<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:1ce89c4c-029b-4b27-9683-04ebfe3ed822" version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <timestamp>2025-05-03T15:29:56Z</timestamp>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin makeBom compile+provided+runtime+system</name>
        <version>2.7.6</version>
        <hashes>
          <hash alg="MD5">639c35c7f79c5514f3abe11247999b70</hash>
          <hash alg="SHA-1">649239e622d8d454bb9ab6fafd6746c85cd11b7d</hash>
          <hash alg="SHA-256">1e3bc10146c370fe8b8f0a2edcb64329907d61dbc2f445db6ac1034cd3221ce3</hash>
          <hash alg="SHA-512">894a4b5762d32c88cc58ae1a35a3cc3d45a3c494accadb31b55b5832af65f60c0f8164623521a81de73e3ed6a4c994cca0f1951c8368b9d07fb41c82eaa84bbd</hash>
          <hash alg="SHA-384">3c385acc773a41056fb58ea27096c8ec86d46d8bd74a2eee9cf0913051981611afc68cf13a88d31af16590a489a97c0e</hash>
          <hash alg="SHA3-384">93695160055039f4791ecebd61c7aa6130f074f50a823de6e5aff7217c35548062829ec2b930658c2702cd47ea3118a1</hash>
          <hash alg="SHA3-256">4c9f5d3ab2b6ab9b4b4a8968a7ee2373b85a496bec34eefd96ed7c8260d2a45b</hash>
          <hash alg="SHA3-512">c2af46fe07c4be746fdc0b54e9eb3285231055c5401bcfb34c2d9392efe27fe9c16a0edd91615970bfae3f4a59846e89c3d88a6a36d4ba110a6d140a04fe184d</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.orc/orc-shims@1.8.9?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.orc</group>
      <name>orc-shims</name>
      <version>1.8.9</version>
      <description>A shim layer for supporting various versions of Hadoop dynamically.

    This module uses a higher version of Hadoop so that we can create shims
    that let us use new features of Hadoop without having a hard dependency
    on the latest version.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.orc/orc-shims@1.8.9?type=jar</purl>
      <externalReferences><reference type="website"><url>https://orc.apache.org/orc-shims</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/orc-user/</url></reference><reference type="vcs"><url>https://github.com/apache/maven-apache-parent/tree/apache-24/orc/orc-shims</url></reference></externalReferences>
    </component>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.hadoop/hadoop-common@2.7.3?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.hadoop</group>
      <name>hadoop-common</name>
      <version>2.7.3</version>
      <description>Apache Hadoop Common</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">eb51c886a594444d397825a00da2bd4b</hash>
        <hash alg="SHA-1">9ffd994953fc4397830a1241a15c9121aebd9574</hash>
        <hash alg="SHA-256">b7698cbbcfaf93818f2388db63198948bba5f24bd9a2b378c0081f6d945c30a4</hash>
        <hash alg="SHA-512">eb4138ca54f8dbf7edfc1ab39dcf75995b73520696682c87fdfab5d2a058839e345853b18cee0f00b5160e79ad65cb38a7c33e611bb285d740e229282c694202</hash>
        <hash alg="SHA-384">d77ca13ef7694da13b30c326b8ef5ce8a48506438670817533c4f61b3697c6f5498c5b0294b04c34c8bdbfbb594121ab</hash>
        <hash alg="SHA3-384">99a592a0202bfd10a6c9420ae9e04543788c52d30c0e9ff5f8e45805dc723b6efb3ba6dcd11e28ac437e00bb2e9b831e</hash>
        <hash alg="SHA3-256">fa6ac1f9800f580a7fca7aa081a73bc30796a049d1408f7fd492d09f2d22e2e2</hash>
        <hash alg="SHA3-512">a68a24242aaa49717a498ca4c42600696ea540cd4b5df1548c9402fc6ba8c4eaeafc08abbc82074679a24df9cd2f24ee80614b511db884d913d2f929ff592f4f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hadoop/hadoop-common@2.7.3?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.hadoop/hadoop-annotations@2.7.3?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.hadoop</group>
      <name>hadoop-annotations</name>
      <version>2.7.3</version>
      <description>Apache Hadoop Annotations</description>
      <hashes>
        <hash alg="MD5">04144ea13aa1d654c3f57894153baa05</hash>
        <hash alg="SHA-1">0a55da50d8b25df34dc4ecab9cbd3a5a24664594</hash>
        <hash alg="SHA-256">d59b24615f1e1050e4bc987955a936f479a51058ae2ee59d751536ae75e563d1</hash>
        <hash alg="SHA-512">216fbe0ad11c0d0eef67d8ab26707d1b6c1d3925c22ff37dc3eac94e4b0f18dec9a6592a37307f111c00ace9f8e6910ae08036c073cef69f89925243f5d894d0</hash>
        <hash alg="SHA-384">660c92e9d48fa5fa8edd09f4947dfca50df6130eb0d4e09da269128b0a0e0fa1d9739b95054d31aa24f5d5c9abc1fca8</hash>
        <hash alg="SHA3-384">b5fcdbeaff9e6fd5d152bc9fb3ed3866f77656bdfe2e518781983a07324cc16df8507e80d5d64a37264b8b15f54761ab</hash>
        <hash alg="SHA3-256">8436ec90de888199a34ac84c85957a2afb829c6fac69ad42f388182d2b2ad8a6</hash>
        <hash alg="SHA3-512">1a22c69b423147b7ef19267b1c3930480c3219d4a21329e84069a7a0610972bc8855e0aa48b22910881c3af5b1b192c3b3f8f2c4e40af7c3328f2b7cd21c9bba</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hadoop/hadoop-annotations@2.7.3?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-cli/commons-cli@1.5.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-cli</group>
      <name>commons-cli</name>
      <version>1.5.0</version>
      <description>Apache Commons CLI provides a simple API for presenting, processing and validating a Command Line Interface.</description>
      <hashes>
        <hash alg="MD5">6c3b2052160144196118b1f019504388</hash>
        <hash alg="SHA-1">dc98be5d5390230684a092589d70ea76a147925c</hash>
        <hash alg="SHA-256">bc8bb01fc0fad250385706e20f927ddcff6173f6339b387dc879237752567ac6</hash>
        <hash alg="SHA-512">b78ac2b418e9e9e7d0bc866664577199d320408a6f03151b3789bac365c986dd526df853599e633d7e50fe136cbf3eb9ce50c9cfa0ad38c3cc8d8ee416f61c40</hash>
        <hash alg="SHA-384">a7a2daa807c4007c506b5100f0a9b526c0052c4e1f6b699904ef9d2aba8195b6003dc4d47ca133b15e2f3e830bdbe6c4</hash>
        <hash alg="SHA3-384">44ca97514a2e34b5bf3de9b5d45c8e871f6eee517db7f3c4b4476eb3e8dfe9a9d8760f3181114708288c373727b42475</hash>
        <hash alg="SHA3-256">a0a47001d3a293f129ffc21f17f575a9d23ce5b88b440e651e4cd01edd0cc421</hash>
        <hash alg="SHA3-512">483dae23d6827a105d17847c8c813527f19042b65c4d09635dfc4bfd25990fe3ba2a997540460fd5b1d72ca3add9a38ca8b32004680764db972a9bb62f7f68d8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-cli/commons-cli@1.5.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-cli/</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CLI</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-cli.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-math3@3.1.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-math3</name>
      <version>3.1.1</version>
      <description>The Math project is a library of lightweight, self-contained mathematics and statistics components addressing the most common practical problems not immediately available in the Java programming language or commons-lang.</description>
      <hashes>
        <hash alg="MD5">505ece0d2261b037101e6c4bdf541ca7</hash>
        <hash alg="SHA-1">6719d757a98ff24a83d9d727bef9cec83f59b6e1</hash>
        <hash alg="SHA-256">a07e39d31c46032879f0a48ae1bd0142b17dd67664c008b50216e9891f346c54</hash>
        <hash alg="SHA-512">4716722ee06853789f5539f3b3f9726b3ddf3b358b3ee136196b9beaa63741df72a8a23b71f3864c565d5f945d19291beeb02053d8d98ec83119b7142c17ee23</hash>
        <hash alg="SHA-384">def2a41220a30eff80133c04f169baafde4d5a94f38a74d5bfed55042123b1b25f437d52d731f0135b7bd7885c4f5b44</hash>
        <hash alg="SHA3-384">3c18b700c06501541a2a70b0a53a712a436c0e980b619b18843eda488ef81249528bc42c44f48061b725ae2416cd9733</hash>
        <hash alg="SHA3-256">c568f6ce4553ccbcbad58a3fa7f08fcd8c60b70c030c6b1b9084318fccb5287e</hash>
        <hash alg="SHA3-512">54c6848c49be2b9788878bad0305299d92c4f1eabecc81528f7461df890ae3a5c7713611b943726603cfd455bf2e72a0c5519ae35569f5cc9a1d6ed5f817ce18</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-math3@3.1.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/math/</url></reference><reference type="build-system"><url>http://vmbuild.apache.org/continuum/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/MATH</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/math/trunk</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/xmlenc/xmlenc@0.52?type=jar">
      <group>xmlenc</group>
      <name>xmlenc</name>
      <version>0.52</version>
      <description>xmlenc Library</description>
      <hashes>
        <hash alg="MD5">c962b6bc3c8de46795b0ed94851fa9c7</hash>
        <hash alg="SHA-1">d82554efbe65906d83b3d97bd7509289e9db561a</hash>
        <hash alg="SHA-256">282ae185fc2ff27da7714af9962897c09cfefafb88072219c4a2f9c73616c026</hash>
        <hash alg="SHA-512">3a1f30f2bcebca32fce505185cfda1cd90fc2dc8c60fe41584f764fc2b4004422462b32ec88b70c93165ecc45201f8834fc16feb067812daa0759d2096b4a63f</hash>
        <hash alg="SHA-384">3ed1606ddd4995ffb15ef504195fa4ee73f536b1a232d18532cb53f10f9f8e418fc5e91bf47834bc98a4331981301755</hash>
        <hash alg="SHA3-384">3fd4abcd6d7a65dec35629144d7205789144cad016b398d96eb972982736bc5926fd28b4ad1d8edea4c55f573469d4cc</hash>
        <hash alg="SHA3-256">0afd3a376b7817f752a3c85db94337ec3f8249aa09a8dfddb72862c39642ce9a</hash>
        <hash alg="SHA3-512">562a1d61fdddaf4121c2af27ab065bd558429d307af2c51c8b813ca028cff8edc63b641d2998fc9e2b530b64652533faccb5c4544f0f76dfa254dd4e209155cf</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-4-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/xmlenc/xmlenc@0.52?type=jar</purl>
      <externalReferences><reference type="website"><url>http://xmlenc.sourceforge.net</url></reference><reference type="vcs"><url>http://xmlenc.cvs.sourceforge.net/xmlenc/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-httpclient/commons-httpclient@3.1?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>commons-httpclient</group>
      <name>commons-httpclient</name>
      <version>3.1</version>
