<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:2648d00d-d0ab-3a53-818b-edd029e23131" version="1" xmlns="http://cyclonedx.org/schema/bom/1.6">
  <metadata>
    <lifecycles>
      <lifecycle>
        <phase>build</phase>
      </lifecycle>
    </lifecycles>
    <tools>
      <components>
        <component type="library">
          <author>OWASP Foundation</author>
          <group>org.cyclonedx</group>
          <name>cyclonedx-maven-plugin</name>
          <version>2.9.1</version>
          <description>CycloneDX Maven plugin</description>
          <hashes>
            <hash alg="MD5">9c7a565cf28cce58557d0c621c5ea4b1</hash>
            <hash alg="SHA-1">be882d5a22050bfa9d19090b1420c188617d0e1c</hash>
            <hash alg="SHA-256">698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249</hash>
            <hash alg="SHA-512">c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0</hash>
            <hash alg="SHA-384">d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb</hash>
          </hashes>
        </component>
      </components>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.ozone/hdds-common@2.0.0?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.ozone</group>
      <name>hdds-common</name>
      <version>2.0.0</version>
      <description>Apache Ozone Distributed Data Store Common</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ozone/hdds-common@2.0.0?type=jar</purl>
      <externalReferences>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
      </externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
      <property name="cdx:reproducible">enabled</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.16.2?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-annotations</name>
      <version>2.16.2</version>
      <description>Core annotations used for value types, used by Jackson data binding package.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ecd24b22f8b55a6374e1bfe8ab261da7</hash>
        <hash alg="SHA-1">dfcd11c847ea7276aa073c25f5fe8ee361748d7f</hash>
        <hash alg="SHA-256">d1cdd269ebaa753d1842933194e17d61958f058952d63e03dbfb3d1d78a6926e</hash>
        <hash alg="SHA-512">b6e738aed5fd4fa9b3040ffa652593ab29133c8bd603dde9adf8897b52e9c3746cae4df778df6d25ef9fb5aa8ab01832985edccc0213d5e6d7aae63bf9a322ca</hash>
        <hash alg="SHA-384">7c8c1f2269a17de92afa173ffd36b36214dd3de83408492d81a9655eb840bc697cf005509585f9ca7216c5ca75aa2448</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.16.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/FasterXML/jackson</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/FasterXML/jackson-annotations/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/FasterXML/jackson-annotations</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.16.2?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-core</name>
      <version>2.16.2</version>
      <description>Core Jackson processing abstractions (aka Streaming API), implementation for JSON</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">64594fea116c698c9612ffba8e94d7b4</hash>
        <hash alg="SHA-1">b4f588bf070f77b604c645a7d60b71eae2e6ea09</hash>
        <hash alg="SHA-256">4f43e2f1430b2d2413e8e5a3d79138e57e891d6a961b18c28ac90859639d8664</hash>
        <hash alg="SHA-512">0af7b5ae2cc984363b240c52f4c9b0a4c6faf4523f04d9c19c05a5a76a0c2c79375abcb696f0439fe757fceff7c62b0db26250bc96535cfae7fa00be1754a9f9</hash>
        <hash alg="SHA-384">c7b9081029b1130ca773b91118fdeb02787bac56d21019e90d23183ef5f540225d98ca87cc6090c658cd9b6c45129e3a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-core@2.16.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/FasterXML/jackson-core</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/FasterXML/jackson-core/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/FasterXML/jackson-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.16.2?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-databind</name>
      <version>2.16.2</version>
      <description>General data-binding functionality for Jackson: works on core streaming API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d568de5ecd0dbe050ef3d386a6a48039</hash>
        <hash alg="SHA-1">7fda67535b54d74eebf6157682b835c847410932</hash>
        <hash alg="SHA-256">53b6025d98c357068296e4b134242443a248c2c582800879f1c4ea93b54bafa6</hash>
        <hash alg="SHA-512">600775da71f9900e2de9fad3a8925dc1d70ae6c25d7f38123ca5b6e394ed52d813fceb15d6593dbeaab17c95640854268f7d09b1e7194d876125da6897af3b40</hash>
        <hash alg="SHA-384">836c997ffa9fe32d2b761d3e7e182b705bb6e05b39467fe72708c738b2d90ccd59f54744bb7791f5552299b5dd699d17</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.16.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/FasterXML/jackson</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/FasterXML/jackson-databind/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/FasterXML/jackson-databind</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.16.2?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.datatype</group>
      <name>jackson-datatype-jsr310</name>
      <version>2.16.2</version>
      <description>Add-on module to support JSR-310 (Java 8 Date &amp; Time API) data types.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">17b881ce122838518321585edd2e8586</hash>
        <hash alg="SHA-1">58e86108e4b1b1e893e7a69b1bbca880acfca143</hash>
        <hash alg="SHA-256">9d03ad6d47b5f9951b75fb0cae0760156fa827794730cd5ef6cd79d3785cc9c0</hash>
        <hash alg="SHA-512">73f390906d3ed85f45b21f9b3914ce0ed995a755421ea9a6ed4c38c60ef1b9f11c4c32098ccb863019d85b2be8153e3b2acf59a0a37d38810b09032ca23bbe69</hash>
        <hash alg="SHA-384">bfa5720a01dfe56dbd8a912703d4d743d6f1b9f90c73c1c5cac74e39a59af3f11e6779ae0a74ddbb672cac83c166e6db</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.16.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jsr310</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/FasterXML/jackson-modules-java8/issues</url>
        </reference>
        <reference type="vcs">
          <url>http://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jsr310</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar">
      <group>com.github.stephenc.jcip</group>
      <name>jcip-annotations</name>
      <version>1.0-1</version>
      <description>A clean room implementation of the JCIP Annotations based entirely on the specification provided by the javadocs.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d62dbfa8789378457ada685e2f614846</hash>
        <hash alg="SHA-1">ef31541dd28ae2cefdd17c7ebf352d93e9058c63</hash>
        <hash alg="SHA-256">4fccff8382aafc589962c4edb262f6aa595e34f1e11e61057d1c6a96e8fc7323</hash>
        <hash alg="SHA-512">02fcd16a30d0e68b3e9e4899731181c6abb7117baa15c096ca940e01dde08bb86101cbeae552c497f8a90d923b5fa2f2b6f3850baf8dc94dbd399887924a9069</hash>
        <hash alg="SHA-384">88b0ecfde391a3d8468349c70e1539569768dfac3233dfe0b4660904df04e6c6bf26ed9c0784b9b22c122c3448e2a6b6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://stephenc.github.com/jcip-annotations</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://github.com/stephenc/jcip-annotations/issues</url>
        </reference>
        <reference type="vcs">
          <url>http://github.com/stephenc/jcip-annotations/tree/master/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.29.2?type=jar">
      <publisher>Google LLC</publisher>
      <group>com.google.errorprone</group>
      <name>error_prone_annotations</name>
      <version>2.29.2</version>
      <description>Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">5f6247dcc6ee86c5ebbe960d4a212472</hash>
        <hash alg="SHA-1">23bbed35f2d071c8507984834e3e6438c7fee7d2</hash>
        <hash alg="SHA-256">e0a426b2449af2323cfb539b729e5be6f4d65c72075c9b7b18c8e87e63ac468c</hash>
        <hash alg="SHA-512">30c2a1c24014df0969b87ac75574e14a95eb9f8f9b1531a17e6e8ced1a79c05081c468daab06ab41e6181e5d77cc65a7ef752d5e12ac371e16d3009099522a2d</hash>
        <hash alg="SHA-384">01106269724d568a8f1a3aed1fcc759e1cf3eb9c91114ecb3021273ee6036dec58a2f27567d933ca1e9f36212636f7e4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.errorprone/error_prone_annotations@2.29.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://errorprone.info/error_prone_annotations</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/google/error-prone/error_prone_annotations</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.guava/guava@32.1.3-jre?type=jar">
      <group>com.google.guava</group>
      <name>guava</name>
      <version>32.1.3-jre</version>
      <description>Guava is a suite of core and expanded libraries that include
    utility classes, Google's collections, I/O classes, and
    much more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">adc3cf557a48d15cb71be90948558923</hash>
        <hash alg="SHA-1">0f306708742ce2bf0fb0901216183bc14073feae</hash>
        <hash alg="SHA-256">6d4e2b5a118aab62e6e5e29d185a0224eed82c85c40ac3d33cf04a270c3b3744</hash>
        <hash alg="SHA-512">f575321aa79046f2c12bdf9895db7e235cbaaa8e913389ae48ec4bb5f387d6bf066ed98c5f2c7854bf0c56bb38b59b005ca3c16d68e314743491a223a18cee47</hash>
        <hash alg="SHA-384">efd979f8c807eb973c7bb2edcede11c2881db4232147bb94069701fc002b1c336651aa3347858e3ba25cb89f3df69428</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.guava/guava@32.1.3-jre?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/google/guava</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/google/guava/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/google/guava/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/google/guava/guava</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar">
      <group>com.google.guava</group>
      <name>failureaccess</name>
      <version>1.0.1</version>
      <description>Contains
    com.google.common.util.concurrent.internal.InternalFutureFailureAccess and
    InternalFutures. Most users will never need to use this artifact. Its
    classes is conceptually a part of Guava, but they're in this separate
    artifact so that Android libraries can use them without pulling in all of
    Guava (just as they can use ListenableFuture by depending on the
    listenablefuture artifact).</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">091883993ef5bfa91da01dcc8fc52236</hash>
        <hash alg="SHA-1">1dcf1de382a0bf95a3d8b0849546c88bac1292c9</hash>
        <hash alg="SHA-256">a171ee4c734dd2da837e4b16be9df4661afab72a41adaf31eb84dfdaf936ca26</hash>
        <hash alg="SHA-512">f8d59b808d6ba617252305b66d5590937da9b2b843d492d06b8d0b1b1f397e39f360d5817707797b979a5bf20bf21987b35333e7a15c44ed7401fea2d2119cae</hash>
        <hash alg="SHA-384">67659dbd9647ec303d7f15128dc9dba19b98fd8d74758ee3b602451e32c855e236ccaafe08edf4bbfa245f981268440f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/google/guava/failureaccess</url>
        </reference>
        <reference type="build-system">
          <url>https://travis-ci.org/google/guava</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/google/guava/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/google/guava/failureaccess</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar">
      <group>com.google.guava</group>
      <name>listenablefuture</name>
      <version>9999.0-empty-to-avoid-conflict-with-guava</version>
      <description>An empty artifact that Guava depends on to signal that it is providing
    ListenableFuture -- but is also available in a second "version" that
    contains com.google.common.util.concurrent.ListenableFuture class, without
    any other Guava classes. The idea is:

    - If users want only ListenableFuture, they depend on listenablefuture-1.0.

    - If users want all of Guava, they depend on guava, which, as of Guava
    27.0, depends on
    listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-...
    version number is enough for some build systems (notably, Gradle) to select
    that empty artifact over the "real" listenablefuture-1.0 -- avoiding a
    conflict with the copy of ListenableFuture in guava itself. If users are
    using an older version of Guava or a build system other than Gradle, they
    may see class conflicts. If so, they can solve them by manually excluding
    the listenablefuture artifact or manually forcing their build systems to
    use 9999.0-....</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d094c22570d65e132c19cea5d352e381</hash>
        <hash alg="SHA-1">b421526c5f297295adef1c886e5246c39d4ac629</hash>
        <hash alg="SHA-256">b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99</hash>
        <hash alg="SHA-512">c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f</hash>
        <hash alg="SHA-384">caff9b74079f95832ca7f6029346b34b606051cc8c5a4389fac263511d277ada0c55f28b0d43011055b268c6eb7184d5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/google/guava/listenablefuture</url>
        </reference>
        <reference type="build-system">
          <url>https://travis-ci.org/google/guava</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/google/guava/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/google/guava/listenablefuture</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.checkerframework/checker-qual@3.37.0?type=jar">
      <group>org.checkerframework</group>
      <name>checker-qual</name>
      <version>3.37.0</version>
      <description>checker-qual contains annotations (type qualifiers) that a programmer
writes to specify Java code for type-checking by the Checker Framework.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1ff1eed173ff9d6f208d0a5be8f5623d</hash>
        <hash alg="SHA-1">ba74746d38026581c12166e164bb3c15e90cc4ea</hash>
        <hash alg="SHA-256">e4ce1376cc2735e1dde220b62ad0913f51297704daad155a33f386bc5db0d9f7</hash>
        <hash alg="SHA-512">98f92a4d14b77f2946de34bc64bc0068505ba8893a734e52f6458e3061fc7471bd5a60c073c938302b7b78d51205929134207abc24f0edadd3db1e1f57755de5</hash>
        <hash alg="SHA-384">6a586fa9ead4d6edeb5e73a98af109dca2bf95e950c3c4862773f40e2eed5ea80208021f187fe717963027f7ea2bb489</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.checkerframework/checker-qual@3.37.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://checkerframework.org/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/typetools/checker-framework.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar">
      <group>com.google.j2objc</group>
      <name>j2objc-annotations</name>
      <version>2.8</version>
      <description>A set of annotations that provide additional information to the J2ObjC
    translator to modify the result of translation.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c50af69b704dc91050efb98e0dff66d1</hash>
        <hash alg="SHA-1">c85270e307e7b822f1086b93689124b89768e273</hash>
        <hash alg="SHA-256">f02a95fa1a5e95edb3ed859fd0fb7df709d121a35290eff8b74dce2ab7f4d6ed</hash>
        <hash alg="SHA-512">f8263868a792b41707c9e7fe6fa5650a14cd93fbeafad20efe3772a3058fc933eb59782ec59e6eb9b9c569aa96da80134ae9fdf7547b69c44a97087efddceeff</hash>
        <hash alg="SHA-384">e6087ec31fec8289158496ad2ed6ce8472d5d513808a312e0782cedac3b86c37a62a63c0b5ea3839491d109fe9e148a1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/google/j2objc/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>http://svn.sonatype.org/spice/trunk/oss/oss-parent-9/j2objc-annotations</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.protobuf/protobuf-java@2.5.0?type=jar">
      <publisher>Google</publisher>
      <group>com.google.protobuf</group>
      <name>protobuf-java</name>
      <version>2.5.0</version>
      <description>Protocol Buffers are a way of encoding structured data in an efficient yet
    extensible format.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a44473b98947e2a54c54e0db1387d137</hash>
        <hash alg="SHA-1">a10732c76bfacdbd633a7eb0f7968b1059a65dfa</hash>
        <hash alg="SHA-256">e0c1c64575c005601725e7c6a02cebf9e1285e888f756b2a1d73ffa8d725cc74</hash>
        <hash alg="SHA-512">10ea0baf440c78598eee2bff3742bc2f41b7e67847f8bb43a1f154d7649853ebd9eb86288aab65f4d1a196f4586bab16b656ec7940ec92a57b1c117b8f59abac</hash>
        <hash alg="SHA-384">33ad6e25b942b4076c8b9dfcc0aae8ca802b9028aa9939f86e4752b4847b35fb486f6d3efa81d38ad1edcbec6e614494</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.protobuf/protobuf-java@2.5.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://code.google.com/p/protobuf</url>
        </reference>
        <reference type="distribution-intake">
          <url>dav:https://google-maven-repository.googlecode.com/svn/repository/</url>
        </reference>
        <reference type="vcs">
          <url>http://code.google.com/p/protobuf/source/browse</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-collections</group>
      <name>commons-collections</name>
      <version>3.2.2</version>
      <description>Types that extend and augment the Java Collections Framework.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f54a8510f834a1a57166970bfc982e94</hash>
        <hash alg="SHA-1">8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5</hash>
        <hash alg="SHA-256">eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8</hash>
        <hash alg="SHA-512">51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16</hash>
        <hash alg="SHA-384">dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-collections/commons-collections@3.2.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://commons.apache.org/collections/</url>
        </reference>
        <reference type="build-system">
          <url>https://continuum-ci.apache.org/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://issues.apache.org/jira/browse/COLLECTIONS</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>http://svn.apache.org/viewvc/commons/proper/collections/trunk</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-io/commons-io@2.18.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-io</group>
      <name>commons-io</name>
      <version>2.18.0</version>
      <description>The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8cce74ccf461cd6502ae04c908eca917</hash>
        <hash alg="SHA-1">44084ef756763795b31c578403dd028ff4a22950</hash>
        <hash alg="SHA-256">f3ca0f8d63c40e23a56d54101c60d5edee136b42d84bfb85bc7963093109cf8b</hash>
        <hash alg="SHA-512">786778529435d8a14ab6ce2176cdf2b9ee6585a71893b785f26257122166dcefc7c4af3f612eda3974b06c16d06fc357178bf28b9b74010e9bc04c33221adc2f</hash>
        <hash alg="SHA-384">4be7ad9b352412ddad3eb00f2e44f1236216d3e713546d34d71f3aa8e589b06636abf22dad0c28e11a0cd7b54ea0496a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/commons-io/commons-io@2.18.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-io/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-parent/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/IO</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=commons-io.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-validator/commons-validator@1.6?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-validator</group>
      <name>commons-validator</name>
      <version>1.6</version>
      <description>Apache Commons Validator provides the building blocks for both client side validation and server side data validation.
