{ "bomFormat" : "CycloneDX", "specVersion" : "1.6", "serialNumber" : "urn:uuid:a296c4ac-8868-32dd-a258-cf3a98249de8", "version" : 1, "metadata" : { "lifecycles" : [ { "phase" : "build" } ], "tools" : { "components" : [ { "type" : "library", "author" : "OWASP Foundation", "group" : "org.cyclonedx", "name" : "cyclonedx-maven-plugin", "version" : "2.9.1", "description" : "CycloneDX Maven plugin", "hashes" : [ { "alg" : "MD5", "content" : "9c7a565cf28cce58557d0c621c5ea4b1" }, { "alg" : "SHA-1", "content" : "be882d5a22050bfa9d19090b1420c188617d0e1c" }, { "alg" : "SHA-256", "content" : "698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249" }, { "alg" : "SHA-512", "content" : "c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0" }, { "alg" : "SHA-384", "content" : "d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb" }, { "alg" : "SHA3-384", "content" : "80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f" }, { "alg" : "SHA3-256", "content" : "142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699" }, { "alg" : "SHA3-512", "content" : "af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b" } ] } ] }, "component" : { "type" : "library", "bom-ref" : "pkg:maven/net.sourceforge.pmd/pmd-python@7.11.0?type=jar", "publisher" : "PMD", "group" : "net.sourceforge.pmd", "name" : "pmd-python", "version" : "7.11.0", "description" : "PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex, but supports 16 other languages. It comes with 400+ built-in rules. It can be extended with custom rules. It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations. Rules can be written in Java or using a XPath query. Currently, PMD supports Java, JavaScript, Salesforce.com Apex and Visualforce, Kotlin, Swift, Modelica, PLSQL, Apache Velocity, JSP, WSDL, Maven POM, HTML, XML and XSL. Scala is supported, but there are currently no Scala rules available. Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in Coco, C/C++, C#, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica, Objective-C, Perl, PHP, PLSQL, Python, Ruby, Rust, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript, Apache Velocity, WSDL, XML and XSL.", "licenses" : [ { "license" : { "name" : "BSD-style", "url" : "http://pmd.sourceforge.net/license.html" } } ], "purl" : "pkg:maven/net.sourceforge.pmd/pmd-python@7.11.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://pmd.github.io/pmd-python/" }, { "type" : "build-system", "url" : "https://github.com/pmd/pmd/actions" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/pmd/pmd/issues" }, { "type" : "mailing-list", "url" : "https://sourceforge.net/p/pmd/mailman/pmd-devel" }, { "type" : "vcs", "url" : "https://github.com/pmd/pmd/pmd-python" } ] }, "properties" : [ { "name" : "maven.goal", "value" : "makeBom" }, { "name" : "maven.scopes", "value" : "compile,provided,runtime,system" }, { "name" : "cdx:reproducible", "value" : "enabled" } ] }, "components" : [ { "type" : "library", "bom-ref" : "pkg:maven/net.sourceforge.pmd/pmd-core@7.11.0?type=jar", "publisher" : "PMD", "group" : "net.sourceforge.pmd", "name" : "pmd-core", "version" : "7.11.0", "description" : "PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex, but supports 16 other languages. It comes with 400+ built-in rules. It can be extended with custom rules. It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations. Rules can be written in Java or using a XPath query. Currently, PMD supports Java, JavaScript, Salesforce.com Apex and Visualforce, Kotlin, Swift, Modelica, PLSQL, Apache Velocity, JSP, WSDL, Maven POM, HTML, XML and XSL. Scala is supported, but there are currently no Scala rules available. Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in Coco, C/C++, C#, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica, Objective-C, Perl, PHP, PLSQL, Python, Ruby, Rust, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript, Apache Velocity, WSDL, XML and XSL.