{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.4",
  "serialNumber" : "urn:uuid:b50ae0cd-6fce-4e60-9c77-4cd5c7260596",
  "version" : 1,
  "metadata" : {
    "timestamp" : "2023-11-25T09:27:59Z",
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.7.3",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "ab886f1cb1a79b4244ac54dde22a0989"
          },
          {
            "alg" : "SHA-1",
            "content" : "9ed658496dfeef87fe6072b95c62ec37165cc741"
          },
          {
            "alg" : "SHA-256",
            "content" : "df9b43417bef6aeac86a393abcc1ac2ed0518239ba544aaeb595b9619c603503"
          },
          {
            "alg" : "SHA-512",
            "content" : "223da34bb51c5339e0f7285757608c1a56b1ea887f7ad835af9299fabacc693053163da74af352af86b16e18e04db730bd44214eda04291410c42b6ae657d85c"
          },
          {
            "alg" : "SHA-384",
            "content" : "3aaf057329ed0f90ec3a49a45b3cf4ec5ce637fd75d6202e9483fa4274cec3e7b74308016e146b6ba087df5fce9397bb"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.spark",
      "name" : "spark-avro_2.13",
      "version" : "3.4.2",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.spark/spark-avro_2.13@3.4.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.apache.org"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SPARK"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.spark/spark-avro_2.13@3.4.2?type=jar"
    }
  },
  "components" : [
    {
      "group" : "org.apache.spark",
      "name" : "spark-sql_2.13",
      "version" : "3.4.2",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5e26ade5d1a6f94676e19b3c664a822e"
        },
        {
          "alg" : "SHA-1",
          "content" : "1f50509ca15e0e833d25e6d30c043d9a512c6f11"
        },
        {
          "alg" : "SHA-256",
          "content" : "5e9200cd363d86388907fe904faee593fe4efcd6e2b3d1db735f30ebf616163f"
        },
        {
          "alg" : "SHA-512",
          "content" : "a4a4b30d777b18509e829ada9790e3729506962ac6d7ecc594200e0229deb9af4925ee9a3e97817619e5b4be77b1858a915d67cc81cac525eba620f79ffd62f1"
        },
        {
          "alg" : "SHA-384",
          "content" : "82e1116d14607bc819297646f54e40b448f93ab55f1c21ecf129cce041786e8184b31f7958010a965f8d138bf57e619d"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.apache.spark/spark-sql_2.13@3.4.2?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.spark/spark-sql_2.13@3.4.2?type=jar"
    },
    {
      "publisher" : "Facebook",
      "group" : "org.rocksdb",
      "name" : "rocksdbjni",
      "version" : "7.9.2",
      "description" : "RocksDB fat jar that contains .so files for linux32 and linux64 (glibc and musl-libc), jnilib files for Mac OSX, and a .dll for Windows x64.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "16e263508ddba146dcf18efb1a4627d2"
        },
        {
          "alg" : "SHA-1",
          "content" : "6409b667493149191b09fe1fce94bada6096a3e9"
        },
        {
          "alg" : "SHA-256",
          "content" : "0e0e886c44ef1a04104116a05c7e03e9b24069d7fbc6a0fb2cde2032fa92cb20"
        },
        {
          "alg" : "SHA-512",
          "content" : "39670f0e33f07cd801a4a5d006b5881aceef1d25861f11bd0b5aab2d3d7904dceef228600e2f2a08137ed34b36177e1251be2db35ef508d5b5f6452ccc7591e1"
        },
        {
          "alg" : "SHA-384",
          "content" : "ae2c2e0c4dfbbdb980ba3433a309f304e1f3335e3e1d39e3659d182367e76ea368f390ef47187d1c291da51b63285013"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        },
        {
          "license" : {
            "name" : "GNU General Public License, version 2",
            "url" : "http://www.gnu.org/licenses/gpl-2.0.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.rocksdb/rocksdbjni@7.9.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.facebook.com"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/rocksdb"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.rocksdb/rocksdbjni@7.9.2?type=jar"
    },
    {
      "publisher" : "Univocity Software Pty Ltd",
      "group" : "com.univocity",
      "name" : "univocity-parsers",
      "version" : "2.9.1",
      "description" : "univocity's open source parsers for processing different text formats using a consistent API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7032ba85007afd0bfc702a72bf486fd0"
        },
        {
          "alg" : "SHA-1",
          "content" : "081827d186e42129f23c3f1e002b757ad4b4e769"
        },
        {
          "alg" : "SHA-256",
          "content" : "31685122d5e392e98672ed6009a95a4c1623ca1185567bd44ee94527d454e5c3"
        },
        {
          "alg" : "SHA-512",
          "content" : "95656c856840b203507e42c33ef15bbf1995ad364ff229dba4f6358713259cbcad96a4aeb11db57d3f5ace2500bcfd702dd9457bea45186aa5ae7ed1bfd60559"
        },
        {
          "alg" : "SHA-384",
          "content" : "c29f921251bafd86bcc18b5cedf28fa53a3cbbc0fb8631c72c61038b02ce53c2141900faa54586edbbaa519cc5a815ab"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.univocity/univocity-parsers@2.9.1?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/univocity/univocity-parsers/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/univocity/univocity-parsers"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.univocity/univocity-parsers@2.9.1?type=jar"
    },
    {
      "group" : "org.apache.spark",
      "name" : "spark-sketch_2.13",
      "version" : "3.4.2",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6515912fd5d2f5c512ffb151350e5029"
        },
        {
          "alg" : "SHA-1",
          "content" : "66c441d8c4c31c9b8ce46a864073851a868e1192"
        },
        {
          "alg" : "SHA-256",
          "content" : "1b2cb2dea90dfc269c120f806f74b91478a8b6e9f662bfef4431e27cab1e668e"
        },
        {
          "alg" : "SHA-512",
          "content" : "287a015174ef2c453772eb091b9012aba4798a4004b31c6fd3bbc0d1e04a829d787e7f261b6841662c371051c46b231292e5de445cd00d4492b6a6cfd7ed5360"
        },
        {
          "alg" : "SHA-384",
          "content" : "e4accf941dc47fb406f85c1dbf3f6b55b3cbb0d8b700ee410ad66900ca1d580ccddd7ee9d4b91dc23f582a737f3cbd4d"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.apache.spark/spark-sketch_2.13@3.4.2?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.spark/spark-sketch_2.13@3.4.2?type=jar"
    },
    {
      "group" : "org.apache.spark",
      "name" : "spark-core_2.13",
      "version" : "3.4.2",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a0147b6b42f6d2f0a31474fac688802a"
        },
        {
          "alg" : "SHA-1",
          "content" : "136563c871958927a121fbade8567a4e93eb5f26"
        },
        {
          "alg" : "SHA-256",
          "content" : "06a6cbd8bb06094b2e53b4ce47ff69bce68f44fd40e61622367c5435c24b32ab"
        },
        {
          "alg" : "SHA-512",
          "content" : "d58bc91540dbca78cffc177c0535395f6c698c5400e945e74c768aac5f8655347717fcd60633c87a1218f2d53696b9ffddfef54d10b8e19005ec58f8ba0ba183"
        },
        {
          "alg" : "SHA-384",
          "content" : "06d4e943bbffd215467e4aa3eb90e3dfc6557169e74c3e9c71194230b5543d704a0a41d77b9142b0c5158673fe908e6b"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.apache.spark/spark-core_2.13@3.4.2?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.spark/spark-core_2.13@3.4.2?type=jar"
    },
    {
      "group" : "org.apache.spark",
      "name" : "spark-catalyst_2.13",
      "version" : "3.4.2",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6eeac4427548c3ae6dd9a83edb57562a"
        },
        {
          "alg" : "SHA-1",
          "content" : "29b32afe234fa3349e8462ba53f5b794ec02e0c9"
        },
        {
          "alg" : "SHA-256",
          "content" : "5f1a331576145d600bef3953b6c85b200902aa4d9af87a497583fcca25fc4250"
        },
        {
          "alg" : "SHA-512",
          "content" : "33eab0de430d11868c9c4c73c1d7e40f6c04c89d58ac8b4c8b6bc5e8e30520a3cf1ebe3e86b52983e7a4f29dd3ca93c469c88b00221c0940d279ea106a07cd02"
        },
        {
          "alg" : "SHA-384",
          "content" : "468cf5b902975e738ea487756732d9f3b62abdd2fb0a646cb64b5a4eff1155d2874c6b6e3c6e9a73d9b77f9e2f0422b6"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.apache.spark/spark-catalyst_2.13@3.4.2?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.spark/spark-catalyst_2.13@3.4.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.orc",
      "name" : "orc-core",
      "version" : "1.8.6",
      "description" : "The core reader and writer for ORC files. Uses the vectorized column batch for the in memory representation.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b16e2904f96e28a95a864d1917153e16"
        },
        {
          "alg" : "SHA-1",
          "content" : "e255a4e0918c99adc7c4c843e8cb1fa795258ca0"
        },
        {
          "alg" : "SHA-256",
          "content" : "2ff97e4cd193d6372ee6f078e67661b012c7deff36c8a038dd1b4d1472d48933"
        },
        {
          "alg" : "SHA-512",
          "content" : "cde95e19101fc44e45046e7ce25ce7808447a2e64973662084c0f4526d8099f8637e2f17c7587b65670383c5d42f29524e148a8f8a18946ef6bc3e7a7639448e"
        },
        {
          "alg" : "SHA-384",
          "content" : "a55c60bcca917c8e5baceece4784285c84691a2b1ccbe985e03f2f07246565e4b93692fd3a4b7926f5a1753fe77a66c6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.orc/orc-core@1.8.6?classifier=shaded-protobuf&type=jar",
      "externalReferences" : [
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/orc-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.orc/orc-core@1.8.6?classifier=shaded-protobuf&type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.orc",
      "name" : "orc-shims",
      "version" : "1.8.6",
      "description" : "A shim layer for supporting various versions of Hadoop dynamically. This module uses a higher version of Hadoop so that we can create shims that let us use new features of Hadoop without having a hard dependency on the latest version.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "159788fc6406dcdd7e04a708152a0663"
        },
        {
          "alg" : "SHA-1",
          "content" : "ab5a009c952973f98e581d042c74e13cfe9293e8"
        },
        {
          "alg" : "SHA-256",
          "content" : "6af3723ba2dbaa363aa199b584c0d323ad6f9b1c9dee9c6c14629a0050afc1a7"
        },
        {
          "alg" : "SHA-512",
          "content" : "d91be890a108ae0b250a16e8e5040f217810a6dd8810d136a12bcdb5633062fa4f40a3ddbd78abc690bc44b9419438d2ee3c27be865c78ed7f5222b5f2a43e5f"
        },
        {
          "alg" : "SHA-384",
          "content" : "ad36c82ce33cef5b32edce6075453e681f56905af2e383c943fb3429337782c49a38d586c7a795b2a0094461d3354f20"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.orc/orc-shims@1.8.6?type=jar",
      "externalReferences" : [
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/orc-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.orc/orc-shims@1.8.6?type=jar"
    },
    {
      "group" : "io.airlift",
      "name" : "aircompressor",
      "version" : "0.21",
      "description" : "Compression algorithms",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "43f5c177aaca2ba4e4ad78e4d6f3e992"
        },
        {
          "alg" : "SHA-1",
          "content" : "0d1efd839d539481952a9757834054239774f057"
        },
        {
          "alg" : "SHA-256",
          "content" : "e968bd7f31641ae94ea4ae12971337bdfab794349cc0baa9ccd54553cce712ac"
        },
        {
          "alg" : "SHA-512",
          "content" : "5a2eb2c1fabc5159e00371ebb4ba7532705de7587980af3c7c92c942794f2e21e1af0a82427372eab632a0b1bd52895afa799b62b7f42512c52cf55fdccb4386"
        },
        {
          "alg" : "SHA-384",
          "content" : "ef54231df593357c29984e81d6605f1177cb0c77c496c80097f401ab75b74943429a351d7b09202ed4e1cad127106c97"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.airlift/aircompressor@0.21?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/airlift/aircompressor/tree/master"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.airlift/aircompressor@0.21?type=jar"
    },
    {
      "group" : "org.jetbrains",
      "name" : "annotations",
      "version" : "17.0.0",
      "description" : "A set of annotations used for code inspection support and code documentation.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7b06437ed47fa7b4a8ec8909f4fb9022"
        },
        {
          "alg" : "SHA-1",
          "content" : "8ceead41f4e71821919dbdb7a9847608f1a938cb"
        },
        {
          "alg" : "SHA-256",
          "content" : "195fb0da046d55bb042e91543484cf1da68b02bb7afbfe031f229e45ac84b3f2"
        },
        {
          "alg" : "SHA-512",
          "content" : "839ec18d4a6f930ecd39827ebd4013c13a7176003543b8f60056770179032648faf1651e9e73109e811881b68a39757ca7e39731a61ff4a3461637b196fe4f7b"
        },
        {
          "alg" : "SHA-384",
          "content" : "c9d045a68ef2b0d5b12aa00b636e43af22de4c02f4dfcc6b5b7b04fdd57c98c7246decd2e5dc3eb9f1b10d929ac33a11"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.jetbrains/annotations@17.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/JetBrains/java-annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.jetbrains/annotations@17.0.0?type=jar"
    },
    {
      "publisher" : "ThreeTen.org",
      "group" : "org.threeten",
      "name" : "threeten-extra",
      "version" : "1.7.1",
      "description" : "Additional functionality that enhances JSR-310 dates and times in Java SE 8 and later",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5994a4f9bc61fe4bfae13fab1253ac47"
        },
        {
          "alg" : "SHA-1",
          "content" : "caddbd1f234f87b0d65e421b5d5032b6a473f67b"
        },
        {
          "alg" : "SHA-256",
          "content" : "9bbcbe09a631320bdc3325bbb04c93068473bc0e04b85e2ef3e42314d5a7dacf"
        },
        {
          "alg" : "SHA-512",
          "content" : "1ae1558df2e6e33a0a463e0204dc084bc2bcff6b27ebc983743533bee65f3e42915737a7e2f2096047b2ae5cb8363413964aab0f4eaed0b5f0d5865de56e9336"
        },
        {
          "alg" : "SHA-384",
          "content" : "df9dd8ee46fdd640c3abe5d5168570d29028bc94e931b505f3d36fac01da60ac90f2ed706f37b7eaa3aa8a23538488ff"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.threeten/threeten-extra@1.7.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.threeten.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/content/repositories/threeten-releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/ThreeTen/threeten-extra/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/ThreeTen/threeten-extra"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.threeten/threeten-extra@1.7.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.orc",
      "name" : "orc-mapreduce",
      "version" : "1.8.6",
      "description" : "An implementation of Hadoop's mapred and mapreduce input and output formats for ORC files. They use the core reader and writer, but present the data to the user in Writable objects.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1b003a543e4d8d60c6660790dd02fe35"
        },
        {
          "alg" : "SHA-1",
          "content" : "e2dbe4cbd91559c7ed854dd0fd6e5a41c7b49c37"
        },
        {
          "alg" : "SHA-256",
          "content" : "291b6c0929c6c60c574bd565e29e1545fd6b4752aeb0ca1098d848eeb1e8da96"
        },
        {
          "alg" : "SHA-512",
          "content" : "849dc71ba4f75e4b240508912d0e95f77c4af2739a186176937925cf620fb4ff6e2e02f0d1c67d9124e3c6f869021b4875278c245054808261ec2304d2b9edb5"
        },
        {
          "alg" : "SHA-384",
          "content" : "e1670f82b825048017ac53edc03aa0fed73efdf2eda7ad407ff62b8ff97cf31cc02d119cce8d85dcd36ed3c9c7ff4939"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.orc/orc-mapreduce@1.8.6?classifier=shaded-protobuf&type=jar",
      "externalReferences" : [
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/orc-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.orc/orc-mapreduce@1.8.6?classifier=shaded-protobuf&type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.hive",
      "name" : "hive-storage-api",
      "version" : "2.8.1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bea1adb65022d4616d23be770207600d"
        },
        {
          "alg" : "SHA-1",
          "content" : "4b151bcdfe290542f27a442ed09be99f815f88e8"
        },
        {
          "alg" : "SHA-256",
          "content" : "2bb77d246a9724a371301049239c6e53039efe4136b0ed34ee5a9c7b3cd861d8"
        },
        {
          "alg" : "SHA-512",
          "content" : "e76d1f1dcae0fcf26c56bf2006776a39b46572e9a67fcfab26774506a30de0a92447dcc545894c1796bbe092df53a51216c56721bfbc05c8a9b5fe9636ff07e7"
        },
        {
          "alg" : "SHA-384",
          "content" : "93eb2ba57fc637800ba539994682cf764436617f1b1584aa71f288797dad73e6b5dd95bc1dfb19be802a60e31b139866"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hive/hive-storage-api@2.8.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hive/hive-storage-api@2.8.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.parquet",
      "name" : "parquet-column",
      "version" : "1.12.3",
      "description" : "Parquet is a columnar storage format that supports nested data. This provides the java implementation.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "dfa5caf20b7d06d3b861927eca1a9131"
        },
        {
          "alg" : "SHA-1",
          "content" : "5506a7066998a2be47b86e28d061863a475a7ca8"
        },
        {
          "alg" : "SHA-256",
          "content" : "3de1a89d184c009c80ee01719ce848e4db4bc0ef32f33419002caf8ca59986b0"
        },
        {
          "alg" : "SHA-512",
          "content" : "9058acd6ae1b54b95185ff7392cc973a0aefdd9cb9a481a59708093ffd52e27c6b1573139db5a94f2f76b56690e82147a4b85208c7a94e4c191c6966888e947e"
        },
        {
          "alg" : "SHA-384",
          "content" : "fdd01add836e50c38db733df61ec4ba66ae969b39a951881c6eef7f6048df3d6546c035ae295e77b6aafb36c6db5edc3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.parquet/parquet-column@1.12.3?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/PARQUET"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.parquet/parquet-column@1.12.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.parquet",
      "name" : "parquet-common",
      "version" : "1.12.3",
      "description" : "Parquet is a columnar storage format that supports nested data. This provides the java implementation.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5bcb6a9fb0c7358e98300127722c934f"
        },
        {
          "alg" : "SHA-1",
          "content" : "da50b1b4177cbadb977d52aa70011713f37a2156"
        },
        {
          "alg" : "SHA-256",
          "content" : "15dc8a883766e3e09fb3a0dc2bad46ebd06dbaf16ab813154250a178a2eec5b5"
        },
        {
          "alg" : "SHA-512",
          "content" : "25ca1447e4d58ba1a494647e265dd383784f676964d56c883599e84251510d24b918210fe371cac47d1a8fde9be06f5481eb19b10261afd55ced1644568a379b"
        },
        {
          "alg" : "SHA-384",
          "content" : "daf8622b85d3da2fb3e0b6aa1b36c28c76c874ce29f42920b3a6f877f99bcb2614f3f3f06abbbbbf61f7ce685bc441f3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.parquet/parquet-common@1.12.3?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/PARQUET"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.parquet/parquet-common@1.12.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.parquet",
      "name" : "parquet-encoding",
      "version" : "1.12.3",
      "description" : "Parquet is a columnar storage format that supports nested data. This provides the java implementation.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f6c9b5ed0ecae45073c0b83ab5bf2593"
        },
        {
          "alg" : "SHA-1",
          "content" : "0ce981aa4a840f84b670bbb3dfd77cd3be87ca84"
        },
        {
          "alg" : "SHA-256",
          "content" : "a9d1166c518a8e814c60f2aa80fa05cfa5c957ccc8d3c8729d48b63f738a742a"
        },
        {
          "alg" : "SHA-512",
          "content" : "a6d28a72a985b656e709471370417a6f6263d5ba0ae3d96137ab272a3757b2bf4ad85a98bfd69d5d4f3a679efe111eddf8e1b3f14ec19a5b2970627dc4a84f4e"
        },
        {
          "alg" : "SHA-384",
          "content" : "7e956abb93b901b64adce86b2bdc28faf0d069f08f4cef7824022f5afa713a060f9bc2139cb0988831438f228760adf3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.parquet/parquet-encoding@1.12.3?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/PARQUET"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.parquet/parquet-encoding@1.12.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.yetus",
      "name" : "audience-annotations",
      "version" : "0.13.0",
      "description" : "Annotations for defining API boundaries and tools for managing javadocs",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e7b6aa8d8967f6f34a711d763d1b4816"
        },
        {
          "alg" : "SHA-1",
          "content" : "8ad1147dcd02196e3924013679c6bf4c25d8c351"
        },
        {
          "alg" : "SHA-256",
          "content" : "3bfbb397b06f63a2a0a361f62ed32cf199bd92ddd48ea99281f4987edec9777b"
        },
        {
          "alg" : "SHA-512",
          "content" : "9fdd60a366629a7ef7f934eea7d27d38e1614472e9090fd23c66032589fbfb9d90516c9cb13a44e4a3598e50d62daf851bb87e4dc8375b1da2cfe6392c448bd8"
        },
        {
          "alg" : "SHA-384",
          "content" : "bdd7d0a05faa80c56ab33e8f0c9b70a366f3bcc9cb36fcf88d4f6761feee36b46787baf42b1f62606935eb595279de7e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.yetus/audience-annotations@0.13.0?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/YETUS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/yetus-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/yetus.git"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.yetus/audience-annotations@0.13.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.parquet",
      "name" : "parquet-hadoop",
      "version" : "1.12.3",
      "description" : "Parquet is a columnar storage format that supports nested data. This provides the java implementation.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d01d8045ad523fc5c26313411f898c9f"
        },
        {
          "alg" : "SHA-1",
          "content" : "57001fa0b6622767e63c1b9cd2e6db666d180caa"
        },
        {
          "alg" : "SHA-256",
          "content" : "d9e397aa07ab1a90b77eb5a239827e5fa65f96769c1cb11b34f2fad50713dc21"
        },
        {
          "alg" : "SHA-512",
          "content" : "b4c00409b0b01ac2f689f49c2e1caf6d59524e7ae38ddbf78ea0839239955e7d4c09eda15421325f961e3ff52a3f222c020a938eb976da79faeea3c4c6134a9e"
        },
        {
          "alg" : "SHA-384",
          "content" : "38eea9b875522b9cc390b835b6be847cc5627b6a9478cb12800e6d9ee02629fb40293dae0a5d3e7eb28750d0a4f3367c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.parquet/parquet-hadoop@1.12.3?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/PARQUET"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.parquet/parquet-hadoop@1.12.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.parquet",
      "name" : "parquet-format-structures",
      "version" : "1.12.3",
      "description" : "Parquet-mr related java classes to use the parquet-format thrift structures.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2a6c08225bb15ef483a3f025f3467d1b"
        },
        {
          "alg" : "SHA-1",
          "content" : "9074f509fbc3df3ad104eca5427d03eece453246"
        },
        {
          "alg" : "SHA-256",
          "content" : "2d1e0ede822d70c26cbf6fd7a7037269495c0836f7b31975cbaf80794f8e4b0f"
        },
        {
          "alg" : "SHA-512",
          "content" : "931a683dead50dae8ae9588574e3e794f518fce0ff71093779b9c460378b445aaeb5c8d4d89db96680a7a521a7ebbbe3eb6cd62c8bc1a63fae0cddf9d3a93da4"
        },
        {
          "alg" : "SHA-384",
          "content" : "588ad917172c1911001e6629491e8038709592477566d6126ebd48b256450400fba009a4670d6e4803f6ee1a798c3c17"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.parquet/parquet-format-structures@1.12.3?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/PARQUET"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.parquet/parquet-format-structures@1.12.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.parquet",
      "name" : "parquet-jackson",
      "version" : "1.12.3",
      "description" : "Parquet is a columnar storage format that supports nested data. This provides the java implementation.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8cf5e742970d3cfd989b466e3d9fc5b0"
        },
        {
          "alg" : "SHA-1",
          "content" : "2c3fe5d2e5941e50947ff59c50d201d3968fac02"
        },
        {
          "alg" : "SHA-256",
          "content" : "4522986351d4649fdbe06e0d078eb3c7fd9678dc23999b81dc5debb6556bdf0f"
        },
        {
          "alg" : "SHA-512",
          "content" : "38c91e4bacca3d9678fdfab8b21fdfeb470ac45933f27743c58a447034c89b8389a0925bbca6f5038dcc7226954ec99ec8394c794f57d8abbcf447a45bbad430"
        },
        {
          "alg" : "SHA-384",
          "content" : "8aed1aa09ac4ab6a590ad1861e4c60a1360c2e4cd7f2920973485eb5a2f8ae833501d785a7621bfac983e87710da6e69"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.parquet/parquet-jackson@1.12.3?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/PARQUET"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.parquet/parquet-jackson@1.12.3?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-databind",
      "version" : "2.14.2",
      "description" : "General data-binding functionality for Jackson: works on core streaming API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c1b12dd14734cd1986132bf55042dd7e"
        },
        {
          "alg" : "SHA-1",
          "content" : "01e71fddbc80bb86f71a6345ac1e8ab8a00e7134"
        },
        {
          "alg" : "SHA-256",
          "content" : "501d3abce4d18dcc381058ec593c5b94477906bba6efbac14dae40a642f77424"
        },
        {
          "alg" : "SHA-512",
          "content" : "85473a29d23292f49092af9e7a7a63993206847c53b3e71f3c67245d68f7b19cc7c341e0ece409eb5e96602df98a848e957d8691fdd2c5fcddd807df9078255e"
        },
        {
          "alg" : "SHA-384",
          "content" : "5c54d6c497cb329c3424a30319bf657ea222349eadc5ae74c30e8dc1525d7b60b7785f4d20370267b03343dd738cc13e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-databind"
