30eff80133c04f169baafde4d5a94f38a74d5bfed55042123b1b25f437d52d731f0135b7bd7885c4f5b44"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3c18b700c06501541a2a70b0a53a712a436c0e980b619b18843eda488ef81249528bc42c44f48061b725ae2416cd9733"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c568f6ce4553ccbcbad58a3fa7f08fcd8c60b70c030c6b1b9084318fccb5287e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "54c6848c49be2b9788878bad0305299d92c4f1eabecc81528f7461df890ae3a5c7713611b943726603cfd455bf2e72a0c5519ae35569f5cc9a1d6ed5f817ce18"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-math3@3.1.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/math/"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/MATH"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/math/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-math3@3.1.1?type=jar"
    },
    {
      "group" : "xmlenc",
      "name" : "xmlenc",
      "version" : "0.52",
      "description" : "xmlenc Library",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c962b6bc3c8de46795b0ed94851fa9c7"
        },
        {
          "alg" : "SHA-1",
          "content" : "d82554efbe65906d83b3d97bd7509289e9db561a"
        },
        {
          "alg" : "SHA-256",
          "content" : "282ae185fc2ff27da7714af9962897c09cfefafb88072219c4a2f9c73616c026"
        },
        {
          "alg" : "SHA-512",
          "content" : "3a1f30f2bcebca32fce505185cfda1cd90fc2dc8c60fe41584f764fc2b4004422462b32ec88b70c93165ecc45201f8834fc16feb067812daa0759d2096b4a63f"
        },
        {
          "alg" : "SHA-384",
          "content" : "3ed1606ddd4995ffb15ef504195fa4ee73f536b1a232d18532cb53f10f9f8e418fc5e91bf47834bc98a4331981301755"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3fd4abcd6d7a65dec35629144d7205789144cad016b398d96eb972982736bc5926fd28b4ad1d8edea4c55f573469d4cc"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0afd3a376b7817f752a3c85db94337ec3f8249aa09a8dfddb72862c39642ce9a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "562a1d61fdddaf4121c2af27ab065bd558429d307af2c51c8b813ca028cff8edc63b641d2998fc9e2b530b64652533faccb5c4544f0f76dfa254dd4e209155cf"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-4-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/xmlenc/xmlenc@0.52?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://xmlenc.sourceforge.net"
        },
        {
          "type" : "vcs",
          "url" : "http://xmlenc.cvs.sourceforge.net/xmlenc/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/xmlenc/xmlenc@0.52?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "commons-httpclient",
      "name" : "commons-httpclient",
      "version" : "3.1",
      "description" : "The HttpClient component supports the client-side of RFC 1945 (HTTP/1.0) and RFC 2616 (HTTP/1.1) , several related specifications (RFC 2109 (Cookies) , RFC 2617 (HTTP Authentication) , etc.), and provides a framework by which new request types (methods) or HTTP extensions can be created easily.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8ad8c9229ef2d59ab9f59f7050e846a5"
        },
        {
          "alg" : "SHA-1",
          "content" : "964cd74171f427720480efdec40a7c7f6e58426a"
        },
        {
          "alg" : "SHA-256",
          "content" : "dbd4953d013e10e7c1cc3701a3e6ccd8c950c892f08d804fabfac21705930443"
        },
        {
          "alg" : "SHA-512",
          "content" : "85e79d4fdb266861910ef95bcd6e82a7f091c9bfbc63dbe2112383ea4d53a5b7a378b54e7c472fbdfde923f30c72d9cad626f8fabb0b9c70d1dfb095add73359"
        },
        {
          "alg" : "SHA-384",
          "content" : "973e966839aaaddea4af4dd43c6dea59eeeca88b8e452af0a35efeb3c920592b110c5a366fc46f75c404d1c7fa4a7443"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0c77f4cf3c1d38d7de2cf42a7ff98a0be313ed739d20b62354278bbb7ac12f5c8be656d38e297689ddb8c7ff707f9cc4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "00c433b1cdaa88af6b91f41a5f1030c95beee1044de84880862f329d1af5821a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2fdd42541ff607906620cca573c4ce0ddaac10eb90ce6d755ba4c4e41a6166869748ff79937ebface698407a42aa47abf931ab4ecf996e672344d1a992b39025"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-httpclient/commons-httpclient@3.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jakarta.apache.org/httpcomponents/httpclient-3.x/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTTPCLIENT"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/jakarta-httpcomponents-dev/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/repos/asf/jakarta/httpcomponents/oac.hc3x/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-httpclient/commons-httpclient@3.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-codec",
      "name" : "commons-codec",
      "version" : "1.4",
      "description" : "The codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "82b899580da472be37055da949b731fa"
        },
        {
          "alg" : "SHA-1",
          "content" : "4216af16d38465bbab0f3dff8efa14204f7a399a"
        },
        {
          "alg" : "SHA-256",
          "content" : "6aa4234c74f3a1035751a25822545867c8c3727125a642b6e049665d1863631b"
        },
        {
          "alg" : "SHA-512",
          "content" : "640bca4f1d4dca63724eedf417d3dccaacf77e5c1d9dac07190b0a64450f7b16fcb5f8578823303e08fb6d07b9c2897226c449f2c9b448b060ff5d8f683403b8"
        },
        {
          "alg" : "SHA-384",
          "content" : "1192ebd03bbdab3263d97805dc208821288d6726502cd800f01f55584572e71d0f9d0486b510530fca736dcccb3f7b5a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "90ec2719349c5f5c7d00eca9fab4cb9aec52b7ed2350e1d36d57724f7545f4350ffd5f523d1f82eda7f17a921ecd8290"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6189b7a5aa98e40401b1474c27a8fcfd39c4d0e75f178dbe9980b8dd6e734147"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fbc6c86f35fce36975167e5eba4420f19f0d28caf15fcbd2b6728f99b0ecc48390f8da4679245969b0a330dff93925cf9c9dc17562a804a5ceeb43061924bfdd"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-codec/commons-codec@1.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/codec/"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "distribution",
          "url" : ""
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/CODEC"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/codec/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-io",
      "name" : "commons-io",
      "version" : "2.4",
      "description" : "The Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7f97854dc04c119d461fed14f5d8bb96"
        },
        {
          "alg" : "SHA-1",
          "content" : "b1b6ea3b7e4aa4f492509a4952029cd8e48019ad"
        },
        {
          "alg" : "SHA-256",
          "content" : "cc6a41dc3eaacc9e440a6bd0d2890b20d36b4ee408fe2d67122f328bb6e01581"
        },
        {
          "alg" : "SHA-512",
          "content" : "957a438894a196e534af9ae1e61fb21e16f273952b55a81abb8faf0b139fc031ea940cf477f81704db417d1ce6ff2d9ddd4a2cbf316903b0e2dc1aeaef24f292"
        },
        {
          "alg" : "SHA-384",
          "content" : "af8a3e210cb1dd5475d497249acf1a86266077f5c7df0ded76d92467ab7f69e445f79dcfacfd7375085ad24f49625955"
        },
        {
          "alg" : "SHA3-384",
          "content" : "96ad8ffd01492835e0f0d0d19b0414950f487603caa7bbbed28bd3dc41721077c871eb534399aa178ed97aa01d743983"
        },
        {
          "alg" : "SHA3-256",
          "content" : "78a19109fbcc47fcdd9486c1906e244d1cfad3172d7497d4f0009cdf100ff97b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "171ce4f320389faf73f95242098be01116709a9eaa88e770ef4aa63e249076dc9133f4c228809bd6989d657dabd6100d34a61232232adf19bbeea82482f46b29"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-io/commons-io@2.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/io/"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/IO"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/io/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-io/commons-io@2.4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-net",
      "name" : "commons-net",
      "version" : "3.1",
      "description" : "Apache Commons Net library contains a collection of network utilities and protocol implementations. Supported protocols include: Echo, Finger, FTP, NNTP, NTP, POP3(S), SMTP(S), Telnet, Whois",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "23c94d51e72f341fb412d6a015e16313"
        },
        {
          "alg" : "SHA-1",
          "content" : "2298164a7c2484406f2aa5ac85b205d39019896f"
        },
        {
          "alg" : "SHA-256",
          "content" : "34a58d6d80a50748307e674ec27b4411e6536fd12e78bec428eb2ee49a123007"
        },
        {
          "alg" : "SHA-512",
          "content" : "66887e7c5077dc6aed5dc85c172e7d80ae13503ab1e000dd76e87626cddb0427f3f9251941af94744d53f6b771e031785ce1362b01595d9723330554213bdfe8"
        },
        {
          "alg" : "SHA-384",
          "content" : "444a0ffddba21cb56369700b5b89641a453adfaffb948e22329011c8eb02ee40b70f57f88c3d10239d49eaf4069c1e25"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c1a19ff6d35406b9363473484f847e995d995d9b6df03fa6e6e6f37b1cb3129baf58975037674c7bdbab79e1d2776246"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2b750264c332b902556ff672997f23c56500eb815c41fc067f1773ba2aecdbd9"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d798769ab7d6950ad16c9d4855de89414b10d8e53356c1c857dc06c408a8fab91c8db1f0529909aa7fa1bca76c38128d9b0b0734dc5f55e0ed6bfaf069ab3e42"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-net/commons-net@3.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/net/"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/NET"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/net/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-net/commons-net@3.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-collections",
      "name" : "commons-collections",
      "version" : "3.2.2",
      "description" : "Types that extend and augment the Java Collections Framework.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f54a8510f834a1a57166970bfc982e94"
        },
        {
          "alg" : "SHA-1",
          "content" : "8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5"
        },
        {
          "alg" : "SHA-256",
          "content" : "eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8"
        },
        {
          "alg" : "SHA-512",
          "content" : "51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16"
        },
        {
          "alg" : "SHA-384",
          "content" : "dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8ce03528e4a6e95c44283b56eca87e6a6d3bf1363411a55b538f4f9110cf7470581ea5c73925e877ddab08dba0603f40"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fd3d6134b5f07077b82ccf93d148dacf7c4ce5c971209510edd0e77e3e38c19e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c2a523916fb7c7d55a05d5e3d9e9b33000733f4b20a71be174e4e093e3f06ea78ad831edd1505527da7388105f8647efb7d5666ba852c90b4e2d5bb74256efbc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/collections/"
        },
        {
          "type" : "build-system",
          "url" : "https://continuum-ci.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/COLLECTIONS"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/collections/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "com.sun.jersey",
      "name" : "jersey-core",
      "version" : "1.9",
      "description" : "Jersey is the open source (under dual CDDL+GPL license) JAX-RS (JSR 311) production quality Reference Implementation for building RESTful Web services.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "73d196595f5e410a37c0a4337350ceb7"
        },
        {
          "alg" : "SHA-1",
          "content" : "8341846f18187013bb9e27e46b7ee00a6395daf4"
        },
        {
          "alg" : "SHA-256",
          "content" : "2c6d0ec88fc8c36cb41637d9c00d0698c22cb6b6a137fa526ef782e00d2265bc"
        },
        {
          "alg" : "SHA-512",
          "content" : "9009037551b1a472ebfdf21697b22927028420607764fe91b9283488b54dbb5012e947328fbb0bfcd5393adde76ad1823baf52edd4e8b5a3bf479730c32f1dbb"
        },
        {
          "alg" : "SHA-384",
          "content" : "99509d6dfe02dd7131cbbb3b5b95d44ba3cc1b55acee760685d8616bcaad63fa2ec3cc432285799511a0838957326267"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ec891d4dbbc2ecca1dc2eade1ee7db476683ac09db9c2f2e33142e58c85ebb77215ff98ffbe32d12cac5d1d01a5c442e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0217456004fa2a6e71c54630f4c8937130aa3fda026b84817a59f3d3fe3d7eab"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f086bf1917aee7d14d76cb5897a657b203dc5d6a221388e2045ebd6dcb90ca1af466bd5b9bb6c6a894865818d2f9f6744d13247350d43afdb150d9c8cf5499f3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.1"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jersey.java.net/jersey-core/"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://java.net/jira/browse/JERSEY/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://java.net/projects/jersey/lists/users/archive"
        },
        {
          "type" : "vcs",
          "url" : "http://java.net/projects/jersey/sources/svn/show/trunk/jersey/jersey-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "com.sun.jersey",
      "name" : "jersey-server",
      "version" : "1.9",
      "description" : "Jersey is the open source (under dual CDDL+GPL license) JAX-RS (JSR 311) production quality Reference Implementation for building RESTful Web services.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0c98f6cca5df8197b310a0d1d89bb34a"
        },
        {
          "alg" : "SHA-1",
          "content" : "3a6ea7cc5e15c824953f9f3ece2201b634d90d18"
        },
        {
          "alg" : "SHA-256",
          "content" : "3ded91b198077561bd51f6c0442c9cd70b754d8b31b61afaf448bda9d01848f0"
        },
        {
          "alg" : "SHA-512",
          "content" : "9354a94b5044519e6f8f08c89c5d7c57e1041555bc333f401dc18ea51c21c0db03838a55bdb43bbbc0e37a8c3f1f0bcaf4164c5284a5f096af61b549dfe3eec8"
        },
        {
          "alg" : "SHA-384",
          "content" : "231ac671ba61b142d940a3d88919650c701c9cf0cacf91d2f29c450349f486d8e0eab76dbdc73baa98ccda3acaa77101"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d5792bafb84a124b86625cae09072ef0958da59a4ea418ddd57e24dfb91d08d6a1b43ec29ab5586ae437284bf3c85447"
        },
        {