      <description>The HttpClient  component supports the client-side of RFC 1945 (HTTP/1.0)  and RFC 2616 (HTTP/1.1) , several related specifications (RFC 2109 (Cookies) , RFC 2617 (HTTP Authentication) , etc.), and provides a framework by which new request types (methods) or HTTP extensions can be created easily.</description>
      <hashes>
        <hash alg="MD5">8ad8c9229ef2d59ab9f59f7050e846a5</hash>
        <hash alg="SHA-1">964cd74171f427720480efdec40a7c7f6e58426a</hash>
        <hash alg="SHA-256">dbd4953d013e10e7c1cc3701a3e6ccd8c950c892f08d804fabfac21705930443</hash>
        <hash alg="SHA-512">85e79d4fdb266861910ef95bcd6e82a7f091c9bfbc63dbe2112383ea4d53a5b7a378b54e7c472fbdfde923f30c72d9cad626f8fabb0b9c70d1dfb095add73359</hash>
        <hash alg="SHA-384">973e966839aaaddea4af4dd43c6dea59eeeca88b8e452af0a35efeb3c920592b110c5a366fc46f75c404d1c7fa4a7443</hash>
        <hash alg="SHA3-384">0c77f4cf3c1d38d7de2cf42a7ff98a0be313ed739d20b62354278bbb7ac12f5c8be656d38e297689ddb8c7ff707f9cc4</hash>
        <hash alg="SHA3-256">00c433b1cdaa88af6b91f41a5f1030c95beee1044de84880862f329d1af5821a</hash>
        <hash alg="SHA3-512">2fdd42541ff607906620cca573c4ce0ddaac10eb90ce6d755ba4c4e41a6166869748ff79937ebface698407a42aa47abf931ab4ecf996e672344d1a992b39025</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-httpclient/commons-httpclient@3.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://jakarta.apache.org/httpcomponents/httpclient-3.x/</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/HTTPCLIENT</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/jakarta-httpcomponents-dev/</url></reference><reference type="vcs"><url>http://svn.apache.org/repos/asf/jakarta/httpcomponents/oac.hc3x/trunk</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-codec/commons-codec@1.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-codec</group>
      <name>commons-codec</name>
      <version>1.4</version>
      <description>The codec package contains simple encoder and decoders for
     various formats such as Base64 and Hexadecimal.  In addition to these
     widely used encoders and decoders, the codec package also maintains a
     collection of phonetic encoding utilities.</description>
      <hashes>
        <hash alg="MD5">82b899580da472be37055da949b731fa</hash>
        <hash alg="SHA-1">4216af16d38465bbab0f3dff8efa14204f7a399a</hash>
        <hash alg="SHA-256">6aa4234c74f3a1035751a25822545867c8c3727125a642b6e049665d1863631b</hash>
        <hash alg="SHA-512">640bca4f1d4dca63724eedf417d3dccaacf77e5c1d9dac07190b0a64450f7b16fcb5f8578823303e08fb6d07b9c2897226c449f2c9b448b060ff5d8f683403b8</hash>
        <hash alg="SHA-384">1192ebd03bbdab3263d97805dc208821288d6726502cd800f01f55584572e71d0f9d0486b510530fca736dcccb3f7b5a</hash>
        <hash alg="SHA3-384">90ec2719349c5f5c7d00eca9fab4cb9aec52b7ed2350e1d36d57724f7545f4350ffd5f523d1f82eda7f17a921ecd8290</hash>
        <hash alg="SHA3-256">6189b7a5aa98e40401b1474c27a8fcfd39c4d0e75f178dbe9980b8dd6e734147</hash>
        <hash alg="SHA3-512">fbc6c86f35fce36975167e5eba4420f19f0d28caf15fcbd2b6728f99b0ecc48390f8da4679245969b0a330dff93925cf9c9dc17562a804a5ceeb43061924bfdd</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-codec/commons-codec@1.4?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/codec/</url></reference><reference type="build-system"><url>http://vmbuild.apache.org/continuum/</url></reference><reference type="distribution"><url></url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/CODEC</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/codec/trunk</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-io/commons-io@2.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-io</group>
      <name>commons-io</name>
      <version>2.4</version>
      <description>The Commons IO library contains utility classes, stream implementations, file filters, 
file comparators, endian transformation classes, and much more.</description>
      <hashes>
        <hash alg="MD5">7f97854dc04c119d461fed14f5d8bb96</hash>
        <hash alg="SHA-1">b1b6ea3b7e4aa4f492509a4952029cd8e48019ad</hash>
        <hash alg="SHA-256">cc6a41dc3eaacc9e440a6bd0d2890b20d36b4ee408fe2d67122f328bb6e01581</hash>
        <hash alg="SHA-512">957a438894a196e534af9ae1e61fb21e16f273952b55a81abb8faf0b139fc031ea940cf477f81704db417d1ce6ff2d9ddd4a2cbf316903b0e2dc1aeaef24f292</hash>
        <hash alg="SHA-384">af8a3e210cb1dd5475d497249acf1a86266077f5c7df0ded76d92467ab7f69e445f79dcfacfd7375085ad24f49625955</hash>
        <hash alg="SHA3-384">96ad8ffd01492835e0f0d0d19b0414950f487603caa7bbbed28bd3dc41721077c871eb534399aa178ed97aa01d743983</hash>
        <hash alg="SHA3-256">78a19109fbcc47fcdd9486c1906e244d1cfad3172d7497d4f0009cdf100ff97b</hash>
        <hash alg="SHA3-512">171ce4f320389faf73f95242098be01116709a9eaa88e770ef4aa63e249076dc9133f4c228809bd6989d657dabd6100d34a61232232adf19bbeea82482f46b29</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-io/commons-io@2.4?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/io/</url></reference><reference type="build-system"><url>http://vmbuild.apache.org/continuum/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/IO</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/io/trunk</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-net/commons-net@3.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-net</group>
      <name>commons-net</name>
      <version>3.1</version>
      <description>Apache Commons Net library contains a collection of network utilities and protocol implementations.
Supported protocols include: Echo, Finger, FTP, NNTP, NTP, POP3(S), SMTP(S), Telnet, Whois</description>
      <hashes>
        <hash alg="MD5">23c94d51e72f341fb412d6a015e16313</hash>
        <hash alg="SHA-1">2298164a7c2484406f2aa5ac85b205d39019896f</hash>
        <hash alg="SHA-256">34a58d6d80a50748307e674ec27b4411e6536fd12e78bec428eb2ee49a123007</hash>
        <hash alg="SHA-512">66887e7c5077dc6aed5dc85c172e7d80ae13503ab1e000dd76e87626cddb0427f3f9251941af94744d53f6b771e031785ce1362b01595d9723330554213bdfe8</hash>
        <hash alg="SHA-384">444a0ffddba21cb56369700b5b89641a453adfaffb948e22329011c8eb02ee40b70f57f88c3d10239d49eaf4069c1e25</hash>
        <hash alg="SHA3-384">c1a19ff6d35406b9363473484f847e995d995d9b6df03fa6e6e6f37b1cb3129baf58975037674c7bdbab79e1d2776246</hash>
        <hash alg="SHA3-256">2b750264c332b902556ff672997f23c56500eb815c41fc067f1773ba2aecdbd9</hash>
        <hash alg="SHA3-512">d798769ab7d6950ad16c9d4855de89414b10d8e53356c1c857dc06c408a8fab91c8db1f0529909aa7fa1bca76c38128d9b0b0734dc5f55e0ed6bfaf069ab3e42</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-net/commons-net@3.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/net/</url></reference><reference type="build-system"><url>http://vmbuild.apache.org/continuum/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/NET</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/net/trunk</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-collections</group>
      <name>commons-collections</name>
      <version>3.2.2</version>
      <description>Types that extend and augment the Java Collections Framework.</description>
      <hashes>
        <hash alg="MD5">f54a8510f834a1a57166970bfc982e94</hash>
        <hash alg="SHA-1">8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5</hash>
        <hash alg="SHA-256">eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8</hash>
        <hash alg="SHA-512">51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16</hash>
        <hash alg="SHA-384">dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073</hash>
        <hash alg="SHA3-384">8ce03528e4a6e95c44283b56eca87e6a6d3bf1363411a55b538f4f9110cf7470581ea5c73925e877ddab08dba0603f40</hash>
        <hash alg="SHA3-256">fd3d6134b5f07077b82ccf93d148dacf7c4ce5c971209510edd0e77e3e38c19e</hash>
        <hash alg="SHA3-512">c2a523916fb7c7d55a05d5e3d9e9b33000733f4b20a71be174e4e093e3f06ea78ad831edd1505527da7388105f8647efb7d5666ba852c90b4e2d5bb74256efbc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-collections/commons-collections@3.2.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/collections/</url></reference><reference type="build-system"><url>https://continuum-ci.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/COLLECTIONS</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/collections/trunk</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar">
      <publisher>Oracle Corporation</publisher>
      <group>com.sun.jersey</group>
      <name>jersey-core</name>
      <version>1.9</version>
      <description>Jersey is the open source (under dual CDDL+GPL license) JAX-RS (JSR 311)
        production quality Reference Implementation for building
        RESTful Web services.</description>
      <hashes>
        <hash alg="MD5">73d196595f5e410a37c0a4337350ceb7</hash>
        <hash alg="SHA-1">8341846f18187013bb9e27e46b7ee00a6395daf4</hash>
        <hash alg="SHA-256">2c6d0ec88fc8c36cb41637d9c00d0698c22cb6b6a137fa526ef782e00d2265bc</hash>
        <hash alg="SHA-512">9009037551b1a472ebfdf21697b22927028420607764fe91b9283488b54dbb5012e947328fbb0bfcd5393adde76ad1823baf52edd4e8b5a3bf479730c32f1dbb</hash>
        <hash alg="SHA-384">99509d6dfe02dd7131cbbb3b5b95d44ba3cc1b55acee760685d8616bcaad63fa2ec3cc432285799511a0838957326267</hash>
        <hash alg="SHA3-384">ec891d4dbbc2ecca1dc2eade1ee7db476683ac09db9c2f2e33142e58c85ebb77215ff98ffbe32d12cac5d1d01a5c442e</hash>
        <hash alg="SHA3-256">0217456004fa2a6e71c54630f4c8937130aa3fda026b84817a59f3d3fe3d7eab</hash>
        <hash alg="SHA3-512">f086bf1917aee7d14d76cb5897a657b203dc5d6a221388e2045ebd6dcb90ca1af466bd5b9bb6c6a894865818d2f9f6744d13247350d43afdb150d9c8cf5499f3</hash>
      </hashes>
      <licenses>
        <license>
          <id>CDDL-1.1</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar</purl>
