{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.4",
  "serialNumber" : "urn:uuid:bb9c1917-4050-4474-81a0-ff59334c8ae4",
  "version" : 1,
  "metadata" : {
    "timestamp" : "2023-04-07T22:39:18Z",
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.7.3",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "ab886f1cb1a79b4244ac54dde22a0989"
          },
          {
            "alg" : "SHA-1",
            "content" : "9ed658496dfeef87fe6072b95c62ec37165cc741"
          },
          {
            "alg" : "SHA-256",
            "content" : "df9b43417bef6aeac86a393abcc1ac2ed0518239ba544aaeb595b9619c603503"
          },
          {
            "alg" : "SHA-512",
            "content" : "223da34bb51c5339e0f7285757608c1a56b1ea887f7ad835af9299fabacc693053163da74af352af86b16e18e04db730bd44214eda04291410c42b6ae657d85c"
          },
          {
            "alg" : "SHA-384",
            "content" : "3aaf057329ed0f90ec3a49a45b3cf4ec5ce637fd75d6202e9483fa4274cec3e7b74308016e146b6ba087df5fce9397bb"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.spark",
      "name" : "spark-sql-kafka-0-10_2.12",
      "version" : "3.4.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.spark/spark-sql-kafka-0-10_2.12@3.4.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.apache.org"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SPARK"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.spark/spark-sql-kafka-0-10_2.12@3.4.0?type=jar"
    }
  },
  "components" : [
    {
      "group" : "org.apache.spark",
      "name" : "spark-token-provider-kafka-0-10_2.12",
      "version" : "3.4.0",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2f9a1f10887e32e4d195c17e78727f55"
        },
        {
          "alg" : "SHA-1",
          "content" : "4df08b35303e43eff831d38d0e2a78ea392d6697"
        },
        {
          "alg" : "SHA-256",
          "content" : "6016f2faa402afd72525e4e76b9b1cbb26d9569caf9cf180aeddfb326f512630"
        },
        {
          "alg" : "SHA-512",
          "content" : "6396aeed9a4f2f167d3c8784c74a18ac6c91dbda006d91ed17281dca7c7ae1a4678b9078443d4efe99c65bbb18d3243248f1aa5fb09703821b36cb71bdb4b20b"
        },
        {
          "alg" : "SHA-384",
          "content" : "7f2630acc06bf5b042b1d1799c67b8ba6edf7c36ab996d596fc6bc876cbfe328c852bd3176734564b8eb24fa2ed256de"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.apache.spark/spark-token-provider-kafka-0-10_2.12@3.4.0?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.spark/spark-token-provider-kafka-0-10_2.12@3.4.0?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.hadoop",
      "name" : "hadoop-client-runtime",
      "version" : "3.3.4",
      "description" : "Apache Hadoop Client",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "64245768b537a07e4bf1687d1a9c4eaa"
        },
        {
          "alg" : "SHA-1",
          "content" : "21f7a9a2da446f1e5b3e5af16ebf956d3ee43ee0"
        },
        {
          "alg" : "SHA-256",
          "content" : "9377a68071137ae5f5c8cdc2ed20d6f904a1df4d06df26b47ed8872a1b0d8d47"
        },
        {
          "alg" : "SHA-512",
          "content" : "2d0442b3bcb04d18f2de036f5d189745b8866c14de72e5027901718f1100f5090fb14ece684cc8f93a9e2227645db5b13c4abd51c45a9b1156a0a82ebdde97d7"
        },
        {
          "alg" : "SHA-384",
          "content" : "bfc9ec036aebbb73f922cb9add74be3fa0dce8617e75d6bd94e7ba1b3173a9cf0e4195ed4a751015d90ed707845d1f70"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hadoop/hadoop-client-runtime@3.3.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.apache.org"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hadoop/hadoop-client-runtime@3.3.4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-logging",
      "name" : "commons-logging",
      "version" : "1.1.3",
      "description" : "Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "92eb5aabc1b47287de53d45c086a435c"
        },
        {
          "alg" : "SHA-1",
          "content" : "f6f66e966c70a83ffbdb6f17a0919eaf7c8aca7f"
        },
        {
          "alg" : "SHA-256",
          "content" : "70903f6fc82e9908c8da9f20443f61d90f0870a312642991fe8462a0b9391784"
        },
        {
          "alg" : "SHA-512",
          "content" : "e5d1fc8ec4544e1fa0f7c4aae8dbcca466c4987bc92fbbc430b054b10d646b745add4a754b1be9d50edd64330c798c53173a97289db57a966312e16f934e9d1f"
        },
        {
          "alg" : "SHA-384",
          "content" : "00dc41783f4081585e20adcfe83fd4dbb6b5a27236ee633d7e53dedcbca83ba5e5f0ca68d31f95e9c724b365e4c67499"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/LOGGING"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/repos/asf/commons/proper/logging/trunk"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "http://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"
    },
    {
      "group" : "org.apache.spark",
      "name" : "spark-sql_2.12",
      "version" : "3.4.0",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3228804e9f344865196516d03715d46a"
        },
        {
          "alg" : "SHA-1",
          "content" : "01b8becf97a486ddc19a5578d8cd8a49cbbef8a4"
        },
        {
          "alg" : "SHA-256",
          "content" : "2211132711c1bf64be9cbbeed4710f893d75a5863774cece63aede8928375c6d"
        },
        {
          "alg" : "SHA-512",
          "content" : "1ad0b154be2ad9b4d00e5c78d3bdc19907560113022ea72380dcc393706ac1a90345a2071fa9ffdf1b0a9877556bf2287a51ab572c3bdce0e2cde725f18028ed"
        },
        {
          "alg" : "SHA-384",
          "content" : "6a8b36f966562617eed6547421bab998c21f3962ad49c9e33ba1390974b2f4cc1966d9e93df249885db7dd9058b45581"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.apache.spark/spark-sql_2.12@3.4.0?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.spark/spark-sql_2.12@3.4.0?type=jar"
    },
    {
      "publisher" : "Facebook",
      "group" : "org.rocksdb",
      "name" : "rocksdbjni",
      "version" : "7.9.2",
      "description" : "RocksDB fat jar that contains .so files for linux32 and linux64 (glibc and musl-libc), jnilib files for Mac OSX, and a .dll for Windows x64.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "16e263508ddba146dcf18efb1a4627d2"
        },
        {
          "alg" : "SHA-1",
          "content" : "6409b667493149191b09fe1fce94bada6096a3e9"
        },
        {
          "alg" : "SHA-256",
          "content" : "0e0e886c44ef1a04104116a05c7e03e9b24069d7fbc6a0fb2cde2032fa92cb20"
        },
        {
          "alg" : "SHA-512",
          "content" : "39670f0e33f07cd801a4a5d006b5881aceef1d25861f11bd0b5aab2d3d7904dceef228600e2f2a08137ed34b36177e1251be2db35ef508d5b5f6452ccc7591e1"
        },
        {
          "alg" : "SHA-384",
          "content" : "ae2c2e0c4dfbbdb980ba3433a309f304e1f3335e3e1d39e3659d182367e76ea368f390ef47187d1c291da51b63285013"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        },
        {
          "license" : {
            "name" : "GNU General Public License, version 2",
            "url" : "http://www.gnu.org/licenses/gpl-2.0.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.rocksdb/rocksdbjni@7.9.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.facebook.com"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/rocksdb"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.rocksdb/rocksdbjni@7.9.2?type=jar"
    },
    {
      "publisher" : "Univocity Software Pty Ltd",
      "group" : "com.univocity",
      "name" : "univocity-parsers",
      "version" : "2.9.1",
      "description" : "univocity's open source parsers for processing different text formats using a consistent API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7032ba85007afd0bfc702a72bf486fd0"
        },
        {
          "alg" : "SHA-1",
          "content" : "081827d186e42129f23c3f1e002b757ad4b4e769"
        },
        {
          "alg" : "SHA-256",
          "content" : "31685122d5e392e98672ed6009a95a4c1623ca1185567bd44ee94527d454e5c3"
        },
        {
          "alg" : "SHA-512",
          "content" : "95656c856840b203507e42c33ef15bbf1995ad364ff229dba4f6358713259cbcad96a4aeb11db57d3f5ace2500bcfd702dd9457bea45186aa5ae7ed1bfd60559"
        },
        {
          "alg" : "SHA-384",
          "content" : "c29f921251bafd86bcc18b5cedf28fa53a3cbbc0fb8631c72c61038b02ce53c2141900faa54586edbbaa519cc5a815ab"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.univocity/univocity-parsers@2.9.1?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/univocity/univocity-parsers/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/univocity/univocity-parsers"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.univocity/univocity-parsers@2.9.1?type=jar"
    },
    {
      "group" : "org.apache.spark",
      "name" : "spark-sketch_2.12",
      "version" : "3.4.0",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d17763abe53cb8d5e4d552fc4b1fc543"
        },
        {
          "alg" : "SHA-1",
          "content" : "9fce67273f317cbcc530ef302138baf828c4d70f"
        },
        {
          "alg" : "SHA-256",
          "content" : "24fcf4d47f552b6bd8cc08d218bf6d2d0e208766c78f981c200d6190fb527f2f"
        },
        {
          "alg" : "SHA-512",
          "content" : "00e9bd239818e07d6bf680f6f521e506b173a26420add230b8d5edd1158a2cb9a9850ac3dcd50cc2dde666fac54359f0b2fedaaa16f5cb8820d0ae21f094e56d"
        },
        {
          "alg" : "SHA-384",
          "content" : "f054c517b99cbe32a2298a26ee287eeeb7c41d8c51874a068c3cb3207ca30e6a848c01159abf93479128b3c56498eb77"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.apache.spark/spark-sketch_2.12@3.4.0?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.spark/spark-sketch_2.12@3.4.0?type=jar"
    },
    {
      "group" : "org.apache.spark",
      "name" : "spark-core_2.12",
      "version" : "3.4.0",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6ee5828db1db2b845df92b9e5849a43a"
        },
        {
          "alg" : "SHA-1",
          "content" : "42a455b3993eccfe55fe3a9a87b9f08f4173c186"
        },
        {
          "alg" : "SHA-256",
          "content" : "267fadedbafe61556b3a23fbe969cba0ebf823b1031e33db075f3f3c412cbd85"
        },
        {
          "alg" : "SHA-512",
          "content" : "dc50e573b3490caf9265498a3cdd43a6328feebdeeb9cc6ebd37ef63221e2881813fe090aada4d910475de0e664ccb3095db7a4f692f762001ec5240ad7e2b8a"
        },
        {
          "alg" : "SHA-384",
          "content" : "c9701ff9552a7bb39aa47047fa1a967b188f341543dc9fe8e30bbab44b1479a46538ebe8dc30638daad8287a2b9822b5"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.apache.spark/spark-core_2.12@3.4.0?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.spark/spark-core_2.12@3.4.0?type=jar"
    },
    {
      "group" : "org.apache.spark",
      "name" : "spark-catalyst_2.12",
      "version" : "3.4.0",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8096442302d9e53fedba681162d91911"
        },
        {
          "alg" : "SHA-1",
          "content" : "95260211fa22fed402f7bce60b762915a6803c91"
        },
        {
          "alg" : "SHA-256",
          "content" : "200592896bdec3084ae6949c3b840095f3cc9c66463ccc6a5550b043abdbc711"
        },
        {
          "alg" : "SHA-512",
          "content" : "cdcb449dfd88e1d0f06bd7bca5b8d6b11b103bd8d3553f916e7a6c322176b2a9a880b03e768dd6c23d35ea548929c6d5bef6d8f00be9ff89caa46d18fed819b6"
        },
        {
          "alg" : "SHA-384",
          "content" : "adaec458ceacee31a395d601aef94db9e679bd51b36092ace6c8959c4fcdd2ca2596a3066dba2b6f0d5f656498ffd8f1"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.apache.spark/spark-catalyst_2.12@3.4.0?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.spark/spark-catalyst_2.12@3.4.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.orc",
      "name" : "orc-core",
      "version" : "1.8.3",
      "description" : "The core reader and writer for ORC files. Uses the vectorized column batch for the in memory representation.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1a0728b2a22ecbb1b49b07c31cd9da6f"
        },
        {
          "alg" : "SHA-1",
          "content" : "23b34b42bf0502a8af26d968a543429fbd778ecb"
        },
        {
          "alg" : "SHA-256",
          "content" : "a98b28ce4f977cc93d8f48ca4637029910ec9b7efc521741eca54f25088b099c"
        },
        {
          "alg" : "SHA-512",
          "content" : "cdb231c1c23ebc8dfc9d659c38640758c1abe65b23d11802761d1bd3cb83b527d5b7e929df903ca0e54b0de40daac3c79db3550e23c88233dfcc0ecbf434ac94"
        },
        {
          "alg" : "SHA-384",
          "content" : "db272bca393557165af26dfeda91dda717b764916ca989c2d4b75bb4afade1023e36cedf5a5da63c049ec5a4d5ac11da"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.orc/orc-core@1.8.3?classifier=shaded-protobuf&type=jar",
      "externalReferences" : [
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/orc-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.orc/orc-core@1.8.3?classifier=shaded-protobuf&type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.orc",
      "name" : "orc-shims",
      "version" : "1.8.3",
      "description" : "A shim layer for supporting various versions of Hadoop dynamically. This module uses a higher version of Hadoop so that we can create shims that let us use new features of Hadoop without having a hard dependency on the latest version.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e2b3b1e2b8354c8e74654d3a8e64d1e3"
        },
        {
          "alg" : "SHA-1",
          "content" : "1a579826258b0af5f6e98f97a31ab89c62689e7f"
        },
        {
          "alg" : "SHA-256",
          "content" : "7f3b543b91555d56b8b1a445ad24f963f00ed756db8642b5a10c83324069cbb5"
        },
        {
          "alg" : "SHA-512",
          "content" : "51e158cb04f0f92eadb7064e36f0689ca005799d0867439952132f2bd7575aeeb0188c297988c925f649b4c8dafa78cf3204c81029dbde572411bc5c27645571"
        },
        {
          "alg" : "SHA-384",
          "content" : "ef5531ac909815ba7fbf234cd3713d4ba355dcbc2d41ff7bce1e017bdc71d607f64a511c327e0beec3d51bc040f68715"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.orc/orc-shims@1.8.3?type=jar",
      "externalReferences" : [
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/orc-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.orc/orc-shims@1.8.3?type=jar"
    },
    {
      "group" : "io.airlift",
      "name" : "aircompressor",
      "version" : "0.21",
      "description" : "Compression algorithms",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "43f5c177aaca2ba4e4ad78e4d6f3e992"
        },
        {
          "alg" : "SHA-1",
          "content" : "0d1efd839d539481952a9757834054239774f057"
        },
        {
          "alg" : "SHA-256",
          "content" : "e968bd7f31641ae94ea4ae12971337bdfab794349cc0baa9ccd54553cce712ac"
        },
        {
          "alg" : "SHA-512",
          "content" : "5a2eb2c1fabc5159e00371ebb4ba7532705de7587980af3c7c92c942794f2e21e1af0a82427372eab632a0b1bd52895afa799b62b7f42512c52cf55fdccb4386"
        },
        {
          "alg" : "SHA-384",
          "content" : "ef54231df593357c29984e81d6605f1177cb0c77c496c80097f401ab75b74943429a351d7b09202ed4e1cad127106c97"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.airlift/aircompressor@0.21?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/airlift/aircompressor/tree/master"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.airlift/aircompressor@0.21?type=jar"
    },
    {
      "group" : "org.jetbrains",
      "name" : "annotations",
      "version" : "17.0.0",
      "description" : "A set of annotations used for code inspection support and code documentation.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7b06437ed47fa7b4a8ec8909f4fb9022"
        },
        {
          "alg" : "SHA-1",
          "content" : "8ceead41f4e71821919dbdb7a9847608f1a938cb"
        },
        {
          "alg" : "SHA-256",
          "content" : "195fb0da046d55bb042e91543484cf1da68b02bb7afbfe031f229e45ac84b3f2"
        },
        {
          "alg" : "SHA-512",
          "content" : "839ec18d4a6f930ecd39827ebd4013c13a7176003543b8f60056770179032648faf1651e9e73109e811881b68a39757ca7e39731a61ff4a3461637b196fe4f7b"
        },
        {
          "alg" : "SHA-384",
          "content" : "c9d045a68ef2b0d5b12aa00b636e43af22de4c02f4dfcc6b5b7b04fdd57c98c7246decd2e5dc3eb9f1b10d929ac33a11"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.jetbrains/annotations@17.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/JetBrains/java-annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.jetbrains/annotations@17.0.0?type=jar"
    },
    {
      "publisher" : "ThreeTen.org",
      "group" : "org.threeten",
      "name" : "threeten-extra",
      "version" : "1.7.1",
      "description" : "Additional functionality that enhances JSR-310 dates and times in Java SE 8 and later",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5994a4f9bc61fe4bfae13fab1253ac47"
        },
        {
          "alg" : "SHA-1",
          "content" : "caddbd1f234f87b0d65e421b5d5032b6a473f67b"
        },
        {
          "alg" : "SHA-256",
          "content" : "9bbcbe09a631320bdc3325bbb04c93068473bc0e04b85e2ef3e42314d5a7dacf"
        },
        {
          "alg" : "SHA-512",
          "content" : "1ae1558df2e6e33a0a463e0204dc084bc2bcff6b27ebc983743533bee65f3e42915737a7e2f2096047b2ae5cb8363413964aab0f4eaed0b5f0d5865de56e9336"
        },
        {
          "alg" : "SHA-384",
          "content" : "df9dd8ee46fdd640c3abe5d5168570d29028bc94e931b505f3d36fac01da60ac90f2ed706f37b7eaa3aa8a23538488ff"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.threeten/threeten-extra@1.7.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.threeten.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/content/repositories/threeten-releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/ThreeTen/threeten-extra/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/ThreeTen/threeten-extra"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.threeten/threeten-extra@1.7.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.orc",
      "name" : "orc-mapreduce",
      "version" : "1.8.3",
      "description" : "An implementation of Hadoop's mapred and mapreduce input and output formats for ORC files. They use the core reader and writer, but present the data to the user in Writable objects.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d2f42152ab6b8d793e61618e83650783"
        },
        {
          "alg" : "SHA-1",
          "content" : "701fb2f747ebf84f7d44ef9cd52d5eaeddf2406c"
        },
        {
          "alg" : "SHA-256",
          "content" : "13b49a3a13a24997241146f7e70b355226e1194fdd6de777de2995fcfc4102a0"
        },
        {
          "alg" : "SHA-512",
          "content" : "63266fa703334936a23b63efdbc48a5e2ef36b7cdc01b0570ee346d8315df0a314d1bf7a765e9920ad132c87a88920659af1961fd734d6df4252a4ab5a98b228"
        },
        {
          "alg" : "SHA-384",
          "content" : "a6990fbc451c26773da5e6401a9a0d24ee5e10b454a8c5bc1787aef6e87bb97bfed7adedb30eb7a4b3a20b594fe3e144"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.orc/orc-mapreduce@1.8.3?classifier=shaded-protobuf&type=jar",
      "externalReferences" : [
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/orc-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.orc/orc-mapreduce@1.8.3?classifier=shaded-protobuf&type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.hive",
      "name" : "hive-storage-api",
      "version" : "2.8.1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bea1adb65022d4616d23be770207600d"
        },
        {
          "alg" : "SHA-1",
          "content" : "4b151bcdfe290542f27a442ed09be99f815f88e8"
        },
        {
          "alg" : "SHA-256",
          "content" : "2bb77d246a9724a371301049239c6e53039efe4136b0ed34ee5a9c7b3cd861d8"
        },
        {
          "alg" : "SHA-512",
          "content" : "e76d1f1dcae0fcf26c56bf2006776a39b46572e9a67fcfab26774506a30de0a92447dcc545894c1796bbe092df53a51216c56721bfbc05c8a9b5fe9636ff07e7"
        },
        {
          "alg" : "SHA-384",
          "content" : "93eb2ba57fc637800ba539994682cf764436617f1b1584aa71f288797dad73e6b5dd95bc1dfb19be802a60e31b139866"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hive/hive-storage-api@2.8.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hive/hive-storage-api@2.8.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.parquet",
      "name" : "parquet-column",
      "version" : "1.12.3",
      "description" : "Parquet is a columnar storage format that supports nested data. This provides the java implementation.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "dfa5caf20b7d06d3b861927eca1a9131"
        },
        {
          "alg" : "SHA-1",
          "content" : "5506a7066998a2be47b86e28d061863a475a7ca8"
        },
        {
          "alg" : "SHA-256",
          "content" : "3de1a89d184c009c80ee01719ce848e4db4bc0ef32f33419002caf8ca59986b0"
        },
        {
          "alg" : "SHA-512",
          "content" : "9058acd6ae1b54b95185ff7392cc973a0aefdd9cb9a481a59708093ffd52e27c6b1573139db5a94f2f76b56690e82147a4b85208c7a94e4c191c6966888e947e"
        },
        {
          "alg" : "SHA-384",
          "content" : "fdd01add836e50c38db733df61ec4ba66ae969b39a951881c6eef7f6048df3d6546c035ae295e77b6aafb36c6db5edc3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.parquet/parquet-column@1.12.3?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/PARQUET"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.parquet/parquet-column@1.12.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.parquet",
      "name" : "parquet-common",
      "version" : "1.12.3",
      "description" : "Parquet is a columnar storage format that supports nested data. This provides the java implementation.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5bcb6a9fb0c7358e98300127722c934f"
        },
        {
          "alg" : "SHA-1",
          "content" : "da50b1b4177cbadb977d52aa70011713f37a2156"
        },
        {
          "alg" : "SHA-256",
          "content" : "15dc8a883766e3e09fb3a0dc2bad46ebd06dbaf16ab813154250a178a2eec5b5"
        },
        {
          "alg" : "SHA-512",
          "content" : "25ca1447e4d58ba1a494647e265dd383784f676964d56c883599e84251510d24b918210fe371cac47d1a8fde9be06f5481eb19b10261afd55ced1644568a379b"
        },
        {
          "alg" : "SHA-384",
          "content" : "daf8622b85d3da2fb3e0b6aa1b36c28c76c874ce29f42920b3a6f877f99bcb2614f3f3f06abbbbbf61f7ce685bc441f3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.parquet/parquet-common@1.12.3?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/PARQUET"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.parquet/parquet-common@1.12.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.parquet",
      "name" : "parquet-encoding",
      "version" : "1.12.3",
      "description" : "Parquet is a columnar storage format that supports nested data. This provides the java implementation.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f6c9b5ed0ecae45073c0b83ab5bf2593"
        },
        {
          "alg" : "SHA-1",
          "content" : "0ce981aa4a840f84b670bbb3dfd77cd3be87ca84"
        },
        {
          "alg" : "SHA-256",
          "content" : "a9d1166c518a8e814c60f2aa80fa05cfa5c957ccc8d3c8729d48b63f738a742a"
        },
        {
          "alg" : "SHA-512",
          "content" : "a6d28a72a985b656e709471370417a6f6263d5ba0ae3d96137ab272a3757b2bf4ad85a98bfd69d5d4f3a679efe111eddf8e1b3f14ec19a5b2970627dc4a84f4e"
        },
        {
          "alg" : "SHA-384",
          "content" : "7e956abb93b901b64adce86b2bdc28faf0d069f08f4cef7824022f5afa713a060f9bc2139cb0988831438f228760adf3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.parquet/parquet-encoding@1.12.3?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/PARQUET"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.parquet/parquet-encoding@1.12.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.parquet",
      "name" : "parquet-hadoop",
      "version" : "1.12.3",
      "description" : "Parquet is a columnar storage format that supports nested data. This provides the java implementation.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d01d8045ad523fc5c26313411f898c9f"
        },
        {
          "alg" : "SHA-1",
          "content" : "57001fa0b6622767e63c1b9cd2e6db666d180caa"
        },
        {
          "alg" : "SHA-256",
          "content" : "d9e397aa07ab1a90b77eb5a239827e5fa65f96769c1cb11b34f2fad50713dc21"
        },
        {
          "alg" : "SHA-512",
          "content" : "b4c00409b0b01ac2f689f49c2e1caf6d59524e7ae38ddbf78ea0839239955e7d4c09eda15421325f961e3ff52a3f222c020a938eb976da79faeea3c4c6134a9e"
        },
        {
          "alg" : "SHA-384",
          "content" : "38eea9b875522b9cc390b835b6be847cc5627b6a9478cb12800e6d9ee02629fb40293dae0a5d3e7eb28750d0a4f3367c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.parquet/parquet-hadoop@1.12.3?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/PARQUET"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.parquet/parquet-hadoop@1.12.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.parquet",
      "name" : "parquet-format-structures",
      "version" : "1.12.3",
      "description" : "Parquet-mr related java classes to use the parquet-format thrift structures.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2a6c08225bb15ef483a3f025f3467d1b"
        },
        {
          "alg" : "SHA-1",
          "content" : "9074f509fbc3df3ad104eca5427d03eece453246"
        },
        {
          "alg" : "SHA-256",
          "content" : "2d1e0ede822d70c26cbf6fd7a7037269495c0836f7b31975cbaf80794f8e4b0f"
        },
        {
          "alg" : "SHA-512",
          "content" : "931a683dead50dae8ae9588574e3e794f518fce0ff71093779b9c460378b445aaeb5c8d4d89db96680a7a521a7ebbbe3eb6cd62c8bc1a63fae0cddf9d3a93da4"
        },
        {
          "alg" : "SHA-384",