        },
        {
          "type" : "website",
          "url" : "http://fasterxml.com/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-annotations",
      "version" : "2.14.2",
      "description" : "Core annotations used for value types, used by Jackson data binding package.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "10d19982a8890f6eb37557af2f58e272"
        },
        {
          "alg" : "SHA-1",
          "content" : "a7aae9525864930723e3453ab799521fdfd9d873"
        },
        {
          "alg" : "SHA-256",
          "content" : "2c6869d505cf60dc066734b7d50339f975bd3adc635e26a78abb71acb4473c0d"
        },
        {
          "alg" : "SHA-512",
          "content" : "a978384791bdc074df8039ffc95bb93f0f60d14d476861ee2a0ce208b33a991c486a07345cb80559252c3ff1dea14d3efb818c19bdc18435946dc8754d8e6ee3"
        },
        {
          "alg" : "SHA-384",
          "content" : "d5111c69020666689414921ae4a8950f9fbdf86dec1360f6827beeee9ebd3f78db74e69c76e0becaba47eb34fdaaeb5a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-annotations"
        },
        {
          "type" : "website",
          "url" : "http://fasterxml.com/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-core",
      "version" : "2.14.2",
      "description" : "Core Jackson processing abstractions (aka Streaming API), implementation for JSON",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6ee422ee4c481b2d5aacb2b5e36a7dc0"
        },
        {
          "alg" : "SHA-1",
          "content" : "f804090e6399ce0cf78242db086017512dd71fcc"
        },
        {
          "alg" : "SHA-256",
          "content" : "b5d37a77c88277b97e3593c8740925216c06df8e4172bbde058528df04ad3e7a"
        },
        {
          "alg" : "SHA-512",
          "content" : "208953cf72691b3bab1ca2f9a045cccd3d75c46c90099ba884fbf16bc3e45045e5cd014d2c68c96e8a8826f87a5f0e18cb34b35e7ef03348953869c21e197367"
        },
        {
          "alg" : "SHA-384",
          "content" : "e806595862c5fcdae801d9845befc1d12c97e6036ee839d34590dbd785a422d5832cf4fc5c7ee6e1a5ee7a59f37740f0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-core"
        },
        {
          "type" : "website",
          "url" : "http://fasterxml.com/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.xbean",
      "name" : "xbean-asm9-shaded",
      "version" : "4.22",
      "description" : "Repackaged and shaded asm jars",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "492c7c98c236c36777a17d73394975e8"
        },
        {
          "alg" : "SHA-1",
          "content" : "58a5eae5fced0ee652754045f740bbca4f0d922a"
        },
        {
          "alg" : "SHA-256",
          "content" : "3430fa815503979b5a39bb70f18b41ba12ee2913c43f5d5c787005ffc4b424bb"
        },
        {
          "alg" : "SHA-512",
          "content" : "b7fe2738049b084ab1bf07ea335541928ffc455c663d7d532e992e73acea47fe7529193a95b89d8a6ce6a1749936b3a997e225b70c8c27bcf0ea2d0c250a64ac"
        },
        {
          "alg" : "SHA-384",
          "content" : "bff56a6d5b88e86a3c81fe536f39fdcbab5e1c1d49977b20339cc8f2a60cd098ce671865c0194be3d99eb26b9e53826d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.xbean/xbean-asm9-shaded@4.22?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/XBEAN"
        },
        {
          "type" : "mailing-list",
          "url" : "mailto:xbean-dev-subscribe@geronimo.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/geronimo-xbean.git"
        },
        {
          "type" : "website",
          "url" : "http://www.apache.org"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.xbean/xbean-asm9-shaded@4.22?type=jar"
    },
    {
      "publisher" : "Google",
      "group" : "com.google.protobuf",
      "name" : "protobuf-java",
      "version" : "2.5.0",
      "description" : "Protocol Buffers are a way of encoding structured data in an efficient yet extensible format.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a44473b98947e2a54c54e0db1387d137"
        },
        {
          "alg" : "SHA-1",
          "content" : "a10732c76bfacdbd633a7eb0f7968b1059a65dfa"
        },
        {
          "alg" : "SHA-256",
          "content" : "e0c1c64575c005601725e7c6a02cebf9e1285e888f756b2a1d73ffa8d725cc74"
        },
        {
          "alg" : "SHA-512",
          "content" : "10ea0baf440c78598eee2bff3742bc2f41b7e67847f8bb43a1f154d7649853ebd9eb86288aab65f4d1a196f4586bab16b656ec7940ec92a57b1c117b8f59abac"
        },
        {
          "alg" : "SHA-384",
          "content" : "33ad6e25b942b4076c8b9dfcc0aae8ca802b9028aa9939f86e4752b4847b35fb486f6d3efa81d38ad1edcbec6e614494"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.protobuf/protobuf-java@2.5.0?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "http://code.google.com/p/protobuf/source/browse"
        },
        {
          "type" : "website",
          "url" : "http://www.google.com/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.protobuf/protobuf-java@2.5.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.avro",
      "name" : "avro",
      "version" : "1.11.1",
      "description" : "Avro core components",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9fad4fb0e34810ae5f3d7cb5223a7e1c"
        },
        {
          "alg" : "SHA-1",
          "content" : "81af5d4b9bdaaf4ba41bcb0df5241355ec34c630"
        },
        {
          "alg" : "SHA-256",
          "content" : "1213dfffe9295daa3d986713ae36b8daad36bfba039810264bca1cdac0cf8b6a"
        },
        {
          "alg" : "SHA-512",
          "content" : "a0e8b7c1f138747334a2f1f20f40a6893543d049243f7cec67ee572ec4a40e4dc7b82e9b8769c64a90eb9c8ed92cc646daee3cacd523d3e9289a67decd2bb0d6"
        },
        {
          "alg" : "SHA-384",
          "content" : "2406810a329612f96f2881e9912dc42cf880eb721026b13e45716586860921223fdc003081e4711ad9ee26a1d85936cc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.avro/avro@1.11.1?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/AVRO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/avro-dev/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.avro/avro@1.11.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.avro",
      "name" : "avro-mapred",
      "version" : "1.11.1",
      "description" : "An org.apache.hadoop.mapred compatible API for using Avro Serialization in Hadoop",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "07371054f89ac01e938dc38158a85930"
        },
        {
          "alg" : "SHA-1",
          "content" : "5683d99c94f0ae35e2a3d5b2bcd974570b0ff388"
        },
        {
          "alg" : "SHA-256",
          "content" : "ada5a42b5ff522feb536731e5dafa8831ada1369578b9c60136dc1a0ded14e9a"
        },
        {
          "alg" : "SHA-512",
          "content" : "9188a8ec48c75bbc5a30107b315d084d551fd153fce94e9dbc1872dcadfbc238d3bdadc66dde247d06961e290432bc17cfbc2dacec8572b2c77ef92abf41f2ba"
        },
        {
          "alg" : "SHA-384",
          "content" : "7a9ac1dea84cd10da8b04c2bb5e074b65d4dd8c31579754de3b59e392d644b1a1dd7c822bb8a87422f9b918480d4fd3c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.avro/avro-mapred@1.11.1?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/AVRO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/avro-dev/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.avro/avro-mapred@1.11.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.avro",
      "name" : "avro-ipc",
      "version" : "1.11.1",
      "description" : "Avro inter-process communication components",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f987fa8ec6a043ff18ef6b162fd4c45f"
        },
        {
          "alg" : "SHA-1",
          "content" : "40d653933f829e5193b24864d82b306b5a31e7c0"
        },
        {
          "alg" : "SHA-256",
          "content" : "dbe52219c44533ef72ad62ff05b4bea10cabe6c44af6b62375223d8e6ee4b23c"
        },
        {
          "alg" : "SHA-512",
          "content" : "4ad5df1151085cdf1180fb60275c18b3f3127dd5f682b012407accf8c046c1d46cc7b3ddf4f3f5388c6e603d65a7a69c9ace12cedf3909d24c1304b6a45477c9"
        },
        {
          "alg" : "SHA-384",
          "content" : "47bebec17c907a607993a024663a5e646b05f7c06b6ea8139393223ce095432308e343d066de6afc8d30453127d9d55b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.avro/avro-ipc@1.11.1?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/AVRO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/avro-dev/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.avro/avro-ipc@1.11.1?type=jar"
    },
    {
      "publisher" : "com.twitter",
      "group" : "com.twitter",
      "name" : "chill_2.13",
      "version" : "0.10.0",
      "description" : "chill",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a18d9c6269d2c7259ae324fef89c9ca2"
        },
        {
          "alg" : "SHA-1",
          "content" : "764f2844ce1c7033869e069dc7cfe3f9682d175f"
        },
        {
          "alg" : "SHA-256",
          "content" : "b6507cab344bf8a86bf8bd3987cef15a35c096570eb31893f760d4754de4d8b1"
        },
        {
          "alg" : "SHA-512",
          "content" : "4268042407f091073cdf3930187cedcf89436ebe8efd2bb9c0c12115bd4cd79cd28bef875b3196cc52a27f091a7faec0e5585eac364914bd7935c0bd28785bda"
        },
        {
          "alg" : "SHA-384",
          "content" : "7e8bc767010f8ca60e1c031a403127bd109078d73e8672957d63c250071b46d5f9d7f40a3476c002de7cdf7014609bce"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.twitter/chill_2.13@0.10.0?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/twitter/chill"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.twitter/chill_2.13@0.10.0?type=jar"
    },
    {
      "group" : "com.esotericsoftware",
      "name" : "kryo-shaded",
      "version" : "4.0.2",
      "description" : "Fast, efficient Java serialization. This is the parent pom that assembles the main kryo and shaded kryo artifacts.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "27717b481916c44eed34ea7a68782ed5"
        },
        {
          "alg" : "SHA-1",
          "content" : "e8c89779f93091aa9cb895093402b5d15065bf88"
        },
        {
          "alg" : "SHA-256",
          "content" : "a4899f57fef456b9ec66f730e7b493ecb3dc494cc5758721ed9c18416fd2d3b6"
        },
        {
          "alg" : "SHA-512",
          "content" : "21d3500194117f5f34951c7374bdde658be18b842866ea68f16ef47453d4dd31b11d384af2dab3ac4340b015b414402f6b45d4e6a10354fbda5bd8a17e4ce3e3"
        },
        {
          "alg" : "SHA-384",
          "content" : "33c8d09ba00c14a077e82f2d7c1a54496a21d20896505d1d97cd30f22d9cb773e060061abc43fc14f15b6619ba4f0c86"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.esotericsoftware/kryo-shaded@4.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/EsotericSoftware/kryo"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.esotericsoftware/kryo-shaded@4.0.2?type=jar"
    },
    {
      "group" : "com.esotericsoftware",
      "name" : "minlog",
      "version" : "1.3.0",
      "description" : "Minimal overhead Java logging",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5ab0ee168b90e0ad7010b159e603d304"
        },
        {
          "alg" : "SHA-1",
          "content" : "ff07b5f1b01d2f92bb00a337f9a94873712f0827"
        },
        {
          "alg" : "SHA-256",
          "content" : "f7b399d3a5478a4f3e0d98bd1c9f47766119c66414bc33aa0f6cde0066f24cc2"
        },
        {
          "alg" : "SHA-512",
          "content" : "ca319c94b7fd8a275dcc3c5102fc01d73071ac77f5e14b4fc5b6547f96574a4fff0e8cb7b0b0d5006e71faa00575a91defdbfc92a94d9d38dd65520d4ab52000"
        },
        {
          "alg" : "SHA-384",
          "content" : "3f9b5b7fd91332ad64d235024d486e24b00760e714713153a61f10e6867bc3e5b617a7bf0bed889a01f0cdb435415d6a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.esotericsoftware/minlog@1.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/EsotericSoftware/minlog"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.esotericsoftware/minlog@1.3.0?type=jar"
    },
    {
      "publisher" : "com.twitter",
      "group" : "com.twitter",
      "name" : "chill-java",
      "version" : "0.10.0",
      "description" : "chill-java",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3c0e9cbbb2016364333f2cea3922ae97"
        },
        {
          "alg" : "SHA-1",
          "content" : "0fd2eb52afd9ab4337c9e51823f41ad8916e6976"
        },
        {
          "alg" : "SHA-256",
          "content" : "52afd3c1256d6f89293ba616c0c9ebf11191bb9e8159cd0c1cfdc99e5e0c5ffe"
        },
        {
          "alg" : "SHA-512",
          "content" : "48ae455095f0a9ff7ed9b84c9b9bf339c14f6599703b7a34a473ea9c457b0ae700f793d6bf00d1af5e0eb307c9a68d2a10309faea77aaf2245afded08420cb8d"
        },
        {
          "alg" : "SHA-384",
          "content" : "7641e1570bd40b064e17c98c656b8b80680b36d2678973c53ea0557fb212d9ce535eda748cb7234813d953ef90e2cb8d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.twitter/chill-java@0.10.0?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/twitter/chill"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.twitter/chill-java@0.10.0?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.hadoop",
      "name" : "hadoop-client-api",
      "version" : "3.3.4",
      "description" : "Apache Hadoop Client",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "775eddc3008e69e63b68440114b0f0f5"
        },
        {
          "alg" : "SHA-1",
          "content" : "6339a8f7279310c8b1f7ef314b592d8c71ca72ef"
        },
        {
          "alg" : "SHA-256",
          "content" : "e513d71b78086b5caaa439f4402b43e20df01446d56b66084ad419452878701c"
        },
        {
          "alg" : "SHA-512",
          "content" : "b8ba99015ffd22dae5e4dd900e25e1f56f535cb3bd56168d867b313f2ab797b5c12aa01c9fe0e2817b178a6c8f9a7b8afb3a291ec01f0c01a8d9b3c6f6b5b6b5"
        },
        {
          "alg" : "SHA-384",
          "content" : "6200dbba45d512975da88ff6acce21442f70c92514bb470a5bd704091692d0f69b42342d399fae406add7c4311f7ef75"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hadoop/hadoop-client-api@3.3.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.apache.org"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hadoop/hadoop-client-api@3.3.4?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.hadoop",
      "name" : "hadoop-client-runtime",
      "version" : "3.3.4",
      "description" : "Apache Hadoop Client",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "64245768b537a07e4bf1687d1a9c4eaa"
        },
        {
          "alg" : "SHA-1",
          "content" : "21f7a9a2da446f1e5b3e5af16ebf956d3ee43ee0"
        },
        {
          "alg" : "SHA-256",
          "content" : "9377a68071137ae5f5c8cdc2ed20d6f904a1df4d06df26b47ed8872a1b0d8d47"
        },
        {
          "alg" : "SHA-512",
          "content" : "2d0442b3bcb04d18f2de036f5d189745b8866c14de72e5027901718f1100f5090fb14ece684cc8f93a9e2227645db5b13c4abd51c45a9b1156a0a82ebdde97d7"
        },
        {
          "alg" : "SHA-384",
          "content" : "bfc9ec036aebbb73f922cb9add74be3fa0dce8617e75d6bd94e7ba1b3173a9cf0e4195ed4a751015d90ed707845d1f70"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hadoop/hadoop-client-runtime@3.3.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.apache.org"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hadoop/hadoop-client-runtime@3.3.4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-logging",
      "name" : "commons-logging",
      "version" : "1.1.3",
      "description" : "Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "92eb5aabc1b47287de53d45c086a435c"
        },
        {
          "alg" : "SHA-1",
          "content" : "f6f66e966c70a83ffbdb6f17a0919eaf7c8aca7f"
        },
        {
          "alg" : "SHA-256",
          "content" : "70903f6fc82e9908c8da9f20443f61d90f0870a312642991fe8462a0b9391784"
        },
        {
          "alg" : "SHA-512",
          "content" : "e5d1fc8ec4544e1fa0f7c4aae8dbcca466c4987bc92fbbc430b054b10d646b745add4a754b1be9d50edd64330c798c53173a97289db57a966312e16f934e9d1f"
        },
        {
          "alg" : "SHA-384",
          "content" : "00dc41783f4081585e20adcfe83fd4dbb6b5a27236ee633d7e53dedcbca83ba5e5f0ca68d31f95e9c724b365e4c67499"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/LOGGING"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/repos/asf/commons/proper/logging/trunk"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "http://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"
    },
    {
      "group" : "org.apache.spark",
      "name" : "spark-launcher_2.13",
      "version" : "3.4.2",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a22e9730dcd66d1f2afe63ed6e834191"
        },
        {
          "alg" : "SHA-1",
          "content" : "a356a2883603ebc3be552dc7baa8c99f284b4526"
        },
        {
          "alg" : "SHA-256",
          "content" : "fd063145d7d9595908fa65c7650b6b308459dd4a46b83939b3dcfedce086a7ea"
        },
        {
          "alg" : "SHA-512",
          "content" : "e1ecb02c97fe32463dd84e18a67fa548f91621bb304c2393cf54204903dd4d8a2a56ff82e5b8d57f1690593e6e25f5eb6202a54fe6de089e76b36813f950623b"
        },
        {
          "alg" : "SHA-384",
          "content" : "775f4ffa330900bec3e16b3423a125eb449b89d3c3c6e194c4dbd05b6652a07bf620a21b71df547c2c4bf29d9f5792eb"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.apache.spark/spark-launcher_2.13@3.4.2?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.spark/spark-launcher_2.13@3.4.2?type=jar"
    },
    {
      "group" : "org.apache.spark",
      "name" : "spark-kvstore_2.13",
      "version" : "3.4.2",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9c4b7f44c48300ff624a2f08644a200c"
        },
        {
          "alg" : "SHA-1",
          "content" : "fb110facee42321f55f7dcf060705c07ca4d2783"
        },
        {
          "alg" : "SHA-256",
          "content" : "b9365d355b4390e87c2bb4b836fb93d6eb6c59233660cabe4b4f2c4ee84bbba3"
        },
        {
          "alg" : "SHA-512",
          "content" : "ea45080e3390ae7c9ba4776a076abdb0632e9be2fcb66a15e09363af64decbf3f3153f18b826ae48eda1853936b2460261b81eaf3d973b16664859cd877bbe41"
        },
        {
          "alg" : "SHA-384",
          "content" : "ad4140ea670074a7c13104893703143b33bc10d55bafb7bf9d2bfa14ea119c8820413a4ab31a6633b7fc69cb336b5ff2"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.apache.spark/spark-kvstore_2.13@3.4.2?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.spark/spark-kvstore_2.13@3.4.2?type=jar"
    },
    {
      "publisher" : "FuseSource, Corp.",
      "group" : "org.fusesource.leveldbjni",
      "name" : "leveldbjni-all",
      "version" : "1.8",
      "description" : "An uber jar which contains all the leveldbjni platform libraries and dependencies",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6944e9bc03c7938868e53c96726ae914"
        },
        {
          "alg" : "SHA-1",
          "content" : "707350a2eeb1fa2ed77a32ddb3893ed308e941db"
        },
        {
          "alg" : "SHA-256",
          "content" : "c297213b0e6f9392305952753f3099a4c02e70b3656266fe01867e7b6c160ffe"
        },
        {
          "alg" : "SHA-512",
          "content" : "2e9f806af5d89c00e345b4516ffd325893a07f30c87274fa5b8ce314aad021633750b665d8c338fbf5adc79a527e19caf96d0b12af57e56fb8d3d8f7fd845a96"
        },
        {
          "alg" : "SHA-384",
          "content" : "f10d7ce88da5a9fada67fcbf6fc02939346e67428ee5dd7b000f884d8046131391ee1ece83885d3de60532d1227a66f2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.fusesource.leveldbjni/leveldbjni-all@1.8?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/fusesource/leveldbjni/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/fusesource/leveldbjni"
        },
        {
          "type" : "website",
          "url" : "http://fusesource.com/"
        },
        {
          "type" : "distribution",
          "url" : "http://repo.fusesource.com/nexus/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.fusesource.leveldbjni/leveldbjni-all@1.8?type=jar"
    },
    {
      "group" : "org.apache.spark",
      "name" : "spark-network-common_2.13",
      "version" : "3.4.2",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5a997d835dc6a2c049237318020faa0e"
        },
        {
          "alg" : "SHA-1",
          "content" : "d9242c1b5c05a1fbcd624bb1cd0ba419235b1762"
        },
        {
          "alg" : "SHA-256",
          "content" : "34346bfe3dad85c16607218e1016c44c7b6949686b66539921c560ba310bc9e1"
        },
        {
          "alg" : "SHA-512",
          "content" : "8724969cbf32dfaf71da24e3a7ef8c75f0b257a34a9caf582031de98883e4f0f8d37fae984dac390ef8789f23d4245f43cc7f5214bb8e94701ab51ae824241fb"
        },
        {
          "alg" : "SHA-384",
          "content" : "1e574a1320666324d23aea97a9b077b2ec667dfb6d8a972d43cb3121ca77b2fee5f4f614c287a4eba0c7568066d98bd9"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.apache.spark/spark-network-common_2.13@3.4.2?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.spark/spark-network-common_2.13@3.4.2?type=jar"
    },
    {
      "group" : "com.google.guava",
      "name" : "guava",
      "version" : "14.0.1",
      "description" : "Guava is a suite of core and expanded libraries that include utility classes, google's collections, io classes, and much much more. Guava has two code dependencies - javax.annotation per the JSR-305 spec and javax.inject per the JSR-330 spec.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "58553f87d83b9f8ec74bd3529083ee2f"
        },
        {
          "alg" : "SHA-1",
          "content" : "69e12f4c6aeac392555f1ea86fab82b5e5e31ad4"
        },
        {
          "alg" : "SHA-256",
          "content" : "d69df3331840605ef0e5fe4add60f2d28e870e3820937ea29f713d2035d9ab97"
        },
        {
          "alg" : "SHA-512",
          "content" : "e920540dbdee79fba1a5e0966ae92ac37358aa4126c04a08732e4260916807901d8dea41322037ef7908fc0204281d05a1bfa95401fcfc473630c0bc8e81343a"
        },
        {
          "alg" : "SHA-384",
          "content" : "1f5c72fdf4fbef5fe6044054d83cda82d409ce2b8e304913cc985341ceb13e75728dfcdba522dc87aa04577a054afeae"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/guava@14.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "http://code.google.com/p/guava-libraries/issues"
        },
        {
          "type" : "vcs",
          "url" : "http://code.google.com/p/guava-libraries/source/browse"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/guava@14.0.1?type=jar"
    },
    {
      "group" : "com.google.crypto.tink",
      "name" : "tink",
      "version" : "1.7.0",
      "description" : "Tink is a small cryptographic library that provides a safe, simple, agile and fast way to accomplish some common cryptographic tasks.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1ef218f7da13ce7cfd2c926004fe0611"
        },
        {
          "alg" : "SHA-1",
          "content" : "668b57f109d32349b2870448f06ae6f202713edc"
        },
        {
          "alg" : "SHA-256",
          "content" : "88970a456a08ba4c66b01b23e5846ca1095cc14e54cb48363e5d2e15a1307308"
        },
        {
          "alg" : "SHA-512",
          "content" : "bcc1da6501249bdcd4b8053b7220175ed922887240358ed6e6846b1cfdba813ee9c854877065b3e9540a4c456eccd5841d5a485eee6d0228cf838f2b9cce1037"
        },
        {
          "alg" : "SHA-384",
          "content" : "21f0cff903d9607d1eae0efb41cf8bb845d60a750d99295d8e603579cdbf6b151200b05b1bb26752151bc54afb17580b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.crypto.tink/tink@1.7.0?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/tink/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/group/tink-users"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/tink.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.crypto.tink/tink@1.7.0?type=jar"
    },
    {
      "group" : "com.google.code.gson",
      "name" : "gson",
      "version" : "2.8.9",
      "description" : "Gson JSON library",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e67627f67e03301092dc7de0a2d7cef8"
        },
        {
          "alg" : "SHA-1",
          "content" : "8a432c1d6825781e21a02db2e2c33c5fde2833b9"
        },
        {
          "alg" : "SHA-256",
          "content" : "d3999291855de495c94c743761b8ab5176cfeabe281a5ab0d8e8d45326fd703e"
        },
        {
          "alg" : "SHA-512",
          "content" : "46501e4dd34c9a6f33ff63aeeec45b049579365c5273490e5dfd5ea4effaeced907d0fc728204c619aa136e867ad826204582ff9ba3080d06693c1c675c8473f"
        },
        {
          "alg" : "SHA-384",
          "content" : "2f2897912784595e52d3f8e57741aed7dd866f16a69562d57e0604d85e2fef08b2a32e58afd00d264f66cc6ec775dc79"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.code.gson/gson@2.8.9?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/gson/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/gson/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.code.gson/gson@2.8.9?type=jar"
    },
    {
      "group" : "org.apache.spark",
      "name" : "spark-network-shuffle_2.13",
      "version" : "3.4.2",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d1f339e3eb4fad6e1222137d391996c4"
        },
        {
          "alg" : "SHA-1",
          "content" : "098b407902729afe3398d534a521c208a9aa2657"
        },
        {
          "alg" : "SHA-256",
          "content" : "ea1cd4d2dd06439cb22a0b21aabecb7a24983425acf8d5bbcdacd39331895d3d"
        },
        {
          "alg" : "SHA-512",
          "content" : "b6b4c9bcdea82b64f3b73bad1282ad3103e2bc0bfbcc5bee12626ec38e8e29e5351d20b631d8ea800d2f05d2c270f0a01e876166945d57131357ec13bb590941"
        },
        {
          "alg" : "SHA-384",
          "content" : "2c2a14c66889901827753171f2dcb11c1b30ac2e9aa5f8e94d12e6590419d408d927062122dc99ddd0e5ec80ed5be7ba"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.apache.spark/spark-network-shuffle_2.13@3.4.2?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.spark/spark-network-shuffle_2.13@3.4.2?type=jar"
    },
    {
      "group" : "org.apache.spark",
      "name" : "spark-unsafe_2.13",
      "version" : "3.4.2",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a38bb491f47ad35527ed930f73e4e3d5"
        },
        {
          "alg" : "SHA-1",
          "content" : "7fb96abcf6dbbc4fc50a300c928af26e31bcc3a8"
        },
        {
          "alg" : "SHA-256",
          "content" : "6307b78feb9447d01c2c6e823466d58b4a738ca8f49057732df026bc0aeebabb"