    It may be used standalone or with a framework like Struts.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3fd5efd8dcdd601035c123638a897833</hash>
        <hash alg="SHA-1">e989d1e87cdd60575df0765ed5bac65c905d7908</hash>
        <hash alg="SHA-256">bd62795d7068a69cbea333f6dbf9c9c1a6ad7521443fb57202a44874f240ba25</hash>
        <hash alg="SHA-512">aded530d3b79ead6ba5c44668c6d6964d7721f9617249f6aaa1c8f558ad4b3d3c1b6d78b639a4cb8dd27a671879b662fdbba0502fd04e131f3286169507df30c</hash>
        <hash alg="SHA-384">9f2a218b7d20f9230403437eeebd74642bebf0f85a18de2454ae9de3ebaf621a4f422668d1020bd5f9242ef6f4996257</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-validator/commons-validator@1.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://commons.apache.org/proper/commons-validator/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://issues.apache.org/jira/browse/VALIDATOR</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>http://svn.apache.org/viewvc/commons/proper/validator/tags/VALIDATOR_1_6/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-beanutils</group>
      <name>commons-beanutils</name>
      <version>1.9.4</version>
      <description>Apache Commons BeanUtils provides an easy-to-use but flexible wrapper around reflection and introspection.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">07dc532ee316fe1f2f0323e9bd2f8df4</hash>
        <hash alg="SHA-1">d52b9abcd97f38c81342bb7e7ae1eee9b73cba51</hash>
        <hash alg="SHA-256">7d938c81789028045c08c065e94be75fc280527620d5bd62b519d5838532368a</hash>
        <hash alg="SHA-512">7762b348caecead49038a38a89754ff7d9be6199324315495ba47cf24f52c06faadf9306d925c8fe47c587589a939c82e491e1c730267fdf354243a68c0f96ff</hash>
        <hash alg="SHA-384">dcd3845917b8fb189cf4034b0d7c6d266ec7110f85ffbd2711cdea9eb94b4fa3e1cee9120b484c6a120b82769230ed3a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-beanutils/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/BEANUTILS</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>http://svn.apache.org/viewvc/commons/proper/beanutils/tags/BEANUTILS_1_9_3_RC3</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-digester/commons-digester@1.8.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-digester</group>
      <name>commons-digester</name>
      <version>1.8.1</version>
      <description>The Digester package lets you configure an XML to Java object mapping module
    which triggers certain actions called rules whenever a particular 
    pattern of nested XML elements is recognized.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5002ecf033f5a79e398155823badb36a</hash>
        <hash alg="SHA-1">3dec9b9c7ea9342d4dbe8c38560080d85b44a015</hash>
        <hash alg="SHA-256">b97b72b4201137262215dca60ceb84e6b664bf7fe428a4d62729de0239cafdb6</hash>
        <hash alg="SHA-512">8c97f2025869c80dcd930fbc5fb4955a254ca5e7a9bb9766276c1ec43abf9a995141d9df0c654e61b8aa70811f5887088ac911159f1fa710a7830e39d7f506f3</hash>
        <hash alg="SHA-384">64b3b08aec4de3423334c60488e08642a6e1b900f76ff66eb7c780d30d353b1c2cd70c8b3474c5a2a6aaf9858bea956f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-digester/commons-digester@1.8.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://commons.apache.org/digester/</url>
        </reference>
        <reference type="build-system">
          <url>http://vmbuild.apache.org/continuum/</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://issues.apache.org/jira/browse/DIGESTER</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>http://svn.apache.org/viewvc/commons/proper/digester/tags/DIGESTER_1_8_1</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-logging/commons-logging@1.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-logging</group>
      <name>commons-logging</name>
      <version>1.2</version>
      <description>Apache Commons Logging is a thin adapter allowing configurable bridging to other,
    well known logging systems.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">040b4b4d8eac886f6b4a2a3bd2f31b00</hash>
        <hash alg="SHA-1">4bfc12adfe4842bf07b657f0369c4cb522955686</hash>
        <hash alg="SHA-256">daddea1ea0be0f56978ab3006b8ac92834afeefbd9b7e4e6316fca57df0fa636</hash>
        <hash alg="SHA-512">ed00dbfabd9ae00efa26dd400983601d076fe36408b7d6520084b447e5d1fa527ce65bd6afdcb58506c3a808323d28e88f26cb99c6f5db9ff64f6525ecdfa557</hash>
        <hash alg="SHA-384">ac20720d7156131478205f1b454395abf84cfc8da2f163301af32f63bd3c4764bd26cb54ed53800f33193ae591f3ce9c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-logging/commons-logging@1.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://commons.apache.org/proper/commons-logging/</url>
        </reference>
        <reference type="build-system">
          <url>https://continuum-ci.apache.org/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://issues.apache.org/jira/browse/LOGGING</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>http://svn.apache.org/repos/asf/commons/proper/logging/trunk</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/info.picocli/picocli@4.7.5?type=jar">
      <group>info.picocli</group>
      <name>picocli</name>
      <version>4.7.5</version>
      <description>Java command line parser with both an annotations API and a programmatic API. Usage help with ANSI styles and colors. Autocomplete. Nested subcommands. Easily included as source to avoid adding a dependency.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">130eeeb3c9c1a58d7174d10a9d771644</hash>
        <hash alg="SHA-1">a6f99ec0a97aeb3be63a9f55703b28f2cf08788f</hash>
        <hash alg="SHA-256">e83a906fb99b57091d1d68ac11f7c3d2518bd7a81a9c71b259e2c00d1564c8e8</hash>
        <hash alg="SHA-512">9fe48bf352b07e708f251f0fcda05a994317083dced7e0ffd67a140219eda0fa4b1f73eefa11920e86e388b9ae49d2d148bf984c24da4e2293509dfc265a951e</hash>
        <hash alg="SHA-384">b74b7e895eb2ca849ac87567d50bfa9bcf957051e8fc797fda79881fedca917fa17e54845cffc6f36708f5f98d6eafdf</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/info.picocli/picocli@4.7.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://picocli.info</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/remkop/picocli/tree/master</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.dropwizard.metrics/metrics-core@3.2.6?type=jar">
      <group>io.dropwizard.metrics</group>
      <name>metrics-core</name>
      <version>3.2.6</version>
      <description>Metrics is a Java library which gives you unparalleled insight into what your code does in
        production. Metrics provides a powerful toolkit of ways to measure the behavior of critical
        components in your production environment.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">641716ee081aeaa016415019c74fb447</hash>
        <hash alg="SHA-1">62fe170cffeded1cef60e9e3402a93b45ce14327</hash>
        <hash alg="SHA-256">891174c5230476e1950a286169672002978562ebdf5c85f0199ecae1bd030f9f</hash>
        <hash alg="SHA-512">91b170d541e2da3cf2482e795422b8c0c2890e87823feed2d9e16ea22ccf61ec1cc759d974f66e987f884f699551997574fb6c26f377c1136d930bc10778e74c</hash>
        <hash alg="SHA-384">47d7ba837dccb5596cbbce45c4514dc53c74ee9e0751954524bd437350574d375cb96a66a1175aae52296f58c401b142</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.dropwizard.metrics/metrics-core@3.2.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://metrics.dropwizard.io/metrics-core/</url>
        </reference>
        <reference type="distribution-intake">
          <url>http://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://github.com/dropwizard/metrics/issues#issue/</url>
        </reference>
        <reference type="vcs">
          <url>http://github.com/dropwizard/metrics/metrics-core/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.grpc/grpc-api@1.58.0?type=jar">
      <group>io.grpc</group>
      <name>grpc-api</name>
      <version>1.58.0</version>
      <description>gRPC: API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">366ec27b50806e079e363eee6087fa18</hash>
        <hash alg="SHA-1">1f761949cdfd418a5f662e0d22d2c95f60099c0b</hash>
        <hash alg="SHA-256">d688d25f4f533979df2fcd0881e1e30c2928e5b654ff09bf1440923282b0d945</hash>
        <hash alg="SHA-512">040356599a6ee4e8264ea4c3fda029f4b7c771f06218b4e9ab0f83b57a1e246dc0364ad933e2a07a2daaa1766e6b534a00dfd217cfd52c63eb6d17cd303622fe</hash>
        <hash alg="SHA-384">dc56d5e2ab6d625e38d65785d63d19b4f67b3e69c9ad6b78618546d3c8bb76fca970afcd5012bb2ab46f5b5cf9d16de0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.grpc/grpc-api@1.58.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/grpc/grpc-java</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/grpc/grpc-java</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.jaegertracing/jaeger-client@1.8.1?type=jar">
      <group>io.jaegertracing</group>
      <name>jaeger-client</name>
      <version>1.8.1</version>
      <description>Jaeger Java bindings for OpenTracing API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ab9377e6762adce89bb29ae706a58360</hash>
        <hash alg="SHA-1">192509eaca3532057d55caa465a216f7df542381</hash>
        <hash alg="SHA-256">9e955742e154e67a4e1f5acf61eff0f0891b3cefb429198defc1ac2f3d52d82d</hash>
        <hash alg="SHA-512">c08c0380395e2ae11739ca2353bc96c74bb0282bcfd82e3619077d8a43d2b5c42de01109549a142bede78b6fe9bc018484b806ee042909ef695df0a7aedf9797</hash>
        <hash alg="SHA-384">4b636346e76b58b4578fcc22a76d4777e121d9f337a1489a30a5d7e78b20f495aaaf5b1f09f40e79ee903d3c407dfa55</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.jaegertracing/jaeger-client@1.8.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/jaegertracing/jaeger-client-java</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.jaegertracing/jaeger-thrift@1.8.1?type=jar">
      <group>io.jaegertracing</group>
      <name>jaeger-thrift</name>
      <version>1.8.1</version>
      <description>Jaeger Java bindings for OpenTracing API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9335e8043b259e31bb949252c8094d8c</hash>
        <hash alg="SHA-1">e173aec5576da317aa61e9e3be795d6bd1758fca</hash>
        <hash alg="SHA-256">3d410dc95b08543b2a10634cc13819e8681389f1a50a20c741c0e8e60f838d75</hash>
        <hash alg="SHA-512">e0f897e18982cc843038c5a517ce3ec8b7295c8ad80460947ed6ef210c960801dadb797146f5712618e3cda6b10f4daeecdb278345e08f2aec91752b63c74ef7</hash>
        <hash alg="SHA-384">55717a0463d2e448c8e7b7de0c42fba5e196504f9f12e0c3f22b17c230b16cf7be919c4aa00836e9d8193c1ea7b2315c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.jaegertracing/jaeger-thrift@1.8.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/jaegertracing/jaeger-client-java</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.thrift/libthrift@0.15.0?type=jar">
      <group>org.apache.thrift</group>
      <name>libthrift</name>
      <version>0.15.0</version>
      <description>Thrift is a software framework for scalable cross-language services development.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d60a2c65a1e90ce981b5db49b6ba7943</hash>
        <hash alg="SHA-1">33f61a6ad11e6df132c387be18559514197fcd4e</hash>
        <hash alg="SHA-256">e9c47420147cbb87a6df08bc36da04e2be1561967b5ef82d2f3ef9ec090d85d0</hash>
        <hash alg="SHA-512">afdc4495e4bb663f190a2ea28daf3587b33a36299a3e0866ed68b44a628eef4301b412a14ec3bbea23d18a1a10684220f7abe932b94555d254f48c12bf0633a6</hash>
        <hash alg="SHA-384">94a02587e3dd2e0af8c359fd17284d6ad4cd9a4ce522e6e3d851f8e4e2326534ae797d718924f967481cfc83b32741b1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.thrift/libthrift@0.15.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://thrift.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/thrift</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.squareup.okhttp3/okhttp@4.12.0?type=jar">
      <group>com.squareup.okhttp3</group>
      <name>okhttp</name>
      <version>4.12.0</version>
      <description>Square’s meticulous HTTP client for Java and Kotlin.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6acba053af88fed87e710c6c29911d7c</hash>
        <hash alg="SHA-1">2f4525d4a200e97e1b87449c2cd9bd2e25b7e8cd</hash>
        <hash alg="SHA-256">b1050081b14bb7a3a7e55a4d3ef01b5dcfabc453b4573a4fc019767191d5f4e0</hash>
        <hash alg="SHA-512">da63f77c1cae377b40f6fd00cfbbe8177e760e4e622ae2c66860fffd3bbbdf605c8e8e415762e9263445b2289ee834100237c63949f2e01c30b6704315dd8f7b</hash>
        <hash alg="SHA-384">0a8fbe4104c511169232caa90bc52b8a842b6b4cfba525b1c749ca25ede252992c1a3b6c0b6b43143949bc1f1eea742e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.squareup.okhttp3/okhttp@4.12.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://square.github.io/okhttp/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/square/okhttp</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.squareup.okio/okio@3.6.0?type=jar">
      <group>com.squareup.okio</group>
      <name>okio</name>
      <version>3.6.0</version>
      <description>A modern I/O library for Android, Java, and Kotlin Multiplatform.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">990f7b25bbd4fee8787ffabf89aa229f</hash>
        <hash alg="SHA-1">8bf9683c80762d7dd47db12b68e99abea2a7ae05</hash>
        <hash alg="SHA-256">8e63292e5c53bb93c4a6b0c213e79f15990fed250c1340f1c343880e1c9c39b5</hash>
        <hash alg="SHA-512">1c3e2933a386af47266229824744245799a9f77f7f3d3bb44428eb81f02d5df6993e864c8fa794caf08a98fd81a89d5d670037226345a570905d8229c1e55c3b</hash>
        <hash alg="SHA-384">e4ec9777dd2370075b21251db31a9e0562ef1ac142f7a9b114e7ff441995da9650014d59a53515255c5ae46397cb83ed</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.squareup.okio/okio@3.6.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/square/okio/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/square/okio/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.squareup.okio/okio-jvm@3.6.0?type=jar">
      <group>com.squareup.okio</group>
      <name>okio-jvm</name>
      <version>3.6.0</version>
      <description>A modern I/O library for Android, Java, and Kotlin Multiplatform.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">26370180ff99a7e8a12dcaac2a70cc6e</hash>
        <hash alg="SHA-1">5600569133b7bdefe1daf9ec7f4abeb6d13e1786</hash>
        <hash alg="SHA-256">67543f0736fc422ae927ed0e504b98bc5e269fda0d3500579337cb713da28412</hash>
        <hash alg="SHA-512">a592e93651fb5e335212bb25c1cf474c1b1076eda68d53cbdc82c383cbdd60114a62b698ca92a3b4b5e416d637a70f2ddabbf8a05551c62d59a240c3e3c3d2c6</hash>
        <hash alg="SHA-384">825856eb690645dbaaa02a6047ebbfe2b2c0a9191d37c177b216160bd89286e98695fc91cd75a9b6ac7e8d1f3a106ff6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.squareup.okio/okio-jvm@3.6.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/square/okio/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/square/okio/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-common@1.9.25?type=jar">
      <group>org.jetbrains.kotlin</group>
      <name>kotlin-stdlib-common</name>
      <version>1.9.25</version>
      <description>Kotlin Common Standard Library (legacy, use kotlin-stdlib instead)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4af413a0dcfd78656848746e324dd826</hash>
        <hash alg="SHA-1">8c6b97a73550bb942dfad2325907ccfea9dea68e</hash>
        <hash alg="SHA-256">8202e7f032c8dc6698d00c62867701546a7c12c4731ebddfb8eec0788e2eeee4</hash>
        <hash alg="SHA-512">7440996feb5af36e9353064a30f7f8a2258cb93e151be1c29325267779b54cefa6b9d98ac04a452c23055d7a5ae81c4f1647d72c5e45714194f19b80a414f3f6</hash>