      <externalReferences><reference type="website"><url>https://jersey.java.net/jersey-core/</url></reference><reference type="build-system"><url>http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/</url></reference><reference type="distribution"><url>https://maven.java.net/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://java.net/jira/browse/JERSEY/</url></reference><reference type="mailing-list"><url>http://java.net/projects/jersey/lists/users/archive</url></reference><reference type="vcs"><url>http://java.net/projects/jersey/sources/svn/show/trunk/jersey/jersey-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar">
      <publisher>Oracle Corporation</publisher>
      <group>com.sun.jersey</group>
      <name>jersey-server</name>
      <version>1.9</version>
      <description>Jersey is the open source (under dual CDDL+GPL license) JAX-RS (JSR 311)
        production quality Reference Implementation for building
        RESTful Web services.</description>
      <hashes>
        <hash alg="MD5">0c98f6cca5df8197b310a0d1d89bb34a</hash>
        <hash alg="SHA-1">3a6ea7cc5e15c824953f9f3ece2201b634d90d18</hash>
        <hash alg="SHA-256">3ded91b198077561bd51f6c0442c9cd70b754d8b31b61afaf448bda9d01848f0</hash>
        <hash alg="SHA-512">9354a94b5044519e6f8f08c89c5d7c57e1041555bc333f401dc18ea51c21c0db03838a55bdb43bbbc0e37a8c3f1f0bcaf4164c5284a5f096af61b549dfe3eec8</hash>
        <hash alg="SHA-384">231ac671ba61b142d940a3d88919650c701c9cf0cacf91d2f29c450349f486d8e0eab76dbdc73baa98ccda3acaa77101</hash>
        <hash alg="SHA3-384">d5792bafb84a124b86625cae09072ef0958da59a4ea418ddd57e24dfb91d08d6a1b43ec29ab5586ae437284bf3c85447</hash>
        <hash alg="SHA3-256">495463f7c0874f77b54bd492889e2c2df0476fec28eb2e9d3b31c8d6619857a5</hash>
        <hash alg="SHA3-512">c065a652d816f93d5c8fa8eebae4298574898e7f31ae889ca024e8a284df6d630f64ec2313fc73db3b017946ce5fff271a0e0a802e900b71bcf15614521d2315</hash>
      </hashes>
      <licenses>
        <license>
          <id>CDDL-1.1</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar</purl>
      <externalReferences><reference type="website"><url>https://jersey.java.net/jersey-server/</url></reference><reference type="build-system"><url>http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/</url></reference><reference type="distribution"><url>https://maven.java.net/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://java.net/jira/browse/JERSEY/</url></reference><reference type="mailing-list"><url>http://java.net/projects/jersey/lists/users/archive</url></reference><reference type="vcs"><url>http://java.net/projects/jersey/sources/svn/show/trunk/jersey/jersey-server</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/asm/asm@3.1?type=jar">
      <publisher>ObjectWeb</publisher>
      <group>asm</group>
      <name>asm</name>
      <version>3.1</version>
      <description>A very small and fast Java bytecode manipulation framework</description>
      <hashes>
        <hash alg="MD5">b9b8d2d556f9458aac8c463fd511f86d</hash>
        <hash alg="SHA-1">c157def142714c544bdea2e6144645702adf7097</hash>
        <hash alg="SHA-256">333ff5369043975b7e031b8b27206937441854738e038c1f47f98d072a20437a</hash>
        <hash alg="SHA-512">074612f145765d33c449887a29dd0791205881ba42d613e52b360ca53bd47c5f9835049de8fc6a384041de2e73bd271b6177c2225e2f72853a88359f6c10b14d</hash>
        <hash alg="SHA-384">c4ae90a52b7a23cbca12a01777e140e3f3f7943634611c23166a60d69a90f1edfeac8b210979f055fab6d1526d287ba4</hash>
        <hash alg="SHA3-384">04cc814a6d1d69266aba09985cd6ac04c5bc99964b099c88d89690ab656d53044a6a6bea6b79a37dc41c3202364888b6</hash>
        <hash alg="SHA3-256">0d52b7d9c8c5e047e79df73f4a4883e84eb324739748f1aac584e2e76b3968e6</hash>
        <hash alg="SHA3-512">5e0956cb7cd39ac3d6dd773d64a1a40f8a5b83c95306c627214572b996fd37188d9382e2b7c6579c3b93d04a9179ea3b479664de3d54ae9f0bf254de808d8c9c</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/asm/asm@3.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://asm.objectweb.org/asm/</url></reference><reference type="distribution"><url>http://mojo.codehaus.org/my-project</url></reference><reference type="issue-tracker"><url>http://forge.objectweb.org/tracker/?group_id=23</url></reference><reference type="mailing-list"><url>http://www.ow2.org/wws/arc/asm</url></reference><reference type="vcs"><url>http://cvs.forge.objectweb.org/cgi-bin/viewcvs.cgi/asm/asm/asm/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-logging/commons-logging@1.1.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-logging</group>
      <name>commons-logging</name>
      <version>1.1.3</version>
      <description>Commons Logging is a thin adapter allowing configurable bridging to other,
    well known logging systems.</description>
      <hashes>
        <hash alg="MD5">92eb5aabc1b47287de53d45c086a435c</hash>
        <hash alg="SHA-1">f6f66e966c70a83ffbdb6f17a0919eaf7c8aca7f</hash>
        <hash alg="SHA-256">70903f6fc82e9908c8da9f20443f61d90f0870a312642991fe8462a0b9391784</hash>
        <hash alg="SHA-512">e5d1fc8ec4544e1fa0f7c4aae8dbcca466c4987bc92fbbc430b054b10d646b745add4a754b1be9d50edd64330c798c53173a97289db57a966312e16f934e9d1f</hash>
        <hash alg="SHA-384">00dc41783f4081585e20adcfe83fd4dbb6b5a27236ee633d7e53dedcbca83ba5e5f0ca68d31f95e9c724b365e4c67499</hash>
        <hash alg="SHA3-384">6915e597821aa2fed7f4b05f4de3476364074ab5cee7e13b4eb5b94a9d297b58cb391c6b730e6ea0d4e81e323a90d002</hash>
        <hash alg="SHA3-256">c49c80e2576bf037fc871e70df8708f5e35c0977a907e966c0334e9fac17b297</hash>
        <hash alg="SHA3-512">b74b6e6d771005014614774d059a4e1ceab929c0678839846d143e56e4724455242ffa3d5d411c6554a41e1f66fe1f94c51472d80c07d44c02a2f9a6715d8c7d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-logging/commons-logging@1.1.3?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/proper/commons-logging/</url></reference><reference type="build-system"><url>http://vmbuild.apache.org/continuum/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/LOGGING</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>http://svn.apache.org/repos/asf/commons/proper/logging/trunk</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/log4j/log4j@1.2.17?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>log4j</group>
      <name>log4j</name>
      <version>1.2.17</version>
      <description>Apache Log4j 1.2</description>
      <hashes>
        <hash alg="MD5">04a41f0a068986f0f73485cf507c0f40</hash>
        <hash alg="SHA-1">5af35056b4d257e4b64b9e8069c0746e8b08629f</hash>
        <hash alg="SHA-256">1d31696445697720527091754369082a6651bd49781b6005deb94e56753406f9</hash>
        <hash alg="SHA-512">3f12937a69ba60d0f5e86265168d6a0d069ce20d95b99a3ace463987655e7c63053f4d7e36e32f2b53f86992b888ca477bf81253ad04c721896b397f94ee57fc</hash>
        <hash alg="SHA-384">80b79d5872dec949dff23d221636b5faf312f08fbea2b5e2a8db84a5f5955e13864aff4a288935cb53d4da3d61defbe1</hash>
        <hash alg="SHA3-384">0be025582340080ea191c4e2559395fe9957c8d0aeea040239dea8504ce035bd24150162898d18c863092697ef52501b</hash>
        <hash alg="SHA3-256">f7f31abcf8b57cf6fd18380b5d1a13f999e3d3d1d89bd25a4a3885fc832f4a29</hash>
        <hash alg="SHA3-512">0e4a21cb87a6b8626aa8f580b307039d2b060a6abc53d35feac9ecb8ffc2e80b627a12a869b5b5bf30a6e9348cd4c5c3edca937859141614f3c1b14bd8d4ef93</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/log4j/log4j@1.2.17?type=jar</purl>
      <externalReferences><reference type="website"><url>http://logging.apache.org/log4j/1.2/</url></reference><reference type="build-system"><url>http://vmgump.apache.org/gump/public/logging-log4j-12/logging-log4j-12/index.html</url></reference><reference type="distribution"><url>scp://people.apache.org/www/people.apache.org/builds/logging/repo/</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/bugzilla/describecomponents.cgi?product=Log4j</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/logging-log4j-user/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/logging/log4j/tags/v1_2_17_rc3</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-lang/commons-lang@2.6?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-lang</group>
      <name>commons-lang</name>
      <version>2.6</version>
      <description>Commons Lang, a package of Java utility classes for the
        classes that are in java.lang's hierarchy, or are considered to be so
        standard as to justify existence in java.lang.</description>
      <hashes>
        <hash alg="MD5">4d5c1693079575b362edf41500630bbd</hash>
        <hash alg="SHA-1">0ce1edb914c94ebc388f086c6827e8bdeec71ac2</hash>
        <hash alg="SHA-256">50f11b09f877c294d56f24463f47d28f929cf5044f648661c0f0cfbae9a2f49c</hash>
        <hash alg="SHA-512">4a5a3dbe4941c645e2cca068cca5c1882cfe988b02e7cd981d1e51784900767d1deab0e0e0566f559c9fcabb4a180e436d5bb948902d4f4106f37360466afb42</hash>
        <hash alg="SHA-384">9725bc421adc1dbcd6f937eca0f3075d186a2b353ece4cef66b0fe81bb8d3f7d7641c43e86d657ef526c719f0c2a8c90</hash>
        <hash alg="SHA3-384">4bc4eaaf2580ded6d552b96ae5261c936de95f69a1d137c47279c51bf2aa1406ae44f69ccc94486267b8441e53c4bd74</hash>
        <hash alg="SHA3-256">b68d49ef037d428ea0c3e67a7a20f3d68a134bef30a1639ec08d28886b9f5629</hash>
        <hash alg="SHA3-512">2e9ffc0608827cffc0b48b7a0f35d371c66586c99fea2910f7c2a237c7c57d9ae4d65de7c8e018362c2e4f963c2f70a9196cebf35457f1dd0cea6c65c256f673</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-lang/commons-lang@2.6?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/lang/</url></reference><reference type="build-system"><url>http://vmbuild.apache.org/continuum/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/LANG</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/lang/branches/LANG_2_X</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-configuration/commons-configuration@1.6?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-configuration</group>
      <name>commons-configuration</name>
      <version>1.6</version>
