<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:a296c4ac-8868-32dd-a258-cf3a98249de8" version="1" xmlns="http://cyclonedx.org/schema/bom/1.6">
  <metadata>
    <lifecycles>
      <lifecycle>
        <phase>build</phase>
      </lifecycle>
    </lifecycles>
    <tools>
      <components>
        <component type="library">
          <author>OWASP Foundation</author>
          <group>org.cyclonedx</group>
          <name>cyclonedx-maven-plugin</name>
          <version>2.9.1</version>
          <description>CycloneDX Maven plugin</description>
          <hashes>
            <hash alg="MD5">9c7a565cf28cce58557d0c621c5ea4b1</hash>
            <hash alg="SHA-1">be882d5a22050bfa9d19090b1420c188617d0e1c</hash>
            <hash alg="SHA-256">698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249</hash>
            <hash alg="SHA-512">c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0</hash>
            <hash alg="SHA-384">d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb</hash>
            <hash alg="SHA3-384">80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f</hash>
            <hash alg="SHA3-256">142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699</hash>
            <hash alg="SHA3-512">af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b</hash>
          </hashes>
        </component>
      </components>
    </tools>
    <component type="library" bom-ref="pkg:maven/net.sourceforge.pmd/pmd-python@7.11.0?type=jar">
      <publisher>PMD</publisher>
      <group>net.sourceforge.pmd</group>
      <name>pmd-python</name>
      <version>7.11.0</version>
      <description>PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables,
        empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and
        Apex, but supports 16 other languages. It comes with 400+ built-in rules. It can be
        extended with custom rules. It uses JavaCC and Antlr to parse source files into abstract syntax trees
        (AST) and runs rules against them to find violations. Rules can be written in Java or using a XPath query.

        Currently, PMD supports Java, JavaScript, Salesforce.com Apex and Visualforce,
        Kotlin, Swift, Modelica, PLSQL, Apache Velocity, JSP, WSDL, Maven POM, HTML, XML and XSL.
        Scala is supported, but there are currently no Scala rules available.

        Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in
        Coco, C/C++, C#, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin,
        Lua, Matlab, Modelica, Objective-C, Perl, PHP, PLSQL, Python, Ruby, Rust, Salesforce.com Apex and
        Visualforce, Scala, Swift, T-SQL, Typescript, Apache Velocity, WSDL, XML and XSL.</description>
      <licenses>
        <license>
          <name>BSD-style</name>
          <url>http://pmd.sourceforge.net/license.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/net.sourceforge.pmd/pmd-python@7.11.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://pmd.github.io/pmd-python/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/pmd/pmd/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/pmd/pmd/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://sourceforge.net/p/pmd/mailman/pmd-devel</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/pmd/pmd/pmd-python</url>
        </reference>
      </externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
      <property name="cdx:reproducible">enabled</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/net.sourceforge.pmd/pmd-core@7.11.0?type=jar">
      <publisher>PMD</publisher>
      <group>net.sourceforge.pmd</group>
      <name>pmd-core</name>
      <version>7.11.0</version>
      <description>PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables,
        empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and
        Apex, but supports 16 other languages. It comes with 400+ built-in rules. It can be
        extended with custom rules. It uses JavaCC and Antlr to parse source files into abstract syntax trees
        (AST) and runs rules against them to find violations. Rules can be written in Java or using a XPath query.

        Currently, PMD supports Java, JavaScript, Salesforce.com Apex and Visualforce,
        Kotlin, Swift, Modelica, PLSQL, Apache Velocity, JSP, WSDL, Maven POM, HTML, XML and XSL.
        Scala is supported, but there are currently no Scala rules available.

        Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in
        Coco, C/C++, C#, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin,
        Lua, Matlab, Modelica, Objective-C, Perl, PHP, PLSQL, Python, Ruby, Rust, Salesforce.com Apex and
        Visualforce, Scala, Swift, T-SQL, Typescript, Apache Velocity, WSDL, XML and XSL.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">553c6bd287088a560cd2279cb9357ec5</hash>
        <hash alg="SHA-1">da219d56b79605eadfa52f4b5855aa2c12ca74bb</hash>
        <hash alg="SHA-256">39a99a14af9a8d5a97e6e55877b5cc9bd2d82aaaf32a244645c9f5d98b42dbde</hash>
        <hash alg="SHA-512">abb8c657cd9e829d7ca771b058e0a58067c4eea08682cbeea84e46d27517fe963c3373554c9e691374c777270c9673656efed3642826eca34dec33ab89a24b94</hash>
        <hash alg="SHA-384">2f3ac0c338f5e95b5ebeed3b7b952bb114271694f5dfa8f3f303c6fdd227820e713c987a05561770c403e82787828599</hash>
        <hash alg="SHA3-384">e82e750a43b66146d7283c920d9717e63f510b63a6233cbca2cd8c26bd1dbc5ebc06968d728a5a7e7bc856857cd9495a</hash>
        <hash alg="SHA3-256">e567dd287392c40ac6cbf7b7516f52f1943d02f1862c5f8a2828ae40d1d0f21f</hash>
        <hash alg="SHA3-512">2595a758908651a5e6329cb3e963dc33216184dcacdb817269a4aa4444eab54aebbe3af81a027e252d9c88f77a4fe1528f831aa75ee38e8685be648bf437d690</hash>
      </hashes>
      <licenses>
        <license>
          <name>BSD-style</name>
          <url>http://pmd.sourceforge.net/license.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/net.sourceforge.pmd/pmd-core@7.11.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://pmd.github.io/pmd-core/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/pmd/pmd/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/pmd/pmd/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://sourceforge.net/p/pmd/mailman/pmd-devel</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/pmd/pmd/pmd-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>1.7.36</version>
      <description>The slf4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">872da51f5de7f3923da4de871d57fd85</hash>
        <hash alg="SHA-1">6c62681a2f655b49963a5983b8b0950a6120ae14</hash>
        <hash alg="SHA-256">d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0</hash>
        <hash alg="SHA-512">f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b</hash>
        <hash alg="SHA-384">2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a</hash>
        <hash alg="SHA3-384">3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b</hash>
        <hash alg="SHA3-256">ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881</hash>
        <hash alg="SHA3-512">14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/license/mit/</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.slf4j.org</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/qos-ch/slf4j/slf4j-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>jul-to-slf4j</name>
      <version>1.7.36</version>
      <description>JUL to SLF4J bridge</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2a3fe73e6cafe8f102facaf2dd65353f</hash>
        <hash alg="SHA-1">ed46d81cef9c412a88caef405b58f93a678ff2ca</hash>
        <hash alg="SHA-256">9e641fb142c5f0b0623d6222c09ea87523a41bf6bed48ac79940724010b989de</hash>
        <hash alg="SHA-512">0bb1e7343d07d41bcfb0c1ffeb2db28cbb35e7a80a409b80042f463b082a292976f09d719e319471e31c7bab716121728a16509fd385fc6e3b400b1b214cffea</hash>
        <hash alg="SHA-384">50e2f326fc00537a5fb3726c7c55556851b3be8b4346f522f27ddecf2fdb44adabae3197b30ccfd854c37d6734adbd8f</hash>