          "alg" : "SHA3-256",
          "content" : "495463f7c0874f77b54bd492889e2c2df0476fec28eb2e9d3b31c8d6619857a5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c065a652d816f93d5c8fa8eebae4298574898e7f31ae889ca024e8a284df6d630f64ec2313fc73db3b017946ce5fff271a0e0a802e900b71bcf15614521d2315"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.1"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jersey.java.net/jersey-server/"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://java.net/jira/browse/JERSEY/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://java.net/projects/jersey/lists/users/archive"
        },
        {
          "type" : "vcs",
          "url" : "http://java.net/projects/jersey/sources/svn/show/trunk/jersey/jersey-server"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar"
    },
    {
      "publisher" : "ObjectWeb",
      "group" : "asm",
      "name" : "asm",
      "version" : "3.1",
      "description" : "A very small and fast Java bytecode manipulation framework",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b9b8d2d556f9458aac8c463fd511f86d"
        },
        {
          "alg" : "SHA-1",
          "content" : "c157def142714c544bdea2e6144645702adf7097"
        },
        {
          "alg" : "SHA-256",
          "content" : "333ff5369043975b7e031b8b27206937441854738e038c1f47f98d072a20437a"
        },
        {
          "alg" : "SHA-512",
          "content" : "074612f145765d33c449887a29dd0791205881ba42d613e52b360ca53bd47c5f9835049de8fc6a384041de2e73bd271b6177c2225e2f72853a88359f6c10b14d"
        },
        {
          "alg" : "SHA-384",
          "content" : "c4ae90a52b7a23cbca12a01777e140e3f3f7943634611c23166a60d69a90f1edfeac8b210979f055fab6d1526d287ba4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "04cc814a6d1d69266aba09985cd6ac04c5bc99964b099c88d89690ab656d53044a6a6bea6b79a37dc41c3202364888b6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0d52b7d9c8c5e047e79df73f4a4883e84eb324739748f1aac584e2e76b3968e6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5e0956cb7cd39ac3d6dd773d64a1a40f8a5b83c95306c627214572b996fd37188d9382e2b7c6579c3b93d04a9179ea3b479664de3d54ae9f0bf254de808d8c9c"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/asm/asm@3.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://asm.objectweb.org/asm/"
        },
        {
          "type" : "distribution",
          "url" : "http://mojo.codehaus.org/my-project"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://forge.objectweb.org/tracker/?group_id=23"
        },
        {
          "type" : "mailing-list",
          "url" : "http://www.ow2.org/wws/arc/asm"
        },
        {
          "type" : "vcs",
          "url" : "http://cvs.forge.objectweb.org/cgi-bin/viewcvs.cgi/asm/asm/asm/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/asm/asm@3.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-logging",
      "name" : "commons-logging",
      "version" : "1.1.3",
      "description" : "Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "92eb5aabc1b47287de53d45c086a435c"
        },
        {
          "alg" : "SHA-1",
          "content" : "f6f66e966c70a83ffbdb6f17a0919eaf7c8aca7f"
        },
        {
          "alg" : "SHA-256",
          "content" : "70903f6fc82e9908c8da9f20443f61d90f0870a312642991fe8462a0b9391784"
        },
        {
          "alg" : "SHA-512",
          "content" : "e5d1fc8ec4544e1fa0f7c4aae8dbcca466c4987bc92fbbc430b054b10d646b745add4a754b1be9d50edd64330c798c53173a97289db57a966312e16f934e9d1f"
        },
        {
          "alg" : "SHA-384",
          "content" : "00dc41783f4081585e20adcfe83fd4dbb6b5a27236ee633d7e53dedcbca83ba5e5f0ca68d31f95e9c724b365e4c67499"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6915e597821aa2fed7f4b05f4de3476364074ab5cee7e13b4eb5b94a9d297b58cb391c6b730e6ea0d4e81e323a90d002"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c49c80e2576bf037fc871e70df8708f5e35c0977a907e966c0334e9fac17b297"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b74b6e6d771005014614774d059a4e1ceab929c0678839846d143e56e4724455242ffa3d5d411c6554a41e1f66fe1f94c51472d80c07d44c02a2f9a6715d8c7d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/proper/commons-logging/"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/LOGGING"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/repos/asf/commons/proper/logging/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "log4j",
      "name" : "log4j",
      "version" : "1.2.17",
      "description" : "Apache Log4j 1.2",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "04a41f0a068986f0f73485cf507c0f40"
        },
        {
          "alg" : "SHA-1",
          "content" : "5af35056b4d257e4b64b9e8069c0746e8b08629f"
        },
        {
          "alg" : "SHA-256",
          "content" : "1d31696445697720527091754369082a6651bd49781b6005deb94e56753406f9"
        },
        {
          "alg" : "SHA-512",
          "content" : "3f12937a69ba60d0f5e86265168d6a0d069ce20d95b99a3ace463987655e7c63053f4d7e36e32f2b53f86992b888ca477bf81253ad04c721896b397f94ee57fc"
        },
        {
          "alg" : "SHA-384",
          "content" : "80b79d5872dec949dff23d221636b5faf312f08fbea2b5e2a8db84a5f5955e13864aff4a288935cb53d4da3d61defbe1"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0be025582340080ea191c4e2559395fe9957c8d0aeea040239dea8504ce035bd24150162898d18c863092697ef52501b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f7f31abcf8b57cf6fd18380b5d1a13f999e3d3d1d89bd25a4a3885fc832f4a29"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0e4a21cb87a6b8626aa8f580b307039d2b060a6abc53d35feac9ecb8ffc2e80b627a12a869b5b5bf30a6e9348cd4c5c3edca937859141614f3c1b14bd8d4ef93"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/log4j/log4j@1.2.17?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://logging.apache.org/log4j/1.2/"
        },
        {
          "type" : "build-system",
          "url" : "http://vmgump.apache.org/gump/public/logging-log4j-12/logging-log4j-12/index.html"
        },
        {
          "type" : "distribution",
          "url" : "scp://people.apache.org/www/people.apache.org/builds/logging/repo/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/bugzilla/describecomponents.cgi?product=Log4j"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/logging-log4j-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/logging/log4j/tags/v1_2_17_rc3"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/log4j/log4j@1.2.17?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-lang",
      "name" : "commons-lang",
      "version" : "2.6",
      "description" : "Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4d5c1693079575b362edf41500630bbd"
        },
        {
          "alg" : "SHA-1",
          "content" : "0ce1edb914c94ebc388f086c6827e8bdeec71ac2"
        },
        {
          "alg" : "SHA-256",
          "content" : "50f11b09f877c294d56f24463f47d28f929cf5044f648661c0f0cfbae9a2f49c"
        },
        {
          "alg" : "SHA-512",
          "content" : "4a5a3dbe4941c645e2cca068cca5c1882cfe988b02e7cd981d1e51784900767d1deab0e0e0566f559c9fcabb4a180e436d5bb948902d4f4106f37360466afb42"
        },
        {
          "alg" : "SHA-384",
          "content" : "9725bc421adc1dbcd6f937eca0f3075d186a2b353ece4cef66b0fe81bb8d3f7d7641c43e86d657ef526c719f0c2a8c90"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4bc4eaaf2580ded6d552b96ae5261c936de95f69a1d137c47279c51bf2aa1406ae44f69ccc94486267b8441e53c4bd74"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b68d49ef037d428ea0c3e67a7a20f3d68a134bef30a1639ec08d28886b9f5629"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2e9ffc0608827cffc0b48b7a0f35d371c66586c99fea2910f7c2a237c7c57d9ae4d65de7c8e018362c2e4f963c2f70a9196cebf35457f1dd0cea6c65c256f673"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-lang/commons-lang@2.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/lang/"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/lang/branches/LANG_2_X"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-lang/commons-lang@2.6?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-configuration",
      "name" : "commons-configuration",
      "version" : "1.6",
      "description" : "Tools to assist in the reading of configuration/preferences files in various formats",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b099d9f9b4b99071cc52b259308df69a"
        },
        {
          "alg" : "SHA-1",
          "content" : "32cadde23955d7681b0d94a2715846d20b425235"
        },
        {
          "alg" : "SHA-256",
          "content" : "46b71b9656154f6a16ea4b1dc84026b52a9305f8eff046a2b4655fa1738e5eee"
        },
        {
          "alg" : "SHA-512",
          "content" : "e5d184175a93d3008300ae5230e43776d7fd13f3d5958bc1b8e32d84ddcdc2c51a95af2ff0e4636dece1cc398b49ac43ca47db841c9162fd38afc17b07b381a0"
        },
        {
          "alg" : "SHA-384",
          "content" : "3ea0ab67fffa9741800bd4a0944084860bbe4ed6652edf1135cc5cd2ed2bac684dc75d71f2b4620468351c0dbc31042a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ddd9cb7aa61cdc50fd54ce55911dec6895acfc562a3a5db29fbc42ca72d2b427840337e3f8a08b9fa379ae95947527c6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "aa48acac5d035263eef457c8b9b2041026010c03448aff4066ac0c9f044a8a54"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9b7bbfa72dc3d8a786e7cedd881d35a59a21a40be7acdcbec0cee3b87b78430ac2b2c7f5ba2514b819077555fed511ed5d5f42f524334f8696e710e694bca098"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-configuration/commons-configuration@1.6?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "www.apache.org//www/www.apache.org/dist/java-repository/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/CONFIGURATION"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-dev/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-configuration/commons-configuration@1.6?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-log4j12",
      "version" : "1.7.10",
      "description" : "SLF4J LOG4J-12 Binding",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "77c1e048b5110a007dd5b8e808d76b1f"
        },
        {
          "alg" : "SHA-1",
          "content" : "b3eeae7d1765f988a1f45ea81517191315c69c9e"
        },
        {
          "alg" : "SHA-256",
          "content" : "2e4eebc6e346c92c417aa4e662738802645ef21c5eb4435132dc78d631f2eebb"
        },
        {
          "alg" : "SHA-512",
          "content" : "f178e15abb703ff7476181fe62310d8c275f1142a93d14794eb0ec6805f17240db0138a7cdccd8255968ad50beaa68ead74b0ed6c74a1334b31059a5eb3166aa"
        },
        {
          "alg" : "SHA-384",
          "content" : "0b0d725ed549d0a7ba4162b63560abcef410b084d553573d1114d64ff7e13a5974d4bf00255fbbbebaadb936297589da"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d01a78a1bf678028b915100ecf1cd9aaada5d3124123ffb4942138c6a1eb7ab9f110637cf00d591c5994f75e7e5715ec"
        },
        {
          "alg" : "SHA3-256",
          "content" : "06e328527ca00db3b35aa723213c9e3f06c36e69e2f723957276892835c58b46"
        },
        {
          "alg" : "SHA3-512",
          "content" : "cccac5de9599be8cfdc6a9bcaeec9ad438e8a30d99c61b594e995e1445a8300beb3daaba905b11b601634a7dad1575ffcceed9e00084401961a837cf3a69ae7b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-log4j12@1.7.10?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/ceki/slf4j/slf4j-log4j12"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-log4j12@1.7.10?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "org.codehaus.jackson",
      "name" : "jackson-core-asl",
      "version" : "1.9.13",
      "description" : "Jackson is a high-performance JSON processor (parser, generator)",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "319c49a4304e3fa9fe3cd8dcfc009d37"
        },
        {
          "alg" : "SHA-1",
          "content" : "3c304d70f42f832e0a86d45bd437f692129299a4"
        },
        {
          "alg" : "SHA-256",
          "content" : "440a9cb5ca95b215f953d3a20a6b1a10da1f09b529a9ddea5f8a4905ddab4f5a"
        },
        {
          "alg" : "SHA-512",
          "content" : "11725da54c7c18af0b50967a9317866ce9d11eb94d3b52ff7a54c6550070e143b5a582de9a8ebb6d61a8104f4dcd7ddb9c2e6f5c3605b6900d48f5241fe38d89"
        },
        {
          "alg" : "SHA-384",
          "content" : "26bff8b72770f734bac78e1ef2f575b26b7676895a4f022f402c99e38b567905ace700f553771606603f508b749bfb4f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "27be7948772c3680134e42ca889dc3f42954394fff4b6f7157d73a9f32886795c6d56b80283d2d762409ad56b753a811"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a0ea1eb75ad00b7c61b96cd71b40b6a0f558c7e1089d42b6d3cd635b1f62b0b1"
        },
        {
          "alg" : "SHA3-512",
          "content" : "67bb970e761b9dc171ba1e88e5ca2079de26b046f773f89400ccef901d1c0ce7f9f6d0d4a0af5c18ac54c1fbcdce035809584b6514167bd8cb6730294947b13f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jackson.codehaus.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/JACKSON"
        },
        {
          "type" : "vcs",
          "url" : "http://xircles.codehaus.org/projects/jackson/repos/primary/repo"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "org.codehaus.jackson",
      "name" : "jackson-mapper-asl",
      "version" : "1.9.13",
      "description" : "Data Mapper package is a high-performance data binding package built on Jackson JSON processor",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1750f9c339352fc4b728d61b57171613"
        },
        {
          "alg" : "SHA-1",
          "content" : "1ee2f2bed0e5dd29d1cb155a166e6f8d50bbddb7"
        },
        {
          "alg" : "SHA-256",
          "content" : "74e7a07a76f2edbade29312a5a2ebccfa019128bc021ece3856d76197e9be0c2"
        },
        {
          "alg" : "SHA-512",
          "content" : "81cd7962fd9ee6d2354f5e44d23de1fa96d0da665b79a0f4ce6f8012bb4651683ae69b82daae3cf4feb101658a344bf4d665fefc3a57eca3a720761732963873"
        },
        {
          "alg" : "SHA-384",
          "content" : "d0f846e695d5ba34708b7d066a77b66c3f4c726300bd56f222b61b2c72cf35c95c98bfaf5cb99288a96aa54cc6f1d55c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a089909a560cebbfcd1cc715b2f24360a25b0bc3de9c6da0ba22580ac727a55ff42aa45b1e411aa547121bda38e926ba"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7fa149f84f2f0b937a68e0fff33a8bb68a5113f88b0a030e94a5b8f0e56446c2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "77ba7d6d92fbccf038c917bdd3db80a7ce4c7a65ab4765e580033ffd968acf050e2aa6e989e4d1a465df8e8bb1383b8da87e6a028eae1cb5504d54237dbc3eea"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.13?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jackson.codehaus.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/JACKSON"