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "553c6bd287088a560cd2279cb9357ec5" }, { "alg" : "SHA-1", "content" : "da219d56b79605eadfa52f4b5855aa2c12ca74bb" }, { "alg" : "SHA-256", "content" : "39a99a14af9a8d5a97e6e55877b5cc9bd2d82aaaf32a244645c9f5d98b42dbde" }, { "alg" : "SHA-512", "content" : "abb8c657cd9e829d7ca771b058e0a58067c4eea08682cbeea84e46d27517fe963c3373554c9e691374c777270c9673656efed3642826eca34dec33ab89a24b94" }, { "alg" : "SHA-384", "content" : "2f3ac0c338f5e95b5ebeed3b7b952bb114271694f5dfa8f3f303c6fdd227820e713c987a05561770c403e82787828599" }, { "alg" : "SHA3-384", "content" : "e82e750a43b66146d7283c920d9717e63f510b63a6233cbca2cd8c26bd1dbc5ebc06968d728a5a7e7bc856857cd9495a" }, { "alg" : "SHA3-256", "content" : "e567dd287392c40ac6cbf7b7516f52f1943d02f1862c5f8a2828ae40d1d0f21f" }, { "alg" : "SHA3-512", "content" : "2595a758908651a5e6329cb3e963dc33216184dcacdb817269a4aa4444eab54aebbe3af81a027e252d9c88f77a4fe1528f831aa75ee38e8685be648bf437d690" } ], "licenses" : [ { "license" : { "name" : "BSD-style", "url" : "http://pmd.sourceforge.net/license.html" } } ], "purl" : "pkg:maven/net.sourceforge.pmd/pmd-core@7.11.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://pmd.github.io/pmd-core/" }, { "type" : "build-system", "url" : "https://github.com/pmd/pmd/actions" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/pmd/pmd/issues" }, { "type" : "mailing-list", "url" : "https://sourceforge.net/p/pmd/mailman/pmd-devel" }, { "type" : "vcs", "url" : "https://github.com/pmd/pmd/pmd-core" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "publisher" : "QOS.ch", "group" : "org.slf4j", "name" : "slf4j-api", "version" : "1.7.36", "description" : "The slf4j API", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "872da51f5de7f3923da4de871d57fd85" }, { "alg" : "SHA-1", "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14" }, { "alg" : "SHA-256", "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0" }, { "alg" : "SHA-512", "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b" }, { "alg" : "SHA-384", "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a" }, { "alg" : "SHA3-384", "content" : "3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b" }, { "alg" : "SHA3-256", "content" : "ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881" }, { "alg" : "SHA3-512", "content" : "14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824" } ], "licenses" : [ { "license" : { "id" : "MIT", "url" : "https://opensource.org/license/mit/" } } ], "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://www.slf4j.org" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/qos-ch/slf4j/slf4j-api" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar", "publisher" : "QOS.ch", "group" : "org.slf4j", "name" : "jul-to-slf4j", "version" : "1.7.36", "description" : "JUL to SLF4J bridge", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "2a3fe73e6cafe8f102facaf2dd65353f" }, { "alg" : "SHA-1", "content" : "ed46d81cef9c412a88caef405b58f93a678ff2ca" }, { "alg" : "SHA-256", "content" : "9e641fb142c5f0b0623d6222c09ea87523a41bf6bed48ac79940724010b989de" }, { "alg" : "SHA-512", "content" : "0bb1e7343d07d41bcfb0c1ffeb2db28cbb35e7a80a409b80042f463b082a292976f09d719e319471e31c7bab716121728a16509fd385fc6e3b400b1b214cffea" }, { "alg" : "SHA-384", "content" : "50e2f326fc00537a5fb3726c7c55556851b3be8b4346f522f27ddecf2fdb44adabae3197b30ccfd854c37d6734adbd8f" }, { "alg" : "SHA3-384", "content" : "4ad0c3870852ac44530a9dcb992d947cd8708ee6f422559da41aaaa8b22d1610fb116b32d2c54df83b110b85487083bf" }, { "alg" : "SHA3-256", "content" : "8e3f5aaaa27f618b52e610376d2a16c6f9dc8dce5e6c2bbe42131a590626aae6" }, { "alg" : "SHA3-512", "content" : "e3da265406b5e69f02235ed7272a48f71cb8b6f0a696820e28e90fb5eafeeb311abf2a4e779b402f384c6a80470fd41116ee52a526f57040fae3b24cb3b19c01" } ], "licenses" : [ { "license" : { "id" : "MIT", "url" : "https://opensource.org/license/mit/" } } ], "purl" : "pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://www.slf4j.org" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/qos-ch/slf4j/jul-to-slf4j" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar", "publisher" : "ANTLR", "group" : "org.antlr", "name" : "antlr4-runtime", "version" : "4.9.3", "description" : "The ANTLR 4 