{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.4",
  "serialNumber" : "urn:uuid:90a358a0-3805-433d-82ec-ada0ae69f85d",
  "version" : 1,
  "metadata" : {
    "timestamp" : "2024-04-15T03:23:56Z",
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.7.3",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "ab886f1cb1a79b4244ac54dde22a0989"
          },
          {
            "alg" : "SHA-1",
            "content" : "9ed658496dfeef87fe6072b95c62ec37165cc741"
          },
          {
            "alg" : "SHA-256",
            "content" : "df9b43417bef6aeac86a393abcc1ac2ed0518239ba544aaeb595b9619c603503"
          },
          {
            "alg" : "SHA-512",
            "content" : "223da34bb51c5339e0f7285757608c1a56b1ea887f7ad835af9299fabacc693053163da74af352af86b16e18e04db730bd44214eda04291410c42b6ae657d85c"
          },
          {
            "alg" : "SHA-384",
            "content" : "3aaf057329ed0f90ec3a49a45b3cf4ec5ce637fd75d6202e9483fa4274cec3e7b74308016e146b6ba087df5fce9397bb"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.spark",
      "name" : "spark-hive-thriftserver_2.12",
      "version" : "3.4.3",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.spark/spark-hive-thriftserver_2.12@3.4.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.apache.org"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SPARK"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.spark/spark-hive-thriftserver_2.12@3.4.3?type=jar"
    }
  },
  "components" : [
    {
      "group" : "org.apache.spark",
      "name" : "spark-hive_2.12",
      "version" : "3.4.3",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e3fb4a162df0c2a7ec0cdfd9c4ff84a4"
        },
        {
          "alg" : "SHA-1",
          "content" : "b031689d06c7734326206919d8a0dfa02bc94a00"
        },
        {
          "alg" : "SHA-256",
          "content" : "fd52532d77f50d3e35ccfdd58092fa40f1852fb72c52b348bebcff6997274c91"
        },
        {
          "alg" : "SHA-512",
          "content" : "df12da9d68b46abb8753406be9acdd2196621a3192973bca90b3f442296ea33fa615d12c9d4252e990fdb19cd707ead02d41afb8cf90effa5295371fe901c0c6"
        },
        {
          "alg" : "SHA-384",
          "content" : "bd48d57567087e091219602237b5c6f3c4143d958d3e1edc60b171c18d3a08e995c91c0e27d46c5a89f78ee106a8cd1a"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.apache.spark/spark-hive_2.12@3.4.3?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.spark/spark-hive_2.12@3.4.3?type=jar"
    },
    {
      "group" : "org.apache.spark",
      "name" : "spark-core_2.12",
      "version" : "3.4.3",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2068c46bf714d1627d90a37f45f52506"
        },
        {
          "alg" : "SHA-1",
          "content" : "6f7105e792cbb650eca44890f0444720bd6a8204"
        },
        {
          "alg" : "SHA-256",
          "content" : "ce25f328e36781ca507bcca5d02031a5582b4aa901f0c0b8bc53aec74b55f7fa"
        },
        {
          "alg" : "SHA-512",
          "content" : "c1067693fed57e593d6a3064ecec17ebfc5ac566db7910af491aefe64490ea1b46bf9b8d9d5d4dfaea4d8095130df38b02dbeee5e03f1b05b89dfa78dcb1940f"
        },
        {
          "alg" : "SHA-384",
          "content" : "e52fe3756ce5d8db44bd25b4e5fe787d9f4dbb116e342cfbaf41af4eeb7760fafd934afc9a6bbf5bcfdf3080e978600e"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.apache.spark/spark-core_2.12@3.4.3?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.spark/spark-core_2.12@3.4.3?type=jar"
    },
    {
      "group" : "org.apache.spark",
      "name" : "spark-sql_2.12",
      "version" : "3.4.3",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "407b863ce8ad09fc46bdfdc7db09f20f"
        },
        {
          "alg" : "SHA-1",
          "content" : "a28ead1aa19899654296a6f8a458f8f207f89a73"
        },
        {
          "alg" : "SHA-256",
          "content" : "5078b6b379c7ee0d264552957352cde96f7109ddbed71efc76b2fc45627808fe"
        },
        {
          "alg" : "SHA-512",
          "content" : "d9f2edb99a802b4f31f7830fde12c1267628cc518383deb344f2a473aaad97917da6f20f3ff5f48ef333f3d0338b7c8a25acb388d147031826549827efb06788"
        },
        {
          "alg" : "SHA-384",
          "content" : "07d18c13c05f5eb69e7637a537cf668c774c91ba5fcd397131eb509b87e3ab765d4af884c76caa961aa3d6a81eca0585"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.apache.spark/spark-sql_2.12@3.4.3?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.spark/spark-sql_2.12@3.4.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.hive",
      "name" : "hive-common",
      "version" : "2.3.9",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "991e918a220b24fc2134adb99f38195b"
        },
        {
          "alg" : "SHA-1",
          "content" : "f33a3bce9955c959afe9f441ad1eb7f2885c2ddb"
        },
        {
          "alg" : "SHA-256",
          "content" : "ed07a7cb6dd1e2f2f08a4f2e2df5b82381cceac510516597899d163dc69c10e1"
        },
        {
          "alg" : "SHA-512",
          "content" : "2d9074438614d96aaddd1a00b1c2a07e105585ad8004a57fa82f6a60b2df1621ce1c318101836e99e50cde62ae4fd47af8b2626856985f2a7beb058ee5109237"
        },
        {
          "alg" : "SHA-384",
          "content" : "713d8d5a63a1d63d971700b020a6ad6ba49a3d21ea510a8f3bd1ee3a511407f53e903d506c669008d981d84842ae16d9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hive/hive-common@2.3.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/maven/pom/tags/apache-14"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hive/hive-common@2.3.9?type=jar"
    },
    {
      "group" : "com.tdunning",
      "name" : "json",
      "version" : "1.8",
      "description" : "A clean-room Apache-licensed implementation of simple JSON processing",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a89b66cf37063d0ee4f401193eb0ca2d"
        },
        {
          "alg" : "SHA-1",
          "content" : "fa57d5adf557b226738cd42e6c093dd0a76c5fd4"
        },
        {
          "alg" : "SHA-256",
          "content" : "e0b487de3ccd3d1c288976677835e49880799c35507059039a18fa4ae1e7c59a"
        },
        {
          "alg" : "SHA-512",
          "content" : "558e9780bcea2d0e077cc4c8d07eccd5d821361e0d9298bdfc30fc4b4472c5e5bec2aebae5ec677f9fa2047f3f356c6a41588d73eabd7ff45cd6bb37156f58fc"
        },
        {
          "alg" : "SHA-384",
          "content" : "b7b0cfb7092ff5d32fb84a981c5f8a4b41e271057c3558dfa49cec23c91645311cae46758f31fb74d0d7a98d78d128b8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.tdunning/json@1.8?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/tdunning/open-json"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.tdunning/json@1.8?type=jar"
    },
    {
      "group" : "com.github.joshelser",
      "name" : "dropwizard-metrics-hadoop-metrics2-reporter",
      "version" : "0.1.2",
      "description" : "A reporter for Dropwizard Metrics which announces measurements using Hadoop Metrics2.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7c59244206bb5ed013cbd52b4c84d94d"
        },
        {
          "alg" : "SHA-1",
          "content" : "ff3520ab6e48718e2d79e47f6cf2bd7b50180b84"
        },
        {
          "alg" : "SHA-256",
          "content" : "a22d6889790fa98d5f85de6e25f7dc89946b26964742e6deb9f91681946fa03a"
        },
        {
          "alg" : "SHA-512",
          "content" : "f3ce33c36b41a727f4fe34644f5fa9980ff178fa9761030d6545e561f90940d4d7041b3342d155ac90f2f2f85e4bc668a7bdc5af4fcd593d37fd66db6d8ec8dc"
        },
        {
          "alg" : "SHA-384",
          "content" : "37423aca07f575a0d29140bb672f4c2ac8b80e1ce603142180aa8a74f29df6812c53472ac55f52b6934e92eccec20a61"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.joshelser/dropwizard-metrics-hadoop-metrics2-reporter@0.1.2?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/joshelser/dropwizard-hadoop-metrics2/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/joshelser/dropwizard-hadoop-metrics2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.joshelser/dropwizard-metrics-hadoop-metrics2-reporter@0.1.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.hive",
      "name" : "hive-exec",
      "version" : "2.3.9",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "60961223f48c77879c0d4f1c4819f3e6"
        },
        {
          "alg" : "SHA-1",
          "content" : "df3ce2399090f7647aa8907d563bd92d8b4d9c9b"
        },
        {
          "alg" : "SHA-256",
          "content" : "8df46e83c72a24c72185636b63c2b4b8760e169fb45086c3e5beafa776db7ae3"
        },
        {
          "alg" : "SHA-512",
          "content" : "3ca47e33a6896a04fd8abbac035d1a97e16d5a772a1e1574f2c0daa19c6c60f46e0be0acedd7b4063eabf6bd712c50d8935c498823c9e27698c7ec885c1a61f5"
        },
        {
          "alg" : "SHA-384",
          "content" : "9fb1871fbccf8b50c191ca229a8d255b3f1696b614a0b6714d8e8e55eff79dd7907f0ad7ab8e565edcf551d7a193cde2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hive/hive-exec@2.3.9?classifier=core&type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/maven/pom/tags/apache-14"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hive/hive-exec@2.3.9?classifier=core&type=jar"
    },
    {
      "publisher" : "ANTLR",
      "group" : "org.antlr",
      "name" : "antlr-runtime",
      "version" : "3.5.2",
      "description" : "A framework for constructing recognizers, compilers, and translators from grammatical descriptions containing Java, C#, C++, or Python actions.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1fbbae2cb72530207c20b797bdabd029"
        },
        {
          "alg" : "SHA-1",
          "content" : "cd9cd41361c155f3af0f653009dcecb08d8b4afd"
        },
        {
          "alg" : "SHA-256",
          "content" : "ce3fc8ecb10f39e9a3cddcbb2ce350d272d9cd3d0b1e18e6fe73c3b9389c8734"
        },
        {
          "alg" : "SHA-512",
          "content" : "71adb4a78a23e4106e9f09c92a7e0c1d975ad314a49f4a06472e22a2ec09c83fc02c6b684a20055b46ae69fcc119b155b7109ef56e170579c9a462c8839bae52"
        },
        {
          "alg" : "SHA-384",
          "content" : "e56770e380da87eda373e1f0fa7da0fd031b3e310e70b581d8a7eeffa80192f7cdccd073e45f277610ca1e161662db62"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "BSD licence",
            "url" : "http://antlr.org/license.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.antlr/antlr-runtime@3.5.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.antlr.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/antlr/antlr3/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/?fromgroups#!forum/antlr-discussion"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/antlr/antlr3/tree/master"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.antlr/antlr-runtime@3.5.2?type=jar"
    },
    {
      "group" : "org.antlr",
      "name" : "ST4",
      "version" : "4.0.4",
      "description" : "StringTemplate is a java template engine for generating source code, web pages, emails, or any other formatted text output. StringTemplate is particularly good at multi-targeted code generators, multiple site skins, and internationalization/localization. It evolved over years of effort developing jGuru.com. StringTemplate also generates the stringtemplate website: http://www.stringtemplate.org and powers the ANTLR v3 code generator. Its distinguishing characteristic is that unlike other engines, it strictly enforces model-view separation. Strict separation makes websites and code generators more flexible and maintainable; it also provides an excellent defense against malicious template authors. There are currently about 600 StringTemplate source downloads a month.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "06856c607f242639cd52ef2b4c63ebc9"
        },
        {
          "alg" : "SHA-1",
          "content" : "467a2aa12be6d0f0f68c70eecf6714ab733027ac"
        },
        {
          "alg" : "SHA-256",
          "content" : "17cc49dc535a0fbe58c3a8634e774572bed31eb73415e9ce9d2703b977bf356f"
        },
        {
          "alg" : "SHA-512",
          "content" : "b3ebd65ab7c425b7346bc528d5e45983e28126928946caadc39ca9f84be62ddffcf81a428c33f36de874e671cf09b5fea13270bb1dd52176dbe12f8e1e5a402c"
        },
        {
          "alg" : "SHA-384",
          "content" : "8b92ececea4875a1a2272925c7a06ace23f8f995f85c31bc84b53700a179d01f450505524fa84b86e71e3d2ae518879c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "BSD licence",
            "url" : "http://antlr.org/license.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.antlr/ST4@4.0.4?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "http://fisheye2.cenqua.com/browse/stringtemplate"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.antlr/ST4@4.0.4?type=jar"
    },
    {
      "publisher" : "Google, Inc.",
      "group" : "com.google.code.gson",
      "name" : "gson",
      "version" : "2.2.4",
      "description" : "Google Gson library",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2f54fc24807a4cad7297012dd8cebf3d"
        },
        {
          "alg" : "SHA-1",
          "content" : "a60a5e993c98c864010053cb901b7eab25306568"
        },
        {
          "alg" : "SHA-256",
          "content" : "c0328cd07ca9e363a5acd00c1cf4afe8cf554bd6d373834981ba05cebec687fb"
        },
        {
          "alg" : "SHA-512",
          "content" : "d7aa9214cefb99b2f39bab6bf5718dafcb43742f8a881e5fb6cbc3a757491c0082a536ed1fef6c7168412b6e5bdec28e68a40b4d4d0b57b63a7bbc9a55f820cd"
        },
        {
          "alg" : "SHA-384",
          "content" : "2c5d7ed5310c1a1b45b7b46479361debd5e2e49737f167bff9c11dd989fa38b973ccd7b4655dbb5e34b0ff4ff1a8d755"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.code.gson/gson@2.2.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.google.com"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://code.google.com/p/google-gson/issues/list"
        },
        {
          "type" : "vcs",
          "url" : "http://google-gson.googlecode.com/svn/trunk/gson"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.code.gson/gson@2.2.4?type=jar"
    },
    {
      "group" : "stax",
      "name" : "stax-api",
      "version" : "1.0.1",
      "description" : "StAX API is the standard java XML processing API defined by JSR-173",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7d436a53c64490bee564c576babb36b4"
        },
        {
          "alg" : "SHA-1",
          "content" : "49c100caf72d658aca8e58bd74a4ba90fa2b0d70"
        },
        {
          "alg" : "SHA-256",
          "content" : "d1968436fc216c901fb9b82c7e878b50fd1d30091676da95b2edd3a9c0ccf92e"
        },
        {
          "alg" : "SHA-512",
          "content" : "43c24e8dbffa9b932492c8ccf2b91926b2ba3d1d34b5a9671c689bd24d4c220b996708a9667521641d1abbf29404b653755b6f6f3dc0ad0671f5c09db332ea06"
        },
        {
          "alg" : "SHA-384",
          "content" : "2e6c232d3012064dc17e10c2e5b281728a6771eb0d74868e730caf60fe6f96fdd6145759fbbf9d1aa2e07eb1f49764d6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/stax/stax-api@1.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/STAX"
        },
        {
          "type" : "mailing-list",
          "url" : "http://groups.yahoo.com/group/stax_builders/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/stax/stax-api@1.0.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.hive",
      "name" : "hive-metastore",
      "version" : "2.3.9",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "864e92bb31a27605213b6136524999a4"
        },
        {
          "alg" : "SHA-1",
          "content" : "e9614e870f5a42b12a55fd5ea97dade5e062a835"
        },
        {
          "alg" : "SHA-256",
          "content" : "224b4a59344ff8136a68c0033801390f20d4d01c30ea5fd5dd9c4592f9c8a9ef"
        },
        {
          "alg" : "SHA-512",
          "content" : "1e9211c21886699f909d611f75f5128da7d190ab51d4748aa2c7f3b963d67bae4964f60b668242cf1c71573b6eaaab7fe4884147110ac975bc84d0a956f0a736"
        },
        {
          "alg" : "SHA-384",
          "content" : "418bc8a3f539dc748c6924123defe3e7e699a604783275f87ee64adf3977cc45c7df2bda46fae1d254b2bba05b05a5af"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hive/hive-metastore@2.3.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/maven/pom/tags/apache-14"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hive/hive-metastore@2.3.9?type=jar"
    },
    {
      "publisher" : "Javolution",
      "group" : "javolution",
      "name" : "javolution",
      "version" : "5.5.1",
      "description" : "Javolution - Java Solution for Real-Time and Embedded Systems. This project uses template classes to generates java code for various versions of the Java run-time (e.g. J2ME, 1.4, GCJ, 1.5). The default maven compilation builds OSGI bundle for Java 1.5+ (parameterized classes). For others targets the ant script should be used directly (e.g. \"ant j2me\").",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1b7257da4690bada3cac7293985f8588"
        },
        {
          "alg" : "SHA-1",
          "content" : "3fcba819cdb7861728405963ddc4b2755ab182e5"
        },
        {
          "alg" : "SHA-256",
          "content" : "6de167427fb5ad34fe533cb36a8b3427fa6052a2b99781874396ed5cca9f8ed1"
        },
        {
          "alg" : "SHA-512",
          "content" : "847f503a9cb1ea6076be51c8f81325916ba78c25c54651e03c5db88162a12e0203922679f8ac52b68d35be331f5d842017c482519c149bd6198e327f8f8c1fb8"
        },
        {
          "alg" : "SHA-384",
          "content" : "10f431e0c1acbdd383e7e693d2f6d8dcc6c8e5fd0a864dfbce3a81e5f69d224f22f5463db53022b8048add18e3dc659c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/javolution/javolution@5.5.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://javolution.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://kenai.com/jira/browse/JAVOLUTION"
        },
        {
          "type" : "vcs",
          "url" : "https://kenai.com/svn/javolution~svn-repository/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/javolution/javolution@5.5.1?type=jar"
    },
    {
      "publisher" : "JolBox",
      "group" : "com.jolbox",
      "name" : "bonecp",
      "version" : "0.8.0.RELEASE",
      "description" : "Lightweight connection pool.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "730a2f3602f5f4c3ff7590b08205adce"
        },
        {
          "alg" : "SHA-1",
          "content" : "cec24ee9345b3678472bb1b8fdd6aa6b9428beb8"
        },
        {
          "alg" : "SHA-256",
          "content" : "a53d5b5a7ba6433fc7c29e29664313e50ddb53e7381698c41d1091e3c3d081fb"
        },
        {
          "alg" : "SHA-512",
          "content" : "00736d3aeebbc7e6ab973e5de92a33295ef9f4837b02d552a2e9460d05ce0b0801daab3fccaf4de7ee8b0c832e454df065c5e4ba468b92784a75b56963308fe1"
        },
        {
          "alg" : "SHA-384",
          "content" : "1030283627d5068b1a646ec837f8d4b952eab2972bc3344f18f8eed0c798ec12d8970d2c8bd65e13f020101ab4fbaf1d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.jolbox/bonecp@0.8.0.RELEASE?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jolbox.com"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://launchpad.net/bonecp"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/wwadge/bonecp"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.jolbox/bonecp@0.8.0.RELEASE?type=jar"
    },
    {
      "publisher" : "Zaxxer.com",
      "group" : "com.zaxxer",
      "name" : "HikariCP",
      "version" : "2.5.1",
      "description" : "Ultimate JDBC Connection Pool",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4fd401dee8e525cbb8403476381e34cd"
        },
        {
          "alg" : "SHA-1",
          "content" : "b896b711e2d98fedf403de590559a123b5fbf1a6"
        },
        {
          "alg" : "SHA-256",
          "content" : "3cf7bc5258414b77613e8d8ef0ce63b3ae1c53a441fd95b9ea335ec051c652b2"
        },
        {
          "alg" : "SHA-512",
          "content" : "4a3137acfff20e17fb20bc582ed238d0305daef88f45d898c2b1c169343bece7970a4535d558333bacb24ddf52a4a90ccd6a7c49ffbefd31e0611bd86dc15cfc"
        },
        {
          "alg" : "SHA-384",
          "content" : "4254051930ab34c016fbe438065d368c288352f626fa2b0f0855b9deac6d70406eba16cc3e63fddfc93facad597bdac2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.zaxxer/HikariCP@2.5.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/brettwooldridge"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.sonatype.org/spice/trunk/oss/oss-parent-9"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.zaxxer/HikariCP@2.5.1?type=jar"
    },
    {
      "group" : "org.datanucleus",
      "name" : "datanucleus-api-jdo",
      "version" : "4.2.4",
      "description" : "Plugin providing DataNucleus implementation of the JDO API.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f54789e11168bdfa5063d5241573ff21"
        },
        {
          "alg" : "SHA-1",
          "content" : "7e2c71f7eb9b40b660d009c3ea1b55fb71694bca"
        },
        {
          "alg" : "SHA-256",
          "content" : "f30f1f09658329190811468e58a622f069d97a7284d67a88b8d01c809ab3d1f3"
        },
        {
          "alg" : "SHA-512",
          "content" : "948027e5d289b8e9718fb0c552a60b8c9f3d1db42bdeae3e45f42701bd5bb23d5cccceedd98f958a09e2ff32b6a16a80dd11b397738521f8cb37f1af6c748384"
        },
        {
          "alg" : "SHA-384",
          "content" : "c577425c7c1451c7eaf96203ef7cfdcb3373ac72eab3193df37e317dd54e28d45a047a332d2bff1c395d391f992510f0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.datanucleus/datanucleus-api-jdo@4.2.4?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/datanucleus/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.datanucleus/datanucleus-api-jdo@4.2.4?type=jar"
    },
    {
      "group" : "org.datanucleus",
      "name" : "datanucleus-rdbms",
      "version" : "4.1.19",
      "description" : "Plugin for DataNucleus providing persistence to RDBMS datastores.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7d1ad32dea1b7f5bf2d6c04e83a7bb17"
        },
        {
          "alg" : "SHA-1",
          "content" : "923fa411f49cca5dbb6221140b1ae89c90b3a3fd"
        },
        {
          "alg" : "SHA-256",
          "content" : "a189e10fb48dc0fa550721ee2206a1df8a2fd68d213149bf68793976b0ade687"
        },
        {
          "alg" : "SHA-512",
          "content" : "33288f43d5d3c6cc5d86079f784fcc6c12761480628e8f276f24ebed74f1844d2fb8175de11c29b4e8e5acc105e64f968f24a6df0ba0b5ea7f1d6c474c57a5e6"
        },
        {
          "alg" : "SHA-384",
          "content" : "33d88a62fae54d975579667a584c3784621e7489cf69e3d6f25432691c7ac48915ec8a7b10f91523d3230ecb23662694"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.datanucleus/datanucleus-rdbms@4.1.19?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/datanucleus/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.datanucleus/datanucleus-rdbms@4.1.19?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-pool",
      "name" : "commons-pool",
      "version" : "1.5.4",
      "description" : "Commons Object Pooling Library",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "80e9d1cbd70542f4f293793d109679a9"
        },
        {
          "alg" : "SHA-1",
          "content" : "75b6e20c596ed2945a259cea26d7fadd298398e6"
        },
        {
          "alg" : "SHA-256",
          "content" : "22095672ac3ad6503e42ec6d4cbc330cd1318040223f6c5d9605473b6d2aa0fd"
        },
        {
          "alg" : "SHA-512",
          "content" : "bb5a66d7da8f389660fb369c1a6e77296f39239cca1d69ca1b7c80e8e81c38a9d25debefb702a2eaac987e83885898ca0c95c6387d8440e548653d6bdae686a6"
        },
        {
          "alg" : "SHA-384",
          "content" : "6767d16144c5e86926f71f5ff24c4dd25f8d1aef47264502367cb7cfe63abaf9f914aba0de9fe998af4b510b85e76bf4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-pool/commons-pool@1.5.4?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/POOL"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/pool/trunk"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "http://www.apache.org/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-pool/commons-pool@1.5.4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-dbcp",
      "name" : "commons-dbcp",
      "version" : "1.4",
      "description" : "Commons Database Connection Pooling",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b004158fab904f37f5831860898b3cd9"
        },
        {
          "alg" : "SHA-1",
          "content" : "30be73c965cc990b153a100aaaaafcf239f82d39"
        },
        {
          "alg" : "SHA-256",
          "content" : "a6e2d83551d0e5b59aa942359f3010d35e79365e6552ad3dbaa6776e4851e4f6"
        },
        {
          "alg" : "SHA-512",
          "content" : "c0512b255c4a7242634b820c78c397296fc9388deceb4dec199775341598f0c87b21164425a97dfdeadfad9f3c80e1d4dab735d32b1362377820a4204b4e5a78"
        },
        {
          "alg" : "SHA-384",
          "content" : "c28b64ac524706ba21a94657e334c9b9ea83738db222d6761290b1e2ea3caea267b63f54dd0044d4cd77d9f13e6c42b1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-dbcp/commons-dbcp@1.4?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/DBCP"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/dbcp/trunk"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "http://www.apache.org/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-dbcp/commons-dbcp@1.4?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "javax.jdo",
      "name" : "jdo-api",
      "version" : "3.0.1",
      "description" : "The Java Data Objects (JDO) API is a standard interface-based Java model abstraction of persistence, developed as Java Specification Request 243 under the auspices of the Java Community Process.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "978ae9726514457b8cfe8a3ba1c17ca5"
        },
        {
          "alg" : "SHA-1",
          "content" : "058e7a538e020b73871e232eeb064835fd98a492"
        },
        {
          "alg" : "SHA-256",
          "content" : "2a2e63d44a4d7fe267650d08431218648adee14f725df3896d09db3084d7a2f2"
        },
        {
          "alg" : "SHA-512",
          "content" : "0cda5bbbbe791e91d4b8a8ca2e27a18f661c9c27324107cda69c346f12181e520a29a52048fcd0f31db0a7d60409de4c509689f793d5c56061b81c1087dbf428"
        },
        {
          "alg" : "SHA-384",
          "content" : "6ea573adcac7e5d2b6f676d783578079538f10f0de59d2699ef3a4ada0baf70c0d77ee8fdd5dc88a1bc0956e7cf7ae67"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/javax.jdo/jdo-api@3.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.apache.org"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/db-jdo-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewcvs.cgi/db/jdo"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.jdo/jdo-api@3.0.1?type=jar"
    },
    {
      "group" : "javax.transaction",
      "name" : "jta",
      "version" : "1.1",
      "description" : "The javax.transaction package. It is appropriate for inclusion in a classpath, and may be added to a Java 2 installation.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "82a10ce714f411b28f13850059de09ee"
        },
        {
          "alg" : "SHA-1",
          "content" : "2ca09f0b36ca7d71b762e14ea2ff09d5eac57558"
        },
        {
          "alg" : "SHA-256",
          "content" : "b8ec163b4a47bad16f9a0b7d03c3210c6b0a29216d768031073ac20817c0ba50"
        },
        {
          "alg" : "SHA-512",
          "content" : "fa9a5ab51f97e2cd63b5c1cb1775b63b1edc0197aedbcc0e8ab3116dfe27d47365865d24eefaf19b648554b60f1a1ece13e3192d157c319344a97ad551c628c4"
        },
        {
          "alg" : "SHA-384",
          "content" : "5119a3fdd809a087087c6491df078247ee50769529d793e5722b18270cf7399b5fc218763e2331c66ebd47fc0825ee79"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/javax.transaction/jta@1.1?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "http://java.sun.com/products/jta"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.transaction/jta@1.1?type=jar"
    },
    {
      "group" : "org.datanucleus",
      "name" : "javax.jdo",
      "version" : "3.2.0-m3",
      "description" : "The Java Data Objects API (JDO) : a standard interface-based Java model abstraction of persistence, developed by the JCP.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "53e1eac14fa3a58cf0054f03373af8f4"
        },
        {
          "alg" : "SHA-1",
          "content" : "c911b22710a8f77541a966615033b4ab943fd6f3"
        },
        {
          "alg" : "SHA-256",
          "content" : "b0e338881376e4588f7564ae2dcc91737148e7c950873f6b0b899cbf0feef80b"
        },
        {
          "alg" : "SHA-512",
          "content" : "7e4959c1ed0e96af512a3bb058d25b1e284a76bae12063f3f179a24a6397acde2341a96d994bcb5f6c0e655fc4908e519c068a35bbb69e7010f09dac68d0047c"
        },
        {
          "alg" : "SHA-384",
          "content" : "fbe7e534591f03b5a538fc30dfea213e2a6e7bd86b8a45d778b312f859c745936bf45b0177a32d8b127506104f9c1c8e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.datanucleus/javax.jdo@3.2.0-m3?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/datanucleus/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.datanucleus/javax.jdo@3.2.0-m3?type=jar"
    },
    {
      "group" : "javax.transaction",
      "name" : "transaction-api",
      "version" : "1.1",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "82a10ce714f411b28f13850059de09ee"
        },
        {
          "alg" : "SHA-1",
          "content" : "2ca09f0b36ca7d71b762e14ea2ff09d5eac57558"
        },
        {
          "alg" : "SHA-256",
          "content" : "b8ec163b4a47bad16f9a0b7d03c3210c6b0a29216d768031073ac20817c0ba50"
        },
        {
          "alg" : "SHA-512",
          "content" : "fa9a5ab51f97e2cd63b5c1cb1775b63b1edc0197aedbcc0e8ab3116dfe27d47365865d24eefaf19b648554b60f1a1ece13e3192d157c319344a97ad551c628c4"
        },
        {
          "alg" : "SHA-384",
          "content" : "5119a3fdd809a087087c6491df078247ee50769529d793e5722b18270cf7399b5fc218763e2331c66ebd47fc0825ee79"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/javax.transaction/transaction-api@1.1?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.transaction/transaction-api@1.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.hive",
      "name" : "hive-serde",
      "version" : "2.3.9",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4b78668ff65bf79e9c3df95ef73ee2d5"
        },
        {
          "alg" : "SHA-1",
          "content" : "b76292b52f9127039b6a4ec4c81ed426a0e8e901"
        },
        {
          "alg" : "SHA-256",
          "content" : "6703cd6a011723931631087b39ae4d0a7a46d594ede42d8584d5747df6111732"
        },
        {
          "alg" : "SHA-512",
          "content" : "8414502705a973aca77b39e3f58699512917ffb31c2292a2facc373c7e7ff2e707198629f5b1a4a7f9e5620c1f55e445ef00b32fa236419a2478f3501c9274ff"
        },
        {
          "alg" : "SHA-384",
          "content" : "d46aa092242b8be667b1ce4883fdc89d487c03f158f056533c793972b45aa0dcfdb3bf22f8cbf1f2f736efca2a273c9a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hive/hive-serde@2.3.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/maven/pom/tags/apache-14"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hive/hive-serde@2.3.9?type=jar"
    },
    {
      "group" : "net.sf.opencsv",
      "name" : "opencsv",
      "version" : "2.3",
      "description" : "A simple library for reading and writing CSV in Java",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9eebabaa007dc329845e5ab3c12b4e6b"
        },
        {
          "alg" : "SHA-1",
          "content" : "c23708cdb9e80a144db433e23344a788a1fd6599"
        },
        {
          "alg" : "SHA-256",
          "content" : "dc0ba5bff6140dc92339973026a0ecbddc2a3b01bdd46ed9d16becc2f6d78de6"
        },
        {
          "alg" : "SHA-512",
          "content" : "0c385519e65f09c84785988dbe29966b41d74fa1a35f27053d150fc69a5b3d07b20e351aaf9ce50005df9a7123c0520473208520a05e58090255b82e7ac0b27a"
        },
        {
          "alg" : "SHA-384",
          "content" : "9863406442dda7cb9e763f34ed68aeb9bbb5b36edb9ec1818d0bd47874c8cecc480d41cb6b9d7bf3117f2e7fd6e0d556"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/net.sf.opencsv/opencsv@2.3?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "http://sourceforge.net/tracker/?group_id=148905"
        },
        {
          "type" : "vcs",
          "url" : "http://opencsv.svn.sourceforge.net/viewvc/opencsv/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sf.opencsv/opencsv@2.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.hive",
      "name" : "hive-shims",
      "version" : "2.3.9",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b435fe22c29e6e297d785dc6537c2f9c"
        },
        {
          "alg" : "SHA-1",
          "content" : "758b531c2e0e925b8d00f0761e091a38a762bcdd"
        },
        {
          "alg" : "SHA-256",
          "content" : "209541ef8d51baff0f2120fff3873d3b9eacc2ec70a95254321836818feb460c"
        },
        {
          "alg" : "SHA-512",
          "content" : "5a9443dde70164011628877e379bf7463377dc9209ef22231070a5dfac5c47ff163a2101d05dbdd3f3a002cfee13d869ae1d2752c56cb43991ee3d239381b894"
        },
        {
          "alg" : "SHA-384",
          "content" : "5f9a7513a3b9b009fd7782229594819d7f4d2b880024aee0582e49893924ce256ee485f329101d4fd7291e14cd0fc3bb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hive/hive-shims@2.3.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/maven/pom/tags/apache-14"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hive/hive-shims@2.3.9?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.hive.shims",
      "name" : "hive-shims-common",
      "version" : "2.3.9",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "434e3232d5b50bf6a36db15158bb0adc"
        },
        {
          "alg" : "SHA-1",
          "content" : "74624533c53d1163d9d6954ba5c97c845b99dd11"
        },
        {
          "alg" : "SHA-256",
          "content" : "f27de4431b46596ab829754840633689181ad5a464e99d2759d0eab106ec73c0"
        },
        {
          "alg" : "SHA-512",