        <hash alg="SHA3-384">4ad0c3870852ac44530a9dcb992d947cd8708ee6f422559da41aaaa8b22d1610fb116b32d2c54df83b110b85487083bf</hash>
        <hash alg="SHA3-256">8e3f5aaaa27f618b52e610376d2a16c6f9dc8dce5e6c2bbe42131a590626aae6</hash>
        <hash alg="SHA3-512">e3da265406b5e69f02235ed7272a48f71cb8b6f0a696820e28e90fb5eafeeb311abf2a4e779b402f384c6a80470fd41116ee52a526f57040fae3b24cb3b19c01</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/license/mit/</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.slf4j.org</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/qos-ch/slf4j/jul-to-slf4j</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar">
      <publisher>ANTLR</publisher>
      <group>org.antlr</group>
      <name>antlr4-runtime</name>
      <version>4.9.3</version>
      <description>The ANTLR 4 Runtime</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">718f199bafa6574ffa1111fa3e10276a</hash>
        <hash alg="SHA-1">81befc16ebedb8b8aea3e4c0835dd5ca7e8523a8</hash>
        <hash alg="SHA-256">131a6594969bc4f321d652ea2a33bc0e378ca312685ef87791b2c60b29d01ea5</hash>
        <hash alg="SHA-512">2c3763a8fbc7af110df5d6bb57692759b23e8bf961a53694c69bde4cd9d8c3a8eaa55cf376ce34c6c4e2035a99d7abf08c6ffa3b75d18a6d93a9c1ca95927ea8</hash>
        <hash alg="SHA-384">62a62dab4a27733a810b97fe5544eb1b5b25d2df83ea8d93802cb0e6fd1b4b3ca5a130c51aa9198deefc30cd0f062841</hash>
        <hash alg="SHA3-384">e2919d471a5b4fa318cd34d4a9fa5a9e1fa4ed37e0ee34c72031f950c447c16df828cbe96635e525859153080b97510b</hash>
        <hash alg="SHA3-256">70c29f56fa10bfccfd47623ca6e9d3625e1b81da7b0e57269def1d6f84c5cd6e</hash>
        <hash alg="SHA3-512">1a80c6cc4e5cd8e1455717e6d9fc3ab7937eb23f907e4189358f4b2f3eb14475689c02a8258419f6956feaf6da0c0c5cdcfb9300f91efef2f5bfbabac092386c</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-4-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.antlr.org/antlr4-runtime</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/antlr/antlr4/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://groups.google.com/forum/?fromgroups#!forum/antlr-discussion</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/antlr/antlr4/tree/master/antlr4-runtime</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.sf.saxon/Saxon-HE@12.5?type=jar">
      <publisher>Saxonica</publisher>
      <group>net.sf.saxon</group>
      <name>Saxon-HE</name>
      <version>12.5</version>
      <description>The XSLT and XQuery Processor</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">39b53a0dcd01522e79223e2506061d44</hash>
        <hash alg="SHA-1">57c007520e2879387b8d13d0a512e9566eeffa73</hash>
        <hash alg="SHA-256">98c3a91e6e5aaf9b3e2b37601e04b214a6e67098493cdd8232fcb705fddcb674</hash>
        <hash alg="SHA-512">f8385b52b9de03bbbcfd9900b78d7e1b544102900316d8d95b5f36b75b6f8f492cee7a1ecf737bd0b4caf85d79c003996f83ac156739d60e4d41edd5ef43a182</hash>
        <hash alg="SHA-384">1e08a834684848bfb6c8029b98d2c8f5634acba483c6cd783aa753a15551c48e32fe718c72abdbb1114bab6e8cbf654d</hash>
        <hash alg="SHA3-384">89a7d4688edba721f2960ed5a1d572cf9cf83b6d3d71987ef9b8d4a1b00fbcb47f7f6469d8d14cae2ea3eb8b63841a4d</hash>
        <hash alg="SHA3-256">b963a7cb8580e362ee06b8fbd395016900a9842fa03f6f38106544259ebfc464</hash>
        <hash alg="SHA3-512">f47e8e8922b657d8190b391178fc86b4808b0c1d40cdc4de8231cefd619d645de971d9b0e33c8da8c25de5cb4f558861cbed77839dd619f4f4f4317378cbdb3d</hash>
      </hashes>
      <licenses>
        <license>
          <id>MPL-2.0</id>
          <url>https://www.mozilla.org/MPL/2.0/</url>
        </license>
      </licenses>
      <purl>pkg:maven/net.sf.saxon/Saxon-HE@12.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.saxonica.com/</url>