Runtime", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "718f199bafa6574ffa1111fa3e10276a" }, { "alg" : "SHA-1", "content" : "81befc16ebedb8b8aea3e4c0835dd5ca7e8523a8" }, { "alg" : "SHA-256", "content" : "131a6594969bc4f321d652ea2a33bc0e378ca312685ef87791b2c60b29d01ea5" }, { "alg" : "SHA-512", "content" : "2c3763a8fbc7af110df5d6bb57692759b23e8bf961a53694c69bde4cd9d8c3a8eaa55cf376ce34c6c4e2035a99d7abf08c6ffa3b75d18a6d93a9c1ca95927ea8" }, { "alg" : "SHA-384", "content" : "62a62dab4a27733a810b97fe5544eb1b5b25d2df83ea8d93802cb0e6fd1b4b3ca5a130c51aa9198deefc30cd0f062841" }, { "alg" : "SHA3-384", "content" : "e2919d471a5b4fa318cd34d4a9fa5a9e1fa4ed37e0ee34c72031f950c447c16df828cbe96635e525859153080b97510b" }, { "alg" : "SHA3-256", "content" : "70c29f56fa10bfccfd47623ca6e9d3625e1b81da7b0e57269def1d6f84c5cd6e" }, { "alg" : "SHA3-512", "content" : "1a80c6cc4e5cd8e1455717e6d9fc3ab7937eb23f907e4189358f4b2f3eb14475689c02a8258419f6956feaf6da0c0c5cdcfb9300f91efef2f5bfbabac092386c" } ], "licenses" : [ { "license" : { "id" : "BSD-4-Clause" } } ], "purl" : "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://www.antlr.org/antlr4-runtime" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/antlr/antlr4/issues" }, { "type" : "mailing-list", "url" : "https://groups.google.com/forum/?fromgroups#!forum/antlr-discussion" }, { "type" : "vcs", "url" : "https://github.com/antlr/antlr4/tree/master/antlr4-runtime" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/net.sf.saxon/Saxon-HE@12.5?type=jar", "publisher" : "Saxonica", "group" : "net.sf.saxon", "name" : "Saxon-HE", "version" : "12.5", "description" : "The XSLT and XQuery Processor", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "39b53a0dcd01522e79223e2506061d44" }, { "alg" : "SHA-1", "content" : "57c007520e2879387b8d13d0a512e9566eeffa73" }, { "alg" : "SHA-256", "content" : "98c3a91e6e5aaf9b3e2b37601e04b214a6e67098493cdd8232fcb705fddcb674" }, { "alg" : "SHA-512", "content" : "f8385b52b9de03bbbcfd9900b78d7e1b544102900316d8d95b5f36b75b6f8f492cee7a1ecf737bd0b4caf85d79c003996f83ac156739d60e4d41edd5ef43a182" }, { "alg" : "SHA-384", "content" : "1e08a834684848bfb6c8029b98d2c8f5634acba483c6cd783aa753a15551c48e32fe718c72abdbb1114bab6e8cbf654d" }, { "alg" : "SHA3-384", "content" : "89a7d4688edba721f2960ed5a1d572cf9cf83b6d3d71987ef9b8d4a1b00fbcb47f7f6469d8d14cae2ea3eb8b63841a4d" }, { "alg" : "SHA3-256", "content" : "b963a7cb8580e362ee06b8fbd395016900a9842fa03f6f38106544259ebfc464" }, { "alg" : "SHA3-512", "content" : "f47e8e8922b657d8190b391178fc86b4808b0c1d40cdc4de8231cefd619d645de971d9b0e33c8da8c25de5cb4f558861cbed77839dd619f4f4f4317378cbdb3d" } ], "licenses" : [ { "license" : { "id" : "MPL-2.0", "url" : "https://www.mozilla.org/MPL/2.0/" } } ], "purl" : "pkg:maven/net.sf.saxon/Saxon-HE@12.5?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://www.saxonica.com/" }, { "type" : "vcs", "url" : "https://saxonica.plan.io/projects/saxonmirrorhe/repository" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.xmlresolver/xmlresolver@5.2.2?type=jar", "group" : "org.xmlresolver", "name" : "xmlresolver", "version" : "5.2.2", "description" : "An XML entity/uri resolver", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "0de20e8f7acfa5942d78c239d3034deb" }, { "alg" : "SHA-1", "content" : "152378e04ba01898847bf38fad5023c7d52f0c9d" }, { "alg" : "SHA-256", "content" : "efc92bd7ed32b3e57095e0b3e872051ccfbbdcc980831ef33e89e38161a85222" }, { "alg" : "SHA-512", "content" : "4213b91ddf162a2ee0515f823d859333fa475b84675277bf657eff03162eff4b91660313ce8c19fa9f30b02e2002d87cf06c492e4c303448a96b577b6928f3c0" }, { "alg" : "SHA-384", "content" : "f093746aa8a39a5d1309fe7d14315ce851d649fe3700d2ec49013947d701c33345e32e4a4306d1475e266487b7ba0169" }, { "alg" : "SHA3-384", "content" : "a0eb7e9622c96a0dfbd141030b33b24e796e9ae438befde00a77629408a07d855d681f93b0fb052e19e762f5f170c77b" }, { "alg" : "SHA3-256", "content" : "d808c261e2be19a82e25034d0a21cf40bad78eabdfba3bc6ff93f0f91ac30397" }, { "alg" : "SHA3-512", "content" : "e53fd7e8cc1f17144ac3667667d32a7a6fc21f7b7f7dce715590533f5d276e10be768156338d5e878c47d1e880f9e4799f18f289e00bfa155d45571d02787899" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.xmlresolver/xmlresolver@5.2.2?