{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.4",
  "serialNumber" : "urn:uuid:694fad0b-ff53-368c-9e38-8ccd19540f02",
  "version" : 1,
  "metadata" : {
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.7.11",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "a70e8b649ab4a2bb7922d360173c8237"
          },
          {
            "alg" : "SHA-1",
            "content" : "4c3c0878c15561639076e5be7a48ffcd6111c5ee"
          },
          {
            "alg" : "SHA-256",
            "content" : "70997d52dbffd4e797c467b2062c6ba9b8b5a7380ff2884779f2743b6172ebb5"
          },
          {
            "alg" : "SHA-512",
            "content" : "bc1ce91190c642f68fd3571939d7668def3b879ec8e5a87a213a9710a106e0290f60f9e0414593d19cca958c4fcb5d4450bd2793bcd609948419c8a2a6a7f5c8"
          },
          {
            "alg" : "SHA-384",
            "content" : "3c8421bdafd1754fb424f16dccc83bfe0827648c1cadfffc98bdf1c7da65475dfe48d2f4b16d233bb8819e155ba6a4f3"
          },
          {
            "alg" : "SHA3-384",
            "content" : "ad88cf6a0e0a5d51df49a4dab5530a28de9df7eec8460c045dff3e1f9316b82a244a125d52b937fe9d4ee72e44f5d01a"
          },
          {
            "alg" : "SHA3-256",
            "content" : "b4d9c3ef07c34517fd9f33178ba95ffc9618eb84a3671e71b0c82991ec3717e5"
          },
          {
            "alg" : "SHA3-512",
            "content" : "935b43aba8999dc7d95d93288a251c97b6b32852841b7bef31516c27c8d65c8de7f8411f1829f765ee760f25930c766db6a49df68e5994e18721c0a71f606f1e"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "PMD",
      "group" : "net.sourceforge.pmd",
      "name" : "pmd-python",
      "version" : "7.0.0",
      "description" : "PMD is a source code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It supports many languages. It can be extended with custom rules. It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations. Rules can be written in Java or using a XPath query. It supports Java, JavaScript, Salesforce.com Apex and Visualforce, Kotlin, Swift, Modelica, PLSQL, Apache Velocity, JSP, WSDL, HTML, XML and XSL. Scala is supported, but there are currently no Scala rules available. Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in Coco, C/C++, C#, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica, Objective-C, Perl, PHP, PLSQL, Python, Ruby, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript and XML.",
      "licenses" : [
        {
          "license" : {
            "name" : "BSD-style",
            "url" : "http://pmd.sourceforge.net/license.html"
          }
        }
      ],
      "purl" : "pkg:maven/net.sourceforge.pmd/pmd-python@7.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://pmd.github.io/pmd-python/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/pmd/pmd/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/pmd/pmd/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://sourceforge.net/p/pmd/mailman/pmd-devel"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/pmd/pmd/pmd-python"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sourceforge.pmd/pmd-python@7.0.0?type=jar"
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      },
      {
        "name" : "cdx:reproducible",
        "value" : "enabled"
      }
    ]
  },
  "components" : [
    {
      "publisher" : "PMD",
      "group" : "net.sourceforge.pmd",
      "name" : "pmd-core",
      "version" : "7.0.0",
      "description" : "PMD is a source code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It supports many languages. It can be extended with custom rules. It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations. Rules can be written in Java or using a XPath query. It supports Java, JavaScript, Salesforce.com Apex and Visualforce, Kotlin, Swift, Modelica, PLSQL, Apache Velocity, JSP, WSDL, HTML, XML and XSL. Scala is supported, but there are currently no Scala rules available. Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in Coco, C/C++, C#, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica, Objective-C, Perl, PHP, PLSQL, Python, Ruby, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript and XML.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "05063e2355def85113a9d13b6ec1ebf4"
        },
        {
          "alg" : "SHA-1",
          "content" : "8e59841d1e4e0f726a867cdbcf62275800023ea0"
        },
        {
          "alg" : "SHA-256",
          "content" : "e0494e065e7c0693d5256c0e0ddc5cc774ec68fc51ed59ec5f52131abcb387f5"
        },
        {
          "alg" : "SHA-512",
          "content" : "5afbf90bf7988b1767c59c2cce4a91877a7811f637561c24e28e01c0e62a823fef604dcf205009cf44e95330cd1fd7773556bd2b05bc98ef4af011eca4a43eb7"