        <hash alg="SHA-384">8b1f7594ed19879b5b775a4d94f5cdd27528655a99c9ed46a2d19a71c2e74d696bd22286611397146ed2f3ca6345e83e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-common@1.9.25?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://kotlinlang.org/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/JetBrains/kotlin</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.9.25?type=jar">
      <group>org.jetbrains.kotlin</group>
      <name>kotlin-stdlib-jdk8</name>
      <version>1.9.25</version>
      <description>Kotlin Standard Library JDK 8 extension</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">34513d27003b6befef92733e27ca2485</hash>
        <hash alg="SHA-1">20d44e880a284f7b5cd99dd69450b403073f49b2</hash>
        <hash alg="SHA-256">f94fdf78390ce9be30383bf039c5a935caea33b11f037fc7f86bbcee19287e5a</hash>
        <hash alg="SHA-512">98b2213f68ee16cafdaca3f1caee97f71f6f16cade689840aec52ad833737381fe8483105990eed06623d6a96b32b024c472597670e167f112fb130e600d4bf8</hash>
        <hash alg="SHA-384">87371bc178898dfb3df16bffed44fe098a385d53b6d2436ad0ba43d4809cac96414aef5d23ae2fd8b6ad59c2e31b83a1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.9.25?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://kotlinlang.org/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/JetBrains/kotlin</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk7@1.9.25?type=jar">
      <group>org.jetbrains.kotlin</group>
      <name>kotlin-stdlib-jdk7</name>
      <version>1.9.25</version>
      <description>Kotlin Standard Library JDK 7 extension</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">00b574c013f45be45599d071dbd818f4</hash>
        <hash alg="SHA-1">1c166692314a2639e5edfed0d23ed7eee4a5c7a5</hash>
        <hash alg="SHA-256">fb5373dd761b4e93e3f538c5e853bba38a71143a181536e8f193ed6e4eddb3b8</hash>
        <hash alg="SHA-512">3d529f26e14735d7dba2ad126d7cf2e92904daf7e71610563acb6bb13a58fe89437b4ea1f2f1a0f1abd985333709198e257540b08b1509293b5c75d19e001957</hash>
        <hash alg="SHA-384">de4e79aa327c38bb12be59cf5437612823a2d450b4f698623bd3729efc65391a3a676e0e456198fcd436e5cb8a41f3b2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk7@1.9.25?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://kotlinlang.org/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/JetBrains/kotlin</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.jaegertracing/jaeger-tracerresolver@1.8.1?type=jar">
      <group>io.jaegertracing</group>
      <name>jaeger-tracerresolver</name>
      <version>1.8.1</version>
      <description>Jaeger Java bindings for OpenTracing API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">eb2614766c4bbc6d6e2b0304bb5813aa</hash>
        <hash alg="SHA-1">4de1df4131956bfb1acab106a120398edabf17cd</hash>
        <hash alg="SHA-256">d3f909d55fa4659bafd8579335aad99d61920cf2592c4f6951b57e6130102038</hash>
        <hash alg="SHA-512">26bc99fb84329123099563d4097991bedb249d6270851929aa3efb4d8ee73cd01191cdd0982ae36a524304c1999819f1af56e4c3f72c3a3d612656e08c2706d1</hash>
        <hash alg="SHA-384">4a72638dcca57771027f8b9380c1b2ea7a02ff9ef334e68883e4a67467eb78798d2ab7123948a755e602c305179accf2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.jaegertracing/jaeger-tracerresolver@1.8.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/jaegertracing/jaeger-client-java</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.opentracing.contrib/opentracing-tracerresolver@0.1.8?type=jar">
      <group>io.opentracing.contrib</group>
      <name>opentracing-tracerresolver</name>
      <version>0.1.8</version>
      <description>Resolver API for OpenTracing Tracer implementations.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">bdf12ded9b5616dbf97b222f586ed926</hash>
        <hash alg="SHA-1">8caff3fab2abecf6a63eaee6c3f298e9aeb50c89</hash>
        <hash alg="SHA-256">3e50e423e464f20f8e4030b8dfbf8ccf8c67f1ac25802af69d32e0e4f6974909</hash>
        <hash alg="SHA-512">5e4b91e5f0611e85d1a9ae63e6000cffe3fc9d8e15d08cdeaf1ad32d3b80a6f76e05bd61f8d282d0d2abf79592919bbcd77b1d5ba28d36ca0cdbbb7bd4474b9b</hash>
        <hash alg="SHA-384">4e16bcf1bb707e46d66a718c254162d1d5e5c2954f28a6a1553d06cfbefb8ba6279b2a35c5060406cf731bd4b95577c0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.opentracing.contrib/opentracing-tracerresolver@0.1.8?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/opentracing-contrib/java-tracerresolver/opentracing-tracerresolver</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://api.bintray.com/maven/opentracing/maven/opentracing-tracerresolver/;publish=1</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/opentracing-contrib/java-tracerresolver/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/opentracing-contrib/java-tracerresolver/opentracing-tracerresolver</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.jaegertracing/jaeger-core@1.8.1?type=jar">
      <group>io.jaegertracing</group>
      <name>jaeger-core</name>
      <version>1.8.1</version>
      <description>Jaeger Java bindings for OpenTracing API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">21640940e8db2141edb9fe4337416a37</hash>
        <hash alg="SHA-1">66a39fb4b4905b489b76b4a5910f466995a6707c</hash>
        <hash alg="SHA-256">4c4627570530e990cdd57a457017057aa1e3d06d884f460ecac0904bb379160a</hash>
        <hash alg="SHA-512">16c826b4615967c20a273b48dd597dda2d013f64d7d3bb5f040ec7b7b61ba3483e42fe827289a0993c6fea14a626f1b69df90ad3c51c27084f2e77e1b5ceaaa8</hash>
        <hash alg="SHA-384">682a3f3e8ce98c9f163c41d145d914b2c8410ed8834bb5a0898967ab34d522612b6786c02f8cdf12c2b5579757f65d1d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.jaegertracing/jaeger-core@1.8.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/jaegertracing/jaeger-client-java</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.code.gson/gson@2.10.1?type=jar">
      <group>com.google.code.gson</group>
      <name>gson</name>
      <version>2.10.1</version>
      <description>Gson JSON library</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">df6097815738cb31fc56391553210843</hash>
        <hash alg="SHA-1">b3add478d4382b78ea20b1671390a858002feb6c</hash>
        <hash alg="SHA-256">4241c14a7727c34feea6507ec801318a3d4a90f070e4525681079fb94ee4c593</hash>
        <hash alg="SHA-512">7503e4b8d05c6cc0ecb3a94c5a2e070e049083a441003a79a0cdf474f4286699b4ba1d2a655ddabb8ba10c50e7c36a7045cccdaee465166d4630db647aba2727</hash>
        <hash alg="SHA-384">48a4786bd6e1867f058ee4fb676fc82d9d9f64a6d7420d4a47ae2398504c9de73222636614aeb4a9fbf10ee143d72226</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.code.gson/gson@2.10.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/google/gson/gson</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/google/gson/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/google/gson/gson/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.opentracing/opentracing-api@0.33.0?type=jar">
      <publisher>OpenTracing</publisher>
      <group>io.opentracing</group>
      <name>opentracing-api</name>
      <version>0.33.0</version>
      <description>OpenTracing Java API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">bfec41592934f8a1f3e782ff2967c985</hash>
        <hash alg="SHA-1">67336cfb9d93779c02e1fda4c87801d352720eda</hash>
        <hash alg="SHA-256">4534541b8e9f41a17bcdf1d09affe45b98c13574db6e529a93a58264b9472c7c</hash>
        <hash alg="SHA-512">931197ca33e509570e389cd163af96e277bb3635f019e34e2fc97d3fa9c34bb9042f25b2ba8aa59f8516cc044ec3e9584462601b8aa5f954bbc6ad88e5fbe5cd</hash>
        <hash alg="SHA-384">40cecdf9b5b85090c64750949de1c3c0e534904f6a82b4e325cfa8d54ed227c258e26e9b90ded0ecdd8ce06a2f4d76c3</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.opentracing/opentracing-api@0.33.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/opentracing/opentracing-java/opentracing-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://api.bintray.com/maven/opentracing/maven/opentracing-java/;publish=1</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/opentracing/opentracing-java/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/opentracing/opentracing-java/opentracing-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.opentracing/opentracing-util@0.33.0?type=jar">
      <publisher>OpenTracing</publisher>
      <group>io.opentracing</group>
      <name>opentracing-util</name>
      <version>0.33.0</version>
      <description>OpenTracing utilities</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4256987096519a45c4b781fca070a15c</hash>
        <hash alg="SHA-1">132630f17e198a1748f23ce33597efdf4a807fb9</hash>
        <hash alg="SHA-256">22c5dfbb9b0e2f08f7371bf3d68372c7604c804d3129499b43f37a8877c4379e</hash>
        <hash alg="SHA-512">fbba29ff3d6018561077e9539ad9b72876424600eca3addb6a26981a4a3e52cb3dfd30f27945aff2b6c222c42454ce3ba67597171fd809a74c65b920f3a47c7a</hash>
        <hash alg="SHA-384">78b82902617ad05d422f2fadf9bc8dc5278fb469c4f15b368dfa5df374e9554e7600666819df7583fa5491527240d913</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.opentracing/opentracing-util@0.33.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/opentracing/opentracing-java/opentracing-util</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://api.bintray.com/maven/opentracing/maven/opentracing-java/;publish=1</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/opentracing/opentracing-java/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/opentracing/opentracing-java/opentracing-util</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.opentracing/opentracing-noop@0.33.0?type=jar">
      <publisher>OpenTracing</publisher>
      <group>io.opentracing</group>
      <name>opentracing-noop</name>
      <version>0.33.0</version>
      <description>OpenTracing NoOp</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a65509c4cc3907bc0691c5141d3f1d2e</hash>
        <hash alg="SHA-1">074b9950a587f53fbdb48c3f1f84f1ece8c10592</hash>
        <hash alg="SHA-256">8529f91e10047b2b94cb21b50086a3d3913fa4da43594eddbd9ecf5917efe040</hash>
        <hash alg="SHA-512">c727bcf20504fa72bfc07456bdde3b0b50988632d85c7af78df742efd90a431c125f5d644273203fa211a62fc4a282455cf281c7c82b82df4695afbc5488577f</hash>
        <hash alg="SHA-384">06cc99bd895a70373944254c106ae5d98ddd2ecab4e03e3069260ac464ee3222f784bb169d49c2a54e79b15a7f691e36</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.opentracing/opentracing-noop@0.33.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/opentracing/opentracing-java/opentracing-noop</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://api.bintray.com/maven/opentracing/maven/opentracing-java/;publish=1</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/opentracing/opentracing-java/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/opentracing/opentracing-java/opentracing-noop</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.annotation</group>
      <name>jakarta.annotation-api</name>
      <version>2.1.1</version>
      <description>Jakarta Annotations API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5dac2f68e8288d0add4dc92cb161711d</hash>
        <hash alg="SHA-1">48b9bda22b091b1f48b13af03fe36db3be6e1ae3</hash>
        <hash alg="SHA-256">5f65fdaf424eee2b55e1d882ba9bb376be93fb09b37b808be6e22e8851c909fe</hash>
        <hash alg="SHA-512">eabe8b855b735663684052ec4cc357cc737936fa57cebf144eb09f70b3b6c600db7fa6f1c93a4f36c5994b1b37dad2dfcec87a41448872e69552accfd7f52af6</hash>
        <hash alg="SHA-384">798597a6b80b423844d70609c54b00d725a357031888da7e5c3efd3914d1770be69aa7135de13ddb89a4420a5550e35b</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://projects.eclipse.org/projects/ee4j.ca</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/common-annotations-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/ca-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/common-annotations-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.xml.bind</group>
      <name>jakarta.xml.bind-api</name>
      <version>2.3.3</version>
      <description>Jakarta XML Binding API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">61286918ca0192e9f87d1358aef718dd</hash>
        <hash alg="SHA-1">48e3b9cfc10752fba3521d6511f4165bea951801</hash>
        <hash alg="SHA-256">c04539f472e9a6dd0c7685ea82d677282269ab8e7baca2e14500e381e0c6cec5</hash>
        <hash alg="SHA-512">adf6436a7a9dc6f64b97127861d7a89b78e82bea67f72bda800ef285163adcd84dbf006f679108a2a8c2eed013e0b771da2354087e0845479ff2b6318b881442</hash>
        <hash alg="SHA-384">bad8b9f52bf7a7e1d3974cb305a69c093fb32d2131539c18d34e471e3ec32bdd9dd136bb4b38bb14d84e99c562f208c7</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-ee4j/jaxb-api/jakarta.xml.bind-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaxb-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jaxb-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jaxb-api.git/jakarta.xml.bind-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.activation</group>
      <name>jakarta.activation-api</name>
      <version>1.2.2</version>
      <description>Jakarta Activation API jar</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1cbb480310fa1987f9db7a3ed7118af7</hash>
        <hash alg="SHA-1">99f53adba383cb1bf7c3862844488574b559621f</hash>
        <hash alg="SHA-256">a187a939103aef5849a7af84bd7e27be2d120c410af291437375ffe061f4f09d</hash>
        <hash alg="SHA-512">e3d846ff5f62ad9fef514f0726846c63d4aa74b2bb8f60c76258dba37701f83ae75872401071bf40da40697d43a8a6e36d08fa4ef39fe70797fb6f2b1712599f</hash>
        <hash alg="SHA-384">3e25702596eca7dd48f904b3985d64b4b394d162d3884a907d8b2ee647542808713a42a02f0eeff2c07518a206cc91cf</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-ee4j/jaf/jakarta.activation-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaf/issues/</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jaf/jakarta.activation-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar">
      <publisher>GlassFish Community</publisher>
      <group>javax.annotation</group>
      <name>javax.annotation-api</name>
      <version>1.3.2</version>
      <description>Common Annotations for the JavaTM Platform API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2ab1973eefffaa2aeec47d50b9e40b9d</hash>
        <hash alg="SHA-1">934c04d3cfef185a8008e7bf34331b79730a9d43</hash>
        <hash alg="SHA-256">e04ba5195bcd555dc95650f7cc614d151e4bcd52d29a10b8aa2197f3ab89ab9b</hash>
        <hash alg="SHA-512">679cf44c3b9d635b43ed122a555d570292c3f0937c33871c40438a1a53e2058c80578694ec9466eac9e280e19bfb7a95b261594cc4c1161c85dc97df6235e553</hash>
        <hash alg="SHA-384">fc0058495e54efb6e05a34e3ff422e7c8347bcc77d6d9b87e9253424968dee6ef6a215c318d7e54f8705276be81f0682</hash>
      </hashes>
      <licenses>
        <expression>(CDDL-1.0 OR GPL-2.0-with-classpath-exception)</expression>
      </licenses>
      <purl>pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://jcp.org/en/jsr/detail?id=250</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://maven.java.net/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/javaee/javax.annotation/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>javaee-spec@javaee.groups.io</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/javaee/javax.annotation</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-lang3</name>
      <version>3.17.0</version>
      <description>Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.

  The code is tested using the latest revision of the JDK for supported
  LTS releases: 8, 11, 17 and 21 currently.