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/xmlresolver/xmlresolver" }, { "type" : "vcs", "url" : "scm:git@github.com:xmlresolver/xmlresolver.git" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.1.3?type=jar", "publisher" : "The Apache Software Foundation", "group" : "org.apache.httpcomponents.client5", "name" : "httpclient5", "version" : "5.1.3", "description" : "Apache HttpComponents Client", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "757bfb86277b9b11798db8fdb351bf74" }, { "alg" : "SHA-1", "content" : "13c984b7b881afcff3a7f0bb95878724a48a4b66" }, { "alg" : "SHA-256", "content" : "28c759254f4e35319e078bb6ffea75676608dc12cb243b24fb3c8732522977fe" }, { "alg" : "SHA-512", "content" : "4fb38b6bf164103e68320ce430776915a6831923eb3e0b6e6f29ff57647e6bd29efc07d46b107aec23bf9004cfd959fbda8153740ba0060260a54d67ccf8a093" }, { "alg" : "SHA-384", "content" : "8e6c7bc00b5e25c564faa6f20d01b26288163de846273943bdc7a043348cbe4a5540dc875ed057054c2af5c6e10f8147" }, { "alg" : "SHA3-384", "content" : "ecfe2613d27758859bfadc02b97b073b5ca74c2e983198c949851c2d287de00e85d4c1c822329e63a38617f85ff281fb" }, { "alg" : "SHA3-256", "content" : "29df48d822099ef07e6687f12acdecd8f22dcfe84106667183d6790bbc9ed121" }, { "alg" : "SHA3-512", "content" : "46cafa187fb940370f545efc73ff7d160d9b54810a9556d13c4e0010b44a0155e0cfad0251fb030f0cbae2d2108a6ef0ac918c32b3ad6d6dc2da1a360815b564" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.1.3?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://hc.apache.org/httpcomponents-client-5.0.x/5.1.3/httpclient5/" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/HTTPCLIENT" }, { "type" : "mailing-list", "url" : "https://lists.apache.org/list.html?httpclient-users@hc.apache.org" }, { "type" : "vcs", "url" : "https://github.com/apache/httpcomponents-client/tree/5.1.3/httpclient5" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.1.3?type=jar", "publisher" : "The Apache Software Foundation", "group" : "org.apache.httpcomponents.core5", "name" : "httpcore5-h2", "version" : "5.1.3", "description" : "Apache HttpComponents HTTP/2 Core Components", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "e12cc9746f6635675a408e641c95b177" }, { "alg" : "SHA-1", "content" : "4664b59b09f5ee008e37a963bbb92f4068e91696" }, { "alg" : "SHA-256", "content" : "d0e78ba15aa8ebe77982b660ac4b09a95d6e035dbdbea762577dc1c8e2935807" }, { "alg" : "SHA-512", "content" : "76a22785285a3c12a98db24d678f1fd695cb4941be438fd80a7c41b4fbf804452694f93947579aba3bcee652671e362ae6d76bfb60a8db75518e52aba4ddad36" }, { "alg" : "SHA-384", "content" : "cfead6178cd1cc30fcd9da2f8753897a2039e7915eded3278fb74545a49db68a10860ed064e9f52d0f1526e3cd7caa35" }, { "alg" : "SHA3-384", "content" : "d98a2ba3eaf1eb38629e2d02eb6b31e4e4b2290c321bd58c0377ad4427a969b881d6b31cf8afdc8b9e306ef8d7d39439" }, { "alg" : "SHA3-256", "content" : "7114b9fd4612be12d156312568633e13745c8bd3da7c28af60373a70f31875b5" }, { "alg" : "SHA3-512", "content" : "3f32c0564b4af84b886df450df91498523c40ba6bf98354413ff3f4c85f782cd2a3cd9e6ef2f38c18a79ecb8c444326c7b043feb5fc3f8cafe043e9217362255" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.1.3?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://hc.apache.org/httpcomponents-core-5.1.x/5.1.3/httpcore5-h2/" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/HTTPCORE" }, { "type" : "mailing-list", "url" : "https://lists.apache.org/list.html?httpclient-users@hc.apache.org" }, { "type" : "vcs", "url" : "https://github.com/apache/httpcomponents-core/tree/5.1.3/httpcore5-h2" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar", "publisher" : "The Apache Software Foundation", "group" : "commons-codec", "name" : "commons-codec", "version" : "1.15", "description" : "The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "303baf002ce6d382198090aedd9d79a2" }, { "alg" : "SHA-1", "content" : "49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d" }, { "alg" : "SHA-256", "content" : "b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63" }, { "alg" : "SHA-512", "content" : "da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787" }, { "alg" : "SHA-384", "content" : "05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0" }, { "alg" : "SHA3-384", "content" : "12fad4ef78274b06f97b1243cea6f970088abde082d2de9377d915a34b44f7d7d67807c03e59c849b69f1544e2a9a1be" }, { "alg" : "SHA3-256", "content" : "87be248f33f241121f54aad61a9a460a79eabefbf1b5b0dd22aeb95b581f727e" }, { "alg" : "SHA3-512", "content" : "8c992c9c569ebaa0bf956a4c5b34fbf5e1ed1c212c2dd896fa216183ee0bcd341e96698af4b9cec7e8880762faa081a3d3a27f51349aa457cb8e373e4f57c788" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://commons.apache.org/proper/commons-codec/" }, { "type" : "build-system", "url" : "https://builds.apache.org/" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/CODEC" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", "url" : "https://github.com/apache/commons-codec" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.1.3?type=jar", "publisher" : "The