        },
        {
          "alg" : "SHA-384",
          "content" : "552dd027f25044b04c52c4276125d2acf7222517ddeab210ed74064f73ed0363317a1da1951f3c2bd480d573650f8254"
        },
        {
          "alg" : "SHA3-384",
          "content" : "08d50541e3a4bfd2a49f8314594d9994fa07c35a5db0b4fc89f219769f891e4ca9a7238c37a4fc7dcbdd943a067dbd8b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a9cbb9733deb6b276238a0e8f8775807eee5c7d176d7b75d85959b7d074d6f51"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9d731c932ca6724d5bc1ede8035eb0004828e510c5e157398234da801736ba64d06527ae671cdaecb2a0eea2edfb14b99ec1b36e4501bc113e5126549fada568"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "BSD-style",
            "url" : "http://pmd.sourceforge.net/license.html"
          }
        }
      ],
      "purl" : "pkg:maven/net.sourceforge.pmd/pmd-core@7.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://pmd.github.io/pmd-core/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/pmd/pmd/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/pmd/pmd/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://sourceforge.net/p/pmd/mailman/pmd-devel"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/pmd/pmd/pmd-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sourceforge.pmd/pmd-core@7.0.0?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.36",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "872da51f5de7f3923da4de871d57fd85"
        },
        {
          "alg" : "SHA-1",
          "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14"
        },
        {
          "alg" : "SHA-256",
          "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0"
        },
        {
          "alg" : "SHA-512",
          "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b"
        },
        {
          "alg" : "SHA-384",
          "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881"
        },
        {
          "alg" : "SHA3-512",
          "content" : "14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "jul-to-slf4j",
      "version" : "1.7.36",
      "description" : "JUL to SLF4J bridge",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2a3fe73e6cafe8f102facaf2dd65353f"
        },
        {
          "alg" : "SHA-1",
          "content" : "ed46d81cef9c412a88caef405b58f93a678ff2ca"
        },
        {
          "alg" : "SHA-256",
          "content" : "9e641fb142c5f0b0623d6222c09ea87523a41bf6bed48ac79940724010b989de"
        },
        {
          "alg" : "SHA-512",
          "content" : "0bb1e7343d07d41bcfb0c1ffeb2db28cbb35e7a80a409b80042f463b082a292976f09d719e319471e31c7bab716121728a16509fd385fc6e3b400b1b214cffea"
        },
        {
          "alg" : "SHA-384",
          "content" : "50e2f326fc00537a5fb3726c7c55556851b3be8b4346f522f27ddecf2fdb44adabae3197b30ccfd854c37d6734adbd8f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4ad0c3870852ac44530a9dcb992d947cd8708ee6f422559da41aaaa8b22d1610fb116b32d2c54df83b110b85487083bf"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8e3f5aaaa27f618b52e610376d2a16c6f9dc8dce5e6c2bbe42131a590626aae6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e3da265406b5e69f02235ed7272a48f71cb8b6f0a696820e28e90fb5eafeeb311abf2a4e779b402f384c6a80470fd41116ee52a526f57040fae3b24cb3b19c01"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/jul-to-slf4j"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar"
    },
    {
      "publisher" : "ANTLR",
      "group" : "org.antlr",
      "name" : "antlr4-runtime",
      "version" : "4.9.3",
      "description" : "The ANTLR 4 Runtime",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "718f199bafa6574ffa1111fa3e10276a"
        },
        {
          "alg" : "SHA-1",
          "content" : "81befc16ebedb8b8aea3e4c0835dd5ca7e8523a8"
        },
        {
          "alg" : "SHA-256",
          "content" : "131a6594969bc4f321d652ea2a33bc0e378ca312685ef87791b2c60b29d01ea5"
        },
        {
          "alg" : "SHA-512",
          "content" : "2c3763a8fbc7af110df5d6bb57692759b23e8bf961a53694c69bde4cd9d8c3a8eaa55cf376ce34c6c4e2035a99d7abf08c6ffa3b75d18a6d93a9c1ca95927ea8"
        },
        {
          "alg" : "SHA-384",