        },
        {
          "alg" : "SHA-512",
          "content" : "5281fb44bd7cc27f11f01948abd4190dc8c1f50899c2408a79a7f12252e401f79289814b5de7aac48ab655fde818e9f3e2cd50986ae15c75a078a2d7e0520710"
        },
        {
          "alg" : "SHA-384",
          "content" : "6aeb44912c7bc56d3d41baff27c8c927f71ab4f0a19fed1a21b4df043f36862c51945dc2d02134864cb06aa9a328808b"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.apache.spark/spark-unsafe_2.13@3.4.2?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.spark/spark-unsafe_2.13@3.4.2?type=jar"
    },
    {
      "group" : "javax.activation",
      "name" : "activation",
      "version" : "1.1.1",
      "description" : "The JavaBeans(TM) Activation Framework is used by the JavaMail(TM) API to manage MIME data",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "46a37512971d8eca81c3fcf245bf07d2"
        },
        {
          "alg" : "SHA-1",
          "content" : "485de3a253e23f645037828c07f1d7f1af40763a"
        },
        {
          "alg" : "SHA-256",
          "content" : "ae475120e9fcd99b4b00b38329bd61cdc5eb754eee03fe66c01f50e137724f99"
        },
        {
          "alg" : "SHA-512",
          "content" : "49119b0cc3af02700685a55c6f15e6d40643f81640e642b9ea39a59e18d542f8837d30b43b5be006ce1a98c8ec9729bb2165c0442978168f64caa2fc6e3cb93d"
        },
        {
          "alg" : "SHA-384",
          "content" : "021f29ab14a1db9b27e31778fd5b6ead2ed46fef534cfab6b34b1b839547c78fc39cfb1568f0b2206bb46a98c4b9e1d4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/javax.activation/activation@1.1.1?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.activation/activation@1.1.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.curator",
      "name" : "curator-recipes",
      "version" : "2.13.0",
      "description" : "All of the recipes listed on the ZooKeeper recipes doc (except two phase commit).",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "02685a8f2e44faa1941e953ac426a8d7"
        },
        {
          "alg" : "SHA-1",
          "content" : "1e6d5cf7b18a402f5d52785877010711538d68a0"
        },
        {
          "alg" : "SHA-256",
          "content" : "22be05c1a3e6c5ede22e77372b08dc631a3b93b64acb7f682537ea65a6ddba06"
        },
        {
          "alg" : "SHA-512",
          "content" : "498ce3631ef135b96b467cd3c4fa8ac1797538047589b1454911ec77a5205773346a367492db0771167e8f612c911bac44c8c7c651be00e206eb60e2f0bba2f7"
        },
        {
          "alg" : "SHA-384",
          "content" : "08a4134a208a2c59b0354e5d4e88b29f0f2f4f0bd0b83a6ccd54da70602499a8dedd5711d5481c23ba8782049cdb546c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.curator/curator-recipes@2.13.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.apache.org/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Curator/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/CURATOR"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/curator-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/curator.git"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.curator/curator-recipes@2.13.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.curator",
      "name" : "curator-framework",
      "version" : "2.13.0",
      "description" : "High-level API that greatly simplifies using ZooKeeper.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "91e34b86afb44ef5c728f69ed9790f1d"
        },
        {
          "alg" : "SHA-1",
          "content" : "d45229aee7d3f1f628a34fcac9b66ed5ba52c31f"
        },
        {
          "alg" : "SHA-256",
          "content" : "db084e5e0fed0548a8128f12a3e7a15c875c9595e75316c9578d64e77375c4a9"
        },
        {
          "alg" : "SHA-512",
          "content" : "7a9d520b5668ada07d05435f5632ab24d11bb079338388f43668960a3181d665568a2ef4a73222870362a84e1eeb59ef9ebf171bbcfdd7216735821328287798"
        },
        {
          "alg" : "SHA-384",
          "content" : "bf989371e089766e2bc00589c4ce3419382cfe5da67f1c815604653d59a6429642a6e9008c64a2d09d6398816c527d32"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.curator/curator-framework@2.13.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.apache.org/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Curator/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/CURATOR"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/curator-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/curator.git"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.curator/curator-framework@2.13.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.curator",
      "name" : "curator-client",
      "version" : "2.13.0",
      "description" : "Low-level API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ca2c6ca2277e78d1f6b865ee82e10357"
        },
        {
          "alg" : "SHA-1",
          "content" : "a1974d9b3251c055408059b2f408d19d7db07224"
        },
        {
          "alg" : "SHA-256",
          "content" : "62ab2201b5b9af63b215a4e6829dbe7d553a0805cfb0b1a665f9b49da8270c51"
        },
        {
          "alg" : "SHA-512",
          "content" : "72909bbf56f63fb7afba996336e7270ae08010976b4bb3b8bb90269d53fde78c63f8131a941ebb7cc554981a522f15e2b2a9ec63387d77f7117e5a1ed0b8c028"
        },
        {
          "alg" : "SHA-384",
          "content" : "57d338248aa56fa86aab71303a2746c7e4f061a18029a096f99bdadb7a87152f5067e1955aa2acb928edbcac0631b613"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.curator/curator-client@2.13.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.apache.org/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Curator/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/CURATOR"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/curator-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/curator.git"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.curator/curator-client@2.13.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.zookeeper",
      "name" : "zookeeper",
      "version" : "3.6.3",
      "description" : "ZooKeeper server",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a87ec9c2634be7babf2328e1a0a03202"
        },
        {
          "alg" : "SHA-1",
          "content" : "a6e74f826db85ff8c51c15ef0fa2ea0b462aef25"
        },
        {
          "alg" : "SHA-256",
          "content" : "ac44de96d37a80d463c1e01aaa2ea86b19490fa17a37438d14491456c0e4a911"
        },
        {
          "alg" : "SHA-512",
          "content" : "086683a17870535c0f66a6ca531e92c325a2a46b37d56fa15d6d7c8b00d01ac299ef2023a3a082879adf693a3dbbe3515009dd33a724f81d1ea71bda0f78ee04"
        },
        {
          "alg" : "SHA-384",
          "content" : "cf7739ec3208302c68c15bc7221ce12158a79dadac990b309cc0405bf5321ad7b7b9183326f9d066774bc6fdba1cb41c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.zookeeper/zookeeper@3.6.3?type=jar",
      "externalReferences" : [
        {
          "type" : "build-system",
          "url" : "https://ci-hadoop.apache.org/view/ZooKeeper/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/ZOOKEEPER"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/zookeeper-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/zookeeper.git"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.zookeeper/zookeeper@3.6.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.zookeeper",
      "name" : "zookeeper-jute",
      "version" : "3.6.3",
      "description" : "ZooKeeper jute",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7c44c4104a0da46b666562400a4a2c82"
        },
        {
          "alg" : "SHA-1",
          "content" : "8990d19ec3db01f45f82d4011a11b085db66de05"
        },
        {
          "alg" : "SHA-256",
          "content" : "6f463ade2b777f81e6c3e145b3fc03d4b39131b73dcf8c7f4b89ac4b1bacc9c5"
        },
        {
          "alg" : "SHA-512",
          "content" : "775ac90d270d3ddfb902a83abc5192fafb0b6837914112124f768419a2a92249c9f49d5a08cdcc530da10442ee0419051353b04dc22c2c26d55ddb7df528b215"
        },
        {
          "alg" : "SHA-384",
          "content" : "85cf71ac9cb3479ab819c9ddb42b904377a67a177e5e92664898138021bf5f0622332ba2e247ac0f87c8b7812e3c9b1a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.zookeeper/zookeeper-jute@3.6.3?type=jar",
      "externalReferences" : [
        {
          "type" : "build-system",
          "url" : "https://ci-hadoop.apache.org/view/ZooKeeper/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/ZOOKEEPER"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/zookeeper-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/zookeeper.git"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.zookeeper/zookeeper-jute@3.6.3?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-plus",
      "version" : "9.4.50.v20221201",
      "description" : "Jetty JavaEE style services",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6fe88c2932dd5fb3be09cc76c12f46ee"
        },
        {
          "alg" : "SHA-1",
          "content" : "1857702843f7be5ebdf9fb144e646f00346f94ce"
        },
        {
          "alg" : "SHA-256",
          "content" : "d342f86454afc1646bd512a965cd08f2cf02dc7aedad7786cc65db1f76beb404"
        },
        {
          "alg" : "SHA-512",
          "content" : "05128b86a60ec7261b24317739be3721000195003910559f9426ce3b3f09d685e88ad890a3ce89ffebdf0b975cf74bfcd5d14e861a7f39ce61f7756536cd15a6"
        },
        {
          "alg" : "SHA-384",
          "content" : "085b8f10c5970a87d6bfe1672060c4cab8cb2cd4b8106b1d547f1c1b42102719aceedcf1889ae25df3130db247962f8e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-plus@9.4.50.v20221201?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://webtide.com"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/jetty.project"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-plus@9.4.50.v20221201?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-webapp",
      "version" : "9.4.50.v20221201",
      "description" : "Jetty web application support",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1215a9c5374bfbed28397ecdbd8dc2cd"
        },
        {
          "alg" : "SHA-1",
          "content" : "b11fa1857af2c9959f1d01cfcccc204c39dac486"
        },
        {
          "alg" : "SHA-256",
          "content" : "7fc633c92dd462bf9b3e4ace572634f7d9a271bfedf0d1311424f9dfc5974e07"
        },
        {
          "alg" : "SHA-512",
          "content" : "d6312ddf0e153eba5dfd39ed762945bdb7e63c3069048a763771c7b508fdcd9914d5a2241a8d26879d6e297678397b344380acf6dc44d74999c0d49d5e2e2286"
        },
        {
          "alg" : "SHA-384",
          "content" : "71d7b1de79d039d5e47c8ba368dbaa072aa6313d627645f4148bdc03cff9c3ac497eb2ef583a04d0b3f6a33a4e69f75a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-webapp@9.4.50.v20221201?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://webtide.com"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/jetty.project"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-webapp@9.4.50.v20221201?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-xml",
      "version" : "9.4.50.v20221201",
      "description" : "The jetty xml utilities.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "50147bf1996d9c1c7462e2150c972265"
        },
        {
          "alg" : "SHA-1",
          "content" : "f920133d10561a8068d798923ea7f0d42c2bff1f"
        },
        {
          "alg" : "SHA-256",
          "content" : "0376fafc58b4b6f631b042948140a2d50059f7ec0ed6d9b2216dbac36ad219d4"
        },
        {
          "alg" : "SHA-512",
          "content" : "73e6cb345d5d1c257697844d1e94c8dd42f7021b429ba84a75c869c4dd966d08a2bcde70ade418528975e41fe14a2ffb31f16809b9b8f771f740d1dcd0adc1ed"
        },
        {
          "alg" : "SHA-384",
          "content" : "7c11bd189b5183e671b93d5912eb43c39058491af025c7e2b919142e66f671d0b6cab486cf495724f557a71181ed9d9d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-xml@9.4.50.v20221201?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://webtide.com"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/jetty.project"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-xml@9.4.50.v20221201?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-jndi",
      "version" : "9.4.50.v20221201",
      "description" : "JNDI spi impl for java namespace.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "935ee3db39c7e28bf5605b881836be3d"
        },
        {
          "alg" : "SHA-1",
          "content" : "43021375a0188bf65d9fbbeb32bb408d2de01535"
        },
        {
          "alg" : "SHA-256",
          "content" : "ff4268ebde617d13fcff22827d7fb1f04f6de3c516d0fed8e416da59e2e0ed90"
        },
        {
          "alg" : "SHA-512",
          "content" : "1d52f44c8965eecfebcbac8af255946d802fb8b759414d8814e4fb8794300e08084fb4c7b404336b4d572614a7875dbe62a73cb5c38f7ab52a895177eb98ef06"
        },
        {
          "alg" : "SHA-384",
          "content" : "dc0241a556403397846b0bf65e5f3da86d608d691d6ce8e4a36984e9556854a20d9f7d7410075d2ed71e33f51e56ba49"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-jndi@9.4.50.v20221201?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://webtide.com"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/jetty.project"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-jndi@9.4.50.v20221201?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-security",
      "version" : "9.4.50.v20221201",
      "description" : "Jetty security infrastructure",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7ffff3185ed94670c2c344cdcf8758a4"
        },
        {
          "alg" : "SHA-1",
          "content" : "efd773dafdd30c7108da63687b55afe203eaf50c"
        },
        {
          "alg" : "SHA-256",
          "content" : "d82302a6dc5e3d40185d235f7e94f941a9dcaa587b9ada544d58a549705304b9"
        },
        {
          "alg" : "SHA-512",
          "content" : "ae60e3b13202933a7ead3c0d6e7499234ac15d8589cf06b09397432ef998ebcac2d30e353a0b5dc8ca5dba26d8bb03e067493cb280c81e5a2b8433781fcedd7f"
        },
        {
          "alg" : "SHA-384",
          "content" : "0af15f0a3b778464aa8dd3bc7c96b9d7367494a1368ac1021834d50e4188e2f3fa1b07265778a3a09b051988cc028f35"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-security@9.4.50.v20221201?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://webtide.com"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/jetty.project"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-security@9.4.50.v20221201?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-util",
      "version" : "9.4.50.v20221201",
      "description" : "Utility classes for Jetty",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f1815ede8cd43f3ea3466209b828bee3"
        },
        {
          "alg" : "SHA-1",
          "content" : "92d86463bfca6241873679002ea2a012a0653990"
        },
        {
          "alg" : "SHA-256",
          "content" : "38891b3480b582d1f2646cf94f33e1675bdc7c814657e1742424c98193c9117b"
        },
        {
          "alg" : "SHA-512",
          "content" : "c18e60c5359138be31dbe065005d02423a5f6af6d2ac6724c3656e2cc918d678b38f6c95ea56a97f40863fa04f02c65855a522f9847e65871307423cc736530a"
        },
        {
          "alg" : "SHA-384",
          "content" : "3503777e8b20ad381ca1f1193aa8f9b6206157a094821319a0f5bcf3e91c8227c13fc57d140773cd5ebe0de5f6ed1849"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-util@9.4.50.v20221201?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://webtide.com"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/jetty.project"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-util@9.4.50.v20221201?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-server",
      "version" : "9.4.50.v20221201",
      "description" : "The core jetty server artifact.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e1952bdce458a6d686d0709237a7831f"
        },
        {
          "alg" : "SHA-1",
          "content" : "eeae601b8c0483779a88c53d7fb0aedf4c73a0de"
        },
        {
          "alg" : "SHA-256",
          "content" : "7dae9e934cb8738d83f70c5d997fe05e67cb5063287455d50e8542944beaa1e4"
        },
        {
          "alg" : "SHA-512",
          "content" : "da15a9aeadd4f985618ea451039178533f08b6867d66d0f02267fd150ce898775312ef8fd16cf5684b99820b5d6c402981cd51f422fd1a10818d77b0ae2896ea"
        },
        {
          "alg" : "SHA-384",
          "content" : "360af5558dc9ea3d05983b0ffd1506b434b84089dd8bae709da055ce598812f8347c5ca7c76a113479c9eaa876593d5c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-server@9.4.50.v20221201?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://webtide.com"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/jetty.project"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-server@9.4.50.v20221201?type=jar"
    },
    {
      "publisher" : "GlassFish Community",
      "group" : "javax.servlet",
      "name" : "javax.servlet-api",
      "version" : "3.1.0",
      "description" : "Java.net - The Source for Java Technology Collaboration",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "79de69e9f5ed8c7fcb8342585732bbf7"
        },
        {
          "alg" : "SHA-1",
          "content" : "3cd63d075497751784b2fa84be59432f4905bf7c"
        },
        {
          "alg" : "SHA-256",
          "content" : "af456b2dd41c4e82cf54f3e743bc678973d9fe35bd4d3071fa05c7e5333b8482"
        },
        {
          "alg" : "SHA-512",
          "content" : "32f7e3565c6cdf3d9a562f8fd597fe5059af0cf6b05b772a144a74bbc95927ac275eb38374538ec1c72adcce4c8e1e2c9f774a7b545db56b8085af0065e4a1e5"
        },
        {
          "alg" : "SHA-384",
          "content" : "8bf960fd053ef6ad1c3535824311f676b9ad537678b85f855dd5d6d726e391f8a7be9c9c76a8ae3ce8bfe671c1e2c942"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/javax.servlet/javax.servlet-api@3.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://glassfish.dev.java.net"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://java.net/jira/browse/SERVLET_SPEC"
        },
        {
          "type" : "vcs",
          "url" : "http://java.net/projects/glassfish/sources/svn/show/tags/javax.servlet-api-3.1.0"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.servlet/javax.servlet-api@3.1.0?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-io",
      "version" : "9.4.50.v20221201",
      "description" : "The Eclipse Jetty Project",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0d193a5af1ce57c514a7a84ac563a0a5"
        },
        {
          "alg" : "SHA-1",
          "content" : "df7cea38eaf86021e66455d5f6cc1ab5a04475c0"
        },
        {
          "alg" : "SHA-256",
          "content" : "dc51976bc91236279c82e9f1a51e82631562eea518e8654097d271b8dd0acb0b"
        },
        {
          "alg" : "SHA-512",
          "content" : "17e4a581789dd3398853ae89085a2c0e300ff6d9e029b763f52b13420b42bf5075cf72a4824e4e2a6b877e2260aa5db85f76fc450e3305a499d1079d9d06def7"
        },
        {
          "alg" : "SHA-384",
          "content" : "22d5b8c5ec74f72f1980018ee69802aa6a7ebe9c92c413588eadc03e9072803628aba54a15d42bc73cf2605b9bdfa404"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-io@9.4.50.v20221201?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://webtide.com"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/jetty.project"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-io@9.4.50.v20221201?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-http",
      "version" : "9.4.50.v20221201",
      "description" : "The Eclipse Jetty Project",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f1ee9309211226ecb58980bdd10b1e72"
        },
        {
          "alg" : "SHA-1",
          "content" : "f025a779b60e276ee9e4edd03f7f6bf853ea0521"
        },
        {
          "alg" : "SHA-256",
          "content" : "3e3c569b9f39dbd1c9ae6d67e32512e072c50b4845866e941bcfd741e0ef5088"
        },
        {
          "alg" : "SHA-512",
          "content" : "a9e2d0bf955bd7dae294bde86b8488be4a8e384dd903e6c9833f6597621de488798412a30ee0d5279c67e8fa2334144a2d9633e680337e45330ab38d1ab595ad"
        },
        {
          "alg" : "SHA-384",
          "content" : "645a76b75302547dd6767815c6c44c08e2fede41da002fec89d8ed312715424f31d3e45727efd7668ab83a9565598a13"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-http@9.4.50.v20221201?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://webtide.com"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/jetty.project"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-http@9.4.50.v20221201?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-continuation",
      "version" : "9.4.50.v20221201",
      "description" : "Asynchronous API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0ec7c4c7e073a98d7684231740d1c0b2"
        },
        {
          "alg" : "SHA-1",
          "content" : "69ee811001ed028e69bc83bbbdb2f0a73d639e74"
        },
        {
          "alg" : "SHA-256",
          "content" : "afead70ccfd507b85bdd20b2166fb83d58822633848cdbc145de6cb873854961"
        },
        {
          "alg" : "SHA-512",
          "content" : "ff08c571f655624f7dc056d93e1e36f98e7a5fa2c03f34e9bdfcd570eb85f0d8e0d6004c24be2ab457a715bb1b99c69c43774ad637d7e09a54438077d80f66e2"
        },
        {
          "alg" : "SHA-384",
          "content" : "ee6da5749a5f19dc65c5fda1c72c84a48a44eb0bb10a513624bdc8767ba65f44eabaabb7e20ca388ae966649cbdb6269"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-continuation@9.4.50.v20221201?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://webtide.com"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/jetty.project"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-continuation@9.4.50.v20221201?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-servlet",
      "version" : "9.4.50.v20221201",
      "description" : "Jetty Servlet Container",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "98efc8ecc69a6e565a56e0ffa36a3257"
        },
        {
          "alg" : "SHA-1",
          "content" : "96fc6a099a6a00ced5e2d9605ed5f383a52a1839"
        },
        {
          "alg" : "SHA-256",
          "content" : "3b65c915e83cdb210759cebf5d97fb3459ce443f7000dc570d27615823389881"
        },
        {
          "alg" : "SHA-512",
          "content" : "b3b3316e79c8049ffbb9ef652ff575eb3adafb84f303f6c6d1ada0d55c7b75217d5b39a0ae19853dd41f11ecd90586a02173032f71af19e2415375c81156a01f"
        },
        {
          "alg" : "SHA-384",
          "content" : "720dee2261a8498196075d9c521a9939d1d292bd5b50abfd3f00bc2ea0ab069f24db2ce60854c0042ffe4f205f3e37ae"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-servlet@9.4.50.v20221201?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://webtide.com"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/jetty.project"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-servlet@9.4.50.v20221201?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-util-ajax",
      "version" : "9.4.50.v20221201",
      "description" : "JSON/Ajax Utility classes for Jetty",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0a3af5c8d2f02aa11264427bdb500a68"
        },
        {
          "alg" : "SHA-1",
          "content" : "820176b43c83e5662c119d734580f1b590cb4c34"
        },
        {
          "alg" : "SHA-256",
          "content" : "d33394bf2df2e30092574d94471c8d9e5b702bf45d93b78eac9ed3bc5dd95b89"
        },
        {
          "alg" : "SHA-512",
          "content" : "116c6266ca80d515e2d53ba6f429b6110be3834616f42994ca5aa4241250b9bf7c6d6b80a7bde17fe70b3afc0ed6b7920f91d3744acc5e24940742b70849995d"
        },
        {
          "alg" : "SHA-384",
          "content" : "7e2fdb629f2d73ac25bd1a37a2d0c1f256d90a32eb452f7e4607e34a6d6e52c8413680a23c61ce5c1e9d1bb30eb2df25"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-util-ajax@9.4.50.v20221201?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://webtide.com"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/jetty.project"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-util-ajax@9.4.50.v20221201?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-proxy",
      "version" : "9.4.50.v20221201",
      "description" : "Jetty Proxy",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1531163ab73048dd3df8994b938617ea"
        },
        {
          "alg" : "SHA-1",
          "content" : "1236073b6535d976c4c8f90ac1129536ee42a147"
        },
        {
          "alg" : "SHA-256",
          "content" : "e092f5935748dfc6d52b0d63f99104d16cbee6b85713fc13f9d4bbcbd4f3ab0a"
        },
        {
          "alg" : "SHA-512",
          "content" : "edbd6ac68880cac52041dd43ef1b55d66d23c00d29f2af8cfe57576080be553b2a7176be8db0282ead0cdfdb3101e0c497370071455da62d703b6a0c01724541"
        },
        {
          "alg" : "SHA-384",
          "content" : "2b93e66887a71945f1fa9691cdc90709a3a1593b32af2a477fcf1d1335808d12ce7442c7a55642327fc7dd2ccac7433e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-proxy@9.4.50.v20221201?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://webtide.com"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/jetty.project"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-proxy@9.4.50.v20221201?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-client",
      "version" : "9.4.50.v20221201",
      "description" : "The Eclipse Jetty Project",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "341c47d2ce85c13999b9d2fb3202251e"
        },
        {
          "alg" : "SHA-1",
          "content" : "7b8fe98d34b9fc882572db4196698fda95c1847d"
        },
        {
          "alg" : "SHA-256",
          "content" : "b216e173d79c0adce1da3d0894abe418453851a3dc6cc5006e5d3003dcac88fd"
        },
        {
          "alg" : "SHA-512",
          "content" : "6ee2314eb4bf37c014c5ebc3b1508b97dd3a6517b7b41498f012fd1ffbd5602d57f74c8b895b841a7712b1285f62b5c49bdf7b2345d5367dee42f59855f3b9c2"
        },
        {
          "alg" : "SHA-384",
          "content" : "bd1a99f15ba0eabc14c89d892177ee3a8c2c70f23aff12df3d7371c45bdec5dbb7ce81a786152fc6f7060de6d34d0533"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-client@9.4.50.v20221201?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://webtide.com"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/jetty.project"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-client@9.4.50.v20221201?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-servlets",
      "version" : "9.4.50.v20221201",