Apache Software Foundation", "group" : "org.apache.httpcomponents.core5", "name" : "httpcore5", "version" : "5.1.3", "description" : "Apache HttpComponents HTTP/1.1 core components", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "e3311847fc70a84038fb2c079dd08c4a" }, { "alg" : "SHA-1", "content" : "d1638d1e5f2793f187d4144c702a93524ba6fd3b" }, { "alg" : "SHA-256", "content" : "f2bf2f2c7772169c9e30699719667ad30f9b46c4e9d7841907deb2d12d9923fe" }, { "alg" : "SHA-512", "content" : "c9b439da0fb0124f37676686c69f8fdb824a30e0d6a3b9ebc0ebca5555727ae18cc5a146d8874b4cfe6fa966d5eb6083a44c379a76017ec79863596a23c571b3" }, { "alg" : "SHA-384", "content" : "63d37103c0b040ed9f0c70af0bcc9792c68afe8c7da5f445f30458c7c802524f07a1bdb573661e680955a257e0fb6b4c" }, { "alg" : "SHA3-384", "content" : "5ddd51ea89b40049c0b92bdfd0fc59fd2963c025895bece1b9438166e9e468b8b54694e9e72a8d026f681ec92824f224" }, { "alg" : "SHA3-256", "content" : "0a1d52398f2a13124591cc6fce1fee5f353c29c9726b4f68813b01f077940947" }, { "alg" : "SHA3-512", "content" : "eecbd33885bb1718a1803951d9217b108e42e39cedfeac99bd0938cec94674b1c67d6f4d6141c8e225061a51a1ac3af07f553501ff2b136e358a3eeffbcd3ea9" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.1.3?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://hc.apache.org/httpcomponents-core-5.1.x/5.1.3/httpcore5/" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/HTTPCORE" }, { "type" : "mailing-list", "url" : "https://lists.apache.org/list.html?httpclient-users@hc.apache.org" }, { "type" : "vcs", "url" : "https://github.com/apache/httpcomponents-core/tree/5.1.3/httpcore5" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.xmlresolver/xmlresolver@5.2.2?classifier=data&type=jar", "group" : "org.xmlresolver", "name" : "xmlresolver", "version" : "5.2.2", "description" : "An XML entity/uri resolver", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "0e77f628aa613bbe3145c6a24f8973f3" }, { "alg" : "SHA-1", "content" : "5624ede8b8e374979194acaae9f34cff23b62b3e" }, { "alg" : "SHA-256", "content" : "173904bdbd783ba0fac92c5bcc05da5d09f0ce7eed24346666ea0a239461f9b4" }, { "alg" : "SHA-512", "content" : "18f9f0ab3426800c82a707bf5e85a281955695fc703dc6c80c055227e5b78d825329f6b0eee0605b80c3c5cc33c7b81056a7504dd4c2f289e41d608d0ad1c357" }, { "alg" : "SHA-384", "content" : "3c3e1b18e2e0ac1f4b67e17ba189c86d7f69bbf0f1bb491cb65a2a4a4efc76f695559bc61900e5ec5ad694b137547207" }, { "alg" : "SHA3-384", "content" : "1623fc11b9650912008cc32276d58c6a3a89e730f3343f4db546218a654bed959050b6a2553393a08a4779c8c36a7b18" }, { "alg" : "SHA3-256", "content" : "e5d26342451df2725301cf0ca980906e1b90c2dbbd67561e78a6fc77aafb1789" }, { "alg" : "SHA3-512", "content" : "f5199748a7503a51444711a1414ceb5034f0e8730a46a6f20dd2e71c95eaf9e0323b1f41f0b7c70f6051780ed90c6b78282b0f3ff6a302794d0be281374dd3a5" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.xmlresolver/xmlresolver@5.2.2?classifier=data&type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/xmlresolver/xmlresolver" }, { "type" : "vcs", "url" : "scm:git@github.com:xmlresolver/xmlresolver.git" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar", "publisher" : "The Apache Software Foundation", "group" : "org.apache.commons", "name" : "commons-lang3", "version" : "3.17.0", "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. The code is tested using the latest revision of the JDK for supported LTS releases: 8, 11, 17 and 21 currently. See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml Please ensure your build environment is up-to-date and kindly report any build issues.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "7730df72b7fdff4a3a32d89a314f826a" }, { "alg" : "SHA-1", "content" : "b17d2136f0460dcc0d2016ceefca8723bdf4ee70" }, { "alg" : "SHA-256", "content" : "6ee731df5c8e5a2976a1ca023b6bb320ea8d3539fbe64c8a1d5cb765127c33b4" }, { "alg" : "SHA-512", "content" : "dfd5ff7fe7f852b9caabc81e5a00e20616f98405085f059b64dc2121feb5fa6cb327e11a3d2f954c079811c31f6fd484e90f932d45078796fbfa7dbf1f1eb5aa" }, { "alg" : "SHA-384", "content" : "c6ed55a5c2b05332890a43a3ea73b30f42dc23c92ebd054a8b0d29ca8f49fb9361f7325cfa90715be457804b087221b5" }, { "alg" : "SHA3-384", "content" : "bb9e148a87928c3053bcccee361d5d8d81b3c6ea41a390d96c615afd242409f909361c945f3b4238a297e4ebb2ed413b" }, { "alg" : "SHA3-256", "content" : "f28f34565f25dd65fd1a47916e917df9e3ff2c6721897ea57391a238227c96a2" }, { "alg" : "SHA3-512", "content" : "4c8e7a5f10d091bb240e7eb59287d0e4e4420e7a2d2be2b8060111e479540ffae89040377c99ec7f458cd54e1ac0ed0778951cd1f34d5d90571b8a303fbb9baf" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://commons.apache.org/proper/commons-lang/" }, { "type" : "build-system", "url" : "https://github.com/apache/commons-parent/actions" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/LANG" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", "url" : "https://gitbox.apache.org/repos/asf?p=commons-lang.git" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.ow2.asm/asm@9.7.1?type=jar", "publisher" : "OW2", "group" : "org.ow2.asm", "name" : "asm", "version" : "9.7.1", "description" : "ASM, a very small and fast Java bytecode manipulation framework", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "e2cdd32d198ad31427d298eee9d39d8d" }, { "alg" : "SHA-1", "content" : "f0ed132a49244b042cd0e15702ab9f2ce3cc8436" }, { "alg" : "SHA-256", "content" : "8cadd43ac5eb6d09de05faecca38b917a040bb9139c7edeb4cc81c740b713281" }, { "alg" : "SHA-512", "content" : "4767b01603dad5c79cc1e2b5f3722f72b1059d928f184f446ba11badeb1b381b3a3a9a801cc43d25d396df950b09d19597c73173c411b1da890de808b94f1f50" }, { "alg" : "SHA-384", "content" : "166e2be10a19ca6a6d7cadb542eb1c948562483f02557b467a50a3d19d01318e12e5c3b495c482f3f5369be1b7f20eed" }, { "alg" : "SHA3-384", "content" : "e301862376e84df61c3547dbf637252750224fb5b74feb82f20e1527a8e3152c45f620192a9111a2db5e2f0e73ebd7ca" }, { "alg" : "SHA3-256", "content" : "7edcc4ff09b3ace15091a8c550f552a324b5cee6c1527944db5823df7eba8d64" }, { "alg" : "SHA3-512", "content" : "9d220edc5528e4d788605721490f3d29483dd4bd506765e85d781048419aa89b686a70e316b82ef2a856ead56bb7be6b5d52d77b7ca6f27d5e0e347e9669d731" } ], "licenses" : [ { "license" : { "id" : "BSD-3-Clause", "url" : "https://opensource.org/licenses/BSD-3-Clause" } } ], "purl" : "pkg:maven/org.ow2.asm/asm@9.7.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://asm.ow2.io/" }, { "type" : "distribution-intake", "url" : "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://gitlab.ow2.org/asm/asm/issues" }, { "type" : "mailing-list", "url" : "https://mail.ow2.org/wws/arc/asm/" }, { "type" : "vcs", "url" : "https://gitlab.ow2.org/asm/asm/" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.google.code.gson/gson@2.12.1?type=jar", "group" : "com.google.code.gson", "name" : "gson", "version" : "2.12.1", "description" : "Gson JSON library", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "6901ee290ab94954f46a32a30062c773" }, { "alg" : "SHA-1", "content" : "4e773a317740b83b43cfc3d652962856041697cb" }, { "alg" : "SHA-256", "content" : "ebee13d5fb7477cd7f1cc010e0c356df8ca80709715248da97f79e35ccb4fbec" }, { "alg" : "SHA-512", "content" : "fafc369544e2d4a89f32c353dcbd012410a64a315a3cae9165d4ead6f8960aef5f77ced84c374d6a09af117748adca571b0426eb0e2864f584debb59707ebc03" }, { "alg" : "SHA-384", "content" : "eb24025aba39a08bb673e538824ecaa14c45acdec5fd0f24375f746dfecbf3f328a86d1e4dc47df24394b1059ad9dfb8" }, { "alg" : "SHA3-384", "content" : "e881f0ed39f3cac50753bcae7bff488f19d2a6923d2ad44674a63b95b86c34300fd9126bfebea005d908668ec9e5fb80" }, { "alg" : "SHA3-256", "content" : "5536a5f2678a6faca03e427e8976550ba933fc60e548ed5fa92f8378013d386e" }, { "alg" : "SHA3-512", "content" : "227b91fdb9aaa5b36dfd3921a69a5bcb8848cbb16dd478f67aa4098708877d76e4cc458567e9f4079d8161a4c5d5e36c53dfcb2e0e37f86155f3e6ed65ddea2a" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/com.google.code.gson/gson@2.12.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/google/gson" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/google/gson/issues" }, { "type" : "vcs", "url" : "https://github.com/google/gson/" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.36.0?type=jar", "publisher" : "Google