          "content" : "d4c1c8f667cc16c13a0282c7525c1fd2825dda9b638663dd38e2402fe760b91487dbdd56404b904e90d91fe1e6daa5777126adfcade388238cc38be6051e8d61"
        },
        {
          "alg" : "SHA-384",
          "content" : "f89678f3be35113f524d38bad49d9c6ec08252a10fe50b924b04e845a5e6ae1b773d3511c0739e246bd5b8427c788797"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hive.shims/hive-shims-common@2.3.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/maven/pom/tags/apache-14"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hive.shims/hive-shims-common@2.3.9?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.hive.shims",
      "name" : "hive-shims-0.23",
      "version" : "2.3.9",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "575e4146191b23a1946f5d716f8f57cf"
        },
        {
          "alg" : "SHA-1",
          "content" : "8dbc9520ce98cf661a90c652f817c7b4c168dc17"
        },
        {
          "alg" : "SHA-256",
          "content" : "57fa048f7c8e9395f6d8d74b2ee5f6133a8206bbe2ea885bea366e85d9d78168"
        },
        {
          "alg" : "SHA-512",
          "content" : "912a2132793309903623c85a0ac418d989a91beca578d1b9dc960977df7ec913c869880a2f843f2f01221320bb9c438ac2c06f9c149bf2b0912258fb87ef4595"
        },
        {
          "alg" : "SHA-384",
          "content" : "377d7005a9af31505c354f5081f0566a911bf82f09cd9eb6bef4eaa35b31e6478f7799f3ab0d6e6e123081ac18ae6121"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hive.shims/hive-shims-0.23@2.3.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/maven/pom/tags/apache-14"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hive.shims/hive-shims-0.23@2.3.9?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.hive.shims",
      "name" : "hive-shims-scheduler",
      "version" : "2.3.9",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "786e39d9cace245b716de38467502353"
        },
        {
          "alg" : "SHA-1",
          "content" : "8c7b61a1d3b54bf865d3b525dc51d9c27a3dbd21"
        },
        {
          "alg" : "SHA-256",
          "content" : "867c38353fa9fe9cd0763de267473b0a770475bc5918f02bef4df966e7327bf0"
        },
        {
          "alg" : "SHA-512",
          "content" : "a37fcd74e17da457216416dcfea7b5be198f59413f96759d0a0b3cd5beb487d8cc5c13cd3bfae774879746edb6f1b8c0f14984958099bba749886a9103322590"
        },
        {
          "alg" : "SHA-384",
          "content" : "8bbeae4d19bab25f0a4eb685160bcdaa6dc3babed40c2f9425f312e697d008f9ef1c8cba61476939df9e8458d5956f11"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hive.shims/hive-shims-scheduler@2.3.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/maven/pom/tags/apache-14"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hive.shims/hive-shims-scheduler@2.3.9?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.hive",
      "name" : "hive-llap-common",
      "version" : "2.3.9",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f7821e203c607fbda1a207ce9428dc21"
        },
        {
          "alg" : "SHA-1",
          "content" : "09ac072bd790d719fa09258e6f922bdde4dc042f"
        },
        {
          "alg" : "SHA-256",
          "content" : "bbc07775a0b14180540b44d7879fb35dc92967a1e7a968063ca890c4e604c0b9"
        },
        {
          "alg" : "SHA-512",
          "content" : "ab49dfe6ae1fd96f1ae1e824514271774c0dae3236a4546325b14692d9d6123d3022e02e61af244e9c568b1de1823462269c3e9b177d1ffea45cf3d2a693eac9"
        },
        {
          "alg" : "SHA-384",
          "content" : "9ea95aa622e4566f6393373faf2e99b78e1922d79939c52cdc64538ec4b61a7949b77d4cf287d57ef9b929467d8be472"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hive/hive-llap-common@2.3.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/maven/pom/tags/apache-14"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hive/hive-llap-common@2.3.9?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.avro",
      "name" : "avro",
      "version" : "1.11.1",
      "description" : "Avro core components",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9fad4fb0e34810ae5f3d7cb5223a7e1c"
        },
        {
          "alg" : "SHA-1",
          "content" : "81af5d4b9bdaaf4ba41bcb0df5241355ec34c630"
        },
        {
          "alg" : "SHA-256",
          "content" : "1213dfffe9295daa3d986713ae36b8daad36bfba039810264bca1cdac0cf8b6a"
        },
        {
          "alg" : "SHA-512",
          "content" : "a0e8b7c1f138747334a2f1f20f40a6893543d049243f7cec67ee572ec4a40e4dc7b82e9b8769c64a90eb9c8ed92cc646daee3cacd523d3e9289a67decd2bb0d6"
        },
        {
          "alg" : "SHA-384",
          "content" : "2406810a329612f96f2881e9912dc42cf880eb721026b13e45716586860921223fdc003081e4711ad9ee26a1d85936cc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.avro/avro@1.11.1?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/AVRO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/avro-dev/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.avro/avro@1.11.1?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-core",
      "version" : "2.14.2",
      "description" : "Core Jackson processing abstractions (aka Streaming API), implementation for JSON",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6ee422ee4c481b2d5aacb2b5e36a7dc0"
        },
        {
          "alg" : "SHA-1",
          "content" : "f804090e6399ce0cf78242db086017512dd71fcc"
        },
        {
          "alg" : "SHA-256",
          "content" : "b5d37a77c88277b97e3593c8740925216c06df8e4172bbde058528df04ad3e7a"
        },
        {
          "alg" : "SHA-512",
          "content" : "208953cf72691b3bab1ca2f9a045cccd3d75c46c90099ba884fbf16bc3e45045e5cd014d2c68c96e8a8826f87a5f0e18cb34b35e7ef03348953869c21e197367"
        },
        {
          "alg" : "SHA-384",
          "content" : "e806595862c5fcdae801d9845befc1d12c97e6036ee839d34590dbd785a422d5832cf4fc5c7ee6e1a5ee7a59f37740f0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-core"
        },
        {
          "type" : "website",
          "url" : "http://fasterxml.com/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.avro",
      "name" : "avro-mapred",
      "version" : "1.11.1",
      "description" : "An org.apache.hadoop.mapred compatible API for using Avro Serialization in Hadoop",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "07371054f89ac01e938dc38158a85930"
        },
        {
          "alg" : "SHA-1",
          "content" : "5683d99c94f0ae35e2a3d5b2bcd974570b0ff388"
        },
        {
          "alg" : "SHA-256",
          "content" : "ada5a42b5ff522feb536731e5dafa8831ada1369578b9c60136dc1a0ded14e9a"
        },
        {
          "alg" : "SHA-512",
          "content" : "9188a8ec48c75bbc5a30107b315d084d551fd153fce94e9dbc1872dcadfbc238d3bdadc66dde247d06961e290432bc17cfbc2dacec8572b2c77ef92abf41f2ba"
        },
        {
          "alg" : "SHA-384",
          "content" : "7a9ac1dea84cd10da8b04c2bb5e074b65d4dd8c31579754de3b59e392d644b1a1dd7c822bb8a87422f9b918480d4fd3c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.avro/avro-mapred@1.11.1?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/AVRO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/avro-dev/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.avro/avro-mapred@1.11.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.avro",
      "name" : "avro-ipc",
      "version" : "1.11.1",
      "description" : "Avro inter-process communication components",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f987fa8ec6a043ff18ef6b162fd4c45f"
        },
        {
          "alg" : "SHA-1",
          "content" : "40d653933f829e5193b24864d82b306b5a31e7c0"
        },
        {
          "alg" : "SHA-256",
          "content" : "dbe52219c44533ef72ad62ff05b4bea10cabe6c44af6b62375223d8e6ee4b23c"
        },
        {
          "alg" : "SHA-512",
          "content" : "4ad5df1151085cdf1180fb60275c18b3f3127dd5f682b012407accf8c046c1d46cc7b3ddf4f3f5388c6e603d65a7a69c9ace12cedf3909d24c1304b6a45477c9"
        },
        {
          "alg" : "SHA-384",
          "content" : "47bebec17c907a607993a024663a5e646b05f7c06b6ea8139393223ce095432308e343d066de6afc8d30453127d9d55b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.avro/avro-ipc@1.11.1?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/AVRO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/avro-dev/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.avro/avro-ipc@1.11.1?type=jar"
    },
    {
      "group" : "org.tukaani",
      "name" : "xz",
      "version" : "1.9",
      "description" : "XZ data compression",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "57c2fbfeb55e307ccae52e5322082e02"
        },
        {
          "alg" : "SHA-1",
          "content" : "1ea4bec1a921180164852c65006d928617bd2caf"
        },
        {
          "alg" : "SHA-256",
          "content" : "211b306cfc44f8f96df3a0a3ddaf75ba8c5289eed77d60d72f889bb855f535e5"
        },
        {
          "alg" : "SHA-512",
          "content" : "a4362db234d4e83683e90f5baf90c82107450cc4404acab96e3fab14b8a3d4588a19722171d32f27d18463682a6994cad9af0b1065c954e3a77ea7bdcf586bac"
        },
        {
          "alg" : "SHA-384",
          "content" : "aa30349b094723369908369a18e2cb5beb5b7ca0b24b4d56c2f5725fae152220f6526466672b22bfec939e2e0622a01d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Public Domain"
          }
        }
      ],
      "purl" : "pkg:maven/org.tukaani/xz@1.9?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://git.tukaani.org/?p=xz-java.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.tukaani/xz@1.9?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents",
      "name" : "httpclient",
      "version" : "4.5.14",
      "description" : "Apache HttpComponents Client",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2cb357c4b763f47e58af6cad47df6ba3"
        },
        {
          "alg" : "SHA-1",
          "content" : "1194890e6f56ec29177673f2f12d0b8e627dec98"
        },
        {
          "alg" : "SHA-256",
          "content" : "c8bc7e1c51a6d4ce72f40d2ebbabf1c4b68bfe76e732104b04381b493478e9d6"
        },
        {
          "alg" : "SHA-512",
          "content" : "a084ef30fb0a2a25397d8fab439fe68f67e294bf53153e2e1355b8df92886d40fe6abe35dc84f014245f7158e92641bcbd98019b4fbbd9e5a0db495b160b4ced"
        },
        {
          "alg" : "SHA-384",
          "content" : "c8ccaa1fa8ba7c421413e3c30375bd9c31284e837c476fd831e18043ad4187e92166f49554123108891241bed674b95d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.apache.org/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTTPCLIENT"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "org.codehaus.jackson",
      "name" : "jackson-mapper-asl",
      "version" : "1.9.13",
      "description" : "Data Mapper package is a high-performance data binding package built on Jackson JSON processor",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1750f9c339352fc4b728d61b57171613"
        },
        {
          "alg" : "SHA-1",
          "content" : "1ee2f2bed0e5dd29d1cb155a166e6f8d50bbddb7"
        },
        {
          "alg" : "SHA-256",
          "content" : "74e7a07a76f2edbade29312a5a2ebccfa019128bc021ece3856d76197e9be0c2"
        },
        {
          "alg" : "SHA-512",
          "content" : "81cd7962fd9ee6d2354f5e44d23de1fa96d0da665b79a0f4ce6f8012bb4651683ae69b82daae3cf4feb101658a344bf4d665fefc3a57eca3a720761732963873"
        },
        {
          "alg" : "SHA-384",
          "content" : "d0f846e695d5ba34708b7d066a77b66c3f4c726300bd56f222b61b2c72cf35c95c98bfaf5cb99288a96aa54cc6f1d55c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.13?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://fasterxml.com"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/JACKSON"
        },
        {
          "type" : "vcs",
          "url" : "http://xircles.codehaus.org/projects/jackson/repos/primary/repo"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.13?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "org.codehaus.jackson",
      "name" : "jackson-core-asl",
      "version" : "1.9.13",
      "description" : "Jackson is a high-performance JSON processor (parser, generator)",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "319c49a4304e3fa9fe3cd8dcfc009d37"
        },
        {
          "alg" : "SHA-1",
          "content" : "3c304d70f42f832e0a86d45bd437f692129299a4"
        },
        {
          "alg" : "SHA-256",
          "content" : "440a9cb5ca95b215f953d3a20a6b1a10da1f09b529a9ddea5f8a4905ddab4f5a"
        },
        {
          "alg" : "SHA-512",
          "content" : "11725da54c7c18af0b50967a9317866ce9d11eb94d3b52ff7a54c6550070e143b5a582de9a8ebb6d61a8104f4dcd7ddb9c2e6f5c3605b6900d48f5241fe38d89"
        },
        {
          "alg" : "SHA-384",
          "content" : "26bff8b72770f734bac78e1ef2f575b26b7676895a4f022f402c99e38b567905ace700f553771606603f508b749bfb4f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://fasterxml.com"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/JACKSON"
        },
        {
          "type" : "vcs",
          "url" : "http://xircles.codehaus.org/projects/jackson/repos/primary/repo"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-codec",
      "name" : "commons-codec",
      "version" : "1.15",
      "description" : "The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "303baf002ce6d382198090aedd9d79a2"
        },
        {
          "alg" : "SHA-1",
          "content" : "49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d"
        },
        {
          "alg" : "SHA-256",
          "content" : "b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63"
        },
        {
          "alg" : "SHA-512",
          "content" : "da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787"
        },
        {
          "alg" : "SHA-384",
          "content" : "05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CODEC"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/commons-codec"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar"
    },
    {
      "publisher" : "Joda.org",
      "group" : "joda-time",
      "name" : "joda-time",
      "version" : "2.12.2",
      "description" : "Date and time library to replace JDK date handling",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "62b2ddc8dd3948b263779b05f43eab89"
        },
        {
          "alg" : "SHA-1",
          "content" : "78e18a7b4180e911dafba0a412adfa82c1e3d14b"
        },
        {
          "alg" : "SHA-256",
          "content" : "8d4d807adc8e92a83913d9ccd61e634b4907c78d88f3016d06b3b3d2b4795a02"
        },
        {
          "alg" : "SHA-512",
          "content" : "fea049a5733f0ce1d2e75eff9737a2fca4bd42f659f0a098c5be2edb7804f2b19543a100ce236149b07e8a8803c4aa646589b142c5f5c636699622a98b64732f"
        },
        {
          "alg" : "SHA-384",
          "content" : "fb358744f0b14c7bd7e717d0ab6baf760b521bd27e2d2c476782206b054b4a6263300f36723ddfb9373c36791e3d8e68"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/joda-time/joda-time@2.12.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.joda.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/content/repositories/joda-releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/JodaOrg/joda-time/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/JodaOrg/joda-time"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/joda-time/joda-time@2.12.2?type=jar"
    },
    {
      "publisher" : "Jodd",
      "group" : "org.jodd",
      "name" : "jodd-core",
      "version" : "3.5.2",
      "description" : "Jodd Core tools and utilities, including type converters, JDateTime, cache etc.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "22c37c2de6e254dff68b787da51e160e"
        },
        {
          "alg" : "SHA-1",
          "content" : "a9ac8028eeeb5fa430e17017628629c94123c401"
        },
        {
          "alg" : "SHA-256",
          "content" : "562478781548bd9cbdeef87f940967cf5cbcd5c1e6497a9056c8c89e603ec9be"
        },
        {
          "alg" : "SHA-512",
          "content" : "763b0e6da10d2f8c341a5c2340d59d3962119137cd7b02f211331b603197cea0c7621775ae4c09c02b758baf9c56797f7536e1dcbb9e976e2c531845fb4d90fb"
        },
        {
          "alg" : "SHA-384",
          "content" : "c0406543d8207af14b12e12ddaf556b0b1ba7973e499b0192271adca273f7633a4d7f331acb52c9863f17f93ff9bdcb5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.jodd/jodd-core@3.5.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jodd.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/oblac/jodd/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/oblac/jodd"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.jodd/jodd-core@3.5.2?type=jar"
    },
    {
      "group" : "com.google.code.findbugs",
      "name" : "jsr305",
      "version" : "3.0.0",
      "description" : "JSR305 Annotations for Findbugs",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "195d5db8981fbec5fa18d5df9fad95ed"
        },
        {
          "alg" : "SHA-1",
          "content" : "5871fb60dc68d67da54a663c3fd636a10a532948"
        },
        {
          "alg" : "SHA-256",
          "content" : "bec0b24dcb23f9670172724826584802b80ae6cbdaba03bdebdef9327b962f6a"
        },
        {
          "alg" : "SHA-512",
          "content" : "399510f759fb48255c6298f3545c9b644372fbc9d7245e80e6b51f49da0ac9275d104092c537ac047d5a1312c7d191dee8d655ca8d760b59ce1452bf4370a6e0"
        },
        {
          "alg" : "SHA-384",
          "content" : "a7fa7a0b69f41518fdb70e847148e17d0909fb657cee127308fb6cd14f913c63c82608aeae3955f10b48d358a8addfee"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://code.google.com/p/findbugs/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.0?type=jar"
    },
    {
      "group" : "org.datanucleus",
      "name" : "datanucleus-core",
      "version" : "4.1.17",
      "description" : "DataNucleus Core provides the primary components of a heterogenous Java persistence solution. It supports persistence API's being layered on top of the core functionality.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "56845c7af1890cde68d67c39f2d0e1d3"
        },
        {
          "alg" : "SHA-1",
          "content" : "c03898d49b506b60849fe1db39d04ab27fa15422"
        },
        {
          "alg" : "SHA-256",
          "content" : "adb64b5ec1837821e289fc82b04c13f6b5a2f1c68a24628bcec6a7c43b5f5bca"
        },
        {
          "alg" : "SHA-512",
          "content" : "b9b8bb43cdc876432793a85f50c0711661dc6aae563e18d4fd15be3495c3cec64f50d1c779ddd6cb46b6adbacdf8e2c51b322022146dcfcfdb1cfec45187ba93"
        },
        {
          "alg" : "SHA-384",
          "content" : "4341bf82943ead7348c5e6ff18c66f388418ecc52b857a6374a07a1f684deebd24538035af98086a525e7bedd09fe8c7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.datanucleus/datanucleus-core@4.1.17?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/datanucleus/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.datanucleus/datanucleus-core@4.1.17?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.hadoop",
      "name" : "hadoop-client-runtime",
      "version" : "3.3.4",
      "description" : "Apache Hadoop Client",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "64245768b537a07e4bf1687d1a9c4eaa"
        },
        {
          "alg" : "SHA-1",
          "content" : "21f7a9a2da446f1e5b3e5af16ebf956d3ee43ee0"
        },
        {
          "alg" : "SHA-256",
          "content" : "9377a68071137ae5f5c8cdc2ed20d6f904a1df4d06df26b47ed8872a1b0d8d47"
        },
        {
          "alg" : "SHA-512",
          "content" : "2d0442b3bcb04d18f2de036f5d189745b8866c14de72e5027901718f1100f5090fb14ece684cc8f93a9e2227645db5b13c4abd51c45a9b1156a0a82ebdde97d7"
        },
        {
          "alg" : "SHA-384",
          "content" : "bfc9ec036aebbb73f922cb9add74be3fa0dce8617e75d6bd94e7ba1b3173a9cf0e4195ed4a751015d90ed707845d1f70"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hadoop/hadoop-client-runtime@3.3.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.apache.org"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hadoop/hadoop-client-runtime@3.3.4?type=jar"
    },
    {
      "group" : "org.apache.thrift",
      "name" : "libthrift",
      "version" : "0.12.0",
      "description" : "Thrift is a software framework for scalable cross-language services development.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6a4a3db3b6674e59e2ed386372e5f04b"
        },
        {
          "alg" : "SHA-1",
          "content" : "300bfbee03c7afa77301fb0946115e400e28ae04"
        },
        {
          "alg" : "SHA-256",
          "content" : "28478ea7b296ff569aae07271ddaf1d2118bcb325495f25a2d323891cfc46c68"
        },
        {
          "alg" : "SHA-512",
          "content" : "418a7d712bf77043a31a272659a97ac6f514d94e879028a66a98d0fed024f20a434aeec878d03e11f73b6e34b146c62b2f0fe771abf7d9ec48a1292c558424e1"
        },
        {
          "alg" : "SHA-384",
          "content" : "acab3aceedb30a02c5b2217f33436159e8eed11a1f664bdefd7cb624a33d5c35ccb1420d8e6039cb2ee7f025c55418a5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.thrift/libthrift@0.12.0?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/thrift"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.thrift/libthrift@0.12.0?type=jar"
    },
    {
      "group" : "org.apache.thrift",
      "name" : "libfb303",
      "version" : "0.9.3",
      "description" : "Thrift is a software framework for scalable cross-language services development.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5e1c646346ecf2750a1b8b6cb2aa1c4f"
        },
        {
          "alg" : "SHA-1",
          "content" : "5d1abb695642e88558f4e7e0d32aa1925a1fd0b7"
        },
        {
          "alg" : "SHA-256",
          "content" : "23fc397a42181b17bb7d0fada2213735ed8db38cfbf038d12b9c00ea7419e11b"
        },
        {
          "alg" : "SHA-512",
          "content" : "e30ddf2b4651d08bfcf980f98263fa95cc0a37fb722a2972811c9f9437dbfba4ab20d81e142a991501a3c5409e2651c43b936321f85f1e5e9ab5ad55ca3d6a82"
        },
        {
          "alg" : "SHA-384",
          "content" : "f8650670a386fb6234e7ec70a8cbc12d257506359997e1b14de6833d94364ce003f7113606bfa88840586e9153b8e524"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.thrift/libfb303@0.9.3?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://git-wip-us.apache.org/repos/asf?p=thrift.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.thrift/libfb303@0.9.3?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.derby",
      "name" : "derby",
      "version" : "10.14.2.0",
      "description" : "Contains the core Apache Derby database engine, which also includes the embedded JDBC driver.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3ddcc1d435344d39d0122dbc2f39a746"
        },
        {
          "alg" : "SHA-1",
          "content" : "7efad40ef52fbb1f08142f07a83b42d29e47d8ce"
        },
        {
          "alg" : "SHA-256",
          "content" : "2c40eb581e5221ab33c7c796979b49ce404e7e393357c58f7bcdb30a09efca72"
        },
        {
          "alg" : "SHA-512",
          "content" : "b2a8b60df47bee2526783030cca53cab6e6c051d25cc3d2ee0a70b20dd21e1aa264be46585e0d38ded310f8431a6cf699910395274216f7d8f5fb597e92b176f"
        },
        {
          "alg" : "SHA-384",
          "content" : "21513267c7237af817977c4af13251bb76fa18362071b32541d407938c7d4118a96d062b6fb32831fbe342895fc4cf9c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.derby/derby@10.14.2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://db.apache.org/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/DERBY"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/db-derby-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewcvs.cgi/db/derby/code/trunk/?root=Apache-SVN"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.derby/derby@10.14.2.0?type=jar"
    },
    {
      "publisher" : "com.twitter",
      "group" : "com.twitter",
      "name" : "chill_2.12",
      "version" : "0.10.0",
      "description" : "chill",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a2cedd70ae6d7327696c24ff5464072d"
        },
        {
          "alg" : "SHA-1",
          "content" : "b208321208c0b3232a305fccd59df3d6a1f1eecd"
        },
        {
          "alg" : "SHA-256",
          "content" : "5cb5db46112699e6de681dedc0c1d0b300f5ccc2c0921b6bb3e4dba2e66c6fe6"
        },
        {
          "alg" : "SHA-512",
          "content" : "862d7d4c3de2d7cb94a6fa90dcec683e14c67944c6a542a30b7cf522b46c306fed6399dd300b5c4357fa7a9d6ce166081326c0800865af28dc5b7994d2577d66"
        },
        {
          "alg" : "SHA-384",
          "content" : "575c027e5be30fb1a43637ce7a4739b48c5c42418b6000f74477d2921d8d6db48420e510bbfa55d810b0207c1c017faf"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.twitter/chill_2.12@0.10.0?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/twitter/chill"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.twitter/chill_2.12@0.10.0?type=jar"
    },
    {
      "group" : "com.esotericsoftware",
      "name" : "kryo-shaded",
      "version" : "4.0.2",
      "description" : "Fast, efficient Java serialization. This is the parent pom that assembles the main kryo and shaded kryo artifacts.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "27717b481916c44eed34ea7a68782ed5"
        },
        {
          "alg" : "SHA-1",
          "content" : "e8c89779f93091aa9cb895093402b5d15065bf88"
        },
        {
          "alg" : "SHA-256",
          "content" : "a4899f57fef456b9ec66f730e7b493ecb3dc494cc5758721ed9c18416fd2d3b6"
        },
        {
          "alg" : "SHA-512",
          "content" : "21d3500194117f5f34951c7374bdde658be18b842866ea68f16ef47453d4dd31b11d384af2dab3ac4340b015b414402f6b45d4e6a10354fbda5bd8a17e4ce3e3"
        },
        {
          "alg" : "SHA-384",
          "content" : "33c8d09ba00c14a077e82f2d7c1a54496a21d20896505d1d97cd30f22d9cb773e060061abc43fc14f15b6619ba4f0c86"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.esotericsoftware/kryo-shaded@4.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/EsotericSoftware/kryo"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.esotericsoftware/kryo-shaded@4.0.2?type=jar"
    },
    {
      "group" : "com.esotericsoftware",
      "name" : "minlog",
      "version" : "1.3.0",
      "description" : "Minimal overhead Java logging",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5ab0ee168b90e0ad7010b159e603d304"
        },
        {
          "alg" : "SHA-1",
          "content" : "ff07b5f1b01d2f92bb00a337f9a94873712f0827"
        },
        {
          "alg" : "SHA-256",
          "content" : "f7b399d3a5478a4f3e0d98bd1c9f47766119c66414bc33aa0f6cde0066f24cc2"
        },
        {
          "alg" : "SHA-512",
          "content" : "ca319c94b7fd8a275dcc3c5102fc01d73071ac77f5e14b4fc5b6547f96574a4fff0e8cb7b0b0d5006e71faa00575a91defdbfc92a94d9d38dd65520d4ab52000"
        },
        {
          "alg" : "SHA-384",
          "content" : "3f9b5b7fd91332ad64d235024d486e24b00760e714713153a61f10e6867bc3e5b617a7bf0bed889a01f0cdb435415d6a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.esotericsoftware/minlog@1.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/EsotericSoftware/minlog"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.esotericsoftware/minlog@1.3.0?type=jar"
    },
    {
      "publisher" : "com.twitter",
      "group" : "com.twitter",
      "name" : "chill-java",
      "version" : "0.10.0",
      "description" : "chill-java",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3c0e9cbbb2016364333f2cea3922ae97"
        },
        {
          "alg" : "SHA-1",
          "content" : "0fd2eb52afd9ab4337c9e51823f41ad8916e6976"
        },
        {
          "alg" : "SHA-256",
          "content" : "52afd3c1256d6f89293ba616c0c9ebf11191bb9e8159cd0c1cfdc99e5e0c5ffe"
        },
        {
          "alg" : "SHA-512",
          "content" : "48ae455095f0a9ff7ed9b84c9b9bf339c14f6599703b7a34a473ea9c457b0ae700f793d6bf00d1af5e0eb307c9a68d2a10309faea77aaf2245afded08420cb8d"
        },
        {
          "alg" : "SHA-384",
          "content" : "7641e1570bd40b064e17c98c656b8b80680b36d2678973c53ea0557fb212d9ce535eda748cb7234813d953ef90e2cb8d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.twitter/chill-java@0.10.0?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/twitter/chill"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.twitter/chill-java@0.10.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.xbean",
      "name" : "xbean-asm9-shaded",
      "version" : "4.22",
      "description" : "Repackaged and shaded asm jars",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "492c7c98c236c36777a17d73394975e8"
        },
        {
          "alg" : "SHA-1",
          "content" : "58a5eae5fced0ee652754045f740bbca4f0d922a"
        },
        {
          "alg" : "SHA-256",
          "content" : "3430fa815503979b5a39bb70f18b41ba12ee2913c43f5d5c787005ffc4b424bb"
        },
        {
          "alg" : "SHA-512",
          "content" : "b7fe2738049b084ab1bf07ea335541928ffc455c663d7d532e992e73acea47fe7529193a95b89d8a6ce6a1749936b3a997e225b70c8c27bcf0ea2d0c250a64ac"
        },
        {
          "alg" : "SHA-384",
          "content" : "bff56a6d5b88e86a3c81fe536f39fdcbab5e1c1d49977b20339cc8f2a60cd098ce671865c0194be3d99eb26b9e53826d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.xbean/xbean-asm9-shaded@4.22?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/XBEAN"
        },
        {
          "type" : "mailing-list",
          "url" : "mailto:xbean-dev-subscribe@geronimo.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/geronimo-xbean.git"
        },
        {
          "type" : "website",
          "url" : "http://www.apache.org"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.xbean/xbean-asm9-shaded@4.22?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.hadoop",
      "name" : "hadoop-client-api",
      "version" : "3.3.4",
      "description" : "Apache Hadoop Client",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "775eddc3008e69e63b68440114b0f0f5"
        },
        {
          "alg" : "SHA-1",
          "content" : "6339a8f7279310c8b1f7ef314b592d8c71ca72ef"
        },
        {
          "alg" : "SHA-256",
          "content" : "e513d71b78086b5caaa439f4402b43e20df01446d56b66084ad419452878701c"
        },
        {
          "alg" : "SHA-512",
          "content" : "b8ba99015ffd22dae5e4dd900e25e1f56f535cb3bd56168d867b313f2ab797b5c12aa01c9fe0e2817b178a6c8f9a7b8afb3a291ec01f0c01a8d9b3c6f6b5b6b5"
        },
        {
          "alg" : "SHA-384",
          "content" : "6200dbba45d512975da88ff6acce21442f70c92514bb470a5bd704091692d0f69b42342d399fae406add7c4311f7ef75"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hadoop/hadoop-client-api@3.3.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.apache.org"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hadoop/hadoop-client-api@3.3.4?type=jar"
    },
    {
      "group" : "org.apache.spark",
      "name" : "spark-launcher_2.12",
      "version" : "3.4.3",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5cc99ce39e169da244e8195cedc94bb4"
        },
        {
          "alg" : "SHA-1",
          "content" : "070ca099b9428df7874eab19999da47658f11772"
        },
        {
          "alg" : "SHA-256",
          "content" : "d4d146f4ef086c2d28ba3c1291af6114643fd1ff5c3abaad97df2eb14d16a9ce"
        },
        {
          "alg" : "SHA-512",
          "content" : "2c89f50d1f7a93189ca97a48d6a453849b7258d849a0ac082e92a990fe45dbd2e0d2424ff6a5bd40c6f0bfcc58c4da93bc982d145989e73330ec5954f7fd70c2"
        },
        {
          "alg" : "SHA-384",
          "content" : "025fa9df49de4edfd2ed990c64841fbb5744a6661ba7522c73c22f1782116e934234695a6131c4014d1ca713ad5e881c"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.apache.spark/spark-launcher_2.12@3.4.3?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.spark/spark-launcher_2.12@3.4.3?type=jar"
    },
    {
      "group" : "org.apache.spark",
      "name" : "spark-kvstore_2.12",
      "version" : "3.4.3",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "65e2e439a3aa99b27f3773182600849d"
        },
        {
          "alg" : "SHA-1",
          "content" : "3f041117fb6ec8944b978cc0ed412e236d925c6c"
        },
        {
          "alg" : "SHA-256",
          "content" : "b597e77112e5ea5c9f35fd9a36e23ef165aab814d9cc5473b5570ba4843d3f2f"
        },
        {
          "alg" : "SHA-512",
          "content" : "6c11d878b259cafba6491a957f1d0e71ef6303ccf4369ad7002e670ca22653acd2ee21e97363260ff1e5186d07bcd8ccd57162c94080b03f359237b7f9911d8d"
        },
        {
          "alg" : "SHA-384",
          "content" : "d4715693713bf21102a45ad3285e2ac1a8bed8c3884fb24038dbd7cc0a23696d13a0a4325992c9424379f5220a7f398c"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.apache.spark/spark-kvstore_2.12@3.4.3?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.spark/spark-kvstore_2.12@3.4.3?type=jar"
    },
    {
      "publisher" : "FuseSource, Corp.",
      "group" : "org.fusesource.leveldbjni",
      "name" : "leveldbjni-all",
      "version" : "1.8",
      "description" : "An uber jar which contains all the leveldbjni platform libraries and dependencies",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6944e9bc03c7938868e53c96726ae914"
        },
        {
          "alg" : "SHA-1",
          "content" : "707350a2eeb1fa2ed77a32ddb3893ed308e941db"
        },
        {
          "alg" : "SHA-256",
          "content" : "c297213b0e6f9392305952753f3099a4c02e70b3656266fe01867e7b6c160ffe"
        },
        {
          "alg" : "SHA-512",
          "content" : "2e9f806af5d89c00e345b4516ffd325893a07f30c87274fa5b8ce314aad021633750b665d8c338fbf5adc79a527e19caf96d0b12af57e56fb8d3d8f7fd845a96"
        },
        {
          "alg" : "SHA-384",
          "content" : "f10d7ce88da5a9fada67fcbf6fc02939346e67428ee5dd7b000f884d8046131391ee1ece83885d3de60532d1227a66f2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.fusesource.leveldbjni/leveldbjni-all@1.8?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/fusesource/leveldbjni/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/fusesource/leveldbjni"