          "content" : "588ad917172c1911001e6629491e8038709592477566d6126ebd48b256450400fba009a4670d6e4803f6ee1a798c3c17"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.parquet/parquet-format-structures@1.12.3?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/PARQUET"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.parquet/parquet-format-structures@1.12.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.parquet",
      "name" : "parquet-jackson",
      "version" : "1.12.3",
      "description" : "Parquet is a columnar storage format that supports nested data. This provides the java implementation.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8cf5e742970d3cfd989b466e3d9fc5b0"
        },
        {
          "alg" : "SHA-1",
          "content" : "2c3fe5d2e5941e50947ff59c50d201d3968fac02"
        },
        {
          "alg" : "SHA-256",
          "content" : "4522986351d4649fdbe06e0d078eb3c7fd9678dc23999b81dc5debb6556bdf0f"
        },
        {
          "alg" : "SHA-512",
          "content" : "38c91e4bacca3d9678fdfab8b21fdfeb470ac45933f27743c58a447034c89b8389a0925bbca6f5038dcc7226954ec99ec8394c794f57d8abbcf447a45bbad430"
        },
        {
          "alg" : "SHA-384",
          "content" : "8aed1aa09ac4ab6a590ad1861e4c60a1360c2e4cd7f2920973485eb5a2f8ae833501d785a7621bfac983e87710da6e69"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.parquet/parquet-jackson@1.12.3?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/PARQUET"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.parquet/parquet-jackson@1.12.3?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-databind",
      "version" : "2.14.2",
      "description" : "General data-binding functionality for Jackson: works on core streaming API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c1b12dd14734cd1986132bf55042dd7e"
        },
        {
          "alg" : "SHA-1",
          "content" : "01e71fddbc80bb86f71a6345ac1e8ab8a00e7134"
        },
        {
          "alg" : "SHA-256",
          "content" : "501d3abce4d18dcc381058ec593c5b94477906bba6efbac14dae40a642f77424"
        },
        {
          "alg" : "SHA-512",
          "content" : "85473a29d23292f49092af9e7a7a63993206847c53b3e71f3c67245d68f7b19cc7c341e0ece409eb5e96602df98a848e957d8691fdd2c5fcddd807df9078255e"
        },
        {
          "alg" : "SHA-384",
          "content" : "5c54d6c497cb329c3424a30319bf657ea222349eadc5ae74c30e8dc1525d7b60b7785f4d20370267b03343dd738cc13e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-databind"
        },
        {
          "type" : "website",
          "url" : "http://fasterxml.com/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-annotations",
      "version" : "2.14.2",
      "description" : "Core annotations used for value types, used by Jackson data binding package.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "10d19982a8890f6eb37557af2f58e272"
        },
        {
          "alg" : "SHA-1",
          "content" : "a7aae9525864930723e3453ab799521fdfd9d873"
        },
        {
          "alg" : "SHA-256",
          "content" : "2c6869d505cf60dc066734b7d50339f975bd3adc635e26a78abb71acb4473c0d"
        },
        {
          "alg" : "SHA-512",
          "content" : "a978384791bdc074df8039ffc95bb93f0f60d14d476861ee2a0ce208b33a991c486a07345cb80559252c3ff1dea14d3efb818c19bdc18435946dc8754d8e6ee3"
        },
        {
          "alg" : "SHA-384",
          "content" : "d5111c69020666689414921ae4a8950f9fbdf86dec1360f6827beeee9ebd3f78db74e69c76e0becaba47eb34fdaaeb5a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-annotations"
        },
        {
          "type" : "website",
          "url" : "http://fasterxml.com/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-core",
      "version" : "2.14.2",
      "description" : "Core Jackson processing abstractions (aka Streaming API), implementation for JSON",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6ee422ee4c481b2d5aacb2b5e36a7dc0"
        },
        {
          "alg" : "SHA-1",
          "content" : "f804090e6399ce0cf78242db086017512dd71fcc"
        },
        {
          "alg" : "SHA-256",
          "content" : "b5d37a77c88277b97e3593c8740925216c06df8e4172bbde058528df04ad3e7a"
        },
        {
          "alg" : "SHA-512",
          "content" : "208953cf72691b3bab1ca2f9a045cccd3d75c46c90099ba884fbf16bc3e45045e5cd014d2c68c96e8a8826f87a5f0e18cb34b35e7ef03348953869c21e197367"
        },
        {
          "alg" : "SHA-384",
          "content" : "e806595862c5fcdae801d9845befc1d12c97e6036ee839d34590dbd785a422d5832cf4fc5c7ee6e1a5ee7a59f37740f0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-core"
        },
        {
          "type" : "website",
          "url" : "http://fasterxml.com/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.xbean",
      "name" : "xbean-asm9-shaded",
      "version" : "4.22",
      "description" : "Repackaged and shaded asm jars",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "492c7c98c236c36777a17d73394975e8"
        },
        {
          "alg" : "SHA-1",
          "content" : "58a5eae5fced0ee652754045f740bbca4f0d922a"
        },
        {
          "alg" : "SHA-256",
          "content" : "3430fa815503979b5a39bb70f18b41ba12ee2913c43f5d5c787005ffc4b424bb"
        },
        {
          "alg" : "SHA-512",
          "content" : "b7fe2738049b084ab1bf07ea335541928ffc455c663d7d532e992e73acea47fe7529193a95b89d8a6ce6a1749936b3a997e225b70c8c27bcf0ea2d0c250a64ac"
        },
        {
          "alg" : "SHA-384",
          "content" : "bff56a6d5b88e86a3c81fe536f39fdcbab5e1c1d49977b20339cc8f2a60cd098ce671865c0194be3d99eb26b9e53826d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.xbean/xbean-asm9-shaded@4.22?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/XBEAN"
        },
        {
          "type" : "mailing-list",
          "url" : "mailto:xbean-dev-subscribe@geronimo.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/geronimo-xbean.git"
        },
        {
          "type" : "website",
          "url" : "http://www.apache.org"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.xbean/xbean-asm9-shaded@4.22?type=jar"
    },
    {
      "publisher" : "Google",
      "group" : "com.google.protobuf",
      "name" : "protobuf-java",
      "version" : "2.5.0",
      "description" : "Protocol Buffers are a way of encoding structured data in an efficient yet extensible format.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a44473b98947e2a54c54e0db1387d137"
        },
        {
          "alg" : "SHA-1",
          "content" : "a10732c76bfacdbd633a7eb0f7968b1059a65dfa"
        },
        {
          "alg" : "SHA-256",
          "content" : "e0c1c64575c005601725e7c6a02cebf9e1285e888f756b2a1d73ffa8d725cc74"
        },
        {
          "alg" : "SHA-512",
          "content" : "10ea0baf440c78598eee2bff3742bc2f41b7e67847f8bb43a1f154d7649853ebd9eb86288aab65f4d1a196f4586bab16b656ec7940ec92a57b1c117b8f59abac"
        },
        {
          "alg" : "SHA-384",
          "content" : "33ad6e25b942b4076c8b9dfcc0aae8ca802b9028aa9939f86e4752b4847b35fb486f6d3efa81d38ad1edcbec6e614494"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.protobuf/protobuf-java@2.5.0?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "http://code.google.com/p/protobuf/source/browse"
        },
        {
          "type" : "website",
          "url" : "http://www.google.com/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.protobuf/protobuf-java@2.5.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.avro",
      "name" : "avro",
      "version" : "1.11.1",
      "description" : "Avro core components",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9fad4fb0e34810ae5f3d7cb5223a7e1c"
        },
        {
          "alg" : "SHA-1",
          "content" : "81af5d4b9bdaaf4ba41bcb0df5241355ec34c630"
        },
        {
          "alg" : "SHA-256",
          "content" : "1213dfffe9295daa3d986713ae36b8daad36bfba039810264bca1cdac0cf8b6a"
        },
        {
          "alg" : "SHA-512",
          "content" : "a0e8b7c1f138747334a2f1f20f40a6893543d049243f7cec67ee572ec4a40e4dc7b82e9b8769c64a90eb9c8ed92cc646daee3cacd523d3e9289a67decd2bb0d6"
        },
        {
          "alg" : "SHA-384",
          "content" : "2406810a329612f96f2881e9912dc42cf880eb721026b13e45716586860921223fdc003081e4711ad9ee26a1d85936cc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.avro/avro@1.11.1?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/AVRO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/avro-dev/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.avro/avro@1.11.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.avro",
      "name" : "avro-mapred",
      "version" : "1.11.1",
      "description" : "An org.apache.hadoop.mapred compatible API for using Avro Serialization in Hadoop",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "07371054f89ac01e938dc38158a85930"
        },
        {
          "alg" : "SHA-1",
          "content" : "5683d99c94f0ae35e2a3d5b2bcd974570b0ff388"
        },
        {
          "alg" : "SHA-256",
          "content" : "ada5a42b5ff522feb536731e5dafa8831ada1369578b9c60136dc1a0ded14e9a"
        },
        {
          "alg" : "SHA-512",
          "content" : "9188a8ec48c75bbc5a30107b315d084d551fd153fce94e9dbc1872dcadfbc238d3bdadc66dde247d06961e290432bc17cfbc2dacec8572b2c77ef92abf41f2ba"
        },
        {
          "alg" : "SHA-384",
          "content" : "7a9ac1dea84cd10da8b04c2bb5e074b65d4dd8c31579754de3b59e392d644b1a1dd7c822bb8a87422f9b918480d4fd3c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.avro/avro-mapred@1.11.1?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/AVRO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/avro-dev/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.avro/avro-mapred@1.11.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.avro",
      "name" : "avro-ipc",
      "version" : "1.11.1",
      "description" : "Avro inter-process communication components",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f987fa8ec6a043ff18ef6b162fd4c45f"
        },
        {
          "alg" : "SHA-1",
          "content" : "40d653933f829e5193b24864d82b306b5a31e7c0"
        },
        {
          "alg" : "SHA-256",
          "content" : "dbe52219c44533ef72ad62ff05b4bea10cabe6c44af6b62375223d8e6ee4b23c"
        },
        {
          "alg" : "SHA-512",
          "content" : "4ad5df1151085cdf1180fb60275c18b3f3127dd5f682b012407accf8c046c1d46cc7b3ddf4f3f5388c6e603d65a7a69c9ace12cedf3909d24c1304b6a45477c9"
        },
        {
          "alg" : "SHA-384",
          "content" : "47bebec17c907a607993a024663a5e646b05f7c06b6ea8139393223ce095432308e343d066de6afc8d30453127d9d55b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.avro/avro-ipc@1.11.1?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/AVRO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/avro-dev/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.avro/avro-ipc@1.11.1?type=jar"
    },
    {
      "group" : "org.tukaani",
      "name" : "xz",
      "version" : "1.9",
      "description" : "XZ data compression",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "57c2fbfeb55e307ccae52e5322082e02"
        },
        {
          "alg" : "SHA-1",
          "content" : "1ea4bec1a921180164852c65006d928617bd2caf"
        },
        {
          "alg" : "SHA-256",
          "content" : "211b306cfc44f8f96df3a0a3ddaf75ba8c5289eed77d60d72f889bb855f535e5"
        },
        {
          "alg" : "SHA-512",
          "content" : "a4362db234d4e83683e90f5baf90c82107450cc4404acab96e3fab14b8a3d4588a19722171d32f27d18463682a6994cad9af0b1065c954e3a77ea7bdcf586bac"
        },
        {
          "alg" : "SHA-384",
          "content" : "aa30349b094723369908369a18e2cb5beb5b7ca0b24b4d56c2f5725fae152220f6526466672b22bfec939e2e0622a01d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Public Domain"
          }
        }
      ],
      "purl" : "pkg:maven/org.tukaani/xz@1.9?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://git.tukaani.org/?p=xz-java.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.tukaani/xz@1.9?type=jar"
    },
    {
      "publisher" : "com.twitter",
      "group" : "com.twitter",
      "name" : "chill_2.12",
      "version" : "0.10.0",
      "description" : "chill",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a2cedd70ae6d7327696c24ff5464072d"
        },
        {
          "alg" : "SHA-1",
          "content" : "b208321208c0b3232a305fccd59df3d6a1f1eecd"
        },
        {
          "alg" : "SHA-256",
          "content" : "5cb5db46112699e6de681dedc0c1d0b300f5ccc2c0921b6bb3e4dba2e66c6fe6"
        },
        {
          "alg" : "SHA-512",
          "content" : "862d7d4c3de2d7cb94a6fa90dcec683e14c67944c6a542a30b7cf522b46c306fed6399dd300b5c4357fa7a9d6ce166081326c0800865af28dc5b7994d2577d66"
        },
        {
          "alg" : "SHA-384",
          "content" : "575c027e5be30fb1a43637ce7a4739b48c5c42418b6000f74477d2921d8d6db48420e510bbfa55d810b0207c1c017faf"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.twitter/chill_2.12@0.10.0?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/twitter/chill"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.twitter/chill_2.12@0.10.0?type=jar"
    },
    {
      "group" : "com.esotericsoftware",
      "name" : "kryo-shaded",
      "version" : "4.0.2",
      "description" : "Fast, efficient Java serialization. This is the parent pom that assembles the main kryo and shaded kryo artifacts.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "27717b481916c44eed34ea7a68782ed5"
        },
        {
          "alg" : "SHA-1",
          "content" : "e8c89779f93091aa9cb895093402b5d15065bf88"
        },
        {
          "alg" : "SHA-256",
          "content" : "a4899f57fef456b9ec66f730e7b493ecb3dc494cc5758721ed9c18416fd2d3b6"
        },
        {
          "alg" : "SHA-512",
          "content" : "21d3500194117f5f34951c7374bdde658be18b842866ea68f16ef47453d4dd31b11d384af2dab3ac4340b015b414402f6b45d4e6a10354fbda5bd8a17e4ce3e3"
        },
        {
          "alg" : "SHA-384",
          "content" : "33c8d09ba00c14a077e82f2d7c1a54496a21d20896505d1d97cd30f22d9cb773e060061abc43fc14f15b6619ba4f0c86"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.esotericsoftware/kryo-shaded@4.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/EsotericSoftware/kryo"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.esotericsoftware/kryo-shaded@4.0.2?type=jar"
    },
    {
      "group" : "com.esotericsoftware",
      "name" : "minlog",
      "version" : "1.3.0",
      "description" : "Minimal overhead Java logging",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5ab0ee168b90e0ad7010b159e603d304"
        },
        {
          "alg" : "SHA-1",
          "content" : "ff07b5f1b01d2f92bb00a337f9a94873712f0827"
        },
        {
          "alg" : "SHA-256",
          "content" : "f7b399d3a5478a4f3e0d98bd1c9f47766119c66414bc33aa0f6cde0066f24cc2"
        },
        {
          "alg" : "SHA-512",
          "content" : "ca319c94b7fd8a275dcc3c5102fc01d73071ac77f5e14b4fc5b6547f96574a4fff0e8cb7b0b0d5006e71faa00575a91defdbfc92a94d9d38dd65520d4ab52000"
        },
        {
          "alg" : "SHA-384",
          "content" : "3f9b5b7fd91332ad64d235024d486e24b00760e714713153a61f10e6867bc3e5b617a7bf0bed889a01f0cdb435415d6a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.esotericsoftware/minlog@1.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/EsotericSoftware/minlog"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.esotericsoftware/minlog@1.3.0?type=jar"
    },
    {
      "publisher" : "com.twitter",
      "group" : "com.twitter",
      "name" : "chill-java",
      "version" : "0.10.0",
      "description" : "chill-java",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3c0e9cbbb2016364333f2cea3922ae97"
        },
        {
          "alg" : "SHA-1",
          "content" : "0fd2eb52afd9ab4337c9e51823f41ad8916e6976"
        },
        {
          "alg" : "SHA-256",
          "content" : "52afd3c1256d6f89293ba616c0c9ebf11191bb9e8159cd0c1cfdc99e5e0c5ffe"
        },
        {
          "alg" : "SHA-512",
          "content" : "48ae455095f0a9ff7ed9b84c9b9bf339c14f6599703b7a34a473ea9c457b0ae700f793d6bf00d1af5e0eb307c9a68d2a10309faea77aaf2245afded08420cb8d"
        },
        {
          "alg" : "SHA-384",
          "content" : "7641e1570bd40b064e17c98c656b8b80680b36d2678973c53ea0557fb212d9ce535eda748cb7234813d953ef90e2cb8d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.twitter/chill-java@0.10.0?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/twitter/chill"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.twitter/chill-java@0.10.0?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.hadoop",
      "name" : "hadoop-client-api",
      "version" : "3.3.4",
      "description" : "Apache Hadoop Client",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "775eddc3008e69e63b68440114b0f0f5"
        },
        {
          "alg" : "SHA-1",
          "content" : "6339a8f7279310c8b1f7ef314b592d8c71ca72ef"
        },
        {
          "alg" : "SHA-256",
          "content" : "e513d71b78086b5caaa439f4402b43e20df01446d56b66084ad419452878701c"
        },
        {
          "alg" : "SHA-512",
          "content" : "b8ba99015ffd22dae5e4dd900e25e1f56f535cb3bd56168d867b313f2ab797b5c12aa01c9fe0e2817b178a6c8f9a7b8afb3a291ec01f0c01a8d9b3c6f6b5b6b5"
        },
        {
          "alg" : "SHA-384",
          "content" : "6200dbba45d512975da88ff6acce21442f70c92514bb470a5bd704091692d0f69b42342d399fae406add7c4311f7ef75"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hadoop/hadoop-client-api@3.3.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.apache.org"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hadoop/hadoop-client-api@3.3.4?type=jar"
    },
    {
      "group" : "org.apache.spark",
      "name" : "spark-launcher_2.12",
      "version" : "3.4.0",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2d713d03e724af90e6d361582f93d03f"
        },
        {
          "alg" : "SHA-1",
          "content" : "511e4950f27e92e0a4e76d575bbd8b529d18bfc2"
        },
        {
          "alg" : "SHA-256",
          "content" : "c190eba1cf2e7610cc7d828496c22f5be78e0e85e3a23d41def1001f8b28d4fb"
        },
        {
          "alg" : "SHA-512",
          "content" : "80d87b56f663bfb76a76de306210931b34dc51c4969e411d7cf2ad86fc4cc9c4a17451d0a5c98ec47e7d3094344b00dcca059c2217f6f4530aea3f6b3c80d731"
        },
        {
          "alg" : "SHA-384",
          "content" : "1654257cc191200e40809c647fef868cba84bb33790fa029cec3ecfccbd0b2f06ea8257b22df7a58d2b0ce407d581f72"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.apache.spark/spark-launcher_2.12@3.4.0?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.spark/spark-launcher_2.12@3.4.0?type=jar"
    },
    {
      "group" : "org.apache.spark",
      "name" : "spark-kvstore_2.12",
      "version" : "3.4.0",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8c681c22d8f42e380d5342b01c1d541b"
        },
        {
          "alg" : "SHA-1",
          "content" : "afb338de94cf026094337084a36d3a5bd05951e6"
        },
        {
          "alg" : "SHA-256",
          "content" : "91e9bb9e26d8c9626664b3e70b34cbe2cbe19bc185c93c561957d37ba40f05b1"
        },
        {
          "alg" : "SHA-512",
          "content" : "83e7caec17a36d213c36a863818440223cc352c1f36cc0bfd73b7dab6b245c45464cfce4adb92da794b2ab335e542f59a63b8c7cbcc3d03cd9464c3c42bf0d80"
        },
        {
          "alg" : "SHA-384",
          "content" : "d0a34302257a2ad4c7e382f205b9713634c917691f8a4dad4f51b1b4a1b88de78a80e58db6f369014b8c0a21d5baea04"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.apache.spark/spark-kvstore_2.12@3.4.0?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.spark/spark-kvstore_2.12@3.4.0?type=jar"
    },
    {
      "publisher" : "FuseSource, Corp.",
      "group" : "org.fusesource.leveldbjni",
      "name" : "leveldbjni-all",
      "version" : "1.8",
      "description" : "An uber jar which contains all the leveldbjni platform libraries and dependencies",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6944e9bc03c7938868e53c96726ae914"
        },
        {
          "alg" : "SHA-1",
          "content" : "707350a2eeb1fa2ed77a32ddb3893ed308e941db"
        },
        {
          "alg" : "SHA-256",
          "content" : "c297213b0e6f9392305952753f3099a4c02e70b3656266fe01867e7b6c160ffe"
        },
        {
          "alg" : "SHA-512",
          "content" : "2e9f806af5d89c00e345b4516ffd325893a07f30c87274fa5b8ce314aad021633750b665d8c338fbf5adc79a527e19caf96d0b12af57e56fb8d3d8f7fd845a96"
        },
        {
          "alg" : "SHA-384",
          "content" : "f10d7ce88da5a9fada67fcbf6fc02939346e67428ee5dd7b000f884d8046131391ee1ece83885d3de60532d1227a66f2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.fusesource.leveldbjni/leveldbjni-all@1.8?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/fusesource/leveldbjni/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/fusesource/leveldbjni"
        },
        {
          "type" : "website",
          "url" : "http://fusesource.com/"
        },
        {
          "type" : "distribution",
          "url" : "http://repo.fusesource.com/nexus/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.fusesource.leveldbjni/leveldbjni-all@1.8?type=jar"
    },
    {
      "group" : "org.apache.spark",
      "name" : "spark-network-common_2.12",
      "version" : "3.4.0",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "280dbde64c51f526cd045c6356a0b50c"
        },
        {
          "alg" : "SHA-1",
          "content" : "356b42af6feb0a2413d0453c3fef678f4f67db72"
        },
        {
          "alg" : "SHA-256",
          "content" : "b6b462e713a0277a3e0c266341db7ffff2340432a85c69818faaf924e99fb718"
        },
        {
          "alg" : "SHA-512",
          "content" : "12a0a7afa7f55ce8dd5aef89e702a2b49e6c6ffa39891e548a3700dfa482765728ae69471a94fba56d4a6b44dec7724c2b6c3fc9284af357837fec756b2375bc"
        },
        {
          "alg" : "SHA-384",
          "content" : "48ceaf9a7182a538535d4d480edc26e0ff92648c94b6ecf1e5c911da2f268d955cc8ce46805e401231f0eff8edb5ec85"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.apache.spark/spark-network-common_2.12@3.4.0?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.spark/spark-network-common_2.12@3.4.0?type=jar"
    },
    {
      "group" : "com.google.guava",
      "name" : "guava",
      "version" : "14.0.1",
      "description" : "Guava is a suite of core and expanded libraries that include utility classes, google's collections, io classes, and much much more. Guava has two code dependencies - javax.annotation per the JSR-305 spec and javax.inject per the JSR-330 spec.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "58553f87d83b9f8ec74bd3529083ee2f"
        },
        {
          "alg" : "SHA-1",
          "content" : "69e12f4c6aeac392555f1ea86fab82b5e5e31ad4"
        },
        {
          "alg" : "SHA-256",
          "content" : "d69df3331840605ef0e5fe4add60f2d28e870e3820937ea29f713d2035d9ab97"
        },
        {
          "alg" : "SHA-512",
          "content" : "e920540dbdee79fba1a5e0966ae92ac37358aa4126c04a08732e4260916807901d8dea41322037ef7908fc0204281d05a1bfa95401fcfc473630c0bc8e81343a"
        },
        {
          "alg" : "SHA-384",
          "content" : "1f5c72fdf4fbef5fe6044054d83cda82d409ce2b8e304913cc985341ceb13e75728dfcdba522dc87aa04577a054afeae"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/guava@14.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "http://code.google.com/p/guava-libraries/issues"
        },
        {
          "type" : "vcs",
          "url" : "http://code.google.com/p/guava-libraries/source/browse"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/guava@14.0.1?type=jar"
    },
    {
      "group" : "com.google.crypto.tink",
      "name" : "tink",
      "version" : "1.7.0",
      "description" : "Tink is a small cryptographic library that provides a safe, simple, agile and fast way to accomplish some common cryptographic tasks.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1ef218f7da13ce7cfd2c926004fe0611"
        },
        {
          "alg" : "SHA-1",
          "content" : "668b57f109d32349b2870448f06ae6f202713edc"
        },
        {
          "alg" : "SHA-256",
          "content" : "88970a456a08ba4c66b01b23e5846ca1095cc14e54cb48363e5d2e15a1307308"
        },
        {
          "alg" : "SHA-512",
          "content" : "bcc1da6501249bdcd4b8053b7220175ed922887240358ed6e6846b1cfdba813ee9c854877065b3e9540a4c456eccd5841d5a485eee6d0228cf838f2b9cce1037"
        },
        {
          "alg" : "SHA-384",
          "content" : "21f0cff903d9607d1eae0efb41cf8bb845d60a750d99295d8e603579cdbf6b151200b05b1bb26752151bc54afb17580b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.crypto.tink/tink@1.7.0?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/tink/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/group/tink-users"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/tink.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.crypto.tink/tink@1.7.0?type=jar"
    },
    {
      "group" : "com.google.code.gson",
      "name" : "gson",
      "version" : "2.8.9",
      "description" : "Gson JSON library",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e67627f67e03301092dc7de0a2d7cef8"
        },
        {
          "alg" : "SHA-1",
          "content" : "8a432c1d6825781e21a02db2e2c33c5fde2833b9"
        },
        {
          "alg" : "SHA-256",
          "content" : "d3999291855de495c94c743761b8ab5176cfeabe281a5ab0d8e8d45326fd703e"
        },
        {
          "alg" : "SHA-512",
          "content" : "46501e4dd34c9a6f33ff63aeeec45b049579365c5273490e5dfd5ea4effaeced907d0fc728204c619aa136e867ad826204582ff9ba3080d06693c1c675c8473f"
        },
        {
          "alg" : "SHA-384",