          "content" : "62a62dab4a27733a810b97fe5544eb1b5b25d2df83ea8d93802cb0e6fd1b4b3ca5a130c51aa9198deefc30cd0f062841"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e2919d471a5b4fa318cd34d4a9fa5a9e1fa4ed37e0ee34c72031f950c447c16df828cbe96635e525859153080b97510b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "70c29f56fa10bfccfd47623ca6e9d3625e1b81da7b0e57269def1d6f84c5cd6e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1a80c6cc4e5cd8e1455717e6d9fc3ab7937eb23f907e4189358f4b2f3eb14475689c02a8258419f6956feaf6da0c0c5cdcfb9300f91efef2f5bfbabac092386c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-4-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.antlr.org/antlr4-runtime"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/antlr/antlr4/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/?fromgroups#!forum/antlr-discussion"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/antlr/antlr4/tree/master/antlr4-runtime"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar"
    },
    {
      "publisher" : "Saxonica",
      "group" : "net.sf.saxon",
      "name" : "Saxon-HE",
      "version" : "10.9",
      "description" : "The XSLT and XQuery Processor",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "740e4be2bcc850c1dfd6fcd6f98b02e5"
        },
        {
          "alg" : "SHA-1",
          "content" : "6f58027cfb90638c4bd3bb10c8b38eee8d315026"
        },
        {
          "alg" : "SHA-256",
          "content" : "491d8edf4ec811d15c2b2417b007218b9b938f15e4dfbad004025beb4e70e960"
        },
        {
          "alg" : "SHA-512",
          "content" : "b3b2ca11e29140a4ed4ca8fff4e3cfdeeacadf37034a26fb06237e4ecb2a9be58c2209a3f1b5beffbbe78a1a91cb4eb836359c19b56d3040ee90187da6d4a885"
        },
        {
          "alg" : "SHA-384",
          "content" : "cb4d3076857911534b0c0d9caef5fc04fc0169874a7222a85942baac1f4123dee5c631c7605de7424a57455148498e6a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "76571b665ab1099ab7639eea49af41898be34bb56c8e0715eb2823753a3aae43951d1c0653283e295993a83135eae223"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8924bdd777efec06450d8509918767e004bd5c598675624337855ea939bb681b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "61f77333f472a90534d17893a2c8f6ffe9b8907759e0a5f308165a3d5eaaace53b0a298e24c6163745d6825df16f63c65811d59d201f68c5f9758672a9ca59cf"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MPL-2.0-no-copyleft-exception",
            "url" : "https://www.mozilla.org/MPL/2.0/"
          }
        }
      ],
      "purl" : "pkg:maven/net.sf.saxon/Saxon-HE@10.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.saxonica.com/"
        },
        {
          "type" : "vcs",
          "url" : "https://saxonica.plan.io/projects/saxonmirrorhe/repository"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sf.saxon/Saxon-HE@10.9?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.14.0",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4e5c3f5e6b0b965ef241d7d72ac8971f"
        },
        {
          "alg" : "SHA-1",
          "content" : "1ed471194b02f2c6cb734a0cd6f6f107c673afae"
        },
        {
          "alg" : "SHA-256",
          "content" : "7b96bf3ee68949abb5bc465559ac270e0551596fa34523fddf890ec418dde13c"
        },
        {
          "alg" : "SHA-512",
          "content" : "0338b50767166e5746ada6d6aa2e071e7221d699323bfb629f7f204b294c1dc4cad140610a129ed751798443b43e74e0818989c7df7d33c5915aa29742be9ba8"
        },
        {
          "alg" : "SHA-384",
          "content" : "908d0a22dc17aaa04caa5104cff7cad5b88b77eecb78dd5b3b3fefa22ff71ac50a4fb9e31c897ac243f9d841e4b3453d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8a7f2e061b998780870eddd571620fbf3d3c70bcb54e24539d0db504f59d65bc6bda58136284498babe29fcc5eabb7a6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "022bf1f8039fcea717e9e34dd96eb80cfff05b43c9cbb76e9739b2421e2d027c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0bcbc4edce974ea970c46e2da12ec98d9fd962c2cf64f757ac97136dec5623ca52af0c225895303c17ffabb57090e6772d7bd326d5e7438cef5454f8bbaeecfa"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-lang/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-lang.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"
    },
    {
      "publisher" : "OW2",
      "group" : "org.ow2.asm",
      "name" : "asm",
      "version" : "9.6",
      "description" : "ASM, a very small and fast Java bytecode manipulation framework",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6f8bccf756f170d4185bb24c8c2d2020"
        },
        {
          "alg" : "SHA-1",
          "content" : "aa205cf0a06dbd8e04ece91c0b37c3f5d567546a"
        },
        {
          "alg" : "SHA-256",
          "content" : "3c6fac2424db3d4a853b669f4e3d1d9c3c552235e19a319673f887083c2303a1"
        },
        {
          "alg" : "SHA-512",
          "content" : "01a5ea6f5b43bf094c52a50e18325a60af7bb02e74d24f9bc2c727d43e514578fd968b30ff22f9d2720caec071458f9ff82d11a21fbb1ebc42d8203e737c4b52"
        },
        {
          "alg" : "SHA-384",