  See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml
  
  Please ensure your build environment is up-to-date and kindly report any build issues.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7730df72b7fdff4a3a32d89a314f826a</hash>
        <hash alg="SHA-1">b17d2136f0460dcc0d2016ceefca8723bdf4ee70</hash>
        <hash alg="SHA-256">6ee731df5c8e5a2976a1ca023b6bb320ea8d3539fbe64c8a1d5cb765127c33b4</hash>
        <hash alg="SHA-512">dfd5ff7fe7f852b9caabc81e5a00e20616f98405085f059b64dc2121feb5fa6cb327e11a3d2f954c079811c31f6fd484e90f932d45078796fbfa7dbf1f1eb5aa</hash>
        <hash alg="SHA-384">c6ed55a5c2b05332890a43a3ea73b30f42dc23c92ebd054a8b0d29ca8f49fb9361f7325cfa90715be457804b087221b5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-lang/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-parent/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/LANG</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=commons-lang.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ozone/hdds-annotation-processing@2.0.0?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.ozone</group>
      <name>hdds-annotation-processing</name>
      <version>2.0.0</version>
      <description>Apache Ozone annotation processing tools for validating custom
    annotations at compile time.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ca55c8eedc935850c5ade2dc91cc3a6c</hash>
        <hash alg="SHA-1">1167eb379485377909ec29453447915ac8e209ee</hash>
        <hash alg="SHA-256">ff8dd0ef7da633a885bda1c2df755db9e457fab1681709170a784ad9bc22e77e</hash>
        <hash alg="SHA-512">bc7251ef32816b9243f83198e0b1abeca6a7aee60278b9a06d331b958ab94d4682f783a90efe445dbc2af66d1e62208044107aa8d580ce7e4f1a54812d55380e</hash>
        <hash alg="SHA-384">aec92848f94725985dee31ec5e408e20cba461176cc5453d208b9c1ccd81e9f7bbca206f4026dc7939994200e917dc3d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ozone/hdds-annotation-processing@2.0.0?type=jar</purl>
      <externalReferences>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ozone/hdds-config@2.0.0?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.ozone</group>
      <name>hdds-config</name>
      <version>2.0.0</version>
      <description>Apache Ozone Distributed Data Store Config Tools</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6006b6064a364be88b98feeeadda9fb9</hash>
        <hash alg="SHA-1">fc79895b36208ca94f124a056d35c17d01e0ea6c</hash>
        <hash alg="SHA-256">802686e436c9b5b04b62e9ca04d8e56aee5f471e29fd12a732e2d399b1a8d5fb</hash>
        <hash alg="SHA-512">bb9bb886ce7640f47337e5d2b98db0ab55a1392941ca53cedcdc99fc60629861d1535164b9f3ed68c9975728ef35b73f4cb7c03b06524741dcc9fc073e2cf6df</hash>
        <hash alg="SHA-384">343aa94533c81f4493cee49769ae42eefae29725c0aa1c9dc3d6c389fd5b31f6fa268afa83e79fda405e8fad60d1f9ce</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ozone/hdds-config@2.0.0?type=jar</purl>
      <externalReferences>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ozone/hdds-hadoop-dependency-client@2.0.0?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.ozone</group>
      <name>hdds-hadoop-dependency-client</name>
      <version>2.0.0</version>
      <description>Apache Ozone Distributed Data Store Hadoop client dependencies</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">77725a094b7f04e6bdb63e6e83ace521</hash>
        <hash alg="SHA-1">15831e14cf5e2e33b4245dc0a8df65e9df99410f</hash>
        <hash alg="SHA-256">88c90c102cdc89e492193e70bbf8a032d9663a72c5789f6a7655284544f8f642</hash>
        <hash alg="SHA-512">fd6e8bbde9c94e8c9fd60e03ea3a7d9450fff07bd2b7b0d654f72056f559adff90728bbe1a60e191777767c87ea51d6d205b22549c72286077a51b0d822c98f7</hash>
        <hash alg="SHA-384">76c4943b5d453485cbb75f36b8eee81d1b30279588ac09cc96987c0cf2bf145fa2f2f7855cd5aa8e82dc0a10f047522c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ozone/hdds-hadoop-dependency-client@2.0.0?type=jar</purl>
      <externalReferences>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.nimbusds/nimbus-jose-jwt@9.40?type=jar">
      <publisher>Connect2id Ltd.</publisher>
      <group>com.nimbusds</group>
      <name>nimbus-jose-jwt</name>
      <version>9.40</version>
      <description>Java library for Javascript Object Signing and Encryption (JOSE) and
        JSON Web Tokens (JWT)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">42ce81c8d034f163663d23e8bbc3638d</hash>
        <hash alg="SHA-1">42b1dfa0360e4062951b070bac52dd8d96fd7b38</hash>
        <hash alg="SHA-256">77128ed53756421bf59d2fc7f31554da29ea81cad8a5345977275adb7c5254c8</hash>
        <hash alg="SHA-512">cf7b5bf6a042ddf1177d085d4d6a00b36684c10fb0a8e8db6d6d71063490bc3fa66ed45cbee12bb8258c85964a2226b53a97ee62b94e79f95e3c4aeabe3745e2</hash>
        <hash alg="SHA-384">fd16f9d4c375305d0b818a7b6d055e6329689e63d7f4273f84a93fe785a38d5e47a2a9471ecc1009627631fd08aa93d8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.nimbusds/nimbus-jose-jwt@9.40?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://bitbucket.org/connect2id/nimbus-jose-jwt</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://bitbucket.org/connect2id/nimbus-jose-jwt</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.hadoop/hadoop-annotations@3.4.1?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.hadoop</group>
      <name>hadoop-annotations</name>
      <version>3.4.1</version>
      <description>Apache Hadoop Annotations</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d60fe895b3e260a8b4dfe318672abb5e</hash>
        <hash alg="SHA-1">f3deae4653e35daff2362089bc42a90398ed16b3</hash>
        <hash alg="SHA-256">b29271921faf6e88212f0e9304bf716f466eecff37037d6cb75450ce202c7791</hash>
        <hash alg="SHA-512">53596d51fd0868eb21ef6cd5ba2816f7d835536c88139ccb13b03463f254fade352127d79de6583bf54cf3bae3bcd3d1ce965e66243a19ee5109d2eb6013b4f5</hash>
        <hash alg="SHA-384">b3473b0d03a9cc6b211ed4df0532ad4a14ad88e67a6e937e9b51f9e5e7cdba3e108671d16d6d4dd2fdfed9ba2ddf3ce1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hadoop/hadoop-annotations@3.4.1?type=jar</purl>
      <externalReferences>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jdk.tools/jdk.tools@1.8?type=jar">
      <group>jdk.tools</group>
      <name>jdk.tools</name>
      <version>1.8</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8b0e81ea0ede9fde541ed8425690985e</hash>
        <hash alg="SHA-1">f7e060ecb0d8af0af4a7ddc23641d47b6fd34212</hash>
        <hash alg="SHA-256">3ebe57e075a589849f26ab066d58b7e1d242619081d00218f748b9bad9f092c6</hash>
        <hash alg="SHA-512">c46b6ed1f0ab39610d0b9e199eeb61e25bd2b8c0c9bb3642efa766abd1fa84f8226bf41bb53daa8f88cd757989c30145f1eacec9c7c2d8439fae5db1de57e836</hash>
        <hash alg="SHA-384">3368526c1bab0e52dea2565ad8656d82579279b1b80d95e972b1bd35dd7745b0a29c3129feb340670d7fbb8cf8c97f98</hash>
      </hashes>
      <purl>pkg:maven/jdk.tools/jdk.tools@1.8?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.hadoop/hadoop-common@3.4.1?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.hadoop</group>
      <name>hadoop-common</name>
      <version>3.4.1</version>
      <description>Apache Hadoop Common</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8ab474f0676f9732c75fbe72a9e3e554</hash>
        <hash alg="SHA-1">9d88de42cb87e5e17d6be936ef4f16db88cbfd25</hash>
        <hash alg="SHA-256">85ab34eb0efc42651290991473341fc77491de2e0cfa7f2d02d20c57abed3aeb</hash>
        <hash alg="SHA-512">9b4ebd769d16ae4337d02b2a0c65dfd54f8830b767234da1bed79eae5b5261ca6a5a0369417509ae946ed1905c97aeb4d97e90401300a28df3afbd34d1904c6e</hash>
        <hash alg="SHA-384">5c5a1fed7a21328d6e03ae6a618baf2e18d9d54592ffd097e3b17c07cd21bbe87ad58331d6d233444567ffff6f626db1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hadoop/hadoop-common@3.4.1?type=jar</purl>
      <externalReferences>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.hadoop.thirdparty/hadoop-shaded-guava@1.3.0?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.hadoop.thirdparty</group>
      <name>hadoop-shaded-guava</name>
      <version>1.3.0</version>
      <description>Packaging of relocated (renamed, shaded) third-party libraries used by Hadoop.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2ea62b5056a8aa9f544493f001e1de78</hash>
        <hash alg="SHA-1">45acdc211dc81757d080ed284fdf54de866e7eaf</hash>
        <hash alg="SHA-256">a8b83aecef36f55f3e6377c850a763b995cb8eea629a43e78329c580ba651dda</hash>
        <hash alg="SHA-512">49f071c2da966f59244c82840d5c5d0db918bc6193d8f1c57bf089fe6897d3285b342074d3c721e397bcbc2e05a363db8e6f2f0a739b24aa58f4ae73e39460f6</hash>
        <hash alg="SHA-384">65fe1b738375ff9556eae0aa826c5c4df328877baf01a8d647d2355a741fa3140b66c760bd03b7f4626d87560ec3df03</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hadoop.thirdparty/hadoop-shaded-guava@1.3.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://www.apache.org/hadoop-thirdparty/hadoop-shaded-guava/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/www-announce/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven-apache-parent/tree/apache-21/hadoop-thirdparty/hadoop-shaded-guava</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-cli/commons-cli@1.8.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-cli</group>
      <name>commons-cli</name>
      <version>1.8.0</version>
      <description>Apache Commons CLI provides a simple API for presenting, processing and validating a Command Line Interface.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">631937816bd22302ae49828e9b764313</hash>
        <hash alg="SHA-1">41a4bff12057eecb6daaf9c7f36c237815be3da1</hash>
        <hash alg="SHA-256">f94c98bbcfa1c1dac6956d6c3f494ec40265c67bf54ddefc95df4ffdd73ae6d5</hash>
        <hash alg="SHA-512">2e5e547709e8ad35be44927382a0862467dcacc87e0351d092fd128fa7097a3b4c900fe452be50ace2e80c198d38f48e94fdb2da86e1480096de4a5580c28534</hash>
        <hash alg="SHA-384">f979529b54592eaa479b4a0f7dd73d87127dc19254dc2a6da628ec17a9ed25cdfea4b9e3cda66b5b819b0cc3540eb0b1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/commons-cli/commons-cli@1.8.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-cli/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-parent/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CLI</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=commons-cli.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.httpcomponents</group>
      <name>httpclient</name>
      <version>4.5.14</version>
      <description>Apache HttpComponents Client</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2cb357c4b763f47e58af6cad47df6ba3</hash>
        <hash alg="SHA-1">1194890e6f56ec29177673f2f12d0b8e627dec98</hash>
        <hash alg="SHA-256">c8bc7e1c51a6d4ce72f40d2ebbabf1c4b68bfe76e732104b04381b493478e9d6</hash>
        <hash alg="SHA-512">a084ef30fb0a2a25397d8fab439fe68f67e294bf53153e2e1355b8df92886d40fe6abe35dc84f014245f7158e92641bcbd98019b4fbbd9e5a0db495b160b4ced</hash>
        <hash alg="SHA-384">c8ccaa1fa8ba7c421413e3c30375bd9c31284e837c476fd831e18043ad4187e92166f49554123108891241bed674b95d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://hc.apache.org/httpcomponents-client-ga</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://issues.apache.org/jira/browse/HTTPCLIENT</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/httpcomponents-client/tree/4.5.14/httpclient</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.jettison/jettison@1.5.4?type=jar">
      <group>org.codehaus.jettison</group>
      <name>jettison</name>
      <version>1.5.4</version>
      <description>A StAX implementation for JSON.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f6c3eeb572f5830303059fec2812821f</hash>
        <hash alg="SHA-1">174ca56c411b05aec323d8f53e66709c0d28b337</hash>
        <hash alg="SHA-256">fc3a68a7c17688ee50817340fef265d8d3f6c192c92bbee00d17f18a6d3dfeda</hash>
        <hash alg="SHA-512">afde3c34e3229c1999dc847b5e2bbd243c48feff9659ba043ccc677d34d9d8d62f4e02c3cfec8d4641b7a3ea7f462b0993fcba2319096a432526c5ca17fab49a</hash>
        <hash alg="SHA-384">1a8b00e147bf8fc12b8ec8176bdccad3fa9703462a915be5b6700334fd6f28a6aaed4ed863199b7257032e005a819f5a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.jettison/jettison@1.5.4?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/jettison-json/jettison</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jettison-json/jettison</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-configuration2@2.11.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-configuration2</name>
      <version>2.11.0</version>
      <description>Tools to assist in the reading of configuration/preferences files in various formats; requires Java 8.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3d3f1cdc1e87864c5bd87f7ce14f13ba</hash>
        <hash alg="SHA-1">af5a2c6abe587074c0be1107fcb27fa2fad91304</hash>
        <hash alg="SHA-256">48957fc3a0d9fbd221fe4f5ff6d0294ce6646ea139793c36706703da59402683</hash>
        <hash alg="SHA-512">a49136daba8ebb781cfbec479d92dafdd07e8030f6a77f92b6aaef2c884538ea25f24e63e2dd29cc58940acbb9777382f5e64354898c9776e66a330f86ae3be5</hash>
        <hash alg="SHA-384">d3203ff54c181d0e669c97f8774c7e49fa1afb06d2098965dd4f2ed56d8cd16f9651b2ac3f78596e6c550b223276e0b6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-configuration2@2.11.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-configuration/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-configuration/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CONFIGURATION</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=commons-configuration.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-text@1.12.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-text</name>
      <version>1.12.0</version>
      <description>Apache Commons Text is a set of utility functions and reusable components for the purpose of processing
    and manipulating text that should be of use in a Java environment.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">544add6fbc8d4b100b07c3692d08099e</hash>
        <hash alg="SHA-1">66aa90dc099701c4d3b14bd256c328f592ccf0d6</hash>
        <hash alg="SHA-256">de023257ff166044a56bd1aa9124e843cd05dac5806cc705a9311f3556d5a15f</hash>
        <hash alg="SHA-512">7d198cc288e4d515f37c81d0dcd1210bce3594d2a06a11f6a78566d33c33acdb4f292b0b42c87281b69fe3af891966bca708e25fa29b1b3536e9f951f5b57d7c</hash>
        <hash alg="SHA-384">4f471c41486a396f25e6956750440aa05c294778ae1ffaafba1f8596f0d49da45b56ad829d59343900fca7c0db461bbe</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-text@1.12.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-text</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-parent/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/TEXT</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=commons-text.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.re2j/re2j@1.7?type=jar">
      <group>com.google.re2j</group>
      <name>re2j</name>
      <version>1.7</version>
      <description>Linear time regular expressions for Java</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">deb6ffa7ed6d2cc06e6ac1182755c735</hash>
        <hash alg="SHA-1">2949632c1b4acce0d7784f28e3152e9cf3c2ec7a</hash>
        <hash alg="SHA-256">4f657af51ab8bb0909bcc3eb40862d26125af8cbcf92aaaba595fed77f947bc0</hash>
        <hash alg="SHA-512">1ec7dfe9e833deb326c233afd23b47774ba2a65d03fe4b7474d0d573c38e5994599cccbb96db4139a7a910d82e77360d79247c72e2ac03b3182852b753b7aeff</hash>
        <hash alg="SHA-384">75b760485e157fdb9a504312ae0644dd0197194d3e13c09bdfd57128eff27dd4fa025c2c3cf0e7ec139a47064edc9723</hash>
      </hashes>
      <licenses>
        <license>
          <name>Go License</name>
          <url>https://golang.org/LICENSE</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.re2j/re2j@1.7?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://github.com/google/re2j</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/google/re2j.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.hadoop/hadoop-auth@3.4.1?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.hadoop</group>
      <name>hadoop-auth</name>
      <version>3.4.1</version>
      <description>Apache Hadoop Auth - Java HTTP SPNEGO</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0e4ece2869b5474a5f96d77e1c95a88b</hash>
        <hash alg="SHA-1">6f107159c412d30a190104a8f5dabec62f60b802</hash>
        <hash alg="SHA-256">9e3f5ddfdb3279690cd8d5c03cfd811787b7b3df129ddff4b09574d2305f3567</hash>
        <hash alg="SHA-512">c504019d9e98ac994dda188c0be9a67a432ebeebcde5528601b13fcd6b7c012b80fb7ab081b45e9aa7c8f456b1e6b817d1c9c545bea40be3f3769d52c1055048</hash>
        <hash alg="SHA-384">a6af97c4a02944a8d38be692f0c70c4d86496f2a91b0e4ad41104992cd44c0ba2e7f2b7b4ca8801dd870d7bf1fa514ce</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hadoop/hadoop-auth@3.4.1?type=jar</purl>
      <externalReferences>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.kerby/kerb-util@1.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.kerby</group>
      <name>kerb-util</name>
      <version>1.0.1</version>
      <description>Kerby-kerb Utilities</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">424542890d4dc9f61b1754a12a1c7758</hash>
        <hash alg="SHA-1">93d37f677addd2450b199e8da8fcac243ceb8a88</hash>
        <hash alg="SHA-256">9cb1a2715a35cbabc9e8f1be3287bb086100763847e2f17577b72a025f8adaab</hash>
        <hash alg="SHA-512">dab63ef1be0a122b3bd8a1986741a64ebf7361dc01a1a3ef23764dfc89fce85a15c2cfe43e3502f37093d0e866011980378c09d5efb45d9754c4cd4e5b686ac3</hash>
        <hash alg="SHA-384">dbfe62c73760d41565ec429e3de8a87cb71a35df2bbd28d1007489cef60106942d8893c8c05bf20435e2b09f11bcdb75</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.kerby/kerb-util@1.0.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://directory.apache.org/kerby/kerby-kerb/kerb-util</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/www-announce/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/directory-kerby/kerby-kerb/kerb-util</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.kerby/kerby-config@1.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.kerby</group>
      <name>kerby-config</name>
      <version>1.0.1</version>
      <description>Kerby config library</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f70f90ed440cee40f4f59f9c75cd6b96</hash>
        <hash alg="SHA-1">a4c3885fa656a92508315aca9b4632197a454b18</hash>
        <hash alg="SHA-256">244520e9bd61e8cd40a475fe615fbea45ca042fc9d50780df30bc7146f77b8c9</hash>
        <hash alg="SHA-512">27bbf17b8fc1bf5b56e8463f1a2a23846296074a6fb963ef029eac1b6d632ad48065e583bb925b4ae744c86ba11dc83f433224c7e785fcb56d324da12d8ab0bd</hash>