      <description>Tools to assist in the reading of configuration/preferences files in
    various formats</description>
      <hashes>
        <hash alg="MD5">b099d9f9b4b99071cc52b259308df69a</hash>
        <hash alg="SHA-1">32cadde23955d7681b0d94a2715846d20b425235</hash>
        <hash alg="SHA-256">46b71b9656154f6a16ea4b1dc84026b52a9305f8eff046a2b4655fa1738e5eee</hash>
        <hash alg="SHA-512">e5d184175a93d3008300ae5230e43776d7fd13f3d5958bc1b8e32d84ddcdc2c51a95af2ff0e4636dece1cc398b49ac43ca47db841c9162fd38afc17b07b381a0</hash>
        <hash alg="SHA-384">3ea0ab67fffa9741800bd4a0944084860bbe4ed6652edf1135cc5cd2ed2bac684dc75d71f2b4620468351c0dbc31042a</hash>
        <hash alg="SHA3-384">ddd9cb7aa61cdc50fd54ce55911dec6895acfc562a3a5db29fbc42ca72d2b427840337e3f8a08b9fa379ae95947527c6</hash>
        <hash alg="SHA3-256">aa48acac5d035263eef457c8b9b2041026010c03448aff4066ac0c9f044a8a54</hash>
        <hash alg="SHA3-512">9b7bbfa72dc3d8a786e7cedd881d35a59a21a40be7acdcbec0cee3b87b78430ac2b2c7f5ba2514b819077555fed511ed5d5f42f524334f8696e710e694bca098</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-configuration/commons-configuration@1.6?type=jar</purl>
      <externalReferences><reference type="distribution"><url>www.apache.org//www/www.apache.org/dist/java-repository/</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/CONFIGURATION</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-dev/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-log4j12@1.7.10?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-log4j12</name>
      <version>1.7.10</version>
      <description>SLF4J LOG4J-12 Binding</description>
      <hashes>
        <hash alg="MD5">77c1e048b5110a007dd5b8e808d76b1f</hash>
        <hash alg="SHA-1">b3eeae7d1765f988a1f45ea81517191315c69c9e</hash>
        <hash alg="SHA-256">2e4eebc6e346c92c417aa4e662738802645ef21c5eb4435132dc78d631f2eebb</hash>
        <hash alg="SHA-512">f178e15abb703ff7476181fe62310d8c275f1142a93d14794eb0ec6805f17240db0138a7cdccd8255968ad50beaa68ead74b0ed6c74a1334b31059a5eb3166aa</hash>
        <hash alg="SHA-384">0b0d725ed549d0a7ba4162b63560abcef410b084d553573d1114d64ff7e13a5974d4bf00255fbbbebaadb936297589da</hash>
        <hash alg="SHA3-384">d01a78a1bf678028b915100ecf1cd9aaada5d3124123ffb4942138c6a1eb7ab9f110637cf00d591c5994f75e7e5715ec</hash>
        <hash alg="SHA3-256">06e328527ca00db3b35aa723213c9e3f06c36e69e2f723957276892835c58b46</hash>
        <hash alg="SHA3-512">cccac5de9599be8cfdc6a9bcaeec9ad438e8a30d99c61b594e995e1445a8300beb3daaba905b11b601634a7dad1575ffcceed9e00084401961a837cf3a69ae7b</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-log4j12@1.7.10?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.slf4j.org</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/ceki/slf4j/slf4j-log4j12</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar">
      <publisher>FasterXML</publisher>
      <group>org.codehaus.jackson</group>
      <name>jackson-core-asl</name>
      <version>1.9.13</version>
      <description>Jackson is a high-performance JSON processor (parser, generator)</description>
      <hashes>
        <hash alg="MD5">319c49a4304e3fa9fe3cd8dcfc009d37</hash>
        <hash alg="SHA-1">3c304d70f42f832e0a86d45bd437f692129299a4</hash>
        <hash alg="SHA-256">440a9cb5ca95b215f953d3a20a6b1a10da1f09b529a9ddea5f8a4905ddab4f5a</hash>
        <hash alg="SHA-512">11725da54c7c18af0b50967a9317866ce9d11eb94d3b52ff7a54c6550070e143b5a582de9a8ebb6d61a8104f4dcd7ddb9c2e6f5c3605b6900d48f5241fe38d89</hash>
        <hash alg="SHA-384">26bff8b72770f734bac78e1ef2f575b26b7676895a4f022f402c99e38b567905ace700f553771606603f508b749bfb4f</hash>
        <hash alg="SHA3-384">27be7948772c3680134e42ca889dc3f42954394fff4b6f7157d73a9f32886795c6d56b80283d2d762409ad56b753a811</hash>
        <hash alg="SHA3-256">a0ea1eb75ad00b7c61b96cd71b40b6a0f558c7e1089d42b6d3cd635b1f62b0b1</hash>
        <hash alg="SHA3-512">67bb970e761b9dc171ba1e88e5ca2079de26b046f773f89400ccef901d1c0ce7f9f6d0d4a0af5c18ac54c1fbcdce035809584b6514167bd8cb6730294947b13f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar</purl>
      <externalReferences><reference type="website"><url>http://jackson.codehaus.org</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/JACKSON</url></reference><reference type="vcs"><url>http://xircles.codehaus.org/projects/jackson/repos/primary/repo</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.13?type=jar">
      <publisher>FasterXML</publisher>
      <group>org.codehaus.jackson</group>
      <name>jackson-mapper-asl</name>
      <version>1.9.13</version>
      <description>Data Mapper package is a high-performance data binding package
built on Jackson JSON processor</description>
      <hashes>
        <hash alg="MD5">1750f9c339352fc4b728d61b57171613</hash>
        <hash alg="SHA-1">1ee2f2bed0e5dd29d1cb155a166e6f8d50bbddb7</hash>
        <hash alg="SHA-256">74e7a07a76f2edbade29312a5a2ebccfa019128bc021ece3856d76197e9be0c2</hash>
        <hash alg="SHA-512">81cd7962fd9ee6d2354f5e44d23de1fa96d0da665b79a0f4ce6f8012bb4651683ae69b82daae3cf4feb101658a344bf4d665fefc3a57eca3a720761732963873</hash>
        <hash alg="SHA-384">d0f846e695d5ba34708b7d066a77b66c3f4c726300bd56f222b61b2c72cf35c95c98bfaf5cb99288a96aa54cc6f1d55c</hash>
        <hash alg="SHA3-384">a089909a560cebbfcd1cc715b2f24360a25b0bc3de9c6da0ba22580ac727a55ff42aa45b1e411aa547121bda38e926ba</hash>
        <hash alg="SHA3-256">7fa149f84f2f0b937a68e0fff33a8bb68a5113f88b0a030e94a5b8f0e56446c2</hash>
        <hash alg="SHA3-512">77ba7d6d92fbccf038c917bdd3db80a7ce4c7a65ab4765e580033ffd968acf050e2aa6e989e4d1a465df8e8bb1383b8da87e6a028eae1cb5504d54237dbc3eea</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.13?type=jar</purl>
      <externalReferences><reference type="website"><url>http://jackson.codehaus.org</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/JACKSON</url></reference><reference type="vcs"><url>http://xircles.codehaus.org/projects/jackson/repos/primary/repo</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.protobuf/protobuf-java@3.17.3?type=jar">
      <group>com.google.protobuf</group>
      <name>protobuf-java</name>
      <version>3.17.3</version>
      <description>Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an
    efficient yet extensible format.</description>
      <hashes>
        <hash alg="MD5">cd233934a824c6eb401aef8ff4e4448b</hash>
        <hash alg="SHA-1">313b1861fa9312dd71e1033a77c2e64fb1a94dd3</hash>
        <hash alg="SHA-256">4ac549b192694141958049f060a1c826a33342f619e108ced8c17d9877f5e3ed</hash>
        <hash alg="SHA-512">4f61a3cbd4edd44361330d561b1404cf614f0468b4b8287bc25ded775e4ecdbb8d829dcc669891b1434f6950e4184a86f447a028ef02abcdd5d720a04999620f</hash>
        <hash alg="SHA-384">8b4052e989e80aa5b000d037e90b323f194b7035b97c0d32f76280ace1efea90d1564a1c2b3e51478aa7ca37f819e67b</hash>
        <hash alg="SHA3-384">7fbbf882df45263001a7d6785e60ac2535c775d9cf99816d5564a1a5b828c6a5721d9d98f21251ede5d510e020583d72</hash>
        <hash alg="SHA3-256">8e14cf74febfe130ad2d5b237d0777ec9d712126746deb33bb17a16bd28e2ced</hash>
        <hash alg="SHA3-512">e3c291805a35ddafe676f73f71d0578011ea5a10fde580dc2320e3acb202282e2c30dd575356c9ac0e7410df877a64477f9a8c7a7fe3638beb53eeae50b20b83</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.protobuf/protobuf-java@3.17.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://developers.google.com/protocol-buffers/protobuf-java/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/protocolbuffers/protobuf/protobuf-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.code.gson/gson@2.9.0?type=jar">
      <group>com.google.code.gson</group>
      <name>gson</name>
      <version>2.9.0</version>
      <description>Gson JSON library</description>
      <hashes>
        <hash alg="MD5">53fa3e6753e90d931d62cb89580fde2f</hash>
        <hash alg="SHA-1">8a1167e089096758b49f9b34066ef98b2f4b37aa</hash>
        <hash alg="SHA-256">c96d60551331a196dac54b745aa642cd078ef89b6f267146b705f2c2cbef052d</hash>
        <hash alg="SHA-512">13ff22a60ee6a72ba0c4e8fe3702b8f3f6be6b67ed4279079a9843f57ad0ca125d4ecc1564ac4e736eab10fb6254d2c011b2c08c514d708be7f8091332ed2c2c</hash>
        <hash alg="SHA-384">fde5b61066a8cdd711874ed42f20cb914e4193f1477456c431fb0ca32d86324414e92b0b2c5696f56d0b9d69521d8dee</hash>
        <hash alg="SHA3-384">314156bb766c2f792317763322a819ef968e5ecc7f1a236ab0bb383426d1bf396e18099edb16f85e572b42c85a6c89ba</hash>
        <hash alg="SHA3-256">5e550f5f719c5f5c4ad04fbe6cd0d7868d6bf0e4184f386e4896e72c4839de3e</hash>
        <hash alg="SHA3-512">a3db5a0129c42598b5ded96cdf75d69c75d4a6b317746c9b7fbf238b2ca78cfb48fb0023ae1a4178bc8da3727ceb0bad6930f8f24624e0be6dbbde00adbb0624</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.code.gson/gson@2.9.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/google/gson/gson</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/google/gson/issues</url></reference><reference type="vcs"><url>https://github.com/google/gson/gson/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.hadoop/hadoop-auth@2.7.3?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.hadoop</group>
      <name>hadoop-auth</name>
      <version>2.7.3</version>
      <description>Apache Hadoop Auth - Java HTTP SPNEGO</description>
      <hashes>
        <hash alg="MD5">471760b62af31e3bfe4e6a73929868d7</hash>
        <hash alg="SHA-1">7d1236a477accb4c67fc9615ed67732097fb9af9</hash>
        <hash alg="SHA-256">1d75f87e433c285ed99bee878bad6f251242613fec2fb7e6c544b862f3ddc428</hash>
        <hash alg="SHA-512">ddf4b3ca2a0bc6d4ece049da3f122f9a44f004b4b21933666410c9af634886d1cf8fbba98eeb919af4bd879e5420df8cd17b618beb1f3c2db9a07faa2146b563</hash>
        <hash alg="SHA-384">c226ad571a95788c234a092053f704d05a6cde93853e861611477c3241ae299b99497fd2f4b8b227008e85d4466e2b20</hash>