          "content" : "80e0a92442db343baea7bab9bb1d0b7037c98d6aa54172820b21ea45e51dfea42b7670aa39e938d0f88ad4466004a19a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "98a43a49425054d14574e75aa034e3758b8f0ac382c705773cd80be4065df6b198ba106f443d1d389a8d2a027586f122"
        },
        {
          "alg" : "SHA3-256",
          "content" : "df966c1a8edf2f5dc378e60468399b60d9d27481241462b75a61033b06f95578"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5f2cfa6ca6e369f5e94861652da88c12c0554ea4aa0c8472393011aacadeda2309d00d9817417debac5d1c4e01bb9584cb9c438eff63bd10ed89666bb9cffed7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.ow2.asm/asm@9.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://asm.ow2.io/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://gitlab.ow2.org/asm/asm/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail.ow2.org/wws/arc/asm/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitlab.ow2.org/asm/asm/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.ow2.asm/asm@9.6?type=jar"
    },
    {
      "group" : "com.google.code.gson",
      "name" : "gson",
      "version" : "2.10.1",
      "description" : "Gson JSON library",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "df6097815738cb31fc56391553210843"
        },
        {
          "alg" : "SHA-1",
          "content" : "b3add478d4382b78ea20b1671390a858002feb6c"
        },
        {
          "alg" : "SHA-256",
          "content" : "4241c14a7727c34feea6507ec801318a3d4a90f070e4525681079fb94ee4c593"
        },
        {
          "alg" : "SHA-512",
          "content" : "7503e4b8d05c6cc0ecb3a94c5a2e070e049083a441003a79a0cdf474f4286699b4ba1d2a655ddabb8ba10c50e7c36a7045cccdaee465166d4630db647aba2727"
        },
        {
          "alg" : "SHA-384",
          "content" : "48a4786bd6e1867f058ee4fb676fc82d9d9f64a6d7420d4a47ae2398504c9de73222636614aeb4a9fbf10ee143d72226"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3df9a0332c2766124fe7c915cfea665d2e318ccaa7212415fabd9e93e6eb77de538725fd2ef313cde46f6d814c9566ea"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d3374006d76d4f9acdf3d3a1a4f47899570f52442b2188f80c09a74f22139ecb"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2b10c2f4fe39d8712b430ff171823d7172c0a06685c1eb7de511e90159cec0e094fb2a9b50b747c5b039cb10f1fce9edf82ecbf9c47f76a6f31c4e3cb7586cce"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/gson/gson"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/gson/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/gson/gson/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar"
    },
    {
      "group" : "org.checkerframework",
      "name" : "checker-qual",
      "version" : "2.11.1",
      "description" : "Checker Qual is the set of annotations (qualifiers) and supporting classes used by the Checker Framework to type check Java source code. Please see artifact: org.checkerframework:checker",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "936884d7b04ee8f064df137bcdfe470d"
        },
        {
          "alg" : "SHA-1",
          "content" : "8c43bf8f99b841d23aadda6044329dad9b63c185"
        },
        {
          "alg" : "SHA-256",
          "content" : "015224a4b1dc6de6da053273d4da7d39cfea20e63038169fc45ac0d1dc9c5938"
        },
        {
          "alg" : "SHA-512",
          "content" : "aa541c66272d8f5320849cafadaadfa36a9fcf169e103e01fe1e77292e91670e254e405d3ca9aa7ad47ff04894e9474fe388c68e5da24c0638e8b77c0ef880c0"
        },
        {
          "alg" : "SHA-384",
          "content" : "74e08672ea70930e8bcbc3883a8d0732d20324bb6e0c7a58c1be0e305be6133b67f1c5d6fd8ce199948553d05ceafb33"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ff58a3de013daf346fe0453100a720ba43130a7504a08fd50d471302a7578016b1c8a9eb31abf3dbcdfb4ac90ef0be1a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c63adbd5dfc7945fd5ad58d280faf5fc7450eae0297a3f55f5c7b119217c7a9b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "eef7b66164764ec0cf01ad68023f30db98ea4a51cf31df2bf214fbb336032e0b7c19b74d84f0081f4d657c221c67c704db9f373b6f709c9a1d717d3b944619c8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.checkerframework/checker-qual@2.11.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://checkerframework.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/typetools/checker-framework.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.checkerframework/checker-qual@2.11.1?type=jar"
    },
    {
      "group" : "org.pcollections",
      "name" : "pcollections",
      "version" : "3.2.0",
      "description" : "A Persistent Java Collections Library",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a00862c61fa635831a526e16dad46fe7"
        },
        {
          "alg" : "SHA-1",