        <hash alg="SHA-384">67cc4e0494f7f580adcc7a8d8e247ec0d6c2c678fdad9f9bdd64955a12517af05146f05310fddad7a77d5a06453a2482</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.kerby/kerby-config@1.0.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://directory.apache.org/kerby/kerby-common/kerby-config</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/www-announce/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/directory-kerby/kerby-common/kerby-config</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.kerby/kerb-crypto@1.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.kerby</group>
      <name>kerb-crypto</name>
      <version>1.0.1</version>
      <description>Kerby-kerb Crypto facility</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4a201fca38ffe52565f5816d7c708ccd</hash>
        <hash alg="SHA-1">66eab4bbf91fa01ed4f72ce771db28c59d35a843</hash>
        <hash alg="SHA-256">af94527564908b5a8ccfdfa8e67dd61c09e062459a0110d85115c42fc8f82b41</hash>
        <hash alg="SHA-512">e5d9dff3547fa2634b1704dcb2e294ef0a71f0b8f79f2e5e4e1c2a78f2f06d8e8c0aac2897c0751b972bc3c8c588512ed44fe145b7410e492f8ea2511bec9b31</hash>
        <hash alg="SHA-384">87e015986ad0c3ef473dfb9ab1e2ed2f21538741edcfe0459cfac22885610819fed9d34d9f4167cb96332d093f945635</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.kerby/kerb-crypto@1.0.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://directory.apache.org/kerby/kerby-kerb/kerb-crypto</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/www-announce/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/directory-kerby/kerby-kerb/kerb-crypto</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-handler@4.1.109.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-handler</name>
      <version>4.1.109.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">98ae5f3ee2e6a9a79a859e00f8f19c20</hash>
        <hash alg="SHA-1">9167863307b3c44cc12262e7b5512de3499b9c4a</hash>
        <hash alg="SHA-256">1161e2ed8e1f037124a8ddfe3d4184ebaa7be17aea27e7fca87f510f17898ea5</hash>
        <hash alg="SHA-512">8ce81fb3b9f25b01ee3cf87df28032c5e0dba39a8083487462f0fc3761e7ee7718915a52f58afd26cf024876aea880d24f9f84e303ce0686c1317d13bf2fc075</hash>
        <hash alg="SHA-384">ed6d4f118445dfbb037112d9f9ed7e70dab700367330fa1fb5b0f13a14a4e0e540dbd1a510487d906d68da26422d3fab</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-handler@4.1.109.Final?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://netty.io/netty-handler/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/netty/netty/netty-handler</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-common@4.1.109.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-common</name>
      <version>4.1.109.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">dd1ec57598444c619ca2fb5cfdcebe30</hash>
        <hash alg="SHA-1">da63e54ee1ca69abf4206cb74fadef7f50850911</hash>
        <hash alg="SHA-256">33bf51077021de2b9d80b9ec64a4fae68f22e6ec56f52431441eaf6dd79cce71</hash>
        <hash alg="SHA-512">7f1ec43811be57559aa74909e078e228bf36492755b249ec61960ee4d089b3d28743d23b6007a9d59659bb48169b7f7a55b9eda6f193faeeee3097ec0f385e5e</hash>
        <hash alg="SHA-384">e2b14855326cc459842a49e68d75b1c528ff18e6bd18052559079bcef763fb50ad686cfc8d644bd1d6dd84dd15114467</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-common@4.1.109.Final?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://netty.io/netty-common/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/netty/netty/netty-common</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-resolver@4.1.109.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-resolver</name>
      <version>4.1.109.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">cf9f06e29ebb6798f54bf535b0dd2c1e</hash>
        <hash alg="SHA-1">055485ac976e27c8bb67ee111a8490c58f67b70c</hash>
        <hash alg="SHA-256">e168920249ea8d65076b0847e64464b5132843f1f1b2ff514e45fa255b64300b</hash>
        <hash alg="SHA-512">7735ccd3da2637ebfc14e327fb63b520afac5c1a8183375ca989843ad37bb45d0eafea2e7446679d4ab21a026b94b0602665424b271198d44a5b1a6625013782</hash>
        <hash alg="SHA-384">8c8aafa422365ff3add86338c67ab6b3602e5559ff8ce474f2a9ddc845efd6a65bed9e47db1f18c99fe7f0c9d9280d61</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-resolver@4.1.109.Final?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://netty.io/netty-resolver/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/netty/netty/netty-resolver</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-buffer@4.1.109.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-buffer</name>
      <version>4.1.109.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a1f7c1613a2d025f3d253ccaeec1a251</hash>
        <hash alg="SHA-1">9d21d602ad7c639fa16b1d26559065d310a34c51</hash>
        <hash alg="SHA-256">ed49956c1e5d99534af2e9e9ecb80f4d3390c631c6cedd2a94d23aedcc911bb9</hash>
        <hash alg="SHA-512">bfdd0b07301724be1c2af718c37bcae15a7f28c6e018a61286d962a56f6794a3354252cd9b25952d59fae0ff570da0a1b11f9182830b0a0dcb737e7d88008565</hash>
        <hash alg="SHA-384">824ff4ed3a5b5a7a85daa86769f80fe31518ad8e1792fc5afa44af77950e1d200e3c8b283320d6e0f289414c28e50d58</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-buffer@4.1.109.Final?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://netty.io/netty-buffer/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/netty/netty/netty-buffer</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-transport@4.1.109.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-transport</name>
      <version>4.1.109.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">69b95c1a4906e326b6d06d8e41c20fbe</hash>
        <hash alg="SHA-1">79e3b07d58ef03c7a860d48f932b720675aa8bd3</hash>
        <hash alg="SHA-256">c1ac17ce337d945290be680d7be942b7b4ff4c989be8ec24c684b3e94438da52</hash>
        <hash alg="SHA-512">899f1d244aa6f0463a5443ddb90cafb0fd6c365d95656cca6d4a297b32e90e5dce37713ffd44bec38b64b287b70368c0e970a422fc46c19c26b6307269751243</hash>
        <hash alg="SHA-384">4e92969c588e4163aac902b0d4f76d1c9b31b62d587ac49a8eeda1db548fda4bb7e3b1dcdae8a896b3f44e602ef8c37a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-transport@4.1.109.Final?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://netty.io/netty-transport/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/netty/netty/netty-transport</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-transport-native-unix-common@4.1.109.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-transport-native-unix-common</name>
      <version>4.1.109.Final</version>
      <description>Static library which contains common unix utilities.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b4a4c56eb03e48030245428baf254dac</hash>
        <hash alg="SHA-1">da7fe1e6943cbab8ee48df2beadc2c8304f347a2</hash>
        <hash alg="SHA-256">61e66832820f257bbee68722ec088b39da383c213eafbd1767097a7fff5d029f</hash>
        <hash alg="SHA-512">a8f8e9c5c22b7e4e57b0e11215d87752acd961ac6236766e82ec2d22106b0117725fabadb9ae3f605065f77791f167e8daecdc4fb7d95521f1fea4f72a24f24c</hash>
        <hash alg="SHA-384">cee709fda4614a214dfc0c601b28bb6f10b2264a81e529c10eb161072c12c8abf2315afcdef394db1c532c2ef5f6b51d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-transport-native-unix-common@4.1.109.Final?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://netty.io/netty-transport-native-unix-common/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/netty/netty/netty-transport-native-unix-common</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-codec@4.1.109.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-codec</name>
      <version>4.1.109.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">42c8c7e35a717b1a3f231ade4ef6a818</hash>
        <hash alg="SHA-1">16e0b2beb49318a549d3ba5d66d707bd5daa8c97</hash>
        <hash alg="SHA-256">2df943cd3ed24f86d61d442314e8a9a4c06b85a9a7aa99cec8c6520e77ff3f1c</hash>
        <hash alg="SHA-512">808dd986b9e988eb5c245805e168d7853f34a8041adeded8fd0917973938938e4239b688588f6cf34ffdc91efc57f190e7535bcc9348806f563672c834d46a52</hash>
        <hash alg="SHA-384">5e7a986322ccd4c84ef6066e30a1e3b0ac9f140844a57673520d35c5ad9657d3e326786681fd773642963bb236058a5b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-codec@4.1.109.Final?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://netty.io/netty-codec/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/netty/netty/netty-codec</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-transport-native-epoll@4.1.109.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-transport-native-epoll</name>
      <version>4.1.109.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c5728594df6b3ea2dcf1e995609009f7</hash>
        <hash alg="SHA-1">067d037667772fa015514484ad9b080e65966523</hash>
        <hash alg="SHA-256">b9d96d4fd609084cec22464379b6cddc54b539125563a601dd633ce267949a4b</hash>
        <hash alg="SHA-512">d6cb6758108a128a15f93254c88e7ab42c91b2faff7b4ed18b05648def0806fe5b348de466d4fe8604cdc3979d735a11dba24a2e939012081db762e36c64ef08</hash>
        <hash alg="SHA-384">807ab2e50a0366ca5cdc14d0cad92e1615fa82fdce568024a8ced2d5e09fcb414dc8abdd58f25b93ca7c84a8377a09ab</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-transport-native-epoll@4.1.109.Final?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://netty.io/netty-transport-native-epoll/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/netty/netty/netty-transport-native-epoll</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-transport-classes-epoll@4.1.109.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-transport-classes-epoll</name>
      <version>4.1.109.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6fec6bb7c1c0504e864b2d5a2fe37a31</hash>
        <hash alg="SHA-1">7307c8acbc9b331fce3496750a5112bdc726fd2a</hash>
        <hash alg="SHA-256">02ce34ba9ab6ecc62de667ed35a8680202a902ec6e90bed587bea2e574fae38d</hash>
        <hash alg="SHA-512">492f05c99ea329ae01c63b63ceec19ce496dd6211d65b06dc8b09947d7261c1b62b2c696afd3fcc3eb83ceb534104120ebcf309b44427fd72cd57b0ad0e8e3a5</hash>
        <hash alg="SHA-384">d8c641589b54e04075f192351244fa3c07c8ed6b27e70cbcd904a7a6fd0350bb02f3b7e62585349f57099b48134404cb</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-transport-classes-epoll@4.1.109.Final?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://netty.io/netty-transport-classes-epoll/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/netty/netty/netty-transport-classes-epoll</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.kerby/kerb-core@1.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.kerby</group>
      <name>kerb-core</name>
      <version>1.0.1</version>
      <description>Kerby-kerb core facilities</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">545c60f29fc4d57a1e50e3be72c88fe0</hash>
        <hash alg="SHA-1">82357e97a5c1b505beb0f6c227d9f39b2d7fdde0</hash>
        <hash alg="SHA-256">4db26bc4a106603044d8883f7280abc803b055b36f5c510a3fffc41e5de4c651</hash>
        <hash alg="SHA-512">76d63f27c1446c7e3394b7778f8839f19d86755b6aff2941526276bfa06b89c32c3dca1698b964cdc24a8b217a4ac4125a32f6aa051fce1183c37a3ac323fcd3</hash>
        <hash alg="SHA-384">85c6dc3fe4c582e5fdd3e084be158c67f31e93836ed7167205069f369884b1427fafef519182d0565bf92544aeabe626</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.kerby/kerb-core@1.0.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://directory.apache.org/kerby/kerby-kerb/kerb-core</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/www-announce/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/directory-kerby/kerby-kerb/kerb-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.kerby/kerby-pkix@1.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.kerby</group>
      <name>kerby-pkix</name>
      <version>1.0.1</version>
      <description>Kerby PKIX Project</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4f99a872b054dead71460c3ed3bca6ac</hash>
        <hash alg="SHA-1">4c1fd1f78ba7c16cf6fcd663ddad7eed34b4d911</hash>
        <hash alg="SHA-256">0410bc1950b57f4792ea6b86df59a2ee87e4ad69b33a17ded438e6686894346a</hash>
        <hash alg="SHA-512">b54347dc0e3f56cf9a9068dc39c8838368067920291520ba4df59184faf3eee43898d6d0d50cbcfce3111bf2c3bd1a5cb31ef1bc2ac47f1bb1e216ae39444d2f</hash>
        <hash alg="SHA-384">9e66f1d910deb0eaa3dba289811423b23fdf2d362287b3dd3cad8a63737303ded842a2a7d67255900413b15ad82e2937</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.kerby/kerby-pkix@1.0.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://directory.apache.org/kerby/kerby-pkix</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/www-announce/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/directory-kerby/kerby-pkix</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.kerby/kerby-asn1@1.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.kerby</group>
      <name>kerby-asn1</name>
      <version>1.0.1</version>
      <description>Kerby ASN1 Project</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">95c31186c0ec12b85bde99e286fe2f8c</hash>
        <hash alg="SHA-1">d54a9712c29c4e6d9d9ba483fad3d450be135fff</hash>
        <hash alg="SHA-256">010a3c33e5b652f11cb29a6e66826a24331e526cf58662dccb4d6695fc6ca59d</hash>
        <hash alg="SHA-512">db962f4aa3a8eb21c36badf1f268d1d68c2e95179f64f7d14fdaaa9b912af0edc989a58a79924c44a56f544b0b68df6de6d6e3bb4f8aa53aa37afc2767cb0684</hash>
        <hash alg="SHA-384">31997848a8dbae5fa350bcf6804603e4c24d3377d0d7ea2f8b07b250fc0cce9d8f7c7f5b7e08831b947e7e4a387c3d7a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.kerby/kerby-asn1@1.0.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://directory.apache.org/kerby/kerby-common/kerby-asn1</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/www-announce/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/directory-kerby/kerby-common/kerby-asn1</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.kerby/kerby-util@1.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.kerby</group>
      <name>kerby-util</name>
      <version>1.0.1</version>
      <description>Kerby common util, without any 3rd party dependency</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">21974b90e4e4d096b526268712dfd4cb</hash>
        <hash alg="SHA-1">389b730dc4e454f70d72ec19ddac2528047f157e</hash>
        <hash alg="SHA-256">db7e2f329e160aaac305268ccb7287c16cf5542cffdd786a8592212df7c315aa</hash>
        <hash alg="SHA-512">30de762e56e57f3b3d54c71ce80046fbbeb67795b8d5cdc493ad239271f2cddc1a9c485d6b49d1b8b970af37bd45fc424adc85684540127a1b4d7da08f8a82b8</hash>
        <hash alg="SHA-384">95c1891ff1e817767106ac887357d20f37de0e905a4fd3aee8e726d38b842f95ed30988ab905dfcf194d727621c10eec</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.kerby/kerby-util@1.0.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://directory.apache.org/kerby/kerby-common/kerby-util</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/www-announce/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/directory-kerby/kerby-common/kerby-util</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar">
      <publisher>fasterxml.com</publisher>
      <group>org.codehaus.woodstox</group>
      <name>stax2-api</name>
      <version>4.2.2</version>
      <description>Stax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6949cace015c0f408f0b846e3735d301</hash>
        <hash alg="SHA-1">b0d746cadea928e5264f2ea294ea9a1bf815bbde</hash>
        <hash alg="SHA-256">a61c48d553efad78bc01fffc4ac528bebbae64cbaec170b2a5e39cf61eb51abe</hash>
        <hash alg="SHA-512">1c0587ecb4c5a659ce2ae1fe36ffc12636a8ecba549a29f2cf91cb4d1d36a335c05f35776f480488d40d894230389f76aeeb363887026c6ef5c565995c17b7c6</hash>
        <hash alg="SHA-384">3b617db8307a081df858a4110f5b8fec51c06355762506cbc4be5557fb06959f0499f7e672103d46f71c66bae472a7bd</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-2-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://github.com/FasterXML/stax2-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/FasterXML/stax2-api/issues</url>
        </reference>
        <reference type="vcs">
          <url>http://github.com/FasterXML/stax2-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.woodstox/woodstox-core@5.4.0?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.woodstox</group>
      <name>woodstox-core</name>
      <version>5.4.0</version>
      <description>Woodstox is a high-performance XML processor that
        implements Stax (JSR-173), SAX2 and Stax2 APIs</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">89882f2098e9318ac3c5275b0ee82443</hash>
        <hash alg="SHA-1">3e05dcce371d3f672feba29f086ad78a93ae3996</hash>
        <hash alg="SHA-256">dbb958cb89f1d45238b061e146249494ff887f5f42b671a3956e98956e0d5c53</hash>
        <hash alg="SHA-512">b400731b6c32a1d56bf3f55a6fb5340acaf70ed2343807de8c48e9a10045db668eeee0fbaaa22d523cd6ef3b8e376cb6ccd58f05ec0310217ee36d87c340ec81</hash>
        <hash alg="SHA-384">fca2440f3e2e1251bc1eeef20e4cbe09882ac39241865be0c1387be5a74ddd8fb17b293eb6608f53786a62e0cfb9661b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.woodstox/woodstox-core@5.4.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/FasterXML/woodstox</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/FasterXML/woodstox/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/FasterXML/woodstox</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.hadoop/hadoop-hdfs-client@3.4.1?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.hadoop</group>
      <name>hadoop-hdfs-client</name>
      <version>3.4.1</version>
      <description>Apache Hadoop HDFS Client</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5af6dbd95230fcf15b66d1a5a39ac505</hash>
        <hash alg="SHA-1">be2f7995190ed2c8eae05522fdc549d7dad6eacf</hash>
        <hash alg="SHA-256">d002ccda9c7f26a4834bbdfb9068a498cdf5642e813b9c1541085153e3cb2cf1</hash>
        <hash alg="SHA-512">ab42824dea066641cb35c751c5d0b71bb3c855b74b7fa1816dc09a33a73e95dd4cfca4758c77ede3d6a948857bb4855a58a658e54856374a2877439cbcbd50c9</hash>
        <hash alg="SHA-384">78ad3777a324ce9592c12a3cef6cc7a4935e151d0a8ad44ced27e2cf66f4e75173fa8b2d06d49fd2c2cfb93de4964d17</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hadoop/hadoop-hdfs-client@3.4.1?type=jar</purl>
      <externalReferences>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.httpcomponents</group>
      <name>httpcore</name>
      <version>4.4.16</version>
      <description>Apache HttpComponents Core (blocking I/O)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">28d2cd9bf8789fd2ec774fb88436ebd1</hash>
        <hash alg="SHA-1">51cf043c87253c9f58b539c9f7e44c8894223850</hash>