          "content" : "2f2897912784595e52d3f8e57741aed7dd866f16a69562d57e0604d85e2fef08b2a32e58afd00d264f66cc6ec775dc79"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.code.gson/gson@2.8.9?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/gson/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/gson/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.code.gson/gson@2.8.9?type=jar"
    },
    {
      "group" : "org.apache.spark",
      "name" : "spark-network-shuffle_2.12",
      "version" : "3.4.0",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0d31fbf917f2c79a52ac50a5ef3f7dea"
        },
        {
          "alg" : "SHA-1",
          "content" : "b4b60c5adafffc9262c57c64ed0e457f3ee01d6c"
        },
        {
          "alg" : "SHA-256",
          "content" : "1b7fe62d612826494c94b543deeb9544605ff99939e283c76580b4a6c2f856a6"
        },
        {
          "alg" : "SHA-512",
          "content" : "75cbf2863215b768ea703fa19667f42e85061dcb9b533178a869989049122d3fb7d5d535a77d1cff2f84a1ade2d3253fc83327313a703d1e5fa1306aefcc1179"
        },
        {
          "alg" : "SHA-384",
          "content" : "6a41e124d15559aa365a7107e8904454a792b7f5b0e04aa8dbcb99ffa734e39f78e8b2c20699354f8a7199ee2e8df8b6"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.apache.spark/spark-network-shuffle_2.12@3.4.0?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.spark/spark-network-shuffle_2.12@3.4.0?type=jar"
    },
    {
      "group" : "org.apache.spark",
      "name" : "spark-unsafe_2.12",
      "version" : "3.4.0",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b4818fe9a456e2b592452c02a272b6b7"
        },
        {
          "alg" : "SHA-1",
          "content" : "e05604712d73a9bb6e9419e2cf7752c813f8dc85"
        },
        {
          "alg" : "SHA-256",
          "content" : "ceb77874720c29926e06ed7a77c183f8ec67fd2eae629629a31e5a519a35903a"
        },
        {
          "alg" : "SHA-512",
          "content" : "20f1270e61edc5d7dadae3777f7ddb56e500819a298bcf797bc766ea42d7eede32593916310e001bb065706d84c98874ab46e7fbe7b0a5cb4487a090a26c7f5c"
        },
        {
          "alg" : "SHA-384",
          "content" : "0fb42b633753ab6f4a61fd9d481cefacca47239efdb254bd38618f9a7a079b11b543abac47b8be3ff09f0b7b216a5298"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.apache.spark/spark-unsafe_2.12@3.4.0?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.spark/spark-unsafe_2.12@3.4.0?type=jar"
    },
    {
      "group" : "javax.activation",
      "name" : "activation",
      "version" : "1.1.1",
      "description" : "The JavaBeans(TM) Activation Framework is used by the JavaMail(TM) API to manage MIME data",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "46a37512971d8eca81c3fcf245bf07d2"
        },
        {
          "alg" : "SHA-1",
          "content" : "485de3a253e23f645037828c07f1d7f1af40763a"
        },
        {
          "alg" : "SHA-256",
          "content" : "ae475120e9fcd99b4b00b38329bd61cdc5eb754eee03fe66c01f50e137724f99"
        },
        {
          "alg" : "SHA-512",
          "content" : "49119b0cc3af02700685a55c6f15e6d40643f81640e642b9ea39a59e18d542f8837d30b43b5be006ce1a98c8ec9729bb2165c0442978168f64caa2fc6e3cb93d"
        },
        {
          "alg" : "SHA-384",
          "content" : "021f29ab14a1db9b27e31778fd5b6ead2ed46fef534cfab6b34b1b839547c78fc39cfb1568f0b2206bb46a98c4b9e1d4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/javax.activation/activation@1.1.1?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.activation/activation@1.1.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.curator",
      "name" : "curator-recipes",
      "version" : "2.13.0",
      "description" : "All of the recipes listed on the ZooKeeper recipes doc (except two phase commit).",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "02685a8f2e44faa1941e953ac426a8d7"
        },
        {
          "alg" : "SHA-1",
          "content" : "1e6d5cf7b18a402f5d52785877010711538d68a0"
        },
        {
          "alg" : "SHA-256",
          "content" : "22be05c1a3e6c5ede22e77372b08dc631a3b93b64acb7f682537ea65a6ddba06"
        },
        {
          "alg" : "SHA-512",
          "content" : "498ce3631ef135b96b467cd3c4fa8ac1797538047589b1454911ec77a5205773346a367492db0771167e8f612c911bac44c8c7c651be00e206eb60e2f0bba2f7"
        },
        {
          "alg" : "SHA-384",
          "content" : "08a4134a208a2c59b0354e5d4e88b29f0f2f4f0bd0b83a6ccd54da70602499a8dedd5711d5481c23ba8782049cdb546c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.curator/curator-recipes@2.13.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.apache.org/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Curator/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/CURATOR"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/curator-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/curator.git"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.curator/curator-recipes@2.13.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.curator",
      "name" : "curator-framework",
      "version" : "2.13.0",
      "description" : "High-level API that greatly simplifies using ZooKeeper.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "91e34b86afb44ef5c728f69ed9790f1d"
        },
        {
          "alg" : "SHA-1",
          "content" : "d45229aee7d3f1f628a34fcac9b66ed5ba52c31f"
        },
        {
          "alg" : "SHA-256",
          "content" : "db084e5e0fed0548a8128f12a3e7a15c875c9595e75316c9578d64e77375c4a9"
        },
        {
          "alg" : "SHA-512",
          "content" : "7a9d520b5668ada07d05435f5632ab24d11bb079338388f43668960a3181d665568a2ef4a73222870362a84e1eeb59ef9ebf171bbcfdd7216735821328287798"
        },
        {
          "alg" : "SHA-384",
          "content" : "bf989371e089766e2bc00589c4ce3419382cfe5da67f1c815604653d59a6429642a6e9008c64a2d09d6398816c527d32"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.curator/curator-framework@2.13.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.apache.org/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Curator/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/CURATOR"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/curator-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/curator.git"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.curator/curator-framework@2.13.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.curator",
      "name" : "curator-client",
      "version" : "2.13.0",
      "description" : "Low-level API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ca2c6ca2277e78d1f6b865ee82e10357"
        },
        {
          "alg" : "SHA-1",
          "content" : "a1974d9b3251c055408059b2f408d19d7db07224"
        },
        {
          "alg" : "SHA-256",
          "content" : "62ab2201b5b9af63b215a4e6829dbe7d553a0805cfb0b1a665f9b49da8270c51"
        },
        {
          "alg" : "SHA-512",
          "content" : "72909bbf56f63fb7afba996336e7270ae08010976b4bb3b8bb90269d53fde78c63f8131a941ebb7cc554981a522f15e2b2a9ec63387d77f7117e5a1ed0b8c028"
        },
        {
          "alg" : "SHA-384",
          "content" : "57d338248aa56fa86aab71303a2746c7e4f061a18029a096f99bdadb7a87152f5067e1955aa2acb928edbcac0631b613"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.curator/curator-client@2.13.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.apache.org/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Curator/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/CURATOR"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/curator-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/curator.git"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.curator/curator-client@2.13.0?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-plus",
      "version" : "9.4.50.v20221201",
      "description" : "Jetty JavaEE style services",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6fe88c2932dd5fb3be09cc76c12f46ee"
        },
        {
          "alg" : "SHA-1",
          "content" : "1857702843f7be5ebdf9fb144e646f00346f94ce"
        },
        {
          "alg" : "SHA-256",
          "content" : "d342f86454afc1646bd512a965cd08f2cf02dc7aedad7786cc65db1f76beb404"
        },
        {
          "alg" : "SHA-512",
          "content" : "05128b86a60ec7261b24317739be3721000195003910559f9426ce3b3f09d685e88ad890a3ce89ffebdf0b975cf74bfcd5d14e861a7f39ce61f7756536cd15a6"
        },
        {
          "alg" : "SHA-384",
          "content" : "085b8f10c5970a87d6bfe1672060c4cab8cb2cd4b8106b1d547f1c1b42102719aceedcf1889ae25df3130db247962f8e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-plus@9.4.50.v20221201?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://webtide.com"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/jetty.project"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-plus@9.4.50.v20221201?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-webapp",
      "version" : "9.4.50.v20221201",
      "description" : "Jetty web application support",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1215a9c5374bfbed28397ecdbd8dc2cd"
        },
        {
          "alg" : "SHA-1",
          "content" : "b11fa1857af2c9959f1d01cfcccc204c39dac486"
        },
        {
          "alg" : "SHA-256",
          "content" : "7fc633c92dd462bf9b3e4ace572634f7d9a271bfedf0d1311424f9dfc5974e07"
        },
        {
          "alg" : "SHA-512",
          "content" : "d6312ddf0e153eba5dfd39ed762945bdb7e63c3069048a763771c7b508fdcd9914d5a2241a8d26879d6e297678397b344380acf6dc44d74999c0d49d5e2e2286"
        },
        {
          "alg" : "SHA-384",
          "content" : "71d7b1de79d039d5e47c8ba368dbaa072aa6313d627645f4148bdc03cff9c3ac497eb2ef583a04d0b3f6a33a4e69f75a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-webapp@9.4.50.v20221201?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://webtide.com"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/jetty.project"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-webapp@9.4.50.v20221201?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-xml",
      "version" : "9.4.50.v20221201",
      "description" : "The jetty xml utilities.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "50147bf1996d9c1c7462e2150c972265"
        },
        {
          "alg" : "SHA-1",
          "content" : "f920133d10561a8068d798923ea7f0d42c2bff1f"
        },
        {
          "alg" : "SHA-256",
          "content" : "0376fafc58b4b6f631b042948140a2d50059f7ec0ed6d9b2216dbac36ad219d4"
        },
        {
          "alg" : "SHA-512",
          "content" : "73e6cb345d5d1c257697844d1e94c8dd42f7021b429ba84a75c869c4dd966d08a2bcde70ade418528975e41fe14a2ffb31f16809b9b8f771f740d1dcd0adc1ed"
        },
        {
          "alg" : "SHA-384",
          "content" : "7c11bd189b5183e671b93d5912eb43c39058491af025c7e2b919142e66f671d0b6cab486cf495724f557a71181ed9d9d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-xml@9.4.50.v20221201?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://webtide.com"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/jetty.project"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-xml@9.4.50.v20221201?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-jndi",
      "version" : "9.4.50.v20221201",
      "description" : "JNDI spi impl for java namespace.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "935ee3db39c7e28bf5605b881836be3d"
        },
        {
          "alg" : "SHA-1",
          "content" : "43021375a0188bf65d9fbbeb32bb408d2de01535"
        },
        {
          "alg" : "SHA-256",
          "content" : "ff4268ebde617d13fcff22827d7fb1f04f6de3c516d0fed8e416da59e2e0ed90"
        },
        {
          "alg" : "SHA-512",
          "content" : "1d52f44c8965eecfebcbac8af255946d802fb8b759414d8814e4fb8794300e08084fb4c7b404336b4d572614a7875dbe62a73cb5c38f7ab52a895177eb98ef06"
        },
        {
          "alg" : "SHA-384",
          "content" : "dc0241a556403397846b0bf65e5f3da86d608d691d6ce8e4a36984e9556854a20d9f7d7410075d2ed71e33f51e56ba49"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-jndi@9.4.50.v20221201?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://webtide.com"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/jetty.project"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-jndi@9.4.50.v20221201?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-security",
      "version" : "9.4.50.v20221201",
      "description" : "Jetty security infrastructure",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7ffff3185ed94670c2c344cdcf8758a4"
        },
        {
          "alg" : "SHA-1",
          "content" : "efd773dafdd30c7108da63687b55afe203eaf50c"
        },
        {
          "alg" : "SHA-256",
          "content" : "d82302a6dc5e3d40185d235f7e94f941a9dcaa587b9ada544d58a549705304b9"
        },
        {
          "alg" : "SHA-512",
          "content" : "ae60e3b13202933a7ead3c0d6e7499234ac15d8589cf06b09397432ef998ebcac2d30e353a0b5dc8ca5dba26d8bb03e067493cb280c81e5a2b8433781fcedd7f"
        },
        {
          "alg" : "SHA-384",
          "content" : "0af15f0a3b778464aa8dd3bc7c96b9d7367494a1368ac1021834d50e4188e2f3fa1b07265778a3a09b051988cc028f35"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-security@9.4.50.v20221201?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://webtide.com"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/jetty.project"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-security@9.4.50.v20221201?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-util",
      "version" : "9.4.50.v20221201",
      "description" : "Utility classes for Jetty",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f1815ede8cd43f3ea3466209b828bee3"
        },
        {
          "alg" : "SHA-1",
          "content" : "92d86463bfca6241873679002ea2a012a0653990"
        },
        {
          "alg" : "SHA-256",
          "content" : "38891b3480b582d1f2646cf94f33e1675bdc7c814657e1742424c98193c9117b"
        },
        {
          "alg" : "SHA-512",
          "content" : "c18e60c5359138be31dbe065005d02423a5f6af6d2ac6724c3656e2cc918d678b38f6c95ea56a97f40863fa04f02c65855a522f9847e65871307423cc736530a"
        },
        {
          "alg" : "SHA-384",
          "content" : "3503777e8b20ad381ca1f1193aa8f9b6206157a094821319a0f5bcf3e91c8227c13fc57d140773cd5ebe0de5f6ed1849"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-util@9.4.50.v20221201?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://webtide.com"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/jetty.project"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-util@9.4.50.v20221201?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-server",
      "version" : "9.4.50.v20221201",
      "description" : "The core jetty server artifact.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e1952bdce458a6d686d0709237a7831f"
        },
        {
          "alg" : "SHA-1",
          "content" : "eeae601b8c0483779a88c53d7fb0aedf4c73a0de"
        },
        {
          "alg" : "SHA-256",
          "content" : "7dae9e934cb8738d83f70c5d997fe05e67cb5063287455d50e8542944beaa1e4"
        },
        {
          "alg" : "SHA-512",
          "content" : "da15a9aeadd4f985618ea451039178533f08b6867d66d0f02267fd150ce898775312ef8fd16cf5684b99820b5d6c402981cd51f422fd1a10818d77b0ae2896ea"
        },
        {
          "alg" : "SHA-384",
          "content" : "360af5558dc9ea3d05983b0ffd1506b434b84089dd8bae709da055ce598812f8347c5ca7c76a113479c9eaa876593d5c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-server@9.4.50.v20221201?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://webtide.com"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/jetty.project"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-server@9.4.50.v20221201?type=jar"
    },
    {
      "publisher" : "GlassFish Community",
      "group" : "javax.servlet",
      "name" : "javax.servlet-api",
      "version" : "3.1.0",
      "description" : "Java.net - The Source for Java Technology Collaboration",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "79de69e9f5ed8c7fcb8342585732bbf7"
        },
        {
          "alg" : "SHA-1",
          "content" : "3cd63d075497751784b2fa84be59432f4905bf7c"
        },
        {
          "alg" : "SHA-256",
          "content" : "af456b2dd41c4e82cf54f3e743bc678973d9fe35bd4d3071fa05c7e5333b8482"
        },
        {
          "alg" : "SHA-512",
          "content" : "32f7e3565c6cdf3d9a562f8fd597fe5059af0cf6b05b772a144a74bbc95927ac275eb38374538ec1c72adcce4c8e1e2c9f774a7b545db56b8085af0065e4a1e5"
        },
        {
          "alg" : "SHA-384",
          "content" : "8bf960fd053ef6ad1c3535824311f676b9ad537678b85f855dd5d6d726e391f8a7be9c9c76a8ae3ce8bfe671c1e2c942"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/javax.servlet/javax.servlet-api@3.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://glassfish.dev.java.net"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://java.net/jira/browse/SERVLET_SPEC"
        },
        {
          "type" : "vcs",
          "url" : "http://java.net/projects/glassfish/sources/svn/show/tags/javax.servlet-api-3.1.0"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.servlet/javax.servlet-api@3.1.0?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-io",
      "version" : "9.4.50.v20221201",
      "description" : "The Eclipse Jetty Project",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0d193a5af1ce57c514a7a84ac563a0a5"
        },
        {
          "alg" : "SHA-1",
          "content" : "df7cea38eaf86021e66455d5f6cc1ab5a04475c0"
        },
        {
          "alg" : "SHA-256",
          "content" : "dc51976bc91236279c82e9f1a51e82631562eea518e8654097d271b8dd0acb0b"
        },
        {
          "alg" : "SHA-512",
          "content" : "17e4a581789dd3398853ae89085a2c0e300ff6d9e029b763f52b13420b42bf5075cf72a4824e4e2a6b877e2260aa5db85f76fc450e3305a499d1079d9d06def7"
        },
        {
          "alg" : "SHA-384",
          "content" : "22d5b8c5ec74f72f1980018ee69802aa6a7ebe9c92c413588eadc03e9072803628aba54a15d42bc73cf2605b9bdfa404"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-io@9.4.50.v20221201?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://webtide.com"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/jetty.project"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-io@9.4.50.v20221201?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-http",
      "version" : "9.4.50.v20221201",
      "description" : "The Eclipse Jetty Project",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f1ee9309211226ecb58980bdd10b1e72"
        },
        {
          "alg" : "SHA-1",
          "content" : "f025a779b60e276ee9e4edd03f7f6bf853ea0521"
        },
        {
          "alg" : "SHA-256",
          "content" : "3e3c569b9f39dbd1c9ae6d67e32512e072c50b4845866e941bcfd741e0ef5088"
        },
        {
          "alg" : "SHA-512",
          "content" : "a9e2d0bf955bd7dae294bde86b8488be4a8e384dd903e6c9833f6597621de488798412a30ee0d5279c67e8fa2334144a2d9633e680337e45330ab38d1ab595ad"
        },
        {
          "alg" : "SHA-384",
          "content" : "645a76b75302547dd6767815c6c44c08e2fede41da002fec89d8ed312715424f31d3e45727efd7668ab83a9565598a13"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-http@9.4.50.v20221201?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://webtide.com"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/jetty.project"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-http@9.4.50.v20221201?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-continuation",
      "version" : "9.4.50.v20221201",
      "description" : "Asynchronous API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0ec7c4c7e073a98d7684231740d1c0b2"
        },
        {
          "alg" : "SHA-1",
          "content" : "69ee811001ed028e69bc83bbbdb2f0a73d639e74"
        },
        {
          "alg" : "SHA-256",
          "content" : "afead70ccfd507b85bdd20b2166fb83d58822633848cdbc145de6cb873854961"
        },
        {
          "alg" : "SHA-512",
          "content" : "ff08c571f655624f7dc056d93e1e36f98e7a5fa2c03f34e9bdfcd570eb85f0d8e0d6004c24be2ab457a715bb1b99c69c43774ad637d7e09a54438077d80f66e2"
        },
        {
          "alg" : "SHA-384",
          "content" : "ee6da5749a5f19dc65c5fda1c72c84a48a44eb0bb10a513624bdc8767ba65f44eabaabb7e20ca388ae966649cbdb6269"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-continuation@9.4.50.v20221201?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://webtide.com"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/jetty.project"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-continuation@9.4.50.v20221201?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-proxy",
      "version" : "9.4.50.v20221201",
      "description" : "Jetty Proxy",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1531163ab73048dd3df8994b938617ea"
        },
        {
          "alg" : "SHA-1",
          "content" : "1236073b6535d976c4c8f90ac1129536ee42a147"
        },
        {
          "alg" : "SHA-256",
          "content" : "e092f5935748dfc6d52b0d63f99104d16cbee6b85713fc13f9d4bbcbd4f3ab0a"
        },
        {
          "alg" : "SHA-512",
          "content" : "edbd6ac68880cac52041dd43ef1b55d66d23c00d29f2af8cfe57576080be553b2a7176be8db0282ead0cdfdb3101e0c497370071455da62d703b6a0c01724541"
        },
        {
          "alg" : "SHA-384",
          "content" : "2b93e66887a71945f1fa9691cdc90709a3a1593b32af2a477fcf1d1335808d12ce7442c7a55642327fc7dd2ccac7433e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-proxy@9.4.50.v20221201?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://webtide.com"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/jetty.project"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-proxy@9.4.50.v20221201?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-client",
      "version" : "9.4.50.v20221201",
      "description" : "The Eclipse Jetty Project",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "341c47d2ce85c13999b9d2fb3202251e"
        },
        {
          "alg" : "SHA-1",
          "content" : "7b8fe98d34b9fc882572db4196698fda95c1847d"
        },
        {
          "alg" : "SHA-256",
          "content" : "b216e173d79c0adce1da3d0894abe418453851a3dc6cc5006e5d3003dcac88fd"
        },
        {
          "alg" : "SHA-512",
          "content" : "6ee2314eb4bf37c014c5ebc3b1508b97dd3a6517b7b41498f012fd1ffbd5602d57f74c8b895b841a7712b1285f62b5c49bdf7b2345d5367dee42f59855f3b9c2"
        },
        {
          "alg" : "SHA-384",
          "content" : "bd1a99f15ba0eabc14c89d892177ee3a8c2c70f23aff12df3d7371c45bdec5dbb7ce81a786152fc6f7060de6d34d0533"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-client@9.4.50.v20221201?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://webtide.com"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/jetty.project"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-client@9.4.50.v20221201?type=jar"
    },
    {
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-servlets",
      "version" : "9.4.50.v20221201",
      "description" : "Utility Servlets from Jetty",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6c385d957e0f73b3c115c165659a2ab9"
        },
        {
          "alg" : "SHA-1",
          "content" : "cbe3e644437b60d564dfed5886e514f0aee7040b"
        },
        {
          "alg" : "SHA-256",
          "content" : "5b1b10afa3503cabab22bb9f2f46a65bd079f7fa2fd4fcba21763db2a36be871"
        },
        {
          "alg" : "SHA-512",
          "content" : "47a29f524f175e2afaf26d055e39d7c33655bf1053600d9deb855581f7f5d1e9fe3310e9144decdb4b145ffb8f97ce57af415a16d030dd6dc9b238ff6f63172e"
        },
        {
          "alg" : "SHA-384",
          "content" : "bf0b668f3761b2745d99349a4b458069fafa294cad6c6144e900b6a82b7035cfdf498ba1dce469e4c413c6aafcddc03a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-servlets@9.4.50.v20221201?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://webtide.com"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/jetty.project"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-servlets@9.4.50.v20221201?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.servlet",
      "name" : "jakarta.servlet-api",
      "version" : "4.0.3",
      "description" : "Eclipse Enterprise for Java (EE4J) is an open source initiative to create standard APIs, implementations of those APIs, and technology compatibility kits for Java runtimes that enable development, deployment, and management of server-side and cloud-native applications.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "193258b1056435dba7919a978052cd81"
        },
        {
          "alg" : "SHA-1",
          "content" : "7c810f7bca93d109bac3323286b8e5ec6c394e12"
        },
        {
          "alg" : "SHA-256",
          "content" : "6d93010ca93301383c5ca960d55611a5c91798da1efb0f1fe9356f27831bf499"
        },
        {
          "alg" : "SHA-512",
          "content" : "7d8165cac1ef46736d49a69875c0239d41ffeeac5d2818eb531572eaa95910814de8278a3be633ec00f205685644deb646e773323b42562a82af71bd64d06fdb"
        },
        {
          "alg" : "SHA-384",
          "content" : "ca4b813b8e6bb9e4712edb5141b75199fd68c3d6e9cac01a62566bcd73ab5c39e118840b10d19a062e422c844c8bbf17"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.servlet/jakarta.servlet-api@4.0.3?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/servlet-api/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/servlet-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/servlet-api"
        },
        {
          "type" : "website",
          "url" : "https://www.eclipse.org"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.servlet/jakarta.servlet-api@4.0.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-codec",
      "name" : "commons-codec",
      "version" : "1.15",
      "description" : "The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "303baf002ce6d382198090aedd9d79a2"