        <hash alg="SHA3-384">7fd2975e5a88db2e11912d96943212660b37496df50b0b453f676fac9f549a2ec8ce8ad1b680955b4b1c02c62b94d488</hash>
        <hash alg="SHA3-256">bf9bb220d95161c4dcd82a94b7fd2b44103030e331d51438ab716db7b7eb9a5a</hash>
        <hash alg="SHA3-512">8343e7fc64defb67f676467f936cd47a065f895d7d3b2e2e2eba1fc93820c0e2f81abd2cf68e4f264150c763d4c4c0676d0689b9719436fdd3e6340f9a8cee87</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hadoop/hadoop-auth@2.7.3?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.httpcomponents/httpclient@4.2.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.httpcomponents</group>
      <name>httpclient</name>
      <version>4.2.5</version>
      <description>HttpComponents Client (base module)</description>
      <hashes>
        <hash alg="MD5">d57d9336b460a91be6880784bdadc124</hash>
        <hash alg="SHA-1">666e26e76f2e87d84e4f16acb546481ae1b8e9a6</hash>
        <hash alg="SHA-256">c7fb05b793a586633d2d801a889e0846f3f21c7f8dc3dab776421383f49ebb8c</hash>
        <hash alg="SHA-512">5a33f34a2ef0853d6434bfb77bdc8e41c3df923d152bd9037245cfad6f41a3d1653f3f7504add7947f84cfbddfaa7ff3f5cd3bd82d6405201cbb832809c8ef52</hash>
        <hash alg="SHA-384">1cd160c1f484a350eb32a0b8ffa7e3deb435157a9be080324c642d1ba002ebb4e823cd6e3cb5a5e1d5427837fe9dd09e</hash>
        <hash alg="SHA3-384">ee0d189a9c3b0db8b17e9f4a5d158558ea989bf9b4c0a5a4ff87ec0b0a6ebd16b4ab97bf219a6026eb3a5aa181dd57ec</hash>
        <hash alg="SHA3-256">f5b875cb37bc94e641f6ef16a24e0db1b90f9abf6603e8cdcbf615531f1553d3</hash>
        <hash alg="SHA3-512">ce86de32bfa3f2b5bda63a7c27cb085350ac3923a04acf5a8739bdf3c39913ba0ad9b8cbd18049b1f5c55d938814ca85ef7d2341a6fa02ecaca6e0a2487daa6d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.httpcomponents/httpclient@4.2.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://hc.apache.org/httpcomponents-client</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/HTTPCLIENT</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/</url></reference><reference type="vcs"><url>https://svn.apache.org/repos/asf/httpcomponents/httpclient/tags/4.2.5/httpclient</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.httpcomponents/httpcore@4.2.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.httpcomponents</group>
      <name>httpcore</name>
      <version>4.2.4</version>
      <description>HttpComponents Core (blocking I/O)</description>
      <hashes>
        <hash alg="MD5">6ccb86231d8a8b99c551b4ddf926ddd1</hash>
        <hash alg="SHA-1">3b7f38df6de5dd8b500e602ae8c2dd5ee446f883</hash>
        <hash alg="SHA-256">bda2b9e0464f7a0e122d5e9bff7b384f3bc3a91af18ad51e029deaaa599e5db3</hash>
        <hash alg="SHA-512">0c4de4513cafb13a81bcad7cc1a4e45759ba32654eafde15665afde63a427b04ac25cfe17e4bbd1887225960b5aaf7e73382e35ec16993dbc1fd19a2bf5e8ab9</hash>
        <hash alg="SHA-384">641cac15a256f8d0a2ad0f455458dc022d8fdeb3a792b179e122d8e102966a06ed46c65f66e7fcba23dd0369665b80b3</hash>
        <hash alg="SHA3-384">500c90ab6e08e7846e9c7d8907463b36c536f533812ecbfe904a4497a6a2e6e8d6196f0d47c1b9d2c03e63b12ab9dbc5</hash>
        <hash alg="SHA3-256">0b7051d9fc3f0c8b69a0ba4951de7752ee887867a63165f937b596d3b2cd72ce</hash>
        <hash alg="SHA3-512">1e2c076c8685ee3cbe9acabc90805af82e0c39e94e5be13f615d0d6d9a18f04114be32095599ecabdd73e0b28b6bd3d1d1ca9fd2d64139b52283a312508e2c20</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.httpcomponents/httpcore@4.2.4?type=jar</purl>
      <externalReferences><reference type="website"><url>http://hc.apache.org/httpcomponents-core-ga</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/HTTPCORE</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/</url></reference><reference type="vcs"><url>http://svn.apache.org/repos/asf/httpcomponents/httpcore/tags/4.2.4/httpcore</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.directory.server/apacheds-kerberos-codec@2.0.0-M15?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.directory.server</group>
      <name>apacheds-kerberos-codec</name>
      <version>2.0.0-M15</version>
      <description>The Kerberos protocol encoder/decoder module</description>
      <hashes>
        <hash alg="MD5">3118e22eac44e150c383df1d417772f4</hash>
        <hash alg="SHA-1">1c16e4e477183641c5f0dd5cdecd27ec331bacb5</hash>
        <hash alg="SHA-256">4996f5b72497e94dd86d64a370158c4fb0049eea9b17ff8b27a4671d6c136ded</hash>
        <hash alg="SHA-512">9e2ecd4f5d08af238ab32852fdf86f8165701b745ad93f3bc96eb3c0aff95a083773039adc3722123e8504971cd379929f9c4ad6d5c1ca3d112fa3d04e4a83f0</hash>
        <hash alg="SHA-384">c2e02333581bf5fef1a73c681afbefa13a03451e91bb36adeca90380679ecfa5a687e42073b9a7e6d60d71060d7e586d</hash>
        <hash alg="SHA3-384">b8f61173cbdbe09e53bca5e2cca5bce141083455b72ba4d6ad624be4da81ce27afecc8c36c7058a36e0291b6672d29da</hash>
        <hash alg="SHA3-256">161f828310334719481640ce1a82e6004c4b445ad090f6e18622be16042f71e4</hash>
        <hash alg="SHA3-512">c94fce03575ce82631a361f945c8dbe48332c632f4d2b9386792064a8315fdc7ad7b1b17e63fbb4b6b9f638403be4b7e6255698852195a20e3d241b020a14119</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.directory.server/apacheds-kerberos-codec@2.0.0-M15?type=jar</purl>
      <externalReferences><reference type="website"><url>http://directory.apache.org/apacheds/1.5/apacheds-kerberos-codec</url></reference><reference type="build-system"><url>https://hudson.apache.org/hudson/view/A-F/view/Directory</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/DIRSERVER</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/directory-dev</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/directory/apacheds/tags/2.0.0-M15/apacheds-kerberos-codec</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.directory.server/apacheds-i18n@2.0.0-M15?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.directory.server</group>
      <name>apacheds-i18n</name>
      <version>2.0.0-M15</version>
      <description>Internationalization of errors and other messages</description>
      <hashes>
        <hash alg="MD5">f5877c02fd56ade67713560e589c81b9</hash>
        <hash alg="SHA-1">71c61c84683152ec2a6a65f3f96fe534e304fa22</hash>
        <hash alg="SHA-256">bd3b7cece7fc6364cbce32b9edd0e9628a3e889c6a93cdeff1b5e2131e2a007c</hash>
        <hash alg="SHA-512">2ca2e5e475168e97c3e25d52dfd8fd342e5be2f1689842bed03db568538f8f9fd1cee28cde6e815c4706123716a266db6130ceaaac4eddbe9d597de7459d6632</hash>
        <hash alg="SHA-384">fda3e7e1e80becb69fe5997c75b8f89ecaa7004bfebc20e230dfb3580a3fd9c526757e775c35a53e5681da1c2a7edb3b</hash>
        <hash alg="SHA3-384">0fc218a9b93501998ab35252262373b7eda92a33d3688bc87694421e847bd4b4a11c3f79ad27a8c93fc000e085b6b28c</hash>
        <hash alg="SHA3-256">d9bda1adf202334aebea73021e3bbe180096e8165ecf6876b589c8bc58ec7fd0</hash>
        <hash alg="SHA3-512">b1272d97252156e84b10b85ffa9f43837338ba381e392c3662e96ffaaaee8a1bf82b3b77553cbd7bb0183a969ad3967bc7198cbeffbbe028266aaee90cda4f1d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.directory.server/apacheds-i18n@2.0.0-M15?type=jar</purl>
      <externalReferences><reference type="website"><url>http://directory.apache.org/apacheds/1.5/apacheds-i18n</url></reference><reference type="build-system"><url>https://hudson.apache.org/hudson/view/A-F/view/Directory</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/DIRSERVER</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/directory-dev</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/directory/apacheds/tags/2.0.0-M15/apacheds-i18n</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.directory.api/api-asn1-api@1.0.0-M20?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.directory.api</group>
      <name>api-asn1-api</name>
      <version>1.0.0-M20</version>
      <description>ASN.1 API</description>
      <hashes>
        <hash alg="MD5">cf4561832dab76e9f37461342ec18d17</hash>
        <hash alg="SHA-1">5e6486ffa3125ba44dc410ead166e1d6ba8ac76d</hash>
        <hash alg="SHA-256">484aaf4b888b0eb699d95bea265c2d5b6ebec951d70e5c5f7691cd52dd4c8298</hash>
        <hash alg="SHA-512">10b84880f0b866addba5137d7afd1fc35b6c5e3577a3c8d9d122fc91201f21381173aca49881465ced33fc34680da55ea6bc47e2f8848fb5dd0d988bc0cace97</hash>
        <hash alg="SHA-384">f0924bad02e083567f2c08fc565484c55e2f9de59abaa7a1fcafa36bc65a451cde6d1b2e78386e04dafba46e85c5e3d2</hash>
        <hash alg="SHA3-384">7ae5c73827f5ffdc09c7117cbfb7ee9efcf6daf7f8ea5377a96aa1e0ec245846d34d237ca35a57dbf4ab36a5f11c46c3</hash>
        <hash alg="SHA3-256">58dba2f147b58b85925b06ae53dced0025242998f215aafdbca5a6f24d01463a</hash>
        <hash alg="SHA3-512">a35ef1eb9ebdc088c64adb05c7fc213185c15363f0c00afb96d2f19f25462052d30f8bad23aa466f173f06b51218c7c1a30ed2f50177a2b9830358a143fca1ba</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.directory.api/api-asn1-api@1.0.0-M20?type=jar</purl>
      <externalReferences><reference type="website"><url>http://directory.apache.org/api-parent/api-asn1-parent/api-asn1-api/</url></reference><reference type="build-system"><url>https://hudson.apache.org/hudson/view/A-F/view/Directory</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/DIRAPI</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/directory-dev</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/directory/shared/tags/1.0.0-M20/api-asn1-parent/api-asn1-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.directory.api/api-util@1.0.0-M20?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.directory.api</group>
      <name>api-util</name>
      <version>1.0.0-M20</version>
      <description>Utilities shared across this top level project</description>
      <hashes>
        <hash alg="MD5">2c5a6722666882024becdd64301be492</hash>
        <hash alg="SHA-1">a871abf060b3cf83fc6dc4d7e3d151fce50ac3cb</hash>
        <hash alg="SHA-256">fd32fd047ccf143c58d093b58811aa81e539f8cf83c1187809f1a241a1df12d1</hash>