      "description" : "Utility Servlets from Jetty",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6c385d957e0f73b3c115c165659a2ab9"
        },
        {
          "alg" : "SHA-1",
          "content" : "cbe3e644437b60d564dfed5886e514f0aee7040b"
        },
        {
          "alg" : "SHA-256",
          "content" : "5b1b10afa3503cabab22bb9f2f46a65bd079f7fa2fd4fcba21763db2a36be871"
        },
        {
          "alg" : "SHA-512",
          "content" : "47a29f524f175e2afaf26d055e39d7c33655bf1053600d9deb855581f7f5d1e9fe3310e9144decdb4b145ffb8f97ce57af415a16d030dd6dc9b238ff6f63172e"
        },
        {
          "alg" : "SHA-384",
          "content" : "bf0b668f3761b2745d99349a4b458069fafa294cad6c6144e900b6a82b7035cfdf498ba1dce469e4c413c6aafcddc03a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-servlets@9.4.50.v20221201?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://webtide.com"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/jetty.project"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-servlets@9.4.50.v20221201?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.servlet",
      "name" : "jakarta.servlet-api",
      "version" : "4.0.3",
      "description" : "Eclipse Enterprise for Java (EE4J) is an open source initiative to create standard APIs, implementations of those APIs, and technology compatibility kits for Java runtimes that enable development, deployment, and management of server-side and cloud-native applications.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "193258b1056435dba7919a978052cd81"
        },
        {
          "alg" : "SHA-1",
          "content" : "7c810f7bca93d109bac3323286b8e5ec6c394e12"
        },
        {
          "alg" : "SHA-256",
          "content" : "6d93010ca93301383c5ca960d55611a5c91798da1efb0f1fe9356f27831bf499"
        },
        {
          "alg" : "SHA-512",
          "content" : "7d8165cac1ef46736d49a69875c0239d41ffeeac5d2818eb531572eaa95910814de8278a3be633ec00f205685644deb646e773323b42562a82af71bd64d06fdb"
        },
        {
          "alg" : "SHA-384",
          "content" : "ca4b813b8e6bb9e4712edb5141b75199fd68c3d6e9cac01a62566bcd73ab5c39e118840b10d19a062e422c844c8bbf17"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.servlet/jakarta.servlet-api@4.0.3?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/servlet-api/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/servlet-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/servlet-api"
        },
        {
          "type" : "website",
          "url" : "https://www.eclipse.org"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.servlet/jakarta.servlet-api@4.0.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-codec",
      "name" : "commons-codec",
      "version" : "1.15",
      "description" : "The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "303baf002ce6d382198090aedd9d79a2"
        },
        {
          "alg" : "SHA-1",
          "content" : "49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d"
        },
        {
          "alg" : "SHA-256",
          "content" : "b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63"
        },
        {
          "alg" : "SHA-512",
          "content" : "da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787"
        },
        {
          "alg" : "SHA-384",
          "content" : "05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CODEC"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/commons-codec"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-compress",
      "version" : "1.22",
      "description" : "Apache Commons Compress software defines an API for working with compression and archive formats. These include: bzip2, gzip, pack200, lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f1e4db16fee4291212d91409313a8086"
        },
        {
          "alg" : "SHA-1",
          "content" : "691a8b4e6cf4248c3bc72c8b719337d5cb7359fa"
        },
        {
          "alg" : "SHA-256",
          "content" : "53d04a0efc7223baecaa303bd5d298eb0600e6b82b4076f9cecd558b97ba760b"
        },
        {
          "alg" : "SHA-512",
          "content" : "2d64fa6cd081fff5d73ee662a82f6186991fc13b4bdaee18b5f1bdcab06d9acb70e3713d18b296337791448251fbd6768bd84afaa817a10547652d0cfa885563"
        },
        {
          "alg" : "SHA-384",
          "content" : "295d7f69d151abbd784e1c4d021c77ce43e129bb5bda0c55762b32d77c8607863383297674ec8a212ea3dfe4007b0044"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-compress@1.22?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/COMPRESS"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-compress.git"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-compress@1.22?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.12.0",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "19fe50567358922bdad277959ea69545"
        },
        {
          "alg" : "SHA-1",
          "content" : "c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e"
        },
        {
          "alg" : "SHA-256",
          "content" : "d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e"
        },
        {
          "alg" : "SHA-512",
          "content" : "fbdbc0943cb3498b0148e86a39b773f97c8e6013740f72dbc727faeabea402073e2cc8c4d68198e5fc6b08a13b7700236292e99d4785f2c9989f2e5fac11fd81"
        },
        {
          "alg" : "SHA-384",
          "content" : "c34b8a0e0eba2168ad56fedeb7a1d710b6f1d3f1ce6aae99a4e0247bd120efbbadc8dcb2f731045b8a16e3efd30604dc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-lang.git"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-math3",
      "version" : "3.6.1",
      "description" : "The Apache Commons Math project is a library of lightweight, self-contained mathematics and statistics components addressing the most common practical problems not immediately available in the Java programming language or commons-lang.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5b730d97e4e6368069de1983937c508e"
        },
        {
          "alg" : "SHA-1",
          "content" : "e4ba98f1d4b3c80ec46392f25e094a6a2e58fcbf"
        },
        {
          "alg" : "SHA-256",
          "content" : "1e56d7b058d28b65abd256b8458e3885b674c1d588fa43cd7d1cbb9c7ef2b308"
        },
        {
          "alg" : "SHA-512",
          "content" : "8bc2438b3b4d9a6be4a47a58410b2d4d0e56e05787ab24badab8cbc9075d61857e8d2f0bffedad33f18f8a356541d00f80a8597b5dedb995be8480d693d03226"
        },
        {
          "alg" : "SHA-384",
          "content" : "95d1186d9ca06a3ea2e6437ddec3a55698e2493d3e72f6f554746b74fa929892bd71a2ab501a4e7b1ce56b7cd64e7ab4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/MATH"
        },
        {
          "type" : "vcs",
          "url" : "https://git-wip-us.apache.org/repos/asf?p=commons-math.git"
        },
        {
          "type" : "build-system",
          "url" : "https://continuum-ci.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "http://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-text",
      "version" : "1.10.0",
      "description" : "Apache Commons Text is a library focused on algorithms working on strings.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4afc9bfa2d31dbf7330c98fcc954b892"
        },
        {
          "alg" : "SHA-1",
          "content" : "3363381aef8cef2dbc1023b3e3a9433b08b64e01"
        },
        {
          "alg" : "SHA-256",
          "content" : "770cd903fa7b604d1f7ef7ba17f84108667294b2b478be8ed1af3bffb4ae0018"
        },
        {
          "alg" : "SHA-512",
          "content" : "afd836a1094449e0a791fee67363666c47b6d24acff353a5089b837b332c0f4af89565c354682521e37062d20e6b52d70c77bb4f24cca9b9532c274fc708a831"
        },
        {
          "alg" : "SHA-384",
          "content" : "06c56e6e513dd77cf10d0da46cdea08c34e220e81fa024735b668c6650df4234e564fe865ff5cafea963f56b1e8ffd4a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/TEXT"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-text.git"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-io",
      "name" : "commons-io",
      "version" : "2.11.0",
      "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3b4b7ccfaeceeac240b804839ee1a1ca"
        },
        {
          "alg" : "SHA-1",
          "content" : "a2503f302b11ebde7ebc3df41daebe0e4eea3689"
        },
        {
          "alg" : "SHA-256",
          "content" : "961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908"
        },
        {
          "alg" : "SHA-512",
          "content" : "5bd78eed456ede30119319c5bed8e3e4c443b6fd7bdb3a7a5686647bd83094d0c3e2832a7575cfb60e4ef25f08106b93476939d3adcfecf5533cc030b3039e10"
        },
        {
          "alg" : "SHA-384",
          "content" : "114f1e324d90ad887c177876d410f5787a8e8da6c48d4b2862d365802c0efded3a88cb24046976bf6276cadad3712f0f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/IO"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-collections",
      "name" : "commons-collections",
      "version" : "3.2.2",
      "description" : "Types that extend and augment the Java Collections Framework.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f54a8510f834a1a57166970bfc982e94"
        },
        {
          "alg" : "SHA-1",
          "content" : "8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5"
        },
        {
          "alg" : "SHA-256",
          "content" : "eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8"
        },
        {
          "alg" : "SHA-512",
          "content" : "51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16"
        },
        {
          "alg" : "SHA-384",
          "content" : "dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/COLLECTIONS"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/collections/trunk"
        },
        {
          "type" : "build-system",
          "url" : "https://continuum-ci.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "http://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-collections4",
      "version" : "4.4",
      "description" : "The Apache Commons Collections package contains types that extend and augment the Java Collections Framework.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4a37023740719b391f10030362c86be6"
        },
        {
          "alg" : "SHA-1",
          "content" : "62ebe7544cb7164d87e0637a2a6a2bdc981395e8"
        },
        {
          "alg" : "SHA-256",
          "content" : "1df8b9430b5c8ed143d7815e403e33ef5371b2400aadbe9bda0883762e0846d1"
        },
        {
          "alg" : "SHA-512",
          "content" : "5939c9931eb9557caee3b45fe1dd9ce54cabdc4e6182ed7faac77e1a866dd0cb602bfa4ece2f3316d769913366106bd2b61bf3bb5faad1fa7d808124c06dec0f"
        },
        {
          "alg" : "SHA-384",
          "content" : "74059fd8f61c366ed448e102256fdbd1db0d690501c2c296c80f3657a2c0d8ade3dd9533b1431cc29786bbb624195f46"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/COLLECTIONS"
        },
        {
          "type" : "vcs",
          "url" : "https://git-wip-us.apache.org/repos/asf?p=commons-collections.git"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar"
    },
    {
      "group" : "com.google.code.findbugs",
      "name" : "jsr305",
      "version" : "3.0.0",
      "description" : "JSR305 Annotations for Findbugs",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "195d5db8981fbec5fa18d5df9fad95ed"
        },
        {
          "alg" : "SHA-1",
          "content" : "5871fb60dc68d67da54a663c3fd636a10a532948"
        },
        {
          "alg" : "SHA-256",
          "content" : "bec0b24dcb23f9670172724826584802b80ae6cbdaba03bdebdef9327b962f6a"
        },
        {
          "alg" : "SHA-512",
          "content" : "399510f759fb48255c6298f3545c9b644372fbc9d7245e80e6b51f49da0ac9275d104092c537ac047d5a1312c7d191dee8d655ca8d760b59ce1452bf4370a6e0"
        },
        {
          "alg" : "SHA-384",
          "content" : "a7fa7a0b69f41518fdb70e847148e17d0909fb657cee127308fb6cd14f913c63c82608aeae3955f10b48d358a8addfee"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://code.google.com/p/findbugs/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.0?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "2.0.6",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0dd65c386e8c5f4e6e014de3f7a7ae60"
        },
        {
          "alg" : "SHA-1",
          "content" : "88c40d8b4f33326f19a7d3c0aaf2c7e8721d4953"
        },
        {
          "alg" : "SHA-256",
          "content" : "2f2a92d410b268139d7d63b75ed25e21995cfe4100c19bf23577cfdbc8077bda"
        },
        {
          "alg" : "SHA-512",
          "content" : "4f8bcafcbb105542ae9333a79f1779aa299570c129abc718331cb5969af52e06e53e645ba52e67ebbe822006ea95093186656742dd24a4b167e270ba9e55e1e1"
        },
        {
          "alg" : "SHA-384",
          "content" : "aae19620668b33d8a5837cd39bfd398644199693c08869812948b52eff238cd9d363cbe1a5bbdd25d6efaac4bd2caa67"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@2.0.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.qos.ch"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.6?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "jul-to-slf4j",
      "version" : "2.0.6",
      "description" : "JUL to SLF4J bridge",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5a22f4776707e517ff1da17a98b3918c"
        },
        {
          "alg" : "SHA-1",
          "content" : "c4d348977a83a0bfcf42fd6fd1fee6e7904f1a0c"
        },
        {
          "alg" : "SHA-256",
          "content" : "6466a327c5ac59fc41c98437e248b9052a4fad6fae9f83a7f723eae297990017"
        },
        {
          "alg" : "SHA-512",
          "content" : "30735a17bbcc9e2c0c81c5c6b4233e85c96cc6c074b3eb8c607ab3410615af76bec8a1bfe9470ac4a185f1bbd8250924aede36fc06623def73a2330bebffe041"
        },
        {
          "alg" : "SHA-384",
          "content" : "1f699ba73ec58a28afc32bec472d3d8b4d135f585721690f104aea31685cb23b742fa9d1819572f9dac4216fd5125187"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/jul-to-slf4j@2.0.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.qos.ch"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/jul-to-slf4j@2.0.6?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "jcl-over-slf4j",
      "version" : "2.0.6",
      "description" : "JCL 1.2 implemented over SLF4J",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "39ab1cc1376b4c2d1ba706a98cca83de"
        },
        {
          "alg" : "SHA-1",
          "content" : "839ff57e112f2e28ef372e96d135696a6896b9ad"
        },
        {
          "alg" : "SHA-256",
          "content" : "7aee1e1a12f4e2b3b42af9453a098132339d419056c178105543f23e79633a69"
        },
        {
          "alg" : "SHA-512",
          "content" : "835e28748daa0d2074baf1ff2ed8b7028a89a2aa8f701940ec6d096d8289facd22a0a133fceb4decbda5ed1a211986537ce2a5b0aa3302be9ad6367d64fda4f0"
        },
        {
          "alg" : "SHA-384",
          "content" : "490af11630d23314dcf444c6787fc5d85dc01d6dec02a2cb3fdee80ddd6225d8046cb7f6f012a60786e6e9554eaf5427"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.qos.ch"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.6?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-slf4j2-impl",
      "version" : "2.19.0",
      "description" : "The Apache Log4j SLF4J 2.0 API binding to Log4j 2 Core",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "da5fdc7ca6095583542ddecd0edfdcb8"
        },
        {
          "alg" : "SHA-1",
          "content" : "5c04bfdd63ce9dceb2e284b81e96b6a70010ee10"
        },
        {
          "alg" : "SHA-256",
          "content" : "825605eacb2d5605b105c53d4108c18125e0f82f62960d0be583278b9c524f3c"
        },
        {
          "alg" : "SHA-512",
          "content" : "ef2ae40f602ca3e0df0e159b6a77656ddc548fcd676d944daa68d1e0b48ebbb9f777649c61f172ccf3f554798584455ccf9a62f3aa6ce1ab31e59ead92d809df"
        },
        {
          "alg" : "SHA-384",
          "content" : "fc1ff56c342cc5d404f5a514f4592d089834dfc01590e33b4e6e814d37771b6b052f48dcd6aeb83202519e170b156c1b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-slf4j2-impl@2.19.0?type=jar",
      "externalReferences" : [
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/logging-log4j2/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://logging.apache.org/log4j/2.x/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LOG4J2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=logging-log4j2.git"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-slf4j2-impl@2.19.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-api",
      "version" : "2.19.0",
      "description" : "The Apache Log4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a7f8fc9751cdaa237a1e18059b4887da"
        },
        {
          "alg" : "SHA-1",
          "content" : "ea1b37f38c327596b216542bc636cfdc0b8036fa"
        },
        {
          "alg" : "SHA-256",
          "content" : "5ccb24ad9f92e768d0bc456d3061a737951262df803e004d2cad096b75a88d60"
        },
        {
          "alg" : "SHA-512",
          "content" : "f7cf3647ed90de7fdef377e4321aa9b9ea2512a46d99109b359f7fc5dcfe6d3ae9f879c212707ea4fd16d358d10d21c56d5178ec4803504745de6fe48c66c3f7"
        },
        {
          "alg" : "SHA-384",
          "content" : "d578e82caafbeab7b782599a9e115fbb9cfadcbd6ddb9a7ad2f87aec407dfcdf7fb58f41bf0cff2f7decc2afe89de46a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.19.0?type=jar",
      "externalReferences" : [
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/logging-log4j2/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://logging.apache.org/log4j/2.x/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LOG4J2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=logging-log4j2.git"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.19.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-core",
      "version" : "2.19.0",
      "description" : "The Apache Log4j Implementation",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b7f521926226a16531f8e212b1da1ffd"
        },
        {
          "alg" : "SHA-1",
          "content" : "3b6eeb4de4c49c0fe38a4ee27188ff5fee44d0bb"
        },
        {
          "alg" : "SHA-256",
          "content" : "b4a1796fab7bfc36df015c1b4052459147997e8d215a7199d71d05f9e747e4f4"
        },
        {
          "alg" : "SHA-512",
          "content" : "1300ada6f86818ef4dcd17448a8965c1c6dd41ec414de2b2a5bafdf25d03c12100fa9e8f422d7b346f2984e5dfb3d599f8c1a971a6bcaca0cf938943d06364e7"
        },
        {
          "alg" : "SHA-384",
          "content" : "06c547cd1da0fb0f878e9d589eb5feae8b5a0691d16dec9cc98807fc3e4ee940c76af7c5e379cc44133c0f77fbc945b0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.19.0?type=jar",
      "externalReferences" : [
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/logging-log4j2/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://logging.apache.org/log4j/2.x/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LOG4J2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=logging-log4j2.git"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.19.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-1.2-api",
      "version" : "2.19.0",
      "description" : "The Apache Log4j 1.x Compatibility API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "64330e674f83b296d3bd63f0f71206fb"
        },
        {
          "alg" : "SHA-1",
          "content" : "0e8d839e89e44f06ed901bb8b681161ad3131fd5"
        },
        {
          "alg" : "SHA-256",
          "content" : "60480a6c81978a9871099e002997df84a05fc11789fb248e3e803a0dcb19e0cd"
        },
        {
          "alg" : "SHA-512",
          "content" : "64234ddd0c040bbad9b8e343ac24bc05a763445f854034fbfbe27176c3a628fcdf39e2508350bc63f058d138a9487e085213ee659135d3ad56a49b3833bf4f99"
        },
        {
          "alg" : "SHA-384",
          "content" : "eb6e53249040ecb856f37ad7b22cfa7a3034250f0439811e4cc75a8de709c3d83cbcd54d958e355340cdd6784bb3a6b2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.19.0?type=jar",
      "externalReferences" : [
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/logging-log4j2/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://logging.apache.org/log4j/2.x/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LOG4J2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=logging-log4j2.git"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.19.0?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.ning",
      "name" : "compress-lzf",
      "version" : "1.1.2",
      "description" : "Compression codec for LZF encoding for particularly encoding/decoding, with reasonable compression. Compressor is basic Lempel-Ziv codec, without Huffman (deflate/gzip) or statistical post-encoding. See \"http://oldhome.schmorp.de/marc/liblzf.html\" for more on original LZF package.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f620dc5d92f58cfdb1c51895daf05f58"
        },
        {
          "alg" : "SHA-1",
          "content" : "d09d33ffa7bc1d987db92e5ebec926ff92b7cbdf"
        },
        {
          "alg" : "SHA-256",
          "content" : "a9a76c85a3cef3a22d4c0e8647a1449b638885f2ceb4d8c9f66df3c677cc228e"
        },
        {
          "alg" : "SHA-512",
          "content" : "ec119a239e5dc1a213ae06380cdaa1ab07049430485fd2e5651281ae53705feb4d5dd767ac87aca8e329adcd1e1325585d50b273738e6cb2b94b31c7156828b2"
        },
        {
          "alg" : "SHA-384",
          "content" : "f00e771ca4878a82ac6698fef4b8b17474fef2b3602ac850ec352a66d43cd798270a215313b17d98096e2f017eb7095a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.ning/compress-lzf@1.1.2?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/ning/compress/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/ning/compress"
        },
        {
          "type" : "website",
          "url" : "http://fasterxml.com/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.ning/compress-lzf@1.1.2?type=jar"
    },
    {
      "publisher" : "xerial.org",
      "group" : "org.xerial.snappy",
      "name" : "snappy-java",
      "version" : "1.1.10.3",
      "description" : "snappy-java: A fast compression/decompression library",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e6b289a0295546316993b5646052568f"
        },
        {
          "alg" : "SHA-1",
          "content" : "04548ee2aac847998146e8d4a3176f7bcc766a00"
        },
        {
          "alg" : "SHA-256",
          "content" : "fa7b5d6f99d97a428e5314d9823b586c66c8fb46956017fdd91fc59c02af7b05"
        },
        {
          "alg" : "SHA-512",
          "content" : "6bc3a985fd0f99ee5f4670604fdabc136edb4839e026304d4a5aabda756a94f45ad972e54927b72ec67d801df18061396b485c78308fa5e2084ea085f833e89d"
        },
        {
          "alg" : "SHA-384",
          "content" : "769228a0cbd77c8f372022d73e8b89f16c503683d43da24f3afabb6795fc9a4a6de53e7163553f6798ce4da2dc45fb93"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/xerial/snappy-java"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/xerial/snappy-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.3?type=jar"
    },
    {
      "group" : "org.lz4",
      "name" : "lz4-java",
      "version" : "1.8.0",
      "description" : "Java ports and bindings of the LZ4 compression algorithm and the xxHash hashing algorithm",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "936a927700aa8fc3b75d21d7571171f6"
        },
        {
          "alg" : "SHA-1",
          "content" : "4b986a99445e49ea5fbf5d149c4b63f6ed6c6780"
        },
        {
          "alg" : "SHA-256",
          "content" : "d74a3334fb35195009b338a951f918203d6bbca3d1d359033dc33edd1cadc9ef"
        },
        {
          "alg" : "SHA-512",
          "content" : "98d59086a6021ca571d9c1d64b715e43044c730e1ac563f514c40cf44302615d30378b6d5cc69990446522de6260dc8e7b303e3990a3139dc326d058dfb6dbd9"
        },
        {
          "alg" : "SHA-384",
          "content" : "8e3f2acdbb41a00c4d9cc5f328e63fb626ac7c6c84e1bf9502e2fcc76a591b2b819b2d27b29925ff986b95c297b30e2c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar",
      "externalReferences" : [ ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar"
    },
    {
      "publisher" : "com.github.luben",
      "group" : "com.github.luben",
      "name" : "zstd-jni",
      "version" : "1.5.2-5",
      "description" : "JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "474f53d74d4f815120b88bf256328139"
        },
        {
          "alg" : "SHA-1",
          "content" : "ef34c3a855e144c03de5c0b0a8e80469915ebae6"
        },
        {
          "alg" : "SHA-256",
          "content" : "0f8e64feaa068b8a02de45e9343f9b2fc401235b81e7fe3f80b2aeba001691b2"
        },
        {
          "alg" : "SHA-512",
          "content" : "edbd6d1b6f2d75e55e1f879a41a6c2e020be620c5973283fa0c61cb8c0c8ee689021742df77ed41e2688b8bc8c33c39c77ac33c4e09036878ef2da50f2e73f9f"
        },
        {
          "alg" : "SHA-384",
          "content" : "e5e5050acabe56bffa5fb4fad8b24454158ee342f970059745ed0d66b048d602c6091745cc09d31314bbd510bd489d13"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-2-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.luben/zstd-jni@1.5.2-5?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.luben/zstd-jni@1.5.2-5?type=jar"
    },
    {
      "group" : "org.roaringbitmap",
      "name" : "RoaringBitmap",
      "version" : "0.9.38",
      "description" : "Roaring bitmaps are compressed bitmaps (also called bitsets) which tend to outperform conventional compressed bitmaps such as WAH or Concise.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "555bc09665d4670395328fd43f5b4c61"
        },
        {
          "alg" : "SHA-1",
          "content" : "db0ebf650c71469890e894100b008d091dfc178e"
        },
        {
          "alg" : "SHA-256",
          "content" : "c37c8223396558c7b58b80404565356f90d92056b23d54f2cb390bc89fb9f6d3"
        },
        {
          "alg" : "SHA-512",
          "content" : "3dfad0c3d3b3106de2b4c491c42adb06a967c5545735eefdb55030c0e19b88233bea7994de85dcf759f394530b84570eadd01df64e19793196dec18b967d7a52"
        },
        {
          "alg" : "SHA-384",
          "content" : "51a5d1b44b06af825de9f92e8b6e9413724f46683d47f7fad8d982d08505ba56f7eb22d30059b6759cfd0df2874570be"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.roaringbitmap/RoaringBitmap@0.9.38?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/RoaringBitmap/RoaringBitmap/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/RoaringBitmap/RoaringBitmap"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.roaringbitmap/RoaringBitmap@0.9.38?type=jar"