        </reference>
        <reference type="vcs">
          <url>https://saxonica.plan.io/projects/saxonmirrorhe/repository</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.xmlresolver/xmlresolver@5.2.2?type=jar">
      <group>org.xmlresolver</group>
      <name>xmlresolver</name>
      <version>5.2.2</version>
      <description>An XML entity/uri resolver</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0de20e8f7acfa5942d78c239d3034deb</hash>
        <hash alg="SHA-1">152378e04ba01898847bf38fad5023c7d52f0c9d</hash>
        <hash alg="SHA-256">efc92bd7ed32b3e57095e0b3e872051ccfbbdcc980831ef33e89e38161a85222</hash>
        <hash alg="SHA-512">4213b91ddf162a2ee0515f823d859333fa475b84675277bf657eff03162eff4b91660313ce8c19fa9f30b02e2002d87cf06c492e4c303448a96b577b6928f3c0</hash>
        <hash alg="SHA-384">f093746aa8a39a5d1309fe7d14315ce851d649fe3700d2ec49013947d701c33345e32e4a4306d1475e266487b7ba0169</hash>
        <hash alg="SHA3-384">a0eb7e9622c96a0dfbd141030b33b24e796e9ae438befde00a77629408a07d855d681f93b0fb052e19e762f5f170c77b</hash>
        <hash alg="SHA3-256">d808c261e2be19a82e25034d0a21cf40bad78eabdfba3bc6ff93f0f91ac30397</hash>
        <hash alg="SHA3-512">e53fd7e8cc1f17144ac3667667d32a7a6fc21f7b7f7dce715590533f5d276e10be768156338d5e878c47d1e880f9e4799f18f289e00bfa155d45571d02787899</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.xmlresolver/xmlresolver@5.2.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/xmlresolver/xmlresolver</url>
        </reference>
        <reference type="vcs">
          <url>scm:git@github.com:xmlresolver/xmlresolver.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.1.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.httpcomponents.client5</group>
      <name>httpclient5</name>
      <version>5.1.3</version>
      <description>Apache HttpComponents Client</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">757bfb86277b9b11798db8fdb351bf74</hash>
        <hash alg="SHA-1">13c984b7b881afcff3a7f0bb95878724a48a4b66</hash>
        <hash alg="SHA-256">28c759254f4e35319e078bb6ffea75676608dc12cb243b24fb3c8732522977fe</hash>
        <hash alg="SHA-512">4fb38b6bf164103e68320ce430776915a6831923eb3e0b6e6f29ff57647e6bd29efc07d46b107aec23bf9004cfd959fbda8153740ba0060260a54d67ccf8a093</hash>
        <hash alg="SHA-384">8e6c7bc00b5e25c564faa6f20d01b26288163de846273943bdc7a043348cbe4a5540dc875ed057054c2af5c6e10f8147</hash>
        <hash alg="SHA3-384">ecfe2613d27758859bfadc02b97b073b5ca74c2e983198c949851c2d287de00e85d4c1c822329e63a38617f85ff281fb</hash>
        <hash alg="SHA3-256">29df48d822099ef07e6687f12acdecd8f22dcfe84106667183d6790bbc9ed121</hash>
        <hash alg="SHA3-512">46cafa187fb940370f545efc73ff7d160d9b54810a9556d13c4e0010b44a0155e0cfad0251fb030f0cbae2d2108a6ef0ac918c32b3ad6d6dc2da1a360815b564</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.1.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://hc.apache.org/httpcomponents-client-5.0.x/5.1.3/httpclient5/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/HTTPCLIENT</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?httpclient-users@hc.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/httpcomponents-client/tree/5.1.3/httpclient5</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.1.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.httpcomponents.core5</group>
      <name>httpcore5-h2</name>
      <version>5.1.3</version>
      <description>Apache HttpComponents HTTP/2 Core Components</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e12cc9746f6635675a408e641c95b177</hash>