        <hash alg="SHA-512">b1c206a420d5dc455f22a1f22980573101b9c74abac044e1b02b2925eaf7c8b188481797d9261cfbe1e2800e684ce88ed8cd18db1ef5909929bec33539a4c5f3</hash>
        <hash alg="SHA-384">1fed2deab6fe2e3d357bdeee48046861e53582f2404c34bc2bc35992e771e27e8d28b8df65a994f700159e5ca5311316</hash>
        <hash alg="SHA3-384">0451ed59fec5907fed4e5b9688c0d0b4a682fbb56eecb38ac963670ec0bfbd04790325ce1e2f79022976f0344f9cdc74</hash>
        <hash alg="SHA3-256">aa8acd1abed952436313c6988941e63e0f33473f8df6e9ae39c8bdee334ae4b7</hash>
        <hash alg="SHA3-512">b6a0c7780bb76334438af34d098b15c9fdf1627a927f7c451ffb468acde7916e5ddf7fb4942d0800c53fda02f8d788f5c75999e546f1aac9439b9e524efd70fd</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.directory.api/api-util@1.0.0-M20?type=jar</purl>
      <externalReferences><reference type="website"><url>http://directory.apache.org/api-parent/api-util/</url></reference><reference type="build-system"><url>https://hudson.apache.org/hudson/view/A-F/view/Directory</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/DIRAPI</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/directory-dev</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/directory/shared/tags/1.0.0-M20/api-util</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.curator/curator-framework@2.7.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.curator</group>
      <name>curator-framework</name>
      <version>2.7.1</version>
      <description>High-level API that greatly simplifies using ZooKeeper.</description>
      <hashes>
        <hash alg="MD5">35bff30d2a79a8b0731269604b1327ee</hash>
        <hash alg="SHA-1">8c7b1eeb78e43bb91ea737111ba3dec0512be876</hash>
        <hash alg="SHA-256">a65e3f515b022d84d86c553c99216e384bc82d1de51b5a32b10f33314ad81ceb</hash>
        <hash alg="SHA-512">c272e0c5340bbbbf3635cdc75b863eb369dfa23c799d2027edfd0601f46fa415d31c4c4897188e3e363eca2fde5b66bf22be191902b3c186296ef4973f1eb36b</hash>
        <hash alg="SHA-384">62ace5a2949d5add675482730b8bf3bceb8cdcbbc70c697c1d055eea2b3aebccea21bcc46ec0f2431db37b1c66567b01</hash>
        <hash alg="SHA3-384">2aebad21fdfdb0abd5a9b1df007b9d837362c81e2f5d172e256ff3972f63b3062f728ba0f7e3b7fd3716ecdf02d48994</hash>
        <hash alg="SHA3-256">74a3fd8333de5c432e133b41191439d524257e273581b04139991123ca5dc3ef</hash>
        <hash alg="SHA3-512">faf1d706befa628614d095d60e199e300e23ecba26e7cf8603b5caf86e73e78a76baa06380858696a8316d762d74a4aa03378d5c3c1aba6747c1130d75dce7a5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.curator/curator-framework@2.7.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://curator.apache.org/curator-framework</url></reference><reference type="build-system"><url>https://builds.apache.org/job/Curator/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/CURATOR</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/curator-user/</url></reference><reference type="vcs"><url>https://github.com/apache/curator.git/curator-framework</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.jcraft/jsch@0.1.42?type=jar">
      <publisher>jcraft</publisher>
      <group>com.jcraft</group>
      <name>jsch</name>
      <version>0.1.42</version>
      <description>JSch is a pure Java implementation of SSH2</description>
      <hashes>
        <hash alg="MD5">74ea920580077b4c0b51101a8292a529</hash>
        <hash alg="SHA-1">a86104b0f2e0c0bab5b0df836065823a99b5e334</hash>
        <hash alg="SHA-256">74297550aecc3b566ee19e49befb9cd49e2326c9d8d71ad5071bacc655b760dc</hash>
        <hash alg="SHA-512">900f9f14bbad4c4140dace31527134f831cf73c0315445dad20a5c3e49f23910a2871dc39a58a315cf5a4581a19333bdb19d97da7902861672315270425a00bd</hash>
        <hash alg="SHA-384">b30123cf465ee7225fd1e768af377a4322ddfadf9639b3140a37ab55a3ce9b87e7b1453aa88e711df187bef74ecf54d2</hash>
        <hash alg="SHA3-384">20babe71575fa4d4423005bc3dff784c3a76a1f6a21601a3c3070f4ce29ba728abf165e72d1d0187c2daaf32318e163c</hash>
        <hash alg="SHA3-256">6525270936c47868845fcfd20e4809b1effe0856df004b65704636dc52b00d49</hash>
        <hash alg="SHA3-512">9c4afe88ea854bfc8227b8a0f2e9576f1e2b4bc8f95113f531334ba9100b8533c069250e5b2a1e64525ba8730a38a9ed1966599016d731eb486da7b0e1136e27</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-4-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.jcraft/jsch@0.1.42?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.jcraft.com/jsch/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.curator/curator-client@2.7.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.curator</group>
      <name>curator-client</name>
      <version>2.7.1</version>
      <description>Low-level API</description>
      <hashes>
        <hash alg="MD5">3b43933c18d1dcf15f88db73ee646396</hash>
        <hash alg="SHA-1">a591dfc085db3e9d4d480381cc7e6ae8a26b34af</hash>
        <hash alg="SHA-256">949ac95323bb13b4d9cde33ab1ca73f07a87e6e43cf76629e89fdd74d5b378e4</hash>
        <hash alg="SHA-512">7938bab4600cbcc13c78256295766c6f1172902db87794a3a14b7acebdfad5de2c69419978420ce32168ea26524919bcbb42018995de53da1a96ae9c30cef499</hash>
        <hash alg="SHA-384">4392856c7e46f7f9819281f84e21e6d42e285d89018608d60b8faea5629a7954ec0920a921d383d204ef9248befc2506</hash>
        <hash alg="SHA3-384">cfa4c707f935516c6cd2c3104c1659ea8c702059e94b3444fe6be17597a22cedf0c2cedd6fb416859c41d07e0d8e94df</hash>
        <hash alg="SHA3-256">43bc73ba83717fad2f3e68b20cec7497d980ae602a345015593ee9502c0eefad</hash>
        <hash alg="SHA3-512">92c004baeb94bfac2defcc04e1a6aaba6e1ba94e5fa8ac40a5bad71d8dd9be1af02b3e0f54a798e230efdccfbbaf995d18644e35b9dcd4d0e2aa73666d651859</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.curator/curator-client@2.7.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://curator.apache.org/curator-client</url></reference><reference type="build-system"><url>https://builds.apache.org/job/Curator/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/CURATOR</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/curator-user/</url></reference><reference type="vcs"><url>https://github.com/apache/curator.git/curator-client</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.htrace/htrace-core@3.1.0-incubating?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.htrace</group>
      <name>htrace-core</name>
      <version>3.1.0-incubating</version>
      <description>A tracing framework for use with distributed systems written in java</description>
      <hashes>
        <hash alg="MD5">c49a4662d691a09eed10e0a35dd73299</hash>
        <hash alg="SHA-1">f73606e7c9ede5802335c290bf47490ad6d51df3</hash>
        <hash alg="SHA-256">d96c869afaf65315ece8ca09673b187557e9dbaad31df24467a5aa759812188d</hash>
        <hash alg="SHA-512">4401a31494026fd46ca90a4fb111eb3cf1d3d2def294dccc131dab0927edd48b3b852d40b257424041b6bf3165f2684b4a6b45568ec7ab7ab59452f34fe756a0</hash>
        <hash alg="SHA-384">de9ecdbefc8ad5fb6a253bc8caecd99b252bfc0add781cbb9a646dd2ead203028a7bdafa0165f210f0c881bdb930fbcc</hash>
        <hash alg="SHA3-384">406a3c2841d32354a2da78a8aa3d35ba169f542248ef29e36053a26e3fa3bea271836bb0b9b66f35df8c9ad3c6102712</hash>
        <hash alg="SHA3-256">22e22ccc6263ab78370d08b33bfe7be9787dc67a1e1db64159317eec7c3d7c0e</hash>
        <hash alg="SHA3-512">5e3bbdf8fa1cdb2754290cd58180a0bf1b1934b264d2c058807952e04cefc6b56b8081d335782ddd8580c97e60124d447efaa4f6c2f6439c06bc48e67621205c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.htrace/htrace-core@3.1.0-incubating?type=jar</purl>
      <externalReferences><reference type="website"><url>http://incubator.apache.org/projects/htrace.html</url></reference><reference type="build-system"><url>https://builds.apache.org/view/H-L/view/HTrace/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/HTRACE</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/incubator-htrace-dev/</url></reference><reference type="vcs"><url>https://git-wip-us.apache.org/repos/asf?p=incubator-htrace.git/htrace-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.zookeeper/zookeeper@3.8.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.zookeeper</group>
      <name>zookeeper</name>
      <version>3.8.0</version>
      <description>ZooKeeper server</description>
      <hashes>
        <hash alg="MD5">7bc2ceca284b57d457ddcb450469f620</hash>
        <hash alg="SHA-1">e395c1d8a71557b7569cc6a83487b2e30e2e58fe</hash>
        <hash alg="SHA-256">5a6591c242acbd3cb04eb4afc6d218664c9708b5b7174535b1ed68e44346e55c</hash>
        <hash alg="SHA-512">2a50c5866067717fba518651dc492348e8f4be1070b0ce20db6e1e540c000a1f0802bd7ab8d657d9ae745201b440feabb7b31aee34b698008f1dce73d101cb0a</hash>
        <hash alg="SHA-384">bcbeb900e6604ce252b406e23ee7baea406b019b0d367bd049ae64797828bfb9946a1fcdce9d543ae4f6afebee407fcd</hash>
        <hash alg="SHA3-384">7baee72c135541bbefba9a27296fccd5adb9dafd80beb6e06021fd6f939436570fa802765105b501c5eb1aa388dbd02c</hash>
        <hash alg="SHA3-256">d9dcaa6f125a1c312e30b2e62da7e9e2d609dcec24f0760fa585a5dc4950985e</hash>
        <hash alg="SHA3-512">8476d3fbf7cfb98846eb6288204fc7f88a45fae0de9e8bd48ca907097e7b1fbe049b3ad9d39f7aafeb5149f9d7fceaf8d532dc7c1029982fbd0d84d72c91c4f4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.zookeeper/zookeeper@3.8.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://zookeeper.apache.org/zookeeper</url></reference><reference type="build-system"><url>https://ci-hadoop.apache.org/view/ZooKeeper/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/ZOOKEEPER</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/zookeeper-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf/zookeeper.git/zookeeper</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.zookeeper/zookeeper-jute@3.8.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.zookeeper</group>
      <name>zookeeper-jute</name>
      <version>3.8.0</version>
      <description>ZooKeeper jute</description>
      <hashes>