        },
        {
          "type" : "vcs",
          "url" : "http://xircles.codehaus.org/projects/jackson/repos/primary/repo"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.13?type=jar"
    },
    {
      "group" : "com.google.code.gson",
      "name" : "gson",
      "version" : "2.9.0",
      "description" : "Gson JSON library",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "53fa3e6753e90d931d62cb89580fde2f"
        },
        {
          "alg" : "SHA-1",
          "content" : "8a1167e089096758b49f9b34066ef98b2f4b37aa"
        },
        {
          "alg" : "SHA-256",
          "content" : "c96d60551331a196dac54b745aa642cd078ef89b6f267146b705f2c2cbef052d"
        },
        {
          "alg" : "SHA-512",
          "content" : "13ff22a60ee6a72ba0c4e8fe3702b8f3f6be6b67ed4279079a9843f57ad0ca125d4ecc1564ac4e736eab10fb6254d2c011b2c08c514d708be7f8091332ed2c2c"
        },
        {
          "alg" : "SHA-384",
          "content" : "fde5b61066a8cdd711874ed42f20cb914e4193f1477456c431fb0ca32d86324414e92b0b2c5696f56d0b9d69521d8dee"
        },
        {
          "alg" : "SHA3-384",
          "content" : "314156bb766c2f792317763322a819ef968e5ecc7f1a236ab0bb383426d1bf396e18099edb16f85e572b42c85a6c89ba"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5e550f5f719c5f5c4ad04fbe6cd0d7868d6bf0e4184f386e4896e72c4839de3e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a3db5a0129c42598b5ded96cdf75d69c75d4a6b317746c9b7fbf238b2ca78cfb48fb0023ae1a4178bc8da3727ceb0bad6930f8f24624e0be6dbbde00adbb0624"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.code.gson/gson@2.9.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/gson/gson"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/gson/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/gson/gson/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.code.gson/gson@2.9.0?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.hadoop",
      "name" : "hadoop-auth",
      "version" : "2.7.3",
      "description" : "Apache Hadoop Auth - Java HTTP SPNEGO",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "471760b62af31e3bfe4e6a73929868d7"
        },
        {
          "alg" : "SHA-1",
          "content" : "7d1236a477accb4c67fc9615ed67732097fb9af9"
        },
        {
          "alg" : "SHA-256",
          "content" : "1d75f87e433c285ed99bee878bad6f251242613fec2fb7e6c544b862f3ddc428"
        },
        {
          "alg" : "SHA-512",
          "content" : "ddf4b3ca2a0bc6d4ece049da3f122f9a44f004b4b21933666410c9af634886d1cf8fbba98eeb919af4bd879e5420df8cd17b618beb1f3c2db9a07faa2146b563"
        },
        {
          "alg" : "SHA-384",
          "content" : "c226ad571a95788c234a092053f704d05a6cde93853e861611477c3241ae299b99497fd2f4b8b227008e85d4466e2b20"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7fd2975e5a88db2e11912d96943212660b37496df50b0b453f676fac9f549a2ec8ce8ad1b680955b4b1c02c62b94d488"
        },
        {
          "alg" : "SHA3-256",
          "content" : "bf9bb220d95161c4dcd82a94b7fd2b44103030e331d51438ab716db7b7eb9a5a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8343e7fc64defb67f676467f936cd47a065f895d7d3b2e2e2eba1fc93820c0e2f81abd2cf68e4f264150c763d4c4c0676d0689b9719436fdd3e6340f9a8cee87"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hadoop/hadoop-auth@2.7.3?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hadoop/hadoop-auth@2.7.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents",
      "name" : "httpclient",
      "version" : "4.2.5",
      "description" : "HttpComponents Client (base module)",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d57d9336b460a91be6880784bdadc124"
        },
        {
          "alg" : "SHA-1",
          "content" : "666e26e76f2e87d84e4f16acb546481ae1b8e9a6"
        },
        {
          "alg" : "SHA-256",
          "content" : "c7fb05b793a586633d2d801a889e0846f3f21c7f8dc3dab776421383f49ebb8c"
        },
        {
          "alg" : "SHA-512",
          "content" : "5a33f34a2ef0853d6434bfb77bdc8e41c3df923d152bd9037245cfad6f41a3d1653f3f7504add7947f84cfbddfaa7ff3f5cd3bd82d6405201cbb832809c8ef52"
        },
        {
          "alg" : "SHA-384",
          "content" : "1cd160c1f484a350eb32a0b8ffa7e3deb435157a9be080324c642d1ba002ebb4e823cd6e3cb5a5e1d5427837fe9dd09e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ee0d189a9c3b0db8b17e9f4a5d158558ea989bf9b4c0a5a4ff87ec0b0a6ebd16b4ab97bf219a6026eb3a5aa181dd57ec"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f5b875cb37bc94e641f6ef16a24e0db1b90f9abf6603e8cdcbf615531f1553d3"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ce86de32bfa3f2b5bda63a7c27cb085350ac3923a04acf5a8739bdf3c39913ba0ad9b8cbd18049b1f5c55d938814ca85ef7d2341a6fa02ecaca6e0a2487daa6d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents/httpclient@4.2.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://hc.apache.org/httpcomponents-client"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTTPCLIENT"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/"
        },
        {
          "type" : "vcs",
          "url" : "https://svn.apache.org/repos/asf/httpcomponents/httpclient/tags/4.2.5/httpclient"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents/httpclient@4.2.5?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents",
      "name" : "httpcore",
      "version" : "4.2.4",
      "description" : "HttpComponents Core (blocking I/O)",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6ccb86231d8a8b99c551b4ddf926ddd1"
        },
        {
          "alg" : "SHA-1",
          "content" : "3b7f38df6de5dd8b500e602ae8c2dd5ee446f883"
        },
        {
          "alg" : "SHA-256",
          "content" : "bda2b9e0464f7a0e122d5e9bff7b384f3bc3a91af18ad51e029deaaa599e5db3"
        },
        {
          "alg" : "SHA-512",
          "content" : "0c4de4513cafb13a81bcad7cc1a4e45759ba32654eafde15665afde63a427b04ac25cfe17e4bbd1887225960b5aaf7e73382e35ec16993dbc1fd19a2bf5e8ab9"
        },
        {
          "alg" : "SHA-384",
          "content" : "641cac15a256f8d0a2ad0f455458dc022d8fdeb3a792b179e122d8e102966a06ed46c65f66e7fcba23dd0369665b80b3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "500c90ab6e08e7846e9c7d8907463b36c536f533812ecbfe904a4497a6a2e6e8d6196f0d47c1b9d2c03e63b12ab9dbc5"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0b7051d9fc3f0c8b69a0ba4951de7752ee887867a63165f937b596d3b2cd72ce"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1e2c076c8685ee3cbe9acabc90805af82e0c39e94e5be13f615d0d6d9a18f04114be32095599ecabdd73e0b28b6bd3d1d1ca9fd2d64139b52283a312508e2c20"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents/httpcore@4.2.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://hc.apache.org/httpcomponents-core-ga"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTTPCORE"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/repos/asf/httpcomponents/httpcore/tags/4.2.4/httpcore"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents/httpcore@4.2.4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.directory.server",
      "name" : "apacheds-kerberos-codec",
      "version" : "2.0.0-M15",
      "description" : "The Kerberos protocol encoder/decoder module",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3118e22eac44e150c383df1d417772f4"
        },
        {
          "alg" : "SHA-1",
          "content" : "1c16e4e477183641c5f0dd5cdecd27ec331bacb5"
        },
        {
          "alg" : "SHA-256",
          "content" : "4996f5b72497e94dd86d64a370158c4fb0049eea9b17ff8b27a4671d6c136ded"
        },
        {
          "alg" : "SHA-512",
          "content" : "9e2ecd4f5d08af238ab32852fdf86f8165701b745ad93f3bc96eb3c0aff95a083773039adc3722123e8504971cd379929f9c4ad6d5c1ca3d112fa3d04e4a83f0"
        },
        {
          "alg" : "SHA-384",
          "content" : "c2e02333581bf5fef1a73c681afbefa13a03451e91bb36adeca90380679ecfa5a687e42073b9a7e6d60d71060d7e586d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b8f61173cbdbe09e53bca5e2cca5bce141083455b72ba4d6ad624be4da81ce27afecc8c36c7058a36e0291b6672d29da"
        },
        {
          "alg" : "SHA3-256",
          "content" : "161f828310334719481640ce1a82e6004c4b445ad090f6e18622be16042f71e4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c94fce03575ce82631a361f945c8dbe48332c632f4d2b9386792064a8315fdc7ad7b1b17e63fbb4b6b9f638403be4b7e6255698852195a20e3d241b020a14119"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.directory.server/apacheds-kerberos-codec@2.0.0-M15?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://directory.apache.org/apacheds/1.5/apacheds-kerberos-codec"
        },
        {
          "type" : "build-system",
          "url" : "https://hudson.apache.org/hudson/view/A-F/view/Directory"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/DIRSERVER"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/directory-dev"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/directory/apacheds/tags/2.0.0-M15/apacheds-kerberos-codec"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.directory.server/apacheds-kerberos-codec@2.0.0-M15?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.directory.server",
      "name" : "apacheds-i18n",
      "version" : "2.0.0-M15",
      "description" : "Internationalization of errors and other messages",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f5877c02fd56ade67713560e589c81b9"
        },
        {
          "alg" : "SHA-1",
          "content" : "71c61c84683152ec2a6a65f3f96fe534e304fa22"
        },
        {
          "alg" : "SHA-256",
          "content" : "bd3b7cece7fc6364cbce32b9edd0e9628a3e889c6a93cdeff1b5e2131e2a007c"
        },
        {
          "alg" : "SHA-512",
          "content" : "2ca2e5e475168e97c3e25d52dfd8fd342e5be2f1689842bed03db568538f8f9fd1cee28cde6e815c4706123716a266db6130ceaaac4eddbe9d597de7459d6632"
        },
        {
          "alg" : "SHA-384",
          "content" : "fda3e7e1e80becb69fe5997c75b8f89ecaa7004bfebc20e230dfb3580a3fd9c526757e775c35a53e5681da1c2a7edb3b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0fc218a9b93501998ab35252262373b7eda92a33d3688bc87694421e847bd4b4a11c3f79ad27a8c93fc000e085b6b28c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d9bda1adf202334aebea73021e3bbe180096e8165ecf6876b589c8bc58ec7fd0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b1272d97252156e84b10b85ffa9f43837338ba381e392c3662e96ffaaaee8a1bf82b3b77553cbd7bb0183a969ad3967bc7198cbeffbbe028266aaee90cda4f1d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.directory.server/apacheds-i18n@2.0.0-M15?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://directory.apache.org/apacheds/1.5/apacheds-i18n"
        },
        {
          "type" : "build-system",
          "url" : "https://hudson.apache.org/hudson/view/A-F/view/Directory"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/DIRSERVER"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/directory-dev"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/directory/apacheds/tags/2.0.0-M15/apacheds-i18n"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.directory.server/apacheds-i18n@2.0.0-M15?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.directory.api",
      "name" : "api-asn1-api",
      "version" : "1.0.0-M20",
      "description" : "ASN.1 API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cf4561832dab76e9f37461342ec18d17"
        },
        {
          "alg" : "SHA-1",
          "content" : "5e6486ffa3125ba44dc410ead166e1d6ba8ac76d"
        },
        {
          "alg" : "SHA-256",
          "content" : "484aaf4b888b0eb699d95bea265c2d5b6ebec951d70e5c5f7691cd52dd4c8298"
        },
        {
          "alg" : "SHA-512",
          "content" : "10b84880f0b866addba5137d7afd1fc35b6c5e3577a3c8d9d122fc91201f21381173aca49881465ced33fc34680da55ea6bc47e2f8848fb5dd0d988bc0cace97"
        },
        {
          "alg" : "SHA-384",
          "content" : "f0924bad02e083567f2c08fc565484c55e2f9de59abaa7a1fcafa36bc65a451cde6d1b2e78386e04dafba46e85c5e3d2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7ae5c73827f5ffdc09c7117cbfb7ee9efcf6daf7f8ea5377a96aa1e0ec245846d34d237ca35a57dbf4ab36a5f11c46c3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "58dba2f147b58b85925b06ae53dced0025242998f215aafdbca5a6f24d01463a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a35ef1eb9ebdc088c64adb05c7fc213185c15363f0c00afb96d2f19f25462052d30f8bad23aa466f173f06b51218c7c1a30ed2f50177a2b9830358a143fca1ba"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.directory.api/api-asn1-api@1.0.0-M20?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://directory.apache.org/api-parent/api-asn1-parent/api-asn1-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://hudson.apache.org/hudson/view/A-F/view/Directory"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/DIRAPI"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/directory-dev"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/directory/shared/tags/1.0.0-M20/api-asn1-parent/api-asn1-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.directory.api/api-asn1-api@1.0.0-M20?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.directory.api",
      "name" : "api-util",
      "version" : "1.0.0-M20",
      "description" : "Utilities shared across this top level project",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2c5a6722666882024becdd64301be492"
        },
        {
          "alg" : "SHA-1",
          "content" : "a871abf060b3cf83fc6dc4d7e3d151fce50ac3cb"
        },
        {
          "alg" : "SHA-256",
          "content" : "fd32fd047ccf143c58d093b58811aa81e539f8cf83c1187809f1a241a1df12d1"
        },
        {
          "alg" : "SHA-512",
          "content" : "b1c206a420d5dc455f22a1f22980573101b9c74abac044e1b02b2925eaf7c8b188481797d9261cfbe1e2800e684ce88ed8cd18db1ef5909929bec33539a4c5f3"
        },
        {
          "alg" : "SHA-384",
          "content" : "1fed2deab6fe2e3d357bdeee48046861e53582f2404c34bc2bc35992e771e27e8d28b8df65a994f700159e5ca5311316"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0451ed59fec5907fed4e5b9688c0d0b4a682fbb56eecb38ac963670ec0bfbd04790325ce1e2f79022976f0344f9cdc74"