        },
        {
          "alg" : "SHA-1",
          "content" : "49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d"
        },
        {
          "alg" : "SHA-256",
          "content" : "b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63"
        },
        {
          "alg" : "SHA-512",
          "content" : "da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787"
        },
        {
          "alg" : "SHA-384",
          "content" : "05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CODEC"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/commons-codec"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-compress",
      "version" : "1.22",
      "description" : "Apache Commons Compress software defines an API for working with compression and archive formats. These include: bzip2, gzip, pack200, lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f1e4db16fee4291212d91409313a8086"
        },
        {
          "alg" : "SHA-1",
          "content" : "691a8b4e6cf4248c3bc72c8b719337d5cb7359fa"
        },
        {
          "alg" : "SHA-256",
          "content" : "53d04a0efc7223baecaa303bd5d298eb0600e6b82b4076f9cecd558b97ba760b"
        },
        {
          "alg" : "SHA-512",
          "content" : "2d64fa6cd081fff5d73ee662a82f6186991fc13b4bdaee18b5f1bdcab06d9acb70e3713d18b296337791448251fbd6768bd84afaa817a10547652d0cfa885563"
        },
        {
          "alg" : "SHA-384",
          "content" : "295d7f69d151abbd784e1c4d021c77ce43e129bb5bda0c55762b32d77c8607863383297674ec8a212ea3dfe4007b0044"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-compress@1.22?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/COMPRESS"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-compress.git"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-compress@1.22?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.12.0",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "19fe50567358922bdad277959ea69545"
        },
        {
          "alg" : "SHA-1",
          "content" : "c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e"
        },
        {
          "alg" : "SHA-256",
          "content" : "d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e"
        },
        {
          "alg" : "SHA-512",
          "content" : "fbdbc0943cb3498b0148e86a39b773f97c8e6013740f72dbc727faeabea402073e2cc8c4d68198e5fc6b08a13b7700236292e99d4785f2c9989f2e5fac11fd81"
        },
        {
          "alg" : "SHA-384",
          "content" : "c34b8a0e0eba2168ad56fedeb7a1d710b6f1d3f1ce6aae99a4e0247bd120efbbadc8dcb2f731045b8a16e3efd30604dc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-lang.git"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-math3",
      "version" : "3.6.1",
      "description" : "The Apache Commons Math project is a library of lightweight, self-contained mathematics and statistics components addressing the most common practical problems not immediately available in the Java programming language or commons-lang.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5b730d97e4e6368069de1983937c508e"
        },
        {
          "alg" : "SHA-1",
          "content" : "e4ba98f1d4b3c80ec46392f25e094a6a2e58fcbf"
        },
        {
          "alg" : "SHA-256",
          "content" : "1e56d7b058d28b65abd256b8458e3885b674c1d588fa43cd7d1cbb9c7ef2b308"
        },
        {
          "alg" : "SHA-512",
          "content" : "8bc2438b3b4d9a6be4a47a58410b2d4d0e56e05787ab24badab8cbc9075d61857e8d2f0bffedad33f18f8a356541d00f80a8597b5dedb995be8480d693d03226"
        },
        {
          "alg" : "SHA-384",
          "content" : "95d1186d9ca06a3ea2e6437ddec3a55698e2493d3e72f6f554746b74fa929892bd71a2ab501a4e7b1ce56b7cd64e7ab4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/MATH"
        },
        {
          "type" : "vcs",
          "url" : "https://git-wip-us.apache.org/repos/asf?p=commons-math.git"
        },
        {
          "type" : "build-system",
          "url" : "https://continuum-ci.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "http://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-text",
      "version" : "1.10.0",
      "description" : "Apache Commons Text is a library focused on algorithms working on strings.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4afc9bfa2d31dbf7330c98fcc954b892"
        },
        {
          "alg" : "SHA-1",
          "content" : "3363381aef8cef2dbc1023b3e3a9433b08b64e01"
        },
        {
          "alg" : "SHA-256",
          "content" : "770cd903fa7b604d1f7ef7ba17f84108667294b2b478be8ed1af3bffb4ae0018"
        },
        {
          "alg" : "SHA-512",
          "content" : "afd836a1094449e0a791fee67363666c47b6d24acff353a5089b837b332c0f4af89565c354682521e37062d20e6b52d70c77bb4f24cca9b9532c274fc708a831"
        },
        {
          "alg" : "SHA-384",
          "content" : "06c56e6e513dd77cf10d0da46cdea08c34e220e81fa024735b668c6650df4234e564fe865ff5cafea963f56b1e8ffd4a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/TEXT"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-text.git"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-io",
      "name" : "commons-io",
      "version" : "2.11.0",
      "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3b4b7ccfaeceeac240b804839ee1a1ca"
        },
        {
          "alg" : "SHA-1",
          "content" : "a2503f302b11ebde7ebc3df41daebe0e4eea3689"
        },
        {
          "alg" : "SHA-256",
          "content" : "961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908"
        },
        {
          "alg" : "SHA-512",
          "content" : "5bd78eed456ede30119319c5bed8e3e4c443b6fd7bdb3a7a5686647bd83094d0c3e2832a7575cfb60e4ef25f08106b93476939d3adcfecf5533cc030b3039e10"
        },
        {
          "alg" : "SHA-384",
          "content" : "114f1e324d90ad887c177876d410f5787a8e8da6c48d4b2862d365802c0efded3a88cb24046976bf6276cadad3712f0f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/IO"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-collections",
      "name" : "commons-collections",
      "version" : "3.2.2",
      "description" : "Types that extend and augment the Java Collections Framework.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f54a8510f834a1a57166970bfc982e94"
        },
        {
          "alg" : "SHA-1",
          "content" : "8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5"
        },
        {
          "alg" : "SHA-256",
          "content" : "eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8"
        },
        {
          "alg" : "SHA-512",
          "content" : "51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16"
        },
        {
          "alg" : "SHA-384",
          "content" : "dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/COLLECTIONS"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/collections/trunk"
        },
        {
          "type" : "build-system",
          "url" : "https://continuum-ci.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "http://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-collections4",
      "version" : "4.4",
      "description" : "The Apache Commons Collections package contains types that extend and augment the Java Collections Framework.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4a37023740719b391f10030362c86be6"
        },
        {
          "alg" : "SHA-1",
          "content" : "62ebe7544cb7164d87e0637a2a6a2bdc981395e8"
        },
        {
          "alg" : "SHA-256",
          "content" : "1df8b9430b5c8ed143d7815e403e33ef5371b2400aadbe9bda0883762e0846d1"
        },
        {
          "alg" : "SHA-512",
          "content" : "5939c9931eb9557caee3b45fe1dd9ce54cabdc4e6182ed7faac77e1a866dd0cb602bfa4ece2f3316d769913366106bd2b61bf3bb5faad1fa7d808124c06dec0f"
        },
        {
          "alg" : "SHA-384",
          "content" : "74059fd8f61c366ed448e102256fdbd1db0d690501c2c296c80f3657a2c0d8ade3dd9533b1431cc29786bbb624195f46"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/COLLECTIONS"
        },
        {
          "type" : "vcs",
          "url" : "https://git-wip-us.apache.org/repos/asf?p=commons-collections.git"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "2.0.6",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0dd65c386e8c5f4e6e014de3f7a7ae60"
        },
        {
          "alg" : "SHA-1",
          "content" : "88c40d8b4f33326f19a7d3c0aaf2c7e8721d4953"
        },
        {
          "alg" : "SHA-256",
          "content" : "2f2a92d410b268139d7d63b75ed25e21995cfe4100c19bf23577cfdbc8077bda"
        },
        {
          "alg" : "SHA-512",
          "content" : "4f8bcafcbb105542ae9333a79f1779aa299570c129abc718331cb5969af52e06e53e645ba52e67ebbe822006ea95093186656742dd24a4b167e270ba9e55e1e1"
        },
        {
          "alg" : "SHA-384",
          "content" : "aae19620668b33d8a5837cd39bfd398644199693c08869812948b52eff238cd9d363cbe1a5bbdd25d6efaac4bd2caa67"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@2.0.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.qos.ch"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.6?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "jul-to-slf4j",
      "version" : "2.0.6",
      "description" : "JUL to SLF4J bridge",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5a22f4776707e517ff1da17a98b3918c"
        },
        {
          "alg" : "SHA-1",
          "content" : "c4d348977a83a0bfcf42fd6fd1fee6e7904f1a0c"
        },
        {
          "alg" : "SHA-256",
          "content" : "6466a327c5ac59fc41c98437e248b9052a4fad6fae9f83a7f723eae297990017"
        },
        {
          "alg" : "SHA-512",
          "content" : "30735a17bbcc9e2c0c81c5c6b4233e85c96cc6c074b3eb8c607ab3410615af76bec8a1bfe9470ac4a185f1bbd8250924aede36fc06623def73a2330bebffe041"
        },
        {
          "alg" : "SHA-384",
          "content" : "1f699ba73ec58a28afc32bec472d3d8b4d135f585721690f104aea31685cb23b742fa9d1819572f9dac4216fd5125187"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/jul-to-slf4j@2.0.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.qos.ch"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/jul-to-slf4j@2.0.6?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "jcl-over-slf4j",
      "version" : "2.0.6",
      "description" : "JCL 1.2 implemented over SLF4J",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "39ab1cc1376b4c2d1ba706a98cca83de"
        },
        {
          "alg" : "SHA-1",
          "content" : "839ff57e112f2e28ef372e96d135696a6896b9ad"
        },
        {
          "alg" : "SHA-256",
          "content" : "7aee1e1a12f4e2b3b42af9453a098132339d419056c178105543f23e79633a69"
        },
        {
          "alg" : "SHA-512",
          "content" : "835e28748daa0d2074baf1ff2ed8b7028a89a2aa8f701940ec6d096d8289facd22a0a133fceb4decbda5ed1a211986537ce2a5b0aa3302be9ad6367d64fda4f0"
        },
        {
          "alg" : "SHA-384",
          "content" : "490af11630d23314dcf444c6787fc5d85dc01d6dec02a2cb3fdee80ddd6225d8046cb7f6f012a60786e6e9554eaf5427"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.qos.ch"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.6?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-slf4j2-impl",
      "version" : "2.19.0",
      "description" : "The Apache Log4j SLF4J 2.0 API binding to Log4j 2 Core",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "da5fdc7ca6095583542ddecd0edfdcb8"
        },
        {
          "alg" : "SHA-1",
          "content" : "5c04bfdd63ce9dceb2e284b81e96b6a70010ee10"
        },
        {
          "alg" : "SHA-256",
          "content" : "825605eacb2d5605b105c53d4108c18125e0f82f62960d0be583278b9c524f3c"
        },
        {
          "alg" : "SHA-512",
          "content" : "ef2ae40f602ca3e0df0e159b6a77656ddc548fcd676d944daa68d1e0b48ebbb9f777649c61f172ccf3f554798584455ccf9a62f3aa6ce1ab31e59ead92d809df"
        },
        {
          "alg" : "SHA-384",
          "content" : "fc1ff56c342cc5d404f5a514f4592d089834dfc01590e33b4e6e814d37771b6b052f48dcd6aeb83202519e170b156c1b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-slf4j2-impl@2.19.0?type=jar",
      "externalReferences" : [
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/logging-log4j2/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://logging.apache.org/log4j/2.x/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LOG4J2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=logging-log4j2.git"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-slf4j2-impl@2.19.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-api",
      "version" : "2.19.0",
      "description" : "The Apache Log4j API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a7f8fc9751cdaa237a1e18059b4887da"
        },
        {
          "alg" : "SHA-1",
          "content" : "ea1b37f38c327596b216542bc636cfdc0b8036fa"
        },
        {
          "alg" : "SHA-256",
          "content" : "5ccb24ad9f92e768d0bc456d3061a737951262df803e004d2cad096b75a88d60"
        },
        {
          "alg" : "SHA-512",
          "content" : "f7cf3647ed90de7fdef377e4321aa9b9ea2512a46d99109b359f7fc5dcfe6d3ae9f879c212707ea4fd16d358d10d21c56d5178ec4803504745de6fe48c66c3f7"
        },
        {
          "alg" : "SHA-384",
          "content" : "d578e82caafbeab7b782599a9e115fbb9cfadcbd6ddb9a7ad2f87aec407dfcdf7fb58f41bf0cff2f7decc2afe89de46a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.19.0?type=jar",
      "externalReferences" : [
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/logging-log4j2/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://logging.apache.org/log4j/2.x/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LOG4J2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=logging-log4j2.git"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.19.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-core",
      "version" : "2.19.0",
      "description" : "The Apache Log4j Implementation",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b7f521926226a16531f8e212b1da1ffd"
        },
        {
          "alg" : "SHA-1",
          "content" : "3b6eeb4de4c49c0fe38a4ee27188ff5fee44d0bb"
        },
        {
          "alg" : "SHA-256",
          "content" : "b4a1796fab7bfc36df015c1b4052459147997e8d215a7199d71d05f9e747e4f4"
        },
        {
          "alg" : "SHA-512",
          "content" : "1300ada6f86818ef4dcd17448a8965c1c6dd41ec414de2b2a5bafdf25d03c12100fa9e8f422d7b346f2984e5dfb3d599f8c1a971a6bcaca0cf938943d06364e7"
        },
        {
          "alg" : "SHA-384",
          "content" : "06c547cd1da0fb0f878e9d589eb5feae8b5a0691d16dec9cc98807fc3e4ee940c76af7c5e379cc44133c0f77fbc945b0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.19.0?type=jar",
      "externalReferences" : [
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/logging-log4j2/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://logging.apache.org/log4j/2.x/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LOG4J2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=logging-log4j2.git"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.19.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-1.2-api",
      "version" : "2.19.0",
      "description" : "The Apache Log4j 1.x Compatibility API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "64330e674f83b296d3bd63f0f71206fb"
        },
        {
          "alg" : "SHA-1",
          "content" : "0e8d839e89e44f06ed901bb8b681161ad3131fd5"
        },
        {
          "alg" : "SHA-256",
          "content" : "60480a6c81978a9871099e002997df84a05fc11789fb248e3e803a0dcb19e0cd"
        },
        {
          "alg" : "SHA-512",
          "content" : "64234ddd0c040bbad9b8e343ac24bc05a763445f854034fbfbe27176c3a628fcdf39e2508350bc63f058d138a9487e085213ee659135d3ad56a49b3833bf4f99"
        },
        {
          "alg" : "SHA-384",
          "content" : "eb6e53249040ecb856f37ad7b22cfa7a3034250f0439811e4cc75a8de709c3d83cbcd54d958e355340cdd6784bb3a6b2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.19.0?type=jar",
      "externalReferences" : [
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/logging-log4j2/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://logging.apache.org/log4j/2.x/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LOG4J2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=logging-log4j2.git"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.19.0?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.ning",
      "name" : "compress-lzf",
      "version" : "1.1.2",
      "description" : "Compression codec for LZF encoding for particularly encoding/decoding, with reasonable compression. Compressor is basic Lempel-Ziv codec, without Huffman (deflate/gzip) or statistical post-encoding. See \"http://oldhome.schmorp.de/marc/liblzf.html\" for more on original LZF package.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f620dc5d92f58cfdb1c51895daf05f58"
        },
        {
          "alg" : "SHA-1",
          "content" : "d09d33ffa7bc1d987db92e5ebec926ff92b7cbdf"
        },
        {
          "alg" : "SHA-256",
          "content" : "a9a76c85a3cef3a22d4c0e8647a1449b638885f2ceb4d8c9f66df3c677cc228e"
        },
        {
          "alg" : "SHA-512",
          "content" : "ec119a239e5dc1a213ae06380cdaa1ab07049430485fd2e5651281ae53705feb4d5dd767ac87aca8e329adcd1e1325585d50b273738e6cb2b94b31c7156828b2"
        },
        {
          "alg" : "SHA-384",
          "content" : "f00e771ca4878a82ac6698fef4b8b17474fef2b3602ac850ec352a66d43cd798270a215313b17d98096e2f017eb7095a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.ning/compress-lzf@1.1.2?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/ning/compress/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/ning/compress"
        },
        {
          "type" : "website",
          "url" : "http://fasterxml.com/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.ning/compress-lzf@1.1.2?type=jar"
    },
    {
      "publisher" : "xerial.org",
      "group" : "org.xerial.snappy",
      "name" : "snappy-java",
      "version" : "1.1.9.1",
      "description" : "snappy-java: A fast compression/decompression library",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "91a227835ba56d91cbd660349da3843d"
        },
        {
          "alg" : "SHA-1",
          "content" : "96770312ae05ca8b59e565909973dbc2ea71bb91"
        },
        {
          "alg" : "SHA-256",
          "content" : "b696bc9105d1e869de3e5b2bb165bd0a482bf08415917e25d29c7461e5b1496e"
        },
        {
          "alg" : "SHA-512",
          "content" : "a5a27830adb78518d30a76612155726e6a611b7b70477326bcfcc6953603ce90ecc470f88506f62a9ae1134ae4fe90a629029bff3d4c4c34cb7a32c26e7aa098"
        },
        {
          "alg" : "SHA-384",
          "content" : "930ebd63f64f28cc28853af0be41b32c3263bec8e60515cff7ee610fdef07aad141e9173c5d685665336ec9496914099"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.9.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/xerial/snappy-java"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/xerial/snappy-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.9.1?type=jar"
    },
    {
      "group" : "org.lz4",
      "name" : "lz4-java",
      "version" : "1.8.0",
      "description" : "Java ports and bindings of the LZ4 compression algorithm and the xxHash hashing algorithm",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "936a927700aa8fc3b75d21d7571171f6"
        },
        {
          "alg" : "SHA-1",
          "content" : "4b986a99445e49ea5fbf5d149c4b63f6ed6c6780"
        },
        {
          "alg" : "SHA-256",
          "content" : "d74a3334fb35195009b338a951f918203d6bbca3d1d359033dc33edd1cadc9ef"
        },
        {
          "alg" : "SHA-512",
          "content" : "98d59086a6021ca571d9c1d64b715e43044c730e1ac563f514c40cf44302615d30378b6d5cc69990446522de6260dc8e7b303e3990a3139dc326d058dfb6dbd9"
        },
        {
          "alg" : "SHA-384",
          "content" : "8e3f2acdbb41a00c4d9cc5f328e63fb626ac7c6c84e1bf9502e2fcc76a591b2b819b2d27b29925ff986b95c297b30e2c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar",
      "externalReferences" : [ ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar"
    },
    {
      "publisher" : "com.github.luben",
      "group" : "com.github.luben",
      "name" : "zstd-jni",
      "version" : "1.5.2-5",
      "description" : "JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "474f53d74d4f815120b88bf256328139"
        },
        {
          "alg" : "SHA-1",
          "content" : "ef34c3a855e144c03de5c0b0a8e80469915ebae6"
        },
        {
          "alg" : "SHA-256",
          "content" : "0f8e64feaa068b8a02de45e9343f9b2fc401235b81e7fe3f80b2aeba001691b2"
        },
        {
          "alg" : "SHA-512",
          "content" : "edbd6d1b6f2d75e55e1f879a41a6c2e020be620c5973283fa0c61cb8c0c8ee689021742df77ed41e2688b8bc8c33c39c77ac33c4e09036878ef2da50f2e73f9f"
        },
        {
          "alg" : "SHA-384",
          "content" : "e5e5050acabe56bffa5fb4fad8b24454158ee342f970059745ed0d66b048d602c6091745cc09d31314bbd510bd489d13"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-2-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.luben/zstd-jni@1.5.2-5?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.luben/zstd-jni@1.5.2-5?type=jar"
    },
    {
      "group" : "org.roaringbitmap",
      "name" : "RoaringBitmap",
      "version" : "0.9.38",
      "description" : "Roaring bitmaps are compressed bitmaps (also called bitsets) which tend to outperform conventional compressed bitmaps such as WAH or Concise.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "555bc09665d4670395328fd43f5b4c61"
        },
        {
          "alg" : "SHA-1",
          "content" : "db0ebf650c71469890e894100b008d091dfc178e"
        },
        {
          "alg" : "SHA-256",
          "content" : "c37c8223396558c7b58b80404565356f90d92056b23d54f2cb390bc89fb9f6d3"
        },
        {
          "alg" : "SHA-512",
          "content" : "3dfad0c3d3b3106de2b4c491c42adb06a967c5545735eefdb55030c0e19b88233bea7994de85dcf759f394530b84570eadd01df64e19793196dec18b967d7a52"
        },
        {
          "alg" : "SHA-384",
          "content" : "51a5d1b44b06af825de9f92e8b6e9413724f46683d47f7fad8d982d08505ba56f7eb22d30059b6759cfd0df2874570be"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.roaringbitmap/RoaringBitmap@0.9.38?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/RoaringBitmap/RoaringBitmap/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/RoaringBitmap/RoaringBitmap"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.roaringbitmap/RoaringBitmap@0.9.38?type=jar"
    },
    {
      "group" : "org.roaringbitmap",
      "name" : "shims",
      "version" : "0.9.38",
      "description" : "Roaring bitmaps are compressed bitmaps (also called bitsets) which tend to outperform conventional compressed bitmaps such as WAH or Concise.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a20877d36a350800f467f2d08442d14e"
        },
        {
          "alg" : "SHA-1",
          "content" : "45572e816d3a2fdab3435eecb1deb69e35a76778"
        },
        {
          "alg" : "SHA-256",
          "content" : "7be92d043d041dba6339dd5d56d7b402f40af44e1e7be3435513f18d88126d6c"
        },
        {
          "alg" : "SHA-512",
          "content" : "0292db6dc8e34af2f6fef0d5e51659da8b98feec79545717dc9359f318fffe467991642e6deb5f10fe2c1009e3494a24556c9ed237a08557d059c471f75c0054"
        },
        {
          "alg" : "SHA-384",
          "content" : "3a3c42ddb410cdeb58243357428eb73a34231853e4c76c27d47181535c4b998e24e688b8fd6e0c00da0219d8be29da38"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.roaringbitmap/shims@0.9.38?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/RoaringBitmap/RoaringBitmap/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/RoaringBitmap/RoaringBitmap"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.roaringbitmap/shims@0.9.38?type=jar"
    },
    {
      "publisher" : "org.scala-lang.modules",
      "group" : "org.scala-lang.modules",
      "name" : "scala-xml_2.12",
      "version" : "2.1.0",
      "description" : "scala-xml",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "eb4a36f663f35e5d97ba7f51b0e8bbca"
        },
        {
          "alg" : "SHA-1",
          "content" : "16b228fa6f9d5afece0f2d2d6d5b03d5372dbea4"
        },
        {
          "alg" : "SHA-256",
          "content" : "d9a6df43cfac692f05e7166d39aae4476a246dac7740c7794a3072f1a67280ce"
        },
        {
          "alg" : "SHA-512",
          "content" : "a4a60375d6f78c311b61e48f2be56ce048baf920615763ac37b72e43d9409892add045aec3630f58db9e0dd1746cd75358015089f5ee7816347e0adbef264677"
        },
        {
          "alg" : "SHA-384",
          "content" : "e0831c12d568272b475d95b32b6fcaae8920d781b8f9be28003e5f2ef7d768bf48d8d5fa175d30906f04d35e9ddf83ce"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.scala-lang.modules/scala-xml_2.12@2.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.scala-lang.org/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/scala/scala-xml/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/scala/scala-xml"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.scala-lang.modules/scala-xml_2.12@2.1.0?type=jar"
    },
    {
      "publisher" : "LAMP/EPFL",
      "group" : "org.scala-lang",
      "name" : "scala-library",
      "version" : "2.12.17",
      "description" : "Standard library for the Scala Programming Language",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1b31b3bd2d82c3ad05895815423e0caf"
        },
        {
          "alg" : "SHA-1",
          "content" : "4a4dee1ebb59ed1dbce014223c7c42612e4cddde"
        },
        {
          "alg" : "SHA-256",
          "content" : "7eefde7e3cc1937f78dc13b9e6c00746f602cff6f5621d62df2c24d922619fe0"
        },
        {
          "alg" : "SHA-512",