        },
        {
          "type" : "website",
          "url" : "http://fusesource.com/"
        },
        {
          "type" : "distribution",
          "url" : "http://repo.fusesource.com/nexus/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.fusesource.leveldbjni/leveldbjni-all@1.8?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-annotations",
      "version" : "2.14.2",
      "description" : "Core annotations used for value types, used by Jackson data binding package.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "10d19982a8890f6eb37557af2f58e272"
        },
        {
          "alg" : "SHA-1",
          "content" : "a7aae9525864930723e3453ab799521fdfd9d873"
        },
        {
          "alg" : "SHA-256",
          "content" : "2c6869d505cf60dc066734b7d50339f975bd3adc635e26a78abb71acb4473c0d"
        },
        {
          "alg" : "SHA-512",
          "content" : "a978384791bdc074df8039ffc95bb93f0f60d14d476861ee2a0ce208b33a991c486a07345cb80559252c3ff1dea14d3efb818c19bdc18435946dc8754d8e6ee3"
        },
        {
          "alg" : "SHA-384",
          "content" : "d5111c69020666689414921ae4a8950f9fbdf86dec1360f6827beeee9ebd3f78db74e69c76e0becaba47eb34fdaaeb5a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-annotations"
        },
        {
          "type" : "website",
          "url" : "http://fasterxml.com/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar"
    },
    {
      "group" : "org.apache.spark",
      "name" : "spark-network-common_2.12",
      "version" : "3.4.3",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "de4b3b98d4a6377b23885010bffced04"
        },
        {
          "alg" : "SHA-1",
          "content" : "9052279dafd0156635e164a8169572aee40862d1"
        },
        {
          "alg" : "SHA-256",
          "content" : "bacfe7029156222ad14c9d60c0e70bf813dcffe6c18167a677772a095174acf4"
        },
        {
          "alg" : "SHA-512",
          "content" : "5ee969079af57210a2f0a6527ec12dc9599510daf5006772df2a7e76a1e2475c4636f0999e360d3036c436f05a2478af842eca3073e86e7e122243090edf0263"
        },
        {
          "alg" : "SHA-384",
          "content" : "4e8a3083010e19f1e9baa91a4d46a0e695f93148f2f3f6c1f3322090f846b095f60d6160209446f11731977c24e91e76"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.apache.spark/spark-network-common_2.12@3.4.3?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.spark/spark-network-common_2.12@3.4.3?type=jar"
    },
    {
      "group" : "com.google.crypto.tink",
      "name" : "tink",
      "version" : "1.7.0",
      "description" : "Tink is a small cryptographic library that provides a safe, simple, agile and fast way to accomplish some common cryptographic tasks.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1ef218f7da13ce7cfd2c926004fe0611"
        },
        {
          "alg" : "SHA-1",
          "content" : "668b57f109d32349b2870448f06ae6f202713edc"
        },
        {
          "alg" : "SHA-256",
          "content" : "88970a456a08ba4c66b01b23e5846ca1095cc14e54cb48363e5d2e15a1307308"
        },
        {
          "alg" : "SHA-512",
          "content" : "bcc1da6501249bdcd4b8053b7220175ed922887240358ed6e6846b1cfdba813ee9c854877065b3e9540a4c456eccd5841d5a485eee6d0228cf838f2b9cce1037"
        },
        {
          "alg" : "SHA-384",
          "content" : "21f0cff903d9607d1eae0efb41cf8bb845d60a750d99295d8e603579cdbf6b151200b05b1bb26752151bc54afb17580b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.crypto.tink/tink@1.7.0?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/tink/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/group/tink-users"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/tink.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.crypto.tink/tink@1.7.0?type=jar"
    },
    {
      "group" : "org.apache.spark",
      "name" : "spark-network-shuffle_2.12",
      "version" : "3.4.3",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "23cb7963f842875976b02e93fb6fda7b"
        },
        {
          "alg" : "SHA-1",
          "content" : "ef21a1343d17a76393289a8bf1e4d9854548696b"
        },
        {
          "alg" : "SHA-256",
          "content" : "84ff6f1c5f0b7d8edc2847a3c553ca050fc2992d9e4d52e1f86c10c766c1e649"
        },
        {
          "alg" : "SHA-512",
          "content" : "6da3ad2dbd2c60078f33f7205951a1700aab262123c7814b805fa5c789aa4972cb66f31a8cb31fecc30ca427b0d60be4eee55020a460086c18752f8f11d122f8"
        },
        {
          "alg" : "SHA-384",
          "content" : "e1ff1bcdaceb008b8602b66c099aed22eec861f2879fa12f76361f2a72d2d3ea69a44d0dfd4c1ae1803778cbdeba91da"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.apache.spark/spark-network-shuffle_2.12@3.4.3?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.spark/spark-network-shuffle_2.12@3.4.3?type=jar"
    },
    {
      "group" : "org.apache.spark",
      "name" : "spark-unsafe_2.12",
      "version" : "3.4.3",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2a1be470fb3f48f2bbdd37be0fc92373"
        },
        {
          "alg" : "SHA-1",
          "content" : "aa659d3830a8c1972cb062a12657f68ef26a52ea"
        },
        {
          "alg" : "SHA-256",
          "content" : "1a37c82970315b3fd06764185f8e4a78b5961ea8313351b1a1b34bd59fdddf85"
        },
        {
          "alg" : "SHA-512",
          "content" : "ca8626f6ceb1c54c3a43843d02a4ad5bbc3a29fc72cd3915474986fa92393e0b3fa2a57b68dd29eccd247b9f90a43bb3c8d34d3bf8d4e3a7168ecf878e32489c"
        },
        {
          "alg" : "SHA-384",
          "content" : "c8fb3256eebb50577480e4109eba8e05380b895750bc883435b679e159bd32768b3477b8ca889a842b640866c6753c38"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.apache.spark/spark-unsafe_2.12@3.4.3?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.spark/spark-unsafe_2.12@3.4.3?type=jar"
    },
    {
      "group" : "javax.activation",
      "name" : "activation",
      "version" : "1.1.1",
      "description" : "The JavaBeans(TM) Activation Framework is used by the JavaMail(TM) API to manage MIME data",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "46a37512971d8eca81c3fcf245bf07d2"
        },
        {
          "alg" : "SHA-1",
          "content" : "485de3a253e23f645037828c07f1d7f1af40763a"
        },
        {
          "alg" : "SHA-256",
          "content" : "ae475120e9fcd99b4b00b38329bd61cdc5eb754eee03fe66c01f50e137724f99"
        },
        {
          "alg" : "SHA-512",
          "content" : "49119b0cc3af02700685a55c6f15e6d40643f81640e642b9ea39a59e18d542f8837d30b43b5be006ce1a98c8ec9729bb2165c0442978168f64caa2fc6e3cb93d"
        },
        {
          "alg" : "SHA-384",
          "content" : "021f29ab14a1db9b27e31778fd5b6ead2ed46fef534cfab6b34b1b839547c78fc39cfb1568f0b2206bb46a98c4b9e1d4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/javax.activation/activation@1.1.1?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.activation/activation@1.1.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.curator",
      "name" : "curator-recipes",
      "version" : "2.13.0",
      "description" : "All of the recipes listed on the ZooKeeper recipes doc (except two phase commit).",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "02685a8f2e44faa1941e953ac426a8d7"
        },
        {
          "alg" : "SHA-1",
          "content" : "1e6d5cf7b18a402f5d52785877010711538d68a0"
        },
        {
          "alg" : "SHA-256",
          "content" : "22be05c1a3e6c5ede22e77372b08dc631a3b93b64acb7f682537ea65a6ddba06"
        },
        {
          "alg" : "SHA-512",
          "content" : "498ce3631ef135b96b467cd3c4fa8ac1797538047589b1454911ec77a5205773346a367492db0771167e8f612c911bac44c8c7c651be00e206eb60e2f0bba2f7"
        },
        {
          "alg" : "SHA-384",
          "content" : "08a4134a208a2c59b0354e5d4e88b29f0f2f4f0bd0b83a6ccd54da70602499a8dedd5711d5481c23ba8782049cdb546c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.curator/curator-recipes@2.13.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.apache.org/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Curator/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/CURATOR"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/curator-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/curator.git"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.curator/curator-recipes@2.13.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.curator",
      "name" : "curator-framework",
      "version" : "2.13.0",
      "description" : "High-level API that greatly simplifies using ZooKeeper.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "91e34b86afb44ef5c728f69ed9790f1d"
        },
        {
          "alg" : "SHA-1",
          "content" : "d45229aee7d3f1f628a34fcac9b66ed5ba52c31f"
        },
        {
          "alg" : "SHA-256",
          "content" : "db084e5e0fed0548a8128f12a3e7a15c875c9595e75316c9578d64e77375c4a9"
        },
        {
          "alg" : "SHA-512",
          "content" : "7a9d520b5668ada07d05435f5632ab24d11bb079338388f43668960a3181d665568a2ef4a73222870362a84e1eeb59ef9ebf171bbcfdd7216735821328287798"
        },
        {
          "alg" : "SHA-384",
          "content" : "bf989371e089766e2bc00589c4ce3419382cfe5da67f1c815604653d59a6429642a6e9008c64a2d09d6398816c527d32"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.curator/curator-framework@2.13.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.apache.org/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Curator/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/CURATOR"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/curator-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/curator.git"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.curator/curator-framework@2.13.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.curator",
      "name" : "curator-client",
      "version" : "2.13.0",
      "description" : "Low-level API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ca2c6ca2277e78d1f6b865ee82e10357"
        },
        {
          "alg" : "SHA-1",
          "content" : "a1974d9b3251c055408059b2f408d19d7db07224"
        },
        {
          "alg" : "SHA-256",
          "content" : "62ab2201b5b9af63b215a4e6829dbe7d553a0805cfb0b1a665f9b49da8270c51"
        },
        {
          "alg" : "SHA-512",
          "content" : "72909bbf56f63fb7afba996336e7270ae08010976b4bb3b8bb90269d53fde78c63f8131a941ebb7cc554981a522f15e2b2a9ec63387d77f7117e5a1ed0b8c028"
        },
        {
          "alg" : "SHA-384",
          "content" : "57d338248aa56fa86aab71303a2746c7e4f061a18029a096f99bdadb7a87152f5067e1955aa2acb928edbcac0631b613"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.curator/curator-client@2.13.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.apache.org/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Curator/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/CURATOR"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/curator-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/curator.git"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.curator/curator-client@2.13.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.zookeeper",
      "name" : "zookeeper",
      "version" : "3.6.3",
      "description" : "ZooKeeper server",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a87ec9c2634be7babf2328e1a0a03202"
        },
        {
          "alg" : "SHA-1",
          "content" : "a6e74f826db85ff8c51c15ef0fa2ea0b462aef25"
        },
        {
          "alg" : "SHA-256",
          "content" : "ac44de96d37a80d463c1e01aaa2ea86b19490fa17a37438d14491456c0e4a911"
        },
        {
          "alg" : "SHA-512",
          "content" : "086683a17870535c0f66a6ca531e92c325a2a46b37d56fa15d6d7c8b00d01ac299ef2023a3a082879adf693a3dbbe3515009dd33a724f81d1ea71bda0f78ee04"
        },
        {
          "alg" : "SHA-384",
          "content" : "cf7739ec3208302c68c15bc7221ce12158a79dadac990b309cc0405bf5321ad7b7b9183326f9d066774bc6fdba1cb41c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.zookeeper/zookeeper@3.6.3?type=jar",
      "externalReferences" : [
        {
          "type" : "build-system",
          "url" : "https://ci-hadoop.apache.org/view/ZooKeeper/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/ZOOKEEPER"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/zookeeper-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/zookeeper.git"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.zookeeper/zookeeper@3.6.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.zookeeper",
      "name" : "zookeeper-jute",
      "version" : "3.6.3",
      "description" : "ZooKeeper jute",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7c44c4104a0da46b666562400a4a2c82"
        },
        {
          "alg" : "SHA-1",
          "content" : "8990d19ec3db01f45f82d4011a11b085db66de05"
        },
        {
          "alg" : "SHA-256",
          "content" : "6f463ade2b777f81e6c3e145b3fc03d4b39131b73dcf8c7f4b89ac4b1bacc9c5"
        },
        {
          "alg" : "SHA-512",
          "content" : "775ac90d270d3ddfb902a83abc5192fafb0b6837914112124f768419a2a92249c9f49d5a08cdcc530da10442ee0419051353b04dc22c2c26d55ddb7df528b215"
        },
        {
          "alg" : "SHA-384",
          "content" : "85cf71ac9cb3479ab819c9ddb42b904377a67a177e5e92664898138021bf5f0622332ba2e247ac0f87c8b7812e3c9b1a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.zookeeper/zookeeper-jute@3.6.3?type=jar",
      "externalReferences" : [
        {
          "type" : "build-system",
          "url" : "https://ci-hadoop.apache.org/view/ZooKeeper/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/ZOOKEEPER"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/zookeeper-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/zookeeper.git"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.zookeeper/zookeeper-jute@3.6.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.yetus",
      "name" : "audience-annotations",
      "version" : "0.5.0",
      "description" : "Annotations for defining API boundaries and tools for managing javadocs",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "032788f0841d26b027957fe91f2cd696"
        },
        {
          "alg" : "SHA-1",
          "content" : "55762d3191a8d6610ef46d11e8cb70c7667342a3"
        },
        {
          "alg" : "SHA-256",
          "content" : "c82631f06c75d46bf6524d95f0d6c2e3aef1b3eb4a7b584ca296624ef0d474be"
        },
        {
          "alg" : "SHA-512",
          "content" : "7c05f699ba6d63053d513dfc1bdd893f5a76f9973d2bf366c31a5eb99f9954521cb58db0f7d1274fddf2dd39dacbcde6907d5ffc8afc728c91817d2e99ee2a96"
        },
        {
          "alg" : "SHA-384",
          "content" : "3e2b37e3c3e11a760663b9e4c08c5227d08c3d0924f581284d20afb9361bfb58e4052c255cb5f647b1ae1a2bffc3d10c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.yetus/audience-annotations@0.5.0?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/YETUS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/yetus-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://git-wip-us.apache.org/repos/asf?p=yetus.git"
        },
        {
          "type" : "website",
          "url" : "http://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.yetus/audience-annotations@0.5.0?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-plus",
      "version" : "9.4.54.v20240208",
      "description" : "Jetty JavaEE style services",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "582a5cfc7b9456963ef08e59bb4e5f01"
        },
        {
          "alg" : "SHA-1",
          "content" : "35b84d9254be9c39b84e53ba1648e046fb8169ed"
        },
        {
          "alg" : "SHA-256",
          "content" : "84f0ed08eb0d8ccc52fdba42a9bb131c91c02933ecda8111178ebde16f41562f"
        },
        {
          "alg" : "SHA-512",
          "content" : "95b5d834bb8e546a8f9c30930bcc82095fc8cfc656b1d8fc7dcac1aa6e94e6272bceb9099a1f6545cb0c2f3093283b21b5f115addedd962a49b0d7b38c1e9dbd"
        },
        {
          "alg" : "SHA-384",
          "content" : "d81be1400c23eec8f7bbf3c22fd5e7c042960fb4aec2c2428447e1005118253823238771aff61c5c880e17cd64d2108a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-plus@9.4.54.v20240208?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://webtide.com"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/jetty.project"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-plus@9.4.54.v20240208?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-webapp",
      "version" : "9.4.54.v20240208",
      "description" : "Jetty web application support",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ae059f8ffd898c00d9d20b3f5be5afe0"
        },
        {
          "alg" : "SHA-1",
          "content" : "282bdc2f7e50634c8f807b6df611c3bf07d15c0b"
        },
        {
          "alg" : "SHA-256",
          "content" : "46e934cafe13ad32163e762a20b568646c84c617dd969cc067e1f7eb6ff1bd98"
        },
        {
          "alg" : "SHA-512",
          "content" : "7728d168124b7963a8fdef5831df31d7cf937effec84b3840c8123be81ec3d1bcd49503ea7e89320f23bb39ec07bd9cb8616eebf6ce3844b5ec6596eb7853608"
        },
        {
          "alg" : "SHA-384",
          "content" : "4984d9a9c8f0d741013e02c7d4257222ae1b6006429dd8c914820ace556fe4b6f59a5df1fac9466b79871e86e313ca42"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-webapp@9.4.54.v20240208?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://webtide.com"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/jetty.project"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-webapp@9.4.54.v20240208?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-xml",
      "version" : "9.4.54.v20240208",
      "description" : "The jetty xml utilities.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "24f649c6639edec2e40fe08933e08968"
        },
        {
          "alg" : "SHA-1",
          "content" : "ed0947ebe09a202d0ab4aecf3a8d2a94151674af"
        },
        {
          "alg" : "SHA-256",
          "content" : "42b67d0d40ba0cfd9d047aae81a79a98ec759d872d1f8cfe0f6b9933dc1ea066"
        },
        {
          "alg" : "SHA-512",
          "content" : "056c7e36a2c10a4aa109335addabc6f5d5c4a5a65b9728e0c8c424ceb0b10b4b169d83d74199a282debeea8094e2ff63360e9495efbd92ea9937b861d224f1d3"
        },
        {
          "alg" : "SHA-384",
          "content" : "2fe95336cf15fa71d6879e7b9d042bd8d2f2dd959dafd5cf18f96be4ceaf2bb01a628e7ba6388a9c3e012e9616080adb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-xml@9.4.54.v20240208?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://webtide.com"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/jetty.project"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-xml@9.4.54.v20240208?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-jndi",
      "version" : "9.4.54.v20240208",
      "description" : "JNDI spi impl for java namespace.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "54590b0ecf2dc597c437554a2cdd7dd0"
        },
        {
          "alg" : "SHA-1",
          "content" : "b07ba3d888d06092a75c96ce8a052a4b4896b825"
        },
        {
          "alg" : "SHA-256",
          "content" : "3cd4772c241ed04fbe21e6c34712aa7010dfdd31e30f0177c3f9212340fac53c"
        },
        {
          "alg" : "SHA-512",
          "content" : "ff83e49e3bd14a4ee345e81d29f78f193bcd8acfdde9a0037c5b53292388b9e3f729104a492c32577a900b259e5edb0e3ce593f40bdb936be2d619d47ba53f6b"
        },
        {
          "alg" : "SHA-384",
          "content" : "7a9dee59159b524618cf7771392ea5979b5c547b80323b66dd6cd5f0db1e16a2208a355fb23d1510e799b635a07dfd59"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-jndi@9.4.54.v20240208?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://webtide.com"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/jetty.project"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-jndi@9.4.54.v20240208?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-security",
      "version" : "9.4.54.v20240208",
      "description" : "Jetty security infrastructure",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fb9cb76cbacca32156f2269ad0b4d840"
        },
        {
          "alg" : "SHA-1",
          "content" : "7bf0247b413feefce4a18f50c68d7b9e41beaf30"
        },
        {
          "alg" : "SHA-256",
          "content" : "7d17ec768603c33746f9f6f98849d7c9f8bc439a53d9e247702e19cea6c75ec8"
        },
        {
          "alg" : "SHA-512",
          "content" : "6f580991c6478dce1a0cc99279b990bb6d71e815046b06fcb4b0863b8e5b5ba251ecd934dee7d400de64ca71b9ef0e31b17897173ab6538296f33adb59b8317b"
        },
        {
          "alg" : "SHA-384",
          "content" : "1790ac683c0de9888caf24af9cc8e5dd7785f0a9c260211e55d257e362b3a320fa8f5752c85d2207136fe2c8d5273ec0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-security@9.4.54.v20240208?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://webtide.com"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/jetty.project"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-security@9.4.54.v20240208?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-util",
      "version" : "9.4.54.v20240208",
      "description" : "Utility classes for Jetty",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "54404a63c29167408bd6a394b2cd1363"
        },
        {
          "alg" : "SHA-1",
          "content" : "8da375769a8fe4a32ec52cc2c9ac68f1eb843588"
        },
        {
          "alg" : "SHA-256",
          "content" : "0025f8470828d60dc93e6b5c33c015630b6b05a23afa8173ee7e60b928a4521e"
        },
        {
          "alg" : "SHA-512",
          "content" : "fbe9cf7efeba9f29297f75de3f1c2d98f0e02816a1dc9e6eaddcabb84c3a699a9332218c532017a3707ec57f4f99066bc671708bde4ec84dd873b8403422d7e9"
        },
        {
          "alg" : "SHA-384",
          "content" : "8ff35a1bea1eb199c0abdbdd1d14ffc075f9de1aac160fe2e7b8f0b7b297513c09484575fcd4b5ef6f33f9bc93f280c7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-util@9.4.54.v20240208?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://webtide.com"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/jetty.project"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-util@9.4.54.v20240208?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-http",
      "version" : "9.4.54.v20240208",
      "description" : "The Eclipse Jetty Project",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "057ddc7abad3b9ce93ee1542cd78cfbc"
        },
        {
          "alg" : "SHA-1",
          "content" : "a641b8a694eeefdde64404011471710e51352276"
        },
        {
          "alg" : "SHA-256",
          "content" : "90e44ea0dba911fe23b7cc4554ea8761e92dfd803401e3888fe6eb10a07944e7"
        },
        {
          "alg" : "SHA-512",
          "content" : "6e1d6fdffcb2acf8daa9ce5b3ad973526a30b3556dc8e950254c68c64cd70e101b28a8acac41b3bd74de6b9c8eac10676afdc3c58ccb1f61a74323721592e0b5"
        },
        {
          "alg" : "SHA-384",
          "content" : "198cab7ff218d1cb3d4a0fb4863e46860e48ccc4e34a1ca0ec1ff1c1e54bb7a3b71c924081727d125728bbb1e528071f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-http@9.4.54.v20240208?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://webtide.com"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/jetty.project"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-http@9.4.54.v20240208?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-continuation",
      "version" : "9.4.54.v20240208",
      "description" : "Asynchronous API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c12a905f97bd9a4f61d99ffa08d06bd7"
        },
        {
          "alg" : "SHA-1",
          "content" : "825633efcd0952221bf54b036c069218e9a3b20f"
        },
        {
          "alg" : "SHA-256",
          "content" : "4a1a19c08fbd64cd10813af4a16e9be5aad75d68fa4e3747e798343bbaf7af6b"
        },
        {
          "alg" : "SHA-512",
          "content" : "295e791e0e1797bac1ea5bef6924ccc0c271153f9833ebc1b162fbc49d6e7faf80438037fe8131c9e014c55ef942ce46a0771bd15651008bf8e339e3395d3c15"
        },
        {
          "alg" : "SHA-384",
          "content" : "b0d2613fed1e26b9eeb3a8930d96a914adf0c8dfe2e66c09a23b9d259e137d37427c6f677971479e0d66ce9a88f0efc0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-continuation@9.4.54.v20240208?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://webtide.com"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/jetty.project"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-continuation@9.4.54.v20240208?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-proxy",
      "version" : "9.4.54.v20240208",
      "description" : "Jetty Proxy",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a71c9833893e73c3f47584b6a34ad6bf"
        },
        {
          "alg" : "SHA-1",
          "content" : "19dc8ba4abf3a17af8eb57dcd499d0834a84f29e"
        },
        {
          "alg" : "SHA-256",
          "content" : "cfe3bebeff0f19fa608ccb7c7ec95f2e530550d01fbbc999ef35dff99407f2ff"
        },
        {
          "alg" : "SHA-512",
          "content" : "7f48a89fe3bc9fa16982e4b87d58262f78e1a9c6961c2cb85855f072f7e7de38f3efadf65d53bb320160f057c41047c35fc76811a6a39509ca888a3dec19dd03"
        },
        {
          "alg" : "SHA-384",
          "content" : "7d92bb5e8a377fa73c8b793cfec3dd45b526dcd2a467020539fb92397e9cec4c4405107f75ab249b112a1cb01dd42e9f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-proxy@9.4.54.v20240208?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://webtide.com"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/jetty.project"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-proxy@9.4.54.v20240208?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-client",
      "version" : "9.4.54.v20240208",
      "description" : "The Eclipse Jetty Project",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f413bb21b4e8f9bcc9a39f2371726957"
        },
        {
          "alg" : "SHA-1",
          "content" : "43674b6a6f7aa249f145728002d00f3f220e88be"
        },
        {
          "alg" : "SHA-256",
          "content" : "4d3c30e98238a66179a04dc1cdb7fe851b6e6ff152ed51a88f31b44c36a23f96"
        },
        {
          "alg" : "SHA-512",
          "content" : "ccfdf2f7cf773f4f131caa2709e167a7d2dd2a926062b1df0034eceaba9d878fb792dc2874402be133dda72fc8395cc1919919b6df0e4a582c62d50522926e91"
        },
        {
          "alg" : "SHA-384",
          "content" : "17cda449a41f39530180dfcc48f5493f68ecfad5d1f310ecdfd0d0c5a9f31394dcc50e16f1654431dcf1e4f50ce911d0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-client@9.4.54.v20240208?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://webtide.com"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/jetty.project"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-client@9.4.54.v20240208?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-servlets",
      "version" : "9.4.54.v20240208",
      "description" : "Utility Servlets from Jetty",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1c039f905657097caf781e1887000666"
        },
        {
          "alg" : "SHA-1",
          "content" : "27ebb82b6b96ebbaee209ccc83f33ef683cc9913"
        },
        {
          "alg" : "SHA-256",
          "content" : "5c18b31c4c9addc24e68ac5ded23ca8131180a4d9d2f2cea0dabfcdf9f9736a7"
        },
        {
          "alg" : "SHA-512",
          "content" : "7250c7f1a0a359ea60f4500f5106d4283cce0f1b3b3078c7a227720731fddd6425f704ee1b1a96a3946b9e6acf7bc0e47086f1ae6487b4dcb8c6041a02eb4d99"
        },
        {
          "alg" : "SHA-384",
          "content" : "3f0264ff1fe579636c5fd62ddfeeeb92619b590df97d74569b8aba86e8674b2947e751ebcc6ca1a517cce74007e3ce33"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-servlets@9.4.54.v20240208?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://webtide.com"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/jetty.project"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-servlets@9.4.54.v20240208?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.servlet",
      "name" : "jakarta.servlet-api",
      "version" : "4.0.3",
      "description" : "Eclipse Enterprise for Java (EE4J) is an open source initiative to create standard APIs, implementations of those APIs, and technology compatibility kits for Java runtimes that enable development, deployment, and management of server-side and cloud-native applications.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "193258b1056435dba7919a978052cd81"
        },
        {
          "alg" : "SHA-1",
          "content" : "7c810f7bca93d109bac3323286b8e5ec6c394e12"
        },
        {
          "alg" : "SHA-256",
          "content" : "6d93010ca93301383c5ca960d55611a5c91798da1efb0f1fe9356f27831bf499"
        },
        {
          "alg" : "SHA-512",
          "content" : "7d8165cac1ef46736d49a69875c0239d41ffeeac5d2818eb531572eaa95910814de8278a3be633ec00f205685644deb646e773323b42562a82af71bd64d06fdb"
        },
        {
          "alg" : "SHA-384",
          "content" : "ca4b813b8e6bb9e4712edb5141b75199fd68c3d6e9cac01a62566bcd73ab5c39e118840b10d19a062e422c844c8bbf17"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.servlet/jakarta.servlet-api@4.0.3?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/servlet-api/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/servlet-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/servlet-api"
        },
        {
          "type" : "website",
          "url" : "https://www.eclipse.org"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.servlet/jakarta.servlet-api@4.0.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-compress",
      "version" : "1.22",
      "description" : "Apache Commons Compress software defines an API for working with compression and archive formats. These include: bzip2, gzip, pack200, lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f1e4db16fee4291212d91409313a8086"
        },
        {
          "alg" : "SHA-1",
          "content" : "691a8b4e6cf4248c3bc72c8b719337d5cb7359fa"
        },
        {
          "alg" : "SHA-256",
          "content" : "53d04a0efc7223baecaa303bd5d298eb0600e6b82b4076f9cecd558b97ba760b"
        },
        {
          "alg" : "SHA-512",
          "content" : "2d64fa6cd081fff5d73ee662a82f6186991fc13b4bdaee18b5f1bdcab06d9acb70e3713d18b296337791448251fbd6768bd84afaa817a10547652d0cfa885563"
        },
        {
          "alg" : "SHA-384",
          "content" : "295d7f69d151abbd784e1c4d021c77ce43e129bb5bda0c55762b32d77c8607863383297674ec8a212ea3dfe4007b0044"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-compress@1.22?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/COMPRESS"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-compress.git"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-compress@1.22?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.12.0",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "19fe50567358922bdad277959ea69545"
        },
        {
          "alg" : "SHA-1",
          "content" : "c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e"
        },
        {
          "alg" : "SHA-256",
          "content" : "d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e"
        },
        {
          "alg" : "SHA-512",
          "content" : "fbdbc0943cb3498b0148e86a39b773f97c8e6013740f72dbc727faeabea402073e2cc8c4d68198e5fc6b08a13b7700236292e99d4785f2c9989f2e5fac11fd81"
        },
        {
          "alg" : "SHA-384",
          "content" : "c34b8a0e0eba2168ad56fedeb7a1d710b6f1d3f1ce6aae99a4e0247bd120efbbadc8dcb2f731045b8a16e3efd30604dc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-lang.git"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-math3",
      "version" : "3.6.1",
      "description" : "The Apache Commons Math project is a library of lightweight, self-contained mathematics and statistics components addressing the most common practical problems not immediately available in the Java programming language or commons-lang.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5b730d97e4e6368069de1983937c508e"
        },
        {
          "alg" : "SHA-1",
          "content" : "e4ba98f1d4b3c80ec46392f25e094a6a2e58fcbf"
        },
        {
          "alg" : "SHA-256",
          "content" : "1e56d7b058d28b65abd256b8458e3885b674c1d588fa43cd7d1cbb9c7ef2b308"
        },
        {
          "alg" : "SHA-512",
          "content" : "8bc2438b3b4d9a6be4a47a58410b2d4d0e56e05787ab24badab8cbc9075d61857e8d2f0bffedad33f18f8a356541d00f80a8597b5dedb995be8480d693d03226"
        },
        {
          "alg" : "SHA-384",
          "content" : "95d1186d9ca06a3ea2e6437ddec3a55698e2493d3e72f6f554746b74fa929892bd71a2ab501a4e7b1ce56b7cd64e7ab4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/MATH"
        },
        {
          "type" : "vcs",
          "url" : "https://git-wip-us.apache.org/repos/asf?p=commons-math.git"
        },
        {
          "type" : "build-system",
          "url" : "https://continuum-ci.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "http://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-text",
      "version" : "1.10.0",
      "description" : "Apache Commons Text is a library focused on algorithms working on strings.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4afc9bfa2d31dbf7330c98fcc954b892"
        },
        {
          "alg" : "SHA-1",
          "content" : "3363381aef8cef2dbc1023b3e3a9433b08b64e01"
        },
        {
          "alg" : "SHA-256",
          "content" : "770cd903fa7b604d1f7ef7ba17f84108667294b2b478be8ed1af3bffb4ae0018"
        },
        {
          "alg" : "SHA-512",
          "content" : "afd836a1094449e0a791fee67363666c47b6d24acff353a5089b837b332c0f4af89565c354682521e37062d20e6b52d70c77bb4f24cca9b9532c274fc708a831"
        },
        {
          "alg" : "SHA-384",