        },
        {
          "alg" : "SHA3-256",
          "content" : "aa8acd1abed952436313c6988941e63e0f33473f8df6e9ae39c8bdee334ae4b7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b6a0c7780bb76334438af34d098b15c9fdf1627a927f7c451ffb468acde7916e5ddf7fb4942d0800c53fda02f8d788f5c75999e546f1aac9439b9e524efd70fd"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.directory.api/api-util@1.0.0-M20?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://directory.apache.org/api-parent/api-util/"
        },
        {
          "type" : "build-system",
          "url" : "https://hudson.apache.org/hudson/view/A-F/view/Directory"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/DIRAPI"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/directory-dev"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/directory/shared/tags/1.0.0-M20/api-util"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.directory.api/api-util@1.0.0-M20?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.curator",
      "name" : "curator-framework",
      "version" : "2.7.1",
      "description" : "High-level API that greatly simplifies using ZooKeeper.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "35bff30d2a79a8b0731269604b1327ee"
        },
        {
          "alg" : "SHA-1",
          "content" : "8c7b1eeb78e43bb91ea737111ba3dec0512be876"
        },
        {
          "alg" : "SHA-256",
          "content" : "a65e3f515b022d84d86c553c99216e384bc82d1de51b5a32b10f33314ad81ceb"
        },
        {
          "alg" : "SHA-512",
          "content" : "c272e0c5340bbbbf3635cdc75b863eb369dfa23c799d2027edfd0601f46fa415d31c4c4897188e3e363eca2fde5b66bf22be191902b3c186296ef4973f1eb36b"
        },
        {
          "alg" : "SHA-384",
          "content" : "62ace5a2949d5add675482730b8bf3bceb8cdcbbc70c697c1d055eea2b3aebccea21bcc46ec0f2431db37b1c66567b01"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2aebad21fdfdb0abd5a9b1df007b9d837362c81e2f5d172e256ff3972f63b3062f728ba0f7e3b7fd3716ecdf02d48994"
        },
        {
          "alg" : "SHA3-256",
          "content" : "74a3fd8333de5c432e133b41191439d524257e273581b04139991123ca5dc3ef"
        },
        {
          "alg" : "SHA3-512",
          "content" : "faf1d706befa628614d095d60e199e300e23ecba26e7cf8603b5caf86e73e78a76baa06380858696a8316d762d74a4aa03378d5c3c1aba6747c1130d75dce7a5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.curator/curator-framework@2.7.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://curator.apache.org/curator-framework"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Curator/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/CURATOR"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/curator-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/curator.git/curator-framework"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.curator/curator-framework@2.7.1?type=jar"
    },
    {
      "publisher" : "jcraft",
      "group" : "com.jcraft",
      "name" : "jsch",
      "version" : "0.1.42",
      "description" : "JSch is a pure Java implementation of SSH2",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "74ea920580077b4c0b51101a8292a529"
        },
        {
          "alg" : "SHA-1",
          "content" : "a86104b0f2e0c0bab5b0df836065823a99b5e334"
        },
        {
          "alg" : "SHA-256",
          "content" : "74297550aecc3b566ee19e49befb9cd49e2326c9d8d71ad5071bacc655b760dc"
        },
        {
          "alg" : "SHA-512",
          "content" : "900f9f14bbad4c4140dace31527134f831cf73c0315445dad20a5c3e49f23910a2871dc39a58a315cf5a4581a19333bdb19d97da7902861672315270425a00bd"
        },
        {
          "alg" : "SHA-384",
          "content" : "b30123cf465ee7225fd1e768af377a4322ddfadf9639b3140a37ab55a3ce9b87e7b1453aa88e711df187bef74ecf54d2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "20babe71575fa4d4423005bc3dff784c3a76a1f6a21601a3c3070f4ce29ba728abf165e72d1d0187c2daaf32318e163c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6525270936c47868845fcfd20e4809b1effe0856df004b65704636dc52b00d49"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9c4afe88ea854bfc8227b8a0f2e9576f1e2b4bc8f95113f531334ba9100b8533c069250e5b2a1e64525ba8730a38a9ed1966599016d731eb486da7b0e1136e27"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-4-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.jcraft/jsch@0.1.42?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.jcraft.com/jsch/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.jcraft/jsch@0.1.42?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.curator",
      "name" : "curator-client",
      "version" : "2.7.1",
      "description" : "Low-level API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3b43933c18d1dcf15f88db73ee646396"
        },
        {
          "alg" : "SHA-1",
          "content" : "a591dfc085db3e9d4d480381cc7e6ae8a26b34af"
        },
        {
          "alg" : "SHA-256",
          "content" : "949ac95323bb13b4d9cde33ab1ca73f07a87e6e43cf76629e89fdd74d5b378e4"
        },
        {
          "alg" : "SHA-512",
          "content" : "7938bab4600cbcc13c78256295766c6f1172902db87794a3a14b7acebdfad5de2c69419978420ce32168ea26524919bcbb42018995de53da1a96ae9c30cef499"
        },
        {
          "alg" : "SHA-384",
          "content" : "4392856c7e46f7f9819281f84e21e6d42e285d89018608d60b8faea5629a7954ec0920a921d383d204ef9248befc2506"
        },
        {
          "alg" : "SHA3-384",
          "content" : "cfa4c707f935516c6cd2c3104c1659ea8c702059e94b3444fe6be17597a22cedf0c2cedd6fb416859c41d07e0d8e94df"
        },
        {
          "alg" : "SHA3-256",
          "content" : "43bc73ba83717fad2f3e68b20cec7497d980ae602a345015593ee9502c0eefad"
        },
        {
          "alg" : "SHA3-512",
          "content" : "92c004baeb94bfac2defcc04e1a6aaba6e1ba94e5fa8ac40a5bad71d8dd9be1af02b3e0f54a798e230efdccfbbaf995d18644e35b9dcd4d0e2aa73666d651859"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.curator/curator-client@2.7.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://curator.apache.org/curator-client"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Curator/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/CURATOR"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/curator-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/curator.git/curator-client"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.curator/curator-client@2.7.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.htrace",
      "name" : "htrace-core",
      "version" : "3.1.0-incubating",
      "description" : "A tracing framework for use with distributed systems written in java",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c49a4662d691a09eed10e0a35dd73299"
        },
        {
          "alg" : "SHA-1",
          "content" : "f73606e7c9ede5802335c290bf47490ad6d51df3"
        },
        {
          "alg" : "SHA-256",
          "content" : "d96c869afaf65315ece8ca09673b187557e9dbaad31df24467a5aa759812188d"
        },
        {
          "alg" : "SHA-512",
          "content" : "4401a31494026fd46ca90a4fb111eb3cf1d3d2def294dccc131dab0927edd48b3b852d40b257424041b6bf3165f2684b4a6b45568ec7ab7ab59452f34fe756a0"
        },
        {
          "alg" : "SHA-384",
          "content" : "de9ecdbefc8ad5fb6a253bc8caecd99b252bfc0add781cbb9a646dd2ead203028a7bdafa0165f210f0c881bdb930fbcc"
        },
        {
          "alg" : "SHA3-384",
          "content" : "406a3c2841d32354a2da78a8aa3d35ba169f542248ef29e36053a26e3fa3bea271836bb0b9b66f35df8c9ad3c6102712"
        },
        {
          "alg" : "SHA3-256",
          "content" : "22e22ccc6263ab78370d08b33bfe7be9787dc67a1e1db64159317eec7c3d7c0e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5e3bbdf8fa1cdb2754290cd58180a0bf1b1934b264d2c058807952e04cefc6b56b8081d335782ddd8580c97e60124d447efaa4f6c2f6439c06bc48e67621205c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.htrace/htrace-core@3.1.0-incubating?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://incubator.apache.org/projects/htrace.html"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/H-L/view/HTrace/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTRACE"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/incubator-htrace-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://git-wip-us.apache.org/repos/asf?p=incubator-htrace.git/htrace-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.htrace/htrace-core@3.1.0-incubating?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.zookeeper",
      "name" : "zookeeper",
      "version" : "3.8.0",
      "description" : "ZooKeeper server",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7bc2ceca284b57d457ddcb450469f620"
        },
        {
          "alg" : "SHA-1",
          "content" : "e395c1d8a71557b7569cc6a83487b2e30e2e58fe"
        },
        {
          "alg" : "SHA-256",
          "content" : "5a6591c242acbd3cb04eb4afc6d218664c9708b5b7174535b1ed68e44346e55c"
        },
        {
          "alg" : "SHA-512",
          "content" : "2a50c5866067717fba518651dc492348e8f4be1070b0ce20db6e1e540c000a1f0802bd7ab8d657d9ae745201b440feabb7b31aee34b698008f1dce73d101cb0a"
        },
        {
          "alg" : "SHA-384",
          "content" : "bcbeb900e6604ce252b406e23ee7baea406b019b0d367bd049ae64797828bfb9946a1fcdce9d543ae4f6afebee407fcd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7baee72c135541bbefba9a27296fccd5adb9dafd80beb6e06021fd6f939436570fa802765105b501c5eb1aa388dbd02c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d9dcaa6f125a1c312e30b2e62da7e9e2d609dcec24f0760fa585a5dc4950985e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8476d3fbf7cfb98846eb6288204fc7f88a45fae0de9e8bd48ca907097e7b1fbe049b3ad9d39f7aafeb5149f9d7fceaf8d532dc7c1029982fbd0d84d72c91c4f4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.zookeeper/zookeeper@3.8.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://zookeeper.apache.org/zookeeper"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-hadoop.apache.org/view/ZooKeeper/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/ZOOKEEPER"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/zookeeper-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/zookeeper.git/zookeeper"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.zookeeper/zookeeper@3.8.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.zookeeper",
      "name" : "zookeeper-jute",
      "version" : "3.8.0",
      "description" : "ZooKeeper jute",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c25d863dd13433f413028080c6e59f15"
        },
        {
          "alg" : "SHA-1",
          "content" : "6560f966bcf1aa78d27bcfa75fb6c4463a72c6c5"
        },
        {
          "alg" : "SHA-256",
          "content" : "2e390ceb0f128c519f2e0effa4d109102127517af9f11c5bb3f3f492b1dca9e1"
        },
        {
          "alg" : "SHA-512",
          "content" : "a93f5583e54479052e2b013348962b20f594409cf81e3af190769cf74e8f06410bbeb448439eb7c5b002929265fa42965cef8ad3d7972c9af4381e1341249fff"
        },
        {
          "alg" : "SHA-384",
          "content" : "b37078afae0977b70842e378136b4c28dbc46ff41fc0aba6f4e3d0b8fdb06b959a6a378421ebf076eb307c193fda1ced"
        },
        {
          "alg" : "SHA3-384",
          "content" : "47b5729c64261b291855c391293df2db402f36a39a3bd74cbe2a8f4e560080347e93caa914326fe78d07334f377661a5"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2ab5bc287fcb20243907a847d644bc1db99344c2eba38082cb19d1f0836f8685"
        },
        {
          "alg" : "SHA3-512",
          "content" : "65e47b25eb064aabbaa8a36705ac1ac0e99bddb7402eefff0c0b130e222ea458b4aff4551f4f96ce8d6796d3b33aa908f25113b3fb8c0c802fb1250fb5fa3cc6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.zookeeper/zookeeper-jute@3.8.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://zookeeper.apache.org/zookeeper-jute"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-hadoop.apache.org/view/ZooKeeper/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/ZOOKEEPER"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/zookeeper-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/zookeeper.git/zookeeper-jute"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.zookeeper/zookeeper-jute@3.8.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.yetus",
      "name" : "audience-annotations",
      "version" : "0.12.0",
      "description" : "Annotations for defining API boundaries and tools for managing javadocs",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "76ba71bbe18c4724d96bec68bbe12ff1"
        },
        {
          "alg" : "SHA-1",
          "content" : "e0efa60318229590103e31c69ebdaae56d903644"
        },
        {
          "alg" : "SHA-256",
          "content" : "ffb101fc066360ff3c77457c927fd7967fb096a6ee9e046ab7071447d8208efc"
        },
        {
          "alg" : "SHA-512",
          "content" : "264a5251272ec55eca1fae5a8fb9336d1eca1ee3bfb586d1ebc382fcfd37077c21cbfa9e198daf4e1eebe9f6fa90487bec2f85bc1c55cf5666cbbfc4d18b1715"
        },
        {
          "alg" : "SHA-384",
          "content" : "f936d92b5c3b3c88428fc7452871e4df112935dd25356396d15deb73dd39790f45909a3d14f038e9f585cee79622ad47"
        },
        {
          "alg" : "SHA3-384",
          "content" : "67ca97a525d98c3dab9ffda40e11d6c683f6f4208ae4a5b28dbd3e2b8b37187dfdcd1d9b89222dc69e5b84ac212f4428"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fd99b55afe40884b5f6cfd9ffbdcd07fa32833443dead288390ca8e737dd3337"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4aaece7bdadc2c2d9660b16345218cfc68a2ea344374d0ffbcdcc3722ff6be5f06c92231ae68ec3884f1aa9b99956cb5135b4060c5457f463251f3767003ad20"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.yetus/audience-annotations@0.12.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://yetus.apache.org/audience-annotations"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/YETUS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/yetus-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/yetus.git/audience-annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.yetus/audience-annotations@0.12.0?type=jar"
    },
    {
      "group" : "io.netty",
      "name" : "netty-tcnative",
      "version" : "2.0.48.Final",
      "description" : "A Mavenized fork of Tomcat Native which incorporates various patches. This artifact is dynamically linked to OpenSSL and Apache APR.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6dc40887f925eb5546bd03f9507acd7e"