          "content" : "31a05fdabb79470122abdf184defbc21bb713e1bef57014e187b3165a0630ae901a7dc86ce5312a48bd7b7e215e4226a9b04807e3a6a1a44099f174c46df0bba"
        },
        {
          "alg" : "SHA-384",
          "content" : "269c694c2467ea1fa2effba54d59efa5ee806f2eb68dba97398977d28b6bad3c19796f0e43309ea64942fb750ba81754"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.scala-lang/scala-library@2.12.17?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://lamp.epfl.ch/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/scala/bug/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/scala/scala"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.scala-lang/scala-library@2.12.17?type=jar"
    },
    {
      "publisher" : "LAMP/EPFL",
      "group" : "org.scala-lang",
      "name" : "scala-reflect",
      "version" : "2.12.17",
      "description" : "Reflection Library for the Scala Programming Language",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a46012d6791564e644aa983cdc9f7135"
        },
        {
          "alg" : "SHA-1",
          "content" : "c0fcfc7932ee0c92e6d00d1c7c47d5042391a987"
        },
        {
          "alg" : "SHA-256",
          "content" : "000c8142b28fba079eb1e3c56b7587d73b48f8b23fb22123d8403ca84bfad7db"
        },
        {
          "alg" : "SHA-512",
          "content" : "fe0ecc5b1f6b5fb5b7ab8a1c71254ba2532c78fc94941ea22148549f662ab1d82862cf9a0bc8c21870836fd7061182c23c2d927787a5b3d59cb2ce4345f355a7"
        },
        {
          "alg" : "SHA-384",
          "content" : "0bbe6d9851e79b15a47311bd89b69e3e5fc0120696207bca35d407fabd0f7d182f8797f6b0df0db9b8bd73ea8f3affd5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.scala-lang/scala-reflect@2.12.17?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://lamp.epfl.ch/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/scala/bug/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/scala/scala"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.scala-lang/scala-reflect@2.12.17?type=jar"
    },
    {
      "publisher" : "org.json4s",
      "group" : "org.json4s",
      "name" : "json4s-jackson_2.12",
      "version" : "3.7.0-M11",
      "description" : "json4s-jackson",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "53dc7ac002aa4de2843799cd239aae2d"
        },
        {
          "alg" : "SHA-1",
          "content" : "54089dd27d932de33c329199474ad429ee076510"
        },
        {
          "alg" : "SHA-256",
          "content" : "d03ed279c83870b9bd624b1817fe6290822d7e74207d1e250860fbdd935643dc"
        },
        {
          "alg" : "SHA-512",
          "content" : "ad9084168bf882e70a4827d3bc1a6905a9f931e25d376aa75a3bc421410c870b3d6e33f5271cdc42504f254f54ddb33f0f1df8b3df93b9056e422b149d6dd367"
        },
        {
          "alg" : "SHA-384",
          "content" : "904c7e915b15ae824616ce1a8aaf7d13d67bcf0fdac05381cb852dafbc27429829d518b2abafce6c9392b2e5f8c6a7d7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.json4s/json4s-jackson_2.12@3.7.0-M11?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/json4s/json4s"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/json4s/json4s"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.json4s/json4s-jackson_2.12@3.7.0-M11?type=jar"
    },
    {
      "publisher" : "org.json4s",
      "group" : "org.json4s",
      "name" : "json4s-core_2.12",
      "version" : "3.7.0-M11",
      "description" : "json4s-core",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1db3cb3db15c895307cfd20b81e2d8a6"
        },
        {
          "alg" : "SHA-1",
          "content" : "4126de102c272d727ea0e1875ee3db9f6ac7060f"
        },
        {
          "alg" : "SHA-256",
          "content" : "2fd8e66a3715565294c4edb5d2514e7ff59a14960c7f8dd84cf0991661a48a10"
        },
        {
          "alg" : "SHA-512",
          "content" : "7347a1bf54151a42dcf2aade3ca125da563c025644f935497a5c5e060198652c3ee7c52ee6de484a8f45aef1ab585dc831fbf5ae14395712236e752aec476861"
        },
        {
          "alg" : "SHA-384",
          "content" : "f6501957f7a579ee24997061ca3ea416d487906f386382c9d39e9cd8816efb180fd6489a8ff0551dc1e00e083810105e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.json4s/json4s-core_2.12@3.7.0-M11?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/json4s/json4s"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/json4s/json4s"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.json4s/json4s-core_2.12@3.7.0-M11?type=jar"
    },
    {
      "publisher" : "org.json4s",
      "group" : "org.json4s",
      "name" : "json4s-ast_2.12",
      "version" : "3.7.0-M11",
      "description" : "json4s-ast",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f106ddf363ca77383877ccb0bdeaa425"
        },
        {
          "alg" : "SHA-1",
          "content" : "f8c92b6b7cb37f3e2fdf649ad1ba3d65248bb45d"
        },
        {
          "alg" : "SHA-256",
          "content" : "f9388c0ad4a969bf1a1867e85ce24ed87ca5a1095342b96b35c356fd971b544d"
        },
        {
          "alg" : "SHA-512",
          "content" : "806f72c85625f66a0de4c1629e354ba687b55e303899de0a6b8fbe256ed674da1aedf04471b7cbe969ee5a21ff48a2d97dab2145229f8e04f7d886087336de61"
        },
        {
          "alg" : "SHA-384",
          "content" : "99795db385defb8e98d94b6d52041ec35b9c914f0b1d0267aa737641bcd677cf07468885f09e8ef383e0052b45fca30f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.json4s/json4s-ast_2.12@3.7.0-M11?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/json4s/json4s"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/json4s/json4s"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.json4s/json4s-ast_2.12@3.7.0-M11?type=jar"
    },
    {
      "publisher" : "org.json4s",
      "group" : "org.json4s",
      "name" : "json4s-scalap_2.12",
      "version" : "3.7.0-M11",
      "description" : "json4s-scalap",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2a5d1806ab0330c4e355c34a13afaf9e"
        },
        {
          "alg" : "SHA-1",
          "content" : "5a5aafd028f7ac4a8565e1cebe1307c146c87f70"
        },
        {
          "alg" : "SHA-256",
          "content" : "d2a1f84b618e1cba12c4e8ce2babc23d78a12de5f568abf8fbaeca39c52e0eb8"
        },
        {
          "alg" : "SHA-512",
          "content" : "ff1771820f477f755982690dc5d32c8f24a075263d0e8ab83a4f3cac4824a8cd522860661f7689b28c65550a80775e269461f3bd7c827a80bd70967444a13368"
        },
        {
          "alg" : "SHA-384",
          "content" : "924e5e9aaa2f7823b1d275c866c3713a33be2458bf7aa60a73f4b6989babf07f2d4ee723a7175469eb4c77f7fb4478ed"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.json4s/json4s-scalap_2.12@3.7.0-M11?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/json4s/json4s"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/json4s/json4s"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.json4s/json4s-scalap_2.12@3.7.0-M11?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "org.glassfish.jersey.core",
      "name" : "jersey-client",
      "version" : "2.36",
      "description" : "Jersey core client implementation",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ee13f5ef0926cdbcb447415e0c5e2812"
        },
        {
          "alg" : "SHA-1",
          "content" : "0755709fb31407d36c114afbe345b47cebf0fe60"
        },
        {
          "alg" : "SHA-256",
          "content" : "027b7061001f186bd7a48bbe5f070e2774b108969776935fc9b55591a93f689d"
        },
        {
          "alg" : "SHA-512",
          "content" : "31f94c45a6b151d1407e9e7c129574b5c94035e102d024096d99737afd837cd25b55664a7938c8814b6379d363894f318429d344d34eac110ebfe9afe1fab85f"
        },
        {
          "alg" : "SHA-384",
          "content" : "6cd9d7fb0105ff3ccc04da4a6a03d11e19afd59739f90d33affaec3bb1fc849c81b09526090d151ab51a876e310a3861"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        },
        {
          "license" : {
            "id" : "BSD-2-Clause"
          }
        },
        {
          "license" : {
            "name" : "Apache License, 2.0",
            "url" : "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license" : {
            "name" : "Public Domain",
            "url" : "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license" : {
            "name" : "Modified BSD",
            "url" : "https://asm.ow2.io/license.html"
          }
        },
        {
          "license" : {
            "name" : "jQuery license",
            "url" : "jquery.org/license"
          }
        },
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        },
        {
          "license" : {
            "name" : "W3C license",
            "url" : "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.jersey.core/jersey-client@2.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/org/foundation/"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jersey/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jersey"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.jersey.core/jersey-client@2.36?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.ws.rs",
      "name" : "jakarta.ws.rs-api",
      "version" : "2.1.6",
      "description" : "Jakarta RESTful Web Services API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c3892382aeb5c54085b22b1890511d29"
        },
        {
          "alg" : "SHA-1",
          "content" : "1dcb770bce80a490dff49729b99c7a60e9ecb122"
        },
        {
          "alg" : "SHA-256",
          "content" : "4cea299c846c8a6e6470cbfc2f7c391bc29b9caa2f9264ac1064ba91691f4adf"
        },
        {
          "alg" : "SHA-512",
          "content" : "c1e2655269b9a32f9c0aec9edf12bf6d8b397d8cbcf60e28dd21ab13ecc2738800ebe5c2d49ed3c50d4dac6617671f0fae873daf8ec116a16ef7f7f0a3bef7fa"
        },
        {
          "alg" : "SHA-384",
          "content" : "3fd05e2b167d927216d3b2fc9d1c5a70aa3911d075c2159f958ce755c6a41d93bd76f0ce79ccd22e5a60182aa91fdb07"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/org/foundation/"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jax-rs-api-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jaxrs-api/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jaxrs-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "org.glassfish.hk2.external",
      "name" : "jakarta.inject",
      "version" : "2.6.1",
      "description" : "Injection API (JSR 330) version ${javax.inject.version} repackaged as OSGi bundle",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4d7c80a1e3cd54531af03bef4537f7af"
        },
        {
          "alg" : "SHA-1",
          "content" : "8096ebf722902e75fbd4f532a751e514f02e1eb7"
        },
        {
          "alg" : "SHA-256",
          "content" : "5e88c123b3e41bca788b2683118867d9b6dec714247ea91c588aed46a36ee24f"
        },
        {
          "alg" : "SHA-512",
          "content" : "7fc8196ad9ee03a831dfff85c945e416c3906071a7aa8ebf6ab8b7008dfec0adccc1f1dca53ed6768ac5676cd4b3c43471674f97ff73e1f61f5a427aaed68e05"
        },
        {
          "alg" : "SHA-384",
          "content" : "6b3ea9eeec5cbbc1fb3e6c89160af67b82ffbd68948dd4790e3fe3ce2fc495c063698a7d6a1998d5db51abafe3915e19"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.oracle.com"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "org.glassfish.jersey.core",
      "name" : "jersey-common",
      "version" : "2.36",
      "description" : "Jersey core common packages",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4b155e7fd084ad25b5e836af5efbe4c8"
        },
        {
          "alg" : "SHA-1",
          "content" : "5d259ea71ca3c1f4566ec5bfee7320e63d79673b"
        },
        {
          "alg" : "SHA-256",
          "content" : "543b8df0bfa07e54fe65e45b351088010a2a7079ac2564023761f8dfe8eb7b33"
        },
        {
          "alg" : "SHA-512",
          "content" : "fa3166330f8b780c714b6ac81e561503c05587c97753eaf79c5e1cf4033b570812262d185f838b5ae08bc17d85dd2a86a1147f4b2a7b42f032757535d4cd10b5"
        },
        {
          "alg" : "SHA-384",
          "content" : "005af1b24cc04fdb9bac2177cca06d492974e9a63cd10e3dd8100b4aefa796ab8844b00d4f5ae96468015dfdd91c6814"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "name" : "The GNU General Public License (GPL), Version 2, With Classpath Exception",
            "url" : "https://www.gnu.org/software/classpath/license.html"
          }
        },
        {
          "license" : {
            "name" : "Apache License, 2.0",
            "url" : "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license" : {
            "name" : "Public Domain",
            "url" : "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.jersey.core/jersey-common@2.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/org/foundation/"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jersey/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jersey"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.jersey.core/jersey-common@2.36?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.annotation",
      "name" : "jakarta.annotation-api",
      "version" : "1.3.5",
      "description" : "Jakarta Annotations API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8b165cf58df5f8c2a222f637c0a07c97"
        },
        {
          "alg" : "SHA-1",
          "content" : "59eb84ee0d616332ff44aba065f3888cf002cd2d"
        },
        {
          "alg" : "SHA-256",
          "content" : "85fb03fc054cdf4efca8efd9b6712bbb418e1ab98241c4539c8585bbc23e1b8a"
        },
        {
          "alg" : "SHA-512",
          "content" : "d1acff146c0f9ea923a9325ad4c22ba2052ec474341ab8392abab7e8abd3ca010db2400ff9b5849fc4f1fa5c0a18830eb104da07a13bd26b4f0a43d167935878"
        },
        {
          "alg" : "SHA-384",
          "content" : "004a4bde333c0575f72df1cb9cf95ee0c6c7f738a6f0f723a5ec545aaa1664abeb82f01627708a1377e3136754fb7859"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/common-annotations-api/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/ca-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/common-annotations-api"
        },
        {
          "type" : "website",
          "url" : "https://www.eclipse.org"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "org.glassfish.hk2",
      "name" : "osgi-resource-locator",
      "version" : "1.0.3",
      "description" : "Used by various API providers that rely on META-INF/services mechanism to locate providers.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e7e82b82118c5387ae45f7bf3892909b"
        },
        {
          "alg" : "SHA-1",
          "content" : "de3b21279df7e755e38275137539be5e2c80dd58"
        },
        {
          "alg" : "SHA-256",
          "content" : "aab5d7849f7cfcda2cc7c541ba1bd365151d42276f151c825387245dfde3dd74"
        },
        {
          "alg" : "SHA-512",
          "content" : "4d84983a9b1c72f58661b576c78ca456a2106602c2ad211cd7e72d94464c8774173b34a35629c507c7c84c982f1de0c9bf48352458e8480be5f874d20d6e69a3"
        },
        {
          "alg" : "SHA-384",
          "content" : "9f92002296c66cc8996d459b95a9c531ec71b98a8b819121abbc7d636a6c4ace04c88878ba6917f71650280a880d1ce2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.hk2/osgi-resource-locator@1.0.3?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2-extra"
        },
        {
          "type" : "website",
          "url" : "https://www.eclipse.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/ee4j/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.hk2/osgi-resource-locator@1.0.3?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "org.glassfish.jersey.core",
      "name" : "jersey-server",
      "version" : "2.36",
      "description" : "Jersey core server implementation",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8dd2bd5634c82b57eebb0fe35aaccee2"
        },
        {
          "alg" : "SHA-1",
          "content" : "73cf67d0d761b60860b7721529503a121cfa9df4"
        },
        {
          "alg" : "SHA-256",
          "content" : "2699758d1c33a9137363fd022d8c9c00423c800c4fde2b49d53530987e8da72d"
        },
        {
          "alg" : "SHA-512",
          "content" : "7a858fea938ce38aaac4ec6fea14bb35b036b6c690266757f3ccdf5527f4a20da9d7d5dace96467c28e45ac2efa50c08a9fe4b09fb1b47946409a7b02bd0de67"
        },
        {
          "alg" : "SHA-384",
          "content" : "c039aefae5ae6521bfb8d85f02311a1c31559468b14f10d0d9739edaa1b8aa46f9278ff05abfe0d45cdeb4a03b9fd22e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "name" : "The GNU General Public License (GPL), Version 2, With Classpath Exception",
            "url" : "https://www.gnu.org/software/classpath/license.html"
          }
        },
        {
          "license" : {
            "name" : "Apache License, 2.0",
            "url" : "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license" : {
            "name" : "Modified BSD",
            "url" : "https://asm.ow2.io/license.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.jersey.core/jersey-server@2.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/org/foundation/"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jersey/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jersey"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.jersey.core/jersey-server@2.36?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.validation",
      "name" : "jakarta.validation-api",
      "version" : "2.0.2",
      "description" : "Jakarta Bean Validation API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "77501d529c1928c9bac2500cc9f93fb0"
        },
        {
          "alg" : "SHA-1",
          "content" : "5eacc6522521f7eacb081f95cee1e231648461e7"
        },
        {
          "alg" : "SHA-256",
          "content" : "b42d42428f3d922c892a909fa043287d577c0c5b165ad9b7d568cebf87fc9ea4"
        },
        {
          "alg" : "SHA-512",
          "content" : "3ca8556b80ca809b3a43fac31469702bbad62a00e63b11a304dad1e372d9f6c128357463a4c70c423055941c7e2e417f87a9474a204d189c8e4b62f42047c8eb"
        },
        {
          "alg" : "SHA-384",
          "content" : "6ae3963fd6a5e83b068a8344b88f6bfbd26d29cee64193025bc5e98195678e49826463da27a7a1c15cd83b2149d57a94"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://hibernate.atlassian.net/projects/BVAL/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/beanvalidation-api"
        },
        {
          "type" : "website",
          "url" : "https://www.eclipse.org"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "org.glassfish.jersey.containers",
      "name" : "jersey-container-servlet",
      "version" : "2.36",
      "description" : "Jersey core Servlet 3.x implementation",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4571ad55cb3afc068f90ecc1d7c41a25"
        },
        {
          "alg" : "SHA-1",
          "content" : "fa6b0f7d47d5c3e054c71eea613a6bbe62b1b733"
        },
        {
          "alg" : "SHA-256",
          "content" : "64f06051710734565486ab18910a4d3e2dbc1292a410146b66045dc1aea7cf1a"
        },
        {
          "alg" : "SHA-512",
          "content" : "3b72d1180786dece0122a42da951c88a0fd075cc22bae57cb8fb888d748fe098673005f021a28f47dae06ecbc21bf3faca4ef00b62a5fe76ff3acd6bd83c3595"
        },
        {
          "alg" : "SHA-384",
          "content" : "2dac4ecfeba7d17be2d0ff6e84856379121f9e6b67dedfc4fec3af5a5398414d176b62ec073ed357d93160dd460b5c66"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        },
        {
          "license" : {
            "id" : "BSD-2-Clause"
          }
        },
        {
          "license" : {
            "name" : "Apache License, 2.0",
            "url" : "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license" : {
            "name" : "Public Domain",
            "url" : "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license" : {
            "name" : "Modified BSD",
            "url" : "https://asm.ow2.io/license.html"
          }
        },
        {
          "license" : {
            "name" : "jQuery license",
            "url" : "jquery.org/license"
          }
        },
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        },
        {
          "license" : {
            "name" : "W3C license",
            "url" : "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@2.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/org/foundation/"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jersey/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jersey"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@2.36?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "org.glassfish.jersey.containers",
      "name" : "jersey-container-servlet-core",
      "version" : "2.36",
      "description" : "Jersey core Servlet 2.x implementation",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f7166bcea4836fa9abb54220df1a5acf"
        },
        {
          "alg" : "SHA-1",
          "content" : "d3bd5067597fa7252e603502ee4ae34563852eb5"
        },
        {
          "alg" : "SHA-256",
          "content" : "08dec2b2be0e126b01632b9ac22982cf746c6f2a1aae5c65f880ac8376f010da"
        },
        {
          "alg" : "SHA-512",
          "content" : "e1e4069f7239a04bdf601491f76a3d0bc7c5ecd5340f04e86610b234826226fa42aaee32fe8faa9d3d4c145bf8f514c40d58208129c1aae4b5b1f084100b448d"
        },
        {
          "alg" : "SHA-384",
          "content" : "60ad1264a19746997005fb8ff8ecbb56be6cda0aa22d18efa5b41dad69d5e9190098062f9c74fd18dc292f3256248378"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        },
        {
          "license" : {
            "id" : "BSD-2-Clause"
          }
        },
        {
          "license" : {
            "name" : "Apache License, 2.0",
            "url" : "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license" : {
            "name" : "Public Domain",
            "url" : "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license" : {
            "name" : "Modified BSD",
            "url" : "https://asm.ow2.io/license.html"
          }
        },
        {
          "license" : {
            "name" : "jQuery license",
            "url" : "jquery.org/license"
          }
        },
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        },
        {
          "license" : {
            "name" : "W3C license",
            "url" : "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet-core@2.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/org/foundation/"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jersey/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jersey"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet-core@2.36?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "org.glassfish.jersey.inject",
      "name" : "jersey-hk2",
      "version" : "2.36",
      "description" : "HK2 InjectionManager implementation",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "11f928a24e0cb52fd8999cca0268b3b3"
        },
        {
          "alg" : "SHA-1",
          "content" : "69a57963b35428a261ac4313cfa89f6b3dc255c6"
        },
        {
          "alg" : "SHA-256",
          "content" : "bdc4a8250be82943f7af1ccea4f58a92a8a73c15307ec4226fd60b8a455672f6"
        },
        {
          "alg" : "SHA-512",
          "content" : "c423e6d00092751910302afcd2727a628740c0b77a3fdf681744d408a1eec8941d611c683e84a0be83a9a39cf184f7a60e50d6e39843f18f8ff419c37ad56432"
        },
        {
          "alg" : "SHA-384",
          "content" : "492ef6f281d8eb3baeac9cb53535b26b3ae0639f622d9efcf18442b1a07c35349a88d43442fd0cc7312e44820f702165"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        },
        {
          "license" : {
            "id" : "BSD-2-Clause"
          }
        },
        {
          "license" : {
            "name" : "Apache License, 2.0",
            "url" : "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license" : {
            "name" : "Public Domain",
            "url" : "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license" : {
            "name" : "Modified BSD",
            "url" : "https://asm.ow2.io/license.html"
          }
        },
        {
          "license" : {
            "name" : "jQuery license",
            "url" : "jquery.org/license"
          }
        },
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        },
        {
          "license" : {
            "name" : "W3C license",
            "url" : "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@2.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/org/foundation/"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jersey/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jersey"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@2.36?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "org.glassfish.hk2",
      "name" : "hk2-locator",
      "version" : "2.6.1",
      "description" : "${project.name}",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "dfd358720393d83b01747928db6e3912"
        },
        {
          "alg" : "SHA-1",
          "content" : "9dedf9d2022e38ec0743ed44c1ac94ad6149acdd"
        },
        {
          "alg" : "SHA-256",
          "content" : "febc668deb9f2000c76bd4918d8086c0a4c74d07bd0c60486b72c6bd38b62874"
        },
        {
          "alg" : "SHA-512",
          "content" : "e2c87a265f114042f4c04397db4adca7291fd68e08e97129576ceb603287b57ccf5b03d0c285727ebb8cd7f88009280bdeab4254475d59da1ac41ba57b7cdecb"
        },
        {
          "alg" : "SHA-384",
          "content" : "05afff9ebfdbdaed71770a58fe334751b9ac7476eb4114e08fc376bf4e16226b5016784c99c3dd8cb04c79d954068402"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.hk2/hk2-locator@2.6.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.oracle.com"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.hk2/hk2-locator@2.6.1?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "org.glassfish.hk2.external",
      "name" : "aopalliance-repackaged",
      "version" : "2.6.1",
      "description" : "Dependency Injection Kernel",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0237846ebdaa7db36b356044a373ffba"
        },
        {