        <hash alg="SHA-256">6c9b3dd142a09dc468e23ad39aad6f75a0f2b85125104469f026e52a474e464f</hash>
        <hash alg="SHA-512">168026436a6bcf5e96c0c59606638abbdc30de4b405ae55afde70fdf2895e267a3d48bba6bdadc5a89f38e31da3d9a9dc91e1cab7ea76f5e04322cf1ec63b838</hash>
        <hash alg="SHA-384">ba9ceaee1a37ca3201d6a1315ecb0327b495489efd0baa155c219c475df8d3eb69fe77ab0026563db406497626da6562</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://hc.apache.org/httpcomponents-core-ga</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://issues.apache.org/jira/browse/HTTPCORE</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/httpcomponents-core/tree/4.4.16/httpcore</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.xerial.snappy/snappy-java@1.1.10.7?type=jar">
      <publisher>xerial.org</publisher>
      <group>org.xerial.snappy</group>
      <name>snappy-java</name>
      <version>1.1.10.7</version>
      <description>snappy-java: A fast compression/decompression library</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d74bb2e2857f965683c9de931b71fc86</hash>
        <hash alg="SHA-1">3049f95640f4625a945cfab85715f603fa4c8f80</hash>
        <hash alg="SHA-256">4c766cb3f855415ee734b2392949a0b6f12a60879334a74518deaf6270d32e36</hash>
        <hash alg="SHA-512">22a6ebb8e8ad4d8a149b0c67d8658ac1535d7014857064c4f7ed4999e29c6186de8a80b50dd9b59f631fa1c24970524fdbbb84083c80c59eb0c72d4efb041fef</hash>
        <hash alg="SHA-384">b7ea971de5e286b4bdb8b96063f0ffe611ef82f5887fa6845fc2721bf0e71a88b0c754ba010816596f0b6c178160c0c5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.xerial.snappy/snappy-java@1.1.10.7?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/xerial/snappy-java</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/xerial/snappy-java</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ozone/hdds-interface-admin@2.0.0?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.ozone</group>
      <name>hdds-interface-admin</name>
      <version>2.0.0</version>
      <description>Apache Ozone Distributed Data Store Admin interface</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">205b5790f07a19c124517b2e17db3ac5</hash>
        <hash alg="SHA-1">d396022445271436329d264518ee8d1c93891969</hash>
        <hash alg="SHA-256">9ed0531f0aff7c620bf83675139dc8448acf9bf4fd149b11f45ce5493abc1f5c</hash>
        <hash alg="SHA-512">06ea48f7fbb094a5d7a1a84868f4ce63340e7d4fcaf8fa4549d433818e259ddb2ab17e5367afac3c58049d5ab1e3d8ce832bed3c14aecd18a7838adc69b22287</hash>
        <hash alg="SHA-384">f3b478ad5dbffb37f4729bfeedce1142d3f8902af15879708fba734fb2628dbf9592060386e3cb42f4b8f9dd5dbb5b5d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ozone/hdds-interface-admin@2.0.0?type=jar</purl>
      <externalReferences>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ozone/hdds-interface-client@2.0.0?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.ozone</group>
      <name>hdds-interface-client</name>
      <version>2.0.0</version>
      <description>Apache Ozone Distributed Data Store Client interface</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">86a2bd63757b0f709b8beb2969ce93b4</hash>
        <hash alg="SHA-1">e0a45a5573bd80230395190d2c06d4aba3c3bdd4</hash>
        <hash alg="SHA-256">ab69c0d6135bd51ce1fe303c5dc43ea9580c70bdd5d99798f98da2876fa05483</hash>
        <hash alg="SHA-512">dbd9a3cc8d1c3fe2fb7bdca1d577c484c9b6cf885a41e19c5c23c6af8babd3b3e62c50657b014959792ca6907983c6bdc85c9b9512124cc6f9bc32c7aeb2f922</hash>
        <hash alg="SHA-384">0d5bf5c4c32c56f13c4e38d3a34e755d4f8887cc55beab435b7775ab81e99420c42ed95dc38f3f79bf1bfbd83bc86987</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ozone/hdds-interface-client@2.0.0?type=jar</purl>
      <externalReferences>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.hadoop.thirdparty/hadoop-shaded-protobuf_3_25@1.4.0?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.hadoop.thirdparty</group>
      <name>hadoop-shaded-protobuf_3_25</name>
      <version>1.4.0</version>
      <description>Packaging of relocated (renamed, shaded) third-party libraries used by Hadoop.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">45307611c9be45cfce1ac5b7fb8eb229</hash>
        <hash alg="SHA-1">ec1973876319e1dce9dc02d63f97bb11af335032</hash>
        <hash alg="SHA-256">ae76613b89f4b983c2a09962d9b30365170395a594e97e6f28f019ced3c482a5</hash>
        <hash alg="SHA-512">d3cf3d0198a3958021e53d4cf4e10500da792d6f21604793271b28450ba3dcd7d08119c89cbc4f57d3fcf78da8464b537155f8809b9a74d8e647f0586808e235</hash>
        <hash alg="SHA-384">498e98969c4236f24bd27aa6c03db2f8011bc493e742c9b4020fb78fd87bc4c91bd6069c2a24f241a67610f72e3590ef</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hadoop.thirdparty/hadoop-shaded-protobuf_3_25@1.4.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://www.apache.org/hadoop-thirdparty/hadoop-shaded-protobuf_3_25/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/www-announce/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven-apache-parent/tree/apache-21/hadoop-thirdparty/hadoop-shaded-protobuf_3_25</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ratis/ratis-client@3.1.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.ratis</group>
      <name>ratis-client</name>
      <version>3.1.2</version>
      <description>Apache Ratis is an open source java implementation for RAFT consensus protocol</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e1ae18ad73f8ff3d6efbab2d29aa1d38</hash>
        <hash alg="SHA-1">b94b6e94b22e3d6fb5abcc58e7a03f48ee889d84</hash>
        <hash alg="SHA-256">0bc9ef8ded5312327771545f194ae3d6b357ce2dc36b100f557624940a39f65e</hash>
        <hash alg="SHA-512">cfb3e8b010069c4f5743f71a6f2047f00debc2e0056c43fac323e025f736e4ad1832b7ab16f7f5da08076f7373054fc11b5897bc9245ec0630005d32fcbe31bf</hash>
        <hash alg="SHA-384">4ea67bd8136933c0919652d7c5fb1fd04f07e04e76aa5a6239cb06cca18f73c7ffeb68e24aaad2b807cb750454fc35e5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ratis/ratis-client@3.1.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://ratis.apache.org/ratis-client/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://issues.apache.org/jira/browse/RATIS</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?user@ratis.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://git-wip-us.apache.org/repos/asf?p=ratis.git/ratis-client</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ratis/ratis-common@3.1.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.ratis</group>
      <name>ratis-common</name>
      <version>3.1.2</version>
      <description>Apache Ratis is an open source java implementation for RAFT consensus protocol</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8dfea7d68d36331bb32d2dcb8c18c8ff</hash>
        <hash alg="SHA-1">5a89347b71bb7f14cbcb7dde830cd588d4638bcf</hash>
        <hash alg="SHA-256">171faf76fc4963fce5c369b76b24830d8ecd721f4c576d15545da684a79985aa</hash>
        <hash alg="SHA-512">95c87c4f7882e4606c0c95656cd68132e0632f596bffb306603985a7260d104f0363ae0b7130e7e6769e57571cb3a74b707563ec724da1ad939816559a4c2206</hash>
        <hash alg="SHA-384">0f0888c31874f0c6dcac23beddef08ddc12ea518d994248ddd17a24bfd5365f913fbc5bbe9b28463006452438fe1968a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ratis/ratis-common@3.1.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://ratis.apache.org/ratis-common/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://issues.apache.org/jira/browse/RATIS</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?user@ratis.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://git-wip-us.apache.org/repos/asf?p=ratis.git/ratis-common</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ratis/ratis-grpc@3.1.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.ratis</group>
      <name>ratis-grpc</name>
      <version>3.1.2</version>
      <description>Apache Ratis is an open source java implementation for RAFT consensus protocol</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f3e221db46b75fb538bfe2818769cb38</hash>
        <hash alg="SHA-1">fbe409b272b134bafddb54cd6312a9b41e7e9f8f</hash>
        <hash alg="SHA-256">44df9d6205f8a0cd26d463a942f0ab42461509e7eb061f08ff0fa5ed6298cfc9</hash>
        <hash alg="SHA-512">c2bb45e6ba15cf413c458252e39a69c074ae45491a809ab1d750c89ffac32db8003cb3409bf5a5bf9e85207c805ca43a75272ee2b653bce923223b3d1c28661f</hash>
        <hash alg="SHA-384">5910b99bc11ae9df793ca0473842702f7b1069175bdcc5e27f1cd890a1c1268d950fde54c6d47dbe6f49f242b019b6fc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ratis/ratis-grpc@3.1.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://ratis.apache.org/ratis-grpc/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://issues.apache.org/jira/browse/RATIS</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?user@ratis.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://git-wip-us.apache.org/repos/asf?p=ratis.git/ratis-grpc</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ratis/ratis-metrics-dropwizard3@3.1.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.ratis</group>
      <name>ratis-metrics-dropwizard3</name>
      <version>3.1.2</version>
      <description>Apache Ratis is an open source java implementation for RAFT consensus protocol</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8a49f93349edf99fa1794f19430c89b3</hash>
        <hash alg="SHA-1">661822959205b4442baf35435c67bb5bef18eaf9</hash>
        <hash alg="SHA-256">c782a29d12385648606ab19d8259fffe49d424aae60bc5e7549e156a6210258d</hash>
        <hash alg="SHA-512">5acb5049b5a7dd6bf3379217a2cec9760fc11012b6e842c69399d65874f0e02ff5fd718fefb8eaaad896fc74cddc302b65e3d14f642dca8a6f8e79bab755c41b</hash>
        <hash alg="SHA-384">b2590f784cde29f0023b09e8cc6635ef90bc45f39b57a6819a3c78b5072b119bda6aef3c69900c47cffa1509345895bc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ratis/ratis-metrics-dropwizard3@3.1.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://ratis.apache.org/ratis-metrics-dropwizard3/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://issues.apache.org/jira/browse/RATIS</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?user@ratis.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://git-wip-us.apache.org/repos/asf?p=ratis.git/ratis-metrics-dropwizard3</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ratis/ratis-metrics-api@3.1.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.ratis</group>
      <name>ratis-metrics-api</name>
      <version>3.1.2</version>
      <description>Apache Ratis is an open source java implementation for RAFT consensus protocol</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">82353f58242ff323b36b8d6fee75fb9b</hash>
        <hash alg="SHA-1">3ab0a69b1951100a0e1e16fd17dfaa0f730c58e5</hash>
        <hash alg="SHA-256">338f6f5563cccdef01527ac888783e65165c90bce019e4d0b4c52ef74afd4f98</hash>
        <hash alg="SHA-512">6f58875f84f9cfead3dd4252d6aaffda62528b846fee06f4958c155e13d6159d564bc2104cc65e34a24d1b7ce23b60f607525aa86e63063ec4fd6d8590eafefa</hash>
        <hash alg="SHA-384">47d1005f58e98d2c4f73f23961b222ab1c3c6ea564c1d8ffadfcc6c4e8d597d6542b3537e31815154a285856607fb94f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ratis/ratis-metrics-api@3.1.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://ratis.apache.org/ratis-metrics-api/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://issues.apache.org/jira/browse/RATIS</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?user@ratis.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://git-wip-us.apache.org/repos/asf?p=ratis.git/ratis-metrics-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ratis/ratis-netty@3.1.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.ratis</group>
      <name>ratis-netty</name>
      <version>3.1.2</version>
      <description>Apache Ratis is an open source java implementation for RAFT consensus protocol</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">985fcdd2e1539e2c5b56171a68bbc5ff</hash>
        <hash alg="SHA-1">1b5d543e93104b3f3af8af6f5ed3f7f91ebd0a52</hash>
        <hash alg="SHA-256">0c20ea6d5c289713c4667df6796fb3f4968eb7a25dde7ff7151a664112a92e79</hash>
        <hash alg="SHA-512">992bbc9f4dcb8b781ae0eee8fad5249afde434c5ed90249ca62953622d9adcdd43eaa6ec2a5257571018a1a29907a3fcec3fea8710bf4b9c5b3a1e767686cc3c</hash>
        <hash alg="SHA-384">17ce16efc39991402ab387a4994d8b8827537dbb366bfcd0d8635ce2d5018e8326118aa784ad58c4e625926a78c43d21</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ratis/ratis-netty@3.1.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://ratis.apache.org/ratis-netty/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://issues.apache.org/jira/browse/RATIS</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?user@ratis.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://git-wip-us.apache.org/repos/asf?p=ratis.git/ratis-netty</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ratis/ratis-proto@3.1.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.ratis</group>
      <name>ratis-proto</name>
      <version>3.1.2</version>
      <description>Apache Ratis is an open source java implementation for RAFT consensus protocol</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4d4de87f12be17576ae9becd0737d922</hash>
        <hash alg="SHA-1">9869f56bb02e89740afca70fed2f4b728692504f</hash>
        <hash alg="SHA-256">079f3baf844d11d0ced5d38c465050f01afb1779c050710ae319929c5880b829</hash>
        <hash alg="SHA-512">147c07f9f57e21482c693d52649c259b31e4f89fa50d1ad8cb87863cd45263a1a11c4cd1ed45547352d0ba4edcfe316810dc681450d91ca0610c31ffc2ffa279</hash>
        <hash alg="SHA-384">911db39233ec14fb2fd47bb020e618918ea098a7fa7a12568ff8713e8a9590b292bc29227db9f080193bac832f82ff71</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ratis/ratis-proto@3.1.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://ratis.apache.org/ratis-proto/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://issues.apache.org/jira/browse/RATIS</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?user@ratis.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://git-wip-us.apache.org/repos/asf?p=ratis.git/ratis-proto</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ratis/ratis-server-api@3.1.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.ratis</group>
      <name>ratis-server-api</name>
      <version>3.1.2</version>
      <description>Apache Ratis is an open source java implementation for RAFT consensus protocol</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">072fae866dc1326cdfc868c031d895a9</hash>
        <hash alg="SHA-1">66004bee490f2c0113cd824e867cabc2b242bdd5</hash>
        <hash alg="SHA-256">22ae8c7d37397df3776d14879ada39b88c9495b8abf85ec0eb9ed2128dc94192</hash>
        <hash alg="SHA-512">6e2b13adad686968e5c7e044f757e84b632f631401844e0ff72d6026d7094a35dcbb638eedf5e9ec60a9c0a1c90945873c36c4fb6ba44ca5ace2a05f1269b437</hash>
        <hash alg="SHA-384">cd28e57006482c5c439426f3ec18542ae1354e99f9fbd925ca3181ba67a28815e92f65fac8e025902467acfa4a116e3f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ratis/ratis-server-api@3.1.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://ratis.apache.org/ratis-server-api/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://issues.apache.org/jira/browse/RATIS</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?user@ratis.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://git-wip-us.apache.org/repos/asf?p=ratis.git/ratis-server-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ratis/ratis-thirdparty-misc@1.0.6?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.ratis</group>
      <name>ratis-thirdparty-misc</name>
      <version>1.0.6</version>
      <description>Miscellaneous thirdparty dependencies for Apache Ratis</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">053bd00e8b7e1b0f74c248ce1c55e9a2</hash>
        <hash alg="SHA-1">c2fd6b34547698474760701b73ae53f0661e0ae1</hash>
        <hash alg="SHA-256">46a4ecd1bfd01652b10dd88fb24ee1085deb3e0807392f7d569e63685213cdf3</hash>
        <hash alg="SHA-512">30c14bdcf8f04d03bd9ce1d6e64ccb8f5b12b17893571fed7781754d48a6a695cdd4e6ca803983dc7e3d45500fb6ae22929b16bba868583c77d1ac25922a250c</hash>
        <hash alg="SHA-384">66ff22d4e73b288f7a20036b0610f5a7699cf6ce419d78caced743ce71445f3a97155584f4d07772d7bdcfeaddd6b4df</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ratis/ratis-thirdparty-misc@1.0.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://ratis.apache.org/ratis-thirdparty-misc/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://issues.apache.org/jira/browse/RATIS</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/www-announce/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/ratis-thirdparty/ratis-thirdparty-misc</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.80?type=jar">
      <group>org.bouncycastle</group>
      <name>bcpkix-jdk18on</name>
      <version>1.80</version>
      <description>The Bouncy Castle Java APIs for CMS, PKCS, EAC, TSP, CMP, CRMF, OCSP, and certificate generation. This jar contains APIs for JDK 1.8 and up. The APIs are designed primarily to be used in conjunction with the BC Java provider but may also be used with other providers providing cryptographic services.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ab14be97baf490336431a6782af9adf2</hash>
        <hash alg="SHA-1">5277dfaaef2e92ce1d802499599a0ca7488f86e6</hash>
        <hash alg="SHA-256">4f4ba6a92617ea19dc183f0fa5db492eee426fdde2a0a2d6c94777ffd1af6413</hash>
        <hash alg="SHA-512">a7bcd25a8c93e163fd6c5f43d8b9d102c77c94edd78614e5a98b90412ea3519a7752cd9efd035eb0647b5fc6c261cfec56080ec067dc84df2fc22c5ebb317d3f</hash>
        <hash alg="SHA-384">bf9ac90fe578e4cec5d42607d363af611f3f84dbfa00ddfb978945d360dde02cc24c0545fb7e767367ca3f0713595379</hash>
      </hashes>
      <licenses>
        <license>
          <name>Bouncy Castle Licence</name>
          <url>https://www.bouncycastle.org/licence.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.80?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://www.bouncycastle.org/download/bouncy-castle-java/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/bcgit/bc-java/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/bcgit/bc-java</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.bouncycastle/bcprov-jdk18on@1.80?type=jar">
      <group>org.bouncycastle</group>
      <name>bcprov-jdk18on</name>
      <version>1.80</version>
      <description>The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains the JCA/JCE provider and low-level API for the BC Java version 1.80 for Java 8 and later.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b688fbc4b7e001d7643106b177b91f80</hash>