        },
        {
          "alg" : "SHA-1",
          "content" : "83fb2aa2c4e1e5998aa67084581772ccc2f0156e"
        },
        {
          "alg" : "SHA-256",
          "content" : "3ca1e47569d7a76cbdc4265f32ec6ab1b117e99dfbfd4891c22683ba6ab639ff"
        },
        {
          "alg" : "SHA-512",
          "content" : "78e75796e95d8d4ced042548f4987e00470fb2f097eb10529334e9dcfe0bfc5b2616e778c0edeeb29affdcb3e23b7d60a63f246a4f4574b7ee5cc2b58725df9f"
        },
        {
          "alg" : "SHA-384",
          "content" : "bb928140edf1857cad025e58fc330a9fa251db758b9d8bb8371f02fe81fb5e5a357113a62c3a97e257f94bfdde762520"
        },
        {
          "alg" : "SHA3-384",
          "content" : "57b0e04606a144bf6b01b610e200be1396e5141f3f35a481cd23b4be4e9adf074d594ea8b91c45948ac0253af3cfbf48"
        },
        {
          "alg" : "SHA3-256",
          "content" : "03aa5724338a55750e695868ff00d96f91a97ddf5a07871dea79c3bbf10bd83a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1e330253995b2410a88fb6041fb4e28c7fe908ffdc2ebbe777a88cd3b9002debf5580c3ba6f5a01f0835757b4c05a88e0d4cf9838d794ff3254017c1ac94548a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-tcnative@2.0.48.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/netty/netty-tcnative/netty-tcnative/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty-tcnative/netty-tcnative"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-tcnative@2.0.48.Final?type=jar"
    },
    {
      "group" : "io.netty",
      "name" : "netty-tcnative-classes",
      "version" : "2.0.48.Final",
      "description" : "A Mavenized fork of Tomcat Native which incorporates various patches. This artifact is dynamically linked to OpenSSL and Apache APR.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4e1a32059d976d18d20adc93e87a8e07"
        },
        {
          "alg" : "SHA-1",
          "content" : "9f62346df2f103045cad6f9416e2925a32ee8709"
        },
        {
          "alg" : "SHA-256",
          "content" : "d4fd61bb23ad675ae62ed3ea2e015f548d886439b676589115d3536180c2d0d1"
        },
        {
          "alg" : "SHA-512",
          "content" : "b29ffaf6230705ebdd15c256f2a38b86aca713c0216b9d93f02b9eaa001af8bcd13d921bc324a20d26b8963fac6c4d87347d6f17a44796e146fd1d299e8b13c2"
        },
        {
          "alg" : "SHA-384",
          "content" : "7312d2668d0f8ac2a5d986a2fa5783d3f1874ea6ce29ab8f50acea4410bd9d955c4a3de6184a8052797fb542eb7a6a22"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6882b074cd1c1b41819cacdb06f1667fbd5ff4f1065dad91af296a4351d77a3794a635f14aefa3b377481178afeb4d72"
        },
        {
          "alg" : "SHA3-256",
          "content" : "42f3f07ad039772bf2f8ee2ba96d99a989d117705fdce41c6f2e3a918ea82137"
        },
        {
          "alg" : "SHA3-512",
          "content" : "cbc14b3e840e63e28b8626b9a82fbde903a8ca86363088e4db9586505877fa87da08c29be9d0f6ad6fcf48f95a13f7924cb36ca5166c5f4c9423b86e7f44c4e1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-tcnative-classes@2.0.48.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/netty/netty-tcnative/netty-tcnative-classes/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty-tcnative/netty-tcnative-classes"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-tcnative-classes@2.0.48.Final?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "ch.qos.logback",
      "name" : "logback-core",
      "version" : "1.2.10",
      "description" : "logback-core module",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "697b37f140ce9ac35a4ca3eaf4059f1a"
        },
        {
          "alg" : "SHA-1",
          "content" : "5328406bfcae7bcdcc86810fcb2920d2c297170d"
        },
        {
          "alg" : "SHA-256",
          "content" : "ba51a3fe56691f9dd7fe742e4a73c3ab4aaaa32202c73409ba56f18687399a08"
        },
        {
          "alg" : "SHA-512",
          "content" : "8dd5175ab32120dccd48e44166f9f35df389385ac808b5ef18d43bd2ef98e43d440d982155f231883a963994644d4c0baf701ef6fd1ace2c6dab13f98d8c9d53"
        },
        {
          "alg" : "SHA-384",
          "content" : "452313d0e5ee35aef136e7db604d58cf782009d4bc0f0bbf25ac5c314377b7c2db72f8ff1cfa9095f7808ca6ed36946a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "950e06a6924ce4cc42453ce1a32f374d005e4a9d7806ad793b2f048ee85950a8959d791e2b9e8aca30a88baaffcb15a8"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4ddba3741c4a84d14d9ffde6642e6310b494d9bc2bbab4634abab91e3519d47f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7f13a15dd9634a48a8613f6f2670c97f8c84daa71399b4f81f22f23ab9583142dc723efa185c46dc60bc4a086e6de9681e1b296254c1f211e9e55a20be916207"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        },
        {
          "license" : {
            "name" : "GNU Lesser General Public License",
            "url" : "http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html"
          }
        }
      ],
      "purl" : "pkg:maven/ch.qos.logback/logback-core@1.2.10?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://logback.qos.ch/logback-core"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/ceki/logback/logback-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/ch.qos.logback/logback-core@1.2.10?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "ch.qos.logback",
      "name" : "logback-classic",
      "version" : "1.2.10",
      "description" : "logback-classic module",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "98021917df75e0a36d0398f7352e5e4f"
        },
        {
          "alg" : "SHA-1",
          "content" : "f69d97ef3335c6ab82fc21dfb77ac613f90c1221"
        },
        {
          "alg" : "SHA-256",
          "content" : "3160ae988af82c8bf3024ddbe034a82da98bb186fd09e76c50543c5b9da5cc5e"
        },
        {
          "alg" : "SHA-512",
          "content" : "8718b07d2629d89df0131b44df0ca7ace79a30ec43871fa9f004273fc9327ebd7ae8ac658daaa9e808e9bc3e0660c40dd8ce5bbd197d24e9b868f26e32957734"
        },
        {
          "alg" : "SHA-384",
          "content" : "a2bdcf38059b68cba0aacc900f43152f1e32c87a49c9e16fedf3aa5b4af22ffa967ea86d1888a437753a2a9428e5cdd5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d9145625cc0a9b4b69bd5c3afcdd0794ae028feb6b25893ce3474507eacb8b407aa43ea8c117d26c769a0822d22440d0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "27e4f71d24e48ea7b77506a7462fcbcb54ef0a85ffa90053f764c698c18296a5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5efeeee2da064fcb14d351848f9e4c1ba44e09f562de48f4f1910d4d5005507055c707bf14f3014d88098be6ff1337dc044ea315798d6be28b75220dce36d1b7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        },
        {
          "license" : {
            "name" : "GNU Lesser General Public License",
            "url" : "http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html"
          }
        }
      ],
      "purl" : "pkg:maven/ch.qos.logback/logback-classic@1.2.10?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://logback.qos.ch/logback-classic"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/ceki/logback/logback-classic"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/ch.qos.logback/logback-classic@1.2.10?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-compress",
      "version" : "1.4.1",
      "description" : "Apache Commons Compress software defines an API for working with compression and archive formats. These include: bzip2, gzip, pack200, xz and ar, cpio, jar, tar, zip, dump.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7f7ff9255a831325f38a170992b70073"
        },
        {
          "alg" : "SHA-1",
          "content" : "b02e84a993d88568417536240e970c4b809126fd"
        },
        {
          "alg" : "SHA-256",
          "content" : "28a00d80716f073d644b9da76e94b5e8ff94de8e9323f06f558fba653fcf5f86"
        },
        {
          "alg" : "SHA-512",
          "content" : "ac314af8e0d402a002b71797d0a96760f114c43873956d9650d2039fd6e2c0a9b48e2d4b1bffb9ec26094226d680c332d82c4bc23fc06ae4a9777a23db432070"
        },
        {
          "alg" : "SHA-384",
          "content" : "6ec5c569bd1c58ca8950ebeb213f31b4bd12f7f938f4677df93e9c555e80e41265b52c592a34e3bc3cad83006be56377"
        },
        {
          "alg" : "SHA3-384",
          "content" : "bcf867bd66c99217e918fdd3ddd2b81eb1bc2e5ed73df7a86f9d46b6817e83c4672cc6656d6ab83abbde75490f2c46fa"
        },
        {
          "alg" : "SHA3-256",
          "content" : "83c7586f5c0774854a5d9b72868429685a5fe4ef047e8c9d0b5abeea19a44625"
        },
        {
          "alg" : "SHA3-512",
          "content" : "96d8329532d0dc014a5b484a6bb4b21b028599b9b3c4696729f6971e622aff70862b54ed2a9e487996cd7650923a0f992d64551633c82f66ad80f2da907a27b4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-compress@1.4.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/compress/"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/COMPRESS"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/repos/asf/commons/proper/compress/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-compress@1.4.1?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.hadoop",
      "name" : "hadoop-mapreduce-client-core",
      "version" : "2.7.3",
      "description" : "Apache Hadoop Project POM",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5ca375461477843ff262c200345fd67d"
        },
        {
          "alg" : "SHA-1",
          "content" : "bc47392a6830a22900a84723837e04bdba12a2d4"
        },
        {
          "alg" : "SHA-256",
          "content" : "da4e3e68a6193ae3aa3642a0daf45207c883f930d93c3e58ade75d41979b3f3d"
        },
        {
          "alg" : "SHA-512",
          "content" : "c91d44727275042d8a34a5a5cc0ed7d01efd665c424848c5ee952c49ebc920d56ac00fe5851374e10a03c4faf8461aa80d7a7f404d760a15239da7616f401e91"
        },
        {
          "alg" : "SHA-384",
          "content" : "69cf501388defd4b9e0b61d0f45d92ba9099b7eadced08afa247ec80d700a8abffaa7bf0800b32f45f9bd966b1c00563"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b056b53b4362652709da6899ff2e7fd37b665f35f0aaa7d81adbf87ca182c88ffaacc82854f0c3987ca3878c33017a71"
        },
        {
          "alg" : "SHA3-256",
          "content" : "de22c1b3d43165d242d9bb840d69850368f23fe060cc52ff47f0f27a408fb8f9"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4b5e80470c72f61e13eeca250dd9e0ea386532830dd4b2f55365965644e716fac78aa0c1e22dfecdc164e664c1fc62e8466829cfaa5a1d0ff615f1eedac15a4b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-core@2.7.3?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-core@2.7.3?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.hadoop",
      "name" : "hadoop-yarn-common",
      "version" : "2.7.3",
      "description" : "Apache Hadoop Project POM",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "21e6f54eaf36b4bce72cfd3a089a567b"
        },
        {
          "alg" : "SHA-1",
          "content" : "455420e0d0a9e645d9489e8c7d34d0b02cd1c36f"
        },
        {
          "alg" : "SHA-256",
          "content" : "5ba492bce0eca5e814af88d0a0fd4badbdc5c5ee890f70846b94bc20227a75be"
        },
        {
          "alg" : "SHA-512",
          "content" : "3409fae31f7e05c5edaf4d55f154bb61e8a0eda926bf1a821937f92753c36b3a87746fe8d2b66559b97405d4893c31bdb9da3b44504e9e719b44866c29ed9754"
        },
        {
          "alg" : "SHA-384",
          "content" : "20c69980e7caa794ded44a3ee6e0c24b9f6888073d91e2f2b8717ac1c78d1061a0c8bdb6bd4bc13a4a1b7dde805dd899"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ad8b8a1f5c62e8ded64337cde4f50046f566d9cd51dc29b7c214db16bdbc2155f2b69502d3ac307a6701db1701338cb1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0137572cebc114d16616ba9fd5464a21109651a6bbc042d600abd6f91122bda4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e45ae2ec3b8cfebc361a7582dab6ea65e62dd9ba6ec11f5ca20817754324366d601eda1ede272adf88510b14400597d95a009cd36fb1762822ffd6d6213c8e65"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hadoop/hadoop-yarn-common@2.7.3?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hadoop/hadoop-yarn-common@2.7.3?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.hadoop",
      "name" : "hadoop-yarn-api",
      "version" : "2.7.3",
      "description" : "Apache Hadoop Project POM",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b3b51aa62d826c939b1e37a55617aa9a"
        },
        {
          "alg" : "SHA-1",
          "content" : "b15b7673cbe076dccf973ac45721a89f1ef95948"
        },
        {
          "alg" : "SHA-256",
          "content" : "d01c2d9bf67b41a81a63323d7ae75f45f8dec71098f6c01dedae9d10ca96e5a5"
        },
        {
          "alg" : "SHA-512",
          "content" : "3f8b4f3601bd0c60e8d139a69624b430c56865a62e806067844b6c6c9c69ee995177d2dd5b878672bc23f50ec5e0405cfabd3ace43fac2f71daba305487a1a1a"
        },
        {
          "alg" : "SHA-384",
          "content" : "5af5405e5dc9575090fd16c2d603534608e2fd476005bf0a9bc70f16c7df0d19cf943a33d372d39f8fcefdaa091804a9"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5954f7bfe74faf06ed6b26138519db81bdb5ae71ed8e9f119621b16246b1538c894e683c044a34e204048cd56b722350"
        },
        {
          "alg" : "SHA3-256",
          "content" : "cfbad0cec3f1302bf73a2eff2037735e030134ec0a73a61474366c4823dff0f2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "924c50a616c139d9ba61cfeee6332afdac9f8a6345b269f1ee78aee6617383c7ac319b89f2658b620d23ca726cef60736916854aa3e5323606353f562a255398"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hadoop/hadoop-yarn-api@2.7.3?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hadoop/hadoop-yarn-api@2.7.3?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "javax.xml.bind",
      "name" : "jaxb-api",
      "version" : "2.2.2",
      "description" : "JAXB (JSR 222) API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a415e9a322984be1e1f8a023d09dca5f"
        },
        {
          "alg" : "SHA-1",
          "content" : "aeb3021ca93dde265796d82015beecdcff95bf09"
        },
        {
          "alg" : "SHA-256",
          "content" : "30233df6215fb982d8784de91d307596748cea98d6d502293c7c3e85c1697137"
        },
        {
          "alg" : "SHA-512",
          "content" : "e17cac8509b5c0eef2c8a0c8e16fa5bba75f64d82a1a4d51725d488aa9af5c5474eefa329af47b9065232e811f9d4b48163b5e62cba88467d1be4ac4cb1ead88"
        },
        {
          "alg" : "SHA-384",