          "alg" : "SHA-1",
          "content" : "b2eb0a83bcbb44cc5d25f8b18f23be116313a638"
        },
        {
          "alg" : "SHA-256",
          "content" : "bad77f9278d753406360af9e4747bd9b3161554ea9cd3d62411a0ae1f2c141fd"
        },
        {
          "alg" : "SHA-512",
          "content" : "2d9e5395ba887fa5bb6a8209b731292d440f5c1db2fccaf56c41b1f1d9f774733da28aa8b9b769e765fe62f3640d7bcb2cf6140f0044a8b576e9e45144038c46"
        },
        {
          "alg" : "SHA-384",
          "content" : "f481e2a4e18308a1a0bd85e79f95711434436fa69a504fe98a3d7ea899eaed505a5cb2bfe08f41d1b2af56e150ec0741"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@2.6.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.oracle.com"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@2.6.1?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "org.glassfish.hk2",
      "name" : "hk2-api",
      "version" : "2.6.1",
      "description" : "${project.name}",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "23e8c18dae0c7b776bed756763d5153f"
        },
        {
          "alg" : "SHA-1",
          "content" : "114bd7afb4a1bd9993527f52a08a252b5d2acac5"
        },
        {
          "alg" : "SHA-256",
          "content" : "c2cb80a01e58440ae57d5ee59af4d4d94e5180e04aff112b0cb611c07d61e773"
        },
        {
          "alg" : "SHA-512",
          "content" : "9abe9f78d7f6c805b6c7b515579230e5fa573abbcd818bed56068080d6458608e2e99d5937eb959cf1e4f4cfdc4f790059dfc1231313cd8f30aaefbf518eb1c7"
        },
        {
          "alg" : "SHA-384",
          "content" : "2236ca10af39c4f4f6f1ac63c3652eaa4124bce8f557f8ebaa78576e00c25b986ee9d7e417db6edb9a06aa46b36f4d24"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.hk2/hk2-api@2.6.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.oracle.com"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.hk2/hk2-api@2.6.1?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "org.glassfish.hk2",
      "name" : "hk2-utils",
      "version" : "2.6.1",
      "description" : "${project.name}",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "75ccb55538a77bf878996497ffeb86f3"
        },
        {
          "alg" : "SHA-1",
          "content" : "396513aa96c1d5a10aa4f75c4dcbf259a698d62d"
        },
        {
          "alg" : "SHA-256",
          "content" : "30727f79086452fdefdab08451d982c2082aa239d9f75cdeb1ba271e3c887036"
        },
        {
          "alg" : "SHA-512",
          "content" : "8da7cd88de45270b1fcfd2c471ae092b3972af78a6e0ecc76ed4ac10b6bd6712d2a538bd163a457f21cea4e7e5c52f547108f44aaa791ed0fd069f697f1282c1"
        },
        {
          "alg" : "SHA-384",
          "content" : "94fb55c1f57b96fd84e717fbf3c254f16e2308bc33976addb71d26bf367b7c2ec63e657a953f30f55d7046dd07510e50"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.hk2/hk2-utils@2.6.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.oracle.com"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.hk2/hk2-utils@2.6.1?type=jar"
    },
    {
      "publisher" : "Shigeru Chiba, www.javassist.org",
      "group" : "org.javassist",
      "name" : "javassist",
      "version" : "3.25.0-GA",
      "description" : "Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation simple. It is a class library for editing bytecodes in Java.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3a4267e01989478be188d127b7a39425"
        },
        {
          "alg" : "SHA-1",
          "content" : "442dc1f9fd520130bd18da938622f4f9b2e5fba3"
        },
        {
          "alg" : "SHA-256",
          "content" : "5d49abd02997134f80041645e9668e1ff97afd69d2c2c55ae9fbd40dc073f97b"
        },
        {
          "alg" : "SHA-512",
          "content" : "638d2ed77ae1f34dd57f6aa653635a77d8477b3e99f64343ea5eafcec49ebac13250639924c47c83246890bd8988d92c30785ed8854c8a101138c410657cb944"
        },
        {
          "alg" : "SHA-384",
          "content" : "183a243f52aaea67057564cf0d18f0c32681907aa24eb65bbfd453016911cb42230a73271a0da20e3f1aabf4b0412e4e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MPL-1.1"
          }
        },
        {
          "license" : {
            "id" : "LGPL-2.1-only"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.javassist/javassist@3.25.0-GA?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://jira.jboss.org/jira/browse/JASSIST/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.javassist/javassist@3.25.0-GA?type=jar"
    },
    {
      "group" : "io.netty",
      "name" : "netty-all",
      "version" : "4.1.87.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "59fcb4cf133840677c8b02a55b7ba2fa"
        },
        {
          "alg" : "SHA-1",
          "content" : "39de92ea74a05da937343695f780e59addb8b8ea"
        },
        {
          "alg" : "SHA-256",
          "content" : "c3d3915eb8c7f6a2b18dfce2ba67d4a7dc01fcde1854a4b622d91ca187ae73cd"
        },
        {
          "alg" : "SHA-512",
          "content" : "be7f08837ceaa4480dc0b2189f68fad0f64b0555cebe469261a64690cb16d2e55469e43ddf47fcc7099ec9729e2c9760f26293067f746310f6763b6cc45aed08"
        },
        {
          "alg" : "SHA-384",
          "content" : "e42c3af3065684a84f9da09944d94e7324852c3cba2fbd0e21ea83558bb2684a9fb31f88587f33c87c27d980beb31a2a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-all@4.1.87.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-all"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-all@4.1.87.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-buffer",
      "version" : "4.1.87.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "edae2374fbcfaf345fd0b5260cd81cce"
        },
        {
          "alg" : "SHA-1",
          "content" : "8942174141fb0586e7fffefc8ae48e1458293696"
        },
        {
          "alg" : "SHA-256",
          "content" : "4e3abdf4ddb8810f5fb4a2b57c9144407873b359faa1894007673ed1465dd3e8"
        },
        {
          "alg" : "SHA-512",
          "content" : "0158cab4032503dc849186452653755af53c78d480de8b43c3bb7969a17dbfe949e4f94350942e3a8f4506f473ab9530c4fad2282c1393b1058e868957e7db4c"
        },
        {
          "alg" : "SHA-384",
          "content" : "bf2fd3312777bbc97aec582942632ba2f46c4c4f2f344463969874d2739e4cc5598ae58c49b0cd244792d002e5a20bae"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-buffer@4.1.87.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-buffer@4.1.87.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-codec",
      "version" : "4.1.87.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "90942a0f8c742f46631dcfa99d374a76"
        },
        {
          "alg" : "SHA-1",
          "content" : "d7ab7363f736114e6324ccf802d094529b30b8d8"
        },
        {
          "alg" : "SHA-256",
          "content" : "c643fe8318b7c7405acec13ed98e8f634f917960b20486295efbc5a690bac694"
        },
        {
          "alg" : "SHA-512",
          "content" : "ddb82448cddb65c83d9e2fe31ba6fd2392648db36d3f1ec845bc47d24d02255a1ecdbd1716df90bd24db7b758c320e5a4606c14ae5df87febbecd7d4a2bcd827"
        },
        {
          "alg" : "SHA-384",
          "content" : "67fc3409f2500c5734bb00096fb8a0fe7e5bc45697a741c285ed6878f9f7d29ae5d39d04eaf85b70dfb5ee8d6345ef51"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-codec@4.1.87.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-codec@4.1.87.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-codec-http",
      "version" : "4.1.87.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1e183a91d21038e1888f0f062e8bd18d"
        },
        {
          "alg" : "SHA-1",
          "content" : "3230e95d6832ee4306fe1ca774c7bcecf1da4b28"
        },
        {
          "alg" : "SHA-256",
          "content" : "39368c15595b791dbe26e7639cf2e71b6647bab8838fa5781cf7a80762eac927"
        },
        {
          "alg" : "SHA-512",
          "content" : "2b300f962a9618a43b33b533ca229c71f38c9c18e6c1e8b4bf0414f4a59d8a64fc6aec48de5a8693a2d8eedcefeff426b8d3f8427f93274b2425d68e2d18522f"
        },
        {
          "alg" : "SHA-384",
          "content" : "4c9acad8abb83d318721b6d172749f2ee29825dadb0d2ae3921df37fd1f1250ce7262cbdf0ba1b693b7c60ae5e1cdb29"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-codec-http@4.1.87.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-codec-http@4.1.87.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-codec-http2",
      "version" : "4.1.87.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7b261317c4046af8aa95437a06066191"
        },
        {
          "alg" : "SHA-1",
          "content" : "72b756ff290d782c9ebb36db7d42ee272270c0b4"
        },
        {
          "alg" : "SHA-256",
          "content" : "e5d01b8db385b23103de67d3666c6fa9fa144d42217a3c8266b2a5efe425f093"
        },
        {
          "alg" : "SHA-512",
          "content" : "69d932ed9fdf2fc61664f5c508c974b0cd5d15408527a43c864a4eccb5e5a8234d1dd49c063e3a7582a30b32370d518f07f0158f32c79a9ba8e6cec473bc7cd0"
        },
        {
          "alg" : "SHA-384",
          "content" : "95c039d8d5be2654a0438be4287be4a71af18265ae24eae458c18611dcda53946c2e11707e2f76cc925978bf8374f2ee"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-codec-http2@4.1.87.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-codec-http2@4.1.87.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-codec-socks",
      "version" : "4.1.87.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6a7c79de6df678a372a85948f6039d21"
        },
        {
          "alg" : "SHA-1",
          "content" : "109027470b72d56914d76154e947f9bd5844bb9b"
        },
        {
          "alg" : "SHA-256",
          "content" : "41a76a64514f8f8f50ab8527254073521394138e8a96191905e8c143368b2006"
        },
        {
          "alg" : "SHA-512",
          "content" : "11a7e384d0d925c6e059b989ef638b045e42181a763b4afb70a3074d7a41764f0ea4b2922ff12e17846a63631c09a1615203f553d2e40ce5b58f9f984336e55e"
        },
        {
          "alg" : "SHA-384",
          "content" : "4f215995526ed2ea5f3274ac66da47a43e8944a94d4cdf50019197300b22e81de4b130d6644707c9eb46ac8a24cd94af"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-codec-socks@4.1.87.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-codec-socks@4.1.87.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-common",
      "version" : "4.1.87.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b0eb8e4da4cfcf226a8c33138ebc028c"
        },
        {
          "alg" : "SHA-1",
          "content" : "3e7e80dd6e604144781fcb859b79cfe8d3730079"
        },
        {
          "alg" : "SHA-256",
          "content" : "811443fc1411a9ef7c1f7b02a750e2a6688f1eec0ae7361ed07812a85d982c86"
        },
        {
          "alg" : "SHA-512",
          "content" : "cbc9020bf9694e93d02259f1fde66cf3e4776f647eb3dda10a3a47323753919698e1de6c2009dfc1d6df69768a1098bf603bc7a197d2991b6c06a81188374629"
        },
        {
          "alg" : "SHA-384",
          "content" : "0a82f90f6996734587e1a60380ba7e3e8915c3e56ffe777a78aad392f53c96bccb4d15bf0f9a168cd0e8370ef7cd7c91"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-common@4.1.87.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-common@4.1.87.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-handler",
      "version" : "4.1.87.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a61f705c80746091d306edcbdfdc676d"
        },
        {
          "alg" : "SHA-1",
          "content" : "2bd97491c22ebea4670c00f1bd5dbf65a8a1cfe7"
        },
        {
          "alg" : "SHA-256",
          "content" : "31a20e1de13b06a677a4719fd5aa95635982114a32c1d034739a48cceada2383"
        },
        {
          "alg" : "SHA-512",
          "content" : "d7abb4791f9e8114e972d7f6f14b2af10e4a2bf9178e87116374508625a0d95840f2e17cc8fb5170aabae3ce3922885da0871e0d942cf79e1a175954f36e3a6c"
        },
        {
          "alg" : "SHA-384",
          "content" : "70be4cee8f35135a00660cef8d095a00b15886d1cdea956a222aafd887e8d3de57949c2044783c2acd03c7ac48ed0b56"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-handler@4.1.87.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-handler@4.1.87.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-native-unix-common",
      "version" : "4.1.87.Final",
      "description" : "Static library which contains common unix utilities.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1f9dbd13aad7e21faeeab339fc24be8c"
        },
        {
          "alg" : "SHA-1",
          "content" : "4bf8308dc7d6ba2570681eaeddb16f8d1196b438"
        },
        {
          "alg" : "SHA-256",
          "content" : "cc2d013c933c206605da01be39f4c2c1f4586a1b9103a665bd724bdd46d9cd0c"
        },
        {
          "alg" : "SHA-512",
          "content" : "6090776597d514d91dfbe88128ea4911c751000e67dad67f17e960208c78d4b631b638262cd928ceab54733cb59e159cb12dc2e321f62ac34005084f83302828"
        },
        {
          "alg" : "SHA-384",
          "content" : "25c02aac5376f61c55864ae431bc44160a04cd06fad729871eafd9292c7a9844e312fd4242821c1b97eedd45d7ff88c1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.87.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.87.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-handler-proxy",
      "version" : "4.1.87.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "abe5be41b6e5934006789f08168b470b"
        },
        {
          "alg" : "SHA-1",
          "content" : "8079f16d6209e10f5d3a09522e7aa9ffb217e17e"
        },
        {
          "alg" : "SHA-256",
          "content" : "65276b2ab687b1b7c1ceabcc941d6e2cce1038f35b581218d7dbf46b16c5b4ac"
        },
        {
          "alg" : "SHA-512",
          "content" : "bb2e4efb7b6d28ea15b72b4bfd0cca3e7b091e7b4763e2c7007ab8aeffca41c10810eb12c73416455d48707451b037fac385628d5127b0cccb46b36b15c9405d"
        },
        {
          "alg" : "SHA-384",
          "content" : "c4097bd7832a65e924c93dda76565ce7afabb1449324793174a14362ea246471802cdc92eb9d8fd55242951f6c5126a9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-handler-proxy@4.1.87.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-handler-proxy@4.1.87.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-resolver",
      "version" : "4.1.87.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4bbe520d843078cd20863a091188f438"
        },
        {
          "alg" : "SHA-1",
          "content" : "eaa964e16a67914c8d9b814d29a4b969635d72a0"
        },
        {
          "alg" : "SHA-256",
          "content" : "ee11d22d240b4b125edaed23ec7cc35ad9241b1b8fdd50630de20411ec345fc7"
        },
        {
          "alg" : "SHA-512",
          "content" : "124ddce0250fd04d310b24812caa72332a5c399dc564d3332c9498abef2aa43dd28f5eb264f4a73af8be8a4b144b03a9572620b0b43731c3e9d73073b88ef8ff"
        },
        {
          "alg" : "SHA-384",
          "content" : "83cfe7a0d00f01fbf5d82a0bd9bfc3945140c4557f15d16a7eb86d996821ede22e150168432e100769db5eb1501f43f6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-resolver@4.1.87.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-resolver@4.1.87.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport",
      "version" : "4.1.87.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "27af50d84a4d81ab5e2264c52349ce8a"
        },
        {
          "alg" : "SHA-1",
          "content" : "30c78c8ced3417f35e2a55f7533dc2bb43fef2aa"
        },
        {
          "alg" : "SHA-256",
          "content" : "17ed465cf5b1579b72379e47be3ba7fccb09dda8d95d47c8d668118483b08f43"
        },
        {
          "alg" : "SHA-512",
          "content" : "810ef943aafc5136fba3dbacdf016511842ee4923406a3fb8d5ba5c02efb2ca80fa8c2d59fdae837bf0a1c842caaca751172ce8ea641503f5102d87bf6b81f82"
        },
        {
          "alg" : "SHA-384",
          "content" : "f60b61e1a9dfdcdcb16ee210a4033ab79ef6441923a53df20d8fae89a1941d13c6ac75db1405aac269cbf04f9489efac"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport@4.1.87.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport@4.1.87.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-classes-epoll",
      "version" : "4.1.87.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4da59e18c5417f540635d1427bed262d"
        },
        {
          "alg" : "SHA-1",
          "content" : "86e61c5743940d80e10609746784ffa0e4642065"
        },
        {
          "alg" : "SHA-256",
          "content" : "0b50ae7e1cb32f89c3a8b38a29605cfe6bd797693b3374fbf2577fbc03719297"
        },
        {
          "alg" : "SHA-512",
          "content" : "977491d40561367d99276dc6a171b91284fc3bbb23e3c9db453cf2b777697b7a22fe9be8e4a1cdf7bb176833d2ae802143c7cff94a34d47b7f84b71cabcdaa2f"
        },
        {
          "alg" : "SHA-384",
          "content" : "5428f910e02656ad66472b6ac0799e866b3f7645fe3f3d5c0c36a4f2ea6f01c0773a00bc4644a6a7c2c42e090c9fff6c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.87.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.87.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-classes-kqueue",
      "version" : "4.1.87.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ed87a0c49219a09b292023a7138a4542"
        },
        {
          "alg" : "SHA-1",
          "content" : "5476926df0ad650d3287d61b0bd17f145ff13791"
        },
        {
          "alg" : "SHA-256",
          "content" : "94abb9234691ce082bbc0d1d533e186cfd1a312d7515a47647896945e7fdbf87"
        },
        {
          "alg" : "SHA-512",
          "content" : "c465db6db9060ba932f42dc946a381d66fb465193353c78b3a6e21107296eb157f1d1822e9d1a7ad771f7bfe378e71b0783bce1716f921934c968b9507a94631"
        },
        {
          "alg" : "SHA-384",
          "content" : "e3855ea0b36bdb2c1d1b7236396c4cd9b5f703694d8863586291df6016edff15615715b12dadbbb22ff3ae88d81772fe"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.87.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.87.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-native-epoll",
      "version" : "4.1.87.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "237a050c5d50d2e5dc080263c33a6f88"
        },
        {
          "alg" : "SHA-1",
          "content" : "3374b1ee72cfff2858821de824ca02d08aedee7c"
        },
        {
          "alg" : "SHA-256",
          "content" : "bb3752881a027efa99388bef21f3287a6553299930f4226a6ea683da21c957f2"
        },
        {
          "alg" : "SHA-512",
          "content" : "472e868a87d03f3adfeb41cff22d95cc435333404a4a7542408d9aac8f80d47f1d35661b7bbc19ab0ac8355cff0abdd1ef632c0b3e5de68d250cbb9d8153a327"
        },
        {
          "alg" : "SHA-384",
          "content" : "4aae1e5c9b9bb9e8aea46f58547aa2a83b387228c2f04344a947522741258dc326e0019669cae0d2026b6660b279e06c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-native-epoll@4.1.87.Final?classifier=linux-x86_64&type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-native-epoll@4.1.87.Final?classifier=linux-x86_64&type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-native-epoll",
      "version" : "4.1.87.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4490db41db789277e444bd2cf212f702"
        },
        {
          "alg" : "SHA-1",
          "content" : "45b6df29d8d912c86d0b2e895b07ebc50715fde3"
        },
        {
          "alg" : "SHA-256",
          "content" : "e83c645de0623d28d6fc72a5a2b6322b2758f01aee83fa5af73f353bebdf028e"
        },
        {
          "alg" : "SHA-512",
          "content" : "0e8a526c52c4486498bc6093576fc834764e3f92aa089fc70ae349227466257e9ddb844b0d2f29f53e60cda2db18a29f7289650e22c40a35009ee8ae675c1591"
        },
        {
          "alg" : "SHA-384",
          "content" : "c835535b28bbd6f99ab2e117831bd1ab78051fd589419f66028f287e9f2ec062b40b6e410594eec7d2e16c58c656129a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-native-epoll@4.1.87.Final?classifier=linux-aarch_64&type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-native-epoll@4.1.87.Final?classifier=linux-aarch_64&type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-native-kqueue",
      "version" : "4.1.87.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cf51e6b9797c3c4b7ebf0d78987297e2"
        },
        {
          "alg" : "SHA-1",
          "content" : "fd571f6f7b8e70d0d9051bf1ff6b38a7d44c891a"
        },
        {
          "alg" : "SHA-256",
          "content" : "27e5bd891a4b8b70db2bf1a4c419fc666714a385d98194fbe3c856cac99610bd"
        },
        {
          "alg" : "SHA-512",
          "content" : "aee8f93790bcf90ec33313a37ae8bd01d45cb0a5e9669a830080f1c0e49c050041255b7fa2a24a7e995da7f1992708ee997c13d98b8077c0b5ba57fd3d237d6e"
        },
        {
          "alg" : "SHA-384",
          "content" : "05c73c791aacbb1eca8e96fd7205d0779debe684973db314a707d6d40b9d44ce17f32eb6c6bcdb271a24220d7913dc10"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.87.Final?classifier=osx-aarch_64&type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.87.Final?classifier=osx-aarch_64&type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-native-kqueue",
      "version" : "4.1.87.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6e353bb9d2433c11c6c8ccb928c5f4b3"
        },
        {
          "alg" : "SHA-1",
          "content" : "28db44b32b4c68f14858e9d691646a7262b57863"
        },
        {
          "alg" : "SHA-256",
          "content" : "dba5794dabbbfa7d97f659b135a14f37544b20cf4438165f4b0ff65bbe525f51"
        },
        {
          "alg" : "SHA-512",
          "content" : "f8f71b31e11f9d20253a37ec3575dc84d1c651805d994dea8b3c5695d7c4ec5a80e5208833529bf227ebc5ab10dd0604bb4bba91f50a6a79be4638f375f89e70"
        },
        {
          "alg" : "SHA-384",
          "content" : "59cec1b02de518e55a5c662be96a1403ffca63f4c3f842cd698888a5eb9dfdbfbebdb3a94922e154712c781f160978d8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.87.Final?classifier=osx-x86_64&type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.87.Final?classifier=osx-x86_64&type=jar"
    },
    {
      "publisher" : "AddThis",
      "group" : "com.clearspring.analytics",
      "name" : "stream",
      "version" : "2.9.6",
      "description" : "A library for summarizing data in streams for which it is infeasible to store all events",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "298278ea2ea29ce1da1a956dd6fad4d4"
        },
        {
          "alg" : "SHA-1",
          "content" : "f9c235bdf6681756b8d4b5429f6e7217597c37ef"
        },
        {
          "alg" : "SHA-256",
          "content" : "d61aebbea8a08148c3aca6b03464495a4bbf9d362205d54ea5f6b443af73afdf"
        },
        {
          "alg" : "SHA-512",
          "content" : "cc9bb80ee82576c035827a3b41f4cee0852b37c80374619c4ddba349be1d4387ad657130caabafab28d50c4869e44c1d3eb852c6370c583ca42a03ee88799406"
        },
        {
          "alg" : "SHA-384",
          "content" : "b40935d7d5d780b7fd5306759c7aeaf2f1477beefa3626e7a0324305f5ab2efcb7656788767baf4f631f00f198c17873"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.clearspring.analytics/stream@2.9.6?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/addthis/stream-lib"
        },
        {
          "type" : "website",
          "url" : "http://www.addthis.com"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.clearspring.analytics/stream@2.9.6?type=jar"
    },
    {
      "group" : "io.dropwizard.metrics",
      "name" : "metrics-core",
      "version" : "4.2.15",
      "description" : "Metrics is a Java library which gives you unparalleled insight into what your code does in production. Metrics provides a powerful toolkit of ways to measure the behavior of critical components in your production environment.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6a000703a6700e51eb4369442a385864"
        },
        {
          "alg" : "SHA-1",
          "content" : "a3ee63ed254f9a6977e2751ffcc0f158c2c1f5e3"
        },
        {
          "alg" : "SHA-256",
          "content" : "d6da099ba1b38378eaf01490623fa570d6be1b6ddd52f1368120de67416d21fc"
        },
        {
          "alg" : "SHA-512",
          "content" : "79c29c4cd9bc7b0a8a1991cd33873652627f4dd922ee7c5007baaa4ddceb5163356a51c39fcf78b314ff34af11073d7cdfe7f83ad8651f2d400fcac33df011ee"
        },
        {
          "alg" : "SHA-384",
          "content" : "76f15cd6994d47f6a6b1e14d46198e096a5446846d3286e4ac7c59b4d74cdd8ddde52a3108f16ceee8649df2da151889"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.dropwizard.metrics/metrics-core@4.2.15?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/dropwizard/metrics/issues/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/dropwizard/metrics/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.dropwizard.metrics/metrics-core@4.2.15?type=jar"
    },
    {
      "group" : "io.dropwizard.metrics",
      "name" : "metrics-jvm",
      "version" : "4.2.15",
      "description" : "A set of classes which allow you to monitor critical aspects of your Java Virtual Machine using Metrics.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "dd958c01bb29cf2b570499263d6b40e7"
        },
        {
          "alg" : "SHA-1",
          "content" : "f3f51669eaae87cc8d95ec806f818b7a6f8dc390"
        },
        {
          "alg" : "SHA-256",
          "content" : "6762a50ae063cd3954922673b83e03403449e87e095ae0251e23284c35dc95e8"
        },
        {
          "alg" : "SHA-512",
          "content" : "fb191b294b54bff4b854ce0c3e0c562f582cfe74e57b6e8b9c809f16f284f2b013dbb4d64d83c25e5d0692128e84b9c026b5e23d89417e1f042fbf93d578734d"
        },
        {
          "alg" : "SHA-384",
          "content" : "b164f70d01da7c6bce8d02017705b7e50122bb9dad82328afa71558e65e98a3c744c8bca85944717c1e96359c03bc8de"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.dropwizard.metrics/metrics-jvm@4.2.15?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/dropwizard/metrics/issues/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/dropwizard/metrics/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.dropwizard.metrics/metrics-jvm@4.2.15?type=jar"
    },
    {
      "group" : "io.dropwizard.metrics",
      "name" : "metrics-json",
      "version" : "4.2.15",