        <hash alg="SHA-1">4664b59b09f5ee008e37a963bbb92f4068e91696</hash>
        <hash alg="SHA-256">d0e78ba15aa8ebe77982b660ac4b09a95d6e035dbdbea762577dc1c8e2935807</hash>
        <hash alg="SHA-512">76a22785285a3c12a98db24d678f1fd695cb4941be438fd80a7c41b4fbf804452694f93947579aba3bcee652671e362ae6d76bfb60a8db75518e52aba4ddad36</hash>
        <hash alg="SHA-384">cfead6178cd1cc30fcd9da2f8753897a2039e7915eded3278fb74545a49db68a10860ed064e9f52d0f1526e3cd7caa35</hash>
        <hash alg="SHA3-384">d98a2ba3eaf1eb38629e2d02eb6b31e4e4b2290c321bd58c0377ad4427a969b881d6b31cf8afdc8b9e306ef8d7d39439</hash>
        <hash alg="SHA3-256">7114b9fd4612be12d156312568633e13745c8bd3da7c28af60373a70f31875b5</hash>
        <hash alg="SHA3-512">3f32c0564b4af84b886df450df91498523c40ba6bf98354413ff3f4c85f782cd2a3cd9e6ef2f38c18a79ecb8c444326c7b043feb5fc3f8cafe043e9217362255</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.1.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://hc.apache.org/httpcomponents-core-5.1.x/5.1.3/httpcore5-h2/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/HTTPCORE</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?httpclient-users@hc.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/httpcomponents-core/tree/5.1.3/httpcore5-h2</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-codec</group>
      <name>commons-codec</name>
      <version>1.15</version>
      <description>The Apache Commons Codec package contains simple encoder and decoders for
     various formats such as Base64 and Hexadecimal.  In addition to these
     widely used encoders and decoders, the codec package also maintains a
     collection of phonetic encoding utilities.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">303baf002ce6d382198090aedd9d79a2</hash>
        <hash alg="SHA-1">49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d</hash>
        <hash alg="SHA-256">b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63</hash>
        <hash alg="SHA-512">da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787</hash>
        <hash alg="SHA-384">05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0</hash>
        <hash alg="SHA3-384">12fad4ef78274b06f97b1243cea6f970088abde082d2de9377d915a34b44f7d7d67807c03e59c849b69f1544e2a9a1be</hash>
        <hash alg="SHA3-256">87be248f33f241121f54aad61a9a460a79eabefbf1b5b0dd22aeb95b581f727e</hash>
        <hash alg="SHA3-512">8c992c9c569ebaa0bf956a4c5b34fbf5e1ed1c212c2dd896fa216183ee0bcd341e96698af4b9cec7e8880762faa081a3d3a27f51349aa457cb8e373e4f57c788</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-codec/commons-codec@1.15?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-codec/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CODEC</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/commons-codec</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.1.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.httpcomponents.core5</group>
      <name>httpcore5</name>
      <version>5.1.3</version>
      <description>Apache HttpComponents HTTP/1.1 core components</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e3311847fc70a84038fb2c079dd08c4a</hash>
        <hash alg="SHA-1">d1638d1e5f2793f187d4144c702a93524ba6fd3b</hash>
        <hash alg="SHA-256">f2bf2f2c7772169c9e30699719667ad30f9b46c4e9d7841907deb2d12d9923fe</hash>
        <hash alg="SHA-512">c9b439da0fb0124f37676686c69f8fdb824a30e0d6a3b9ebc0ebca5555727ae18cc5a146d8874b4cfe6fa966d5eb6083a44c379a76017ec79863596a23c571b3</hash>
        <hash alg="SHA-384">63d37103c0b040ed9f0c70af0bcc9792c68afe8c7da5f445f30458c7c802524f07a1bdb573661e680955a257e0fb6b4c</hash>