          "content" : "3c511c647f7c8e76cd4392c75b5cfd9143a9269df5f565e73cd4289da12ea02cd8cc32f932d945172dc287809309b663"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d9c13ecf89428b64b06356492dacd09239d8cd159b46e80690dab780beaf36f524ae786203bae715e75a3092c29bed43"
        },
        {
          "alg" : "SHA3-256",
          "content" : "624de9fbb177ece45140a6e374e8ddc51e22f29d267b58f804fca7030389bd47"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9106151c7101607289e0579cf2c8cf35c8353ec4b036e499c2561a510e901792e658add6f04e648055cff4a44996451425d873ee5e609112f774e5fda5b9119b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.1"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/javax.xml.bind/jaxb-api@2.2.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jaxb.dev.java.net/"
        },
        {
          "type" : "distribution",
          "url" : "java-net:/maven2-repository/trunk/repository/"
        },
        {
          "type" : "vcs",
          "url" : "https://jaxb2-sources.dev.java.net/source/browse/jaxb2-sources/jaxb-ri/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.xml.bind/jaxb-api@2.2.2?type=jar"
    },
    {
      "group" : "javax.xml.stream",
      "name" : "stax-api",
      "version" : "1.0-2",
      "description" : "StAX is a standard XML processing API that allows you to stream XML data from and to your application.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7d18b63063580284c3f5734081fdc99f"
        },
        {
          "alg" : "SHA-1",
          "content" : "d6337b0de8b25e53e81b922352fbea9f9f57ba0b"
        },
        {
          "alg" : "SHA-256",
          "content" : "e8c70ebd76f982c9582a82ef82cf6ce14a7d58a4a4dca5cb7b7fc988c80089b7"
        },
        {
          "alg" : "SHA-512",
          "content" : "a7f337735100356f72639053734506982329015693677fafd4d2ca74c4e412caae077999cb42dee2402cc641a80c8fb027deb9d2dc6c4e141d94c9184baa9dc5"
        },
        {
          "alg" : "SHA-384",
          "content" : "005b7398b0a42fe2f11d2a0e65f638c4479c843bedecf691b6c1795d9f95ec8b3ff629b4e8b5d62c79082e762c4b488c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "642519112968caa20b366e9f6e0cd7c3092d7da9dfe5cb47111e4dab7f025b6abf44c14805aa7d45df995a15b1c7525a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "92a2eb0720aee125f29b1340a5571222bb6d2a50b441f839ec543a609845c68b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5be6d4726be02b83fd12db1e5c5ff871a33b097dd4b9a8d40a4466dcc194860cf76b1cbc399e4d3fe8b1e63e9b3c5f9d294fa9d85db5766b7933c346d65585b6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "GNU General Public Library",
            "url" : "http://www.gnu.org/licenses/gpl.txt"
          }
        },
        {
          "license" : {
            "id" : "CDDL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/javax.xml.stream/stax-api@1.0-2?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.xml.stream/stax-api@1.0-2?type=jar"
    },
    {
      "group" : "javax.activation",
      "name" : "activation",
      "version" : "1.1",
      "description" : "JavaBeans Activation Framework (JAF) is a standard extension to the Java platform that lets you take advantage of standard services to: determine the type of an arbitrary piece of data; encapsulate access to it; discover the operations available on it; and instantiate the appropriate bean to perform the operation(s).",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8ae38e87cd4f86059c0294a8fe3e0b18"
        },
        {
          "alg" : "SHA-1",
          "content" : "e6cb541461c2834bdea3eb920f1884d1eb508b50"
        },
        {
          "alg" : "SHA-256",
          "content" : "2881c79c9d6ef01c58e62beea13e9d1ac8b8baa16f2fc198ad6e6776defdcdd3"
        },
        {
          "alg" : "SHA-512",
          "content" : "c0ff5bf3ace7acc1b31fcc109cee48d9eb8f025ae15a31dc91eca760933bdb97c93f05d61e95af1e317859d72e5f179f897f5bf3df0e3810f4212d43bacee4bd"
        },
        {
          "alg" : "SHA-384",
          "content" : "c4ee54d80a2e67e819700051d6cfa01a17631c89f942b8690afb601e491f02d7497fe57bd5c70edfb9b444ae8222b846"
        },
        {
          "alg" : "SHA3-384",
          "content" : "de0777d2d1d7aad105defb12aed17ef38abfe89db2449c5243fa3c69304ea24dd8df0881330351d0733313e8f7252814"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5fb94d2742cc3d44abad42c5d61b9c7464a2ef33bc58b4b5b121d49799123460"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c5e37fe3d9c420a9035f1160eb1d396e94f01851c01c6e2f19f19a221bfc484e63f9660c7377f58aa65246b95a9eb799ac4e6798c0b20f658edf00a4435e1efa"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/javax.activation/activation@1.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://java.sun.com/products/javabeans/jaf/index.jsp"
        },
        {
          "type" : "distribution",
          "url" : "https://maven-repository.dev.java.net/nonav/repository/javax.activation/jars/activation-1.1.jar"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.activation/activation@1.1?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "com.sun.jersey",
      "name" : "jersey-client",
      "version" : "1.9",
      "description" : "Jersey is the open source (under dual CDDL+GPL license) JAX-RS (JSR 311) production quality Reference Implementation for building RESTful Web services.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cdbba85f9cb7ce5e0ca51d610f0228e9"
        },
        {
          "alg" : "SHA-1",
          "content" : "d3c4b2b5f89db32c96ceddcb863684821910a7bb"
        },
        {
          "alg" : "SHA-256",
          "content" : "8ae03af0d06c46a51b65d123ec40f245da690991aa3669cef4767db8f36fbe68"
        },
        {
          "alg" : "SHA-512",
          "content" : "06e4c88de3491fabc0db7b46e17a7fb234be00dc9e05409f390da914b9362621af6d24380f24a1b9f6992808ec5af0382ea7658acc7f98437e8da8ad650899f6"
        },
        {
          "alg" : "SHA-384",
          "content" : "1927620343cf270e0afdc4187f9f8d856dc0fd3bae3a871fa267a3b3ae14b65ed4a22d813309716d496a005032f98895"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6766e40eb40bdd158414d0b8f70d0bdd89d92a1a4d8eda37ef73cfde1880ca03c55d03886677727c271a901bd2250c1f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "89d6e7452bfbaf2c36363eec77091d9d1f33ad57e20978d14cbed226fd97c4ba"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3129128fda98767ddabfa3a45af990eb6ed0ff44a4e3acd542a8b6c510a5b3b836e53afbdc5e0939c84d9e177fbe2ff81ee5b54cca0b6e82d2ac0e249b76fb25"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.1"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/com.sun.jersey/jersey-client@1.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jersey.java.net/jersey-client/"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://java.net/jira/browse/JERSEY/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://java.net/projects/jersey/lists/users/archive"
        },
        {
          "type" : "vcs",
          "url" : "http://java.net/projects/jersey/sources/svn/show/trunk/jersey/jersey-client"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.jersey/jersey-client@1.9?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "org.codehaus.jackson",
      "name" : "jackson-jaxrs",
      "version" : "1.9.13",
      "description" : "Jax-RS provider for JSON content type, based on Jackson JSON processor's data binding functionality.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8481e1904d9bfe974157a6af04b4445e"
        },
        {
          "alg" : "SHA-1",
          "content" : "534d72d2b9d6199dd531dfb27083dd4844082bba"
        },
        {
          "alg" : "SHA-256",
          "content" : "1770570a6ba5c87a4795c0aeb40ee7c5fe5e31df64ef1d4795a0d427796b84bb"
        },
        {
          "alg" : "SHA-512",
          "content" : "9163284c2e06575f3be10a5dba476fa7905273546e1b524571de5cdeb02c34627cecde2408a6417725344e3f5e6844596f0dce30d07dba5b31d7bc50c0e4f741"
        },
        {
          "alg" : "SHA-384",
          "content" : "abfab565c15d170c75889a4a202466427f9eedbbce15c5fde5c3e0fc5a0b80cfc1bcc5ec77ed5696a73b0ae70f247936"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9776bdb98292662239a42c7ff86aa300364ac19bcc56b337bb910ccced2e4b15d23dcdf026e6726c918ac7799c4c341d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0959d3d6202b71e1da21cfd6b190e818191fe858234bd70aa82a130b174187d4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d1becbe74f3ca24db47223beb4641076734f86b1625666677c0fcb8b55b68bd37f3768a1440bec783aa61083faa0adf299a35beb24494874bc3da838a2d6c1cc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "name" : "GNU Lesser General Public License (LGPL), Version 2.1",
            "url" : "http://www.fsf.org/licensing/licenses/lgpl.txt"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.jackson/jackson-jaxrs@1.9.13?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jackson.codehaus.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/JACKSON"
        },
        {
          "type" : "vcs",
          "url" : "http://xircles.codehaus.org/projects/jackson/repos/primary/repo"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.jackson/jackson-jaxrs@1.9.13?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "org.codehaus.jackson",
      "name" : "jackson-xc",
      "version" : "1.9.13",
      "description" : "Extensions that provide interoperability support for Jackson JSON processor's data binding functionality.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "49f6a735bae30745dcf5ecec27090720"
        },
        {
          "alg" : "SHA-1",
          "content" : "e3480072bc95c202476ffa1de99ff7ee9149f29c"
        },
        {
          "alg" : "SHA-256",
          "content" : "2d2905fcec7d1c55b775995617685dbb03672350704d9e40b492eab5b54d0be7"
        },
        {
          "alg" : "SHA-512",
          "content" : "09a043d9eb469842622636d3814b474af7c74ea3e3e88c9f44ac752c2d14eac4aa4d5bb96e8c8672d445e562d6043bcf484417ee8ef3381279150c00c8fcaf2d"
        },
        {
          "alg" : "SHA-384",
          "content" : "7a806e3d31eb7b0d3342a74816299f18a7d416a7e16cda479ed9ee6d830c0feae5c183d38e336dc452a0045a8c9e065c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7dbba9062e67edb9233f8a7eeaa4c99883d312245e28e8c78b604a13f7fe5ae6b4ffb26c0c53cced9829de314f940f0d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "faecbad55c02deb233abcb53e5aed9b92d966c8b104d8cc0d21cbdf2c43c8dc3"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c63a14f3c3a23bfe9a6a52668865ec00437e1282d6813f931499f18282271389471c8132ec98c3704a9fcfffcc5694d9f4b529b75173dcec9650ede98f4da555"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "name" : "GNU Lesser General Public License (LGPL), Version 2.1",
            "url" : "http://www.fsf.org/licensing/licenses/lgpl.txt"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.jackson/jackson-xc@1.9.13?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jackson.codehaus.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/JACKSON"
        },
        {
          "type" : "vcs",
          "url" : "http://xircles.codehaus.org/projects/jackson/repos/primary/repo"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.jackson/jackson-xc@1.9.13?type=jar"
    },
    {
      "publisher" : "Google, Inc.",
      "group" : "com.google.inject",
      "name" : "guice",
      "version" : "3.0",
      "description" : "Guice is a lightweight dependency injection framework for Java 5 and above",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ca1c7ba366884cfcd2cfb48d2395c400"
        },
        {
          "alg" : "SHA-1",
          "content" : "9d84f15fe35e2c716a02979fb62f50a29f38aefa"
        },
        {
          "alg" : "SHA-256",
          "content" : "1a59d0421ffd355cc0b70b42df1c2e9af744c8a2d0c92da379f5fca2f07f1d22"
        },
        {
          "alg" : "SHA-512",
          "content" : "8695045803e3d391a427c57573ebea1af880f68d312014e156b977e5b6fa73cd327fe49dbc218e62c1d1e7bd4940bae454cd78c6ff60bad7e3620f66ea0dafbf"
        },
        {
          "alg" : "SHA-384",
          "content" : "f32bd5aaa4ebcda4843bc3aaaad127740d0c810a729cef2b3e8a4d3974f1e130860de52936b97177cf55bd6267718705"
        },
        {
          "alg" : "SHA3-384",
          "content" : "53ce163405f251b5704e60e12275c9f838cd9a79c09b7416506e40831babbff2a5e0686beec75a94277a457ac7532093"
        },
        {
          "alg" : "SHA3-256",
          "content" : "25d02cb8d2f3528c778f1d76c0843d8aa1ee6d9248865a208cce035f685e4f93"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2130aeb71bdc9fa74cd9bf3f4e2726443140b4284567c261897bfd458b6868a22a87a67a63da7e4039916a664d0bd32b629a609f1ce339d58cc61bfb20eb728f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.inject/guice@3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://code.google.com/p/google-guice/guice/"
        },
        {
          "type" : "build-system",
          "url" : "https://grid.sonatype.org/ci/job/Google-Guice/"
        },
        {
          "type" : "distribution",
          "url" : "http://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://code.google.com/p/google-guice/issues/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://groups.google.com/group/google-guice/topics"
        },
        {
          "type" : "vcs",
          "url" : "http://code.google.com/p/google-guice/source/browse/guice"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.inject/guice@3.0?type=jar"
    },
    {
      "group" : "javax.inject",
      "name" : "javax.inject",
      "version" : "1",
      "description" : "The javax.inject API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "289075e48b909e9e74e6c915b3631d2e"
        },
        {
          "alg" : "SHA-1",
          "content" : "6975da39a7040257bd51d21a231b76c915872d38"
        },
        {
          "alg" : "SHA-256",
          "content" : "91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff"
        },
        {
          "alg" : "SHA-512",
          "content" : "e126b7ccf3e42fd1984a0beef1004a7269a337c202e59e04e8e2af714280d2f2d8d2ba5e6f59481b8dcd34aaf35c966a688d0b48ec7e96f102c274dc0d3b381e"
        },
        {
          "alg" : "SHA-384",
          "content" : "ac04c9f03ccbe35a25deb8b50280a0ca01dbe6aff0dd795d55af6112bfe3cd5817eb82f32fb18378d86cd64b07597190"
        },
        {
          "alg" : "SHA3-384",