          "content" : "06c56e6e513dd77cf10d0da46cdea08c34e220e81fa024735b668c6650df4234e564fe865ff5cafea963f56b1e8ffd4a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/TEXT"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-text.git"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-io",
      "name" : "commons-io",
      "version" : "2.11.0",
      "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3b4b7ccfaeceeac240b804839ee1a1ca"
        },
        {
          "alg" : "SHA-1",
          "content" : "a2503f302b11ebde7ebc3df41daebe0e4eea3689"
        },
        {
          "alg" : "SHA-256",
          "content" : "961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908"
        },
        {
          "alg" : "SHA-512",
          "content" : "5bd78eed456ede30119319c5bed8e3e4c443b6fd7bdb3a7a5686647bd83094d0c3e2832a7575cfb60e4ef25f08106b93476939d3adcfecf5533cc030b3039e10"
        },
        {
          "alg" : "SHA-384",
          "content" : "114f1e324d90ad887c177876d410f5787a8e8da6c48d4b2862d365802c0efded3a88cb24046976bf6276cadad3712f0f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/IO"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-collections",
      "name" : "commons-collections",
      "version" : "3.2.2",
      "description" : "Types that extend and augment the Java Collections Framework.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f54a8510f834a1a57166970bfc982e94"
        },
        {
          "alg" : "SHA-1",
          "content" : "8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5"
        },
        {
          "alg" : "SHA-256",
          "content" : "eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8"
        },
        {
          "alg" : "SHA-512",
          "content" : "51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16"
        },
        {
          "alg" : "SHA-384",
          "content" : "dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/COLLECTIONS"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/collections/trunk"
        },
        {
          "type" : "build-system",
          "url" : "https://continuum-ci.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "http://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-collections4",
      "version" : "4.4",
      "description" : "The Apache Commons Collections package contains types that extend and augment the Java Collections Framework.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4a37023740719b391f10030362c86be6"
        },
        {
          "alg" : "SHA-1",
          "content" : "62ebe7544cb7164d87e0637a2a6a2bdc981395e8"
        },
        {
          "alg" : "SHA-256",
          "content" : "1df8b9430b5c8ed143d7815e403e33ef5371b2400aadbe9bda0883762e0846d1"
        },
        {
          "alg" : "SHA-512",
          "content" : "5939c9931eb9557caee3b45fe1dd9ce54cabdc4e6182ed7faac77e1a866dd0cb602bfa4ece2f3316d769913366106bd2b61bf3bb5faad1fa7d808124c06dec0f"
        },
        {
          "alg" : "SHA-384",
          "content" : "74059fd8f61c366ed448e102256fdbd1db0d690501c2c296c80f3657a2c0d8ade3dd9533b1431cc29786bbb624195f46"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/COLLECTIONS"
        },
        {
          "type" : "vcs",
          "url" : "https://git-wip-us.apache.org/repos/asf?p=commons-collections.git"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "2.0.6",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0dd65c386e8c5f4e6e014de3f7a7ae60"
        },
        {
          "alg" : "SHA-1",
          "content" : "88c40d8b4f33326f19a7d3c0aaf2c7e8721d4953"
        },
        {
          "alg" : "SHA-256",
          "content" : "2f2a92d410b268139d7d63b75ed25e21995cfe4100c19bf23577cfdbc8077bda"
        },
        {
          "alg" : "SHA-512",
          "content" : "4f8bcafcbb105542ae9333a79f1779aa299570c129abc718331cb5969af52e06e53e645ba52e67ebbe822006ea95093186656742dd24a4b167e270ba9e55e1e1"
        },
        {
          "alg" : "SHA-384",
          "content" : "aae19620668b33d8a5837cd39bfd398644199693c08869812948b52eff238cd9d363cbe1a5bbdd25d6efaac4bd2caa67"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@2.0.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.qos.ch"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.6?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "jul-to-slf4j",
      "version" : "2.0.6",
      "description" : "JUL to SLF4J bridge",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5a22f4776707e517ff1da17a98b3918c"
        },
        {
          "alg" : "SHA-1",
          "content" : "c4d348977a83a0bfcf42fd6fd1fee6e7904f1a0c"
        },
        {
          "alg" : "SHA-256",
          "content" : "6466a327c5ac59fc41c98437e248b9052a4fad6fae9f83a7f723eae297990017"
        },
        {
          "alg" : "SHA-512",
          "content" : "30735a17bbcc9e2c0c81c5c6b4233e85c96cc6c074b3eb8c607ab3410615af76bec8a1bfe9470ac4a185f1bbd8250924aede36fc06623def73a2330bebffe041"
        },
        {
          "alg" : "SHA-384",
          "content" : "1f699ba73ec58a28afc32bec472d3d8b4d135f585721690f104aea31685cb23b742fa9d1819572f9dac4216fd5125187"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/jul-to-slf4j@2.0.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.qos.ch"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/jul-to-slf4j@2.0.6?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "jcl-over-slf4j",
      "version" : "2.0.6",
      "description" : "JCL 1.2 implemented over SLF4J",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "39ab1cc1376b4c2d1ba706a98cca83de"
        },
        {
          "alg" : "SHA-1",
          "content" : "839ff57e112f2e28ef372e96d135696a6896b9ad"
        },
        {
          "alg" : "SHA-256",
          "content" : "7aee1e1a12f4e2b3b42af9453a098132339d419056c178105543f23e79633a69"
        },
        {
          "alg" : "SHA-512",
          "content" : "835e28748daa0d2074baf1ff2ed8b7028a89a2aa8f701940ec6d096d8289facd22a0a133fceb4decbda5ed1a211986537ce2a5b0aa3302be9ad6367d64fda4f0"
        },
        {
          "alg" : "SHA-384",
          "content" : "490af11630d23314dcf444c6787fc5d85dc01d6dec02a2cb3fdee80ddd6225d8046cb7f6f012a60786e6e9554eaf5427"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.qos.ch"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.6?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-slf4j2-impl",
      "version" : "2.19.0",
      "description" : "The Apache Log4j SLF4J 2.0 API binding to Log4j 2 Core",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "da5fdc7ca6095583542ddecd0edfdcb8"
        },
        {
          "alg" : "SHA-1",
          "content" : "5c04bfdd63ce9dceb2e284b81e96b6a70010ee10"
        },
        {
          "alg" : "SHA-256",
          "content" : "825605eacb2d5605b105c53d4108c18125e0f82f62960d0be583278b9c524f3c"
        },
        {
          "alg" : "SHA-512",
          "content" : "ef2ae40f602ca3e0df0e159b6a77656ddc548fcd676d944daa68d1e0b48ebbb9f777649c61f172ccf3f554798584455ccf9a62f3aa6ce1ab31e59ead92d809df"
        },
        {
          "alg" : "SHA-384",
          "content" : "fc1ff56c342cc5d404f5a514f4592d089834dfc01590e33b4e6e814d37771b6b052f48dcd6aeb83202519e170b156c1b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-slf4j2-impl@2.19.0?type=jar",
      "externalReferences" : [
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/logging-log4j2/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://logging.apache.org/log4j/2.x/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LOG4J2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=logging-log4j2.git"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-slf4j2-impl@2.19.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-api",
      "version" : "2.19.0",
      "description" : "The Apache Log4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a7f8fc9751cdaa237a1e18059b4887da"
        },
        {
          "alg" : "SHA-1",
          "content" : "ea1b37f38c327596b216542bc636cfdc0b8036fa"
        },
        {
          "alg" : "SHA-256",
          "content" : "5ccb24ad9f92e768d0bc456d3061a737951262df803e004d2cad096b75a88d60"
        },
        {
          "alg" : "SHA-512",
          "content" : "f7cf3647ed90de7fdef377e4321aa9b9ea2512a46d99109b359f7fc5dcfe6d3ae9f879c212707ea4fd16d358d10d21c56d5178ec4803504745de6fe48c66c3f7"
        },
        {
          "alg" : "SHA-384",
          "content" : "d578e82caafbeab7b782599a9e115fbb9cfadcbd6ddb9a7ad2f87aec407dfcdf7fb58f41bf0cff2f7decc2afe89de46a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.19.0?type=jar",
      "externalReferences" : [
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/logging-log4j2/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://logging.apache.org/log4j/2.x/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LOG4J2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=logging-log4j2.git"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.19.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-core",
      "version" : "2.19.0",
      "description" : "The Apache Log4j Implementation",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b7f521926226a16531f8e212b1da1ffd"
        },
        {
          "alg" : "SHA-1",
          "content" : "3b6eeb4de4c49c0fe38a4ee27188ff5fee44d0bb"
        },
        {
          "alg" : "SHA-256",
          "content" : "b4a1796fab7bfc36df015c1b4052459147997e8d215a7199d71d05f9e747e4f4"
        },
        {
          "alg" : "SHA-512",
          "content" : "1300ada6f86818ef4dcd17448a8965c1c6dd41ec414de2b2a5bafdf25d03c12100fa9e8f422d7b346f2984e5dfb3d599f8c1a971a6bcaca0cf938943d06364e7"
        },
        {
          "alg" : "SHA-384",
          "content" : "06c547cd1da0fb0f878e9d589eb5feae8b5a0691d16dec9cc98807fc3e4ee940c76af7c5e379cc44133c0f77fbc945b0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.19.0?type=jar",
      "externalReferences" : [
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/logging-log4j2/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://logging.apache.org/log4j/2.x/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LOG4J2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=logging-log4j2.git"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.19.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-1.2-api",
      "version" : "2.19.0",
      "description" : "The Apache Log4j 1.x Compatibility API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "64330e674f83b296d3bd63f0f71206fb"
        },
        {
          "alg" : "SHA-1",
          "content" : "0e8d839e89e44f06ed901bb8b681161ad3131fd5"
        },
        {
          "alg" : "SHA-256",
          "content" : "60480a6c81978a9871099e002997df84a05fc11789fb248e3e803a0dcb19e0cd"
        },
        {
          "alg" : "SHA-512",
          "content" : "64234ddd0c040bbad9b8e343ac24bc05a763445f854034fbfbe27176c3a628fcdf39e2508350bc63f058d138a9487e085213ee659135d3ad56a49b3833bf4f99"
        },
        {
          "alg" : "SHA-384",
          "content" : "eb6e53249040ecb856f37ad7b22cfa7a3034250f0439811e4cc75a8de709c3d83cbcd54d958e355340cdd6784bb3a6b2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.19.0?type=jar",
      "externalReferences" : [
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/logging-log4j2/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://logging.apache.org/log4j/2.x/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LOG4J2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=logging-log4j2.git"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.19.0?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.ning",
      "name" : "compress-lzf",
      "version" : "1.1.2",
      "description" : "Compression codec for LZF encoding for particularly encoding/decoding, with reasonable compression. Compressor is basic Lempel-Ziv codec, without Huffman (deflate/gzip) or statistical post-encoding. See \"http://oldhome.schmorp.de/marc/liblzf.html\" for more on original LZF package.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f620dc5d92f58cfdb1c51895daf05f58"
        },
        {
          "alg" : "SHA-1",
          "content" : "d09d33ffa7bc1d987db92e5ebec926ff92b7cbdf"
        },
        {
          "alg" : "SHA-256",
          "content" : "a9a76c85a3cef3a22d4c0e8647a1449b638885f2ceb4d8c9f66df3c677cc228e"
        },
        {
          "alg" : "SHA-512",
          "content" : "ec119a239e5dc1a213ae06380cdaa1ab07049430485fd2e5651281ae53705feb4d5dd767ac87aca8e329adcd1e1325585d50b273738e6cb2b94b31c7156828b2"
        },
        {
          "alg" : "SHA-384",
          "content" : "f00e771ca4878a82ac6698fef4b8b17474fef2b3602ac850ec352a66d43cd798270a215313b17d98096e2f017eb7095a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.ning/compress-lzf@1.1.2?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/ning/compress/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/ning/compress"
        },
        {
          "type" : "website",
          "url" : "http://fasterxml.com/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.ning/compress-lzf@1.1.2?type=jar"
    },
    {
      "publisher" : "xerial.org",
      "group" : "org.xerial.snappy",
      "name" : "snappy-java",
      "version" : "1.1.10.5",
      "description" : "snappy-java: A fast compression/decompression library",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a52ffcdbbe525b486237a7098e5c5ff7"
        },
        {
          "alg" : "SHA-1",
          "content" : "ac605269f3598506196e469f1fb0d7ed5c55059e"
        },
        {
          "alg" : "SHA-256",
          "content" : "0f3f1857ed33116583f480b4df5c0218836c47bfbc9c6221c0d73f356decf37b"
        },
        {
          "alg" : "SHA-512",
          "content" : "36c288aa84017b52362a49a20d1702151a16b9f58518b6877f11122941a549d94fab8d515f7f1ad6384fb94be569328abf862edaf970c10a16832498dfda853b"
        },
        {
          "alg" : "SHA-384",
          "content" : "693a542ca2471dec4da5fe582563aff1bf5238e1a8d1a1f79cd8138334f94f1112094fbd270b1637d983c9290084a6e1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/xerial/snappy-java"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/xerial/snappy-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5?type=jar"
    },
    {
      "group" : "org.lz4",
      "name" : "lz4-java",
      "version" : "1.8.0",
      "description" : "Java ports and bindings of the LZ4 compression algorithm and the xxHash hashing algorithm",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "936a927700aa8fc3b75d21d7571171f6"
        },
        {
          "alg" : "SHA-1",
          "content" : "4b986a99445e49ea5fbf5d149c4b63f6ed6c6780"
        },
        {
          "alg" : "SHA-256",
          "content" : "d74a3334fb35195009b338a951f918203d6bbca3d1d359033dc33edd1cadc9ef"
        },
        {
          "alg" : "SHA-512",
          "content" : "98d59086a6021ca571d9c1d64b715e43044c730e1ac563f514c40cf44302615d30378b6d5cc69990446522de6260dc8e7b303e3990a3139dc326d058dfb6dbd9"
        },
        {
          "alg" : "SHA-384",
          "content" : "8e3f2acdbb41a00c4d9cc5f328e63fb626ac7c6c84e1bf9502e2fcc76a591b2b819b2d27b29925ff986b95c297b30e2c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar",
      "externalReferences" : [ ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar"
    },
    {
      "publisher" : "com.github.luben",
      "group" : "com.github.luben",
      "name" : "zstd-jni",
      "version" : "1.5.2-5",
      "description" : "JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "474f53d74d4f815120b88bf256328139"
        },
        {
          "alg" : "SHA-1",
          "content" : "ef34c3a855e144c03de5c0b0a8e80469915ebae6"
        },
        {
          "alg" : "SHA-256",
          "content" : "0f8e64feaa068b8a02de45e9343f9b2fc401235b81e7fe3f80b2aeba001691b2"
        },
        {
          "alg" : "SHA-512",
          "content" : "edbd6d1b6f2d75e55e1f879a41a6c2e020be620c5973283fa0c61cb8c0c8ee689021742df77ed41e2688b8bc8c33c39c77ac33c4e09036878ef2da50f2e73f9f"
        },
        {
          "alg" : "SHA-384",
          "content" : "e5e5050acabe56bffa5fb4fad8b24454158ee342f970059745ed0d66b048d602c6091745cc09d31314bbd510bd489d13"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-2-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.luben/zstd-jni@1.5.2-5?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.luben/zstd-jni@1.5.2-5?type=jar"
    },
    {
      "group" : "org.roaringbitmap",
      "name" : "RoaringBitmap",
      "version" : "0.9.38",
      "description" : "Roaring bitmaps are compressed bitmaps (also called bitsets) which tend to outperform conventional compressed bitmaps such as WAH or Concise.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "555bc09665d4670395328fd43f5b4c61"
        },
        {
          "alg" : "SHA-1",
          "content" : "db0ebf650c71469890e894100b008d091dfc178e"
        },
        {
          "alg" : "SHA-256",
          "content" : "c37c8223396558c7b58b80404565356f90d92056b23d54f2cb390bc89fb9f6d3"
        },
        {
          "alg" : "SHA-512",
          "content" : "3dfad0c3d3b3106de2b4c491c42adb06a967c5545735eefdb55030c0e19b88233bea7994de85dcf759f394530b84570eadd01df64e19793196dec18b967d7a52"
        },
        {
          "alg" : "SHA-384",
          "content" : "51a5d1b44b06af825de9f92e8b6e9413724f46683d47f7fad8d982d08505ba56f7eb22d30059b6759cfd0df2874570be"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.roaringbitmap/RoaringBitmap@0.9.38?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/RoaringBitmap/RoaringBitmap/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/RoaringBitmap/RoaringBitmap"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.roaringbitmap/RoaringBitmap@0.9.38?type=jar"
    },
    {
      "group" : "org.roaringbitmap",
      "name" : "shims",
      "version" : "0.9.38",
      "description" : "Roaring bitmaps are compressed bitmaps (also called bitsets) which tend to outperform conventional compressed bitmaps such as WAH or Concise.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a20877d36a350800f467f2d08442d14e"
        },
        {
          "alg" : "SHA-1",
          "content" : "45572e816d3a2fdab3435eecb1deb69e35a76778"
        },
        {
          "alg" : "SHA-256",
          "content" : "7be92d043d041dba6339dd5d56d7b402f40af44e1e7be3435513f18d88126d6c"
        },
        {
          "alg" : "SHA-512",
          "content" : "0292db6dc8e34af2f6fef0d5e51659da8b98feec79545717dc9359f318fffe467991642e6deb5f10fe2c1009e3494a24556c9ed237a08557d059c471f75c0054"
        },
        {
          "alg" : "SHA-384",
          "content" : "3a3c42ddb410cdeb58243357428eb73a34231853e4c76c27d47181535c4b998e24e688b8fd6e0c00da0219d8be29da38"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.roaringbitmap/shims@0.9.38?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/RoaringBitmap/RoaringBitmap/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/RoaringBitmap/RoaringBitmap"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.roaringbitmap/shims@0.9.38?type=jar"
    },
    {
      "publisher" : "org.scala-lang.modules",
      "group" : "org.scala-lang.modules",
      "name" : "scala-xml_2.12",
      "version" : "2.1.0",
      "description" : "scala-xml",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "eb4a36f663f35e5d97ba7f51b0e8bbca"
        },
        {
          "alg" : "SHA-1",
          "content" : "16b228fa6f9d5afece0f2d2d6d5b03d5372dbea4"
        },
        {
          "alg" : "SHA-256",
          "content" : "d9a6df43cfac692f05e7166d39aae4476a246dac7740c7794a3072f1a67280ce"
        },
        {
          "alg" : "SHA-512",
          "content" : "a4a60375d6f78c311b61e48f2be56ce048baf920615763ac37b72e43d9409892add045aec3630f58db9e0dd1746cd75358015089f5ee7816347e0adbef264677"
        },
        {
          "alg" : "SHA-384",
          "content" : "e0831c12d568272b475d95b32b6fcaae8920d781b8f9be28003e5f2ef7d768bf48d8d5fa175d30906f04d35e9ddf83ce"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.scala-lang.modules/scala-xml_2.12@2.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.scala-lang.org/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/scala/scala-xml/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/scala/scala-xml"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.scala-lang.modules/scala-xml_2.12@2.1.0?type=jar"
    },
    {
      "publisher" : "LAMP/EPFL",
      "group" : "org.scala-lang",
      "name" : "scala-library",
      "version" : "2.12.17",
      "description" : "Standard library for the Scala Programming Language",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1b31b3bd2d82c3ad05895815423e0caf"
        },
        {
          "alg" : "SHA-1",
          "content" : "4a4dee1ebb59ed1dbce014223c7c42612e4cddde"
        },
        {
          "alg" : "SHA-256",
          "content" : "7eefde7e3cc1937f78dc13b9e6c00746f602cff6f5621d62df2c24d922619fe0"
        },
        {
          "alg" : "SHA-512",
          "content" : "31a05fdabb79470122abdf184defbc21bb713e1bef57014e187b3165a0630ae901a7dc86ce5312a48bd7b7e215e4226a9b04807e3a6a1a44099f174c46df0bba"
        },
        {
          "alg" : "SHA-384",
          "content" : "269c694c2467ea1fa2effba54d59efa5ee806f2eb68dba97398977d28b6bad3c19796f0e43309ea64942fb750ba81754"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.scala-lang/scala-library@2.12.17?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://lamp.epfl.ch/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/scala/bug/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/scala/scala"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.scala-lang/scala-library@2.12.17?type=jar"
    },
    {
      "publisher" : "LAMP/EPFL",
      "group" : "org.scala-lang",
      "name" : "scala-reflect",
      "version" : "2.12.17",
      "description" : "Reflection Library for the Scala Programming Language",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a46012d6791564e644aa983cdc9f7135"
        },
        {
          "alg" : "SHA-1",
          "content" : "c0fcfc7932ee0c92e6d00d1c7c47d5042391a987"
        },
        {
          "alg" : "SHA-256",
          "content" : "000c8142b28fba079eb1e3c56b7587d73b48f8b23fb22123d8403ca84bfad7db"
        },
        {
          "alg" : "SHA-512",
          "content" : "fe0ecc5b1f6b5fb5b7ab8a1c71254ba2532c78fc94941ea22148549f662ab1d82862cf9a0bc8c21870836fd7061182c23c2d927787a5b3d59cb2ce4345f355a7"
        },
        {
          "alg" : "SHA-384",
          "content" : "0bbe6d9851e79b15a47311bd89b69e3e5fc0120696207bca35d407fabd0f7d182f8797f6b0df0db9b8bd73ea8f3affd5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.scala-lang/scala-reflect@2.12.17?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://lamp.epfl.ch/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/scala/bug/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/scala/scala"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.scala-lang/scala-reflect@2.12.17?type=jar"
    },
    {
      "publisher" : "org.json4s",
      "group" : "org.json4s",
      "name" : "json4s-jackson_2.12",
      "version" : "3.7.0-M11",
      "description" : "json4s-jackson",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "53dc7ac002aa4de2843799cd239aae2d"
        },
        {
          "alg" : "SHA-1",
          "content" : "54089dd27d932de33c329199474ad429ee076510"
        },
        {
          "alg" : "SHA-256",
          "content" : "d03ed279c83870b9bd624b1817fe6290822d7e74207d1e250860fbdd935643dc"
        },
        {
          "alg" : "SHA-512",
          "content" : "ad9084168bf882e70a4827d3bc1a6905a9f931e25d376aa75a3bc421410c870b3d6e33f5271cdc42504f254f54ddb33f0f1df8b3df93b9056e422b149d6dd367"
        },
        {
          "alg" : "SHA-384",
          "content" : "904c7e915b15ae824616ce1a8aaf7d13d67bcf0fdac05381cb852dafbc27429829d518b2abafce6c9392b2e5f8c6a7d7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.json4s/json4s-jackson_2.12@3.7.0-M11?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/json4s/json4s"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/json4s/json4s"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.json4s/json4s-jackson_2.12@3.7.0-M11?type=jar"
    },
    {
      "publisher" : "org.json4s",
      "group" : "org.json4s",
      "name" : "json4s-core_2.12",
      "version" : "3.7.0-M11",
      "description" : "json4s-core",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1db3cb3db15c895307cfd20b81e2d8a6"
        },
        {
          "alg" : "SHA-1",
          "content" : "4126de102c272d727ea0e1875ee3db9f6ac7060f"
        },
        {
          "alg" : "SHA-256",
          "content" : "2fd8e66a3715565294c4edb5d2514e7ff59a14960c7f8dd84cf0991661a48a10"
        },
        {
          "alg" : "SHA-512",
          "content" : "7347a1bf54151a42dcf2aade3ca125da563c025644f935497a5c5e060198652c3ee7c52ee6de484a8f45aef1ab585dc831fbf5ae14395712236e752aec476861"
        },
        {
          "alg" : "SHA-384",
          "content" : "f6501957f7a579ee24997061ca3ea416d487906f386382c9d39e9cd8816efb180fd6489a8ff0551dc1e00e083810105e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.json4s/json4s-core_2.12@3.7.0-M11?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/json4s/json4s"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/json4s/json4s"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.json4s/json4s-core_2.12@3.7.0-M11?type=jar"
    },
    {
      "publisher" : "org.json4s",
      "group" : "org.json4s",
      "name" : "json4s-ast_2.12",
      "version" : "3.7.0-M11",
      "description" : "json4s-ast",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f106ddf363ca77383877ccb0bdeaa425"
        },
        {
          "alg" : "SHA-1",
          "content" : "f8c92b6b7cb37f3e2fdf649ad1ba3d65248bb45d"
        },
        {
          "alg" : "SHA-256",
          "content" : "f9388c0ad4a969bf1a1867e85ce24ed87ca5a1095342b96b35c356fd971b544d"
        },
        {
          "alg" : "SHA-512",
          "content" : "806f72c85625f66a0de4c1629e354ba687b55e303899de0a6b8fbe256ed674da1aedf04471b7cbe969ee5a21ff48a2d97dab2145229f8e04f7d886087336de61"
        },
        {
          "alg" : "SHA-384",
          "content" : "99795db385defb8e98d94b6d52041ec35b9c914f0b1d0267aa737641bcd677cf07468885f09e8ef383e0052b45fca30f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.json4s/json4s-ast_2.12@3.7.0-M11?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/json4s/json4s"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/json4s/json4s"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.json4s/json4s-ast_2.12@3.7.0-M11?type=jar"
    },
    {
      "publisher" : "org.json4s",
      "group" : "org.json4s",
      "name" : "json4s-scalap_2.12",
      "version" : "3.7.0-M11",
      "description" : "json4s-scalap",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2a5d1806ab0330c4e355c34a13afaf9e"
        },
        {
          "alg" : "SHA-1",
          "content" : "5a5aafd028f7ac4a8565e1cebe1307c146c87f70"
        },
        {
          "alg" : "SHA-256",
          "content" : "d2a1f84b618e1cba12c4e8ce2babc23d78a12de5f568abf8fbaeca39c52e0eb8"
        },
        {
          "alg" : "SHA-512",
          "content" : "ff1771820f477f755982690dc5d32c8f24a075263d0e8ab83a4f3cac4824a8cd522860661f7689b28c65550a80775e269461f3bd7c827a80bd70967444a13368"
        },
        {
          "alg" : "SHA-384",
          "content" : "924e5e9aaa2f7823b1d275c866c3713a33be2458bf7aa60a73f4b6989babf07f2d4ee723a7175469eb4c77f7fb4478ed"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.json4s/json4s-scalap_2.12@3.7.0-M11?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/json4s/json4s"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/json4s/json4s"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.json4s/json4s-scalap_2.12@3.7.0-M11?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "org.glassfish.jersey.core",
      "name" : "jersey-client",
      "version" : "2.36",
      "description" : "Jersey core client implementation",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ee13f5ef0926cdbcb447415e0c5e2812"
        },
        {
          "alg" : "SHA-1",
          "content" : "0755709fb31407d36c114afbe345b47cebf0fe60"
        },
        {
          "alg" : "SHA-256",
          "content" : "027b7061001f186bd7a48bbe5f070e2774b108969776935fc9b55591a93f689d"
        },
        {
          "alg" : "SHA-512",
          "content" : "31f94c45a6b151d1407e9e7c129574b5c94035e102d024096d99737afd837cd25b55664a7938c8814b6379d363894f318429d344d34eac110ebfe9afe1fab85f"
        },
        {
          "alg" : "SHA-384",
          "content" : "6cd9d7fb0105ff3ccc04da4a6a03d11e19afd59739f90d33affaec3bb1fc849c81b09526090d151ab51a876e310a3861"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        },
        {
          "license" : {
            "id" : "BSD-2-Clause"
          }
        },
        {
          "license" : {
            "name" : "Apache License, 2.0",
            "url" : "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license" : {
            "name" : "Public Domain",
            "url" : "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license" : {
            "name" : "Modified BSD",
            "url" : "https://asm.ow2.io/license.html"
          }
        },
        {
          "license" : {
            "name" : "jQuery license",
            "url" : "jquery.org/license"
          }
        },
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        },
        {
          "license" : {
            "name" : "W3C license",
            "url" : "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.jersey.core/jersey-client@2.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/org/foundation/"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jersey/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jersey"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.jersey.core/jersey-client@2.36?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.ws.rs",
      "name" : "jakarta.ws.rs-api",
      "version" : "2.1.6",
      "description" : "Jakarta RESTful Web Services API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c3892382aeb5c54085b22b1890511d29"
        },
        {
          "alg" : "SHA-1",
          "content" : "1dcb770bce80a490dff49729b99c7a60e9ecb122"
        },
        {
          "alg" : "SHA-256",
          "content" : "4cea299c846c8a6e6470cbfc2f7c391bc29b9caa2f9264ac1064ba91691f4adf"
        },
        {
          "alg" : "SHA-512",
          "content" : "c1e2655269b9a32f9c0aec9edf12bf6d8b397d8cbcf60e28dd21ab13ecc2738800ebe5c2d49ed3c50d4dac6617671f0fae873daf8ec116a16ef7f7f0a3bef7fa"
        },
        {
          "alg" : "SHA-384",
          "content" : "3fd05e2b167d927216d3b2fc9d1c5a70aa3911d075c2159f958ce755c6a41d93bd76f0ce79ccd22e5a60182aa91fdb07"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/org/foundation/"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jax-rs-api-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jaxrs-api/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jaxrs-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "org.glassfish.hk2.external",
      "name" : "jakarta.inject",
      "version" : "2.6.1",
      "description" : "Injection API (JSR 330) version ${javax.inject.version} repackaged as OSGi bundle",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4d7c80a1e3cd54531af03bef4537f7af"
        },
        {
          "alg" : "SHA-1",
          "content" : "8096ebf722902e75fbd4f532a751e514f02e1eb7"
        },
        {
          "alg" : "SHA-256",
          "content" : "5e88c123b3e41bca788b2683118867d9b6dec714247ea91c588aed46a36ee24f"
        },
        {
          "alg" : "SHA-512",
          "content" : "7fc8196ad9ee03a831dfff85c945e416c3906071a7aa8ebf6ab8b7008dfec0adccc1f1dca53ed6768ac5676cd4b3c43471674f97ff73e1f61f5a427aaed68e05"
        },
        {
          "alg" : "SHA-384",
          "content" : "6b3ea9eeec5cbbc1fb3e6c89160af67b82ffbd68948dd4790e3fe3ce2fc495c063698a7d6a1998d5db51abafe3915e19"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.oracle.com"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "org.glassfish.jersey.core",
      "name" : "jersey-common",
      "version" : "2.36",
      "description" : "Jersey core common packages",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4b155e7fd084ad25b5e836af5efbe4c8"
        },
        {
          "alg" : "SHA-1",
          "content" : "5d259ea71ca3c1f4566ec5bfee7320e63d79673b"
        },
        {
          "alg" : "SHA-256",
          "content" : "543b8df0bfa07e54fe65e45b351088010a2a7079ac2564023761f8dfe8eb7b33"
        },
        {
          "alg" : "SHA-512",
          "content" : "fa3166330f8b780c714b6ac81e561503c05587c97753eaf79c5e1cf4033b570812262d185f838b5ae08bc17d85dd2a86a1147f4b2a7b42f032757535d4cd10b5"
        },
        {
          "alg" : "SHA-384",
          "content" : "005af1b24cc04fdb9bac2177cca06d492974e9a63cd10e3dd8100b4aefa796ab8844b00d4f5ae96468015dfdd91c6814"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "name" : "The GNU General Public License (GPL), Version 2, With Classpath Exception",
            "url" : "https://www.gnu.org/software/classpath/license.html"
          }
        },
        {
          "license" : {
            "name" : "Apache License, 2.0",
            "url" : "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license" : {
            "name" : "Public Domain",
            "url" : "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.jersey.core/jersey-common@2.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/org/foundation/"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jersey/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jersey"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.jersey.core/jersey-common@2.36?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.annotation",
      "name" : "jakarta.annotation-api",
      "version" : "1.3.5",
      "description" : "Jakarta Annotations API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8b165cf58df5f8c2a222f637c0a07c97"