        <hash alg="SHA3-384">5ddd51ea89b40049c0b92bdfd0fc59fd2963c025895bece1b9438166e9e468b8b54694e9e72a8d026f681ec92824f224</hash>
        <hash alg="SHA3-256">0a1d52398f2a13124591cc6fce1fee5f353c29c9726b4f68813b01f077940947</hash>
        <hash alg="SHA3-512">eecbd33885bb1718a1803951d9217b108e42e39cedfeac99bd0938cec94674b1c67d6f4d6141c8e225061a51a1ac3af07f553501ff2b136e358a3eeffbcd3ea9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.1.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://hc.apache.org/httpcomponents-core-5.1.x/5.1.3/httpcore5/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/HTTPCORE</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?httpclient-users@hc.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/httpcomponents-core/tree/5.1.3/httpcore5</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.xmlresolver/xmlresolver@5.2.2?classifier=data&amp;type=jar">
      <group>org.xmlresolver</group>
      <name>xmlresolver</name>
      <version>5.2.2</version>
      <description>An XML entity/uri resolver</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0e77f628aa613bbe3145c6a24f8973f3</hash>
        <hash alg="SHA-1">5624ede8b8e374979194acaae9f34cff23b62b3e</hash>
        <hash alg="SHA-256">173904bdbd783ba0fac92c5bcc05da5d09f0ce7eed24346666ea0a239461f9b4</hash>
        <hash alg="SHA-512">18f9f0ab3426800c82a707bf5e85a281955695fc703dc6c80c055227e5b78d825329f6b0eee0605b80c3c5cc33c7b81056a7504dd4c2f289e41d608d0ad1c357</hash>
        <hash alg="SHA-384">3c3e1b18e2e0ac1f4b67e17ba189c86d7f69bbf0f1bb491cb65a2a4a4efc76f695559bc61900e5ec5ad694b137547207</hash>
        <hash alg="SHA3-384">1623fc11b9650912008cc32276d58c6a3a89e730f3343f4db546218a654bed959050b6a2553393a08a4779c8c36a7b18</hash>
        <hash alg="SHA3-256">e5d26342451df2725301cf0ca980906e1b90c2dbbd67561e78a6fc77aafb1789</hash>
        <hash alg="SHA3-512">f5199748a7503a51444711a1414ceb5034f0e8730a46a6f20dd2e71c95eaf9e0323b1f41f0b7c70f6051780ed90c6b78282b0f3ff6a302794d0be281374dd3a5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.xmlresolver/xmlresolver@5.2.2?classifier=data&amp;type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/xmlresolver/xmlresolver</url>
        </reference>
        <reference type="vcs">
          <url>scm:git@github.com:xmlresolver/xmlresolver.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-lang3</name>
      <version>3.17.0</version>
      <description>Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.

  The code is tested using the latest revision of the JDK for supported
  LTS releases: 8, 11, 17 and 21 currently.
  See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml
  
  Please ensure your build environment is up-to-date and kindly report any build issues.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7730df72b7fdff4a3a32d89a314f826a</hash>
        <hash alg="SHA-1">b17d2136f0460dcc0d2016ceefca8723bdf4ee70</hash>
        <hash alg="SHA-256">6ee731df5c8e5a2976a1ca023b6bb320ea8d3539fbe64c8a1d5cb765127c33b4</hash>
        <hash alg="SHA-512">dfd5ff7fe7f852b9caabc81e5a00e20616f98405085f059b64dc2121feb5fa6cb327e11a3d2f954c079811c31f6fd484e90f932d45078796fbfa7dbf1f1eb5aa</hash>
        <hash alg="SHA-384">c6ed55a5c2b05332890a43a3ea73b30f42dc23c92ebd054a8b0d29ca8f49fb9361f7325cfa90715be457804b087221b5</hash>
        <hash alg="SHA3-384">bb9e148a87928c3053bcccee361d5d8d81b3c6ea41a390d96c615afd242409f909361c945f3b4238a297e4ebb2ed413b</hash>
        <hash alg="SHA3-256">f28f34565f25dd65fd1a47916e917df9e3ff2c6721897ea57391a238227c96a2</hash>