          "content" : "fca090ecb1edeacb9fe865dc515cd1d109b323cd742d4a9733ff199a96ee96e0db4f924079520b9c189ef750f255475d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5b0054e39e522de0e0ffc4034d12f72270291fb24d94d5ffc9c4d69c25035fc6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fb290f5a70b1efc1dff12f40a0b2d7b94019f66da42e78010c0b8e61f222c4f267b67e356a9e9c346eb801e5515e36243888f280c5cb95c2dd69016a30cadeb9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/javax.inject/javax.inject@1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://code.google.com/p/atinject/"
        },
        {
          "type" : "vcs",
          "url" : "http://code.google.com/p/atinject/source/checkout"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.inject/javax.inject@1?type=jar"
    },
    {
      "group" : "aopalliance",
      "name" : "aopalliance",
      "version" : "1.0",
      "description" : "AOP Alliance",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "04177054e180d09e3998808efa0401c7"
        },
        {
          "alg" : "SHA-1",
          "content" : "0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8"
        },
        {
          "alg" : "SHA-256",
          "content" : "0addec670fedcd3f113c5c8091d783280d23f75e3acb841b61a9cdb079376a08"
        },
        {
          "alg" : "SHA-512",
          "content" : "3f44a932d8c00cfeee2eb057bcd7c301a2d029063e0a916e1e20b3aec4877d19d67a2fd8aaf58fa2d5a00133d1602128a7f50912ffb6cabc7b0fdc7fbda3f8a1"
        },
        {
          "alg" : "SHA-384",
          "content" : "4dddf44338b5aff9580da2532b81c0ac3e1d09e1f28c6db871a55cad442b705dd7791eb07f9d4577d49d0be3673ba783"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2bd64cbaf769c6e4e85e34f7a6119d89e16fbf55af3fc5d6cbd52eb214c367dec1ac7b9062ee0fb35a2e0acfc7c477e1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d4a726b2bf8aa58197021a7d8fca674b4b2790d4c48de43a92f728866a91c2f0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "830bc3f8328be76897990e9b9fc42eef02623115e456af96ad09b20900ad615519c8c8de60155ac04fb332eaa9510110d52edd13911af76271c71d91cbd789cc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Public Domain"
          }
        }
      ],
      "purl" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://aopalliance.sourceforge.net"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "com.sun.jersey",
      "name" : "jersey-json",
      "version" : "1.9",
      "description" : "Jersey is the open source (under dual CDDL+GPL license) JAX-RS (JSR 311) production quality Reference Implementation for building RESTful Web services.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "17ca6b0d49ed8db159b7827b6defa6b6"
        },
        {
          "alg" : "SHA-1",
          "content" : "1aa73e1896bcc7013fed247157d7f676226eb432"
        },
        {
          "alg" : "SHA-256",
          "content" : "cc5d535f43cef0d1c467240961aae35801a837ab010319e741b2c7a6658f3fd6"
        },
        {
          "alg" : "SHA-512",
          "content" : "266e6ed47218316f4dd3bb9122d291d077fb5af0f0b649340c9e3724e0b8bc02e6410207a154c8dffac891ad817a241caaf80ff66604200993dbbe5ca9a79b9a"
        },
        {
          "alg" : "SHA-384",
          "content" : "6f05b0ce1da3122567a9c468e3720d54eade2860c61c0793928ec83850ffc1129093e5d6ce97e5804d2b8246045f5b71"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5edc6c6ebd5d2376e6be0623c76a7bf86991b7e862fecb7deb0b6807756e5af2605fe8c4d06fc0ef10dc6465ae5b8b7a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "146f85e2c521aec2a5ba77bc011475ae6693c5238ecf8d090d05f4706417fde5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1a0bb9d2678ef74c30859cc2b1a9197770fbd5904a0186619b3916f01d539c8dbab887f4d4a9ef8b049a8d84922e53696ea523b9e6c921ee4f847199d07a563f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.1"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/com.sun.jersey/jersey-json@1.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jersey.java.net/jersey-json/"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://java.net/jira/browse/JERSEY/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://java.net/projects/jersey/lists/users/archive"
        },
        {
          "type" : "vcs",
          "url" : "http://java.net/projects/jersey/sources/svn/show/trunk/jersey/jersey-json"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.jersey/jersey-json@1.9?type=jar"
    },
    {
      "group" : "org.codehaus.jettison",
      "name" : "jettison",
      "version" : "1.1",
      "description" : "A StAX implementation for JSON.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fc80e0aabd516c54739262c3d618303a"
        },
        {
          "alg" : "SHA-1",
          "content" : "1a01a2a1218fcf9faa2cc2a6ced025bdea687262"
        },
        {
          "alg" : "SHA-256",
          "content" : "377940288b0643c48780137f6f68578937e1ea5ca2b73830a820c50a7b7ed801"
        },
        {
          "alg" : "SHA-512",
          "content" : "075137cc1acbcdc4f07ac421d0f8fef7af5ac015520580aa3b908f22463b2ba86ba6be3b7511561d0459f1f14fac94617653c3777342ee0c857016baa7120ee9"
        },
        {
          "alg" : "SHA-384",
          "content" : "6fade925eed045ef42898f7e5cf72ac71e782ac802a9610aba57c78a39e16c7422eea88fd614e26ebe9e3e2e52bb4d2f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ed287c5346fc063603377b96bfad292cbe28c5604c120acb0405de2e3def3a42da6deafa6d070fbb106482786a791768"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7ab16df7e0316871e5650ca1884fb4ac8b8acdfcdb0bda834729d83b44f8c993"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f96810a0475fdb589211d57ed374b3d4d1b897f8b8b715088d0973fc29eb11f6797eed065de86c9acda29529ef1785c8c8f1d2b3d194148a18e9e1f3488d0ac4"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.codehaus.jettison/jettison@1.1?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "dav:https://dav.codehaus.org/repository/jettison/"
        },
        {
          "type" : "vcs",
          "url" : "https://svn.codehaus.org/jettison/tags/jettison-1.1"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.jettison/jettison@1.1?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "com.sun.xml.bind",
      "name" : "jaxb-impl",
      "version" : "2.2.3-1",
      "description" : "JAXB (JSR 222) reference implementation",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1b689e7f87caf2615c0f6a47831d0342"
        },
        {
          "alg" : "SHA-1",
          "content" : "56baae106392040a45a06d4a41099173425da1e6"
        },
        {
          "alg" : "SHA-256",
          "content" : "fa3e1499b192c310312bf02881274b68394aaea4c9563e6c554cc406ae644ff8"
        },
        {
          "alg" : "SHA-512",
          "content" : "6f08a9d34bd66ceb0e4cc6cdd782423a8a7ab775808e90b6c872977c653cd3e2c539a78554a5c8ef9402092ac4fdceac56b77e76b3c2d800d5ee97db0301a683"
        },
        {
          "alg" : "SHA-384",
          "content" : "223367a9c31cfbd1a407718ad30b176e32874cb6cd6a63e1c4df78ac74ccf027179f0e98639dc595a4ae408b40db99e4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1c0e7be9683e61b8626065910045eedcffa85439545a2d73c0c53c5c80ddff0d5b56f6ed569c64db25d6817c8804d7ca"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c9896a8b3078515bfa5cec60e9bd90ad6fb5c39678353bd31d9e6055b1241943"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5d44345d5ffb7be42f0785accf35f20fcf3fe09277bb0b2ea5dd27f1d7da2590d0df53286043f40343cf098544d5592c4acf875de703c66fe4dfb7815bddfd62"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.1"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/com.sun.xml.bind/jaxb-impl@2.2.3-1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jaxb.java.net/"
        },
        {
          "type" : "distribution",
          "url" : "svn:https://svn.java.net/svn/maven2-repository~svn/trunk/repository"
        },
        {
          "type" : "vcs",
          "url" : "https://svn.java.net/svn/jaxb~version2/jaxb-ri"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.xml.bind/jaxb-impl@2.2.3-1?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "com.sun.jersey.contribs",
      "name" : "jersey-guice",
      "version" : "1.9",
      "description" : "Projects that provide additional functionality to jersey, like integration with other projects/frameworks.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a81140d246f420c1e2eabe649417c5b1"
        },
        {
          "alg" : "SHA-1",
          "content" : "5963c28c47df7e5d6ad34cec80c071c368777f7b"
        },
        {
          "alg" : "SHA-256",
          "content" : "544fc92d2625332a9a8eeaa7a7274cf1af6703936a50afa80d92a78200a7de34"
        },
        {
          "alg" : "SHA-512",
          "content" : "e0378d72c15fc74bb7b575fe444ba5d0ca205ebb22868ed44f01d0f64b3bc55f8fb10491575abce0986a05b70546089f7e90d8ab399b5fd5cf70270fe6cb32c1"
        },
        {
          "alg" : "SHA-384",
          "content" : "c331b2f942b90654c1b2bef206a0b9a54f670c101aaed4e28e0411e6db1bfbe11c4ef32a0485e19ed7b5dd1e48d569dd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "79c420d2150fae631700907833fd180990596d77a4bab0c0fd2380f9693cb4a60955da5a1b353ef39e15667afee513f3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "eec6de76468b9e90e91c581f31992adf37723639d41ef7350dc0129eeba7cd23"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5bbea5bcb9e290999733ca5fd0d18b3c4878f9c4d8052feff9414369cec9dbeb28deee2cae3336573e30657e35f3e03f3caa885fc058cae0ace890f4ddc4ff6f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.1"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/com.sun.jersey.contribs/jersey-guice@1.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jersey.java.net/jersey-contribs/jersey-guice/"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://java.net/jira/browse/JERSEY/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://java.net/projects/jersey/lists/users/archive"
        },
        {
          "type" : "vcs",
          "url" : "http://java.net/projects/jersey/sources/svn/show/trunk/jersey/jersey-contribs/jersey-guice"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.jersey.contribs/jersey-guice@1.9?type=jar"
    },
    {
      "publisher" : "Google, Inc.",
      "group" : "com.google.inject.extensions",
      "name" : "guice-servlet",
      "version" : "3.0",
      "description" : "Guice is a lightweight dependency injection framework for Java 5 and above",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c9f66a5f6a0d840d9057b30853f25b85"
        },
        {
          "alg" : "SHA-1",
          "content" : "610cde0e8da5a8b7d8efb8f0b8987466ffebaaf9"
        },
        {
          "alg" : "SHA-256",
          "content" : "9e72a4b8582888d53c2f4297e93276a3c14c82880124490f2da7b16a9df1c618"
        },
        {
          "alg" : "SHA-512",
          "content" : "c9325bf3c317e820babb080b5e2453e8d08cd40b74528b38da2f63bdc2464c3209ed5f5af8d163a21c0424e1bf1252f28c9915b4591aaa864881e8ed452ec3fa"
        },
        {
          "alg" : "SHA-384",
          "content" : "1e9ee84a7d00b8a8d8a914242a1232104f594cab49d536ea3e053d0111013818171a37508ce4798af6cfc67e839fe67e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "966fa9306972b30652d705937f231495c557db8c7d8a257604d03c8a30c1e3cf1ba47bb5e1ce16f684a34a21baad211c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1c07971a2d8e674756e12fb278eb873f99e571edbcb7481250befd603ef2ff22"
        },
        {
          "alg" : "SHA3-512",
          "content" : "030c11333f82540848416678abd8d09e6ea6e3826110c7130ed6d8f1ada1c816bf930b05eba4b3ab3cd4dc10a4068d78dae04f6ecb0ae383de2a9e7f9c131136"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.inject.extensions/guice-servlet@3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://code.google.com/p/google-guice/extensions-parent/guice-servlet/"
        },
        {
          "type" : "build-system",
          "url" : "https://grid.sonatype.org/ci/job/Google-Guice/"
        },
        {
          "type" : "distribution",
          "url" : "http://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://code.google.com/p/google-guice/issues/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://groups.google.com/group/google-guice/topics"
        },
        {
          "type" : "vcs",
          "url" : "http://code.google.com/p/google-guice/source/browse/extensions-parent/guice-servlet"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.inject.extensions/guice-servlet@3.0?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty",
      "version" : "3.6.2.Final",
      "description" : "The Netty project is an effort to provide an asynchronous event-driven network application framework and tools for rapid development of maintainable high performance and high scalability protocol servers and clients. In other words, Netty is a NIO client server framework which enables quick and easy development of network applications such as protocol servers and clients. It greatly simplifies and streamlines network programming such as TCP and UDP socket server.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "65546c0885e83ba36f1f4d9ff9f8c776"
        },
        {
          "alg" : "SHA-1",
          "content" : "69be11c61427f0604a30539755add84ad9e37e5e"
        },
        {
          "alg" : "SHA-256",
          "content" : "d4ff9f0a2959633e062edd0e678d8187bbe95ad19195384ac524fd41f00f5a44"
        },
        {
          "alg" : "SHA-512",
          "content" : "8e86cb7f68707b69a45859d615e3a5799c5077d9c356b38ca0d352ce20521d45810d94dd8677ad0e977604ec85fa761e1f8f3c1703715cc9301c7c6fd01a00e3"
        },
        {
          "alg" : "SHA-384",
          "content" : "71e55f3ac9dc7601350d673e3ddce16b68b007412286222f7031dd8cfa83ddbfe2a7f571ae05dd0666fed0bed3e72b55"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3dbaf5a45796fcdd98b3275b922710ded988f3d1ec0c16f71f56b1e5ab9539a4a363844d5b3dc5a676fe1733addf675f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ba11732069c59afa972ee1df6cb41fc3c67384b26914c5124fff8a5266fa7ec9"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fb44907f286c64061c16a3f9a7c7b1cc00622fa652552fe1ac588508b90be63c26bd204f29578f7461ae3df70a014eae82088c6ef1e6c26b7ebbc0d4f4445049"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty@3.6.2.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://netty.io/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty@3.6.2.Final?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.hive",
      "name" : "hive-storage-api",
      "version" : "2.8.1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bea1adb65022d4616d23be770207600d"
        },
        {
          "alg" : "SHA-1",
          "content" : "4b151bcdfe290542f27a442ed09be99f815f88e8"
        },