        },
        {
          "alg" : "SHA-1",
          "content" : "59eb84ee0d616332ff44aba065f3888cf002cd2d"
        },
        {
          "alg" : "SHA-256",
          "content" : "85fb03fc054cdf4efca8efd9b6712bbb418e1ab98241c4539c8585bbc23e1b8a"
        },
        {
          "alg" : "SHA-512",
          "content" : "d1acff146c0f9ea923a9325ad4c22ba2052ec474341ab8392abab7e8abd3ca010db2400ff9b5849fc4f1fa5c0a18830eb104da07a13bd26b4f0a43d167935878"
        },
        {
          "alg" : "SHA-384",
          "content" : "004a4bde333c0575f72df1cb9cf95ee0c6c7f738a6f0f723a5ec545aaa1664abeb82f01627708a1377e3136754fb7859"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/common-annotations-api/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/ca-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/common-annotations-api"
        },
        {
          "type" : "website",
          "url" : "https://www.eclipse.org"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "org.glassfish.hk2",
      "name" : "osgi-resource-locator",
      "version" : "1.0.3",
      "description" : "Used by various API providers that rely on META-INF/services mechanism to locate providers.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e7e82b82118c5387ae45f7bf3892909b"
        },
        {
          "alg" : "SHA-1",
          "content" : "de3b21279df7e755e38275137539be5e2c80dd58"
        },
        {
          "alg" : "SHA-256",
          "content" : "aab5d7849f7cfcda2cc7c541ba1bd365151d42276f151c825387245dfde3dd74"
        },
        {
          "alg" : "SHA-512",
          "content" : "4d84983a9b1c72f58661b576c78ca456a2106602c2ad211cd7e72d94464c8774173b34a35629c507c7c84c982f1de0c9bf48352458e8480be5f874d20d6e69a3"
        },
        {
          "alg" : "SHA-384",
          "content" : "9f92002296c66cc8996d459b95a9c531ec71b98a8b819121abbc7d636a6c4ace04c88878ba6917f71650280a880d1ce2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.hk2/osgi-resource-locator@1.0.3?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2-extra"
        },
        {
          "type" : "website",
          "url" : "https://www.eclipse.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/ee4j/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.hk2/osgi-resource-locator@1.0.3?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "org.glassfish.jersey.core",
      "name" : "jersey-server",
      "version" : "2.36",
      "description" : "Jersey core server implementation",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8dd2bd5634c82b57eebb0fe35aaccee2"
        },
        {
          "alg" : "SHA-1",
          "content" : "73cf67d0d761b60860b7721529503a121cfa9df4"
        },
        {
          "alg" : "SHA-256",
          "content" : "2699758d1c33a9137363fd022d8c9c00423c800c4fde2b49d53530987e8da72d"
        },
        {
          "alg" : "SHA-512",
          "content" : "7a858fea938ce38aaac4ec6fea14bb35b036b6c690266757f3ccdf5527f4a20da9d7d5dace96467c28e45ac2efa50c08a9fe4b09fb1b47946409a7b02bd0de67"
        },
        {
          "alg" : "SHA-384",
          "content" : "c039aefae5ae6521bfb8d85f02311a1c31559468b14f10d0d9739edaa1b8aa46f9278ff05abfe0d45cdeb4a03b9fd22e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "name" : "The GNU General Public License (GPL), Version 2, With Classpath Exception",
            "url" : "https://www.gnu.org/software/classpath/license.html"
          }
        },
        {
          "license" : {
            "name" : "Apache License, 2.0",
            "url" : "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license" : {
            "name" : "Modified BSD",
            "url" : "https://asm.ow2.io/license.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.jersey.core/jersey-server@2.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/org/foundation/"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jersey/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jersey"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.jersey.core/jersey-server@2.36?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.validation",
      "name" : "jakarta.validation-api",
      "version" : "2.0.2",
      "description" : "Jakarta Bean Validation API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "77501d529c1928c9bac2500cc9f93fb0"
        },
        {
          "alg" : "SHA-1",
          "content" : "5eacc6522521f7eacb081f95cee1e231648461e7"
        },
        {
          "alg" : "SHA-256",
          "content" : "b42d42428f3d922c892a909fa043287d577c0c5b165ad9b7d568cebf87fc9ea4"
        },
        {
          "alg" : "SHA-512",
          "content" : "3ca8556b80ca809b3a43fac31469702bbad62a00e63b11a304dad1e372d9f6c128357463a4c70c423055941c7e2e417f87a9474a204d189c8e4b62f42047c8eb"
        },
        {
          "alg" : "SHA-384",
          "content" : "6ae3963fd6a5e83b068a8344b88f6bfbd26d29cee64193025bc5e98195678e49826463da27a7a1c15cd83b2149d57a94"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://hibernate.atlassian.net/projects/BVAL/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/beanvalidation-api"
        },
        {
          "type" : "website",
          "url" : "https://www.eclipse.org"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "org.glassfish.jersey.containers",
      "name" : "jersey-container-servlet",
      "version" : "2.36",
      "description" : "Jersey core Servlet 3.x implementation",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4571ad55cb3afc068f90ecc1d7c41a25"
        },
        {
          "alg" : "SHA-1",
          "content" : "fa6b0f7d47d5c3e054c71eea613a6bbe62b1b733"
        },
        {
          "alg" : "SHA-256",
          "content" : "64f06051710734565486ab18910a4d3e2dbc1292a410146b66045dc1aea7cf1a"
        },
        {
          "alg" : "SHA-512",
          "content" : "3b72d1180786dece0122a42da951c88a0fd075cc22bae57cb8fb888d748fe098673005f021a28f47dae06ecbc21bf3faca4ef00b62a5fe76ff3acd6bd83c3595"
        },
        {
          "alg" : "SHA-384",
          "content" : "2dac4ecfeba7d17be2d0ff6e84856379121f9e6b67dedfc4fec3af5a5398414d176b62ec073ed357d93160dd460b5c66"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        },
        {
          "license" : {
            "id" : "BSD-2-Clause"
          }
        },
        {
          "license" : {
            "name" : "Apache License, 2.0",
            "url" : "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license" : {
            "name" : "Public Domain",
            "url" : "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license" : {
            "name" : "Modified BSD",
            "url" : "https://asm.ow2.io/license.html"
          }
        },
        {
          "license" : {
            "name" : "jQuery license",
            "url" : "jquery.org/license"
          }
        },
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        },
        {
          "license" : {
            "name" : "W3C license",
            "url" : "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@2.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/org/foundation/"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jersey/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jersey"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@2.36?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "org.glassfish.jersey.containers",
      "name" : "jersey-container-servlet-core",
      "version" : "2.36",
      "description" : "Jersey core Servlet 2.x implementation",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f7166bcea4836fa9abb54220df1a5acf"
        },
        {
          "alg" : "SHA-1",
          "content" : "d3bd5067597fa7252e603502ee4ae34563852eb5"
        },
        {
          "alg" : "SHA-256",
          "content" : "08dec2b2be0e126b01632b9ac22982cf746c6f2a1aae5c65f880ac8376f010da"
        },
        {
          "alg" : "SHA-512",
          "content" : "e1e4069f7239a04bdf601491f76a3d0bc7c5ecd5340f04e86610b234826226fa42aaee32fe8faa9d3d4c145bf8f514c40d58208129c1aae4b5b1f084100b448d"
        },
        {
          "alg" : "SHA-384",
          "content" : "60ad1264a19746997005fb8ff8ecbb56be6cda0aa22d18efa5b41dad69d5e9190098062f9c74fd18dc292f3256248378"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        },
        {
          "license" : {
            "id" : "BSD-2-Clause"
          }
        },
        {
          "license" : {
            "name" : "Apache License, 2.0",
            "url" : "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license" : {
            "name" : "Public Domain",
            "url" : "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license" : {
            "name" : "Modified BSD",
            "url" : "https://asm.ow2.io/license.html"
          }
        },
        {
          "license" : {
            "name" : "jQuery license",
            "url" : "jquery.org/license"
          }
        },
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        },
        {
          "license" : {
            "name" : "W3C license",
            "url" : "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet-core@2.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/org/foundation/"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jersey/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jersey"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet-core@2.36?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "org.glassfish.jersey.inject",
      "name" : "jersey-hk2",
      "version" : "2.36",
      "description" : "HK2 InjectionManager implementation",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "11f928a24e0cb52fd8999cca0268b3b3"
        },
        {
          "alg" : "SHA-1",
          "content" : "69a57963b35428a261ac4313cfa89f6b3dc255c6"
        },
        {
          "alg" : "SHA-256",
          "content" : "bdc4a8250be82943f7af1ccea4f58a92a8a73c15307ec4226fd60b8a455672f6"
        },
        {
          "alg" : "SHA-512",
          "content" : "c423e6d00092751910302afcd2727a628740c0b77a3fdf681744d408a1eec8941d611c683e84a0be83a9a39cf184f7a60e50d6e39843f18f8ff419c37ad56432"
        },
        {
          "alg" : "SHA-384",
          "content" : "492ef6f281d8eb3baeac9cb53535b26b3ae0639f622d9efcf18442b1a07c35349a88d43442fd0cc7312e44820f702165"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        },
        {
          "license" : {
            "id" : "BSD-2-Clause"
          }
        },
        {
          "license" : {
            "name" : "Apache License, 2.0",
            "url" : "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license" : {
            "name" : "Public Domain",
            "url" : "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license" : {
            "name" : "Modified BSD",
            "url" : "https://asm.ow2.io/license.html"
          }
        },
        {
          "license" : {
            "name" : "jQuery license",
            "url" : "jquery.org/license"
          }
        },
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        },
        {
          "license" : {
            "name" : "W3C license",
            "url" : "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@2.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/org/foundation/"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jersey/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jersey"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@2.36?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "org.glassfish.hk2",
      "name" : "hk2-locator",
      "version" : "2.6.1",
      "description" : "${project.name}",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "dfd358720393d83b01747928db6e3912"
        },
        {
          "alg" : "SHA-1",
          "content" : "9dedf9d2022e38ec0743ed44c1ac94ad6149acdd"
        },
        {
          "alg" : "SHA-256",
          "content" : "febc668deb9f2000c76bd4918d8086c0a4c74d07bd0c60486b72c6bd38b62874"
        },
        {
          "alg" : "SHA-512",
          "content" : "e2c87a265f114042f4c04397db4adca7291fd68e08e97129576ceb603287b57ccf5b03d0c285727ebb8cd7f88009280bdeab4254475d59da1ac41ba57b7cdecb"
        },
        {
          "alg" : "SHA-384",
          "content" : "05afff9ebfdbdaed71770a58fe334751b9ac7476eb4114e08fc376bf4e16226b5016784c99c3dd8cb04c79d954068402"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.hk2/hk2-locator@2.6.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.oracle.com"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.hk2/hk2-locator@2.6.1?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "org.glassfish.hk2.external",
      "name" : "aopalliance-repackaged",
      "version" : "2.6.1",
      "description" : "Dependency Injection Kernel",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0237846ebdaa7db36b356044a373ffba"
        },
        {
          "alg" : "SHA-1",
          "content" : "b2eb0a83bcbb44cc5d25f8b18f23be116313a638"
        },
        {
          "alg" : "SHA-256",
          "content" : "bad77f9278d753406360af9e4747bd9b3161554ea9cd3d62411a0ae1f2c141fd"
        },
        {
          "alg" : "SHA-512",
          "content" : "2d9e5395ba887fa5bb6a8209b731292d440f5c1db2fccaf56c41b1f1d9f774733da28aa8b9b769e765fe62f3640d7bcb2cf6140f0044a8b576e9e45144038c46"
        },
        {
          "alg" : "SHA-384",
          "content" : "f481e2a4e18308a1a0bd85e79f95711434436fa69a504fe98a3d7ea899eaed505a5cb2bfe08f41d1b2af56e150ec0741"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@2.6.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.oracle.com"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@2.6.1?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "org.glassfish.hk2",
      "name" : "hk2-api",
      "version" : "2.6.1",
      "description" : "${project.name}",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "23e8c18dae0c7b776bed756763d5153f"
        },
        {
          "alg" : "SHA-1",
          "content" : "114bd7afb4a1bd9993527f52a08a252b5d2acac5"
        },
        {
          "alg" : "SHA-256",
          "content" : "c2cb80a01e58440ae57d5ee59af4d4d94e5180e04aff112b0cb611c07d61e773"
        },
        {
          "alg" : "SHA-512",
          "content" : "9abe9f78d7f6c805b6c7b515579230e5fa573abbcd818bed56068080d6458608e2e99d5937eb959cf1e4f4cfdc4f790059dfc1231313cd8f30aaefbf518eb1c7"
        },
        {
          "alg" : "SHA-384",
          "content" : "2236ca10af39c4f4f6f1ac63c3652eaa4124bce8f557f8ebaa78576e00c25b986ee9d7e417db6edb9a06aa46b36f4d24"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.hk2/hk2-api@2.6.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.oracle.com"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.hk2/hk2-api@2.6.1?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "org.glassfish.hk2",
      "name" : "hk2-utils",
      "version" : "2.6.1",
      "description" : "${project.name}",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "75ccb55538a77bf878996497ffeb86f3"
        },
        {
          "alg" : "SHA-1",
          "content" : "396513aa96c1d5a10aa4f75c4dcbf259a698d62d"
        },
        {
          "alg" : "SHA-256",
          "content" : "30727f79086452fdefdab08451d982c2082aa239d9f75cdeb1ba271e3c887036"
        },
        {
          "alg" : "SHA-512",
          "content" : "8da7cd88de45270b1fcfd2c471ae092b3972af78a6e0ecc76ed4ac10b6bd6712d2a538bd163a457f21cea4e7e5c52f547108f44aaa791ed0fd069f697f1282c1"
        },
        {
          "alg" : "SHA-384",
          "content" : "94fb55c1f57b96fd84e717fbf3c254f16e2308bc33976addb71d26bf367b7c2ec63e657a953f30f55d7046dd07510e50"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.hk2/hk2-utils@2.6.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.oracle.com"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.hk2/hk2-utils@2.6.1?type=jar"
    },
    {
      "publisher" : "Shigeru Chiba, www.javassist.org",
      "group" : "org.javassist",
      "name" : "javassist",
      "version" : "3.25.0-GA",
      "description" : "Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation simple. It is a class library for editing bytecodes in Java.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3a4267e01989478be188d127b7a39425"
        },
        {
          "alg" : "SHA-1",
          "content" : "442dc1f9fd520130bd18da938622f4f9b2e5fba3"
        },
        {
          "alg" : "SHA-256",
          "content" : "5d49abd02997134f80041645e9668e1ff97afd69d2c2c55ae9fbd40dc073f97b"
        },
        {
          "alg" : "SHA-512",
          "content" : "638d2ed77ae1f34dd57f6aa653635a77d8477b3e99f64343ea5eafcec49ebac13250639924c47c83246890bd8988d92c30785ed8854c8a101138c410657cb944"
        },
        {
          "alg" : "SHA-384",
          "content" : "183a243f52aaea67057564cf0d18f0c32681907aa24eb65bbfd453016911cb42230a73271a0da20e3f1aabf4b0412e4e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MPL-1.1"
          }
        },
        {
          "license" : {
            "id" : "LGPL-2.1-only"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.javassist/javassist@3.25.0-GA?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://jira.jboss.org/jira/browse/JASSIST/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.javassist/javassist@3.25.0-GA?type=jar"
    },
    {
      "group" : "io.netty",
      "name" : "netty-all",
      "version" : "4.1.87.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "59fcb4cf133840677c8b02a55b7ba2fa"
        },
        {
          "alg" : "SHA-1",
          "content" : "39de92ea74a05da937343695f780e59addb8b8ea"
        },
        {
          "alg" : "SHA-256",
          "content" : "c3d3915eb8c7f6a2b18dfce2ba67d4a7dc01fcde1854a4b622d91ca187ae73cd"
        },
        {
          "alg" : "SHA-512",
          "content" : "be7f08837ceaa4480dc0b2189f68fad0f64b0555cebe469261a64690cb16d2e55469e43ddf47fcc7099ec9729e2c9760f26293067f746310f6763b6cc45aed08"
        },
        {
          "alg" : "SHA-384",
          "content" : "e42c3af3065684a84f9da09944d94e7324852c3cba2fbd0e21ea83558bb2684a9fb31f88587f33c87c27d980beb31a2a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-all@4.1.87.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-all"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-all@4.1.87.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-buffer",
      "version" : "4.1.87.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "edae2374fbcfaf345fd0b5260cd81cce"
        },
        {
          "alg" : "SHA-1",
          "content" : "8942174141fb0586e7fffefc8ae48e1458293696"
        },
        {
          "alg" : "SHA-256",
          "content" : "4e3abdf4ddb8810f5fb4a2b57c9144407873b359faa1894007673ed1465dd3e8"
        },
        {
          "alg" : "SHA-512",
          "content" : "0158cab4032503dc849186452653755af53c78d480de8b43c3bb7969a17dbfe949e4f94350942e3a8f4506f473ab9530c4fad2282c1393b1058e868957e7db4c"
        },
        {
          "alg" : "SHA-384",
          "content" : "bf2fd3312777bbc97aec582942632ba2f46c4c4f2f344463969874d2739e4cc5598ae58c49b0cd244792d002e5a20bae"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-buffer@4.1.87.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-buffer@4.1.87.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-codec",
      "version" : "4.1.87.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "90942a0f8c742f46631dcfa99d374a76"
        },
        {
          "alg" : "SHA-1",
          "content" : "d7ab7363f736114e6324ccf802d094529b30b8d8"
        },
        {
          "alg" : "SHA-256",
          "content" : "c643fe8318b7c7405acec13ed98e8f634f917960b20486295efbc5a690bac694"
        },
        {
          "alg" : "SHA-512",
          "content" : "ddb82448cddb65c83d9e2fe31ba6fd2392648db36d3f1ec845bc47d24d02255a1ecdbd1716df90bd24db7b758c320e5a4606c14ae5df87febbecd7d4a2bcd827"
        },
        {
          "alg" : "SHA-384",
          "content" : "67fc3409f2500c5734bb00096fb8a0fe7e5bc45697a741c285ed6878f9f7d29ae5d39d04eaf85b70dfb5ee8d6345ef51"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-codec@4.1.87.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-codec@4.1.87.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-codec-http",
      "version" : "4.1.87.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1e183a91d21038e1888f0f062e8bd18d"
        },
        {
          "alg" : "SHA-1",
          "content" : "3230e95d6832ee4306fe1ca774c7bcecf1da4b28"
        },
        {
          "alg" : "SHA-256",
          "content" : "39368c15595b791dbe26e7639cf2e71b6647bab8838fa5781cf7a80762eac927"
        },
        {
          "alg" : "SHA-512",
          "content" : "2b300f962a9618a43b33b533ca229c71f38c9c18e6c1e8b4bf0414f4a59d8a64fc6aec48de5a8693a2d8eedcefeff426b8d3f8427f93274b2425d68e2d18522f"
        },
        {
          "alg" : "SHA-384",
          "content" : "4c9acad8abb83d318721b6d172749f2ee29825dadb0d2ae3921df37fd1f1250ce7262cbdf0ba1b693b7c60ae5e1cdb29"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-codec-http@4.1.87.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-codec-http@4.1.87.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-codec-http2",
      "version" : "4.1.87.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7b261317c4046af8aa95437a06066191"
        },
        {
          "alg" : "SHA-1",
          "content" : "72b756ff290d782c9ebb36db7d42ee272270c0b4"
        },
        {
          "alg" : "SHA-256",
          "content" : "e5d01b8db385b23103de67d3666c6fa9fa144d42217a3c8266b2a5efe425f093"
        },
        {
          "alg" : "SHA-512",
          "content" : "69d932ed9fdf2fc61664f5c508c974b0cd5d15408527a43c864a4eccb5e5a8234d1dd49c063e3a7582a30b32370d518f07f0158f32c79a9ba8e6cec473bc7cd0"
        },
        {
          "alg" : "SHA-384",
          "content" : "95c039d8d5be2654a0438be4287be4a71af18265ae24eae458c18611dcda53946c2e11707e2f76cc925978bf8374f2ee"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-codec-http2@4.1.87.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-codec-http2@4.1.87.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-codec-socks",
      "version" : "4.1.87.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6a7c79de6df678a372a85948f6039d21"
        },
        {
          "alg" : "SHA-1",
          "content" : "109027470b72d56914d76154e947f9bd5844bb9b"
        },
        {
          "alg" : "SHA-256",
          "content" : "41a76a64514f8f8f50ab8527254073521394138e8a96191905e8c143368b2006"
        },
        {
          "alg" : "SHA-512",
          "content" : "11a7e384d0d925c6e059b989ef638b045e42181a763b4afb70a3074d7a41764f0ea4b2922ff12e17846a63631c09a1615203f553d2e40ce5b58f9f984336e55e"
        },
        {
          "alg" : "SHA-384",
          "content" : "4f215995526ed2ea5f3274ac66da47a43e8944a94d4cdf50019197300b22e81de4b130d6644707c9eb46ac8a24cd94af"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-codec-socks@4.1.87.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-codec-socks@4.1.87.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-common",
      "version" : "4.1.87.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b0eb8e4da4cfcf226a8c33138ebc028c"
        },
        {
          "alg" : "SHA-1",
          "content" : "3e7e80dd6e604144781fcb859b79cfe8d3730079"
        },
        {
          "alg" : "SHA-256",
          "content" : "811443fc1411a9ef7c1f7b02a750e2a6688f1eec0ae7361ed07812a85d982c86"
        },
        {
          "alg" : "SHA-512",
          "content" : "cbc9020bf9694e93d02259f1fde66cf3e4776f647eb3dda10a3a47323753919698e1de6c2009dfc1d6df69768a1098bf603bc7a197d2991b6c06a81188374629"
        },
        {
          "alg" : "SHA-384",
          "content" : "0a82f90f6996734587e1a60380ba7e3e8915c3e56ffe777a78aad392f53c96bccb4d15bf0f9a168cd0e8370ef7cd7c91"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-common@4.1.87.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-common@4.1.87.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-handler",
      "version" : "4.1.87.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a61f705c80746091d306edcbdfdc676d"
        },
        {
          "alg" : "SHA-1",
          "content" : "2bd97491c22ebea4670c00f1bd5dbf65a8a1cfe7"
        },
        {
          "alg" : "SHA-256",
          "content" : "31a20e1de13b06a677a4719fd5aa95635982114a32c1d034739a48cceada2383"
        },
        {
          "alg" : "SHA-512",
          "content" : "d7abb4791f9e8114e972d7f6f14b2af10e4a2bf9178e87116374508625a0d95840f2e17cc8fb5170aabae3ce3922885da0871e0d942cf79e1a175954f36e3a6c"
        },
        {
          "alg" : "SHA-384",
          "content" : "70be4cee8f35135a00660cef8d095a00b15886d1cdea956a222aafd887e8d3de57949c2044783c2acd03c7ac48ed0b56"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-handler@4.1.87.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-handler@4.1.87.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-native-unix-common",
      "version" : "4.1.87.Final",
      "description" : "Static library which contains common unix utilities.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1f9dbd13aad7e21faeeab339fc24be8c"
        },
        {
          "alg" : "SHA-1",
          "content" : "4bf8308dc7d6ba2570681eaeddb16f8d1196b438"
        },
        {
          "alg" : "SHA-256",
          "content" : "cc2d013c933c206605da01be39f4c2c1f4586a1b9103a665bd724bdd46d9cd0c"
        },
        {
          "alg" : "SHA-512",
          "content" : "6090776597d514d91dfbe88128ea4911c751000e67dad67f17e960208c78d4b631b638262cd928ceab54733cb59e159cb12dc2e321f62ac34005084f83302828"
        },
        {
          "alg" : "SHA-384",
          "content" : "25c02aac5376f61c55864ae431bc44160a04cd06fad729871eafd9292c7a9844e312fd4242821c1b97eedd45d7ff88c1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.87.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.87.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-handler-proxy",
      "version" : "4.1.87.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "abe5be41b6e5934006789f08168b470b"
        },
        {
          "alg" : "SHA-1",
          "content" : "8079f16d6209e10f5d3a09522e7aa9ffb217e17e"
        },
        {
          "alg" : "SHA-256",
          "content" : "65276b2ab687b1b7c1ceabcc941d6e2cce1038f35b581218d7dbf46b16c5b4ac"
        },
        {
          "alg" : "SHA-512",
          "content" : "bb2e4efb7b6d28ea15b72b4bfd0cca3e7b091e7b4763e2c7007ab8aeffca41c10810eb12c73416455d48707451b037fac385628d5127b0cccb46b36b15c9405d"
        },
        {
          "alg" : "SHA-384",
          "content" : "c4097bd7832a65e924c93dda76565ce7afabb1449324793174a14362ea246471802cdc92eb9d8fd55242951f6c5126a9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-handler-proxy@4.1.87.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-handler-proxy@4.1.87.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-resolver",
      "version" : "4.1.87.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4bbe520d843078cd20863a091188f438"
        },
        {
          "alg" : "SHA-1",
          "content" : "eaa964e16a67914c8d9b814d29a4b969635d72a0"
        },
        {
          "alg" : "SHA-256",
          "content" : "ee11d22d240b4b125edaed23ec7cc35ad9241b1b8fdd50630de20411ec345fc7"
        },
        {
          "alg" : "SHA-512",
          "content" : "124ddce0250fd04d310b24812caa72332a5c399dc564d3332c9498abef2aa43dd28f5eb264f4a73af8be8a4b144b03a9572620b0b43731c3e9d73073b88ef8ff"
        },
        {
          "alg" : "SHA-384",
          "content" : "83cfe7a0d00f01fbf5d82a0bd9bfc3945140c4557f15d16a7eb86d996821ede22e150168432e100769db5eb1501f43f6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-resolver@4.1.87.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-resolver@4.1.87.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport",
      "version" : "4.1.87.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "27af50d84a4d81ab5e2264c52349ce8a"
        },
        {
          "alg" : "SHA-1",
          "content" : "30c78c8ced3417f35e2a55f7533dc2bb43fef2aa"
        },
        {
          "alg" : "SHA-256",
          "content" : "17ed465cf5b1579b72379e47be3ba7fccb09dda8d95d47c8d668118483b08f43"
        },
        {
          "alg" : "SHA-512",
          "content" : "810ef943aafc5136fba3dbacdf016511842ee4923406a3fb8d5ba5c02efb2ca80fa8c2d59fdae837bf0a1c842caaca751172ce8ea641503f5102d87bf6b81f82"
        },
        {
          "alg" : "SHA-384",
          "content" : "f60b61e1a9dfdcdcb16ee210a4033ab79ef6441923a53df20d8fae89a1941d13c6ac75db1405aac269cbf04f9489efac"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport@4.1.87.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport@4.1.87.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-classes-epoll",
      "version" : "4.1.87.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4da59e18c5417f540635d1427bed262d"
        },
        {
          "alg" : "SHA-1",
          "content" : "86e61c5743940d80e10609746784ffa0e4642065"
        },
        {
          "alg" : "SHA-256",
          "content" : "0b50ae7e1cb32f89c3a8b38a29605cfe6bd797693b3374fbf2577fbc03719297"
        },
        {
          "alg" : "SHA-512",
          "content" : "977491d40561367d99276dc6a171b91284fc3bbb23e3c9db453cf2b777697b7a22fe9be8e4a1cdf7bb176833d2ae802143c7cff94a34d47b7f84b71cabcdaa2f"
        },
        {
          "alg" : "SHA-384",
          "content" : "5428f910e02656ad66472b6ac0799e866b3f7645fe3f3d5c0c36a4f2ea6f01c0773a00bc4644a6a7c2c42e090c9fff6c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.87.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.87.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-classes-kqueue",
      "version" : "4.1.87.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ed87a0c49219a09b292023a7138a4542"
        },
        {
          "alg" : "SHA-1",
          "content" : "5476926df0ad650d3287d61b0bd17f145ff13791"
        },
        {
          "alg" : "SHA-256",
          "content" : "94abb9234691ce082bbc0d1d533e186cfd1a312d7515a47647896945e7fdbf87"
        },
        {
          "alg" : "SHA-512",
          "content" : "c465db6db9060ba932f42dc946a381d66fb465193353c78b3a6e21107296eb157f1d1822e9d1a7ad771f7bfe378e71b0783bce1716f921934c968b9507a94631"
        },
        {
          "alg" : "SHA-384",
          "content" : "e3855ea0b36bdb2c1d1b7236396c4cd9b5f703694d8863586291df6016edff15615715b12dadbbb22ff3ae88d81772fe"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.87.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.87.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-native-epoll",
      "version" : "4.1.87.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "237a050c5d50d2e5dc080263c33a6f88"
        },
        {
          "alg" : "SHA-1",
          "content" : "3374b1ee72cfff2858821de824ca02d08aedee7c"
        },
        {
          "alg" : "SHA-256",
          "content" : "bb3752881a027efa99388bef21f3287a6553299930f4226a6ea683da21c957f2"
        },
        {
          "alg" : "SHA-512",
          "content" : "472e868a87d03f3adfeb41cff22d95cc435333404a4a7542408d9aac8f80d47f1d35661b7bbc19ab0ac8355cff0abdd1ef632c0b3e5de68d250cbb9d8153a327"
        },
        {
          "alg" : "SHA-384",
          "content" : "4aae1e5c9b9bb9e8aea46f58547aa2a83b387228c2f04344a947522741258dc326e0019669cae0d2026b6660b279e06c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-native-epoll@4.1.87.Final?classifier=linux-x86_64&type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-native-epoll@4.1.87.Final?classifier=linux-x86_64&type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-native-epoll",
      "version" : "4.1.87.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4490db41db789277e444bd2cf212f702"
        },
        {
          "alg" : "SHA-1",
          "content" : "45b6df29d8d912c86d0b2e895b07ebc50715fde3"
        },
        {
          "alg" : "SHA-256",
          "content" : "e83c645de0623d28d6fc72a5a2b6322b2758f01aee83fa5af73f353bebdf028e"
        },
        {
          "alg" : "SHA-512",
          "content" : "0e8a526c52c4486498bc6093576fc834764e3f92aa089fc70ae349227466257e9ddb844b0d2f29f53e60cda2db18a29f7289650e22c40a35009ee8ae675c1591"
        },
        {
          "alg" : "SHA-384",
          "content" : "c835535b28bbd6f99ab2e117831bd1ab78051fd589419f66028f287e9f2ec062b40b6e410594eec7d2e16c58c656129a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-native-epoll@4.1.87.Final?classifier=linux-aarch_64&type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-native-epoll@4.1.87.Final?classifier=linux-aarch_64&type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-native-kqueue",
      "version" : "4.1.87.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cf51e6b9797c3c4b7ebf0d78987297e2"
        },
        {
          "alg" : "SHA-1",
          "content" : "fd571f6f7b8e70d0d9051bf1ff6b38a7d44c891a"
        },
        {
          "alg" : "SHA-256",
          "content" : "27e5bd891a4b8b70db2bf1a4c419fc666714a385d98194fbe3c856cac99610bd"
        },
        {
          "alg" : "SHA-512",
          "content" : "aee8f93790bcf90ec33313a37ae8bd01d45cb0a5e9669a830080f1c0e49c050041255b7fa2a24a7e995da7f1992708ee997c13d98b8077c0b5ba57fd3d237d6e"
        },
        {
          "alg" : "SHA-384",
          "content" : "05c73c791aacbb1eca8e96fd7205d0779debe684973db314a707d6d40b9d44ce17f32eb6c6bcdb271a24220d7913dc10"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.87.Final?classifier=osx-aarch_64&type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.87.Final?classifier=osx-aarch_64&type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-native-kqueue",
      "version" : "4.1.87.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6e353bb9d2433c11c6c8ccb928c5f4b3"
        },
        {
          "alg" : "SHA-1",
          "content" : "28db44b32b4c68f14858e9d691646a7262b57863"
        },
        {
          "alg" : "SHA-256",