    },
    {
      "group" : "org.roaringbitmap",
      "name" : "shims",
      "version" : "0.9.38",
      "description" : "Roaring bitmaps are compressed bitmaps (also called bitsets) which tend to outperform conventional compressed bitmaps such as WAH or Concise.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a20877d36a350800f467f2d08442d14e"
        },
        {
          "alg" : "SHA-1",
          "content" : "45572e816d3a2fdab3435eecb1deb69e35a76778"
        },
        {
          "alg" : "SHA-256",
          "content" : "7be92d043d041dba6339dd5d56d7b402f40af44e1e7be3435513f18d88126d6c"
        },
        {
          "alg" : "SHA-512",
          "content" : "0292db6dc8e34af2f6fef0d5e51659da8b98feec79545717dc9359f318fffe467991642e6deb5f10fe2c1009e3494a24556c9ed237a08557d059c471f75c0054"
        },
        {
          "alg" : "SHA-384",
          "content" : "3a3c42ddb410cdeb58243357428eb73a34231853e4c76c27d47181535c4b998e24e688b8fd6e0c00da0219d8be29da38"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.roaringbitmap/shims@0.9.38?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/RoaringBitmap/RoaringBitmap/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/RoaringBitmap/RoaringBitmap"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.roaringbitmap/shims@0.9.38?type=jar"
    },
    {
      "publisher" : "org.scala-lang.modules",
      "group" : "org.scala-lang.modules",
      "name" : "scala-xml_2.13",
      "version" : "2.1.0",
      "description" : "scala-xml",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "78e8f583348f29dfb9cf94dde1d046aa"
        },
        {
          "alg" : "SHA-1",
          "content" : "f2c107c097692b6c07941e7b96fcf6ec3b58add6"
        },
        {
          "alg" : "SHA-256",
          "content" : "d122cbf93115ee714570de6a9c18e53001fedb474911d4cb5091758ee51f053a"
        },
        {
          "alg" : "SHA-512",
          "content" : "53b65162f279b281b16d2c2c3dc2ea7a5bf26329f8e0d4dad3c8b22c7eb63e69a1cf66d99c48dbaf6ecc74efac89605671b156902def4e78f80e06992aa4baf3"
        },
        {
          "alg" : "SHA-384",
          "content" : "942e58b0fb65c0cbc728464e65e4833ea9912d07d6c3d84be6a634215ee5b00ef1e816275c13540f4918b64bb961155f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.scala-lang.modules/scala-xml_2.13@2.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.scala-lang.org/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/scala/scala-xml/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/scala/scala-xml"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.scala-lang.modules/scala-xml_2.13@2.1.0?type=jar"
    },
    {
      "publisher" : "LAMP/EPFL",
      "group" : "org.scala-lang",
      "name" : "scala-library",
      "version" : "2.13.8",
      "description" : "Standard library for the Scala Programming Language",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3151312d47d9a9d4a83e593c58133804"
        },
        {
          "alg" : "SHA-1",
          "content" : "5a865f03a794b27e6491740c4c419a19e4511a3d"
        },
        {
          "alg" : "SHA-256",
          "content" : "a0882b82514190c2bac7d1a459872a75f005fc0f3e88b2bc0390367146e35db7"
        },
        {
          "alg" : "SHA-512",
          "content" : "4500fed93a192877d580ec6c04e91e4fe1d603b6c090a20f3579f326f49570f8abc409cd5a3756dbbb673b690d0b85628aae286272b4cca3f65a627a1a4495a6"
        },
        {
          "alg" : "SHA-384",
          "content" : "4edd6dadbdd1029881dd274380b7e926d75d00077e94ad17ff6aac7d439a778e36a141aefa85a9d86207629e0430185e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.scala-lang/scala-library@2.13.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://lamp.epfl.ch/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/scala/bug/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/scala/scala.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.scala-lang/scala-library@2.13.8?type=jar"
    },
    {
      "publisher" : "LAMP/EPFL",
      "group" : "org.scala-lang",
      "name" : "scala-reflect",
      "version" : "2.13.8",
      "description" : "Compiler for the Scala Programming Language",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "66052c94e7ad3fc2295e13eeb840d565"
        },
        {
          "alg" : "SHA-1",
          "content" : "994b004d041b18724ec298a135c37e7817d369ec"
        },
        {
          "alg" : "SHA-256",
          "content" : "fdfbcc92e87f424578b303bcb47e0f55fee990c4b6da0006c9e75879d1e442e4"
        },
        {
          "alg" : "SHA-512",
          "content" : "1e1849e2c2f6df198f7f589d29ee5a46786c52fd05b6671de70bc59a70c439d0ab88ec5f8388c541e70f98411e5426df1184794153443d9bdb4d911df662d5cb"
        },
        {
          "alg" : "SHA-384",
          "content" : "41373bb7c407ae887c18cc6d401f6eaf82334703a66004e81643a59c5856cfb0e86424dabf5414e0618dfbe42c2a8d0b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.scala-lang/scala-reflect@2.13.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://lamp.epfl.ch/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/scala/bug/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/scala/scala.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.scala-lang/scala-reflect@2.13.8?type=jar"
    },
    {
      "publisher" : "org.json4s",
      "group" : "org.json4s",
      "name" : "json4s-jackson_2.13",
      "version" : "3.7.0-M11",
      "description" : "json4s-jackson",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6647f9f8576fcf1977fefa08961d29e2"
        },
        {
          "alg" : "SHA-1",
          "content" : "69fcabd60bca85fecb4756db1d5f18ccfdabad4b"
        },
        {
          "alg" : "SHA-256",
          "content" : "cad020769db5d5a7df5bca1030303d69a986c714250c71e8ec29d7f185839852"
        },
        {
          "alg" : "SHA-512",
          "content" : "1d3129a5eb61d94879a3ddc756efd867f1e651fe9786cd888a945206417d89da40ce4a3547cee1801ebfb35b24043701d21af37c5730353c3c232117784c5db2"
        },
        {
          "alg" : "SHA-384",
          "content" : "b04e6125482b7cb98b6dda14ac8a48c745c44ac5814df7d5fcc7324f8ef3c5000b7cda2e2ded12d8db348bdae72fec43"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.json4s/json4s-jackson_2.13@3.7.0-M11?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/json4s/json4s"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/json4s/json4s"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.json4s/json4s-jackson_2.13@3.7.0-M11?type=jar"
    },
    {
      "publisher" : "org.json4s",
      "group" : "org.json4s",
      "name" : "json4s-core_2.13",
      "version" : "3.7.0-M11",
      "description" : "json4s-core",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "613e461727e583b2704ae30680e0fb32"
        },
        {
          "alg" : "SHA-1",
          "content" : "e04ce5f5a27292ff7bb13ced353137e10813a9f2"
        },
        {
          "alg" : "SHA-256",
          "content" : "b3db09cd8b78eef923bac4c1c9afb5e561e388d7e3b31b41f7e40959c1c5c39a"
        },
        {
          "alg" : "SHA-512",
          "content" : "e1c96e1dd20e7560790aba19d4507ad8ee3026d7e08dbdde116930e14b0eee02f337683bb878081489a9a2c2e9761385dd6dc1912a00caaadfed3688d5bdb2a1"
        },
        {
          "alg" : "SHA-384",
          "content" : "f6088a079b57013090cd2ddef5b526ffee2661bc8ea248265f357a56d63842282c6705f008e2c9cc78e41cb9578e148c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.json4s/json4s-core_2.13@3.7.0-M11?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/json4s/json4s"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/json4s/json4s"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.json4s/json4s-core_2.13@3.7.0-M11?type=jar"
    },
    {
      "publisher" : "org.json4s",
      "group" : "org.json4s",
      "name" : "json4s-ast_2.13",
      "version" : "3.7.0-M11",
      "description" : "json4s-ast",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8cb6f81e058c46800ccc28ef15af5985"
        },
        {
          "alg" : "SHA-1",
          "content" : "5cdee05c25c367092ac5f8f1261989e4e25568e3"
        },
        {
          "alg" : "SHA-256",
          "content" : "c694b60c77ddc9e33a849f156ff25ac77c052a64d5cce5fd180c2c160d7ac923"
        },
        {
          "alg" : "SHA-512",
          "content" : "e1fb4ea75c70b90546aea7df72d5f04d45ef45c72a213d4ef307c49f735ca3ce1140fb7750a90c35ada4efa8680b883b191e5976587f88bcbfb95248464fcc37"
        },
        {
          "alg" : "SHA-384",
          "content" : "8931463edaedf437afd53021a9d1bff2861628ed27d84a636dbc73d2bc953f5f43fd0859a5e3b8c11edee467e42b4f14"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.json4s/json4s-ast_2.13@3.7.0-M11?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/json4s/json4s"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/json4s/json4s"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.json4s/json4s-ast_2.13@3.7.0-M11?type=jar"
    },
    {
      "publisher" : "org.json4s",
      "group" : "org.json4s",
      "name" : "json4s-scalap_2.13",
      "version" : "3.7.0-M11",
      "description" : "json4s-scalap",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cf191bc2c9c9cd026f5eb00bfbf74389"
        },
        {
          "alg" : "SHA-1",
          "content" : "e225fbf829ede3a4f68519490e0c5b82988bfb8d"
        },
        {
          "alg" : "SHA-256",
          "content" : "108a024adcf76527a7e8d4d209519121fb640166092d139c6198031eba6cb64a"
        },
        {
          "alg" : "SHA-512",
          "content" : "c175b309d97723ee64f6a4faa3c0d83df4a434aa474922daeab726e935976cb2cb244e55fa5f74301a5ed62702c030e60660ab08f65beb10b49f30e513e04c16"
        },
        {
          "alg" : "SHA-384",
          "content" : "dddfc59035f2afa06163c70a23be51abbd3030f5fcf9e9e4ef1a56aee0886c5d2cc0c35506057e5875ab9eadb9d1ba1a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.json4s/json4s-scalap_2.13@3.7.0-M11?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/json4s/json4s"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/json4s/json4s"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.json4s/json4s-scalap_2.13@3.7.0-M11?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "org.glassfish.jersey.core",
      "name" : "jersey-client",
      "version" : "2.36",
      "description" : "Jersey core client implementation",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ee13f5ef0926cdbcb447415e0c5e2812"
        },
        {
          "alg" : "SHA-1",
          "content" : "0755709fb31407d36c114afbe345b47cebf0fe60"
        },
        {
          "alg" : "SHA-256",
          "content" : "027b7061001f186bd7a48bbe5f070e2774b108969776935fc9b55591a93f689d"
        },
        {
          "alg" : "SHA-512",
          "content" : "31f94c45a6b151d1407e9e7c129574b5c94035e102d024096d99737afd837cd25b55664a7938c8814b6379d363894f318429d344d34eac110ebfe9afe1fab85f"
        },
        {
          "alg" : "SHA-384",
          "content" : "6cd9d7fb0105ff3ccc04da4a6a03d11e19afd59739f90d33affaec3bb1fc849c81b09526090d151ab51a876e310a3861"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        },
        {
          "license" : {
            "id" : "BSD-2-Clause"
          }
        },
        {
          "license" : {
            "name" : "Apache License, 2.0",
            "url" : "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license" : {
            "name" : "Public Domain",
            "url" : "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license" : {
            "name" : "Modified BSD",
            "url" : "https://asm.ow2.io/license.html"
          }
        },
        {
          "license" : {
            "name" : "jQuery license",
            "url" : "jquery.org/license"
          }
        },
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        },
        {
          "license" : {
            "name" : "W3C license",
            "url" : "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.jersey.core/jersey-client@2.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/org/foundation/"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jersey/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jersey"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.jersey.core/jersey-client@2.36?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.ws.rs",
      "name" : "jakarta.ws.rs-api",
      "version" : "2.1.6",
      "description" : "Jakarta RESTful Web Services API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c3892382aeb5c54085b22b1890511d29"
        },
        {
          "alg" : "SHA-1",
          "content" : "1dcb770bce80a490dff49729b99c7a60e9ecb122"
        },
        {
          "alg" : "SHA-256",
          "content" : "4cea299c846c8a6e6470cbfc2f7c391bc29b9caa2f9264ac1064ba91691f4adf"
        },
        {
          "alg" : "SHA-512",
          "content" : "c1e2655269b9a32f9c0aec9edf12bf6d8b397d8cbcf60e28dd21ab13ecc2738800ebe5c2d49ed3c50d4dac6617671f0fae873daf8ec116a16ef7f7f0a3bef7fa"
        },
        {
          "alg" : "SHA-384",
          "content" : "3fd05e2b167d927216d3b2fc9d1c5a70aa3911d075c2159f958ce755c6a41d93bd76f0ce79ccd22e5a60182aa91fdb07"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/org/foundation/"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jax-rs-api-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jaxrs-api/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jaxrs-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "org.glassfish.hk2.external",
      "name" : "jakarta.inject",
      "version" : "2.6.1",
      "description" : "Injection API (JSR 330) version ${javax.inject.version} repackaged as OSGi bundle",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4d7c80a1e3cd54531af03bef4537f7af"
        },
        {
          "alg" : "SHA-1",
          "content" : "8096ebf722902e75fbd4f532a751e514f02e1eb7"
        },
        {
          "alg" : "SHA-256",
          "content" : "5e88c123b3e41bca788b2683118867d9b6dec714247ea91c588aed46a36ee24f"
        },
        {
          "alg" : "SHA-512",
          "content" : "7fc8196ad9ee03a831dfff85c945e416c3906071a7aa8ebf6ab8b7008dfec0adccc1f1dca53ed6768ac5676cd4b3c43471674f97ff73e1f61f5a427aaed68e05"
        },
        {
          "alg" : "SHA-384",
          "content" : "6b3ea9eeec5cbbc1fb3e6c89160af67b82ffbd68948dd4790e3fe3ce2fc495c063698a7d6a1998d5db51abafe3915e19"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.oracle.com"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "org.glassfish.jersey.core",
      "name" : "jersey-common",
      "version" : "2.36",
      "description" : "Jersey core common packages",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4b155e7fd084ad25b5e836af5efbe4c8"
        },
        {
          "alg" : "SHA-1",
          "content" : "5d259ea71ca3c1f4566ec5bfee7320e63d79673b"
        },
        {
          "alg" : "SHA-256",
          "content" : "543b8df0bfa07e54fe65e45b351088010a2a7079ac2564023761f8dfe8eb7b33"
        },
        {
          "alg" : "SHA-512",
          "content" : "fa3166330f8b780c714b6ac81e561503c05587c97753eaf79c5e1cf4033b570812262d185f838b5ae08bc17d85dd2a86a1147f4b2a7b42f032757535d4cd10b5"
        },
        {
          "alg" : "SHA-384",
          "content" : "005af1b24cc04fdb9bac2177cca06d492974e9a63cd10e3dd8100b4aefa796ab8844b00d4f5ae96468015dfdd91c6814"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "name" : "The GNU General Public License (GPL), Version 2, With Classpath Exception",
            "url" : "https://www.gnu.org/software/classpath/license.html"
          }
        },
        {
          "license" : {
            "name" : "Apache License, 2.0",
            "url" : "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license" : {
            "name" : "Public Domain",
            "url" : "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.jersey.core/jersey-common@2.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/org/foundation/"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jersey/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jersey"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.jersey.core/jersey-common@2.36?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.annotation",
      "name" : "jakarta.annotation-api",
      "version" : "1.3.5",
      "description" : "Jakarta Annotations API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8b165cf58df5f8c2a222f637c0a07c97"
        },
        {
          "alg" : "SHA-1",
          "content" : "59eb84ee0d616332ff44aba065f3888cf002cd2d"
        },
        {
          "alg" : "SHA-256",
          "content" : "85fb03fc054cdf4efca8efd9b6712bbb418e1ab98241c4539c8585bbc23e1b8a"
        },
        {
          "alg" : "SHA-512",
          "content" : "d1acff146c0f9ea923a9325ad4c22ba2052ec474341ab8392abab7e8abd3ca010db2400ff9b5849fc4f1fa5c0a18830eb104da07a13bd26b4f0a43d167935878"
        },
        {
          "alg" : "SHA-384",
          "content" : "004a4bde333c0575f72df1cb9cf95ee0c6c7f738a6f0f723a5ec545aaa1664abeb82f01627708a1377e3136754fb7859"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/common-annotations-api/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/ca-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/common-annotations-api"
        },
        {
          "type" : "website",
          "url" : "https://www.eclipse.org"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "org.glassfish.hk2",
      "name" : "osgi-resource-locator",
      "version" : "1.0.3",
      "description" : "Used by various API providers that rely on META-INF/services mechanism to locate providers.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e7e82b82118c5387ae45f7bf3892909b"
        },
        {
          "alg" : "SHA-1",
          "content" : "de3b21279df7e755e38275137539be5e2c80dd58"
        },
        {
          "alg" : "SHA-256",
          "content" : "aab5d7849f7cfcda2cc7c541ba1bd365151d42276f151c825387245dfde3dd74"
        },
        {
          "alg" : "SHA-512",
          "content" : "4d84983a9b1c72f58661b576c78ca456a2106602c2ad211cd7e72d94464c8774173b34a35629c507c7c84c982f1de0c9bf48352458e8480be5f874d20d6e69a3"
        },
        {
          "alg" : "SHA-384",
          "content" : "9f92002296c66cc8996d459b95a9c531ec71b98a8b819121abbc7d636a6c4ace04c88878ba6917f71650280a880d1ce2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.hk2/osgi-resource-locator@1.0.3?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2-extra"
        },
        {
          "type" : "website",
          "url" : "https://www.eclipse.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/ee4j/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.hk2/osgi-resource-locator@1.0.3?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "org.glassfish.jersey.core",
      "name" : "jersey-server",
      "version" : "2.36",
      "description" : "Jersey core server implementation",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8dd2bd5634c82b57eebb0fe35aaccee2"
        },
        {
          "alg" : "SHA-1",
          "content" : "73cf67d0d761b60860b7721529503a121cfa9df4"
        },
        {
          "alg" : "SHA-256",
          "content" : "2699758d1c33a9137363fd022d8c9c00423c800c4fde2b49d53530987e8da72d"
        },
        {
          "alg" : "SHA-512",
          "content" : "7a858fea938ce38aaac4ec6fea14bb35b036b6c690266757f3ccdf5527f4a20da9d7d5dace96467c28e45ac2efa50c08a9fe4b09fb1b47946409a7b02bd0de67"
        },
        {
          "alg" : "SHA-384",
          "content" : "c039aefae5ae6521bfb8d85f02311a1c31559468b14f10d0d9739edaa1b8aa46f9278ff05abfe0d45cdeb4a03b9fd22e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "name" : "The GNU General Public License (GPL), Version 2, With Classpath Exception",
            "url" : "https://www.gnu.org/software/classpath/license.html"
          }
        },
        {
          "license" : {
            "name" : "Apache License, 2.0",
            "url" : "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license" : {
            "name" : "Modified BSD",
            "url" : "https://asm.ow2.io/license.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.jersey.core/jersey-server@2.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/org/foundation/"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jersey/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jersey"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.jersey.core/jersey-server@2.36?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.validation",
      "name" : "jakarta.validation-api",
      "version" : "2.0.2",
      "description" : "Jakarta Bean Validation API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "77501d529c1928c9bac2500cc9f93fb0"
        },
        {
          "alg" : "SHA-1",
          "content" : "5eacc6522521f7eacb081f95cee1e231648461e7"
        },
        {
          "alg" : "SHA-256",
          "content" : "b42d42428f3d922c892a909fa043287d577c0c5b165ad9b7d568cebf87fc9ea4"
        },
        {
          "alg" : "SHA-512",
          "content" : "3ca8556b80ca809b3a43fac31469702bbad62a00e63b11a304dad1e372d9f6c128357463a4c70c423055941c7e2e417f87a9474a204d189c8e4b62f42047c8eb"
        },
        {
          "alg" : "SHA-384",
          "content" : "6ae3963fd6a5e83b068a8344b88f6bfbd26d29cee64193025bc5e98195678e49826463da27a7a1c15cd83b2149d57a94"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://hibernate.atlassian.net/projects/BVAL/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/beanvalidation-api"
        },
        {
          "type" : "website",
          "url" : "https://www.eclipse.org"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "org.glassfish.jersey.containers",
      "name" : "jersey-container-servlet",
      "version" : "2.36",
      "description" : "Jersey core Servlet 3.x implementation",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4571ad55cb3afc068f90ecc1d7c41a25"
        },
        {
          "alg" : "SHA-1",
          "content" : "fa6b0f7d47d5c3e054c71eea613a6bbe62b1b733"
        },
        {
          "alg" : "SHA-256",
          "content" : "64f06051710734565486ab18910a4d3e2dbc1292a410146b66045dc1aea7cf1a"
        },
        {
          "alg" : "SHA-512",
          "content" : "3b72d1180786dece0122a42da951c88a0fd075cc22bae57cb8fb888d748fe098673005f021a28f47dae06ecbc21bf3faca4ef00b62a5fe76ff3acd6bd83c3595"
        },
        {
          "alg" : "SHA-384",
          "content" : "2dac4ecfeba7d17be2d0ff6e84856379121f9e6b67dedfc4fec3af5a5398414d176b62ec073ed357d93160dd460b5c66"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        },
        {
          "license" : {
            "id" : "BSD-2-Clause"
          }
        },
        {
          "license" : {
            "name" : "Apache License, 2.0",
            "url" : "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license" : {
            "name" : "Public Domain",
            "url" : "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license" : {
            "name" : "Modified BSD",
            "url" : "https://asm.ow2.io/license.html"
          }
        },
        {
          "license" : {
            "name" : "jQuery license",
            "url" : "jquery.org/license"
          }
        },
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        },
        {
          "license" : {
            "name" : "W3C license",
            "url" : "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@2.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/org/foundation/"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jersey/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jersey"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@2.36?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "org.glassfish.jersey.containers",
      "name" : "jersey-container-servlet-core",
      "version" : "2.36",
      "description" : "Jersey core Servlet 2.x implementation",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f7166bcea4836fa9abb54220df1a5acf"
        },
        {
          "alg" : "SHA-1",
          "content" : "d3bd5067597fa7252e603502ee4ae34563852eb5"
        },
        {
          "alg" : "SHA-256",
          "content" : "08dec2b2be0e126b01632b9ac22982cf746c6f2a1aae5c65f880ac8376f010da"
        },
        {
          "alg" : "SHA-512",
          "content" : "e1e4069f7239a04bdf601491f76a3d0bc7c5ecd5340f04e86610b234826226fa42aaee32fe8faa9d3d4c145bf8f514c40d58208129c1aae4b5b1f084100b448d"
        },
        {
          "alg" : "SHA-384",
          "content" : "60ad1264a19746997005fb8ff8ecbb56be6cda0aa22d18efa5b41dad69d5e9190098062f9c74fd18dc292f3256248378"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        },
        {
          "license" : {
            "id" : "BSD-2-Clause"
          }
        },
        {
          "license" : {
            "name" : "Apache License, 2.0",
            "url" : "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license" : {
            "name" : "Public Domain",
            "url" : "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license" : {
            "name" : "Modified BSD",
            "url" : "https://asm.ow2.io/license.html"
          }
        },
        {
          "license" : {
            "name" : "jQuery license",
            "url" : "jquery.org/license"
          }
        },
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        },
        {
          "license" : {
            "name" : "W3C license",
            "url" : "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet-core@2.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/org/foundation/"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jersey/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jersey"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet-core@2.36?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "org.glassfish.jersey.inject",
      "name" : "jersey-hk2",
      "version" : "2.36",
      "description" : "HK2 InjectionManager implementation",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "11f928a24e0cb52fd8999cca0268b3b3"
        },
        {
          "alg" : "SHA-1",
          "content" : "69a57963b35428a261ac4313cfa89f6b3dc255c6"
        },
        {