      "description" : "A set of Jackson modules which provide serializers for most Metrics classes.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "69768dd6379e62e39f547e30f8c9b66b"
        },
        {
          "alg" : "SHA-1",
          "content" : "0e27a423a660c13b8a71370c78c80326d3a1acc9"
        },
        {
          "alg" : "SHA-256",
          "content" : "a5c413825d743ae3f421950f640c26890dfcaf156796a3acf637368082653133"
        },
        {
          "alg" : "SHA-512",
          "content" : "2086b88a1121dd473418b17c4ef90187916b5dd255c90133b32f0ed08e1b0112a03054de743b604f7c2783b704171eba35a291de4ad3a7948db62b41a00e3fe0"
        },
        {
          "alg" : "SHA-384",
          "content" : "09cf51576cb51c920b9388d927d3fb599833cd389510b68419155d16f157cbfa534c90353814ae6f4c522db1079183ed"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.dropwizard.metrics/metrics-json@4.2.15?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/dropwizard/metrics/issues/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/dropwizard/metrics/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.dropwizard.metrics/metrics-json@4.2.15?type=jar"
    },
    {
      "group" : "io.dropwizard.metrics",
      "name" : "metrics-graphite",
      "version" : "4.2.15",
      "description" : "A reporter for Metrics which announces measurements to a Graphite server.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "48719bcb814f1e5aaa0b9a9fff5fde91"
        },
        {
          "alg" : "SHA-1",
          "content" : "05b4ed80b3cf371bd83fec91372942306c040777"
        },
        {
          "alg" : "SHA-256",
          "content" : "e96e57afdf999907ce8f9a513c426d529b42285f3c4d098e6e165b8a75f80ed2"
        },
        {
          "alg" : "SHA-512",
          "content" : "2681aab88e1ed22b76155f4dd3d703c71c6d2a9b683ebf6164394d35084225e2f44148b634dbf008b398ccf9c15aaff5eee816e4dc24d714da08ee27279d024d"
        },
        {
          "alg" : "SHA-384",
          "content" : "6a6a4822114d4090342f679f6a283fadd7b739e29e78c03aab43d15f69b31b7ecdd7967d74f0ae0d1c1b575666b42f5f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.dropwizard.metrics/metrics-graphite@4.2.15?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/dropwizard/metrics/issues/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/dropwizard/metrics/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.dropwizard.metrics/metrics-graphite@4.2.15?type=jar"
    },
    {
      "group" : "io.dropwizard.metrics",
      "name" : "metrics-jmx",
      "version" : "4.2.15",
      "description" : "A set of classes which allow you to report metrics via JMX.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1f6f7930b5941ab20fff92e7d834648c"
        },
        {
          "alg" : "SHA-1",
          "content" : "ddbdf83a5510dbdf67a14bfdb8a92fd742078841"
        },
        {
          "alg" : "SHA-256",
          "content" : "6d86428d884560bcf4a9c14bf1c0066fe10ec0ff1abe63caa4b7a16b92ff77fc"
        },
        {
          "alg" : "SHA-512",
          "content" : "13a1fc8f0ed37fef9043fe9e5e9a40d68e2e75455abf496c3cbebf631a8f6eb46b40d84fc403b2048785a0f960a0b42d2baecdec452c190d929225adee4921e7"
        },
        {
          "alg" : "SHA-384",
          "content" : "fafc78fc29c7b4c43a99eed001a2ff22ceadcb22903280ed823ca5176bca31186c09ef95fecb5f26b4dd588079a7e702"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.dropwizard.metrics/metrics-jmx@4.2.15?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/dropwizard/metrics/issues/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/dropwizard/metrics/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.dropwizard.metrics/metrics-jmx@4.2.15?type=jar"
    },
    {
      "publisher" : "com.fasterxml.jackson.module",
      "group" : "com.fasterxml.jackson.module",
      "name" : "jackson-module-scala_2.12",
      "version" : "2.14.2",
      "description" : "jackson-module-scala",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0235403baa54a12581f9f3b10ce4d90b"
        },
        {
          "alg" : "SHA-1",
          "content" : "cbf3cc89a6568f47cd9579683943afc03aec1682"
        },
        {
          "alg" : "SHA-256",
          "content" : "995f3af49b441e039d96daa52469bd444a51e53be09a5dcdcb090a044e3cd3f3"
        },
        {
          "alg" : "SHA-512",
          "content" : "88dd3ed75d4703db68fafbfe4aa092e90079cbb63d5f70d938115c2a3b14c07fe38029b11ae2bc1da00bcf67db7db9bb0611b147af941e415c9eb139752d7618"
        },
        {
          "alg" : "SHA-384",
          "content" : "303fe0886dd55b3ebb0e25f442a4b1cdd90aa41065789132969bb3fbf68f043497915551698ca6777a90bad2fcce0007"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.module/jackson-module-scala_2.12@2.14.2?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-module-scala"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.module/jackson-module-scala_2.12@2.14.2?type=jar"
    },
    {
      "group" : "com.thoughtworks.paranamer",
      "name" : "paranamer",
      "version" : "2.8",
      "description" : "Paranamer allows runtime access to constructor and method parameter names for Java classes",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f213c72b67d4850f17a4a3e9064904de"
        },
        {
          "alg" : "SHA-1",
          "content" : "619eba74c19ccf1da8ebec97a2d7f8ba05773dd6"
        },
        {
          "alg" : "SHA-256",
          "content" : "688cb118a6021d819138e855208c956031688be4b47a24bb615becc63acedf07"
        },
        {
          "alg" : "SHA-512",
          "content" : "d774b05135d34bc42d8a7bee6466715bc44837b95bbe618faa8680978c4348652292ea6dd8eeb88dc7fa859bfe685f4d8329032cbf4fce2ea7e555ba3243cc14"
        },
        {
          "alg" : "SHA-384",
          "content" : "699148a3f69ae205aa47c82e2cb78d3949afc71b090935579a0363fee8675eec3ba05e0d3127295213b39aad3485690b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-4-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.thoughtworks.paranamer/paranamer@2.8?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/paul-hammant/paranamer"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.thoughtworks.paranamer/paranamer@2.8?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.ivy",
      "name" : "ivy",
      "version" : "2.5.1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e2b8480e296278e41b68020a444c6ae1"
        },
        {
          "alg" : "SHA-1",
          "content" : "7fac35f24f89776e7b78ec98658d8bc8f22f7e89"
        },
        {
          "alg" : "SHA-256",
          "content" : "793120f8c9058aede475b093651aa5307603c1518180772c104562a0ed2e9feb"
        },
        {
          "alg" : "SHA-512",
          "content" : "9d63b3d5ef750e08f802a1d2f5a8d855ca30bad39fd58bc48db3d7bcfb7ecfd91a61965135755da81c8267d050d1a9addf4dd46eb28a3bfda467d691274e016a"
        },
        {
          "alg" : "SHA-384",
          "content" : "049d433f5ba75371f0376bf9f465e1bfb111458df469d8f0313113b175a1f13d3650f064cbe8ee3c3bef4ac84831caa0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.ivy/ivy@2.5.1?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/IVY"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/ant-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://svn.apache.org/repos/asf/ant/ivy/core/trunk"
        },
        {
          "type" : "website",
          "url" : "http://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.ivy/ivy@2.5.1?type=jar"
    },
    {
      "group" : "oro",
      "name" : "oro",
      "version" : "2.0.8",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "42e940d5d2d822f4dc04c65053e630ab"
        },
        {
          "alg" : "SHA-1",
          "content" : "5592374f834645c4ae250f4c9fbb314c9369d698"
        },
        {
          "alg" : "SHA-256",
          "content" : "e00ccdad5df7eb43fdee44232ef64602bf63807c2d133a7be83ba09fd49af26e"
        },
        {
          "alg" : "SHA-512",
          "content" : "9a98e493c4d771322b1331ec05ab0e363a83d8ac2af8018d96a44df2bf5bfc97d33ebe6f6f93e46ab10bf1536f0c29e9d9569318ed49bc18b4e96b1a8b476d37"
        },
        {
          "alg" : "SHA-384",
          "content" : "f542e92b7a86bcb20cc21f0c4b29778428944391344ca11df432f9ce36a96ce8e8f65da67e450e52c0e8ba441d2a7332"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/oro/oro@2.0.8?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/oro/oro@2.0.8?type=jar"
    },
    {
      "group" : "net.razorvine",
      "name" : "pickle",
      "version" : "1.3",
      "description" : "A feature complete pickle protocol implementation (Python's builtin serialization mechanism)",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b043c671d86e43a0a11cc02e815616e9"
        },
        {
          "alg" : "SHA-1",
          "content" : "43eab5f4a8d0a06a38a6c349dec32bd08454c176"
        },
        {
          "alg" : "SHA-256",
          "content" : "259aca378cbcee48797d047169e573666640312a188e2428a03cb19b0fbc7664"
        },
        {
          "alg" : "SHA-512",
          "content" : "8199f376fcd39e0437a6a4fd7a853bd2edf1805bdd43b185dab8f5b97eda3a657a757bf61bad8474379c60b1074f38c4ed03ed2541e77408d08531036f725485"
        },
        {
          "alg" : "SHA-384",
          "content" : "a6ac01883fb7c170210d9b9b241a9544e168ede941618517ca468a499747ed044b3e792904c5b45ef77e48a69b19b017"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/net.razorvine/pickle@1.3?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/irmen/pickle/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/irmen/pickle"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.razorvine/pickle@1.3?type=jar"
    },
    {
      "group" : "net.sf.py4j",
      "name" : "py4j",
      "version" : "0.10.9.7",
      "description" : "Py4J enables Python programs running in a Python interpreter to dynamically access Java objects in a Java Virtual Machine. Methods are called as if the Java objects resided in the Python interpreter and Java collections can be accessed through standard Python collection methods. Py4J also enables Java programs to call back Python objects.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7afcbc30fa3c00d5febfbc522235f2a5"
        },
        {
          "alg" : "SHA-1",
          "content" : "e444374109f6f3ffdfdbd4e7dc5a89122b0c9134"
        },
        {
          "alg" : "SHA-256",
          "content" : "4d67d584e7b0f456deedffbd3f43047efd6748ff3d13b443abb61ec54cf7af13"
        },
        {
          "alg" : "SHA-512",
          "content" : "8e3bb548cea719e4ab0d3d559f1cdb8401c74606036c93f93b6519942994432786a800ce57b6d04fd090dfdea0359cf78e4d899021c5559f4f2f558fb09dc1be"
        },
        {
          "alg" : "SHA-384",
          "content" : "b7d117caa8c2269807f1ad4335fab2f9f6d99b93ee68ec548f3ff3d520f8d11ce8ecb2c2798f8fd86fb19606be60187f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/net.sf.py4j/py4j@0.10.9.7?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.sonatype.org/spice/tags/oss-parent-7"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sf.py4j/py4j@0.10.9.7?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-crypto",
      "version" : "1.1.0",
      "description" : "Apache Commons Crypto is a cryptographic library optimized with AES-NI (Advanced Encryption Standard New Instructions). It provides Java API for both cipher level and Java stream level. Developers can use it to implement high performance AES encryption/decryption with the minimum code and effort. Please note that Crypto doesn't implement the cryptographic algorithm such as AES directly. It wraps to Openssl or JCE which implement the algorithms. Features -------- 1. Cipher API for low level cryptographic operations. 2. Java stream API (CryptoInputStream/CryptoOutputStream) for high level stream encryption/decryption. 3. Both optimized with high performance AES encryption/decryption. (1400 MB/s - 1700 MB/s throughput in modern Xeon processors). 4. JNI-based implementation to achieve comparable performance to the native C/C++ version based on OpenSsl. 5. Portable across various operating systems (currently only Linux/MacOSX/Windows); Apache Commons Crypto loads the library according to your machine environment (it checks system properties, `os.name` and `os.arch`). 6. Simple usage. Add the commons-crypto-(version).jar file to your classpath. Export restrictions ------------------- This distribution includes cryptographic software. The country in which you currently reside may have restrictions on the import, possession, use, and/or re-export to another country, of encryption software. BEFORE using any encryption software, please check your country's laws, regulations and policies concerning the import, possession, or use, and re-export of encryption software, to see if this is permitted. See <http://www.wassenaar.org/> for more information. The U.S. Government Department of Commerce, Bureau of Industry and Security (BIS), has classified this software as Export Commodity Control Number (ECCN) 5D002.C.1, which includes information security software using or performing cryptographic functions with asymmetric algorithms. The form and manner of this Apache Software Foundation distribution makes it eligible for export under the License Exception ENC Technology Software Unrestricted (TSU) exception (see the BIS Export Administration Regulations, Section 740.13) for both object code and source code. The following provides more details on the included cryptographic software: * Commons Crypto use [Java Cryptography Extension](http://docs.oracle.com/javase/8/docs/technotes/guides/security/crypto/CryptoSpec.html) provided by Java * Commons Crypto link to and use [OpenSSL](https://www.openssl.org/) ciphers",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c71451f3c4737ba6d84f9bd9e8f2400d"
        },
        {
          "alg" : "SHA-1",
          "content" : "4a8b4caa84032a0f1f1dad16875820a4f37524b7"
        },
        {
          "alg" : "SHA-256",
          "content" : "44dc28551cdba731658090d9b10d2eead9839c269d70cdcd7d56c0423df5227f"
        },
        {
          "alg" : "SHA-512",
          "content" : "62acf1d90ad667c8f3f9b267c6f4fefa57eb914ef57a24e10a7dc6ea7bf1f2a6933db831f836dc2ca0fe86aff84a6d1a0fb3c8bb34c7c24e3e1190778efb241d"
        },
        {
          "alg" : "SHA-384",
          "content" : "0d7c20964ab9cbde60d3d03ca92b481e30f969b30adc336b77ec8b8dcb660e327bfff8c98cb9c30163e7bdf5ffbae486"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-crypto@1.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/search/?q=Commons-CRYPTO"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CRYPTO"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-crypto.git"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-crypto@1.1.0?type=jar"
    },
    {
      "publisher" : "org.scala-lang.modules",
      "group" : "org.scala-lang.modules",
      "name" : "scala-parser-combinators_2.12",
      "version" : "2.1.1",
      "description" : "scala-parser-combinators",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bd9b98a43575e38a48e8a41161b1242b"
        },
        {
          "alg" : "SHA-1",
          "content" : "c35c234a906ac014cc4889e7377418752a6f5b49"
        },
        {
          "alg" : "SHA-256",
          "content" : "7a5186fc9fc93cb03ae1dd96d9be22257421a5e0389c81cae45cdce8ba88a9b0"
        },
        {
          "alg" : "SHA-512",
          "content" : "5038c9e5125b7a6fd7a7208d143a05e5ef76ab5fcef32f612f875affdf422033352d747a48c3d663e91ddd447c08166e77cfd3b0d5eb733f735330acf1597476"
        },
        {
          "alg" : "SHA-384",
          "content" : "b3ebade4a5adbf5a8a824a68bff07d1e70aa642d813e43886ee59763f076042999762aa8887d70bd0ae810be7125d044"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.scala-lang.modules/scala-parser-combinators_2.12@2.1.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.scala-lang.org/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/scala/scala-parser-combinators/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/scala/scala-parser-combinators"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.scala-lang.modules/scala-parser-combinators_2.12@2.1.1?type=jar"
    },
    {
      "group" : "org.codehaus.janino",
      "name" : "janino",
      "version" : "3.1.9",
      "description" : "The \"JANINO\" implementation of the \"commons-compiler\" API: Super-small, super-fast, independent from the JDK's \"tools.jar\".",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "597cbcd4d0b8273552758c50bf423926"
        },
        {
          "alg" : "SHA-1",
          "content" : "536fb0c44627faae32ca7a8a24734f4aab38c878"
        },
        {
          "alg" : "SHA-256",
          "content" : "7df88d90aa165ab48bdebea425fa009eeef04918c82e98cdbea5e747e114508d"
        },
        {
          "alg" : "SHA-512",
          "content" : "840dba1621f06322d6ede76c941665e4e119f26ca1b7cb1a510a2bd9d692d3a5d75ac79477055824c2af37958e1c330daf6e1fbb9fd5bbba82db3a3f6077ff11"
        },
        {
          "alg" : "SHA-384",
          "content" : "85599d163bfe4c2d66e526d549c5bd26bc4137c4bb80099130782e42cfb9d5a55d34b11d98877cf11436536d3f1f9aa3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.janino/janino@3.1.9?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/janino-compiler/janino"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.janino/janino@3.1.9?type=jar"
    },
    {
      "group" : "org.codehaus.janino",
      "name" : "commons-compiler",
      "version" : "3.1.9",
      "description" : "The \"commons-compiler\" API, including the \"IExpressionEvaluator\", \"IScriptEvaluator\", \"IClassBodyEvaluator\" and \"ISimpleCompiler\" interfaces.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e14b760178e0c2105e2951c2f452a1d1"
        },
        {
          "alg" : "SHA-1",
          "content" : "f0d70bb319e9339aea90a8665693e69848acc598"
        },
        {
          "alg" : "SHA-256",
          "content" : "d988a3ebc17188e9a1a3efadd8e958b90eb995c4fcc077292a5dfe5fe1109d25"
        },
        {
          "alg" : "SHA-512",
          "content" : "0d290612b69ddece1c58ae0a60c6a544893800f588a424afb7bc12215a9e3bfe775ff6bac749f16c7b4e32e186ad29bceb80112df4082f16ce1f749685135e80"
        },
        {
          "alg" : "SHA-384",
          "content" : "ab1394175f2509bcdc5aa1c76294ba146ba09bae259401932f08bb9b5debd11049d2c751e503e4255d4efd4a4f199107"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.janino/commons-compiler@3.1.9?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/janino-compiler/janino"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.janino/commons-compiler@3.1.9?type=jar"
    },
    {
      "publisher" : "ANTLR",
      "group" : "org.antlr",
      "name" : "antlr4-runtime",
      "version" : "4.9.3",
      "description" : "The ANTLR 4 Runtime",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "718f199bafa6574ffa1111fa3e10276a"
        },
        {
          "alg" : "SHA-1",
          "content" : "81befc16ebedb8b8aea3e4c0835dd5ca7e8523a8"
        },
        {
          "alg" : "SHA-256",
          "content" : "131a6594969bc4f321d652ea2a33bc0e378ca312685ef87791b2c60b29d01ea5"
        },
        {
          "alg" : "SHA-512",
          "content" : "2c3763a8fbc7af110df5d6bb57692759b23e8bf961a53694c69bde4cd9d8c3a8eaa55cf376ce34c6c4e2035a99d7abf08c6ffa3b75d18a6d93a9c1ca95927ea8"
        },
        {
          "alg" : "SHA-384",
          "content" : "62a62dab4a27733a810b97fe5544eb1b5b25d2df83ea8d93802cb0e6fd1b4b3ca5a130c51aa9198deefc30cd0f062841"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-4-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.antlr.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/antlr/antlr4/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/?fromgroups#!forum/antlr-discussion"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/antlr/antlr4/tree/master"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.arrow",
      "name" : "arrow-vector",
      "version" : "11.0.0",
      "description" : "An off-heap reference implementation for Arrow columnar data format.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "507791ac52f0e09f8f5b618403b0a113"
        },
        {
          "alg" : "SHA-1",
          "content" : "86cfffdf0e7185058cb1302aa0db4565300caa46"
        },
        {
          "alg" : "SHA-256",
          "content" : "87f624dd0e46cc92d584783f0d6b0e346b93be850791bcd9ab129aa31f633800"
        },
        {
          "alg" : "SHA-512",
          "content" : "56683dbcf6c779f7fe5450705d3332c719f4b83b75bd18d172997de067a7e2803753e1699e5162fcc78f717f2b1d3bf87e8ac4800706c52cbd2446d6b5d70950"
        },
        {
          "alg" : "SHA-384",
          "content" : "56d0e743908e79716b4d5fd304612f78b19b11d17fa6cc1baa3c0416467060839fe0824c5453e45c96488060fc166f72"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.arrow/arrow-vector@11.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/arrow"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/arrow-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/arrow"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.arrow/arrow-vector@11.0.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.arrow",
      "name" : "arrow-format",
      "version" : "11.0.0",
      "description" : "Generated Java files from the IPC Flatbuffer definitions.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "146fc190a2211dd88672f3166d4977a1"
        },
        {
          "alg" : "SHA-1",
          "content" : "370e76ffad508246e98a09a09fcabe96f42014ab"
        },
        {
          "alg" : "SHA-256",
          "content" : "225430bb2622fb63fb821ced6e223c0425aa1c0d38eb6079006f82c54b89de72"
        },
        {
          "alg" : "SHA-512",
          "content" : "b40f67d404692eb71a4f8a5e5ed260ade9649659b7169ed4d515a249c3f876b24dfbab693b7177d791b88ff660a08723e64c7493ceef44c06dc037ee25249096"
        },
        {
          "alg" : "SHA-384",
          "content" : "e2add6c654a8f13cca40997dd152cb208e03905d853dc99785e421205f52f164c0db58271eec9c184da15a4bcf8d5d11"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.arrow/arrow-format@11.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/arrow"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/arrow-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/arrow"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.arrow/arrow-format@11.0.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.arrow",
      "name" : "arrow-memory-core",
      "version" : "11.0.0",
      "description" : "Core off-heap memory management libraries for Arrow ValueVectors.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "67f0c0b5ea51a6a60e82fe8967bb14bf"
        },
        {
          "alg" : "SHA-1",
          "content" : "e8a11b92d5d79af8bfa8a81a00c97b1c46ce915d"
        },
        {
          "alg" : "SHA-256",
          "content" : "75d902571f5cb130a26836ac04c073cea2070da08e6df58e7e05171912fa4764"
        },
        {
          "alg" : "SHA-512",
          "content" : "0cc8d7d7e6f805efe86312a04147251d208d0fb109359ac7693395d6c3c95604fabba3b1d5f014b3da96a146743bf148a47530b84d7ace7be1982963c82ce674"
        },
        {
          "alg" : "SHA-384",
          "content" : "cc082f1c57bc4cef29cf99f86c777386d2e04a4804ce40a237d9659f6070be154d94147eb64dde0191fd397b64e30982"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.arrow/arrow-memory-core@11.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/arrow"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/arrow-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/arrow"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.arrow/arrow-memory-core@11.0.0?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.datatype",
      "name" : "jackson-datatype-jsr310",
      "version" : "2.14.2",
      "description" : "Add-on module to support JSR-310 (Java 8 Date & Time API) data types.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1d3433114ab756cc902462b04bc37501"
        },
        {
          "alg" : "SHA-1",
          "content" : "796518148a385b2728d44886cc0f8852eb8eeb53"
        },
        {
          "alg" : "SHA-256",
          "content" : "75651b65733ed94e4e28e4ba0817218d93e71e8a7f06f6ab3662752974d2bcae"
        },
        {
          "alg" : "SHA-512",
          "content" : "5ea76e302154fdde769622a6891c45cb56ea06277c25cd36b1cc52cbffbeb59e7b4a25d824d2e33d1473c7ba1044ce2141573564457f649ab2a59e6b1086d17e"
        },
        {
          "alg" : "SHA-384",
          "content" : "a3d778f5d3f6338df0d702c2274bb1c7ff5d2dedc4f1006bef21494e12d9524f6f6305ff24b8df4593d271ad0d0f693f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.14.2?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-modules-java8/issues"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/jackson-modules-java8"
        },
        {
          "type" : "website",
          "url" : "http://fasterxml.com/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.14.2?type=jar"
    },
    {
      "group" : "com.google.flatbuffers",
      "name" : "flatbuffers-java",
      "version" : "1.12.0",
      "description" : "Memory Efficient Serialization Library",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "26ecc1a330e441f909226a338d4bef65"
        },
        {
          "alg" : "SHA-1",
          "content" : "8201cc7b511177a37071249e891f2f2fea4b32e9"
        },
        {
          "alg" : "SHA-256",
          "content" : "3f8c088b4dd04a9858721f2e162508c94db0dd86f961e306ee63ef2eda871bf7"
        },
        {
          "alg" : "SHA-512",
          "content" : "20750e91441c074ca28f72b0b6494e8f0bfbc94caff04eb49727efc6b28e453c84732f24acc52cf36b36ba66b57a145d003e87f749c5c4518ddc6f9247b8ab47"
        },
        {
          "alg" : "SHA-384",
          "content" : "7af7d2e03ae71bea1ebac6cc9c2926b9f952c48a124db160ee2327f2f7e6b2e3ba153e5924971788392fc278b0e04ee9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.flatbuffers/flatbuffers-java@1.12.0?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/google/flatbuffers"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.flatbuffers/flatbuffers-java@1.12.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.arrow",