          "content" : "dba5794dabbbfa7d97f659b135a14f37544b20cf4438165f4b0ff65bbe525f51"
        },
        {
          "alg" : "SHA-512",
          "content" : "f8f71b31e11f9d20253a37ec3575dc84d1c651805d994dea8b3c5695d7c4ec5a80e5208833529bf227ebc5ab10dd0604bb4bba91f50a6a79be4638f375f89e70"
        },
        {
          "alg" : "SHA-384",
          "content" : "59cec1b02de518e55a5c662be96a1403ffca63f4c3f842cd698888a5eb9dfdbfbebdb3a94922e154712c781f160978d8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.87.Final?classifier=osx-x86_64&type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.87.Final?classifier=osx-x86_64&type=jar"
    },
    {
      "publisher" : "AddThis",
      "group" : "com.clearspring.analytics",
      "name" : "stream",
      "version" : "2.9.6",
      "description" : "A library for summarizing data in streams for which it is infeasible to store all events",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "298278ea2ea29ce1da1a956dd6fad4d4"
        },
        {
          "alg" : "SHA-1",
          "content" : "f9c235bdf6681756b8d4b5429f6e7217597c37ef"
        },
        {
          "alg" : "SHA-256",
          "content" : "d61aebbea8a08148c3aca6b03464495a4bbf9d362205d54ea5f6b443af73afdf"
        },
        {
          "alg" : "SHA-512",
          "content" : "cc9bb80ee82576c035827a3b41f4cee0852b37c80374619c4ddba349be1d4387ad657130caabafab28d50c4869e44c1d3eb852c6370c583ca42a03ee88799406"
        },
        {
          "alg" : "SHA-384",
          "content" : "b40935d7d5d780b7fd5306759c7aeaf2f1477beefa3626e7a0324305f5ab2efcb7656788767baf4f631f00f198c17873"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.clearspring.analytics/stream@2.9.6?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/addthis/stream-lib"
        },
        {
          "type" : "website",
          "url" : "http://www.addthis.com"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.clearspring.analytics/stream@2.9.6?type=jar"
    },
    {
      "group" : "io.dropwizard.metrics",
      "name" : "metrics-core",
      "version" : "4.2.15",
      "description" : "Metrics is a Java library which gives you unparalleled insight into what your code does in production. Metrics provides a powerful toolkit of ways to measure the behavior of critical components in your production environment.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6a000703a6700e51eb4369442a385864"
        },
        {
          "alg" : "SHA-1",
          "content" : "a3ee63ed254f9a6977e2751ffcc0f158c2c1f5e3"
        },
        {
          "alg" : "SHA-256",
          "content" : "d6da099ba1b38378eaf01490623fa570d6be1b6ddd52f1368120de67416d21fc"
        },
        {
          "alg" : "SHA-512",
          "content" : "79c29c4cd9bc7b0a8a1991cd33873652627f4dd922ee7c5007baaa4ddceb5163356a51c39fcf78b314ff34af11073d7cdfe7f83ad8651f2d400fcac33df011ee"
        },
        {
          "alg" : "SHA-384",
          "content" : "76f15cd6994d47f6a6b1e14d46198e096a5446846d3286e4ac7c59b4d74cdd8ddde52a3108f16ceee8649df2da151889"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.dropwizard.metrics/metrics-core@4.2.15?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/dropwizard/metrics/issues/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/dropwizard/metrics/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.dropwizard.metrics/metrics-core@4.2.15?type=jar"
    },
    {
      "group" : "io.dropwizard.metrics",
      "name" : "metrics-jvm",
      "version" : "4.2.15",
      "description" : "A set of classes which allow you to monitor critical aspects of your Java Virtual Machine using Metrics.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "dd958c01bb29cf2b570499263d6b40e7"
        },
        {
          "alg" : "SHA-1",
          "content" : "f3f51669eaae87cc8d95ec806f818b7a6f8dc390"
        },
        {
          "alg" : "SHA-256",
          "content" : "6762a50ae063cd3954922673b83e03403449e87e095ae0251e23284c35dc95e8"
        },
        {
          "alg" : "SHA-512",
          "content" : "fb191b294b54bff4b854ce0c3e0c562f582cfe74e57b6e8b9c809f16f284f2b013dbb4d64d83c25e5d0692128e84b9c026b5e23d89417e1f042fbf93d578734d"
        },
        {
          "alg" : "SHA-384",
          "content" : "b164f70d01da7c6bce8d02017705b7e50122bb9dad82328afa71558e65e98a3c744c8bca85944717c1e96359c03bc8de"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.dropwizard.metrics/metrics-jvm@4.2.15?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/dropwizard/metrics/issues/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/dropwizard/metrics/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.dropwizard.metrics/metrics-jvm@4.2.15?type=jar"
    },
    {
      "group" : "io.dropwizard.metrics",
      "name" : "metrics-json",
      "version" : "4.2.15",
      "description" : "A set of Jackson modules which provide serializers for most Metrics classes.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "69768dd6379e62e39f547e30f8c9b66b"
        },
        {
          "alg" : "SHA-1",
          "content" : "0e27a423a660c13b8a71370c78c80326d3a1acc9"
        },
        {
          "alg" : "SHA-256",
          "content" : "a5c413825d743ae3f421950f640c26890dfcaf156796a3acf637368082653133"
        },
        {
          "alg" : "SHA-512",
          "content" : "2086b88a1121dd473418b17c4ef90187916b5dd255c90133b32f0ed08e1b0112a03054de743b604f7c2783b704171eba35a291de4ad3a7948db62b41a00e3fe0"
        },
        {
          "alg" : "SHA-384",
          "content" : "09cf51576cb51c920b9388d927d3fb599833cd389510b68419155d16f157cbfa534c90353814ae6f4c522db1079183ed"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.dropwizard.metrics/metrics-json@4.2.15?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/dropwizard/metrics/issues/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/dropwizard/metrics/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.dropwizard.metrics/metrics-json@4.2.15?type=jar"
    },
    {
      "group" : "io.dropwizard.metrics",
      "name" : "metrics-graphite",
      "version" : "4.2.15",
      "description" : "A reporter for Metrics which announces measurements to a Graphite server.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "48719bcb814f1e5aaa0b9a9fff5fde91"
        },
        {
          "alg" : "SHA-1",
          "content" : "05b4ed80b3cf371bd83fec91372942306c040777"
        },
        {
          "alg" : "SHA-256",
          "content" : "e96e57afdf999907ce8f9a513c426d529b42285f3c4d098e6e165b8a75f80ed2"
        },
        {
          "alg" : "SHA-512",
          "content" : "2681aab88e1ed22b76155f4dd3d703c71c6d2a9b683ebf6164394d35084225e2f44148b634dbf008b398ccf9c15aaff5eee816e4dc24d714da08ee27279d024d"
        },
        {
          "alg" : "SHA-384",
          "content" : "6a6a4822114d4090342f679f6a283fadd7b739e29e78c03aab43d15f69b31b7ecdd7967d74f0ae0d1c1b575666b42f5f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.dropwizard.metrics/metrics-graphite@4.2.15?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/dropwizard/metrics/issues/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/dropwizard/metrics/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.dropwizard.metrics/metrics-graphite@4.2.15?type=jar"
    },
    {
      "group" : "io.dropwizard.metrics",
      "name" : "metrics-jmx",
      "version" : "4.2.15",
      "description" : "A set of classes which allow you to report metrics via JMX.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1f6f7930b5941ab20fff92e7d834648c"
        },
        {
          "alg" : "SHA-1",
          "content" : "ddbdf83a5510dbdf67a14bfdb8a92fd742078841"
        },
        {
          "alg" : "SHA-256",
          "content" : "6d86428d884560bcf4a9c14bf1c0066fe10ec0ff1abe63caa4b7a16b92ff77fc"
        },
        {
          "alg" : "SHA-512",
          "content" : "13a1fc8f0ed37fef9043fe9e5e9a40d68e2e75455abf496c3cbebf631a8f6eb46b40d84fc403b2048785a0f960a0b42d2baecdec452c190d929225adee4921e7"
        },
        {
          "alg" : "SHA-384",
          "content" : "fafc78fc29c7b4c43a99eed001a2ff22ceadcb22903280ed823ca5176bca31186c09ef95fecb5f26b4dd588079a7e702"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.dropwizard.metrics/metrics-jmx@4.2.15?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/dropwizard/metrics/issues/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/dropwizard/metrics/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.dropwizard.metrics/metrics-jmx@4.2.15?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-databind",
      "version" : "2.14.2",
      "description" : "General data-binding functionality for Jackson: works on core streaming API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c1b12dd14734cd1986132bf55042dd7e"
        },
        {
          "alg" : "SHA-1",
          "content" : "01e71fddbc80bb86f71a6345ac1e8ab8a00e7134"
        },
        {
          "alg" : "SHA-256",
          "content" : "501d3abce4d18dcc381058ec593c5b94477906bba6efbac14dae40a642f77424"
        },
        {
          "alg" : "SHA-512",
          "content" : "85473a29d23292f49092af9e7a7a63993206847c53b3e71f3c67245d68f7b19cc7c341e0ece409eb5e96602df98a848e957d8691fdd2c5fcddd807df9078255e"
        },
        {
          "alg" : "SHA-384",
          "content" : "5c54d6c497cb329c3424a30319bf657ea222349eadc5ae74c30e8dc1525d7b60b7785f4d20370267b03343dd738cc13e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-databind"
        },
        {
          "type" : "website",
          "url" : "http://fasterxml.com/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar"
    },
    {
      "publisher" : "com.fasterxml.jackson.module",
      "group" : "com.fasterxml.jackson.module",
      "name" : "jackson-module-scala_2.12",
      "version" : "2.14.2",
      "description" : "jackson-module-scala",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0235403baa54a12581f9f3b10ce4d90b"
        },
        {
          "alg" : "SHA-1",
          "content" : "cbf3cc89a6568f47cd9579683943afc03aec1682"
        },
        {
          "alg" : "SHA-256",
          "content" : "995f3af49b441e039d96daa52469bd444a51e53be09a5dcdcb090a044e3cd3f3"
        },
        {
          "alg" : "SHA-512",
          "content" : "88dd3ed75d4703db68fafbfe4aa092e90079cbb63d5f70d938115c2a3b14c07fe38029b11ae2bc1da00bcf67db7db9bb0611b147af941e415c9eb139752d7618"
        },
        {
          "alg" : "SHA-384",
          "content" : "303fe0886dd55b3ebb0e25f442a4b1cdd90aa41065789132969bb3fbf68f043497915551698ca6777a90bad2fcce0007"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.module/jackson-module-scala_2.12@2.14.2?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-module-scala"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.module/jackson-module-scala_2.12@2.14.2?type=jar"
    },
    {
      "group" : "com.thoughtworks.paranamer",
      "name" : "paranamer",
      "version" : "2.8",
      "description" : "Paranamer allows runtime access to constructor and method parameter names for Java classes",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f213c72b67d4850f17a4a3e9064904de"
        },
        {
          "alg" : "SHA-1",
          "content" : "619eba74c19ccf1da8ebec97a2d7f8ba05773dd6"
        },
        {
          "alg" : "SHA-256",
          "content" : "688cb118a6021d819138e855208c956031688be4b47a24bb615becc63acedf07"
        },
        {
          "alg" : "SHA-512",
          "content" : "d774b05135d34bc42d8a7bee6466715bc44837b95bbe618faa8680978c4348652292ea6dd8eeb88dc7fa859bfe685f4d8329032cbf4fce2ea7e555ba3243cc14"
        },
        {
          "alg" : "SHA-384",
          "content" : "699148a3f69ae205aa47c82e2cb78d3949afc71b090935579a0363fee8675eec3ba05e0d3127295213b39aad3485690b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-4-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.thoughtworks.paranamer/paranamer@2.8?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/paul-hammant/paranamer"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.thoughtworks.paranamer/paranamer@2.8?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.ivy",
      "name" : "ivy",
      "version" : "2.5.1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e2b8480e296278e41b68020a444c6ae1"
        },
        {
          "alg" : "SHA-1",
          "content" : "7fac35f24f89776e7b78ec98658d8bc8f22f7e89"
        },
        {
          "alg" : "SHA-256",
          "content" : "793120f8c9058aede475b093651aa5307603c1518180772c104562a0ed2e9feb"
        },
        {
          "alg" : "SHA-512",
          "content" : "9d63b3d5ef750e08f802a1d2f5a8d855ca30bad39fd58bc48db3d7bcfb7ecfd91a61965135755da81c8267d050d1a9addf4dd46eb28a3bfda467d691274e016a"
        },
        {
          "alg" : "SHA-384",
          "content" : "049d433f5ba75371f0376bf9f465e1bfb111458df469d8f0313113b175a1f13d3650f064cbe8ee3c3bef4ac84831caa0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.ivy/ivy@2.5.1?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/IVY"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/ant-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://svn.apache.org/repos/asf/ant/ivy/core/trunk"
        },
        {
          "type" : "website",
          "url" : "http://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.ivy/ivy@2.5.1?type=jar"
    },
    {
      "group" : "oro",
      "name" : "oro",
      "version" : "2.0.8",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "42e940d5d2d822f4dc04c65053e630ab"
        },
        {
          "alg" : "SHA-1",
          "content" : "5592374f834645c4ae250f4c9fbb314c9369d698"
        },
        {
          "alg" : "SHA-256",
          "content" : "e00ccdad5df7eb43fdee44232ef64602bf63807c2d133a7be83ba09fd49af26e"
        },
        {
          "alg" : "SHA-512",
          "content" : "9a98e493c4d771322b1331ec05ab0e363a83d8ac2af8018d96a44df2bf5bfc97d33ebe6f6f93e46ab10bf1536f0c29e9d9569318ed49bc18b4e96b1a8b476d37"
        },
        {
          "alg" : "SHA-384",
          "content" : "f542e92b7a86bcb20cc21f0c4b29778428944391344ca11df432f9ce36a96ce8e8f65da67e450e52c0e8ba441d2a7332"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/oro/oro@2.0.8?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/oro/oro@2.0.8?type=jar"
    },
    {
      "group" : "net.razorvine",
      "name" : "pickle",
      "version" : "1.3",
      "description" : "A feature complete pickle protocol implementation (Python's builtin serialization mechanism)",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b043c671d86e43a0a11cc02e815616e9"
        },
        {
          "alg" : "SHA-1",
          "content" : "43eab5f4a8d0a06a38a6c349dec32bd08454c176"
        },
        {
          "alg" : "SHA-256",
          "content" : "259aca378cbcee48797d047169e573666640312a188e2428a03cb19b0fbc7664"
        },
        {
          "alg" : "SHA-512",
          "content" : "8199f376fcd39e0437a6a4fd7a853bd2edf1805bdd43b185dab8f5b97eda3a657a757bf61bad8474379c60b1074f38c4ed03ed2541e77408d08531036f725485"
        },
        {
          "alg" : "SHA-384",
          "content" : "a6ac01883fb7c170210d9b9b241a9544e168ede941618517ca468a499747ed044b3e792904c5b45ef77e48a69b19b017"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/net.razorvine/pickle@1.3?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/irmen/pickle/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/irmen/pickle"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.razorvine/pickle@1.3?type=jar"
    },
    {
      "group" : "net.sf.py4j",
      "name" : "py4j",
      "version" : "0.10.9.7",
      "description" : "Py4J enables Python programs running in a Python interpreter to dynamically access Java objects in a Java Virtual Machine. Methods are called as if the Java objects resided in the Python interpreter and Java collections can be accessed through standard Python collection methods. Py4J also enables Java programs to call back Python objects.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7afcbc30fa3c00d5febfbc522235f2a5"
        },
        {
          "alg" : "SHA-1",
          "content" : "e444374109f6f3ffdfdbd4e7dc5a89122b0c9134"
        },
        {
          "alg" : "SHA-256",
          "content" : "4d67d584e7b0f456deedffbd3f43047efd6748ff3d13b443abb61ec54cf7af13"
        },
        {
          "alg" : "SHA-512",
          "content" : "8e3bb548cea719e4ab0d3d559f1cdb8401c74606036c93f93b6519942994432786a800ce57b6d04fd090dfdea0359cf78e4d899021c5559f4f2f558fb09dc1be"
        },
        {
          "alg" : "SHA-384",
          "content" : "b7d117caa8c2269807f1ad4335fab2f9f6d99b93ee68ec548f3ff3d520f8d11ce8ecb2c2798f8fd86fb19606be60187f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/net.sf.py4j/py4j@0.10.9.7?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.sonatype.org/spice/tags/oss-parent-7"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sf.py4j/py4j@0.10.9.7?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-crypto",
      "version" : "1.1.0",
      "description" : "Apache Commons Crypto is a cryptographic library optimized with AES-NI (Advanced Encryption Standard New Instructions). It provides Java API for both cipher level and Java stream level. Developers can use it to implement high performance AES encryption/decryption with the minimum code and effort. Please note that Crypto doesn't implement the cryptographic algorithm such as AES directly. It wraps to Openssl or JCE which implement the algorithms. Features -------- 1. Cipher API for low level cryptographic operations. 2. Java stream API (CryptoInputStream/CryptoOutputStream) for high level stream encryption/decryption. 3. Both optimized with high performance AES encryption/decryption. (1400 MB/s - 1700 MB/s throughput in modern Xeon processors). 4. JNI-based implementation to achieve comparable performance to the native C/C++ version based on OpenSsl. 5. Portable across various operating systems (currently only Linux/MacOSX/Windows); Apache Commons Crypto loads the library according to your machine environment (it checks system properties, `os.name` and `os.arch`). 6. Simple usage. Add the commons-crypto-(version).jar file to your classpath. Export restrictions ------------------- This distribution includes cryptographic software. The country in which you currently reside may have restrictions on the import, possession, use, and/or re-export to another country, of encryption software. BEFORE using any encryption software, please check your country's laws, regulations and policies concerning the import, possession, or use, and re-export of encryption software, to see if this is permitted. See <http://www.wassenaar.org/> for more information. The U.S. Government Department of Commerce, Bureau of Industry and Security (BIS), has classified this software as Export Commodity Control Number (ECCN) 5D002.C.1, which includes information security software using or performing cryptographic functions with asymmetric algorithms. The form and manner of this Apache Software Foundation distribution makes it eligible for export under the License Exception ENC Technology Software Unrestricted (TSU) exception (see the BIS Export Administration Regulations, Section 740.13) for both object code and source code. The following provides more details on the included cryptographic software: * Commons Crypto use [Java Cryptography Extension](http://docs.oracle.com/javase/8/docs/technotes/guides/security/crypto/CryptoSpec.html) provided by Java * Commons Crypto link to and use [OpenSSL](https://www.openssl.org/) ciphers",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c71451f3c4737ba6d84f9bd9e8f2400d"
        },
        {
          "alg" : "SHA-1",
          "content" : "4a8b4caa84032a0f1f1dad16875820a4f37524b7"
        },
        {
          "alg" : "SHA-256",
          "content" : "44dc28551cdba731658090d9b10d2eead9839c269d70cdcd7d56c0423df5227f"
        },
        {
          "alg" : "SHA-512",
          "content" : "62acf1d90ad667c8f3f9b267c6f4fefa57eb914ef57a24e10a7dc6ea7bf1f2a6933db831f836dc2ca0fe86aff84a6d1a0fb3c8bb34c7c24e3e1190778efb241d"
        },
        {
          "alg" : "SHA-384",
          "content" : "0d7c20964ab9cbde60d3d03ca92b481e30f969b30adc336b77ec8b8dcb660e327bfff8c98cb9c30163e7bdf5ffbae486"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-crypto@1.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/search/?q=Commons-CRYPTO"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CRYPTO"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-crypto.git"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-crypto@1.1.0?type=jar"
    },
    {
      "publisher" : "Google",
      "group" : "com.google.protobuf",
      "name" : "protobuf-java",
      "version" : "2.5.0",
      "description" : "Protocol Buffers are a way of encoding structured data in an efficient yet extensible format.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a44473b98947e2a54c54e0db1387d137"
        },
        {
          "alg" : "SHA-1",
          "content" : "a10732c76bfacdbd633a7eb0f7968b1059a65dfa"
        },
        {
          "alg" : "SHA-256",
          "content" : "e0c1c64575c005601725e7c6a02cebf9e1285e888f756b2a1d73ffa8d725cc74"
        },
        {
          "alg" : "SHA-512",
          "content" : "10ea0baf440c78598eee2bff3742bc2f41b7e67847f8bb43a1f154d7649853ebd9eb86288aab65f4d1a196f4586bab16b656ec7940ec92a57b1c117b8f59abac"
        },
        {
          "alg" : "SHA-384",
          "content" : "33ad6e25b942b4076c8b9dfcc0aae8ca802b9028aa9939f86e4752b4847b35fb486f6d3efa81d38ad1edcbec6e614494"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.protobuf/protobuf-java@2.5.0?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "http://code.google.com/p/protobuf/source/browse"
        },
        {
          "type" : "website",
          "url" : "http://www.google.com/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.protobuf/protobuf-java@2.5.0?type=jar"
    },
    {
      "publisher" : "org.scala-lang.modules",
      "group" : "org.scala-lang.modules",
      "name" : "scala-parser-combinators_2.12",
      "version" : "2.1.1",
      "description" : "scala-parser-combinators",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bd9b98a43575e38a48e8a41161b1242b"
        },
        {
          "alg" : "SHA-1",
          "content" : "c35c234a906ac014cc4889e7377418752a6f5b49"
        },
        {
          "alg" : "SHA-256",
          "content" : "7a5186fc9fc93cb03ae1dd96d9be22257421a5e0389c81cae45cdce8ba88a9b0"
        },
        {
          "alg" : "SHA-512",
          "content" : "5038c9e5125b7a6fd7a7208d143a05e5ef76ab5fcef32f612f875affdf422033352d747a48c3d663e91ddd447c08166e77cfd3b0d5eb733f735330acf1597476"
        },
        {
          "alg" : "SHA-384",
          "content" : "b3ebade4a5adbf5a8a824a68bff07d1e70aa642d813e43886ee59763f076042999762aa8887d70bd0ae810be7125d044"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.scala-lang.modules/scala-parser-combinators_2.12@2.1.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.scala-lang.org/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/scala/scala-parser-combinators/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/scala/scala-parser-combinators"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.scala-lang.modules/scala-parser-combinators_2.12@2.1.1?type=jar"
    },
    {
      "group" : "org.apache.spark",
      "name" : "spark-sketch_2.12",
      "version" : "3.4.3",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c66aeebf46d9f5242a12d54caa9c49c3"
        },
        {
          "alg" : "SHA-1",
          "content" : "de4bf16a3910e00f6fd8f8b8eed4d498e9f764a6"
        },
        {
          "alg" : "SHA-256",
          "content" : "696c93cbc7defd7aec808b11f09cd67595532405c68a8b859e4682ad944ebf89"
        },
        {
          "alg" : "SHA-512",
          "content" : "04c8e49290b418d3089adea594fc9c5e6b5b7ab675fd898f354367a52ea97dcfc76f99d15add200321290575006300367ad7a590f9e5115353c5eeeb6f3d7a90"
        },
        {
          "alg" : "SHA-384",
          "content" : "cbe4890278c1714db39f6bbaa63ac2280751e7c987e27353ef7f7502235cf47107a5afb643b90ef6cf97750282f139ed"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.apache.spark/spark-sketch_2.12@3.4.3?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.spark/spark-sketch_2.12@3.4.3?type=jar"
    },
    {
      "group" : "org.codehaus.janino",
      "name" : "janino",
      "version" : "3.1.9",
      "description" : "The \"JANINO\" implementation of the \"commons-compiler\" API: Super-small, super-fast, independent from the JDK's \"tools.jar\".",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "597cbcd4d0b8273552758c50bf423926"
        },
        {
          "alg" : "SHA-1",
          "content" : "536fb0c44627faae32ca7a8a24734f4aab38c878"
        },
        {
          "alg" : "SHA-256",
          "content" : "7df88d90aa165ab48bdebea425fa009eeef04918c82e98cdbea5e747e114508d"
        },
        {
          "alg" : "SHA-512",
          "content" : "840dba1621f06322d6ede76c941665e4e119f26ca1b7cb1a510a2bd9d692d3a5d75ac79477055824c2af37958e1c330daf6e1fbb9fd5bbba82db3a3f6077ff11"
        },
        {
          "alg" : "SHA-384",
          "content" : "85599d163bfe4c2d66e526d549c5bd26bc4137c4bb80099130782e42cfb9d5a55d34b11d98877cf11436536d3f1f9aa3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.janino/janino@3.1.9?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/janino-compiler/janino"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.janino/janino@3.1.9?type=jar"
    },
    {
      "group" : "org.codehaus.janino",
      "name" : "commons-compiler",
      "version" : "3.1.9",
      "description" : "The \"commons-compiler\" API, including the \"IExpressionEvaluator\", \"IScriptEvaluator\", \"IClassBodyEvaluator\" and \"ISimpleCompiler\" interfaces.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e14b760178e0c2105e2951c2f452a1d1"
        },
        {
          "alg" : "SHA-1",
          "content" : "f0d70bb319e9339aea90a8665693e69848acc598"
        },
        {
          "alg" : "SHA-256",
          "content" : "d988a3ebc17188e9a1a3efadd8e958b90eb995c4fcc077292a5dfe5fe1109d25"
        },
        {
          "alg" : "SHA-512",
          "content" : "0d290612b69ddece1c58ae0a60c6a544893800f588a424afb7bc12215a9e3bfe775ff6bac749f16c7b4e32e186ad29bceb80112df4082f16ce1f749685135e80"
        },
        {
          "alg" : "SHA-384",
          "content" : "ab1394175f2509bcdc5aa1c76294ba146ba09bae259401932f08bb9b5debd11049d2c751e503e4255d4efd4a4f199107"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.janino/commons-compiler@3.1.9?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/janino-compiler/janino"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.janino/commons-compiler@3.1.9?type=jar"
    },
    {
      "publisher" : "ANTLR",
      "group" : "org.antlr",
      "name" : "antlr4-runtime",
      "version" : "4.9.3",
      "description" : "The ANTLR 4 Runtime",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "718f199bafa6574ffa1111fa3e10276a"
        },
        {
          "alg" : "SHA-1",
          "content" : "81befc16ebedb8b8aea3e4c0835dd5ca7e8523a8"
        },
        {
          "alg" : "SHA-256",
          "content" : "131a6594969bc4f321d652ea2a33bc0e378ca312685ef87791b2c60b29d01ea5"
        },
        {
          "alg" : "SHA-512",
          "content" : "2c3763a8fbc7af110df5d6bb57692759b23e8bf961a53694c69bde4cd9d8c3a8eaa55cf376ce34c6c4e2035a99d7abf08c6ffa3b75d18a6d93a9c1ca95927ea8"
        },
        {
          "alg" : "SHA-384",
          "content" : "62a62dab4a27733a810b97fe5544eb1b5b25d2df83ea8d93802cb0e6fd1b4b3ca5a130c51aa9198deefc30cd0f062841"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-4-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.antlr.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/antlr/antlr4/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/?fromgroups#!forum/antlr-discussion"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/antlr/antlr4/tree/master"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar"
    },
    {
      "publisher" : "Univocity Software Pty Ltd",
      "group" : "com.univocity",
      "name" : "univocity-parsers",
      "version" : "2.9.1",
      "description" : "univocity's open source parsers for processing different text formats using a consistent API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7032ba85007afd0bfc702a72bf486fd0"
        },
        {
          "alg" : "SHA-1",
          "content" : "081827d186e42129f23c3f1e002b757ad4b4e769"
        },
        {
          "alg" : "SHA-256",
          "content" : "31685122d5e392e98672ed6009a95a4c1623ca1185567bd44ee94527d454e5c3"
        },
        {
          "alg" : "SHA-512",
          "content" : "95656c856840b203507e42c33ef15bbf1995ad364ff229dba4f6358713259cbcad96a4aeb11db57d3f5ace2500bcfd702dd9457bea45186aa5ae7ed1bfd60559"
        },
        {
          "alg" : "SHA-384",
          "content" : "c29f921251bafd86bcc18b5cedf28fa53a3cbbc0fb8631c72c61038b02ce53c2141900faa54586edbbaa519cc5a815ab"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.univocity/univocity-parsers@2.9.1?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/univocity/univocity-parsers/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/univocity/univocity-parsers"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.univocity/univocity-parsers@2.9.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.arrow",
      "name" : "arrow-vector",
      "version" : "11.0.0",
      "description" : "An off-heap reference implementation for Arrow columnar data format.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "507791ac52f0e09f8f5b618403b0a113"
        },
        {
          "alg" : "SHA-1",
          "content" : "86cfffdf0e7185058cb1302aa0db4565300caa46"
        },
        {
          "alg" : "SHA-256",
          "content" : "87f624dd0e46cc92d584783f0d6b0e346b93be850791bcd9ab129aa31f633800"
        },
        {
          "alg" : "SHA-512",
          "content" : "56683dbcf6c779f7fe5450705d3332c719f4b83b75bd18d172997de067a7e2803753e1699e5162fcc78f717f2b1d3bf87e8ac4800706c52cbd2446d6b5d70950"
        },
        {
          "alg" : "SHA-384",
          "content" : "56d0e743908e79716b4d5fd304612f78b19b11d17fa6cc1baa3c0416467060839fe0824c5453e45c96488060fc166f72"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.arrow/arrow-vector@11.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/arrow"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/arrow-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/arrow"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.arrow/arrow-vector@11.0.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.arrow",
      "name" : "arrow-format",
      "version" : "11.0.0",
      "description" : "Generated Java files from the IPC Flatbuffer definitions.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "146fc190a2211dd88672f3166d4977a1"
        },
        {
          "alg" : "SHA-1",
          "content" : "370e76ffad508246e98a09a09fcabe96f42014ab"
        },
        {
          "alg" : "SHA-256",
          "content" : "225430bb2622fb63fb821ced6e223c0425aa1c0d38eb6079006f82c54b89de72"
        },
        {
          "alg" : "SHA-512",
          "content" : "b40f67d404692eb71a4f8a5e5ed260ade9649659b7169ed4d515a249c3f876b24dfbab693b7177d791b88ff660a08723e64c7493ceef44c06dc037ee25249096"
        },
        {
          "alg" : "SHA-384",
          "content" : "e2add6c654a8f13cca40997dd152cb208e03905d853dc99785e421205f52f164c0db58271eec9c184da15a4bcf8d5d11"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.arrow/arrow-format@11.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/arrow"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/arrow-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/arrow"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.arrow/arrow-format@11.0.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.arrow",
      "name" : "arrow-memory-core",
      "version" : "11.0.0",
      "description" : "Core off-heap memory management libraries for Arrow ValueVectors.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "67f0c0b5ea51a6a60e82fe8967bb14bf"
        },
        {
          "alg" : "SHA-1",
          "content" : "e8a11b92d5d79af8bfa8a81a00c97b1c46ce915d"
        },
        {
          "alg" : "SHA-256",
          "content" : "75d902571f5cb130a26836ac04c073cea2070da08e6df58e7e05171912fa4764"
        },
        {
          "alg" : "SHA-512",
          "content" : "0cc8d7d7e6f805efe86312a04147251d208d0fb109359ac7693395d6c3c95604fabba3b1d5f014b3da96a146743bf148a47530b84d7ace7be1982963c82ce674"
        },
        {
          "alg" : "SHA-384",
          "content" : "cc082f1c57bc4cef29cf99f86c777386d2e04a4804ce40a237d9659f6070be154d94147eb64dde0191fd397b64e30982"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.arrow/arrow-memory-core@11.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/arrow"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/arrow-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/arrow"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.arrow/arrow-memory-core@11.0.0?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.datatype",
      "name" : "jackson-datatype-jsr310",
      "version" : "2.14.2",
      "description" : "Add-on module to support JSR-310 (Java 8 Date & Time API) data types.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1d3433114ab756cc902462b04bc37501"
        },
        {
          "alg" : "SHA-1",
          "content" : "796518148a385b2728d44886cc0f8852eb8eeb53"
        },
        {
          "alg" : "SHA-256",
          "content" : "75651b65733ed94e4e28e4ba0817218d93e71e8a7f06f6ab3662752974d2bcae"
        },
        {
          "alg" : "SHA-512",
          "content" : "5ea76e302154fdde769622a6891c45cb56ea06277c25cd36b1cc52cbffbeb59e7b4a25d824d2e33d1473c7ba1044ce2141573564457f649ab2a59e6b1086d17e"
        },
        {