          "alg" : "SHA-256",
          "content" : "bdc4a8250be82943f7af1ccea4f58a92a8a73c15307ec4226fd60b8a455672f6"
        },
        {
          "alg" : "SHA-512",
          "content" : "c423e6d00092751910302afcd2727a628740c0b77a3fdf681744d408a1eec8941d611c683e84a0be83a9a39cf184f7a60e50d6e39843f18f8ff419c37ad56432"
        },
        {
          "alg" : "SHA-384",
          "content" : "492ef6f281d8eb3baeac9cb53535b26b3ae0639f622d9efcf18442b1a07c35349a88d43442fd0cc7312e44820f702165"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        },
        {
          "license" : {
            "id" : "BSD-2-Clause"
          }
        },
        {
          "license" : {
            "name" : "Apache License, 2.0",
            "url" : "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license" : {
            "name" : "Public Domain",
            "url" : "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license" : {
            "name" : "Modified BSD",
            "url" : "https://asm.ow2.io/license.html"
          }
        },
        {
          "license" : {
            "name" : "jQuery license",
            "url" : "jquery.org/license"
          }
        },
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        },
        {
          "license" : {
            "name" : "W3C license",
            "url" : "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@2.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/org/foundation/"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jersey/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jersey"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@2.36?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "org.glassfish.hk2",
      "name" : "hk2-locator",
      "version" : "2.6.1",
      "description" : "${project.name}",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "dfd358720393d83b01747928db6e3912"
        },
        {
          "alg" : "SHA-1",
          "content" : "9dedf9d2022e38ec0743ed44c1ac94ad6149acdd"
        },
        {
          "alg" : "SHA-256",
          "content" : "febc668deb9f2000c76bd4918d8086c0a4c74d07bd0c60486b72c6bd38b62874"
        },
        {
          "alg" : "SHA-512",
          "content" : "e2c87a265f114042f4c04397db4adca7291fd68e08e97129576ceb603287b57ccf5b03d0c285727ebb8cd7f88009280bdeab4254475d59da1ac41ba57b7cdecb"
        },
        {
          "alg" : "SHA-384",
          "content" : "05afff9ebfdbdaed71770a58fe334751b9ac7476eb4114e08fc376bf4e16226b5016784c99c3dd8cb04c79d954068402"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.hk2/hk2-locator@2.6.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.oracle.com"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.hk2/hk2-locator@2.6.1?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "org.glassfish.hk2.external",
      "name" : "aopalliance-repackaged",
      "version" : "2.6.1",
      "description" : "Dependency Injection Kernel",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0237846ebdaa7db36b356044a373ffba"
        },
        {
          "alg" : "SHA-1",
          "content" : "b2eb0a83bcbb44cc5d25f8b18f23be116313a638"
        },
        {
          "alg" : "SHA-256",
          "content" : "bad77f9278d753406360af9e4747bd9b3161554ea9cd3d62411a0ae1f2c141fd"
        },
        {
          "alg" : "SHA-512",
          "content" : "2d9e5395ba887fa5bb6a8209b731292d440f5c1db2fccaf56c41b1f1d9f774733da28aa8b9b769e765fe62f3640d7bcb2cf6140f0044a8b576e9e45144038c46"
        },
        {
          "alg" : "SHA-384",
          "content" : "f481e2a4e18308a1a0bd85e79f95711434436fa69a504fe98a3d7ea899eaed505a5cb2bfe08f41d1b2af56e150ec0741"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@2.6.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.oracle.com"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@2.6.1?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "org.glassfish.hk2",
      "name" : "hk2-api",
      "version" : "2.6.1",
      "description" : "${project.name}",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "23e8c18dae0c7b776bed756763d5153f"
        },
        {
          "alg" : "SHA-1",
          "content" : "114bd7afb4a1bd9993527f52a08a252b5d2acac5"
        },
        {
          "alg" : "SHA-256",
          "content" : "c2cb80a01e58440ae57d5ee59af4d4d94e5180e04aff112b0cb611c07d61e773"
        },
        {
          "alg" : "SHA-512",
          "content" : "9abe9f78d7f6c805b6c7b515579230e5fa573abbcd818bed56068080d6458608e2e99d5937eb959cf1e4f4cfdc4f790059dfc1231313cd8f30aaefbf518eb1c7"
        },
        {
          "alg" : "SHA-384",
          "content" : "2236ca10af39c4f4f6f1ac63c3652eaa4124bce8f557f8ebaa78576e00c25b986ee9d7e417db6edb9a06aa46b36f4d24"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.hk2/hk2-api@2.6.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.oracle.com"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.hk2/hk2-api@2.6.1?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "org.glassfish.hk2",
      "name" : "hk2-utils",
      "version" : "2.6.1",
      "description" : "${project.name}",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "75ccb55538a77bf878996497ffeb86f3"
        },
        {
          "alg" : "SHA-1",
          "content" : "396513aa96c1d5a10aa4f75c4dcbf259a698d62d"
        },
        {
          "alg" : "SHA-256",
          "content" : "30727f79086452fdefdab08451d982c2082aa239d9f75cdeb1ba271e3c887036"
        },
        {
          "alg" : "SHA-512",
          "content" : "8da7cd88de45270b1fcfd2c471ae092b3972af78a6e0ecc76ed4ac10b6bd6712d2a538bd163a457f21cea4e7e5c52f547108f44aaa791ed0fd069f697f1282c1"
        },
        {
          "alg" : "SHA-384",
          "content" : "94fb55c1f57b96fd84e717fbf3c254f16e2308bc33976addb71d26bf367b7c2ec63e657a953f30f55d7046dd07510e50"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.hk2/hk2-utils@2.6.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.oracle.com"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.hk2/hk2-utils@2.6.1?type=jar"
    },
    {
      "publisher" : "Shigeru Chiba, www.javassist.org",
      "group" : "org.javassist",
      "name" : "javassist",
      "version" : "3.25.0-GA",
      "description" : "Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation simple. It is a class library for editing bytecodes in Java.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3a4267e01989478be188d127b7a39425"
        },
        {
          "alg" : "SHA-1",
          "content" : "442dc1f9fd520130bd18da938622f4f9b2e5fba3"
        },
        {
          "alg" : "SHA-256",
          "content" : "5d49abd02997134f80041645e9668e1ff97afd69d2c2c55ae9fbd40dc073f97b"
        },
        {
          "alg" : "SHA-512",
          "content" : "638d2ed77ae1f34dd57f6aa653635a77d8477b3e99f64343ea5eafcec49ebac13250639924c47c83246890bd8988d92c30785ed8854c8a101138c410657cb944"
        },
        {
          "alg" : "SHA-384",
          "content" : "183a243f52aaea67057564cf0d18f0c32681907aa24eb65bbfd453016911cb42230a73271a0da20e3f1aabf4b0412e4e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MPL-1.1"
          }
        },
        {
          "license" : {
            "id" : "LGPL-2.1-only"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.javassist/javassist@3.25.0-GA?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://jira.jboss.org/jira/browse/JASSIST/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.javassist/javassist@3.25.0-GA?type=jar"
    },
    {
      "group" : "io.netty",
      "name" : "netty-all",
      "version" : "4.1.87.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "59fcb4cf133840677c8b02a55b7ba2fa"
        },
        {
          "alg" : "SHA-1",
          "content" : "39de92ea74a05da937343695f780e59addb8b8ea"
        },
        {
          "alg" : "SHA-256",
          "content" : "c3d3915eb8c7f6a2b18dfce2ba67d4a7dc01fcde1854a4b622d91ca187ae73cd"
        },
        {
          "alg" : "SHA-512",
          "content" : "be7f08837ceaa4480dc0b2189f68fad0f64b0555cebe469261a64690cb16d2e55469e43ddf47fcc7099ec9729e2c9760f26293067f746310f6763b6cc45aed08"
        },
        {
          "alg" : "SHA-384",
          "content" : "e42c3af3065684a84f9da09944d94e7324852c3cba2fbd0e21ea83558bb2684a9fb31f88587f33c87c27d980beb31a2a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-all@4.1.87.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-all"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-all@4.1.87.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-buffer",
      "version" : "4.1.87.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "edae2374fbcfaf345fd0b5260cd81cce"
        },
        {
          "alg" : "SHA-1",
          "content" : "8942174141fb0586e7fffefc8ae48e1458293696"
        },
        {
          "alg" : "SHA-256",
          "content" : "4e3abdf4ddb8810f5fb4a2b57c9144407873b359faa1894007673ed1465dd3e8"
        },
        {
          "alg" : "SHA-512",
          "content" : "0158cab4032503dc849186452653755af53c78d480de8b43c3bb7969a17dbfe949e4f94350942e3a8f4506f473ab9530c4fad2282c1393b1058e868957e7db4c"
        },
        {
          "alg" : "SHA-384",
          "content" : "bf2fd3312777bbc97aec582942632ba2f46c4c4f2f344463969874d2739e4cc5598ae58c49b0cd244792d002e5a20bae"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-buffer@4.1.87.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-buffer@4.1.87.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-codec",
      "version" : "4.1.87.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "90942a0f8c742f46631dcfa99d374a76"
        },
        {
          "alg" : "SHA-1",
          "content" : "d7ab7363f736114e6324ccf802d094529b30b8d8"
        },
        {
          "alg" : "SHA-256",
          "content" : "c643fe8318b7c7405acec13ed98e8f634f917960b20486295efbc5a690bac694"
        },
        {
          "alg" : "SHA-512",
          "content" : "ddb82448cddb65c83d9e2fe31ba6fd2392648db36d3f1ec845bc47d24d02255a1ecdbd1716df90bd24db7b758c320e5a4606c14ae5df87febbecd7d4a2bcd827"
        },
        {
          "alg" : "SHA-384",
          "content" : "67fc3409f2500c5734bb00096fb8a0fe7e5bc45697a741c285ed6878f9f7d29ae5d39d04eaf85b70dfb5ee8d6345ef51"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-codec@4.1.87.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-codec@4.1.87.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-codec-http",
      "version" : "4.1.87.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1e183a91d21038e1888f0f062e8bd18d"
        },
        {
          "alg" : "SHA-1",
          "content" : "3230e95d6832ee4306fe1ca774c7bcecf1da4b28"
        },
        {
          "alg" : "SHA-256",
          "content" : "39368c15595b791dbe26e7639cf2e71b6647bab8838fa5781cf7a80762eac927"
        },
        {
          "alg" : "SHA-512",
          "content" : "2b300f962a9618a43b33b533ca229c71f38c9c18e6c1e8b4bf0414f4a59d8a64fc6aec48de5a8693a2d8eedcefeff426b8d3f8427f93274b2425d68e2d18522f"
        },
        {
          "alg" : "SHA-384",
          "content" : "4c9acad8abb83d318721b6d172749f2ee29825dadb0d2ae3921df37fd1f1250ce7262cbdf0ba1b693b7c60ae5e1cdb29"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-codec-http@4.1.87.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-codec-http@4.1.87.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-codec-http2",
      "version" : "4.1.87.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7b261317c4046af8aa95437a06066191"
        },
        {
          "alg" : "SHA-1",
          "content" : "72b756ff290d782c9ebb36db7d42ee272270c0b4"
        },
        {
          "alg" : "SHA-256",
          "content" : "e5d01b8db385b23103de67d3666c6fa9fa144d42217a3c8266b2a5efe425f093"
        },
        {
          "alg" : "SHA-512",
          "content" : "69d932ed9fdf2fc61664f5c508c974b0cd5d15408527a43c864a4eccb5e5a8234d1dd49c063e3a7582a30b32370d518f07f0158f32c79a9ba8e6cec473bc7cd0"
        },
        {
          "alg" : "SHA-384",
          "content" : "95c039d8d5be2654a0438be4287be4a71af18265ae24eae458c18611dcda53946c2e11707e2f76cc925978bf8374f2ee"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-codec-http2@4.1.87.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-codec-http2@4.1.87.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-codec-socks",
      "version" : "4.1.87.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6a7c79de6df678a372a85948f6039d21"
        },
        {
          "alg" : "SHA-1",
          "content" : "109027470b72d56914d76154e947f9bd5844bb9b"
        },
        {
          "alg" : "SHA-256",
          "content" : "41a76a64514f8f8f50ab8527254073521394138e8a96191905e8c143368b2006"
        },
        {
          "alg" : "SHA-512",
          "content" : "11a7e384d0d925c6e059b989ef638b045e42181a763b4afb70a3074d7a41764f0ea4b2922ff12e17846a63631c09a1615203f553d2e40ce5b58f9f984336e55e"
        },
        {
          "alg" : "SHA-384",
          "content" : "4f215995526ed2ea5f3274ac66da47a43e8944a94d4cdf50019197300b22e81de4b130d6644707c9eb46ac8a24cd94af"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-codec-socks@4.1.87.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-codec-socks@4.1.87.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-common",
      "version" : "4.1.87.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b0eb8e4da4cfcf226a8c33138ebc028c"
        },
        {
          "alg" : "SHA-1",
          "content" : "3e7e80dd6e604144781fcb859b79cfe8d3730079"
        },
        {
          "alg" : "SHA-256",
          "content" : "811443fc1411a9ef7c1f7b02a750e2a6688f1eec0ae7361ed07812a85d982c86"
        },
        {
          "alg" : "SHA-512",
          "content" : "cbc9020bf9694e93d02259f1fde66cf3e4776f647eb3dda10a3a47323753919698e1de6c2009dfc1d6df69768a1098bf603bc7a197d2991b6c06a81188374629"
        },
        {
          "alg" : "SHA-384",
          "content" : "0a82f90f6996734587e1a60380ba7e3e8915c3e56ffe777a78aad392f53c96bccb4d15bf0f9a168cd0e8370ef7cd7c91"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-common@4.1.87.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-common@4.1.87.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-handler",
      "version" : "4.1.87.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a61f705c80746091d306edcbdfdc676d"
        },
        {
          "alg" : "SHA-1",
          "content" : "2bd97491c22ebea4670c00f1bd5dbf65a8a1cfe7"
        },
        {
          "alg" : "SHA-256",
          "content" : "31a20e1de13b06a677a4719fd5aa95635982114a32c1d034739a48cceada2383"
        },
        {
          "alg" : "SHA-512",
          "content" : "d7abb4791f9e8114e972d7f6f14b2af10e4a2bf9178e87116374508625a0d95840f2e17cc8fb5170aabae3ce3922885da0871e0d942cf79e1a175954f36e3a6c"
        },
        {
          "alg" : "SHA-384",
          "content" : "70be4cee8f35135a00660cef8d095a00b15886d1cdea956a222aafd887e8d3de57949c2044783c2acd03c7ac48ed0b56"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-handler@4.1.87.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-handler@4.1.87.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-native-unix-common",
      "version" : "4.1.87.Final",
      "description" : "Static library which contains common unix utilities.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1f9dbd13aad7e21faeeab339fc24be8c"
        },
        {
          "alg" : "SHA-1",
          "content" : "4bf8308dc7d6ba2570681eaeddb16f8d1196b438"
        },
        {
          "alg" : "SHA-256",
          "content" : "cc2d013c933c206605da01be39f4c2c1f4586a1b9103a665bd724bdd46d9cd0c"
        },
        {
          "alg" : "SHA-512",
          "content" : "6090776597d514d91dfbe88128ea4911c751000e67dad67f17e960208c78d4b631b638262cd928ceab54733cb59e159cb12dc2e321f62ac34005084f83302828"
        },
        {
          "alg" : "SHA-384",
          "content" : "25c02aac5376f61c55864ae431bc44160a04cd06fad729871eafd9292c7a9844e312fd4242821c1b97eedd45d7ff88c1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.87.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.87.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-handler-proxy",
      "version" : "4.1.87.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "abe5be41b6e5934006789f08168b470b"
        },
        {
          "alg" : "SHA-1",
          "content" : "8079f16d6209e10f5d3a09522e7aa9ffb217e17e"
        },
        {
          "alg" : "SHA-256",
          "content" : "65276b2ab687b1b7c1ceabcc941d6e2cce1038f35b581218d7dbf46b16c5b4ac"
        },
        {
          "alg" : "SHA-512",
          "content" : "bb2e4efb7b6d28ea15b72b4bfd0cca3e7b091e7b4763e2c7007ab8aeffca41c10810eb12c73416455d48707451b037fac385628d5127b0cccb46b36b15c9405d"
        },
        {
          "alg" : "SHA-384",
          "content" : "c4097bd7832a65e924c93dda76565ce7afabb1449324793174a14362ea246471802cdc92eb9d8fd55242951f6c5126a9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-handler-proxy@4.1.87.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-handler-proxy@4.1.87.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-resolver",
      "version" : "4.1.87.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4bbe520d843078cd20863a091188f438"
        },
        {
          "alg" : "SHA-1",
          "content" : "eaa964e16a67914c8d9b814d29a4b969635d72a0"
        },
        {
          "alg" : "SHA-256",
          "content" : "ee11d22d240b4b125edaed23ec7cc35ad9241b1b8fdd50630de20411ec345fc7"
        },
        {
          "alg" : "SHA-512",
          "content" : "124ddce0250fd04d310b24812caa72332a5c399dc564d3332c9498abef2aa43dd28f5eb264f4a73af8be8a4b144b03a9572620b0b43731c3e9d73073b88ef8ff"
        },
        {
          "alg" : "SHA-384",
          "content" : "83cfe7a0d00f01fbf5d82a0bd9bfc3945140c4557f15d16a7eb86d996821ede22e150168432e100769db5eb1501f43f6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-resolver@4.1.87.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-resolver@4.1.87.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport",
      "version" : "4.1.87.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "27af50d84a4d81ab5e2264c52349ce8a"
        },
        {
          "alg" : "SHA-1",
          "content" : "30c78c8ced3417f35e2a55f7533dc2bb43fef2aa"
        },
        {
          "alg" : "SHA-256",
          "content" : "17ed465cf5b1579b72379e47be3ba7fccb09dda8d95d47c8d668118483b08f43"
        },
        {
          "alg" : "SHA-512",
          "content" : "810ef943aafc5136fba3dbacdf016511842ee4923406a3fb8d5ba5c02efb2ca80fa8c2d59fdae837bf0a1c842caaca751172ce8ea641503f5102d87bf6b81f82"
        },
        {
          "alg" : "SHA-384",
          "content" : "f60b61e1a9dfdcdcb16ee210a4033ab79ef6441923a53df20d8fae89a1941d13c6ac75db1405aac269cbf04f9489efac"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport@4.1.87.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport@4.1.87.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-classes-epoll",
      "version" : "4.1.87.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4da59e18c5417f540635d1427bed262d"
        },
        {
          "alg" : "SHA-1",
          "content" : "86e61c5743940d80e10609746784ffa0e4642065"
        },
        {
          "alg" : "SHA-256",
          "content" : "0b50ae7e1cb32f89c3a8b38a29605cfe6bd797693b3374fbf2577fbc03719297"
        },
        {
          "alg" : "SHA-512",
          "content" : "977491d40561367d99276dc6a171b91284fc3bbb23e3c9db453cf2b777697b7a22fe9be8e4a1cdf7bb176833d2ae802143c7cff94a34d47b7f84b71cabcdaa2f"
        },
        {
          "alg" : "SHA-384",
          "content" : "5428f910e02656ad66472b6ac0799e866b3f7645fe3f3d5c0c36a4f2ea6f01c0773a00bc4644a6a7c2c42e090c9fff6c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.87.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.87.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-classes-kqueue",
      "version" : "4.1.87.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ed87a0c49219a09b292023a7138a4542"
        },
        {
          "alg" : "SHA-1",
          "content" : "5476926df0ad650d3287d61b0bd17f145ff13791"
        },
        {
          "alg" : "SHA-256",
          "content" : "94abb9234691ce082bbc0d1d533e186cfd1a312d7515a47647896945e7fdbf87"
        },
        {
          "alg" : "SHA-512",
          "content" : "c465db6db9060ba932f42dc946a381d66fb465193353c78b3a6e21107296eb157f1d1822e9d1a7ad771f7bfe378e71b0783bce1716f921934c968b9507a94631"
        },
        {
          "alg" : "SHA-384",
          "content" : "e3855ea0b36bdb2c1d1b7236396c4cd9b5f703694d8863586291df6016edff15615715b12dadbbb22ff3ae88d81772fe"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.87.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.87.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-native-epoll",
      "version" : "4.1.87.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "237a050c5d50d2e5dc080263c33a6f88"
        },
        {
          "alg" : "SHA-1",
          "content" : "3374b1ee72cfff2858821de824ca02d08aedee7c"
        },
        {
          "alg" : "SHA-256",
          "content" : "bb3752881a027efa99388bef21f3287a6553299930f4226a6ea683da21c957f2"
        },
        {
          "alg" : "SHA-512",
          "content" : "472e868a87d03f3adfeb41cff22d95cc435333404a4a7542408d9aac8f80d47f1d35661b7bbc19ab0ac8355cff0abdd1ef632c0b3e5de68d250cbb9d8153a327"
        },
        {
          "alg" : "SHA-384",
          "content" : "4aae1e5c9b9bb9e8aea46f58547aa2a83b387228c2f04344a947522741258dc326e0019669cae0d2026b6660b279e06c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-native-epoll@4.1.87.Final?classifier=linux-x86_64&type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-native-epoll@4.1.87.Final?classifier=linux-x86_64&type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-native-epoll",
      "version" : "4.1.87.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4490db41db789277e444bd2cf212f702"
        },
        {
          "alg" : "SHA-1",
          "content" : "45b6df29d8d912c86d0b2e895b07ebc50715fde3"
        },
        {
          "alg" : "SHA-256",
          "content" : "e83c645de0623d28d6fc72a5a2b6322b2758f01aee83fa5af73f353bebdf028e"
        },
        {
          "alg" : "SHA-512",
          "content" : "0e8a526c52c4486498bc6093576fc834764e3f92aa089fc70ae349227466257e9ddb844b0d2f29f53e60cda2db18a29f7289650e22c40a35009ee8ae675c1591"
        },
        {
          "alg" : "SHA-384",
          "content" : "c835535b28bbd6f99ab2e117831bd1ab78051fd589419f66028f287e9f2ec062b40b6e410594eec7d2e16c58c656129a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-native-epoll@4.1.87.Final?classifier=linux-aarch_64&type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-native-epoll@4.1.87.Final?classifier=linux-aarch_64&type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-native-kqueue",
      "version" : "4.1.87.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cf51e6b9797c3c4b7ebf0d78987297e2"
        },
        {
          "alg" : "SHA-1",
          "content" : "fd571f6f7b8e70d0d9051bf1ff6b38a7d44c891a"
        },
        {
          "alg" : "SHA-256",
          "content" : "27e5bd891a4b8b70db2bf1a4c419fc666714a385d98194fbe3c856cac99610bd"
        },
        {
          "alg" : "SHA-512",
          "content" : "aee8f93790bcf90ec33313a37ae8bd01d45cb0a5e9669a830080f1c0e49c050041255b7fa2a24a7e995da7f1992708ee997c13d98b8077c0b5ba57fd3d237d6e"
        },
        {
          "alg" : "SHA-384",
          "content" : "05c73c791aacbb1eca8e96fd7205d0779debe684973db314a707d6d40b9d44ce17f32eb6c6bcdb271a24220d7913dc10"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.87.Final?classifier=osx-aarch_64&type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.87.Final?classifier=osx-aarch_64&type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-native-kqueue",
      "version" : "4.1.87.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6e353bb9d2433c11c6c8ccb928c5f4b3"
        },
        {
          "alg" : "SHA-1",
          "content" : "28db44b32b4c68f14858e9d691646a7262b57863"
        },
        {
          "alg" : "SHA-256",
          "content" : "dba5794dabbbfa7d97f659b135a14f37544b20cf4438165f4b0ff65bbe525f51"
        },
        {
          "alg" : "SHA-512",
          "content" : "f8f71b31e11f9d20253a37ec3575dc84d1c651805d994dea8b3c5695d7c4ec5a80e5208833529bf227ebc5ab10dd0604bb4bba91f50a6a79be4638f375f89e70"
        },
        {
          "alg" : "SHA-384",
          "content" : "59cec1b02de518e55a5c662be96a1403ffca63f4c3f842cd698888a5eb9dfdbfbebdb3a94922e154712c781f160978d8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.87.Final?classifier=osx-x86_64&type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.87.Final?classifier=osx-x86_64&type=jar"
    },
    {
      "publisher" : "AddThis",
      "group" : "com.clearspring.analytics",
      "name" : "stream",
      "version" : "2.9.6",
      "description" : "A library for summarizing data in streams for which it is infeasible to store all events",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "298278ea2ea29ce1da1a956dd6fad4d4"
        },
        {
          "alg" : "SHA-1",
          "content" : "f9c235bdf6681756b8d4b5429f6e7217597c37ef"
        },
        {
          "alg" : "SHA-256",
          "content" : "d61aebbea8a08148c3aca6b03464495a4bbf9d362205d54ea5f6b443af73afdf"
        },
        {
          "alg" : "SHA-512",
          "content" : "cc9bb80ee82576c035827a3b41f4cee0852b37c80374619c4ddba349be1d4387ad657130caabafab28d50c4869e44c1d3eb852c6370c583ca42a03ee88799406"
        },
        {
          "alg" : "SHA-384",
          "content" : "b40935d7d5d780b7fd5306759c7aeaf2f1477beefa3626e7a0324305f5ab2efcb7656788767baf4f631f00f198c17873"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.clearspring.analytics/stream@2.9.6?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/addthis/stream-lib"
        },
        {
          "type" : "website",
          "url" : "http://www.addthis.com"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.clearspring.analytics/stream@2.9.6?type=jar"
    },
    {
      "group" : "io.dropwizard.metrics",
      "name" : "metrics-core",
      "version" : "4.2.15",