        <hash alg="SHA-1">e22100b41042decf09cab914a5af8d2c57b5ac4a</hash>
        <hash alg="SHA-256">e8ad209f8c58d291a37ca9750e9e9fac60596956c983e49dd8282381dd8b3249</hash>
        <hash alg="SHA-512">0773042bd35e22a582cbe89f4be8a8476487b6e030ee83e86038d43cba0d6c775e91c51ad31f126e19b440ced6c03f73e4fdac79fc17b664d0c84b4e859fa90d</hash>
        <hash alg="SHA-384">299d02af765f4a84c41b14d19e25762f7440a6edb08944da4e8b3ff39d8692ad575ae225e968efb5ebb7c51f4cc1f505</hash>
      </hashes>
      <licenses>
        <license>
          <name>Bouncy Castle Licence</name>
          <url>https://www.bouncycastle.org/licence.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.bouncycastle/bcprov-jdk18on@1.80?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://www.bouncycastle.org/download/bouncy-castle-java/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/bcgit/bc-java/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/bcgit/bc-java</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.bouncycastle/bcutil-jdk18on@1.80?type=jar">
      <group>org.bouncycastle</group>
      <name>bcutil-jdk18on</name>
      <version>1.80</version>
      <description>The Bouncy Castle Java APIs for ASN.1 extension and utility APIs used to support bcpkix and bctls. This jar contains APIs for Java 8 and later.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">40838f69055183d6c0656598cb929bfa</hash>
        <hash alg="SHA-1">b95726d1d49a0c65010c59a3e6640311d951bfd1</hash>
        <hash alg="SHA-256">22eca687f7955411f456af33e6ea8e68fc73cd80cb8b32aa5f7a8b1827d7c678</hash>
        <hash alg="SHA-512">e2afe829c431efff86c5cd4ce1c153fc3020bb3098d78bc902856ec093a8bdb46bf0ea33379cc4a4fdf9959a6530927c8884b01a3cd85d557bf0be708c1aeebf</hash>
        <hash alg="SHA-384">7bbf7f26f64bfb16da27960dd1cfd399ef6d478a2ced4d7f57c007a25ad1bce676c423c4e8ef6470e17e69a90baac5b4</hash>
      </hashes>
      <licenses>
        <license>
          <name>Bouncy Castle Licence</name>
          <url>https://www.bouncycastle.org/licence.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.bouncycastle/bcutil-jdk18on@1.80?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://www.bouncycastle.org/download/bouncy-castle-java/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/bcgit/bc-java/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/bcgit/bc-java</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@1.9.25?type=jar">
      <group>org.jetbrains.kotlin</group>
      <name>kotlin-stdlib</name>
      <version>1.9.25</version>
      <description>Kotlin Standard Library</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">33aff849edc75a29bfcfe2b47258b3de</hash>
        <hash alg="SHA-1">f700a2f2b8f0d6d0fde48f56d894dc722fb029d7</hash>
        <hash alg="SHA-256">f9cdcdbff1f5de85380ae526977e683726c2aa42db1ed6e6e50ae89e496e95fd</hash>
        <hash alg="SHA-512">453d9eb016259dc4582c206687ab9463b569680e89337df80d1a8bd08c3ea73b50ea84eec23afea76cc060b998b450f00d506b92d724f60c721a81b2189c6c33</hash>
        <hash alg="SHA-384">741f1089335d6be517b37c316bbd5ad822ab03150357972c7cf95b7bae22b295803faea7a2c5fd6c1e90d682c821115b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@1.9.25?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://kotlinlang.org/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/JetBrains/kotlin</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jetbrains/annotations@13.0?type=jar">
      <group>org.jetbrains</group>
      <name>annotations</name>
      <version>13.0</version>
      <description>A set of annotations used for code inspection support and code documentation.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f4fb462172517b46b6cd90003508515a</hash>
        <hash alg="SHA-1">919f0dfe192fb4e063e7dacadee7f8bb9a2672a9</hash>
        <hash alg="SHA-256">ace2a10dc8e2d5fd34925ecac03e4988b2c0f851650c94b8cef49ba1bd111478</hash>
        <hash alg="SHA-512">5622d0ffe410e7272e2bb9fae1006caedeb86d0c62d2d9f3929a3b3cdcdef1963218fcf0cede82e95ef9f4da3ed4a173fa055ee6e4038886376181e0423e02ff</hash>
        <hash alg="SHA-384">6bcde3a6e471d416522e6288474bc4f9115e2e8abf8ce5d300829bee4aa98dff73be7d8c6f0607f3d6d423c7f5abbf90</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.jetbrains/annotations@13.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.jetbrains.org</url>
        </reference>
        <reference type="distribution-intake">
          <url>http://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/JetBrains/intellij-community</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.reflections/reflections@0.10.2?type=jar">
      <group>org.reflections</group>
      <name>reflections</name>
      <version>0.10.2</version>
      <description>Reflections - Java runtime metadata analysis</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1d0070839d825f57fe6f4d8e2a82989b</hash>
        <hash alg="SHA-1">b638d7ca0e0fe0146b60a0e7ba232ad852a73b31</hash>
        <hash alg="SHA-256">938a2d08fe54050d7610b944d8ddc3a09355710d9e6be0aac838dbc04e9a2825</hash>
        <hash alg="SHA-512">d04700d4b6d3f28faa611e10ce863df1d6c82dfc6dd1b27cb910e44c19089ca08bef939e2bca7bc79274836f8e9d8801c4326232d24a38dba0a4893a20c7c42c</hash>
        <hash alg="SHA-384">2604ea7e2330b2c60dbc4177076b50b28a056083fe34cca9005b63f7efbba4d8513d1f21b56c296a73292b2003ce1722</hash>
      </hashes>
      <licenses>
        <license>
          <id>WTFPL</id>
          <url>http://www.wtfpl.net/about/</url>
        </license>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.reflections/reflections@0.10.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://github.com/ronmamo/reflections</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/ronmamo/reflections/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/ronmamo/reflections/issues</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.javassist/javassist@3.30.2-GA?type=jar">
      <publisher>Shigeru Chiba, www.javassist.org</publisher>
      <group>org.javassist</group>
      <name>javassist</name>
      <version>3.30.2-GA</version>
      <description>Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation
    simple. It is a class library for editing bytecodes in Java.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f5b827b8ddec0629cc7a6d7dafc45999</hash>
        <hash alg="SHA-1">284580b5e42dfa1b8267058566435d9e93fae7f7</hash>
        <hash alg="SHA-256">eba37290994b5e4868f3af98ff113f6244a6b099385d9ad46881307d3cb01aaf</hash>
        <hash alg="SHA-512">046c5b87732ef28540c56f88891238e49ac15fcc23e1f13e0b12de816831ba3de54e68a727b6163877a7b19b13f1362c0e6affa2664af1fdac5748632ed7a09e</hash>
        <hash alg="SHA-384">d1dfb87ac4d7797ea07098b7814190eed3aa16e86dd792916ff7f86c30ad456dd153f9ae4e77f13cee03e23dd3cfb24b</hash>
      </hashes>
      <licenses>
        <license>
          <id>MPL-1.1</id>
        </license>
        <license>
          <id>LGPL-2.1-only</id>
        </license>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.javassist/javassist@3.30.2-GA?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://www.javassist.org/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://jira.jboss.org/jira/browse/JASSIST/</url>
        </reference>
        <reference type="vcs">
          <url>scm:git:git@github.com:jboss-javassist/javassist.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>2.0.17</version>
      <description>The slf4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b6480d114a23683498ac3f746f959d2f</hash>
        <hash alg="SHA-1">d9e58ac9c7779ba3bf8142aff6c830617a7fe60f</hash>
        <hash alg="SHA-256">7b751d952061954d5abfed7181c1f645d336091b679891591d63329c622eb832</hash>
        <hash alg="SHA-512">9a3e79db6666a6096a3021bb2e1d918f30f589d8de51d6b600f8ebd92515a510ae2d8f87919cc2dfa8365d64f10194cac8dfa0fb950160eef0e9da06f6caaeb9</hash>
        <hash alg="SHA-384">6ea24f814a9b6ece428cfd0535e2f3b8927005745ef61006b50fdb5a90126ee5ea05650155382b3b755c5bce38ef3944</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/license/mit/</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.slf4j.org</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/qos-ch/slf4j/slf4j-parent/slf4j-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.yaml/snakeyaml@2.0?type=jar">
      <group>org.yaml</group>
      <name>snakeyaml</name>
      <version>2.0</version>
      <description>YAML 1.1 parser and emitter for Java</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">caf24b81b9d57e6d4f68b1ccd36e00a3</hash>
        <hash alg="SHA-1">3aab2116756442bf0d4cd1c089b24d34c3baa253</hash>
        <hash alg="SHA-256">880c9d896e4b74a06c549c15ca496450165d6909fa15d7e662bee8f6a66d7afa</hash>
        <hash alg="SHA-512">93567558444365c436027bd1064b67ae99abde77fa89b33ac7c586ab83e4dbf02b7610669fd00ccd258bca6ba3fa078954c92d918b989317dce7bf9ce18836b8</hash>
        <hash alg="SHA-384">63c0ec40f4e3f24786031fb8a9477071c86e69247dce283ff725e328e26fba7bdfbb0ab52027b9b0988b3978703a95fe</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.yaml/snakeyaml@2.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://bitbucket.org/snakeyaml/snakeyaml</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://bitbucket.org/snakeyaml/snakeyaml/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://bitbucket.org/snakeyaml/snakeyaml/src</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.jaxb</group>
      <name>jaxb-runtime</name>
      <version>2.3.9</version>
      <description>JAXB (JSR 222) Reference Implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9383286160dde0e1a0fec25aee8a44ef</hash>
        <hash alg="SHA-1">9d42b4f19df7e20b625b2044a7de81d95f6dff29</hash>
        <hash alg="SHA-256">ba88e5bde7c0d878c3e1f2ec2fcabaf51d201eaf93b3bb9cfecfc1f11b2304d4</hash>
        <hash alg="SHA-512">a71f9f1b7656e2f0b30ebf36c30ec7b8c7b744faf9f94bd1a7944d7295f8445322b78abaf23d145cacf4dfac64010f19eb32d23728fb2a79edc6cda90412faf8</hash>
        <hash alg="SHA-384">76ab72382ad126d959634eedebfdde334a395cb897e906ea8707ceeb8d257d5c395f234661947a3dbb7b38d86d79404c</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://eclipse-ee4j.github.io/jaxb-ri/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaxb-ri/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://accounts.eclipse.org/mailing-list/jaxb-impl-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jaxb-ri.git/jaxb-runtime-parent/jaxb-runtime</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.jaxb/txw2@2.3.9?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.jaxb</group>
      <name>txw2</name>
      <version>2.3.9</version>
      <description>TXW is a library that allows you to write XML documents.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5db04c7917b3c0a07862a7e63bfc1581</hash>
        <hash alg="SHA-1">13a78453a89bf7d268382a520cba4d5435c5adfc</hash>
        <hash alg="SHA-256">973018b87af911ecf6e6d861dd0d6a477e4d8ae6a883ec5d073d3df1330b87f0</hash>
        <hash alg="SHA-512">de58c863983f5e4b1b7bb0f415da12b18cabcc8babb017a1c99ce7e2cfbe15d49b0abd43f2bd93819c00c55ce36c97c8aa51156ee29989da281d7829c9887db9</hash>
        <hash alg="SHA-384">17797fa099811f68615a5637eb3d492966a2a86f92f7de67dcf2953aee959ff5dd3f238155361dfa670517116c68769a</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.jaxb/txw2@2.3.9?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://eclipse-ee4j.github.io/jaxb-ri/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaxb-ri/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://accounts.eclipse.org/mailing-list/jaxb-impl-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jaxb-ri.git/jaxb-txw-parent/txw2</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>com.sun.istack</group>
      <name>istack-commons-runtime</name>
      <version>3.0.12</version>
      <description>istack common utility code</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1952bd76321f8580cfaa57e332a68287</hash>
        <hash alg="SHA-1">cbbe1a62b0cc6c85972e99d52aaee350153dc530</hash>
        <hash alg="SHA-256">27d85fc134c9271d5c79d3300fc4669668f017e72409727c428f54f2417f04cd</hash>
        <hash alg="SHA-512">af36b11cc0d82b7f62c64941f4e7d441d25cb9f3c4b3e08753d038c388e5a09364b5dac9127f29a9b8df6d96034133caadab6d74371077478d2f301605913460</hash>
        <hash alg="SHA-384">ad8ba1f6538e087915b1e7fbf4a7a60b006ebecc4ab52986c10dfe88ae11ae7eb6e1f302bee06f70b16ec316f001375b</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://projects.eclipse.org/projects/ee4j/istack-commons/istack-commons-runtime</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaxb-istack-commons/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jaxb-impl-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jaxb-istack-commons/istack-commons-runtime</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>com.sun.activation</group>
      <name>jakarta.activation</name>
      <version>1.2.2</version>
      <description>Jakarta Activation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0b8bee3bf29b9a015f8b992035581a7c</hash>
        <hash alg="SHA-1">74548703f9851017ce2f556066659438019e7eb5</hash>
        <hash alg="SHA-256">02156773e4ae9d048d14a56ad35d644bee9f1052a791d072df3ded3c656e6e1a</hash>
        <hash alg="SHA-512">8bd94a4370b827e3904f31253b022e5c1851896d3b616ca7daebfef259238cedc56d4ced32c74f24a13c3e2295b0ea012af5d04656b7f713cc53a2f18d5e2cf7</hash>
        <hash alg="SHA-384">1cb0aff8b73ba52a9931b2cf13c75a1ce6665fb826bf97ede66db75c532136aa189fb53a1925e62b6eef572309ef3b9a</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-ee4j/jaf/jakarta.activation</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaf/issues/</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jaf/jakarta.activation</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-reload4j@2.0.17?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-reload4j</name>
      <version>2.0.17</version>
      <description>SLF4J Reload4j Provider</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c6a2d9b606d7d333350b6b95488e1138</hash>
        <hash alg="SHA-1">334b175c8ce44b3a6815fc92971916f36e15d000</hash>
        <hash alg="SHA-256">62dfd069563dbce91d276c9a38d557da49df7be15b03bb898b63b5390c6bb889</hash>
        <hash alg="SHA-512">410718d1e02509e743a93634e819ef28c4300151ae4d22c8ee1e11f3dbcf5376255956b9e05e1dc696a3daee8c9a32bf423fabcc637e2424517c5afe189b045e</hash>
        <hash alg="SHA-384">fac3397ff06e913bb09153d86e632f79b13658ef8659f466d1ab88b4864c9423a4878ad2cdff1ca026095f8cf530f6d5</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/license/mit/</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-reload4j@2.0.17?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://reload4j.qos.ch</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/qos-ch/slf4j/slf4j-parent/slf4j-reload4j</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/ch.qos.reload4j/reload4j@1.2.26?type=jar">
      <publisher>QOS.CH Sarl (Switzerland)</publisher>
      <group>ch.qos.reload4j</group>
      <name>reload4j</name>
      <version>1.2.26</version>
      <description>Reload4j revives EOLed log4j 1.x</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">33746f141a93713e900e8734ef7e6404</hash>
        <hash alg="SHA-1">f9a29cea570c15844d2ec98bf8e2e523017a6a53</hash>
        <hash alg="SHA-256">a7e86ae144541d04d24d1b7123d7425415477d50f387bb868e5c955aeaedd96f</hash>
        <hash alg="SHA-512">4abb5e8dfcd24aeef2abd5fddfe81e02fd8de84193960fa7264a7ae22107abbd91aefa8128da450ac9fadede37738c00d7853beff2111bdb81f23a13d48c5779</hash>
        <hash alg="SHA-384">705036d64a1b15d5029d3e5b807c5829f72f4a422090778003eddab9da0b79c365cfc8d9268ec33c4c66bc9ea7a5837d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/ch.qos.reload4j/reload4j@1.2.26?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://reload4j.qos.ch</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/qos-ch/reload4j</url>
        </reference>
      </externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.ozone/hdds-common@2.0.0?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.16.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.16.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.16.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.16.2?type=jar"/>
      <dependency ref="pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar"/>
      <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.29.2?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/guava@32.1.3-jre?type=jar"/>
      <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@2.5.0?type=jar"/>
      <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.18.0?type=jar"/>
      <dependency ref="pkg:maven/commons-validator/commons-validator@1.6?type=jar"/>
      <dependency ref="pkg:maven/info.picocli/picocli@4.7.5?type=jar"/>
      <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@3.2.6?type=jar"/>
      <dependency ref="pkg:maven/io.grpc/grpc-api@1.58.0?type=jar"/>
      <dependency ref="pkg:maven/io.jaegertracing/jaeger-client@1.8.1?type=jar"/>
      <dependency ref="pkg:maven/io.jaegertracing/jaeger-core@1.8.1?type=jar"/>
      <dependency ref="pkg:maven/io.opentracing/opentracing-api@0.33.0?type=jar"/>
      <dependency ref="pkg:maven/io.opentracing/opentracing-util@0.33.0?type=jar"/>
      <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1?type=jar"/>
      <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar"/>
      <dependency ref="pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ozone/hdds-annotation-processing@2.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ozone/hdds-config@2.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ozone/hdds-hadoop-dependency-client@2.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ozone/hdds-interface-admin@2.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ozone/hdds-interface-client@2.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ratis/ratis-client@3.1.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ratis/ratis-common@3.1.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ratis/ratis-grpc@3.1.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ratis/ratis-metrics-dropwizard3@3.1.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ratis/ratis-netty@3.1.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ratis/ratis-proto@3.1.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ratis/ratis-server-api@3.1.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ratis/ratis-thirdparty-misc@1.0.6?type=jar"/>
      <dependency ref="pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.80?type=jar"/>
      <dependency ref="pkg:maven/org.bouncycastle/bcprov-jdk18on@1.80?type=jar"/>
      <dependency ref="pkg:maven/org.bouncycastle/bcutil-jdk18on@1.80?type=jar"/>