        <hash alg="MD5">c25d863dd13433f413028080c6e59f15</hash>
        <hash alg="SHA-1">6560f966bcf1aa78d27bcfa75fb6c4463a72c6c5</hash>
        <hash alg="SHA-256">2e390ceb0f128c519f2e0effa4d109102127517af9f11c5bb3f3f492b1dca9e1</hash>
        <hash alg="SHA-512">a93f5583e54479052e2b013348962b20f594409cf81e3af190769cf74e8f06410bbeb448439eb7c5b002929265fa42965cef8ad3d7972c9af4381e1341249fff</hash>
        <hash alg="SHA-384">b37078afae0977b70842e378136b4c28dbc46ff41fc0aba6f4e3d0b8fdb06b959a6a378421ebf076eb307c193fda1ced</hash>
        <hash alg="SHA3-384">47b5729c64261b291855c391293df2db402f36a39a3bd74cbe2a8f4e560080347e93caa914326fe78d07334f377661a5</hash>
        <hash alg="SHA3-256">2ab5bc287fcb20243907a847d644bc1db99344c2eba38082cb19d1f0836f8685</hash>
        <hash alg="SHA3-512">65e47b25eb064aabbaa8a36705ac1ac0e99bddb7402eefff0c0b130e222ea458b4aff4551f4f96ce8d6796d3b33aa908f25113b3fb8c0c802fb1250fb5fa3cc6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.zookeeper/zookeeper-jute@3.8.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://zookeeper.apache.org/zookeeper-jute</url></reference><reference type="build-system"><url>https://ci-hadoop.apache.org/view/ZooKeeper/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/ZOOKEEPER</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/zookeeper-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf/zookeeper.git/zookeeper-jute</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.yetus/audience-annotations@0.12.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.yetus</group>
      <name>audience-annotations</name>
      <version>0.12.0</version>
      <description>Annotations for defining API boundaries and tools for managing javadocs</description>
      <hashes>
        <hash alg="MD5">76ba71bbe18c4724d96bec68bbe12ff1</hash>
        <hash alg="SHA-1">e0efa60318229590103e31c69ebdaae56d903644</hash>
        <hash alg="SHA-256">ffb101fc066360ff3c77457c927fd7967fb096a6ee9e046ab7071447d8208efc</hash>
        <hash alg="SHA-512">264a5251272ec55eca1fae5a8fb9336d1eca1ee3bfb586d1ebc382fcfd37077c21cbfa9e198daf4e1eebe9f6fa90487bec2f85bc1c55cf5666cbbfc4d18b1715</hash>
        <hash alg="SHA-384">f936d92b5c3b3c88428fc7452871e4df112935dd25356396d15deb73dd39790f45909a3d14f038e9f585cee79622ad47</hash>
        <hash alg="SHA3-384">67ca97a525d98c3dab9ffda40e11d6c683f6f4208ae4a5b28dbd3e2b8b37187dfdcd1d9b89222dc69e5b84ac212f4428</hash>
        <hash alg="SHA3-256">fd99b55afe40884b5f6cfd9ffbdcd07fa32833443dead288390ca8e737dd3337</hash>
        <hash alg="SHA3-512">4aaece7bdadc2c2d9660b16345218cfc68a2ea344374d0ffbcdcc3722ff6be5f06c92231ae68ec3884f1aa9b99956cb5135b4060c5457f463251f3767003ad20</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.yetus/audience-annotations@0.12.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://yetus.apache.org/audience-annotations</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/YETUS</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/yetus-dev/</url></reference><reference type="vcs"><url>https://github.com/apache/yetus.git/audience-annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-tcnative@2.0.48.Final?type=jar">
      <group>io.netty</group>
      <name>netty-tcnative</name>
      <version>2.0.48.Final</version>
      <description>A Mavenized fork of Tomcat Native which incorporates various patches. This artifact is dynamically linked
    to OpenSSL and Apache APR.</description>
      <hashes>
        <hash alg="MD5">6dc40887f925eb5546bd03f9507acd7e</hash>
        <hash alg="SHA-1">83fb2aa2c4e1e5998aa67084581772ccc2f0156e</hash>
        <hash alg="SHA-256">3ca1e47569d7a76cbdc4265f32ec6ab1b117e99dfbfd4891c22683ba6ab639ff</hash>
        <hash alg="SHA-512">78e75796e95d8d4ced042548f4987e00470fb2f097eb10529334e9dcfe0bfc5b2616e778c0edeeb29affdcb3e23b7d60a63f246a4f4574b7ee5cc2b58725df9f</hash>
        <hash alg="SHA-384">bb928140edf1857cad025e58fc330a9fa251db758b9d8bb8371f02fe81fb5e5a357113a62c3a97e257f94bfdde762520</hash>
        <hash alg="SHA3-384">57b0e04606a144bf6b01b610e200be1396e5141f3f35a481cd23b4be4e9adf074d594ea8b91c45948ac0253af3cfbf48</hash>
        <hash alg="SHA3-256">03aa5724338a55750e695868ff00d96f91a97ddf5a07871dea79c3bbf10bd83a</hash>
        <hash alg="SHA3-512">1e330253995b2410a88fb6041fb4e28c7fe908ffdc2ebbe777a88cd3b9002debf5580c3ba6f5a01f0835757b4c05a88e0d4cf9838d794ff3254017c1ac94548a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-tcnative@2.0.48.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/netty/netty-tcnative/netty-tcnative/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty-tcnative/netty-tcnative</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-tcnative-classes@2.0.48.Final?type=jar">
      <group>io.netty</group>
      <name>netty-tcnative-classes</name>
      <version>2.0.48.Final</version>
      <description>A Mavenized fork of Tomcat Native which incorporates various patches. This artifact is dynamically linked
    to OpenSSL and Apache APR.</description>
      <hashes>
        <hash alg="MD5">4e1a32059d976d18d20adc93e87a8e07</hash>
        <hash alg="SHA-1">9f62346df2f103045cad6f9416e2925a32ee8709</hash>
        <hash alg="SHA-256">d4fd61bb23ad675ae62ed3ea2e015f548d886439b676589115d3536180c2d0d1</hash>
        <hash alg="SHA-512">b29ffaf6230705ebdd15c256f2a38b86aca713c0216b9d93f02b9eaa001af8bcd13d921bc324a20d26b8963fac6c4d87347d6f17a44796e146fd1d299e8b13c2</hash>
        <hash alg="SHA-384">7312d2668d0f8ac2a5d986a2fa5783d3f1874ea6ce29ab8f50acea4410bd9d955c4a3de6184a8052797fb542eb7a6a22</hash>
        <hash alg="SHA3-384">6882b074cd1c1b41819cacdb06f1667fbd5ff4f1065dad91af296a4351d77a3794a635f14aefa3b377481178afeb4d72</hash>
        <hash alg="SHA3-256">42f3f07ad039772bf2f8ee2ba96d99a989d117705fdce41c6f2e3a918ea82137</hash>
        <hash alg="SHA3-512">cbc14b3e840e63e28b8626b9a82fbde903a8ca86363088e4db9586505877fa87da08c29be9d0f6ad6fcf48f95a13f7924cb36ca5166c5f4c9423b86e7f44c4e1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-tcnative-classes@2.0.48.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/netty/netty-tcnative/netty-tcnative-classes/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty-tcnative/netty-tcnative-classes</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/ch.qos.logback/logback-core@1.2.10?type=jar">
      <publisher>QOS.ch</publisher>
      <group>ch.qos.logback</group>
      <name>logback-core</name>
      <version>1.2.10</version>
      <description>logback-core module</description>
      <hashes>
        <hash alg="MD5">697b37f140ce9ac35a4ca3eaf4059f1a</hash>
        <hash alg="SHA-1">5328406bfcae7bcdcc86810fcb2920d2c297170d</hash>
        <hash alg="SHA-256">ba51a3fe56691f9dd7fe742e4a73c3ab4aaaa32202c73409ba56f18687399a08</hash>
        <hash alg="SHA-512">8dd5175ab32120dccd48e44166f9f35df389385ac808b5ef18d43bd2ef98e43d440d982155f231883a963994644d4c0baf701ef6fd1ace2c6dab13f98d8c9d53</hash>
        <hash alg="SHA-384">452313d0e5ee35aef136e7db604d58cf782009d4bc0f0bbf25ac5c314377b7c2db72f8ff1cfa9095f7808ca6ed36946a</hash>
        <hash alg="SHA3-384">950e06a6924ce4cc42453ce1a32f374d005e4a9d7806ad793b2f048ee85950a8959d791e2b9e8aca30a88baaffcb15a8</hash>
        <hash alg="SHA3-256">4ddba3741c4a84d14d9ffde6642e6310b494d9bc2bbab4634abab91e3519d47f</hash>
        <hash alg="SHA3-512">7f13a15dd9634a48a8613f6f2670c97f8c84daa71399b4f81f22f23ab9583142dc723efa185c46dc60bc4a086e6de9681e1b296254c1f211e9e55a20be916207</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-1.0</id>
        </license>
        <license>
          <name>GNU Lesser General Public License</name>
          <url>http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/ch.qos.logback/logback-core@1.2.10?type=jar</purl>
      <externalReferences><reference type="website"><url>http://logback.qos.ch/logback-core</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/ceki/logback/logback-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/ch.qos.logback/logback-classic@1.2.10?type=jar">
      <publisher>QOS.ch</publisher>
      <group>ch.qos.logback</group>
      <name>logback-classic</name>
      <version>1.2.10</version>
      <description>logback-classic module</description>
      <hashes>
        <hash alg="MD5">98021917df75e0a36d0398f7352e5e4f</hash>
        <hash alg="SHA-1">f69d97ef3335c6ab82fc21dfb77ac613f90c1221</hash>
        <hash alg="SHA-256">3160ae988af82c8bf3024ddbe034a82da98bb186fd09e76c50543c5b9da5cc5e</hash>
        <hash alg="SHA-512">8718b07d2629d89df0131b44df0ca7ace79a30ec43871fa9f004273fc9327ebd7ae8ac658daaa9e808e9bc3e0660c40dd8ce5bbd197d24e9b868f26e32957734</hash>
        <hash alg="SHA-384">a2bdcf38059b68cba0aacc900f43152f1e32c87a49c9e16fedf3aa5b4af22ffa967ea86d1888a437753a2a9428e5cdd5</hash>
        <hash alg="SHA3-384">d9145625cc0a9b4b69bd5c3afcdd0794ae028feb6b25893ce3474507eacb8b407aa43ea8c117d26c769a0822d22440d0</hash>
        <hash alg="SHA3-256">27e4f71d24e48ea7b77506a7462fcbcb54ef0a85ffa90053f764c698c18296a5</hash>
        <hash alg="SHA3-512">5efeeee2da064fcb14d351848f9e4c1ba44e09f562de48f4f1910d4d5005507055c707bf14f3014d88098be6ff1337dc044ea315798d6be28b75220dce36d1b7</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-1.0</id>
        </license>
        <license>
          <name>GNU Lesser General Public License</name>
          <url>http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/ch.qos.logback/logback-classic@1.2.10?type=jar</purl>
      <externalReferences><reference type="website"><url>http://logback.qos.ch/logback-classic</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/ceki/logback/logback-classic</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-compress@1.4.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-compress</name>
      <version>1.4.1</version>
      <description>Apache Commons Compress software defines an API for working with compression and archive formats.