      "description" : "Metrics is a Java library which gives you unparalleled insight into what your code does in production. Metrics provides a powerful toolkit of ways to measure the behavior of critical components in your production environment.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6a000703a6700e51eb4369442a385864"
        },
        {
          "alg" : "SHA-1",
          "content" : "a3ee63ed254f9a6977e2751ffcc0f158c2c1f5e3"
        },
        {
          "alg" : "SHA-256",
          "content" : "d6da099ba1b38378eaf01490623fa570d6be1b6ddd52f1368120de67416d21fc"
        },
        {
          "alg" : "SHA-512",
          "content" : "79c29c4cd9bc7b0a8a1991cd33873652627f4dd922ee7c5007baaa4ddceb5163356a51c39fcf78b314ff34af11073d7cdfe7f83ad8651f2d400fcac33df011ee"
        },
        {
          "alg" : "SHA-384",
          "content" : "76f15cd6994d47f6a6b1e14d46198e096a5446846d3286e4ac7c59b4d74cdd8ddde52a3108f16ceee8649df2da151889"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.dropwizard.metrics/metrics-core@4.2.15?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/dropwizard/metrics/issues/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/dropwizard/metrics/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.dropwizard.metrics/metrics-core@4.2.15?type=jar"
    },
    {
      "group" : "io.dropwizard.metrics",
      "name" : "metrics-jvm",
      "version" : "4.2.15",
      "description" : "A set of classes which allow you to monitor critical aspects of your Java Virtual Machine using Metrics.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "dd958c01bb29cf2b570499263d6b40e7"
        },
        {
          "alg" : "SHA-1",
          "content" : "f3f51669eaae87cc8d95ec806f818b7a6f8dc390"
        },
        {
          "alg" : "SHA-256",
          "content" : "6762a50ae063cd3954922673b83e03403449e87e095ae0251e23284c35dc95e8"
        },
        {
          "alg" : "SHA-512",
          "content" : "fb191b294b54bff4b854ce0c3e0c562f582cfe74e57b6e8b9c809f16f284f2b013dbb4d64d83c25e5d0692128e84b9c026b5e23d89417e1f042fbf93d578734d"
        },
        {
          "alg" : "SHA-384",
          "content" : "b164f70d01da7c6bce8d02017705b7e50122bb9dad82328afa71558e65e98a3c744c8bca85944717c1e96359c03bc8de"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.dropwizard.metrics/metrics-jvm@4.2.15?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/dropwizard/metrics/issues/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/dropwizard/metrics/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.dropwizard.metrics/metrics-jvm@4.2.15?type=jar"
    },
    {
      "group" : "io.dropwizard.metrics",
      "name" : "metrics-json",
      "version" : "4.2.15",
      "description" : "A set of Jackson modules which provide serializers for most Metrics classes.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "69768dd6379e62e39f547e30f8c9b66b"
        },
        {
          "alg" : "SHA-1",
          "content" : "0e27a423a660c13b8a71370c78c80326d3a1acc9"
        },
        {
          "alg" : "SHA-256",
          "content" : "a5c413825d743ae3f421950f640c26890dfcaf156796a3acf637368082653133"
        },
        {
          "alg" : "SHA-512",
          "content" : "2086b88a1121dd473418b17c4ef90187916b5dd255c90133b32f0ed08e1b0112a03054de743b604f7c2783b704171eba35a291de4ad3a7948db62b41a00e3fe0"
        },
        {
          "alg" : "SHA-384",
          "content" : "09cf51576cb51c920b9388d927d3fb599833cd389510b68419155d16f157cbfa534c90353814ae6f4c522db1079183ed"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.dropwizard.metrics/metrics-json@4.2.15?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/dropwizard/metrics/issues/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/dropwizard/metrics/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.dropwizard.metrics/metrics-json@4.2.15?type=jar"
    },
    {
      "group" : "io.dropwizard.metrics",
      "name" : "metrics-graphite",
      "version" : "4.2.15",
      "description" : "A reporter for Metrics which announces measurements to a Graphite server.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "48719bcb814f1e5aaa0b9a9fff5fde91"
        },
        {
          "alg" : "SHA-1",
          "content" : "05b4ed80b3cf371bd83fec91372942306c040777"
        },
        {
          "alg" : "SHA-256",
          "content" : "e96e57afdf999907ce8f9a513c426d529b42285f3c4d098e6e165b8a75f80ed2"
        },
        {
          "alg" : "SHA-512",
          "content" : "2681aab88e1ed22b76155f4dd3d703c71c6d2a9b683ebf6164394d35084225e2f44148b634dbf008b398ccf9c15aaff5eee816e4dc24d714da08ee27279d024d"
        },
        {
          "alg" : "SHA-384",
          "content" : "6a6a4822114d4090342f679f6a283fadd7b739e29e78c03aab43d15f69b31b7ecdd7967d74f0ae0d1c1b575666b42f5f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.dropwizard.metrics/metrics-graphite@4.2.15?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/dropwizard/metrics/issues/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/dropwizard/metrics/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.dropwizard.metrics/metrics-graphite@4.2.15?type=jar"
    },
    {
      "group" : "io.dropwizard.metrics",
      "name" : "metrics-jmx",
      "version" : "4.2.15",
      "description" : "A set of classes which allow you to report metrics via JMX.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1f6f7930b5941ab20fff92e7d834648c"
        },
        {
          "alg" : "SHA-1",
          "content" : "ddbdf83a5510dbdf67a14bfdb8a92fd742078841"
        },
        {
          "alg" : "SHA-256",
          "content" : "6d86428d884560bcf4a9c14bf1c0066fe10ec0ff1abe63caa4b7a16b92ff77fc"
        },
        {
          "alg" : "SHA-512",
          "content" : "13a1fc8f0ed37fef9043fe9e5e9a40d68e2e75455abf496c3cbebf631a8f6eb46b40d84fc403b2048785a0f960a0b42d2baecdec452c190d929225adee4921e7"
        },
        {
          "alg" : "SHA-384",
          "content" : "fafc78fc29c7b4c43a99eed001a2ff22ceadcb22903280ed823ca5176bca31186c09ef95fecb5f26b4dd588079a7e702"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.dropwizard.metrics/metrics-jmx@4.2.15?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/dropwizard/metrics/issues/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/dropwizard/metrics/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.dropwizard.metrics/metrics-jmx@4.2.15?type=jar"
    },
    {
      "publisher" : "com.fasterxml.jackson.module",
      "group" : "com.fasterxml.jackson.module",
      "name" : "jackson-module-scala_2.13",
      "version" : "2.14.2",
      "description" : "jackson-module-scala",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0f8f4a14f9c0bdb23a27d35ea6fd2aa7"
        },
        {
          "alg" : "SHA-1",
          "content" : "478ce3b018edfb16e7ce6debdfd42b9bd79b829d"
        },
        {
          "alg" : "SHA-256",
          "content" : "6a122ce6abe9e169a1ac84ccf348bddf12167f124d13bb05ff811745653b4a80"
        },
        {
          "alg" : "SHA-512",
          "content" : "2f5794dae1a4c48c9c35e399c463126f77ee5eabbd9b559c8c2d46ab13736878d1dff5a6b0d3ee41ed19b6099fbff101f711ed4c60d06184087c90d4fb6ac812"
        },
        {
          "alg" : "SHA-384",
          "content" : "830582c82d615e3264ef56b60886f726bbe8d286de17ce1755237a65ed2ce31c96792fe578bbce1f395f1d018482f21a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.module/jackson-module-scala_2.13@2.14.2?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-module-scala"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.module/jackson-module-scala_2.13@2.14.2?type=jar"
    },
    {
      "group" : "com.thoughtworks.paranamer",
      "name" : "paranamer",
      "version" : "2.8",
      "description" : "Paranamer allows runtime access to constructor and method parameter names for Java classes",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f213c72b67d4850f17a4a3e9064904de"
        },
        {
          "alg" : "SHA-1",
          "content" : "619eba74c19ccf1da8ebec97a2d7f8ba05773dd6"
        },
        {
          "alg" : "SHA-256",
          "content" : "688cb118a6021d819138e855208c956031688be4b47a24bb615becc63acedf07"
        },
        {
          "alg" : "SHA-512",
          "content" : "d774b05135d34bc42d8a7bee6466715bc44837b95bbe618faa8680978c4348652292ea6dd8eeb88dc7fa859bfe685f4d8329032cbf4fce2ea7e555ba3243cc14"
        },
        {
          "alg" : "SHA-384",
          "content" : "699148a3f69ae205aa47c82e2cb78d3949afc71b090935579a0363fee8675eec3ba05e0d3127295213b39aad3485690b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-4-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.thoughtworks.paranamer/paranamer@2.8?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/paul-hammant/paranamer"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.thoughtworks.paranamer/paranamer@2.8?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.ivy",
      "name" : "ivy",
      "version" : "2.5.1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e2b8480e296278e41b68020a444c6ae1"
        },
        {
          "alg" : "SHA-1",
          "content" : "7fac35f24f89776e7b78ec98658d8bc8f22f7e89"
        },
        {
          "alg" : "SHA-256",
          "content" : "793120f8c9058aede475b093651aa5307603c1518180772c104562a0ed2e9feb"
        },
        {
          "alg" : "SHA-512",
          "content" : "9d63b3d5ef750e08f802a1d2f5a8d855ca30bad39fd58bc48db3d7bcfb7ecfd91a61965135755da81c8267d050d1a9addf4dd46eb28a3bfda467d691274e016a"
        },
        {
          "alg" : "SHA-384",
          "content" : "049d433f5ba75371f0376bf9f465e1bfb111458df469d8f0313113b175a1f13d3650f064cbe8ee3c3bef4ac84831caa0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.ivy/ivy@2.5.1?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/IVY"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/ant-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://svn.apache.org/repos/asf/ant/ivy/core/trunk"
        },
        {
          "type" : "website",
          "url" : "http://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.ivy/ivy@2.5.1?type=jar"
    },
    {
      "group" : "oro",
      "name" : "oro",
      "version" : "2.0.8",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "42e940d5d2d822f4dc04c65053e630ab"
        },
        {
          "alg" : "SHA-1",
          "content" : "5592374f834645c4ae250f4c9fbb314c9369d698"
        },
        {
          "alg" : "SHA-256",
          "content" : "e00ccdad5df7eb43fdee44232ef64602bf63807c2d133a7be83ba09fd49af26e"
        },
        {
          "alg" : "SHA-512",
          "content" : "9a98e493c4d771322b1331ec05ab0e363a83d8ac2af8018d96a44df2bf5bfc97d33ebe6f6f93e46ab10bf1536f0c29e9d9569318ed49bc18b4e96b1a8b476d37"
        },
        {
          "alg" : "SHA-384",
          "content" : "f542e92b7a86bcb20cc21f0c4b29778428944391344ca11df432f9ce36a96ce8e8f65da67e450e52c0e8ba441d2a7332"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/oro/oro@2.0.8?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/oro/oro@2.0.8?type=jar"
    },
    {
      "group" : "net.razorvine",
      "name" : "pickle",
      "version" : "1.3",
      "description" : "A feature complete pickle protocol implementation (Python's builtin serialization mechanism)",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b043c671d86e43a0a11cc02e815616e9"
        },
        {
          "alg" : "SHA-1",
          "content" : "43eab5f4a8d0a06a38a6c349dec32bd08454c176"
        },
        {
          "alg" : "SHA-256",
          "content" : "259aca378cbcee48797d047169e573666640312a188e2428a03cb19b0fbc7664"
        },
        {
          "alg" : "SHA-512",
          "content" : "8199f376fcd39e0437a6a4fd7a853bd2edf1805bdd43b185dab8f5b97eda3a657a757bf61bad8474379c60b1074f38c4ed03ed2541e77408d08531036f725485"
        },
        {
          "alg" : "SHA-384",
          "content" : "a6ac01883fb7c170210d9b9b241a9544e168ede941618517ca468a499747ed044b3e792904c5b45ef77e48a69b19b017"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/net.razorvine/pickle@1.3?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/irmen/pickle/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/irmen/pickle"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.razorvine/pickle@1.3?type=jar"
    },
    {
      "group" : "net.sf.py4j",
      "name" : "py4j",
      "version" : "0.10.9.7",
      "description" : "Py4J enables Python programs running in a Python interpreter to dynamically access Java objects in a Java Virtual Machine. Methods are called as if the Java objects resided in the Python interpreter and Java collections can be accessed through standard Python collection methods. Py4J also enables Java programs to call back Python objects.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7afcbc30fa3c00d5febfbc522235f2a5"
        },
        {
          "alg" : "SHA-1",
          "content" : "e444374109f6f3ffdfdbd4e7dc5a89122b0c9134"
        },
        {
          "alg" : "SHA-256",
          "content" : "4d67d584e7b0f456deedffbd3f43047efd6748ff3d13b443abb61ec54cf7af13"
        },
        {
          "alg" : "SHA-512",
          "content" : "8e3bb548cea719e4ab0d3d559f1cdb8401c74606036c93f93b6519942994432786a800ce57b6d04fd090dfdea0359cf78e4d899021c5559f4f2f558fb09dc1be"
        },
        {
          "alg" : "SHA-384",
          "content" : "b7d117caa8c2269807f1ad4335fab2f9f6d99b93ee68ec548f3ff3d520f8d11ce8ecb2c2798f8fd86fb19606be60187f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/net.sf.py4j/py4j@0.10.9.7?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.sonatype.org/spice/tags/oss-parent-7"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sf.py4j/py4j@0.10.9.7?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-crypto",
      "version" : "1.1.0",
      "description" : "Apache Commons Crypto is a cryptographic library optimized with AES-NI (Advanced Encryption Standard New Instructions). It provides Java API for both cipher level and Java stream level. Developers can use it to implement high performance AES encryption/decryption with the minimum code and effort. Please note that Crypto doesn't implement the cryptographic algorithm such as AES directly. It wraps to Openssl or JCE which implement the algorithms. Features -------- 1. Cipher API for low level cryptographic operations. 2. Java stream API (CryptoInputStream/CryptoOutputStream) for high level stream encryption/decryption. 3. Both optimized with high performance AES encryption/decryption. (1400 MB/s - 1700 MB/s throughput in modern Xeon processors). 4. JNI-based implementation to achieve comparable performance to the native C/C++ version based on OpenSsl. 5. Portable across various operating systems (currently only Linux/MacOSX/Windows); Apache Commons Crypto loads the library according to your machine environment (it checks system properties, `os.name` and `os.arch`). 6. Simple usage. Add the commons-crypto-(version).jar file to your classpath. Export restrictions ------------------- This distribution includes cryptographic software. The country in which you currently reside may have restrictions on the import, possession, use, and/or re-export to another country, of encryption software. BEFORE using any encryption software, please check your country's laws, regulations and policies concerning the import, possession, or use, and re-export of encryption software, to see if this is permitted. See <http://www.wassenaar.org/> for more information. The U.S. Government Department of Commerce, Bureau of Industry and Security (BIS), has classified this software as Export Commodity Control Number (ECCN) 5D002.C.1, which includes information security software using or performing cryptographic functions with asymmetric algorithms. The form and manner of this Apache Software Foundation distribution makes it eligible for export under the License Exception ENC Technology Software Unrestricted (TSU) exception (see the BIS Export Administration Regulations, Section 740.13) for both object code and source code. The following provides more details on the included cryptographic software: * Commons Crypto use [Java Cryptography Extension](http://docs.oracle.com/javase/8/docs/technotes/guides/security/crypto/CryptoSpec.html) provided by Java * Commons Crypto link to and use [OpenSSL](https://www.openssl.org/) ciphers",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c71451f3c4737ba6d84f9bd9e8f2400d"
        },
        {
          "alg" : "SHA-1",
          "content" : "4a8b4caa84032a0f1f1dad16875820a4f37524b7"
        },
        {
          "alg" : "SHA-256",
          "content" : "44dc28551cdba731658090d9b10d2eead9839c269d70cdcd7d56c0423df5227f"
        },
        {
          "alg" : "SHA-512",
          "content" : "62acf1d90ad667c8f3f9b267c6f4fefa57eb914ef57a24e10a7dc6ea7bf1f2a6933db831f836dc2ca0fe86aff84a6d1a0fb3c8bb34c7c24e3e1190778efb241d"
        },
        {
          "alg" : "SHA-384",
          "content" : "0d7c20964ab9cbde60d3d03ca92b481e30f969b30adc336b77ec8b8dcb660e327bfff8c98cb9c30163e7bdf5ffbae486"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-crypto@1.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/search/?q=Commons-CRYPTO"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CRYPTO"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-crypto.git"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-crypto@1.1.0?type=jar"
    },
    {
      "publisher" : "org.scala-lang.modules",
      "group" : "org.scala-lang.modules",
      "name" : "scala-parser-combinators_2.13",
      "version" : "2.1.1",
      "description" : "scala-parser-combinators",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3664ec9a6a2a18faeffb761470840e74"
        },
        {
          "alg" : "SHA-1",
          "content" : "898b9537ecb255e7d8d7a2576d65232379117e13"
        },
        {
          "alg" : "SHA-256",
          "content" : "8d4f17587cc87b2e176f50d56d5e3b348bac55b8ca2fb6ce92b3a04b22bd82cd"
        },
        {
          "alg" : "SHA-512",
          "content" : "c75fb7dcc3a620e1ee0830c15145e3bdb3f41042a86e9174390689029345fce0af4f3d447b8c178d03cddc1c915d7c9c968b39a9028d8953b016ee8b029bc34a"
        },
        {
          "alg" : "SHA-384",
          "content" : "442b811fd5a675f7f8d1a405d55814fe7c7c5e0352a90064f9c02c6d68c859b54d3d7eb22bb635fa3d2b209e05c196a8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.scala-lang.modules/scala-parser-combinators_2.13@2.1.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.scala-lang.org/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/scala/scala-parser-combinators/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/scala/scala-parser-combinators"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.scala-lang.modules/scala-parser-combinators_2.13@2.1.1?type=jar"
    },
    {
      "group" : "org.codehaus.janino",
      "name" : "janino",
      "version" : "3.1.9",
      "description" : "The \"JANINO\" implementation of the \"commons-compiler\" API: Super-small, super-fast, independent from the JDK's \"tools.jar\".",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "597cbcd4d0b8273552758c50bf423926"
        },
        {
          "alg" : "SHA-1",
          "content" : "536fb0c44627faae32ca7a8a24734f4aab38c878"
        },
        {
          "alg" : "SHA-256",
          "content" : "7df88d90aa165ab48bdebea425fa009eeef04918c82e98cdbea5e747e114508d"
        },
        {
          "alg" : "SHA-512",
          "content" : "840dba1621f06322d6ede76c941665e4e119f26ca1b7cb1a510a2bd9d692d3a5d75ac79477055824c2af37958e1c330daf6e1fbb9fd5bbba82db3a3f6077ff11"
        },
        {
          "alg" : "SHA-384",
          "content" : "85599d163bfe4c2d66e526d549c5bd26bc4137c4bb80099130782e42cfb9d5a55d34b11d98877cf11436536d3f1f9aa3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.janino/janino@3.1.9?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/janino-compiler/janino"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.janino/janino@3.1.9?type=jar"
    },
    {
      "group" : "org.codehaus.janino",
      "name" : "commons-compiler",
      "version" : "3.1.9",
      "description" : "The \"commons-compiler\" API, including the \"IExpressionEvaluator\", \"IScriptEvaluator\", \"IClassBodyEvaluator\" and \"ISimpleCompiler\" interfaces.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e14b760178e0c2105e2951c2f452a1d1"
        },
        {
          "alg" : "SHA-1",
          "content" : "f0d70bb319e9339aea90a8665693e69848acc598"
        },
        {
          "alg" : "SHA-256",
          "content" : "d988a3ebc17188e9a1a3efadd8e958b90eb995c4fcc077292a5dfe5fe1109d25"
        },
        {
          "alg" : "SHA-512",
          "content" : "0d290612b69ddece1c58ae0a60c6a544893800f588a424afb7bc12215a9e3bfe775ff6bac749f16c7b4e32e186ad29bceb80112df4082f16ce1f749685135e80"
        },
        {
          "alg" : "SHA-384",
          "content" : "ab1394175f2509bcdc5aa1c76294ba146ba09bae259401932f08bb9b5debd11049d2c751e503e4255d4efd4a4f199107"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.janino/commons-compiler@3.1.9?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/janino-compiler/janino"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.janino/commons-compiler@3.1.9?type=jar"
    },
    {
      "publisher" : "ANTLR",
      "group" : "org.antlr",
      "name" : "antlr4-runtime",
      "version" : "4.9.3",
      "description" : "The ANTLR 4 Runtime",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "718f199bafa6574ffa1111fa3e10276a"
        },
        {
          "alg" : "SHA-1",
          "content" : "81befc16ebedb8b8aea3e4c0835dd5ca7e8523a8"
        },
        {
          "alg" : "SHA-256",
          "content" : "131a6594969bc4f321d652ea2a33bc0e378ca312685ef87791b2c60b29d01ea5"
        },
        {
          "alg" : "SHA-512",
          "content" : "2c3763a8fbc7af110df5d6bb57692759b23e8bf961a53694c69bde4cd9d8c3a8eaa55cf376ce34c6c4e2035a99d7abf08c6ffa3b75d18a6d93a9c1ca95927ea8"
        },
        {
          "alg" : "SHA-384",
          "content" : "62a62dab4a27733a810b97fe5544eb1b5b25d2df83ea8d93802cb0e6fd1b4b3ca5a130c51aa9198deefc30cd0f062841"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-4-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.antlr.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/antlr/antlr4/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/?fromgroups#!forum/antlr-discussion"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/antlr/antlr4/tree/master"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.arrow",
      "name" : "arrow-vector",
      "version" : "11.0.0",
      "description" : "An off-heap reference implementation for Arrow columnar data format.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "507791ac52f0e09f8f5b618403b0a113"
        },
        {
          "alg" : "SHA-1",
          "content" : "86cfffdf0e7185058cb1302aa0db4565300caa46"
        },
        {
          "alg" : "SHA-256",
          "content" : "87f624dd0e46cc92d584783f0d6b0e346b93be850791bcd9ab129aa31f633800"
        },
        {
          "alg" : "SHA-512",
          "content" : "56683dbcf6c779f7fe5450705d3332c719f4b83b75bd18d172997de067a7e2803753e1699e5162fcc78f717f2b1d3bf87e8ac4800706c52cbd2446d6b5d70950"
        },
        {
          "alg" : "SHA-384",
          "content" : "56d0e743908e79716b4d5fd304612f78b19b11d17fa6cc1baa3c0416467060839fe0824c5453e45c96488060fc166f72"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.arrow/arrow-vector@11.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/arrow"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/arrow-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/arrow"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.arrow/arrow-vector@11.0.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.arrow",
      "name" : "arrow-format",
      "version" : "11.0.0",
      "description" : "Generated Java files from the IPC Flatbuffer definitions.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "146fc190a2211dd88672f3166d4977a1"
        },
        {
          "alg" : "SHA-1",
          "content" : "370e76ffad508246e98a09a09fcabe96f42014ab"
        },
        {
          "alg" : "SHA-256",
          "content" : "225430bb2622fb63fb821ced6e223c0425aa1c0d38eb6079006f82c54b89de72"
        },
        {
          "alg" : "SHA-512",
          "content" : "b40f67d404692eb71a4f8a5e5ed260ade9649659b7169ed4d515a249c3f876b24dfbab693b7177d791b88ff660a08723e64c7493ceef44c06dc037ee25249096"
        },
        {
          "alg" : "SHA-384",
          "content" : "e2add6c654a8f13cca40997dd152cb208e03905d853dc99785e421205f52f164c0db58271eec9c184da15a4bcf8d5d11"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.arrow/arrow-format@11.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/arrow"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/arrow-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/arrow"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.arrow/arrow-format@11.0.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.arrow",
      "name" : "arrow-memory-core",
      "version" : "11.0.0",
      "description" : "Core off-heap memory management libraries for Arrow ValueVectors.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "67f0c0b5ea51a6a60e82fe8967bb14bf"
        },
        {
          "alg" : "SHA-1",
          "content" : "e8a11b92d5d79af8bfa8a81a00c97b1c46ce915d"
        },
        {
          "alg" : "SHA-256",
          "content" : "75d902571f5cb130a26836ac04c073cea2070da08e6df58e7e05171912fa4764"
        },
        {
          "alg" : "SHA-512",
          "content" : "0cc8d7d7e6f805efe86312a04147251d208d0fb109359ac7693395d6c3c95604fabba3b1d5f014b3da96a146743bf148a47530b84d7ace7be1982963c82ce674"
        },
        {
          "alg" : "SHA-384",
          "content" : "cc082f1c57bc4cef29cf99f86c777386d2e04a4804ce40a237d9659f6070be154d94147eb64dde0191fd397b64e30982"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.arrow/arrow-memory-core@11.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/arrow"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/arrow-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/arrow"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.arrow/arrow-memory-core@11.0.0?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.datatype",
      "name" : "jackson-datatype-jsr310",
      "version" : "2.14.2",