          "content" : "b64e12b258ebfbf6e3f43157ef70c3ec420fec33"
        },
        {
          "alg" : "SHA-256",
          "content" : "6c1447309cd47560924dbf4939b37756c53b15febc0191ec52d6e0b53b6cc62a"
        },
        {
          "alg" : "SHA-512",
          "content" : "4135a36c3c298c88df6195e7282670eada3132c4e86b927f3ec7faafe2f2ef0cd6a5866e9dcf0e5538c1b9f46aeb62d9a0e756bfaa386c986642d4a40c393ee2"
        },
        {
          "alg" : "SHA-384",
          "content" : "06dd5c4298c66330b45a1600514f01c6147c3808a8b7d7240790d600e558988f869078765cd0c7e010599d7159a53064"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a337211f9b9b36b5a869656a69baf570a5488f9148efc75005bdb68b9f95e657fe35f838dd6d3d93e170851e8f51dc19"
        },
        {
          "alg" : "SHA3-256",
          "content" : "146a9d35a644d5d9853feb2b84ed58269c21f5546a01a58b5aa6775cdb46e46e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3139a3075c6513038973ac7e88f25f9739e7adfdfce1b5244d1454f5f672db7285fe55a713e15aa7e1f6b88e1066c459819dbcca78c0d85a7ba9ad495e298e9e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.pcollections/pcollections@3.2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/hrldcpr/pcollections"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/hrldcpr/pcollections"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.pcollections/pcollections@3.2.0?type=jar"
    },
    {
      "group" : "com.github.oowekyala.ooxml",
      "name" : "nice-xml-messages",
      "version" : "3.1",
      "description" : "Associates XML DOM nodes to their position in source, to enrich error messages. This builds on top of the standard org.w3c.dom API. Should probably not be used in performance critical code, but can hopefully cleanup reporting logic in places where user-friendly messages are important.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "39c913451ff2d2ec740c58a77a26fa16"
        },
        {
          "alg" : "SHA-1",
          "content" : "4c3863b0f015af5cfd9abe02fab364fb99867167"
        },
        {
          "alg" : "SHA-256",
          "content" : "0b4ceb5b8362d43c9c6c49b1bd57f1c5da54d3c5c7c305fa39c0a04462bb4799"
        },
        {
          "alg" : "SHA-512",
          "content" : "6b3e7c2f1d4b9a46c8dc113b60deee5e2a70b57f308886074816e0d7e3a5460cfb7c1c547171c0ad125deb551bafbb41b911c52db8bac448be3504b0d407a7fc"
        },
        {
          "alg" : "SHA-384",
          "content" : "c79cd24010cfcfcc712509412dacbfb5bcc4a64e98bfd6a638698350c4f45c1a2c6724491368cc56a4d5947cbe0482e1"
        },
        {
          "alg" : "SHA3-384",
          "content" : "218130aec89a116471d0dd34b9c733f144e36f1cbcd2b705fea4ed2f7fb90e8c6a5386aaff037bc772e180868b13c03f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "02b4007b4ada909e9bb676189310b233c8c2c254e2bdc901928030ef0f96f346"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f2e7883ab42ba31eb380ed9dc7199f3d7d4b0c0c8b06432ebe502c6e117017abdd579f86032a14bf842fb68889a13d1bd504a60a212f889e171e78003c0322a0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.oowekyala.ooxml/nice-xml-messages@3.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/oowekyala/nice-xml-messages"
        },
        {
          "type" : "distribution",
          "url" : "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/oowekyala/nice-xml-messages"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.oowekyala.ooxml/nice-xml-messages@3.1?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/net.sourceforge.pmd/pmd-python@7.0.0?type=jar",
      "dependsOn" : [
        "pkg:maven/net.sourceforge.pmd/pmd-core@7.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.sourceforge.pmd/pmd-core@7.0.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar",
        "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar",
        "pkg:maven/net.sf.saxon/Saxon-HE@10.9?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar",
        "pkg:maven/org.ow2.asm/asm@9.6?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar",
        "pkg:maven/org.checkerframework/checker-qual@2.11.1?type=jar",
        "pkg:maven/org.pcollections/pcollections@3.2.0?type=jar",
        "pkg:maven/com.github.oowekyala.ooxml/nice-xml-messages@3.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/net.sf.saxon/Saxon-HE@10.9?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.ow2.asm/asm@9.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.checkerframework/checker-qual@2.11.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.pcollections/pcollections@3.2.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.github.oowekyala.ooxml/nice-xml-messages@3.1?type=jar",
      "dependsOn" : [ ]
    }
  ]
}