        {
          "alg" : "SHA-256",
          "content" : "2bb77d246a9724a371301049239c6e53039efe4136b0ed34ee5a9c7b3cd861d8"
        },
        {
          "alg" : "SHA-512",
          "content" : "e76d1f1dcae0fcf26c56bf2006776a39b46572e9a67fcfab26774506a30de0a92447dcc545894c1796bbe092df53a51216c56721bfbc05c8a9b5fe9636ff07e7"
        },
        {
          "alg" : "SHA-384",
          "content" : "93eb2ba57fc637800ba539994682cf764436617f1b1584aa71f288797dad73e6b5dd95bc1dfb19be802a60e31b139866"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1b2ce0214f9767816e67c928ff90d0da0fb0a309de6f9a13f624c89d0d01d41e8476e6f66de5a8236fd9edb761538e5a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "352ec7ea1b92294e1b02b52b37c73e9b08d6c612c2fce173cd7e43317a9491e3"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d67d633607797d8f75d6c8f581fb3858421358b7a4daa079fc9960c2e397f33e7535eef5796b3876c29a311f896c02b4b867812a212efebd12e1fc63a8c79402"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hive/hive-storage-api@2.8.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.apache.org/hive-storage-api/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-apache-parent/tree/apache-23/hive-storage-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hive/hive-storage-api@2.8.1?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.36",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "872da51f5de7f3923da4de871d57fd85"
        },
        {
          "alg" : "SHA-1",
          "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14"
        },
        {
          "alg" : "SHA-256",
          "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0"
        },
        {
          "alg" : "SHA-512",
          "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b"
        },
        {
          "alg" : "SHA-384",
          "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881"
        },
        {
          "alg" : "SHA3-512",
          "content" : "14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.apache.orc/orc-mapreduce@1.8.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.orc/orc-core@1.8.8?type=jar",
        "pkg:maven/com.esotericsoftware/kryo-shaded@4.0.2?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
        "pkg:maven/org.apache.hadoop/hadoop-common@2.7.3?type=jar",
        "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-core@2.7.3?type=jar",
        "pkg:maven/org.apache.hive/hive-storage-api@2.8.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.orc/orc-core@1.8.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.orc/orc-shims@1.8.8?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@3.17.3?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
        "pkg:maven/io.airlift/aircompressor@0.21?type=jar",
        "pkg:maven/org.apache.hive/hive-storage-api@2.8.1?type=jar",
        "pkg:maven/org.jetbrains/annotations@17.0.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.threeten/threeten-extra@1.7.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.orc/orc-shims@1.8.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.protobuf/protobuf-java@3.17.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.airlift/aircompressor@0.21?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.hive/hive-storage-api@2.8.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.jetbrains/annotations@17.0.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.threeten/threeten-extra@1.7.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.esotericsoftware/kryo-shaded@4.0.2?type=jar",
      "dependsOn" : [
        "pkg:maven/com.esotericsoftware/minlog@1.3.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.esotericsoftware/minlog@1.3.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.hadoop/hadoop-common@2.7.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.hadoop/hadoop-annotations@2.7.3?type=jar",
        "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
        "pkg:maven/org.apache.commons/commons-math3@3.1.1?type=jar",
        "pkg:maven/xmlenc/xmlenc@0.52?type=jar",
        "pkg:maven/commons-httpclient/commons-httpclient@3.1?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.4?type=jar",
        "pkg:maven/commons-io/commons-io@2.4?type=jar",
        "pkg:maven/commons-net/commons-net@3.1?type=jar",
        "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
        "pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar",
        "pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
        "pkg:maven/log4j/log4j@1.2.17?type=jar",
        "pkg:maven/commons-lang/commons-lang@2.6?type=jar",
        "pkg:maven/commons-configuration/commons-configuration@1.6?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.slf4j/slf4j-log4j12@1.7.10?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.13?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@3.17.3?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.9.0?type=jar",
        "pkg:maven/org.apache.hadoop/hadoop-auth@2.7.3?type=jar",
        "pkg:maven/com.jcraft/jsch@0.1.42?type=jar",
        "pkg:maven/org.apache.curator/curator-client@2.7.1?type=jar",
        "pkg:maven/org.apache.htrace/htrace-core@3.1.0-incubating?type=jar",
        "pkg:maven/org.apache.zookeeper/zookeeper@3.8.0?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.4.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.hadoop/hadoop-annotations@2.7.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-math3@3.1.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/xmlenc/xmlenc@0.52?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-httpclient/commons-httpclient@3.1?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-codec/commons-codec@1.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-io/commons-io@2.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-net/commons-net@3.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar",
      "dependsOn" : [
        "pkg:maven/asm/asm@3.1?type=jar",
        "pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/asm/asm@3.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/log4j/log4j@1.2.17?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-lang/commons-lang@2.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-configuration/commons-configuration@1.6?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
        "pkg:maven/commons-lang/commons-lang@2.6?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-log4j12@1.7.10?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/log4j/log4j@1.2.17?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.13?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.code.gson/gson@2.9.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.hadoop/hadoop-auth@2.7.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.4?type=jar",
        "pkg:maven/log4j/log4j@1.2.17?type=jar",
        "pkg:maven/org.slf4j/slf4j-log4j12@1.7.10?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.2.5?type=jar",
        "pkg:maven/org.apache.directory.server/apacheds-kerberos-codec@2.0.0-M15?type=jar",
        "pkg:maven/org.apache.zookeeper/zookeeper@3.8.0?type=jar",
        "pkg:maven/org.apache.curator/curator-framework@2.7.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents/httpclient@4.2.5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.httpcomponents/httpcore@4.2.4?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents/httpcore@4.2.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.directory.server/apacheds-kerberos-codec@2.0.0-M15?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.directory.server/apacheds-i18n@2.0.0-M15?type=jar",
        "pkg:maven/org.apache.directory.api/api-asn1-api@1.0.0-M20?type=jar",
        "pkg:maven/org.apache.directory.api/api-util@1.0.0-M20?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.directory.server/apacheds-i18n@2.0.0-M15?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.directory.api/api-asn1-api@1.0.0-M20?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.directory.api/api-util@1.0.0-M20?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.zookeeper/zookeeper@3.8.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.zookeeper/zookeeper-jute@3.8.0?type=jar",
        "pkg:maven/org.apache.yetus/audience-annotations@0.12.0?type=jar",
        "pkg:maven/io.netty/netty-tcnative@2.0.48.Final?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/ch.qos.logback/logback-core@1.2.10?type=jar",
        "pkg:maven/ch.qos.logback/logback-classic@1.2.10?type=jar",
        "pkg:maven/commons-io/commons-io@2.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.zookeeper/zookeeper-jute@3.8.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.yetus/audience-annotations@0.12.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.yetus/audience-annotations@0.12.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-tcnative@2.0.48.Final?type=jar",
      "dependsOn" : [
        "pkg:maven/io.netty/netty-tcnative-classes@2.0.48.Final?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-tcnative-classes@2.0.48.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/ch.qos.logback/logback-core@1.2.10?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/ch.qos.logback/logback-classic@1.2.10?type=jar",
      "dependsOn" : [
        "pkg:maven/ch.qos.logback/logback-core@1.2.10?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.curator/curator-framework@2.7.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.curator/curator-client@2.7.1?type=jar",
        "pkg:maven/org.apache.zookeeper/zookeeper@3.8.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.curator/curator-client@2.7.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.apache.zookeeper/zookeeper@3.8.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.jcraft/jsch@0.1.42?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.htrace/htrace-core@3.1.0-incubating?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-compress@1.4.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-core@2.7.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.hadoop/hadoop-yarn-common@2.7.3?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@3.17.3?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.slf4j/slf4j-log4j12@1.7.10?type=jar",
        "pkg:maven/org.apache.hadoop/hadoop-annotations@2.7.3?type=jar",
        "pkg:maven/com.google.inject.extensions/guice-servlet@3.0?type=jar",
        "pkg:maven/io.netty/netty@3.6.2.Final?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.hadoop/hadoop-yarn-common@2.7.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.hadoop/hadoop-yarn-api@2.7.3?type=jar",
        "pkg:maven/javax.xml.bind/jaxb-api@2.2.2?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.4.1?type=jar",
        "pkg:maven/commons-lang/commons-lang@2.6?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.4?type=jar",
        "pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar",
        "pkg:maven/com.sun.jersey/jersey-client@1.9?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.13?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-jaxrs@1.9.13?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-xc@1.9.13?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
        "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.apache.hadoop/hadoop-annotations@2.7.3?type=jar",
        "pkg:maven/com.google.inject.extensions/guice-servlet@3.0?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@3.17.3?type=jar",
        "pkg:maven/commons-io/commons-io@2.4?type=jar",
        "pkg:maven/com.google.inject/guice@3.0?type=jar",
        "pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar",
        "pkg:maven/com.sun.jersey/jersey-json@1.9?type=jar",
        "pkg:maven/com.sun.jersey.contribs/jersey-guice@1.9?type=jar",
        "pkg:maven/log4j/log4j@1.2.17?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.hadoop/hadoop-yarn-api@2.7.3?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-lang/commons-lang@2.6?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
        "pkg:maven/org.apache.hadoop/hadoop-annotations@2.7.3?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@3.17.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/javax.xml.bind/jaxb-api@2.2.2?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.xml.stream/stax-api@1.0-2?type=jar",
        "pkg:maven/javax.activation/activation@1.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/javax.xml.stream/stax-api@1.0-2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/javax.activation/activation@1.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.sun.jersey/jersey-client@1.9?type=jar",
      "dependsOn" : [
        "pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.jackson/jackson-jaxrs@1.9.13?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.13?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.jackson/jackson-xc@1.9.13?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.13?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.inject.extensions/guice-servlet@3.0?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.inject/guice@3.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.inject/guice@3.0?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/aopalliance/aopalliance@1.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/javax.inject/javax.inject@1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.sun.jersey/jersey-json@1.9?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.jettison/jettison@1.1?type=jar",
        "pkg:maven/com.sun.xml.bind/jaxb-impl@2.2.3-1?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.13?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-jaxrs@1.9.13?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-xc@1.9.13?type=jar",
        "pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.jettison/jettison@1.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.sun.xml.bind/jaxb-impl@2.2.3-1?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.xml.bind/jaxb-api@2.2.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.sun.jersey.contribs/jersey-guice@1.9?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/com.google.inject/guice@3.0?type=jar",
        "pkg:maven/com.google.inject.extensions/guice-servlet@3.0?type=jar",
        "pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty@3.6.2.Final?type=jar",
      "dependsOn" : [ ]
    }
  ]
}