LLC", "group" : "com.google.errorprone", "name" : "error_prone_annotations", "version" : "2.36.0", "description" : "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "0e48e5ba2cd0a8d8d09bad849b99f6a6" }, { "alg" : "SHA-1", "content" : "227d4d4957ccc3dc5761bd897e3a0ee587e750a7" }, { "alg" : "SHA-256", "content" : "77440e270b0bc9a249903c5a076c36a722c4886ca4f42675f2903a1c53ed61a5" }, { "alg" : "SHA-512", "content" : "bd6f5650902526d3db06aa1cc7bd36723658166acfabb823aca27d0b2c3814e83ae24a8217ce915c3e194c2c696a102580b4c21ef5dba61f7610bcb8d580f566" }, { "alg" : "SHA-384", "content" : "a5cb9ba6b5bf550de90def11ec4bb014410a14949f8598856e1693e213ec0e7d2b3c6cb41b34ba8cfe209a29801de529" }, { "alg" : "SHA3-384", "content" : "00492c18861d7d4fa5517ccf2bcc5c170b575ff9fe88fdc834827d9fc8747846d6345f5270c64dc130228f53ac96f1b6" }, { "alg" : "SHA3-256", "content" : "ec8420b1f4e27c3eef932a764c4cedc8b3547e114285227ceb0612e93648ac29" }, { "alg" : "SHA3-512", "content" : "344bc9be8f3417d4bc3e9e073bff4657aace3cac73e5ace038a11f1435d04d3182f344b8237cd6b311ab0748042a4c4f84259713ec2dcbe472c75cde2e787320" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.36.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://errorprone.info/error_prone_annotations" }, { "type" : "vcs", "url" : "https://github.com/google/error-prone/error_prone_annotations" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.checkerframework/checker-qual@3.49.0?type=jar", "group" : "org.checkerframework", "name" : "checker-qual", "version" : "3.49.0", "description" : "checker-qual contains annotations (type qualifiers) that a programmerwrites to specify Java code for type-checking by the Checker Framework.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "308726c2d700ebe3d3377930adedb8c4" }, { "alg" : "SHA-1", "content" : "54be36cb42c9b991c109e467e2bfa82af4cda44e" }, { "alg" : "SHA-256", "content" : "8b9d9a36eaaf7c0fc26503c83cd97d8c9c0f9e2913cc2a6e92ac26c735d4dcbe" }, { "alg" : "SHA-512", "content" : "60e3f521c9fccfae07a03850eaf3c044311c27fbdef973db0551eeba7992f34e93ad81ef45fe84df81217498232999a9766d77f58eb33ba2a855c7978a78ad07" }, { "alg" : "SHA-384", "content" : "c8899d56ae52b186cff1ac8babb8bb25089f0f6d82ce1a1a9bd8ffe89f9436d4b79e6976843b43b099a8be1146ab11a2" }, { "alg" : "SHA3-384", "content" : "cafa3e209eff64115b04e37e01bbdd9112f3866711ef7444ad25839a0bf7b527faf226702ebe3286b9e0ab0995fec6d4" }, { "alg" : "SHA3-256", "content" : "38568e3515bdc7e7fda7168b8db0e9c26b707de85bfa45b56903f9e5bf14cb2b" }, { "alg" : "SHA3-512", "content" : "22a6d6c11854e1087624bebd7b5f5bfa875d031a74b9dec144b7e66e11c499332cf81024b79d5ecf9770bebb1feed9e73205b52484940102790456f4146d930d" } ], "licenses" : [ { "license" : { "id" : "MIT" } } ], "purl" : "pkg:maven/org.checkerframework/checker-qual@3.49.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://checkerframework.org/" }, { "type" : "vcs", "url" : "https://github.com/typetools/checker-framework.git" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.pcollections/pcollections@4.0.2?type=jar", "group" : "org.pcollections", "name" : "pcollections", "version" : "4.0.2", "description" : "A Persistent Java Collections Library", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "3bc80c4568bb9766e119df617ef8b553" }, { "alg" : "SHA-1", "content" : "c8398b4443deae11e6eaffbc04a371b4eb8f6b8e" }, { "alg" : "SHA-256", "content" : "2bbeef5797a241300c4f7513cd546239629ed7deda4fc0c31df90bb95f5f13ef" }, { "alg" : "SHA-512", "content" : "b1c87f1569c61b079fb50bf4cb0e885aefde3138ab8f1777386aa47652bf9ed359e4437ecff3c6f09e7974c10af88b6c27baaa147b95e1fd69b3fdf3fdbd4da5" }, { "alg" : "SHA-384", "content" : "a9a0266da1d32de32547431c6f1a629d697f5330a1cb85485b698958d1b5861797cc8037b8dd9cfb6979b52e51b8aede" }, { "alg" : "SHA3-384", "content" : "7971fad6691a1b90eb2729119582ee638b58a70f11c3232bd277183ce675e4c70dae63a0ba56982c87efc0bc3c2ea338" }, { "alg" : "SHA3-256", "content" : "338d7fdf8c11b4fc538c05420fb2c6426dab2209e2b1e2a20f1549277f4a4a4f" }, { "alg" : "SHA3-512", "content" : "5722d084f2f3aaa11147ce496c548647555669895d8f456d501a07ba0027a86eea44335c906efcd7a035b7a9ecc1ffe55963023b3581f3005b8acf81f7c9c7fa" } ], "licenses" : [ { "license" : { "id" : "MIT" } } ], "purl" : "pkg:maven/org.pcollections/pcollections@4.0.2?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/hrldcpr/pcollections" }, { "type" : "vcs", "url" : "https://github.com/hrldcpr/pcollections" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.github.oowekyala.ooxml/nice-xml-messages@3.1?type=jar", "group" : "com.github.oowekyala.ooxml", "name" : "nice-xml-messages", "version" : "3.1", "description" : "Associates XML DOM nodes to their position in source, to enrich error messages. This builds on top of the standard org.w3c.dom API. Should probably not be used in performance critical code, but can hopefully cleanup reporting logic in places where user-friendly messages are important.