      "description" : "Add-on module to support JSR-310 (Java 8 Date & Time API) data types.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1d3433114ab756cc902462b04bc37501"
        },
        {
          "alg" : "SHA-1",
          "content" : "796518148a385b2728d44886cc0f8852eb8eeb53"
        },
        {
          "alg" : "SHA-256",
          "content" : "75651b65733ed94e4e28e4ba0817218d93e71e8a7f06f6ab3662752974d2bcae"
        },
        {
          "alg" : "SHA-512",
          "content" : "5ea76e302154fdde769622a6891c45cb56ea06277c25cd36b1cc52cbffbeb59e7b4a25d824d2e33d1473c7ba1044ce2141573564457f649ab2a59e6b1086d17e"
        },
        {
          "alg" : "SHA-384",
          "content" : "a3d778f5d3f6338df0d702c2274bb1c7ff5d2dedc4f1006bef21494e12d9524f6f6305ff24b8df4593d271ad0d0f693f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.14.2?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-modules-java8/issues"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/jackson-modules-java8"
        },
        {
          "type" : "website",
          "url" : "http://fasterxml.com/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.14.2?type=jar"
    },
    {
      "group" : "com.google.flatbuffers",
      "name" : "flatbuffers-java",
      "version" : "1.12.0",
      "description" : "Memory Efficient Serialization Library",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "26ecc1a330e441f909226a338d4bef65"
        },
        {
          "alg" : "SHA-1",
          "content" : "8201cc7b511177a37071249e891f2f2fea4b32e9"
        },
        {
          "alg" : "SHA-256",
          "content" : "3f8c088b4dd04a9858721f2e162508c94db0dd86f961e306ee63ef2eda871bf7"
        },
        {
          "alg" : "SHA-512",
          "content" : "20750e91441c074ca28f72b0b6494e8f0bfbc94caff04eb49727efc6b28e453c84732f24acc52cf36b36ba66b57a145d003e87f749c5c4518ddc6f9247b8ab47"
        },
        {
          "alg" : "SHA-384",
          "content" : "7af7d2e03ae71bea1ebac6cc9c2926b9f952c48a124db160ee2327f2f7e6b2e3ba153e5924971788392fc278b0e04ee9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.flatbuffers/flatbuffers-java@1.12.0?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/google/flatbuffers"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.flatbuffers/flatbuffers-java@1.12.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.arrow",
      "name" : "arrow-memory-netty",
      "version" : "11.0.0",
      "description" : "Netty allocator and utils for allocating memory in Arrow",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "028233843faf972ba11321059f8c36f6"
        },
        {
          "alg" : "SHA-1",
          "content" : "4e427a070f21efaffe6009faf6d97b260dbec36b"
        },
        {
          "alg" : "SHA-256",
          "content" : "cf746a464131b27fbc9e9508e6e5179731fd89273e65da06f6ee74a62a4353da"
        },
        {
          "alg" : "SHA-512",
          "content" : "ad8ae314d3ffbf0d90e0885da45d9e57489e9f829a51203525eadcbdc73a12ea839e55b428dc3a35c8bb689a94798136ee2723d3096103b510763eaf50044e81"
        },
        {
          "alg" : "SHA-384",
          "content" : "fe0ee2b07d2628d25259938eb263b70388ac0d5c36612ffadc73fcea7bb81683c6d1bcdffbb5b7e1fa910732567446c6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.arrow/arrow-memory-netty@11.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/arrow"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/arrow-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/arrow"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.arrow/arrow-memory-netty@11.0.0?type=jar"
    },
    {
      "group" : "org.apache.spark",
      "name" : "spark-tags_2.13",
      "version" : "3.4.2",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "73505fdb702de30afb19b8a218b74926"
        },
        {
          "alg" : "SHA-1",
          "content" : "259ca63eb605e7963730a5897f4e10c9e8b64f18"
        },
        {
          "alg" : "SHA-256",
          "content" : "96d60e85f42b9c90b7d9dfae49c366dc907654f390e72bbad30cab545b2d11e4"
        },
        {
          "alg" : "SHA-512",
          "content" : "d74b8bfbae0a3cb9e3d54cc9ec36201093d476528db229adc0e15498129f5a7d2693f231defc675fed5f64ac7b98ac8e847c5756e888a16e1c3d5ce5983639eb"
        },
        {
          "alg" : "SHA-384",
          "content" : "172819a766a86bb6a07614872f2468124de2aa9011aa2c89833190d5fe71f1f0d3e4faaf7e979d38d7311f19136cbb33"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.apache.spark/spark-tags_2.13@3.4.2?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.spark/spark-tags_2.13@3.4.2?type=jar"
    },
    {
      "publisher" : "org.scala-lang.modules",
      "group" : "org.scala-lang.modules",
      "name" : "scala-parallel-collections_2.13",
      "version" : "1.0.4",
      "description" : "scala-parallel-collections",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a96c038421bbde012bd56338acb1d760"
        },
        {
          "alg" : "SHA-1",
          "content" : "9846d1ed01f24e90d7f9495987033b8274835431"
        },
        {
          "alg" : "SHA-256",
          "content" : "68f266c4fa37cb20a76e905ad940e241190ce288b7e4a9877f1dd1261cd1a9a7"
        },
        {
          "alg" : "SHA-512",
          "content" : "762792facc412fd94ba84f694261e1dfb0e6de3a2ff3acecf9f2c8ee8e0f9cec75a1b936d73e217fc4b7a83fd9393a302c217246ad4cc6b6636edf2262d44d58"
        },
        {
          "alg" : "SHA-384",
          "content" : "8f60d09f70ca1772eb203f54ea8b9d852df5726976021909b779cefdf2712b72078a415b80e4fdd2f15fe614fb380605"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.scala-lang.modules/scala-parallel-collections_2.13@1.0.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.scala-lang.org/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/scala/scala-parallel-collections/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/scala/scala-parallel-collections"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.scala-lang.modules/scala-parallel-collections_2.13@1.0.4?type=jar"
    },
    {
      "group" : "org.tukaani",
      "name" : "xz",
      "version" : "1.9",
      "description" : "XZ data compression",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "57c2fbfeb55e307ccae52e5322082e02"
        },
        {
          "alg" : "SHA-1",
          "content" : "1ea4bec1a921180164852c65006d928617bd2caf"
        },
        {
          "alg" : "SHA-256",
          "content" : "211b306cfc44f8f96df3a0a3ddaf75ba8c5289eed77d60d72f889bb855f535e5"
        },
        {
          "alg" : "SHA-512",
          "content" : "a4362db234d4e83683e90f5baf90c82107450cc4404acab96e3fab14b8a3d4588a19722171d32f27d18463682a6994cad9af0b1065c954e3a77ea7bdcf586bac"
        },
        {
          "alg" : "SHA-384",
          "content" : "aa30349b094723369908369a18e2cb5beb5b7ca0b24b4d56c2f5725fae152220f6526466672b22bfec939e2e0622a01d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Public Domain"
          }
        }
      ],
      "purl" : "pkg:maven/org.tukaani/xz@1.9?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://git.tukaani.org/?p=xz-java.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.tukaani/xz@1.9?type=jar"
    },
    {
      "group" : "org.spark-project.spark",
      "name" : "unused",
      "version" : "1.0.0",
      "description" : "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "763373ce9fe48581d4f2b8ffca35bb82"
        },
        {
          "alg" : "SHA-1",
          "content" : "205fe37a2fade6ce6dfcf8eff57ed21a4a1c22af"
        },
        {
          "alg" : "SHA-256",
          "content" : "00fd27fc9bde701581e7dcf5b95981d9e749a1c176bb8bfcd49f675768ff6bf0"
        },
        {
          "alg" : "SHA-512",
          "content" : "08a6ac8d2dc9d89ff557c7e96096c76e687efe3ce166aa6dbb76865bbef64dc8b6ecb5561ef03c2451a688ccdb3876b8f16b9137d02c290a698e917a5656b6fa"
        },
        {
          "alg" : "SHA-384",
          "content" : "c8c51d0d851835107db273d7ce522f026587d922c9d1d34739c3dedf9b7737c1c491e961dc7931f46c476d28acbc91f6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.sonatype.org/spice/trunk/oss/oss-parent-9"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"
    },
    {
      "publisher" : "Joe Walnes, Henri Tremblay, Leonardo Mesquita",
      "group" : "org.objenesis",
      "name" : "objenesis",
      "version" : "3.2",
      "description" : "A library for instantiating Java objects",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5c1ee20481a06561af295034ea89c4b4"
        },
        {
          "alg" : "SHA-1",
          "content" : "7fadf57620c8b8abdf7519533e5527367cb51f09"
        },
        {
          "alg" : "SHA-256",
          "content" : "03d960bd5aef03c653eb000413ada15eb77cdd2b8e4448886edf5692805e35f3"
        },
        {
          "alg" : "SHA-512",
          "content" : "13dbec3062b19c5b9920c0b69e842a9648f2a148c57b6977d90deea22b829cdbce4eaff1ae7763f397f6465ccb35b31e097078de507dc6de25cb95ec796045f7"
        },
        {
          "alg" : "SHA-384",
          "content" : "7d70ab00e728b4233e38729f0eb392d14e828e857421ad66fc678cd162cf22d34958993d5c38fd8a0d8355d3859b763e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.objenesis/objenesis@3.2?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/easymock/objenesis"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.objenesis/objenesis@3.2?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.apache.spark/spark-avro_2.13@3.4.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.spark/spark-sql_2.13@3.4.2?type=jar",
        "pkg:maven/org.apache.spark/spark-tags_2.13@3.4.2?type=jar",
        "pkg:maven/org.scala-lang.modules/scala-parallel-collections_2.13@1.0.4?type=jar",
        "pkg:maven/org.tukaani/xz@1.9?type=jar",
        "pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.spark/spark-sql_2.13@3.4.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.rocksdb/rocksdbjni@7.9.2?type=jar",
        "pkg:maven/com.univocity/univocity-parsers@2.9.1?type=jar",
        "pkg:maven/org.apache.spark/spark-sketch_2.13@3.4.2?type=jar",
        "pkg:maven/org.apache.spark/spark-core_2.13@3.4.2?type=jar",
        "pkg:maven/org.apache.spark/spark-catalyst_2.13@3.4.2?type=jar",
        "pkg:maven/org.apache.spark/spark-tags_2.13@3.4.2?type=jar",
        "pkg:maven/org.scala-lang.modules/scala-parallel-collections_2.13@1.0.4?type=jar",
        "pkg:maven/org.apache.orc/orc-core@1.8.6?classifier=shaded-protobuf&type=jar",
        "pkg:maven/org.apache.orc/orc-mapreduce@1.8.6?classifier=shaded-protobuf&type=jar",
        "pkg:maven/org.apache.hive/hive-storage-api@2.8.1?type=jar",
        "pkg:maven/org.apache.parquet/parquet-column@1.12.3?type=jar",
        "pkg:maven/org.apache.parquet/parquet-hadoop@1.12.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar",
        "pkg:maven/org.apache.xbean/xbean-asm9-shaded@4.22?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@2.5.0?type=jar",
        "pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.rocksdb/rocksdbjni@7.9.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.univocity/univocity-parsers@2.9.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.spark/spark-sketch_2.13@3.4.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.spark/spark-tags_2.13@3.4.2?type=jar",
        "pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.spark/spark-tags_2.13@3.4.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.scala-lang/scala-library@2.13.8?type=jar",
        "pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.spark/spark-core_2.13@3.4.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.scala-lang.modules/scala-parallel-collections_2.13@1.0.4?type=jar",
        "pkg:maven/org.apache.avro/avro@1.11.1?type=jar",
        "pkg:maven/org.apache.avro/avro-mapred@1.11.1?type=jar",
        "pkg:maven/com.twitter/chill_2.13@0.10.0?type=jar",
        "pkg:maven/com.twitter/chill-java@0.10.0?type=jar",
        "pkg:maven/org.apache.xbean/xbean-asm9-shaded@4.22?type=jar",
        "pkg:maven/org.apache.hadoop/hadoop-client-api@3.3.4?type=jar",
        "pkg:maven/org.apache.hadoop/hadoop-client-runtime@3.3.4?type=jar",
        "pkg:maven/org.apache.spark/spark-launcher_2.13@3.4.2?type=jar",
        "pkg:maven/org.apache.spark/spark-kvstore_2.13@3.4.2?type=jar",
        "pkg:maven/org.apache.spark/spark-network-common_2.13@3.4.2?type=jar",
        "pkg:maven/org.apache.spark/spark-network-shuffle_2.13@3.4.2?type=jar",
        "pkg:maven/org.apache.spark/spark-unsafe_2.13@3.4.2?type=jar",
        "pkg:maven/javax.activation/activation@1.1.1?type=jar",
        "pkg:maven/org.apache.curator/curator-recipes@2.13.0?type=jar",
        "pkg:maven/org.apache.zookeeper/zookeeper@3.6.3?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-plus@9.4.50.v20221201?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-security@9.4.50.v20221201?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-util@9.4.50.v20221201?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-server@9.4.50.v20221201?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-http@9.4.50.v20221201?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-continuation@9.4.50.v20221201?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-servlet@9.4.50.v20221201?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-proxy@9.4.50.v20221201?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-client@9.4.50.v20221201?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-servlets@9.4.50.v20221201?type=jar",
        "pkg:maven/jakarta.servlet/jakarta.servlet-api@4.0.3?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.22?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
        "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar",
        "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
        "pkg:maven/commons-io/commons-io@2.11.0?type=jar",
        "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
        "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.6?type=jar",
        "pkg:maven/org.slf4j/jul-to-slf4j@2.0.6?type=jar",
        "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.6?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-slf4j2-impl@2.19.0?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.19.0?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-core@2.19.0?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.19.0?type=jar",
        "pkg:maven/com.ning/compress-lzf@1.1.2?type=jar",
        "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.3?type=jar",
        "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar",
        "pkg:maven/com.github.luben/zstd-jni@1.5.2-5?type=jar",
        "pkg:maven/org.roaringbitmap/RoaringBitmap@0.9.38?type=jar",
        "pkg:maven/org.scala-lang.modules/scala-xml_2.13@2.1.0?type=jar",
        "pkg:maven/org.scala-lang/scala-library@2.13.8?type=jar",
        "pkg:maven/org.scala-lang/scala-reflect@2.13.8?type=jar",
        "pkg:maven/org.json4s/json4s-jackson_2.13@3.7.0-M11?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-client@2.36?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-common@2.36?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-server@2.36?type=jar",
        "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@2.36?type=jar",
        "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet-core@2.36?type=jar",
        "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@2.36?type=jar",
        "pkg:maven/io.netty/netty-all@4.1.87.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-native-epoll@4.1.87.Final?classifier=linux-x86_64&type=jar",
        "pkg:maven/io.netty/netty-transport-native-epoll@4.1.87.Final?classifier=linux-aarch_64&type=jar",
        "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.87.Final?classifier=osx-aarch_64&type=jar",
        "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.87.Final?classifier=osx-x86_64&type=jar",
        "pkg:maven/com.clearspring.analytics/stream@2.9.6?type=jar",
        "pkg:maven/io.dropwizard.metrics/metrics-core@4.2.15?type=jar",
        "pkg:maven/io.dropwizard.metrics/metrics-jvm@4.2.15?type=jar",
        "pkg:maven/io.dropwizard.metrics/metrics-json@4.2.15?type=jar",
        "pkg:maven/io.dropwizard.metrics/metrics-graphite@4.2.15?type=jar",
        "pkg:maven/io.dropwizard.metrics/metrics-jmx@4.2.15?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.module/jackson-module-scala_2.13@2.14.2?type=jar",
        "pkg:maven/org.apache.ivy/ivy@2.5.1?type=jar",
        "pkg:maven/oro/oro@2.0.8?type=jar",
        "pkg:maven/net.razorvine/pickle@1.3?type=jar",
        "pkg:maven/net.sf.py4j/py4j@0.10.9.7?type=jar",
        "pkg:maven/org.apache.spark/spark-tags_2.13@3.4.2?type=jar",
        "pkg:maven/org.apache.commons/commons-crypto@1.1.0?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@2.5.0?type=jar",
        "pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.scala-lang.modules/scala-parallel-collections_2.13@1.0.4?type=jar",
      "dependsOn" : [
        "pkg:maven/org.scala-lang/scala-library@2.13.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.avro/avro@1.11.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.avro/avro-mapred@1.11.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.twitter/chill_2.13@0.10.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.twitter/chill-java@0.10.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.xbean/xbean-asm9-shaded@4.22?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.hadoop/hadoop-client-api@3.3.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.hadoop/hadoop-client-runtime@3.3.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.spark/spark-launcher_2.13@3.4.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.spark/spark-kvstore_2.13@3.4.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.spark/spark-network-common_2.13@3.4.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.spark/spark-network-shuffle_2.13@3.4.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.spark/spark-unsafe_2.13@3.4.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/javax.activation/activation@1.1.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.curator/curator-recipes@2.13.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.zookeeper/zookeeper@3.6.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-plus@9.4.50.v20221201?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-security@9.4.50.v20221201?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-util@9.4.50.v20221201?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-server@9.4.50.v20221201?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-http@9.4.50.v20221201?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-continuation@9.4.50.v20221201?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-servlet@9.4.50.v20221201?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-proxy@9.4.50.v20221201?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-client@9.4.50.v20221201?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-servlets@9.4.50.v20221201?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/jakarta.servlet/jakarta.servlet-api@4.0.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-compress@1.22?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/jul-to-slf4j@2.0.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-slf4j2-impl@2.19.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.19.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.19.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.19.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.ning/compress-lzf@1.1.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.github.luben/zstd-jni@1.5.2-5?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.roaringbitmap/RoaringBitmap@0.9.38?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.scala-lang.modules/scala-xml_2.13@2.1.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.scala-lang/scala-library@2.13.8?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.scala-lang/scala-reflect@2.13.8?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.json4s/json4s-jackson_2.13@3.7.0-M11?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.jersey.core/jersey-client@2.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.jersey.core/jersey-common@2.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.jersey.core/jersey-server@2.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@2.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet-core@2.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@2.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-all@4.1.87.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-transport-native-epoll@4.1.87.Final?classifier=linux-x86_64&type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-transport-native-epoll@4.1.87.Final?classifier=linux-aarch_64&type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.87.Final?classifier=osx-aarch_64&type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.87.Final?classifier=osx-x86_64&type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.clearspring.analytics/stream@2.9.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.dropwizard.metrics/metrics-core@4.2.15?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.dropwizard.metrics/metrics-jvm@4.2.15?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.dropwizard.metrics/metrics-json@4.2.15?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.dropwizard.metrics/metrics-graphite@4.2.15?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.dropwizard.metrics/metrics-jmx@4.2.15?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.module/jackson-module-scala_2.13@2.14.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.ivy/ivy@2.5.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/oro/oro@2.0.8?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/net.razorvine/pickle@1.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/net.sf.py4j/py4j@0.10.9.7?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-crypto@1.1.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.protobuf/protobuf-java@2.5.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.spark/spark-catalyst_2.13@3.4.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.scala-lang/scala-reflect@2.13.8?type=jar",
        "pkg:maven/org.scala-lang.modules/scala-parser-combinators_2.13@2.1.1?type=jar",
        "pkg:maven/org.apache.spark/spark-core_2.13@3.4.2?type=jar",
        "pkg:maven/org.apache.spark/spark-tags_2.13@3.4.2?type=jar",
        "pkg:maven/org.apache.spark/spark-unsafe_2.13@3.4.2?type=jar",
        "pkg:maven/org.apache.spark/spark-sketch_2.13@3.4.2?type=jar",
        "pkg:maven/org.scala-lang.modules/scala-parallel-collections_2.13@1.0.4?type=jar",
        "pkg:maven/org.codehaus.janino/janino@3.1.9?type=jar",
        "pkg:maven/org.codehaus.janino/commons-compiler@3.1.9?type=jar",
        "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
        "pkg:maven/com.univocity/univocity-parsers@2.9.1?type=jar",
        "pkg:maven/org.apache.arrow/arrow-vector@11.0.0?type=jar",
        "pkg:maven/org.apache.arrow/arrow-memory-netty@11.0.0?type=jar",
        "pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.scala-lang.modules/scala-parser-combinators_2.13@2.1.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.janino/janino@3.1.9?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.janino/commons-compiler@3.1.9?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.arrow/arrow-vector@11.0.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.arrow/arrow-memory-netty@11.0.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.orc/orc-core@1.8.6?classifier=shaded-protobuf&type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.orc/orc-shims@1.8.6?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@2.5.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
        "pkg:maven/io.airlift/aircompressor@0.21?type=jar",
        "pkg:maven/org.jetbrains/annotations@17.0.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.6?type=jar",
        "pkg:maven/org.threeten/threeten-extra@1.7.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.orc/orc-shims@1.8.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@2.0.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.airlift/aircompressor@0.21?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.jetbrains/annotations@17.0.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.threeten/threeten-extra@1.7.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.orc/orc-mapreduce@1.8.6?classifier=shaded-protobuf&type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.hive/hive-storage-api@2.8.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@2.0.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.parquet/parquet-column@1.12.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.parquet/parquet-common@1.12.3?type=jar",
        "pkg:maven/org.apache.parquet/parquet-encoding@1.12.3?type=jar",
        "pkg:maven/org.apache.yetus/audience-annotations@0.13.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.parquet/parquet-common@1.12.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.parquet/parquet-format-structures@1.12.3?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.parquet/parquet-format-structures@1.12.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.parquet/parquet-encoding@1.12.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.parquet/parquet-common@1.12.3?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.yetus/audience-annotations@0.13.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.parquet/parquet-hadoop@1.12.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.parquet/parquet-column@1.12.3?type=jar",
        "pkg:maven/org.apache.parquet/parquet-format-structures@1.12.3?type=jar",
        "pkg:maven/org.apache.parquet/parquet-common@1.12.3?type=jar",
        "pkg:maven/org.apache.parquet/parquet-jackson@1.12.3?type=jar",
        "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.3?type=jar",
        "pkg:maven/com.github.luben/zstd-jni@1.5.2-5?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.6?type=jar",
        "pkg:maven/org.apache.yetus/audience-annotations@0.13.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.parquet/parquet-jackson@1.12.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.tukaani/xz@1.9?type=jar",
      "dependsOn" : [ ]
    }
  ]
}