These include: bzip2, gzip, pack200, xz and ar, cpio, jar, tar, zip, dump.</description>
      <hashes>
        <hash alg="MD5">7f7ff9255a831325f38a170992b70073</hash>
        <hash alg="SHA-1">b02e84a993d88568417536240e970c4b809126fd</hash>
        <hash alg="SHA-256">28a00d80716f073d644b9da76e94b5e8ff94de8e9323f06f558fba653fcf5f86</hash>
        <hash alg="SHA-512">ac314af8e0d402a002b71797d0a96760f114c43873956d9650d2039fd6e2c0a9b48e2d4b1bffb9ec26094226d680c332d82c4bc23fc06ae4a9777a23db432070</hash>
        <hash alg="SHA-384">6ec5c569bd1c58ca8950ebeb213f31b4bd12f7f938f4677df93e9c555e80e41265b52c592a34e3bc3cad83006be56377</hash>
        <hash alg="SHA3-384">bcf867bd66c99217e918fdd3ddd2b81eb1bc2e5ed73df7a86f9d46b6817e83c4672cc6656d6ab83abbde75490f2c46fa</hash>
        <hash alg="SHA3-256">83c7586f5c0774854a5d9b72868429685a5fe4ef047e8c9d0b5abeea19a44625</hash>
        <hash alg="SHA3-512">96d8329532d0dc014a5b484a6bb4b21b028599b9b3c4696729f6971e622aff70862b54ed2a9e487996cd7650923a0f992d64551633c82f66ad80f2da907a27b4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-compress@1.4.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/compress/</url></reference><reference type="build-system"><url>http://vmbuild.apache.org/continuum/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/COMPRESS</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>http://svn.apache.org/repos/asf/commons/proper/compress/trunk</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.hadoop/hadoop-hdfs@2.7.3?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.hadoop</group>
      <name>hadoop-hdfs</name>
      <version>2.7.3</version>
      <description>Apache Hadoop HDFS</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2d91eee26b2b99c92d7bfb312daedb7e</hash>
        <hash alg="SHA-1">524d360c632c8cbe788b5411b00ed00770e52c3e</hash>
        <hash alg="SHA-256">31c486a5f7df9d28a4a0951e3837d7fa7091b3cf86847011c09c2fc445f43fc6</hash>
        <hash alg="SHA-512">44a41e52cac12d245b71997947190755a2f7b191bc5e4df33897919bf289e71de4f03caf2afed310687ac7c5ea1053da6b51010e43007722d5b1cb5e88e87912</hash>
        <hash alg="SHA-384">fde10955dc6332f82b43dc57d33e982011625b8edb2b4be0d3969296d7ab178d2f58ed9a6f37f47cf1883e7e3bf29194</hash>
        <hash alg="SHA3-384">a0adedc8047854974d23c6ee786cb1f760a93c16d220b6c75e395dd0467146587376d669a572a41ad55b23a8d9c6494d</hash>
        <hash alg="SHA3-256">e3bb718a3b15fec11629b1a2614c98dfe55b2ef2119d654d6a9bbe1c70b142b3</hash>
        <hash alg="SHA3-512">04b78fb49c827e1645a8b0620a32fa9bf172ada6ff9786c263c2acc27f4e1d0f7c506dfd2e49626d51b677e35cfddc70b5d3946c18ae64191309cb5588a52d76</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hadoop/hadoop-hdfs@2.7.3?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-all@4.0.23.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-all</name>
      <version>4.0.23.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for 
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <hashes>
        <hash alg="MD5">4725826ca7ba3713db6748ee8f3906c3</hash>
        <hash alg="SHA-1">0294104aaf1781d6a56a07d561e792c5d0c95f45</hash>
        <hash alg="SHA-256">50510e9c9874b539b98ef931fe7eeeb002f6b5b1976ea37669b9493426294561</hash>
        <hash alg="SHA-512">80fcf9653620a614fb444d039c8bd8c195db25cb16f39ccccd87c1434fbc836c66f792e7717cc989b66d57c0a86365b8ae051c107916c231d4ecd0b4d2908490</hash>
        <hash alg="SHA-384">66461a564b0e5317ae9bf1312f44d38552df1031d09bf708f372e1347e1766b38e172d52b109910c48d2c00cbc22983f</hash>
        <hash alg="SHA3-384">0bb7432979790361593d765b5c2a5f980dd5ab3bea78ff993e5581af57e66730433ad705d3522b81af2543296a1664d7</hash>
        <hash alg="SHA3-256">edea8154210dc83a268c41b4848a6122e7fd403724014ad02a8bd19f4c3729a6</hash>
        <hash alg="SHA3-512">0f92679d3109394c0a8c32a71fb40d5d49955f7470077d8bdc766e6e4de9eb216afb8f09183644c2b6a44589553332ae77687c51fd0bbe3c2702a47dc73607fd</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-all@4.0.23.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>http://netty.io/netty-all/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty/netty-all</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>1.7.36</version>
      <description>The slf4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">872da51f5de7f3923da4de871d57fd85</hash>
        <hash alg="SHA-1">6c62681a2f655b49963a5983b8b0950a6120ae14</hash>
        <hash alg="SHA-256">d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0</hash>
        <hash alg="SHA-512">f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b</hash>
        <hash alg="SHA-384">2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a</hash>
        <hash alg="SHA3-384">3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b</hash>
        <hash alg="SHA3-256">ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881</hash>
        <hash alg="SHA3-512">14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.slf4j.org</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j/slf4j-api</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.orc/orc-shims@1.8.9?type=jar">
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-common@2.7.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-hdfs@2.7.3?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.hadoop/hadoop-common@2.7.3?type=jar">
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-annotations@2.7.3?type=jar"/>
      <dependency ref="pkg:maven/commons-cli/commons-cli@1.5.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-math3@3.1.1?type=jar"/>
      <dependency ref="pkg:maven/xmlenc/xmlenc@0.52?type=jar"/>
      <dependency ref="pkg:maven/commons-httpclient/commons-httpclient@3.1?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.4?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.4?type=jar"/>
      <dependency ref="pkg:maven/commons-net/commons-net@3.1?type=jar"/>
      <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
      <dependency ref="pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar"/>
      <dependency ref="pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar"/>
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"/>
      <dependency ref="pkg:maven/log4j/log4j@1.2.17?type=jar"/>
      <dependency ref="pkg:maven/commons-lang/commons-lang@2.6?type=jar"/>
      <dependency ref="pkg:maven/commons-configuration/commons-configuration@1.6?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-log4j12@1.7.10?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.13?type=jar"/>
      <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@3.17.3?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.gson/gson@2.9.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-auth@2.7.3?type=jar"/>
      <dependency ref="pkg:maven/com.jcraft/jsch@0.1.42?type=jar"/>
      <dependency ref="pkg:maven/org.apache.curator/curator-client@2.7.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.htrace/htrace-core@3.1.0-incubating?type=jar"/>
      <dependency ref="pkg:maven/org.apache.zookeeper/zookeeper@3.8.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.4.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.hadoop/hadoop-annotations@2.7.3?type=jar"/>
    <dependency ref="pkg:maven/commons-cli/commons-cli@1.5.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-math3@3.1.1?type=jar"/>
    <dependency ref="pkg:maven/xmlenc/xmlenc@0.52?type=jar"/>
    <dependency ref="pkg:maven/commons-httpclient/commons-httpclient@3.1?type=jar">
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"/>
    <dependency ref="pkg:maven/commons-codec/commons-codec@1.4?type=jar"/>
    <dependency ref="pkg:maven/commons-io/commons-io@2.4?type=jar"/>
    <dependency ref="pkg:maven/commons-net/commons-net@3.1?type=jar"/>
    <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
    <dependency ref="pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar"/>
    <dependency ref="pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar">
      <dependency ref="pkg:maven/asm/asm@3.1?type=jar"/>
      <dependency ref="pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/asm/asm@3.1?type=jar"/>
    <dependency ref="pkg:maven/log4j/log4j@1.2.17?type=jar"/>
    <dependency ref="pkg:maven/commons-lang/commons-lang@2.6?type=jar"/>
    <dependency ref="pkg:maven/commons-configuration/commons-configuration@1.6?type=jar">
      <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
      <dependency ref="pkg:maven/commons-lang/commons-lang@2.6?type=jar"/>
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    <dependency ref="pkg:maven/org.slf4j/slf4j-log4j12@1.7.10?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/log4j/log4j@1.2.17?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar"/>
    <dependency ref="pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.13?type=jar">
      <dependency ref="pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@3.17.3?type=jar"/>
    <dependency ref="pkg:maven/com.google.code.gson/gson@2.9.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.hadoop/hadoop-auth@2.7.3?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.4?type=jar"/>
      <dependency ref="pkg:maven/log4j/log4j@1.2.17?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-log4j12@1.7.10?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpclient@4.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.directory.server/apacheds-kerberos-codec@2.0.0-M15?type=jar"/>
      <dependency ref="pkg:maven/org.apache.zookeeper/zookeeper@3.8.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.curator/curator-framework@2.7.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.httpcomponents/httpclient@4.2.5?type=jar">
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpcore@4.2.4?type=jar"/>
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.httpcomponents/httpcore@4.2.4?type=jar"/>
    <dependency ref="pkg:maven/org.apache.directory.server/apacheds-kerberos-codec@2.0.0-M15?type=jar">
      <dependency ref="pkg:maven/org.apache.directory.server/apacheds-i18n@2.0.0-M15?type=jar"/>
      <dependency ref="pkg:maven/org.apache.directory.api/api-asn1-api@1.0.0-M20?type=jar"/>
      <dependency ref="pkg:maven/org.apache.directory.api/api-util@1.0.0-M20?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.directory.server/apacheds-i18n@2.0.0-M15?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.directory.api/api-asn1-api@1.0.0-M20?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.directory.api/api-util@1.0.0-M20?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.zookeeper/zookeeper@3.8.0?type=jar">
      <dependency ref="pkg:maven/org.apache.zookeeper/zookeeper-jute@3.8.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.yetus/audience-annotations@0.12.0?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-tcnative@2.0.48.Final?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/ch.qos.logback/logback-core@1.2.10?type=jar"/>
      <dependency ref="pkg:maven/ch.qos.logback/logback-classic@1.2.10?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.zookeeper/zookeeper-jute@3.8.0?type=jar">
      <dependency ref="pkg:maven/org.apache.yetus/audience-annotations@0.12.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.yetus/audience-annotations@0.12.0?type=jar"/>
    <dependency ref="pkg:maven/io.netty/netty-tcnative@2.0.48.Final?type=jar">
      <dependency ref="pkg:maven/io.netty/netty-tcnative-classes@2.0.48.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.netty/netty-tcnative-classes@2.0.48.Final?type=jar"/>
    <dependency ref="pkg:maven/ch.qos.logback/logback-core@1.2.10?type=jar"/>
    <dependency ref="pkg:maven/ch.qos.logback/logback-classic@1.2.10?type=jar">
      <dependency ref="pkg:maven/ch.qos.logback/logback-core@1.2.10?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.curator/curator-framework@2.7.1?type=jar">
      <dependency ref="pkg:maven/org.apache.curator/curator-client@2.7.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.zookeeper/zookeeper@3.8.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.curator/curator-client@2.7.1?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/org.apache.zookeeper/zookeeper@3.8.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.jcraft/jsch@0.1.42?type=jar"/>
    <dependency ref="pkg:maven/org.apache.htrace/htrace-core@3.1.0-incubating?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.4.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.hadoop/hadoop-hdfs@2.7.3?type=jar">
      <dependency ref="pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar"/>
      <dependency ref="pkg:maven/commons-cli/commons-cli@1.5.0?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.4?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.4?type=jar"/>
      <dependency ref="pkg:maven/commons-lang/commons-lang@2.6?type=jar"/>
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"/>
      <dependency ref="pkg:maven/log4j/log4j@1.2.17?type=jar"/>
      <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@3.17.3?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.13?type=jar"/>
      <dependency ref="pkg:maven/xmlenc/xmlenc@0.52?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-all@4.0.23.Final?type=jar"/>
      <dependency ref="pkg:maven/org.apache.htrace/htrace-core@3.1.0-incubating?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.netty/netty-all@4.0.23.Final?type=jar"/>
  </dependencies>
</bom>