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "39c913451ff2d2ec740c58a77a26fa16" }, { "alg" : "SHA-1", "content" : "4c3863b0f015af5cfd9abe02fab364fb99867167" }, { "alg" : "SHA-256", "content" : "0b4ceb5b8362d43c9c6c49b1bd57f1c5da54d3c5c7c305fa39c0a04462bb4799" }, { "alg" : "SHA-512", "content" : "6b3e7c2f1d4b9a46c8dc113b60deee5e2a70b57f308886074816e0d7e3a5460cfb7c1c547171c0ad125deb551bafbb41b911c52db8bac448be3504b0d407a7fc" }, { "alg" : "SHA-384", "content" : "c79cd24010cfcfcc712509412dacbfb5bcc4a64e98bfd6a638698350c4f45c1a2c6724491368cc56a4d5947cbe0482e1" }, { "alg" : "SHA3-384", "content" : "218130aec89a116471d0dd34b9c733f144e36f1cbcd2b705fea4ed2f7fb90e8c6a5386aaff037bc772e180868b13c03f" }, { "alg" : "SHA3-256", "content" : "02b4007b4ada909e9bb676189310b233c8c2c254e2bdc901928030ef0f96f346" }, { "alg" : "SHA3-512", "content" : "f2e7883ab42ba31eb380ed9dc7199f3d7d4b0c0c8b06432ebe502c6e117017abdd579f86032a14bf842fb68889a13d1bd504a60a212f889e171e78003c0322a0" } ], "licenses" : [ { "license" : { "id" : "MIT", "url" : "https://opensource.org/license/mit/" } } ], "purl" : "pkg:maven/com.github.oowekyala.ooxml/nice-xml-messages@3.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/oowekyala/nice-xml-messages" }, { "type" : "distribution-intake", "url" : "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/oowekyala/nice-xml-messages" } ] } ], "dependencies" : [ { "ref" : "pkg:maven/net.sourceforge.pmd/pmd-python@7.11.0?type=jar", "dependsOn" : [ "pkg:maven/net.sourceforge.pmd/pmd-core@7.11.0?type=jar" ] }, { "ref" : "pkg:maven/net.sourceforge.pmd/pmd-core@7.11.0?type=jar", "dependsOn" : [ "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar", "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar", "pkg:maven/net.sf.saxon/Saxon-HE@12.5?type=jar", "pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar", "pkg:maven/org.ow2.asm/asm@9.7.1?type=jar", "pkg:maven/com.google.code.gson/gson@2.12.1?type=jar", "pkg:maven/org.checkerframework/checker-qual@3.49.0?type=jar", "pkg:maven/org.pcollections/pcollections@4.0.2?type=jar", "pkg:maven/com.github.oowekyala.ooxml/nice-xml-messages@3.1?type=jar" ] }, { "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar", "dependsOn" : [ "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar" ] }, { "ref" : "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/net.sf.saxon/Saxon-HE@12.5?type=jar", "dependsOn" : [ "pkg:maven/org.xmlresolver/xmlresolver@5.2.2?type=jar", "pkg:maven/org.xmlresolver/xmlresolver@5.2.2?classifier=data&type=jar" ] }, { "ref" : "pkg:maven/org.xmlresolver/xmlresolver@5.2.2?type=jar", "dependsOn" : [ "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.1.3?type=jar", "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.1.3?type=jar" ] }, { "ref" : "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.1.3?type=jar", "dependsOn" : [ "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.1.3?type=jar", "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.1.3?type=jar", "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "pkg:maven/commons-codec/commons-codec@1.15?type=jar" ] }, { "ref" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.1.3?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.1.3?type=jar", "dependsOn" : [ "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.1.3?type=jar" ] }, { "ref" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.xmlresolver/xmlresolver@5.2.2?classifier=data&type=jar", "dependsOn" : [ "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.1.3?type=jar", "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.1.3?type=jar" ] }, { "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.ow2.asm/asm@9.7.1?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.google.code.gson/gson@2.12.1?type=jar", "dependsOn" : [ "pkg:maven/com.google.errorprone/error_prone_annotations@2.36.0?type=jar" ] }, { "ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.36.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.checkerframework/checker-qual@3.49.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.pcollections/pcollections@4.0.2?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.github.oowekyala.ooxml/nice-xml-messages@3.1?type=jar", "dependsOn" : [ ] } ] }