        <hash alg="SHA3-512">4c8e7a5f10d091bb240e7eb59287d0e4e4420e7a2d2be2b8060111e479540ffae89040377c99ec7f458cd54e1ac0ed0778951cd1f34d5d90571b8a303fbb9baf</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-lang/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-parent/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/LANG</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=commons-lang.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.ow2.asm/asm@9.7.1?type=jar">
      <publisher>OW2</publisher>
      <group>org.ow2.asm</group>
      <name>asm</name>
      <version>9.7.1</version>
      <description>ASM, a very small and fast Java bytecode manipulation framework</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e2cdd32d198ad31427d298eee9d39d8d</hash>
        <hash alg="SHA-1">f0ed132a49244b042cd0e15702ab9f2ce3cc8436</hash>
        <hash alg="SHA-256">8cadd43ac5eb6d09de05faecca38b917a040bb9139c7edeb4cc81c740b713281</hash>
        <hash alg="SHA-512">4767b01603dad5c79cc1e2b5f3722f72b1059d928f184f446ba11badeb1b381b3a3a9a801cc43d25d396df950b09d19597c73173c411b1da890de808b94f1f50</hash>
        <hash alg="SHA-384">166e2be10a19ca6a6d7cadb542eb1c948562483f02557b467a50a3d19d01318e12e5c3b495c482f3f5369be1b7f20eed</hash>
        <hash alg="SHA3-384">e301862376e84df61c3547dbf637252750224fb5b74feb82f20e1527a8e3152c45f620192a9111a2db5e2f0e73ebd7ca</hash>
        <hash alg="SHA3-256">7edcc4ff09b3ace15091a8c550f552a324b5cee6c1527944db5823df7eba8d64</hash>
        <hash alg="SHA3-512">9d220edc5528e4d788605721490f3d29483dd4bd506765e85d781048419aa89b686a70e316b82ef2a856ead56bb7be6b5d52d77b7ca6f27d5e0e347e9669d731</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
          <url>https://opensource.org/licenses/BSD-3-Clause</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.ow2.asm/asm@9.7.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://asm.ow2.io/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.ow2.org/nexus/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://gitlab.ow2.org/asm/asm/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail.ow2.org/wws/arc/asm/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitlab.ow2.org/asm/asm/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.code.gson/gson@2.12.1?type=jar">
      <group>com.google.code.gson</group>
      <name>gson</name>
      <version>2.12.1</version>
      <description>Gson JSON library</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6901ee290ab94954f46a32a30062c773</hash>
        <hash alg="SHA-1">4e773a317740b83b43cfc3d652962856041697cb</hash>
        <hash alg="SHA-256">ebee13d5fb7477cd7f1cc010e0c356df8ca80709715248da97f79e35ccb4fbec</hash>
        <hash alg="SHA-512">fafc369544e2d4a89f32c353dcbd012410a64a315a3cae9165d4ead6f8960aef5f77ced84c374d6a09af117748adca571b0426eb0e2864f584debb59707ebc03</hash>
        <hash alg="SHA-384">eb24025aba39a08bb673e538824ecaa14c45acdec5fd0f24375f746dfecbf3f328a86d1e4dc47df24394b1059ad9dfb8</hash>
        <hash alg="SHA3-384">e881f0ed39f3cac50753bcae7bff488f19d2a6923d2ad44674a63b95b86c34300fd9126bfebea005d908668ec9e5fb80</hash>
        <hash alg="SHA3-256">5536a5f2678a6faca03e427e8976550ba933fc60e548ed5fa92f8378013d386e</hash>
        <hash alg="SHA3-512">227b91fdb9aaa5b36dfd3921a69a5bcb8848cbb16dd478f67aa4098708877d76e4cc458567e9f4079d8161a4c5d5e36c53dfcb2e0e37f86155f3e6ed65ddea2a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.code.gson/gson@2.12.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/google/gson</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/google/gson/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/google/gson/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.36.0?type=jar">