          "alg" : "SHA-384",
          "content" : "a3d778f5d3f6338df0d702c2274bb1c7ff5d2dedc4f1006bef21494e12d9524f6f6305ff24b8df4593d271ad0d0f693f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.14.2?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-modules-java8/issues"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/jackson-modules-java8"
        },
        {
          "type" : "website",
          "url" : "http://fasterxml.com/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.14.2?type=jar"
    },
    {
      "group" : "com.google.flatbuffers",
      "name" : "flatbuffers-java",
      "version" : "1.12.0",
      "description" : "Memory Efficient Serialization Library",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "26ecc1a330e441f909226a338d4bef65"
        },
        {
          "alg" : "SHA-1",
          "content" : "8201cc7b511177a37071249e891f2f2fea4b32e9"
        },
        {
          "alg" : "SHA-256",
          "content" : "3f8c088b4dd04a9858721f2e162508c94db0dd86f961e306ee63ef2eda871bf7"
        },
        {
          "alg" : "SHA-512",
          "content" : "20750e91441c074ca28f72b0b6494e8f0bfbc94caff04eb49727efc6b28e453c84732f24acc52cf36b36ba66b57a145d003e87f749c5c4518ddc6f9247b8ab47"
        },
        {
          "alg" : "SHA-384",
          "content" : "7af7d2e03ae71bea1ebac6cc9c2926b9f952c48a124db160ee2327f2f7e6b2e3ba153e5924971788392fc278b0e04ee9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.flatbuffers/flatbuffers-java@1.12.0?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/google/flatbuffers"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.flatbuffers/flatbuffers-java@1.12.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.arrow",
      "name" : "arrow-memory-netty",
      "version" : "11.0.0",
      "description" : "Netty allocator and utils for allocating memory in Arrow",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "028233843faf972ba11321059f8c36f6"
        },
        {
          "alg" : "SHA-1",
          "content" : "4e427a070f21efaffe6009faf6d97b260dbec36b"
        },
        {
          "alg" : "SHA-256",
          "content" : "cf746a464131b27fbc9e9508e6e5179731fd89273e65da06f6ee74a62a4353da"
        },
        {
          "alg" : "SHA-512",
          "content" : "ad8ae314d3ffbf0d90e0885da45d9e57489e9f829a51203525eadcbdc73a12ea839e55b428dc3a35c8bb689a94798136ee2723d3096103b510763eaf50044e81"
        },
        {
          "alg" : "SHA-384",
          "content" : "fe0ee2b07d2628d25259938eb263b70388ac0d5c36612ffadc73fcea7bb81683c6d1bcdffbb5b7e1fa910732567446c6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.arrow/arrow-memory-netty@11.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/arrow"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/arrow-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/arrow"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.arrow/arrow-memory-netty@11.0.0?type=jar"
    },
    {
      "group" : "com.google.guava",
      "name" : "guava",
      "version" : "14.0.1",
      "description" : "Guava is a suite of core and expanded libraries that include utility classes, google's collections, io classes, and much much more. Guava has two code dependencies - javax.annotation per the JSR-305 spec and javax.inject per the JSR-330 spec.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "58553f87d83b9f8ec74bd3529083ee2f"
        },
        {
          "alg" : "SHA-1",
          "content" : "69e12f4c6aeac392555f1ea86fab82b5e5e31ad4"
        },
        {
          "alg" : "SHA-256",
          "content" : "d69df3331840605ef0e5fe4add60f2d28e870e3820937ea29f713d2035d9ab97"
        },
        {
          "alg" : "SHA-512",
          "content" : "e920540dbdee79fba1a5e0966ae92ac37358aa4126c04a08732e4260916807901d8dea41322037ef7908fc0204281d05a1bfa95401fcfc473630c0bc8e81343a"
        },
        {
          "alg" : "SHA-384",
          "content" : "1f5c72fdf4fbef5fe6044054d83cda82d409ce2b8e304913cc985341ceb13e75728dfcdba522dc87aa04577a054afeae"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/guava@14.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "http://code.google.com/p/guava-libraries/issues"
        },
        {
          "type" : "vcs",
          "url" : "http://code.google.com/p/guava-libraries/source/browse"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/guava@14.0.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.hive",
      "name" : "hive-cli",
      "version" : "2.3.9",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fdb8d4f0b03d45389299b487b2f97a3f"
        },
        {
          "alg" : "SHA-1",
          "content" : "91354cd40d813c866fae4453e250b2e1947db726"
        },
        {
          "alg" : "SHA-256",
          "content" : "885a0cb6cfe538490250bcc9d3544df924e280aec049d0d6d80d678b5d17079d"
        },
        {
          "alg" : "SHA-512",
          "content" : "65854e1fb7789fcb9e4e69e92c670986f9781776d1a276a0eb505daa3c319426ddbae9291d9bfc9b3582a27ad02dd06cedf9bb9405376a0be7fad67d18d988bf"
        },
        {
          "alg" : "SHA-384",
          "content" : "84efefe59448757d0b7b366289165f8fc165494ea359f4563b668a866ff9b251df7ee3ddbfed9bb291648211f18783e5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hive/hive-cli@2.3.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/maven/pom/tags/apache-14"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hive/hive-cli@2.3.9?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-lang",
      "name" : "commons-lang",
      "version" : "2.6",
      "description" : "Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4d5c1693079575b362edf41500630bbd"
        },
        {
          "alg" : "SHA-1",
          "content" : "0ce1edb914c94ebc388f086c6827e8bdeec71ac2"
        },
        {
          "alg" : "SHA-256",
          "content" : "50f11b09f877c294d56f24463f47d28f929cf5044f648661c0f0cfbae9a2f49c"
        },
        {
          "alg" : "SHA-512",
          "content" : "4a5a3dbe4941c645e2cca068cca5c1882cfe988b02e7cd981d1e51784900767d1deab0e0e0566f559c9fcabb4a180e436d5bb948902d4f4106f37360466afb42"
        },
        {
          "alg" : "SHA-384",
          "content" : "9725bc421adc1dbcd6f937eca0f3075d186a2b353ece4cef66b0fe81bb8d3f7d7641c43e86d657ef526c719f0c2a8c90"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-lang/commons-lang@2.6?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/lang/branches/LANG_2_X"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "http://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-lang/commons-lang@2.6?type=jar"
    },
    {
      "group" : "jline",
      "name" : "jline",
      "version" : "2.14.6",
      "description" : "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "480423551649bc6980b43f09e4717272"
        },
        {
          "alg" : "SHA-1",
          "content" : "c3aeac59c022bdc497c8c48ed86fa50450e4896a"
        },
        {
          "alg" : "SHA-256",
          "content" : "97d1acaac82409be42e622d7a54d3ae9d08517e8aefdea3d2ba9791150c2f02d"
        },
        {
          "alg" : "SHA-512",
          "content" : "27f6e2523e539383cede51d8eae7e97d49038c5a66cb4a94a9ce85165f16e7382b937a238cdb0c92e1136af56c5f57bcc6c04435a370c5d49f7e4bd32f0d9194"
        },
        {
          "alg" : "SHA-384",
          "content" : "3ccd9d87500b42c743c91654b0f12d2e2c06a953eaf3d6acb07f2b9c2c861ffb8aaffdc5ed0aabefdc400f0d33944e00"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-4-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/jline/jline@2.14.6?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jline/jline2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/group/jline-users"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/jline/jline2"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/jline/jline@2.14.6?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.hive",
      "name" : "hive-jdbc",
      "version" : "2.3.9",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "46e915da3679c46ee28205f50b0e87d5"
        },
        {
          "alg" : "SHA-1",
          "content" : "9963431fab47a069201c858cf07795373ed491af"
        },
        {
          "alg" : "SHA-256",
          "content" : "a5de51cbae1189515193277a9849c5f9b831610913c791a4bc59bedb21cbc639"
        },
        {
          "alg" : "SHA-512",
          "content" : "c0269d26d1dba19f98f07d64689e2cded3e5c20bbb19707d4b295df36a7a60aa709440d1ffd422bcf2de61aef791fa138951a1afb5ef049a3050be8018fe6812"
        },
        {
          "alg" : "SHA-384",
          "content" : "d8ffe737febb0d823d322c34815169b498574023d208420414113f7cfdac0007ef86e55cc3662652c8bce260414b5be1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hive/hive-jdbc@2.3.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/maven/pom/tags/apache-14"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hive/hive-jdbc@2.3.9?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.hive",
      "name" : "hive-beeline",
      "version" : "2.3.9",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7d62447025d5fb7e94949ecdaf45fda7"
        },
        {
          "alg" : "SHA-1",
          "content" : "46d6e82ba0dcc6c118bfb7226d8a0a9822686dc2"
        },
        {
          "alg" : "SHA-256",
          "content" : "87a281cdbd4d44b06dc4b3fa9f145bbefac7119084e8ef0524ec55a67f298b8d"
        },
        {
          "alg" : "SHA-512",
          "content" : "54eb8c08354837b1f34f57dcef77c882dfa51e221d65a6fec137519dd081c274f1b0167053836b6d18ccd6225139fe95738add2bcb7b199ba3c6e90d57b3e84a"
        },
        {
          "alg" : "SHA-384",
          "content" : "ff6609d7d9b63308158798f62149ffe8debef5c1da1e6b2fac832a73a43d575eb5eee66ca0639059e861f635899487f5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hive/hive-beeline@2.3.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/maven/pom/tags/apache-14"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hive/hive-beeline@2.3.9?type=jar"
    },
    {
      "publisher" : "Super CSV",
      "group" : "net.sf.supercsv",
      "name" : "super-csv",
      "version" : "2.2.0",
      "description" : "Super CSV is a fast, programmer-friendly, free CSV package for Java",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f1becdf4405593130cdf5d4a82adadcb"
        },
        {
          "alg" : "SHA-1",
          "content" : "610e18fff0e7bd6cd072310f0d73fc982ffb6834"
        },
        {
          "alg" : "SHA-256",
          "content" : "bf743e0c1f1c42d19df236d82fa0b34128cd5e82cde6e491e316ec274f94bfbe"
        },
        {
          "alg" : "SHA-512",
          "content" : "963b3b18832d35abdefbf1e10154d86c8deb0d98ad9377aa3004adc879ab4ed0c47b5283dccc971d0607e7f6e0e79054470ba3f13917443f4c660b8599a2b86f"
        },
        {
          "alg" : "SHA-384",
          "content" : "0e39e035811f85750522bffe28c49cffbca68480109ef0e5e7e81df9d55ff8167615fa6ef6a09f2b2b54677f43591744"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/net.sf.supercsv/super-csv@2.2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://supercsv.sourceforge.net/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://sourceforge.net/p/supercsv/bugs/"
        },
        {
          "type" : "vcs",
          "url" : "https://sourceforge.net/p/supercsv/code/tags/v2.2.0"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sf.supercsv/super-csv@2.2.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.hive",
      "name" : "hive-service-rpc",
      "version" : "3.1.3",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a26beb7032c82e6aac9d081cab06a48f"
        },
        {
          "alg" : "SHA-1",
          "content" : "98db04145db86e31aa83f633f8805d528732caa0"
        },
        {
          "alg" : "SHA-256",
          "content" : "47c97540960fa413e97a251656330934d9d4424e15691b80b2dcc524cf8ca4f1"
        },
        {
          "alg" : "SHA-512",
          "content" : "73099c38b0c71243d48e48291fc28d26e0faa0ebeed7037aa1d8833f0b914819f6362454a83d71c01b0c6dab93e6dcd96e3459672e0ad8fcf73732954f0e9a66"
        },
        {
          "alg" : "SHA-384",
          "content" : "389942e55b51629d70ff8acf8531a0771a9643940509d449786e1a4f8e18dda5cccb283017cc7dc3b9f478a17469db3c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hive/hive-service-rpc@3.1.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://svn.apache.org/viewvc/maven/pom/tags/apache-18"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hive/hive-service-rpc@3.1.3?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-server",
      "version" : "9.4.54.v20240208",
      "description" : "The core jetty server artifact.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e2fd6b022866f111c2e295ac97047f88"
        },
        {
          "alg" : "SHA-1",
          "content" : "13d439d8a5d8b1ec936f9d6f90dbdd46fcb01820"
        },
        {
          "alg" : "SHA-256",
          "content" : "96a3e929207cab7612aef2ed9e80a2d1514bd5cfba118f6d040677ae483398f3"
        },
        {
          "alg" : "SHA-512",
          "content" : "780ee47a8722bdfb4b159f440acbfb69afdb73cc329906392b10eba8d30c564aa6377fab129e61b85a56945f01c4403913c80b6ce3158d108d88a3ad64527f06"
        },
        {
          "alg" : "SHA-384",
          "content" : "80d9950edd40b4f2430fc4e0106af3fd95006fc02b8a7de3dd8ffcee4b9e72942ed4f5808afa7d3beb9fe808db375830"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-server@9.4.54.v20240208?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://webtide.com"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/jetty.project"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-server@9.4.54.v20240208?type=jar"
    },
    {
      "publisher" : "GlassFish Community",
      "group" : "javax.servlet",
      "name" : "javax.servlet-api",
      "version" : "3.1.0",
      "description" : "Java.net - The Source for Java Technology Collaboration",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "79de69e9f5ed8c7fcb8342585732bbf7"
        },
        {
          "alg" : "SHA-1",
          "content" : "3cd63d075497751784b2fa84be59432f4905bf7c"
        },
        {
          "alg" : "SHA-256",
          "content" : "af456b2dd41c4e82cf54f3e743bc678973d9fe35bd4d3071fa05c7e5333b8482"
        },
        {
          "alg" : "SHA-512",
          "content" : "32f7e3565c6cdf3d9a562f8fd597fe5059af0cf6b05b772a144a74bbc95927ac275eb38374538ec1c72adcce4c8e1e2c9f774a7b545db56b8085af0065e4a1e5"
        },
        {
          "alg" : "SHA-384",
          "content" : "8bf960fd053ef6ad1c3535824311f676b9ad537678b85f855dd5d6d726e391f8a7be9c9c76a8ae3ce8bfe671c1e2c942"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/javax.servlet/javax.servlet-api@3.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://glassfish.dev.java.net"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://java.net/jira/browse/SERVLET_SPEC"
        },
        {
          "type" : "vcs",
          "url" : "http://java.net/projects/glassfish/sources/svn/show/tags/javax.servlet-api-3.1.0"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.servlet/javax.servlet-api@3.1.0?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-io",
      "version" : "9.4.54.v20240208",
      "description" : "The Eclipse Jetty Project",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ee9f6ea6ab697a0079d7baef03097d6e"
        },
        {
          "alg" : "SHA-1",
          "content" : "389cb96fc6963b0aa13954164ed0b1c54bf87462"
        },
        {
          "alg" : "SHA-256",
          "content" : "fd2b9b44fc4da25b6b15017f686d4c50e2cb4d68beca9602194ad9cefb97f777"
        },
        {
          "alg" : "SHA-512",
          "content" : "72af20a535ea6cc8d55d651a661a10548036ac800d902ffbdfe8c57afbc166043c0e467a9a5b59c31c9b6d8a10f65d1ee17bf6b5c37e9b3c46b896df9ca52614"
        },
        {
          "alg" : "SHA-384",
          "content" : "0dd05a26368af2ce5c93ceb07c73e78b79c01e27a319ea97e18591e9e6951c7fa7e017ea917b726f2265cf5fecc10f72"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-io@9.4.54.v20240208?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://webtide.com"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/jetty.project"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-io@9.4.54.v20240208?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-servlet",
      "version" : "9.4.54.v20240208",
      "description" : "Jetty Servlet Container",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e6edea140ef5ead667307fb4f674ae1d"
        },
        {
          "alg" : "SHA-1",
          "content" : "265cdb2c48345ff3c661a15873abbf4c7e4c8300"
        },
        {
          "alg" : "SHA-256",
          "content" : "8c2ffd1cc57f618faf8b212eb78405bb2d7f0b814ba3a3acaf784be702be7766"
        },
        {
          "alg" : "SHA-512",
          "content" : "b308c9dbee5644c1f0a162a0c6aa39283def44a8fd250b6aa962dbf0a2c775f05fb60970ede4145bfb6d4141773abbd2a84c731d6542742b693bd5087c6369a8"
        },
        {
          "alg" : "SHA-384",
          "content" : "834b5b0f9acaa85370b8c1e423955b19b389b735fadf9dcfb87e4fad1bba930ec86741934d740549b4cf4e063f889d0f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-servlet@9.4.54.v20240208?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://webtide.com"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/jetty.project"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-servlet@9.4.54.v20240208?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-util-ajax",
      "version" : "9.4.54.v20240208",
      "description" : "JSON/Ajax Utility classes for Jetty",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7d5430887ace7e763d68053cadae25da"
        },
        {
          "alg" : "SHA-1",
          "content" : "973ad9c3e01c2ffae3571a85a3c82c3fb5cab18d"
        },
        {
          "alg" : "SHA-256",
          "content" : "50779cfe87f5487e437c98bb67eae87051b4f801013fc9115d5c11a89016440d"
        },
        {
          "alg" : "SHA-512",
          "content" : "4eda1fa6d50ce8b2bc7719c99661bd3ae0205b311f08c030cac32d38abd291ed3cddad401c56b4ed57a379e1d93adba9d0fd61e8e338ffb943f4d323e497db8c"
        },
        {
          "alg" : "SHA-384",
          "content" : "928f609346a33852baec99e132f30cee9d58a7514e8f4fbceed39154ad666a6ab9f3651941e58815e85a5afc63642a31"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-util-ajax@9.4.54.v20240208?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://webtide.com"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/jetty.project"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-util-ajax@9.4.54.v20240208?type=jar"
    },
    {
      "publisher" : "Facebook",
      "group" : "org.rocksdb",
      "name" : "rocksdbjni",
      "version" : "7.9.2",
      "description" : "RocksDB fat jar that contains .so files for linux32 and linux64 (glibc and musl-libc), jnilib files for Mac OSX, and a .dll for Windows x64.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "16e263508ddba146dcf18efb1a4627d2"
        },
        {
          "alg" : "SHA-1",
          "content" : "6409b667493149191b09fe1fce94bada6096a3e9"
        },
        {
          "alg" : "SHA-256",
          "content" : "0e0e886c44ef1a04104116a05c7e03e9b24069d7fbc6a0fb2cde2032fa92cb20"
        },
        {
          "alg" : "SHA-512",
          "content" : "39670f0e33f07cd801a4a5d006b5881aceef1d25861f11bd0b5aab2d3d7904dceef228600e2f2a08137ed34b36177e1251be2db35ef508d5b5f6452ccc7591e1"
        },
        {
          "alg" : "SHA-384",
          "content" : "ae2c2e0c4dfbbdb980ba3433a309f304e1f3335e3e1d39e3659d182367e76ea368f390ef47187d1c291da51b63285013"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        },
        {
          "license" : {
            "name" : "GNU General Public License, version 2",
            "url" : "http://www.gnu.org/licenses/gpl-2.0.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.rocksdb/rocksdbjni@7.9.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.facebook.com"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/rocksdb"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.rocksdb/rocksdbjni@7.9.2?type=jar"
    },
    {
      "group" : "org.apache.spark",
      "name" : "spark-catalyst_2.12",
      "version" : "3.4.3",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "957b9c0158086313cde49d361ca54bf6"
        },
        {
          "alg" : "SHA-1",
          "content" : "86d1ed1f60a0e5855aeca82e18d04b3acd410439"
        },
        {
          "alg" : "SHA-256",
          "content" : "71d492a5f87b4ea63cd64d9d8775bd90a6f2f0408381d63894fe92b4c8538f3e"
        },
        {
          "alg" : "SHA-512",
          "content" : "4591c16c2292f7018d6f1b04cbaf4f350d67c3c3da959570df05ebfc063a2de0221ac572f71953ab1abd6807f737a2d4ac97f63ece4480888982f6e2e0bf961e"
        },
        {
          "alg" : "SHA-384",
          "content" : "19b6c5e78160a7022db35966a7f66f41d508ff77b2e8165b0ce926b281a99ebcfe7486fab1f97e97c970c900732c7a56"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.apache.spark/spark-catalyst_2.12@3.4.3?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.spark/spark-catalyst_2.12@3.4.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.orc",
      "name" : "orc-core",
      "version" : "1.8.7",
      "description" : "The core reader and writer for ORC files. Uses the vectorized column batch for the in memory representation.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "731f57515d005ed615abfd877fb79323"
        },
        {
          "alg" : "SHA-1",
          "content" : "42733e1878b93a680246abadc5ab967547ff9bb4"
        },
        {
          "alg" : "SHA-256",
          "content" : "f22f532d075a3dfe0bebbc34413a49b7b414dec5deab4fdf77ecb7f6089cfde8"
        },
        {
          "alg" : "SHA-512",
          "content" : "193ffe8fee5ced006a31ec9afc804495435bf08a4970ec9c8fe7ac7b70a4c6b69c84e3465286e6bcb0fe36fd321ec886ea7d363056ac78b7538cbc1873bea153"
        },
        {
          "alg" : "SHA-384",
          "content" : "8631e3e69adbf1693760740298b1a2f702f2e558807e9a56dcaf2989a9cac39e78a8fabedf9eafe507fc879aef5485d8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.orc/orc-core@1.8.7?classifier=shaded-protobuf&type=jar",
      "externalReferences" : [
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/orc-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.orc/orc-core@1.8.7?classifier=shaded-protobuf&type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.orc",
      "name" : "orc-shims",
      "version" : "1.8.7",
      "description" : "A shim layer for supporting various versions of Hadoop dynamically. This module uses a higher version of Hadoop so that we can create shims that let us use new features of Hadoop without having a hard dependency on the latest version.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f4e59f9c8b1a48c4964c8392084df990"
        },
        {
          "alg" : "SHA-1",
          "content" : "7a9a861b016bd8b9a5cf1f2cb501c8305d1c8e9b"
        },
        {
          "alg" : "SHA-256",
          "content" : "1555178f8636b8f986c133fb8719e40d9ca81cd15467721781bc03e1ee93eb46"
        },
        {
          "alg" : "SHA-512",
          "content" : "f2db3948389efeefe02657438b7a28d494e8116b612fb5c3479238a54ebe65de99cfca139a185bd91925b8a35f2714affc1292aa291b6584eab1b1204b4f7ce1"
        },
        {
          "alg" : "SHA-384",
          "content" : "cf91d6a160bc9a0088e909eefbe726bba1c1cebb569c60c575f2b9b593c1a97a61657b5620e99b3c4ae2e9aadc957f6a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.orc/orc-shims@1.8.7?type=jar",
      "externalReferences" : [
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/orc-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.orc/orc-shims@1.8.7?type=jar"
    },
    {
      "group" : "io.airlift",
      "name" : "aircompressor",
      "version" : "0.21",
      "description" : "Compression algorithms",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "43f5c177aaca2ba4e4ad78e4d6f3e992"
        },
        {
          "alg" : "SHA-1",
          "content" : "0d1efd839d539481952a9757834054239774f057"
        },
        {
          "alg" : "SHA-256",
          "content" : "e968bd7f31641ae94ea4ae12971337bdfab794349cc0baa9ccd54553cce712ac"
        },
        {
          "alg" : "SHA-512",
          "content" : "5a2eb2c1fabc5159e00371ebb4ba7532705de7587980af3c7c92c942794f2e21e1af0a82427372eab632a0b1bd52895afa799b62b7f42512c52cf55fdccb4386"
        },
        {
          "alg" : "SHA-384",
          "content" : "ef54231df593357c29984e81d6605f1177cb0c77c496c80097f401ab75b74943429a351d7b09202ed4e1cad127106c97"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.airlift/aircompressor@0.21?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/airlift/aircompressor/tree/master"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.airlift/aircompressor@0.21?type=jar"
    },
    {
      "group" : "org.jetbrains",
      "name" : "annotations",
      "version" : "17.0.0",
      "description" : "A set of annotations used for code inspection support and code documentation.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7b06437ed47fa7b4a8ec8909f4fb9022"
        },
        {
          "alg" : "SHA-1",
          "content" : "8ceead41f4e71821919dbdb7a9847608f1a938cb"
        },
        {
          "alg" : "SHA-256",
          "content" : "195fb0da046d55bb042e91543484cf1da68b02bb7afbfe031f229e45ac84b3f2"
        },
        {
          "alg" : "SHA-512",
          "content" : "839ec18d4a6f930ecd39827ebd4013c13a7176003543b8f60056770179032648faf1651e9e73109e811881b68a39757ca7e39731a61ff4a3461637b196fe4f7b"
        },
        {
          "alg" : "SHA-384",
          "content" : "c9d045a68ef2b0d5b12aa00b636e43af22de4c02f4dfcc6b5b7b04fdd57c98c7246decd2e5dc3eb9f1b10d929ac33a11"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.jetbrains/annotations@17.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/JetBrains/java-annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.jetbrains/annotations@17.0.0?type=jar"
    },
    {
      "publisher" : "ThreeTen.org",
      "group" : "org.threeten",
      "name" : "threeten-extra",
      "version" : "1.7.1",
      "description" : "Additional functionality that enhances JSR-310 dates and times in Java SE 8 and later",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5994a4f9bc61fe4bfae13fab1253ac47"
        },
        {
          "alg" : "SHA-1",
          "content" : "caddbd1f234f87b0d65e421b5d5032b6a473f67b"
        },
        {
          "alg" : "SHA-256",
          "content" : "9bbcbe09a631320bdc3325bbb04c93068473bc0e04b85e2ef3e42314d5a7dacf"
        },
        {
          "alg" : "SHA-512",
          "content" : "1ae1558df2e6e33a0a463e0204dc084bc2bcff6b27ebc983743533bee65f3e42915737a7e2f2096047b2ae5cb8363413964aab0f4eaed0b5f0d5865de56e9336"
        },
        {
          "alg" : "SHA-384",
          "content" : "df9dd8ee46fdd640c3abe5d5168570d29028bc94e931b505f3d36fac01da60ac90f2ed706f37b7eaa3aa8a23538488ff"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.threeten/threeten-extra@1.7.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.threeten.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/content/repositories/threeten-releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/ThreeTen/threeten-extra/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/ThreeTen/threeten-extra"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.threeten/threeten-extra@1.7.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.orc",
      "name" : "orc-mapreduce",
      "version" : "1.8.7",
      "description" : "An implementation of Hadoop's mapred and mapreduce input and output formats for ORC files. They use the core reader and writer, but present the data to the user in Writable objects.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "33a0a3f1f9870107992bd3bbf00159a9"
        },
        {
          "alg" : "SHA-1",
          "content" : "df17c63bfaa8bc8027802fc02f31379be9aaa7b3"
        },
        {
          "alg" : "SHA-256",
          "content" : "b270bc6d50bf3c991a30c6854427e49ffd97ab5a5e3fd76e23e14c3b9cf31a2f"
        },
        {
          "alg" : "SHA-512",
          "content" : "2e8c347b2138b9ef16ce2183bfdf5c4278f451dd529f25adef70ade6ded421895643746296a6b9ac84604439e5fba2ff80e121c7bdba095bdfaee1ed063254f7"
        },
        {
          "alg" : "SHA-384",
          "content" : "2f2e71d87bb79ed8884aa1e52679fcb4e6940030d5b0f2b58de9bd3a9005c8d308201940f1f0fc326b96306c68b585d0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.orc/orc-mapreduce@1.8.7?classifier=shaded-protobuf&type=jar",
      "externalReferences" : [
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/orc-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.orc/orc-mapreduce@1.8.7?classifier=shaded-protobuf&type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.hive",
      "name" : "hive-storage-api",
      "version" : "2.8.1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bea1adb65022d4616d23be770207600d"
        },
        {
          "alg" : "SHA-1",
          "content" : "4b151bcdfe290542f27a442ed09be99f815f88e8"
        },
        {
          "alg" : "SHA-256",
          "content" : "2bb77d246a9724a371301049239c6e53039efe4136b0ed34ee5a9c7b3cd861d8"
        },
        {
          "alg" : "SHA-512",
          "content" : "e76d1f1dcae0fcf26c56bf2006776a39b46572e9a67fcfab26774506a30de0a92447dcc545894c1796bbe092df53a51216c56721bfbc05c8a9b5fe9636ff07e7"
        },
        {
          "alg" : "SHA-384",
          "content" : "93eb2ba57fc637800ba539994682cf764436617f1b1584aa71f288797dad73e6b5dd95bc1dfb19be802a60e31b139866"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hive/hive-storage-api@2.8.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hive/hive-storage-api@2.8.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.parquet",
      "name" : "parquet-column",
      "version" : "1.12.3",
      "description" : "Parquet is a columnar storage format that supports nested data. This provides the java implementation.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "dfa5caf20b7d06d3b861927eca1a9131"
        },
        {
          "alg" : "SHA-1",
          "content" : "5506a7066998a2be47b86e28d061863a475a7ca8"
        },
        {
          "alg" : "SHA-256",
          "content" : "3de1a89d184c009c80ee01719ce848e4db4bc0ef32f33419002caf8ca59986b0"
        },
        {
          "alg" : "SHA-512",
          "content" : "9058acd6ae1b54b95185ff7392cc973a0aefdd9cb9a481a59708093ffd52e27c6b1573139db5a94f2f76b56690e82147a4b85208c7a94e4c191c6966888e947e"
        },
        {
          "alg" : "SHA-384",
          "content" : "fdd01add836e50c38db733df61ec4ba66ae969b39a951881c6eef7f6048df3d6546c035ae295e77b6aafb36c6db5edc3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.parquet/parquet-column@1.12.3?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/PARQUET"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.parquet/parquet-column@1.12.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.parquet",
      "name" : "parquet-common",
      "version" : "1.12.3",
      "description" : "Parquet is a columnar storage format that supports nested data. This provides the java implementation.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5bcb6a9fb0c7358e98300127722c934f"
        },
        {
          "alg" : "SHA-1",
          "content" : "da50b1b4177cbadb977d52aa70011713f37a2156"
        },
        {
          "alg" : "SHA-256",
          "content" : "15dc8a883766e3e09fb3a0dc2bad46ebd06dbaf16ab813154250a178a2eec5b5"
        },
        {
          "alg" : "SHA-512",
          "content" : "25ca1447e4d58ba1a494647e265dd383784f676964d56c883599e84251510d24b918210fe371cac47d1a8fde9be06f5481eb19b10261afd55ced1644568a379b"
        },
        {
          "alg" : "SHA-384",
          "content" : "daf8622b85d3da2fb3e0b6aa1b36c28c76c874ce29f42920b3a6f877f99bcb2614f3f3f06abbbbbf61f7ce685bc441f3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.parquet/parquet-common@1.12.3?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/PARQUET"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.parquet/parquet-common@1.12.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.parquet",
      "name" : "parquet-encoding",
      "version" : "1.12.3",
      "description" : "Parquet is a columnar storage format that supports nested data. This provides the java implementation.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f6c9b5ed0ecae45073c0b83ab5bf2593"
        },
        {
          "alg" : "SHA-1",
          "content" : "0ce981aa4a840f84b670bbb3dfd77cd3be87ca84"
        },
        {
          "alg" : "SHA-256",
          "content" : "a9d1166c518a8e814c60f2aa80fa05cfa5c957ccc8d3c8729d48b63f738a742a"
        },
        {
          "alg" : "SHA-512",
          "content" : "a6d28a72a985b656e709471370417a6f6263d5ba0ae3d96137ab272a3757b2bf4ad85a98bfd69d5d4f3a679efe111eddf8e1b3f14ec19a5b2970627dc4a84f4e"
        },
        {
          "alg" : "SHA-384",
          "content" : "7e956abb93b901b64adce86b2bdc28faf0d069f08f4cef7824022f5afa713a060f9bc2139cb0988831438f228760adf3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.parquet/parquet-encoding@1.12.3?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/PARQUET"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.parquet/parquet-encoding@1.12.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.parquet",
      "name" : "parquet-hadoop",
      "version" : "1.12.3",
      "description" : "Parquet is a columnar storage format that supports nested data. This provides the java implementation.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d01d8045ad523fc5c26313411f898c9f"
        },
        {
          "alg" : "SHA-1",
          "content" : "57001fa0b6622767e63c1b9cd2e6db666d180caa"
        },
        {
          "alg" : "SHA-256",
          "content" : "d9e397aa07ab1a90b77eb5a239827e5fa65f96769c1cb11b34f2fad50713dc21"
        },
        {
          "alg" : "SHA-512",
          "content" : "b4c00409b0b01ac2f689f49c2e1caf6d59524e7ae38ddbf78ea0839239955e7d4c09eda15421325f961e3ff52a3f222c020a938eb976da79faeea3c4c6134a9e"