      "name" : "arrow-memory-netty",
      "version" : "11.0.0",
      "description" : "Netty allocator and utils for allocating memory in Arrow",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "028233843faf972ba11321059f8c36f6"
        },
        {
          "alg" : "SHA-1",
          "content" : "4e427a070f21efaffe6009faf6d97b260dbec36b"
        },
        {
          "alg" : "SHA-256",
          "content" : "cf746a464131b27fbc9e9508e6e5179731fd89273e65da06f6ee74a62a4353da"
        },
        {
          "alg" : "SHA-512",
          "content" : "ad8ae314d3ffbf0d90e0885da45d9e57489e9f829a51203525eadcbdc73a12ea839e55b428dc3a35c8bb689a94798136ee2723d3096103b510763eaf50044e81"
        },
        {
          "alg" : "SHA-384",
          "content" : "fe0ee2b07d2628d25259938eb263b70388ac0d5c36612ffadc73fcea7bb81683c6d1bcdffbb5b7e1fa910732567446c6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.arrow/arrow-memory-netty@11.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/arrow"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/arrow-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/arrow"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.arrow/arrow-memory-netty@11.0.0?type=jar"
    },
    {
      "group" : "org.apache.kafka",
      "name" : "kafka-clients",
      "version" : "3.3.2",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bd9db8c2ce6795d4c5d9846d1c3cf631"
        },
        {
          "alg" : "SHA-1",
          "content" : "be7a3c50a4026822671bdfe6b53e3987149f951f"
        },
        {
          "alg" : "SHA-256",
          "content" : "29b9b4f35ebeb810b151c4f7b9b6f24329a9be8e6c4764a6eebac3738bee7288"
        },
        {
          "alg" : "SHA-512",
          "content" : "e50910825f5df2c3b1bb8f8092c7edaf5f962d1d1d8da9085768ae6aaf619632b437c2edb59ead0ac96f6f9eac7a23fa490aebb76b2c7c4012f9c4789841228d"
        },
        {
          "alg" : "SHA-384",
          "content" : "45adc220df8228ff1f2de454919f8732d4c8aef51773289cbf0aa7cefb665bd87c90678b6e0736bc97f1a0f94ba75241"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.kafka/kafka-clients@3.3.2?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.kafka/kafka-clients@3.3.2?type=jar"
    },
    {
      "group" : "com.google.code.findbugs",
      "name" : "jsr305",
      "version" : "3.0.0",
      "description" : "JSR305 Annotations for Findbugs",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "195d5db8981fbec5fa18d5df9fad95ed"
        },
        {
          "alg" : "SHA-1",
          "content" : "5871fb60dc68d67da54a663c3fd636a10a532948"
        },
        {
          "alg" : "SHA-256",
          "content" : "bec0b24dcb23f9670172724826584802b80ae6cbdaba03bdebdef9327b962f6a"
        },
        {
          "alg" : "SHA-512",
          "content" : "399510f759fb48255c6298f3545c9b644372fbc9d7245e80e6b51f49da0ac9275d104092c537ac047d5a1312c7d191dee8d655ca8d760b59ce1452bf4370a6e0"
        },
        {
          "alg" : "SHA-384",
          "content" : "a7fa7a0b69f41518fdb70e847148e17d0909fb657cee127308fb6cd14f913c63c82608aeae3955f10b48d358a8addfee"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://code.google.com/p/findbugs/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-pool2",
      "version" : "2.11.1",
      "description" : "The Apache Commons Object Pooling Library.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2210a041929e7c94485d5402458340b9"
        },
        {
          "alg" : "SHA-1",
          "content" : "8970fd110c965f285ed4c6e40be7630c62db6f68"
        },
        {
          "alg" : "SHA-256",
          "content" : "ea0505ee7515e58b1ac0e686e4d1a5d9f7d808e251a61bc371aa0595b9963f83"
        },
        {
          "alg" : "SHA-512",
          "content" : "7177d8a9e45ae47881ec323150dc7bd3372ce32eff9866029b47a77cb734535d5e987f22e6cb7009104832c3772079fb6322b2919650765b76a4b4aa8eae648e"
        },
        {
          "alg" : "SHA-384",
          "content" : "c77e99c898da417d33b035745e6f827d47f3c9a5f159764d1e31f0f0ee0b0b3569929495013db6c4d84922c78a3325cf"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-pool2@2.11.1?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/POOL"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-pool.git"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-pool2@2.11.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.yetus",
      "name" : "audience-annotations",
      "version" : "0.5.0",
      "description" : "Annotations for defining API boundaries and tools for managing javadocs",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "032788f0841d26b027957fe91f2cd696"
        },
        {
          "alg" : "SHA-1",
          "content" : "55762d3191a8d6610ef46d11e8cb70c7667342a3"
        },
        {
          "alg" : "SHA-256",
          "content" : "c82631f06c75d46bf6524d95f0d6c2e3aef1b3eb4a7b584ca296624ef0d474be"
        },
        {
          "alg" : "SHA-512",
          "content" : "7c05f699ba6d63053d513dfc1bdd893f5a76f9973d2bf366c31a5eb99f9954521cb58db0f7d1274fddf2dd39dacbcde6907d5ffc8afc728c91817d2e99ee2a96"
        },
        {
          "alg" : "SHA-384",
          "content" : "3e2b37e3c3e11a760663b9e4c08c5227d08c3d0924f581284d20afb9361bfb58e4052c255cb5f647b1ae1a2bffc3d10c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.yetus/audience-annotations@0.5.0?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/YETUS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/yetus-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://git-wip-us.apache.org/repos/asf?p=yetus.git"
        },
        {
          "type" : "website",
          "url" : "http://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.yetus/audience-annotations@0.5.0?type=jar"
    },
    {
      "publisher" : "Joe Walnes, Henri Tremblay, Leonardo Mesquita",
      "group" : "org.objenesis",
      "name" : "objenesis",
      "version" : "3.2",
      "description" : "A library for instantiating Java objects",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5c1ee20481a06561af295034ea89c4b4"
        },
        {
          "alg" : "SHA-1",
          "content" : "7fadf57620c8b8abdf7519533e5527367cb51f09"
        },
        {
          "alg" : "SHA-256",
          "content" : "03d960bd5aef03c653eb000413ada15eb77cdd2b8e4448886edf5692805e35f3"
        },
        {
          "alg" : "SHA-512",
          "content" : "13dbec3062b19c5b9920c0b69e842a9648f2a148c57b6977d90deea22b829cdbce4eaff1ae7763f397f6465ccb35b31e097078de507dc6de25cb95ec796045f7"
        },
        {
          "alg" : "SHA-384",
          "content" : "7d70ab00e728b4233e38729f0eb392d14e828e857421ad66fc678cd162cf22d34958993d5c38fd8a0d8355d3859b763e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.objenesis/objenesis@3.2?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/easymock/objenesis"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.objenesis/objenesis@3.2?type=jar"
    },
    {
      "group" : "org.apache.spark",
      "name" : "spark-tags_2.12",
      "version" : "3.4.0",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e455804fae8b8e3fb97cd10780003628"
        },
        {
          "alg" : "SHA-1",
          "content" : "01dbf4f13276256c99c2d430a703ad5738471ecf"
        },
        {
          "alg" : "SHA-256",
          "content" : "09957b7e4b19f62bfa9ef17ebb205be896200525fe2a2e92482e3e63ce082821"
        },
        {
          "alg" : "SHA-512",
          "content" : "7d240a226bc8a589201b7165796b7638927cba87f67590018beda5789ee74643507a4b1009675c4d47cc46f8a4801cff3064828d52681993839fe30ea1ca1ce6"
        },
        {
          "alg" : "SHA-384",
          "content" : "f0dfcd267276dbaa7bb78757908771c060010e5270a68565d38493eb3cc0370ecce0ed3012add1b5d7ae57dc32bafeda"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.apache.spark/spark-tags_2.12@3.4.0?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.spark/spark-tags_2.12@3.4.0?type=jar"
    },
    {
      "group" : "org.spark-project.spark",
      "name" : "unused",
      "version" : "1.0.0",
      "description" : "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "763373ce9fe48581d4f2b8ffca35bb82"
        },
        {
          "alg" : "SHA-1",
          "content" : "205fe37a2fade6ce6dfcf8eff57ed21a4a1c22af"
        },
        {
          "alg" : "SHA-256",
          "content" : "00fd27fc9bde701581e7dcf5b95981d9e749a1c176bb8bfcd49f675768ff6bf0"
        },
        {
          "alg" : "SHA-512",
          "content" : "08a6ac8d2dc9d89ff557c7e96096c76e687efe3ce166aa6dbb76865bbef64dc8b6ecb5561ef03c2451a688ccdb3876b8f16b9137d02c290a698e917a5656b6fa"
        },
        {
          "alg" : "SHA-384",
          "content" : "c8c51d0d851835107db273d7ce522f026587d922c9d1d34739c3dedf9b7737c1c491e961dc7931f46c476d28acbc91f6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.sonatype.org/spice/trunk/oss/oss-parent-9"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.apache.spark/spark-sql-kafka-0-10_2.12@3.4.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.spark/spark-token-provider-kafka-0-10_2.12@3.4.0?type=jar",
        "pkg:maven/org.apache.spark/spark-sql_2.12@3.4.0?type=jar",
        "pkg:maven/org.apache.kafka/kafka-clients@3.3.2?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.0?type=jar",
        "pkg:maven/org.apache.commons/commons-pool2@2.11.1?type=jar",
        "pkg:maven/org.apache.spark/spark-tags_2.12@3.4.0?type=jar",
        "pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.spark/spark-token-provider-kafka-0-10_2.12@3.4.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.kafka/kafka-clients@3.3.2?type=jar",
        "pkg:maven/org.apache.hadoop/hadoop-client-runtime@3.3.4?type=jar",
        "pkg:maven/org.apache.spark/spark-tags_2.12@3.4.0?type=jar",
        "pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.kafka/kafka-clients@3.3.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar",
        "pkg:maven/org.xerial.snappy/snappy-java@1.1.9.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.hadoop/hadoop-client-runtime@3.3.4?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.hadoop/hadoop-client-api@3.3.4?type=jar",
        "pkg:maven/org.xerial.snappy/snappy-java@1.1.9.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.6?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.hadoop/hadoop-client-api@3.3.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.xerial.snappy/snappy-java@1.1.9.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.spark/spark-tags_2.12@3.4.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.scala-lang/scala-library@2.12.17?type=jar",
        "pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.spark/spark-sql_2.12@3.4.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.rocksdb/rocksdbjni@7.9.2?type=jar",
        "pkg:maven/com.univocity/univocity-parsers@2.9.1?type=jar",
        "pkg:maven/org.apache.spark/spark-sketch_2.12@3.4.0?type=jar",
        "pkg:maven/org.apache.spark/spark-core_2.12@3.4.0?type=jar",
        "pkg:maven/org.apache.spark/spark-catalyst_2.12@3.4.0?type=jar",
        "pkg:maven/org.apache.spark/spark-tags_2.12@3.4.0?type=jar",
        "pkg:maven/org.apache.orc/orc-core@1.8.3?classifier=shaded-protobuf&type=jar",
        "pkg:maven/org.apache.orc/orc-mapreduce@1.8.3?classifier=shaded-protobuf&type=jar",
        "pkg:maven/org.apache.hive/hive-storage-api@2.8.1?type=jar",
        "pkg:maven/org.apache.parquet/parquet-column@1.12.3?type=jar",
        "pkg:maven/org.apache.parquet/parquet-hadoop@1.12.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar",
        "pkg:maven/org.apache.xbean/xbean-asm9-shaded@4.22?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@2.5.0?type=jar",
        "pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.rocksdb/rocksdbjni@7.9.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.univocity/univocity-parsers@2.9.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.spark/spark-sketch_2.12@3.4.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.spark/spark-tags_2.12@3.4.0?type=jar",
        "pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.spark/spark-core_2.12@3.4.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.avro/avro@1.11.1?type=jar",
        "pkg:maven/org.apache.avro/avro-mapred@1.11.1?type=jar",
        "pkg:maven/com.twitter/chill_2.12@0.10.0?type=jar",
        "pkg:maven/com.twitter/chill-java@0.10.0?type=jar",
        "pkg:maven/org.apache.xbean/xbean-asm9-shaded@4.22?type=jar",
        "pkg:maven/org.apache.hadoop/hadoop-client-api@3.3.4?type=jar",
        "pkg:maven/org.apache.hadoop/hadoop-client-runtime@3.3.4?type=jar",
        "pkg:maven/org.apache.spark/spark-launcher_2.12@3.4.0?type=jar",
        "pkg:maven/org.apache.spark/spark-kvstore_2.12@3.4.0?type=jar",
        "pkg:maven/org.apache.spark/spark-network-common_2.12@3.4.0?type=jar",
        "pkg:maven/org.apache.spark/spark-network-shuffle_2.12@3.4.0?type=jar",
        "pkg:maven/org.apache.spark/spark-unsafe_2.12@3.4.0?type=jar",
        "pkg:maven/javax.activation/activation@1.1.1?type=jar",
        "pkg:maven/org.apache.curator/curator-recipes@2.13.0?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-plus@9.4.50.v20221201?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-security@9.4.50.v20221201?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-util@9.4.50.v20221201?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-server@9.4.50.v20221201?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-http@9.4.50.v20221201?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-continuation@9.4.50.v20221201?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-proxy@9.4.50.v20221201?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-client@9.4.50.v20221201?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-servlets@9.4.50.v20221201?type=jar",
        "pkg:maven/jakarta.servlet/jakarta.servlet-api@4.0.3?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.22?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
        "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar",
        "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
        "pkg:maven/commons-io/commons-io@2.11.0?type=jar",
        "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
        "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.6?type=jar",
        "pkg:maven/org.slf4j/jul-to-slf4j@2.0.6?type=jar",
        "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.6?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-slf4j2-impl@2.19.0?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.19.0?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-core@2.19.0?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.19.0?type=jar",
        "pkg:maven/com.ning/compress-lzf@1.1.2?type=jar",
        "pkg:maven/org.xerial.snappy/snappy-java@1.1.9.1?type=jar",
        "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar",
        "pkg:maven/com.github.luben/zstd-jni@1.5.2-5?type=jar",
        "pkg:maven/org.roaringbitmap/RoaringBitmap@0.9.38?type=jar",
        "pkg:maven/org.scala-lang.modules/scala-xml_2.12@2.1.0?type=jar",
        "pkg:maven/org.scala-lang/scala-library@2.12.17?type=jar",
        "pkg:maven/org.scala-lang/scala-reflect@2.12.17?type=jar",
        "pkg:maven/org.json4s/json4s-jackson_2.12@3.7.0-M11?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-client@2.36?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-common@2.36?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-server@2.36?type=jar",
        "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@2.36?type=jar",
        "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet-core@2.36?type=jar",
        "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@2.36?type=jar",
        "pkg:maven/io.netty/netty-all@4.1.87.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-native-epoll@4.1.87.Final?classifier=linux-x86_64&type=jar",
        "pkg:maven/io.netty/netty-transport-native-epoll@4.1.87.Final?classifier=linux-aarch_64&type=jar",
        "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.87.Final?classifier=osx-aarch_64&type=jar",
        "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.87.Final?classifier=osx-x86_64&type=jar",
        "pkg:maven/com.clearspring.analytics/stream@2.9.6?type=jar",
        "pkg:maven/io.dropwizard.metrics/metrics-core@4.2.15?type=jar",
        "pkg:maven/io.dropwizard.metrics/metrics-jvm@4.2.15?type=jar",
        "pkg:maven/io.dropwizard.metrics/metrics-json@4.2.15?type=jar",
        "pkg:maven/io.dropwizard.metrics/metrics-graphite@4.2.15?type=jar",
        "pkg:maven/io.dropwizard.metrics/metrics-jmx@4.2.15?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.module/jackson-module-scala_2.12@2.14.2?type=jar",
        "pkg:maven/org.apache.ivy/ivy@2.5.1?type=jar",
        "pkg:maven/oro/oro@2.0.8?type=jar",
        "pkg:maven/net.razorvine/pickle@1.3?type=jar",
        "pkg:maven/net.sf.py4j/py4j@0.10.9.7?type=jar",
        "pkg:maven/org.apache.spark/spark-tags_2.12@3.4.0?type=jar",
        "pkg:maven/org.apache.commons/commons-crypto@1.1.0?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@2.5.0?type=jar",
        "pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.avro/avro@1.11.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.avro/avro-mapred@1.11.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.twitter/chill_2.12@0.10.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.twitter/chill-java@0.10.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.xbean/xbean-asm9-shaded@4.22?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.spark/spark-launcher_2.12@3.4.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.spark/spark-kvstore_2.12@3.4.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.spark/spark-network-common_2.12@3.4.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.spark/spark-network-shuffle_2.12@3.4.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.spark/spark-unsafe_2.12@3.4.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/javax.activation/activation@1.1.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.curator/curator-recipes@2.13.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-plus@9.4.50.v20221201?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-security@9.4.50.v20221201?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-util@9.4.50.v20221201?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-server@9.4.50.v20221201?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-http@9.4.50.v20221201?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-continuation@9.4.50.v20221201?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-proxy@9.4.50.v20221201?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-client@9.4.50.v20221201?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-servlets@9.4.50.v20221201?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/jakarta.servlet/jakarta.servlet-api@4.0.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-compress@1.22?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/jul-to-slf4j@2.0.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-slf4j2-impl@2.19.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.19.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.19.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.19.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.ning/compress-lzf@1.1.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.github.luben/zstd-jni@1.5.2-5?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.roaringbitmap/RoaringBitmap@0.9.38?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.scala-lang.modules/scala-xml_2.12@2.1.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.scala-lang/scala-library@2.12.17?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.scala-lang/scala-reflect@2.12.17?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.json4s/json4s-jackson_2.12@3.7.0-M11?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.jersey.core/jersey-client@2.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.jersey.core/jersey-common@2.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.jersey.core/jersey-server@2.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@2.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet-core@2.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@2.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-all@4.1.87.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-transport-native-epoll@4.1.87.Final?classifier=linux-x86_64&type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-transport-native-epoll@4.1.87.Final?classifier=linux-aarch_64&type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.87.Final?classifier=osx-aarch_64&type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-transport-native-kqueue@4.1.87.Final?classifier=osx-x86_64&type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.clearspring.analytics/stream@2.9.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.dropwizard.metrics/metrics-core@4.2.15?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.dropwizard.metrics/metrics-jvm@4.2.15?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.dropwizard.metrics/metrics-json@4.2.15?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.dropwizard.metrics/metrics-graphite@4.2.15?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.dropwizard.metrics/metrics-jmx@4.2.15?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.module/jackson-module-scala_2.12@2.14.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.ivy/ivy@2.5.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/oro/oro@2.0.8?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/net.razorvine/pickle@1.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/net.sf.py4j/py4j@0.10.9.7?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-crypto@1.1.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.protobuf/protobuf-java@2.5.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.spark/spark-catalyst_2.12@3.4.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.scala-lang/scala-reflect@2.12.17?type=jar",
        "pkg:maven/org.scala-lang.modules/scala-parser-combinators_2.12@2.1.1?type=jar",
        "pkg:maven/org.apache.spark/spark-core_2.12@3.4.0?type=jar",
        "pkg:maven/org.apache.spark/spark-tags_2.12@3.4.0?type=jar",
        "pkg:maven/org.apache.spark/spark-unsafe_2.12@3.4.0?type=jar",
        "pkg:maven/org.apache.spark/spark-sketch_2.12@3.4.0?type=jar",
        "pkg:maven/org.codehaus.janino/janino@3.1.9?type=jar",
        "pkg:maven/org.codehaus.janino/commons-compiler@3.1.9?type=jar",
        "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
        "pkg:maven/com.univocity/univocity-parsers@2.9.1?type=jar",
        "pkg:maven/org.apache.arrow/arrow-vector@11.0.0?type=jar",
        "pkg:maven/org.apache.arrow/arrow-memory-netty@11.0.0?type=jar",
        "pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.scala-lang.modules/scala-parser-combinators_2.12@2.1.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.janino/janino@3.1.9?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.janino/commons-compiler@3.1.9?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.arrow/arrow-vector@11.0.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.arrow/arrow-memory-netty@11.0.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.orc/orc-core@1.8.3?classifier=shaded-protobuf&type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.orc/orc-shims@1.8.3?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@2.5.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
        "pkg:maven/io.airlift/aircompressor@0.21?type=jar",
        "pkg:maven/org.jetbrains/annotations@17.0.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.6?type=jar",
        "pkg:maven/org.threeten/threeten-extra@1.7.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.orc/orc-shims@1.8.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@2.0.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.airlift/aircompressor@0.21?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.jetbrains/annotations@17.0.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.threeten/threeten-extra@1.7.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.orc/orc-mapreduce@1.8.3?classifier=shaded-protobuf&type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.hive/hive-storage-api@2.8.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@2.0.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.parquet/parquet-column@1.12.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.parquet/parquet-common@1.12.3?type=jar",
        "pkg:maven/org.apache.parquet/parquet-encoding@1.12.3?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.parquet/parquet-common@1.12.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.parquet/parquet-format-structures@1.12.3?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.parquet/parquet-format-structures@1.12.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.parquet/parquet-encoding@1.12.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.parquet/parquet-common@1.12.3?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.parquet/parquet-hadoop@1.12.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.parquet/parquet-column@1.12.3?type=jar",
        "pkg:maven/org.apache.parquet/parquet-format-structures@1.12.3?type=jar",
        "pkg:maven/org.apache.parquet/parquet-common@1.12.3?type=jar",
        "pkg:maven/org.apache.parquet/parquet-jackson@1.12.3?type=jar",
        "pkg:maven/org.xerial.snappy/snappy-java@1.1.9.1?type=jar",
        "pkg:maven/com.github.luben/zstd-jni@1.5.2-5?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.parquet/parquet-jackson@1.12.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-pool2@2.11.1?type=jar",
      "dependsOn" : [ ]
    }
  ]
}