      <dependency ref="pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@1.9.25?type=jar"/>
      <dependency ref="pkg:maven/org.reflections/reflections@0.10.2?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
      <dependency ref="pkg:maven/org.yaml/snakeyaml@2.0?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-reload4j@2.0.17?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.16.2?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.16.2?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.16.2?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.16.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.16.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.16.2?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.16.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.16.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.16.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar"/>
    <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.29.2?type=jar"/>
    <dependency ref="pkg:maven/com.google.guava/guava@32.1.3-jre?type=jar">
      <dependency ref="pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar"/>
      <dependency ref="pkg:maven/org.checkerframework/checker-qual@3.37.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.29.2?type=jar"/>
      <dependency ref="pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar"/>
    <dependency ref="pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar"/>
    <dependency ref="pkg:maven/org.checkerframework/checker-qual@3.37.0?type=jar"/>
    <dependency ref="pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar"/>
    <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@2.5.0?type=jar"/>
    <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
    <dependency ref="pkg:maven/commons-io/commons-io@2.18.0?type=jar"/>
    <dependency ref="pkg:maven/commons-validator/commons-validator@1.6?type=jar">
      <dependency ref="pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar"/>
      <dependency ref="pkg:maven/commons-digester/commons-digester@1.8.1?type=jar"/>
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.2?type=jar"/>
      <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar">
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.2?type=jar"/>
      <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-logging/commons-logging@1.2?type=jar"/>
    <dependency ref="pkg:maven/commons-digester/commons-digester@1.8.1?type=jar"/>
    <dependency ref="pkg:maven/info.picocli/picocli@4.7.5?type=jar"/>
    <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@3.2.6?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
    <dependency ref="pkg:maven/io.grpc/grpc-api@1.58.0?type=jar">
      <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.29.2?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/guava@32.1.3-jre?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.jaegertracing/jaeger-client@1.8.1?type=jar">
      <dependency ref="pkg:maven/io.jaegertracing/jaeger-thrift@1.8.1?type=jar"/>
      <dependency ref="pkg:maven/io.jaegertracing/jaeger-core@1.8.1?type=jar"/>
      <dependency ref="pkg:maven/io.jaegertracing/jaeger-tracerresolver@1.8.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.jaegertracing/jaeger-thrift@1.8.1?type=jar">
      <dependency ref="pkg:maven/io.jaegertracing/jaeger-core@1.8.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
      <dependency ref="pkg:maven/org.apache.thrift/libthrift@0.15.0?type=jar"/>
      <dependency ref="pkg:maven/com.squareup.okhttp3/okhttp@4.12.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.jaegertracing/jaeger-core@1.8.1?type=jar">
      <dependency ref="pkg:maven/io.opentracing/opentracing-api@0.33.0?type=jar"/>
      <dependency ref="pkg:maven/io.opentracing/opentracing-util@0.33.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.gson/gson@2.10.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.opentracing/opentracing-api@0.33.0?type=jar"/>
    <dependency ref="pkg:maven/io.opentracing/opentracing-util@0.33.0?type=jar">
      <dependency ref="pkg:maven/io.opentracing/opentracing-api@0.33.0?type=jar"/>
      <dependency ref="pkg:maven/io.opentracing/opentracing-noop@0.33.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.opentracing/opentracing-noop@0.33.0?type=jar">
      <dependency ref="pkg:maven/io.opentracing/opentracing-api@0.33.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.code.gson/gson@2.10.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.thrift/libthrift@0.15.0?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
      <dependency ref="pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar"/>
    <dependency ref="pkg:maven/com.squareup.okhttp3/okhttp@4.12.0?type=jar">
      <dependency ref="pkg:maven/com.squareup.okio/okio@3.6.0?type=jar"/>
      <dependency ref="pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.9.25?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.squareup.okio/okio@3.6.0?type=jar">
      <dependency ref="pkg:maven/com.squareup.okio/okio-jvm@3.6.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.squareup.okio/okio-jvm@3.6.0?type=jar">
      <dependency ref="pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.9.25?type=jar"/>
      <dependency ref="pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-common@1.9.25?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.9.25?type=jar">
      <dependency ref="pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk7@1.9.25?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk7@1.9.25?type=jar"/>
    <dependency ref="pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-common@1.9.25?type=jar"/>
    <dependency ref="pkg:maven/io.jaegertracing/jaeger-tracerresolver@1.8.1?type=jar">
      <dependency ref="pkg:maven/io.jaegertracing/jaeger-core@1.8.1?type=jar"/>
      <dependency ref="pkg:maven/io.opentracing.contrib/opentracing-tracerresolver@0.1.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.opentracing.contrib/opentracing-tracerresolver@0.1.8?type=jar">
      <dependency ref="pkg:maven/io.opentracing/opentracing-api@0.33.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1?type=jar"/>
    <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar">
      <dependency ref="pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.ozone/hdds-annotation-processing@2.0.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.ozone/hdds-config@2.0.0?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.ozone/hdds-hadoop-dependency-client@2.0.0?type=jar">
      <dependency ref="pkg:maven/com.nimbusds/nimbus-jose-jwt@9.40?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-annotations@3.4.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-common@3.4.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-hdfs-client@3.4.1?type=jar"/>
      <dependency ref="pkg:maven/org.xerial.snappy/snappy-java@1.1.10.7?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.nimbusds/nimbus-jose-jwt@9.40?type=jar"/>
    <dependency ref="pkg:maven/org.apache.hadoop/hadoop-annotations@3.4.1?type=jar">
      <dependency ref="pkg:maven/jdk.tools/jdk.tools@1.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jdk.tools/jdk.tools@1.8?type=jar"/>
    <dependency ref="pkg:maven/org.apache.hadoop/hadoop-common@3.4.1?type=jar">
      <dependency ref="pkg:maven/org.apache.hadoop.thirdparty/hadoop-shaded-protobuf_3_25@1.4.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hadoop.thirdparty/hadoop-shaded-guava@1.3.0?type=jar"/>
      <dependency ref="pkg:maven/commons-cli/commons-cli@1.8.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar"/>
      <dependency ref="pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.jettison/jettison@1.5.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-configuration2@2.11.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-text@1.12.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.re2j/re2j@1.7?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-auth@3.4.1?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-handler@4.1.109.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-native-epoll@4.1.109.Final?type=jar"/>
      <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@3.2.6?type=jar"/>
      <dependency ref="pkg:maven/org.bouncycastle/bcprov-jdk18on@1.80?type=jar"/>
      <dependency ref="pkg:maven/org.apache.kerby/kerb-core@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.woodstox/woodstox-core@5.4.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.hadoop.thirdparty/hadoop-shaded-protobuf_3_25@1.4.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.hadoop.thirdparty/hadoop-shaded-guava@1.3.0?type=jar"/>
    <dependency ref="pkg:maven/commons-cli/commons-cli@1.8.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar">
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar"/>
    <dependency ref="pkg:maven/org.codehaus.jettison/jettison@1.5.4?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-configuration2@2.11.0?type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-text@1.12.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.commons/commons-text@1.12.0?type=jar"/>
    <dependency ref="pkg:maven/com.google.re2j/re2j@1.7?type=jar"/>
    <dependency ref="pkg:maven/org.apache.hadoop/hadoop-auth@3.4.1?type=jar">
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar"/>
      <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@3.2.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.kerby/kerb-core@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.kerby/kerb-util@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hadoop.thirdparty/hadoop-shaded-guava@1.3.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.kerby/kerb-core@1.0.1?type=jar">
      <dependency ref="pkg:maven/org.apache.kerby/kerby-pkix@1.0.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.kerby/kerby-pkix@1.0.1?type=jar">
      <dependency ref="pkg:maven/org.apache.kerby/kerby-asn1@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.kerby/kerby-util@1.0.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.kerby/kerby-asn1@1.0.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.kerby/kerby-util@1.0.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.kerby/kerb-util@1.0.1?type=jar">
      <dependency ref="pkg:maven/org.apache.kerby/kerby-config@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.kerby/kerb-core@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.kerby/kerb-crypto@1.0.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.kerby/kerby-config@1.0.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.kerby/kerb-crypto@1.0.1?type=jar">
      <dependency ref="pkg:maven/org.apache.kerby/kerby-util@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.kerby/kerb-core@1.0.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.netty/netty-handler@4.1.109.Final?type=jar">
      <dependency ref="pkg:maven/io.netty/netty-common@4.1.109.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-resolver@4.1.109.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-buffer@4.1.109.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport@4.1.109.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-native-unix-common@4.1.109.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-codec@4.1.109.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.netty/netty-common@4.1.109.Final?type=jar"/>
    <dependency ref="pkg:maven/io.netty/netty-resolver@4.1.109.Final?type=jar">
      <dependency ref="pkg:maven/io.netty/netty-common@4.1.109.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.netty/netty-buffer@4.1.109.Final?type=jar">
      <dependency ref="pkg:maven/io.netty/netty-common@4.1.109.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.netty/netty-transport@4.1.109.Final?type=jar">
      <dependency ref="pkg:maven/io.netty/netty-common@4.1.109.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-buffer@4.1.109.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-resolver@4.1.109.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.netty/netty-transport-native-unix-common@4.1.109.Final?type=jar">
      <dependency ref="pkg:maven/io.netty/netty-common@4.1.109.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-buffer@4.1.109.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport@4.1.109.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.netty/netty-codec@4.1.109.Final?type=jar">
      <dependency ref="pkg:maven/io.netty/netty-common@4.1.109.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-buffer@4.1.109.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport@4.1.109.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.netty/netty-transport-native-epoll@4.1.109.Final?type=jar">
      <dependency ref="pkg:maven/io.netty/netty-common@4.1.109.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-buffer@4.1.109.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport@4.1.109.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-native-unix-common@4.1.109.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-classes-epoll@4.1.109.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.netty/netty-transport-classes-epoll@4.1.109.Final?type=jar">
      <dependency ref="pkg:maven/io.netty/netty-common@4.1.109.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-buffer@4.1.109.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport@4.1.109.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-native-unix-common@4.1.109.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.bouncycastle/bcprov-jdk18on@1.80?type=jar"/>
    <dependency ref="pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.woodstox/woodstox-core@5.4.0?type=jar">
      <dependency ref="pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.hadoop/hadoop-hdfs-client@3.4.1?type=jar">
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.16.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.16.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.xerial.snappy/snappy-java@1.1.10.7?type=jar"/>
    <dependency ref="pkg:maven/org.apache.ozone/hdds-interface-admin@2.0.0?type=jar">
      <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@2.5.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ozone/hdds-interface-client@2.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.ozone/hdds-interface-client@2.0.0?type=jar">
      <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@2.5.0?type=jar"/>
      <dependency ref="pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hadoop.thirdparty/hadoop-shaded-protobuf_3_25@1.4.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ratis/ratis-thirdparty-misc@1.0.6?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.ratis/ratis-thirdparty-misc@1.0.6?type=jar"/>
    <dependency ref="pkg:maven/org.apache.ratis/ratis-client@3.1.2?type=jar">
      <dependency ref="pkg:maven/org.apache.ratis/ratis-thirdparty-misc@1.0.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ratis/ratis-proto@3.1.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ratis/ratis-common@3.1.2?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.ratis/ratis-proto@3.1.2?type=jar">
      <dependency ref="pkg:maven/org.apache.ratis/ratis-thirdparty-misc@1.0.6?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.ratis/ratis-common@3.1.2?type=jar">
      <dependency ref="pkg:maven/org.apache.ratis/ratis-thirdparty-misc@1.0.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ratis/ratis-proto@3.1.2?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.ratis/ratis-grpc@3.1.2?type=jar">
      <dependency ref="pkg:maven/org.apache.ratis/ratis-thirdparty-misc@1.0.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ratis/ratis-proto@3.1.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ratis/ratis-common@3.1.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ratis/ratis-client@3.1.2?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.ratis/ratis-metrics-dropwizard3@3.1.2?type=jar">
      <dependency ref="pkg:maven/org.apache.ratis/ratis-metrics-api@3.1.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ratis/ratis-proto@3.1.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ratis/ratis-common@3.1.2?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.ratis/ratis-metrics-api@3.1.2?type=jar">
      <dependency ref="pkg:maven/org.apache.ratis/ratis-common@3.1.2?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.ratis/ratis-netty@3.1.2?type=jar">
      <dependency ref="pkg:maven/org.apache.ratis/ratis-thirdparty-misc@1.0.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ratis/ratis-proto@3.1.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ratis/ratis-common@3.1.2?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.ratis/ratis-server-api@3.1.2?type=jar">
      <dependency ref="pkg:maven/org.apache.ratis/ratis-thirdparty-misc@1.0.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ratis/ratis-proto@3.1.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ratis/ratis-common@3.1.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ratis/ratis-client@3.1.2?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.80?type=jar">
      <dependency ref="pkg:maven/org.bouncycastle/bcutil-jdk18on@1.80?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.bouncycastle/bcutil-jdk18on@1.80?type=jar">
      <dependency ref="pkg:maven/org.bouncycastle/bcprov-jdk18on@1.80?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@1.9.25?type=jar">
      <dependency ref="pkg:maven/org.jetbrains/annotations@13.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.jetbrains/annotations@13.0?type=jar"/>
    <dependency ref="pkg:maven/org.reflections/reflections@0.10.2?type=jar">
      <dependency ref="pkg:maven/org.javassist/javassist@3.30.2-GA?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.javassist/javassist@3.30.2-GA?type=jar"/>
    <dependency ref="pkg:maven/org.yaml/snakeyaml@2.0?type=jar"/>
    <dependency ref="pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9?type=jar">
      <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.jaxb/txw2@2.3.9?type=jar"/>
      <dependency ref="pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar"/>
      <dependency ref="pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.glassfish.jaxb/txw2@2.3.9?type=jar"/>
    <dependency ref="pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar"/>
    <dependency ref="pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar"/>
    <dependency ref="pkg:maven/org.slf4j/slf4j-reload4j@2.0.17?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
      <dependency ref="pkg:maven/ch.qos.reload4j/reload4j@1.2.26?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/ch.qos.reload4j/reload4j@1.2.26?type=jar"/>
  </dependencies>
</bom>