        },
        {
          "alg" : "SHA-384",
          "content" : "38eea9b875522b9cc390b835b6be847cc5627b6a9478cb12800e6d9ee02629fb40293dae0a5d3e7eb28750d0a4f3367c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.parquet/parquet-hadoop@1.12.3?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/PARQUET"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.parquet/parquet-hadoop@1.12.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.parquet",
      "name" : "parquet-format-structures",
      "version" : "1.12.3",
      "description" : "Parquet-mr related java classes to use the parquet-format thrift structures.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2a6c08225bb15ef483a3f025f3467d1b"
        },
        {
          "alg" : "SHA-1",
          "content" : "9074f509fbc3df3ad104eca5427d03eece453246"
        },
        {
          "alg" : "SHA-256",
          "content" : "2d1e0ede822d70c26cbf6fd7a7037269495c0836f7b31975cbaf80794f8e4b0f"
        },
        {
          "alg" : "SHA-512",
          "content" : "931a683dead50dae8ae9588574e3e794f518fce0ff71093779b9c460378b445aaeb5c8d4d89db96680a7a521a7ebbbe3eb6cd62c8bc1a63fae0cddf9d3a93da4"
        },
        {
          "alg" : "SHA-384",
          "content" : "588ad917172c1911001e6629491e8038709592477566d6126ebd48b256450400fba009a4670d6e4803f6ee1a798c3c17"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.parquet/parquet-format-structures@1.12.3?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/PARQUET"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.parquet/parquet-format-structures@1.12.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.parquet",
      "name" : "parquet-jackson",
      "version" : "1.12.3",
      "description" : "Parquet is a columnar storage format that supports nested data. This provides the java implementation.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8cf5e742970d3cfd989b466e3d9fc5b0"
        },
        {
          "alg" : "SHA-1",
          "content" : "2c3fe5d2e5941e50947ff59c50d201d3968fac02"
        },
        {
          "alg" : "SHA-256",
          "content" : "4522986351d4649fdbe06e0d078eb3c7fd9678dc23999b81dc5debb6556bdf0f"
        },
        {
          "alg" : "SHA-512",
          "content" : "38c91e4bacca3d9678fdfab8b21fdfeb470ac45933f27743c58a447034c89b8389a0925bbca6f5038dcc7226954ec99ec8394c794f57d8abbcf447a45bbad430"
        },
        {
          "alg" : "SHA-384",
          "content" : "8aed1aa09ac4ab6a590ad1861e4c60a1360c2e4cd7f2920973485eb5a2f8ae833501d785a7621bfac983e87710da6e69"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.parquet/parquet-jackson@1.12.3?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/PARQUET"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.parquet/parquet-jackson@1.12.3?type=jar"
    },
    {
      "group" : "org.apache.spark",
      "name" : "spark-tags_2.12",
      "version" : "3.4.3",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d9586b6f45be133f354f91e9805591be"
        },
        {
          "alg" : "SHA-1",
          "content" : "3546379393f8cd91f1e3e6a53e01469dbc3dc6b2"
        },
        {
          "alg" : "SHA-256",
          "content" : "9491e46a4581d926fcb5afac40268436f592664ecb016a16f33b5f05b5793cc1"
        },
        {
          "alg" : "SHA-512",
          "content" : "5cbadc2fce3edcf5f99c511e2ca31671d599985e3a1348a49477e5314d4d631a0ca7c1f9be7d12237428b54604856da6e163c60178c5c37208108adcd0f1b5ca"
        },
        {
          "alg" : "SHA-384",
          "content" : "b0b660f9d2820b61eba42881fc15a8e396fb0b03fae4ad108d071d57f2f0c06254adf1ecff60e55022186e61420173f8"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.apache.spark/spark-tags_2.12@3.4.3?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.spark/spark-tags_2.12@3.4.3?type=jar"
    },
    {
      "publisher" : "Joe Walnes, Henri Tremblay, Leonardo Mesquita",
      "group" : "org.objenesis",
      "name" : "objenesis",
      "version" : "3.2",
      "description" : "A library for instantiating Java objects",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5c1ee20481a06561af295034ea89c4b4"
        },
        {
          "alg" : "SHA-1",
          "content" : "7fadf57620c8b8abdf7519533e5527367cb51f09"
        },
        {
          "alg" : "SHA-256",
          "content" : "03d960bd5aef03c653eb000413ada15eb77cdd2b8e4448886edf5692805e35f3"
        },
        {
          "alg" : "SHA-512",
          "content" : "13dbec3062b19c5b9920c0b69e842a9648f2a148c57b6977d90deea22b829cdbce4eaff1ae7763f397f6465ccb35b31e097078de507dc6de25cb95ec796045f7"
        },
        {
          "alg" : "SHA-384",
          "content" : "7d70ab00e728b4233e38729f0eb392d14e828e857421ad66fc678cd162cf22d34958993d5c38fd8a0d8355d3859b763e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.objenesis/objenesis@3.2?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/easymock/objenesis"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.objenesis/objenesis@3.2?type=jar"
    },
    {
      "group" : "net.sf.jpam",
      "name" : "jpam",
      "version" : "1.1",
      "description" : "Jpam is a Java-PAM bridge. PAM, or Pluggable Authentication Modules, is a standard security architecture used on Linux, Solaris, HP-UX, Mac OS X and other Unix systems.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f0459c2d72cc35f947bac690729a32a2"
        },
        {
          "alg" : "SHA-1",
          "content" : "cb3d91c2dfda767518a371dbb02edfd6a4aa0600"
        },
        {
          "alg" : "SHA-256",
          "content" : "3db38287ef038b01b7e73f2c62c3e7107af24a6b0cf95fda904b4330edcf8b28"
        },
        {
          "alg" : "SHA-512",
          "content" : "351158427146927fc9485e48cd3bb1c0c10cf7eb09f5acdb391c9fccab6d3fcb999891f2c943579c4c44258becd044991d2fce2f2eb3e72d223495dfdd7ba7a1"
        },
        {
          "alg" : "SHA-384",
          "content" : "3ab8636df5d052f034b1de7c7c4eb8f4cff5edb8302c368056679cbf377ec6d72119aa37958193de26ffcdbd92b6e10b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/net.sf.jpam/jpam@1.1?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://sourceforge.net/tracker/?group_id=116930"
        },
        {
          "type" : "mailing-list",
          "url" : "http://sourceforge.net/mailarchive/forum.php?forum=jpam-list"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.sourceforge.net/viewcvs.cgi/jpam/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sf.jpam/jpam@1.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-logging",
      "name" : "commons-logging",
      "version" : "1.1.3",
      "description" : "Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "92eb5aabc1b47287de53d45c086a435c"
        },
        {
          "alg" : "SHA-1",
          "content" : "f6f66e966c70a83ffbdb6f17a0919eaf7c8aca7f"
        },
        {
          "alg" : "SHA-256",
          "content" : "70903f6fc82e9908c8da9f20443f61d90f0870a312642991fe8462a0b9391784"
        },
        {
          "alg" : "SHA-512",
          "content" : "e5d1fc8ec4544e1fa0f7c4aae8dbcca466c4987bc92fbbc430b054b10d646b745add4a754b1be9d50edd64330c798c53173a97289db57a966312e16f934e9d1f"
        },
        {
          "alg" : "SHA-384",
          "content" : "00dc41783f4081585e20adcfe83fd4dbb6b5a27236ee633d7e53dedcbca83ba5e5f0ca68d31f95e9c724b365e4c67499"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/LOGGING"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/repos/asf/commons/proper/logging/trunk"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "http://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-cli",
      "name" : "commons-cli",
      "version" : "1.5.0",
      "description" : "Apache Commons CLI provides a simple API for presenting, processing and validating a Command Line Interface.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6c3b2052160144196118b1f019504388"
        },
        {
          "alg" : "SHA-1",
          "content" : "dc98be5d5390230684a092589d70ea76a147925c"
        },
        {
          "alg" : "SHA-256",
          "content" : "bc8bb01fc0fad250385706e20f927ddcff6173f6339b387dc879237752567ac6"
        },
        {
          "alg" : "SHA-512",
          "content" : "b78ac2b418e9e9e7d0bc866664577199d320408a6f03151b3789bac365c986dd526df853599e633d7e50fe136cbf3eb9ce50c9cfa0ad38c3cc8d8ee416f61c40"
        },
        {
          "alg" : "SHA-384",
          "content" : "a7a2daa807c4007c506b5100f0a9b526c0052c4e1f6b699904ef9d2aba8195b6003dc4d47ca133b15e2f3e830bdbe6c4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CLI"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-cli.git"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents",
      "name" : "httpcore",
      "version" : "4.4.16",
      "description" : "Apache HttpComponents Core (blocking I/O)",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "28d2cd9bf8789fd2ec774fb88436ebd1"
        },
        {
          "alg" : "SHA-1",
          "content" : "51cf043c87253c9f58b539c9f7e44c8894223850"
        },
        {
          "alg" : "SHA-256",
          "content" : "6c9b3dd142a09dc468e23ad39aad6f75a0f2b85125104469f026e52a474e464f"
        },
        {
          "alg" : "SHA-512",
          "content" : "168026436a6bcf5e96c0c59606638abbdc30de4b405ae55afde70fdf2895e267a3d48bba6bdadc5a89f38e31da3d9a9dc91e1cab7ea76f5e04322cf1ec63b838"
        },
        {
          "alg" : "SHA-384",
          "content" : "ba9ceaee1a37ca3201d6a1315ecb0327b495489efd0baa155c219c475df8d3eb69fe77ab0026563db406497626da6562"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.apache.org/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTTPCORE"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar"
    },
    {
      "group" : "org.spark-project.spark",
      "name" : "unused",
      "version" : "1.0.0",
      "description" : "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "763373ce9fe48581d4f2b8ffca35bb82"
        },
        {
          "alg" : "SHA-1",
          "content" : "205fe37a2fade6ce6dfcf8eff57ed21a4a1c22af"
        },
        {
          "alg" : "SHA-256",
          "content" : "00fd27fc9bde701581e7dcf5b95981d9e749a1c176bb8bfcd49f675768ff6bf0"
        },
        {
          "alg" : "SHA-512",
          "content" : "08a6ac8d2dc9d89ff557c7e96096c76e687efe3ce166aa6dbb76865bbef64dc8b6ecb5561ef03c2451a688ccdb3876b8f16b9137d02c290a698e917a5656b6fa"
        },
        {
          "alg" : "SHA-384",
          "content" : "c8c51d0d851835107db273d7ce522f026587d922c9d1d34739c3dedf9b7737c1c491e961dc7931f46c476d28acbc91f6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.sonatype.org/spice/trunk/oss/oss-parent-9"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.apache.spark/spark-hive-thriftserver_2.12@3.4.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.spark/spark-hive_2.12@3.4.3?type=jar",
        "pkg:maven/com.google.guava/guava@14.0.1?type=jar",
        "pkg:maven/org.apache.hive/hive-cli@2.3.9?type=jar",
        "pkg:maven/org.apache.hive/hive-jdbc@2.3.9?type=jar",
        "pkg:maven/org.apache.hive/hive-beeline@2.3.9?type=jar",
        "pkg:maven/org.apache.hive/hive-service-rpc@3.1.3?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-server@9.4.54.v20240208?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-servlet@9.4.54.v20240208?type=jar",
        "pkg:maven/org.apache.spark/spark-tags_2.12@3.4.3?type=jar",
        "pkg:maven/net.sf.jpam/jpam@1.1?type=jar",
        "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
        "pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.spark/spark-hive_2.12@3.4.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.spark/spark-core_2.12@3.4.3?type=jar",
        "pkg:maven/org.apache.spark/spark-sql_2.12@3.4.3?type=jar",
        "pkg:maven/org.apache.hive/hive-common@2.3.9?type=jar",
        "pkg:maven/org.apache.hive/hive-exec@2.3.9?classifier=core&type=jar",
        "pkg:maven/org.apache.hive/hive-metastore@2.3.9?type=jar",
        "pkg:maven/org.apache.hive/hive-serde@2.3.9?type=jar",
        "pkg:maven/org.apache.hive/hive-shims@2.3.9?type=jar",
        "pkg:maven/org.apache.hive/hive-llap-common@2.3.9?type=jar",
        "pkg:maven/org.apache.avro/avro@1.11.1?type=jar",
        "pkg:maven/org.apache.avro/avro-mapred@1.11.1?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.13?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
        "pkg:maven/joda-time/joda-time@2.12.2?type=jar",
        "pkg:maven/org.jodd/jodd-core@3.5.2?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.0?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-core@4.1.17?type=jar",
        "pkg:maven/org.apache.hadoop/hadoop-client-runtime@3.3.4?type=jar",
        "pkg:maven/org.apache.thrift/libthrift@0.12.0?type=jar",
        "pkg:maven/org.apache.thrift/libfb303@0.9.3?type=jar",
        "pkg:maven/org.apache.derby/derby@10.14.2.0?type=jar",
        "pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.spark/spark-core_2.12@3.4.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.avro/avro@1.11.1?type=jar",
        "pkg:maven/org.apache.avro/avro-mapred@1.11.1?type=jar",
        "pkg:maven/com.twitter/chill_2.12@0.10.0?type=jar",
        "pkg:maven/com.twitter/chill-java@0.10.0?type=jar",
        "pkg:maven/org.apache.xbean/xbean-asm9-shaded@4.22?type=jar",
        "pkg:maven/org.apache.hadoop/hadoop-client-api@3.3.4?type=jar",
        "pkg:maven/org.apache.hadoop/hadoop-client-runtime@3.3.4?type=jar",
        "pkg:maven/org.apache.spark/spark-launcher_2.12@3.4.3?type=jar",
        "pkg:maven/org.apache.spark/spark-kvstore_2.12@3.4.3?type=jar",
        "pkg:maven/org.apache.spark/spark-network-common_2.12@3.4.3?type=jar",
        "pkg:maven/org.apache.spark/spark-network-shuffle_2.12@3.4.3?type=jar",
        "pkg:maven/org.apache.spark/spark-unsafe_2.12@3.4.3?type=jar",
        "pkg:maven/javax.activation/activation@1.1.1?type=jar",
        "pkg:maven/org.apache.curator/curator-recipes@2.13.0?type=jar",
        "pkg:maven/org.apache.zookeeper/zookeeper@3.6.3?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-plus@9.4.54.v20240208?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-security@9.4.54.v20240208?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-util@9.4.54.v20240208?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-server@9.4.54.v20240208?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-http@9.4.54.v20240208?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-continuation@9.4.54.v20240208?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-servlet@9.4.54.v20240208?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-proxy@9.4.54.v20240208?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-client@9.4.54.v20240208?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-servlets@9.4.54.v20240208?type=jar",
        "pkg:maven/jakarta.servlet/jakarta.servlet-api@4.0.3?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.22?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
        "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar",
        "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
        "pkg:maven/commons-io/commons-io@2.11.0?type=jar",
        "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
        "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.6?type=jar",
        "pkg:maven/org.slf4j/jul-to-slf4j@2.0.6?type=jar",
        "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.6?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-slf4j2-impl@2.19.0?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.19.0?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-core@2.19.0?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.19.0?type=jar",
        "pkg:maven/com.ning/compress-lzf@1.1.2?type=jar",
        "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5?type=jar",
        "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar",
        "pkg:maven/com.github.luben/zstd-jni@1.5.2-5?type=jar",
        "pkg:maven/org.roaringbitmap/RoaringBitmap@0.9.38?type=jar",
        "pkg:maven/org.scala-lang.modules/scala-xml_2.12@2.1.0?type=jar",
        "pkg:maven/org.scala-lang/scala-library@2.12.17?type=jar",
        "pkg:maven/org.scala-lang/scala-reflect@2.12.17?type=jar",
        "pkg:maven/org.json4s/json4s-jackson_2.12@3.7.0-M11?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-client@2.36?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-common@2.36?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-server@2.36?type=jar",
        "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@2.36?type=jar",
        "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet-core@2.36?type=jar",
        "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@2.36?type=jar",
        "pkg:maven/io.netty/netty-all@4.1.87.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-native-epoll@4.1.87.Final?classifier=linux-x86_64&type=jar",
        "pkg:maven/io.netty/netty-transport-native-epoll@4.1.87.Final?classifier=linux-aarch_64&type=jar",
        "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.87.Final?classifier=osx-aarch_64&type=jar",
        "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.87.Final?classifier=osx-x86_64&type=jar",
        "pkg:maven/com.clearspring.analytics/stream@2.9.6?type=jar",
        "pkg:maven/io.dropwizard.metrics/metrics-core@4.2.15?type=jar",
        "pkg:maven/io.dropwizard.metrics/metrics-jvm@4.2.15?type=jar",
        "pkg:maven/io.dropwizard.metrics/metrics-json@4.2.15?type=jar",
        "pkg:maven/io.dropwizard.metrics/metrics-graphite@4.2.15?type=jar",
        "pkg:maven/io.dropwizard.metrics/metrics-jmx@4.2.15?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.module/jackson-module-scala_2.12@2.14.2?type=jar",
        "pkg:maven/org.apache.ivy/ivy@2.5.1?type=jar",
        "pkg:maven/oro/oro@2.0.8?type=jar",
        "pkg:maven/net.razorvine/pickle@1.3?type=jar",
        "pkg:maven/net.sf.py4j/py4j@0.10.9.7?type=jar",
        "pkg:maven/org.apache.spark/spark-tags_2.12@3.4.3?type=jar",
        "pkg:maven/org.apache.commons/commons-crypto@1.1.0?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@2.5.0?type=jar",
        "pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.avro/avro@1.11.1?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.22?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.avro/avro-mapred@1.11.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.avro/avro-ipc@1.11.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.twitter/chill_2.12@0.10.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.twitter/chill-java@0.10.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.xbean/xbean-asm9-shaded@4.22?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.hadoop/hadoop-client-api@3.3.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.hadoop/hadoop-client-runtime@3.3.4?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.hadoop/hadoop-client-api@3.3.4?type=jar",
        "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.6?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.spark/spark-launcher_2.12@3.4.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.spark/spark-kvstore_2.12@3.4.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.spark/spark-network-common_2.12@3.4.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.spark/spark-network-shuffle_2.12@3.4.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.spark/spark-unsafe_2.12@3.4.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/javax.activation/activation@1.1.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.curator/curator-recipes@2.13.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.zookeeper/zookeeper@3.6.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-plus@9.4.54.v20240208?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-security@9.4.54.v20240208?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-util@9.4.54.v20240208?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-server@9.4.54.v20240208?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.servlet/javax.servlet-api@3.1.0?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-http@9.4.54.v20240208?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-io@9.4.54.v20240208?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-http@9.4.54.v20240208?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-continuation@9.4.54.v20240208?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-servlet@9.4.54.v20240208?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jetty/jetty-security@9.4.54.v20240208?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-util-ajax@9.4.54.v20240208?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-proxy@9.4.54.v20240208?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-client@9.4.54.v20240208?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-servlets@9.4.54.v20240208?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/jakarta.servlet/jakarta.servlet-api@4.0.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-compress@1.22?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/jul-to-slf4j@2.0.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-slf4j2-impl@2.19.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.19.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.19.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.19.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.ning/compress-lzf@1.1.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.github.luben/zstd-jni@1.5.2-5?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.roaringbitmap/RoaringBitmap@0.9.38?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.scala-lang.modules/scala-xml_2.12@2.1.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.scala-lang/scala-library@2.12.17?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.scala-lang/scala-reflect@2.12.17?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.json4s/json4s-jackson_2.12@3.7.0-M11?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.jersey.core/jersey-client@2.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.jersey.core/jersey-common@2.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.jersey.core/jersey-server@2.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@2.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet-core@2.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@2.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-all@4.1.87.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-transport-native-epoll@4.1.87.Final?classifier=linux-x86_64&type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-transport-native-epoll@4.1.87.Final?classifier=linux-aarch_64&type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.87.Final?classifier=osx-aarch_64&type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.87.Final?classifier=osx-x86_64&type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.clearspring.analytics/stream@2.9.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.dropwizard.metrics/metrics-core@4.2.15?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.dropwizard.metrics/metrics-jvm@4.2.15?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.dropwizard.metrics/metrics-json@4.2.15?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.dropwizard.metrics/metrics-graphite@4.2.15?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.dropwizard.metrics/metrics-jmx@4.2.15?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.module/jackson-module-scala_2.12@2.14.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.ivy/ivy@2.5.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/oro/oro@2.0.8?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/net.razorvine/pickle@1.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/net.sf.py4j/py4j@0.10.9.7?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.spark/spark-tags_2.12@3.4.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.scala-lang/scala-library@2.12.17?type=jar",
        "pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-crypto@1.1.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.protobuf/protobuf-java@2.5.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.spark/spark-sql_2.12@3.4.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.rocksdb/rocksdbjni@7.9.2?type=jar",
        "pkg:maven/com.univocity/univocity-parsers@2.9.1?type=jar",
        "pkg:maven/org.apache.spark/spark-sketch_2.12@3.4.3?type=jar",
        "pkg:maven/org.apache.spark/spark-core_2.12@3.4.3?type=jar",
        "pkg:maven/org.apache.spark/spark-catalyst_2.12@3.4.3?type=jar",
        "pkg:maven/org.apache.spark/spark-tags_2.12@3.4.3?type=jar",
        "pkg:maven/org.apache.orc/orc-core@1.8.7?classifier=shaded-protobuf&type=jar",
        "pkg:maven/org.apache.orc/orc-mapreduce@1.8.7?classifier=shaded-protobuf&type=jar",
        "pkg:maven/org.apache.hive/hive-storage-api@2.8.1?type=jar",
        "pkg:maven/org.apache.parquet/parquet-column@1.12.3?type=jar",
        "pkg:maven/org.apache.parquet/parquet-hadoop@1.12.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar",
        "pkg:maven/org.apache.xbean/xbean-asm9-shaded@4.22?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@2.5.0?type=jar",
        "pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.rocksdb/rocksdbjni@7.9.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.univocity/univocity-parsers@2.9.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.spark/spark-sketch_2.12@3.4.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.spark/spark-catalyst_2.12@3.4.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.orc/orc-core@1.8.7?classifier=shaded-protobuf&type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.orc/orc-mapreduce@1.8.7?classifier=shaded-protobuf&type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.hive/hive-storage-api@2.8.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.parquet/parquet-column@1.12.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.parquet/parquet-hadoop@1.12.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.hive/hive-common@2.3.9?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
        "pkg:maven/commons-lang/commons-lang@2.6?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
        "pkg:maven/jline/jline@2.14.6?type=jar",
        "pkg:maven/joda-time/joda-time@2.12.2?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.22?type=jar",
        "pkg:maven/com.tdunning/json@1.8?type=jar",
        "pkg:maven/io.dropwizard.metrics/metrics-core@4.2.15?type=jar",
        "pkg:maven/io.dropwizard.metrics/metrics-jvm@4.2.15?type=jar",
        "pkg:maven/io.dropwizard.metrics/metrics-json@4.2.15?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar",
        "pkg:maven/com.github.joshelser/dropwizard-metrics-hadoop-metrics2-reporter@0.1.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-lang/commons-lang@2.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/jline/jline@2.14.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/joda-time/joda-time@2.12.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.tdunning/json@1.8?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.github.joshelser/dropwizard-metrics-hadoop-metrics2-reporter@0.1.2?type=jar",
      "dependsOn" : [
        "pkg:maven/io.dropwizard.metrics/metrics-core@4.2.15?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.hive/hive-exec@2.3.9?classifier=core&type=jar",
      "dependsOn" : [
        "pkg:maven/commons-io/commons-io@2.11.0?type=jar",
        "pkg:maven/org.antlr/antlr-runtime@3.5.2?type=jar",
        "pkg:maven/org.antlr/ST4@4.0.4?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.22?type=jar",
        "pkg:maven/org.apache.ivy/ivy@2.5.1?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-core@4.1.17?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.2.4?type=jar",
        "pkg:maven/stax/stax-api@1.0.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.antlr/antlr-runtime@3.5.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.antlr/ST4@4.0.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.datanucleus/datanucleus-core@4.1.17?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.code.gson/gson@2.2.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/stax/stax-api@1.0.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.hive/hive-metastore@2.3.9?type=jar",
      "dependsOn" : [
        "pkg:maven/javolution/javolution@5.5.1?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@2.5.0?type=jar",
        "pkg:maven/com.jolbox/bonecp@0.8.0.RELEASE?type=jar",
        "pkg:maven/com.zaxxer/HikariCP@2.5.1?type=jar",
        "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
        "pkg:maven/commons-lang/commons-lang@2.6?type=jar",
        "pkg:maven/org.apache.derby/derby@10.14.2.0?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-api-jdo@4.2.4?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-core@4.1.17?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-rdbms@4.1.19?type=jar",
        "pkg:maven/commons-pool/commons-pool@1.5.4?type=jar",
        "pkg:maven/commons-dbcp/commons-dbcp@1.4?type=jar",
        "pkg:maven/javax.jdo/jdo-api@3.0.1?type=jar",
        "pkg:maven/org.datanucleus/javax.jdo@3.2.0-m3?type=jar",
        "pkg:maven/org.antlr/antlr-runtime@3.5.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/javolution/javolution@5.5.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.jolbox/bonecp@0.8.0.RELEASE?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.zaxxer/HikariCP@2.5.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.derby/derby@10.14.2.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.datanucleus/datanucleus-api-jdo@4.2.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.datanucleus/datanucleus-rdbms@4.1.19?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-pool/commons-pool@1.5.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-dbcp/commons-dbcp@1.4?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-pool/commons-pool@1.5.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/javax.jdo/jdo-api@3.0.1?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.transaction/jta@1.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/javax.transaction/jta@1.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.datanucleus/javax.jdo@3.2.0-m3?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.transaction/transaction-api@1.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/javax.transaction/transaction-api@1.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.hive/hive-serde@2.3.9?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-lang/commons-lang@2.6?type=jar",
        "pkg:maven/net.sf.opencsv/opencsv@2.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.sf.opencsv/opencsv@2.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.hive/hive-shims@2.3.9?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.hive.shims/hive-shims-common@2.3.9?type=jar",
        "pkg:maven/org.apache.hive.shims/hive-shims-0.23@2.3.9?type=jar",
        "pkg:maven/org.apache.hive.shims/hive-shims-scheduler@2.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.hive.shims/hive-shims-common@2.3.9?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-lang/commons-lang@2.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.hive.shims/hive-shims-0.23@2.3.9?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.hive.shims/hive-shims-common@2.3.9?type=jar",
        "pkg:maven/commons-lang/commons-lang@2.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.hive.shims/hive-shims-scheduler@2.3.9?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.hive.shims/hive-shims-common@2.3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.hive/hive-llap-common@2.3.9?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.avro/avro-ipc@1.11.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.avro/avro@1.11.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar",
        "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5?type=jar",
        "pkg:maven/org.tukaani/xz@1.9?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.tukaani/xz@1.9?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.15?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.13?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.jodd/jodd-core@3.5.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.thrift/libthrift@0.12.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.thrift/libfb303@0.9.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.thrift/libthrift@0.12.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/guava@14.0.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.hive/hive-cli@2.3.9?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
        "pkg:maven/commons-lang/commons-lang@2.6?type=jar",
        "pkg:maven/jline/jline@2.14.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.hive/hive-jdbc@2.3.9?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.hive/hive-beeline@2.3.9?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
        "pkg:maven/commons-lang/commons-lang@2.6?type=jar",
        "pkg:maven/commons-io/commons-io@2.11.0?type=jar",
        "pkg:maven/jline/jline@2.14.6?type=jar",
        "pkg:maven/net.sf.supercsv/super-csv@2.2.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.sf.supercsv/super-csv@2.2.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.hive/hive-service-rpc@3.1.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/javax.servlet/javax.servlet-api@3.1.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-io@9.4.54.v20240208?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jetty/jetty-util@9.4.54.v20240208?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-util-ajax@9.4.54.v20240208?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jetty/jetty-util@9.4.54.v20240208?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.sf.jpam/jpam@1.1?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"
      ]
    }
  ]
}