      <publisher>Google LLC</publisher>
      <group>com.google.errorprone</group>
      <name>error_prone_annotations</name>
      <version>2.36.0</version>
      <description>Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0e48e5ba2cd0a8d8d09bad849b99f6a6</hash>
        <hash alg="SHA-1">227d4d4957ccc3dc5761bd897e3a0ee587e750a7</hash>
        <hash alg="SHA-256">77440e270b0bc9a249903c5a076c36a722c4886ca4f42675f2903a1c53ed61a5</hash>
        <hash alg="SHA-512">bd6f5650902526d3db06aa1cc7bd36723658166acfabb823aca27d0b2c3814e83ae24a8217ce915c3e194c2c696a102580b4c21ef5dba61f7610bcb8d580f566</hash>
        <hash alg="SHA-384">a5cb9ba6b5bf550de90def11ec4bb014410a14949f8598856e1693e213ec0e7d2b3c6cb41b34ba8cfe209a29801de529</hash>
        <hash alg="SHA3-384">00492c18861d7d4fa5517ccf2bcc5c170b575ff9fe88fdc834827d9fc8747846d6345f5270c64dc130228f53ac96f1b6</hash>
        <hash alg="SHA3-256">ec8420b1f4e27c3eef932a764c4cedc8b3547e114285227ceb0612e93648ac29</hash>
        <hash alg="SHA3-512">344bc9be8f3417d4bc3e9e073bff4657aace3cac73e5ace038a11f1435d04d3182f344b8237cd6b311ab0748042a4c4f84259713ec2dcbe472c75cde2e787320</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.errorprone/error_prone_annotations@2.36.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://errorprone.info/error_prone_annotations</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/google/error-prone/error_prone_annotations</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.checkerframework/checker-qual@3.49.0?type=jar">
      <group>org.checkerframework</group>
      <name>checker-qual</name>
      <version>3.49.0</version>
      <description>checker-qual contains annotations (type qualifiers) that a programmerwrites to specify Java code for type-checking by the Checker Framework.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">308726c2d700ebe3d3377930adedb8c4</hash>
        <hash alg="SHA-1">54be36cb42c9b991c109e467e2bfa82af4cda44e</hash>
        <hash alg="SHA-256">8b9d9a36eaaf7c0fc26503c83cd97d8c9c0f9e2913cc2a6e92ac26c735d4dcbe</hash>
        <hash alg="SHA-512">60e3f521c9fccfae07a03850eaf3c044311c27fbdef973db0551eeba7992f34e93ad81ef45fe84df81217498232999a9766d77f58eb33ba2a855c7978a78ad07</hash>
        <hash alg="SHA-384">c8899d56ae52b186cff1ac8babb8bb25089f0f6d82ce1a1a9bd8ffe89f9436d4b79e6976843b43b099a8be1146ab11a2</hash>
        <hash alg="SHA3-384">cafa3e209eff64115b04e37e01bbdd9112f3866711ef7444ad25839a0bf7b527faf226702ebe3286b9e0ab0995fec6d4</hash>
        <hash alg="SHA3-256">38568e3515bdc7e7fda7168b8db0e9c26b707de85bfa45b56903f9e5bf14cb2b</hash>
        <hash alg="SHA3-512">22a6d6c11854e1087624bebd7b5f5bfa875d031a74b9dec144b7e66e11c499332cf81024b79d5ecf9770bebb1feed9e73205b52484940102790456f4146d930d</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.checkerframework/checker-qual@3.49.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://checkerframework.org/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/typetools/checker-framework.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.pcollections/pcollections@4.0.2?type=jar">
      <group>org.pcollections</group>
      <name>pcollections</name>
      <version>4.0.2</version>
      <description>A Persistent Java Collections Library</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3bc80c4568bb9766e119df617ef8b553</hash>
        <hash alg="SHA-1">c8398b4443deae11e6eaffbc04a371b4eb8f6b8e</hash>
        <hash alg="SHA-256">2bbeef5797a241300c4f7513cd546239629ed7deda4fc0c31df90bb95f5f13ef</hash>
        <hash alg="SHA-512">b1c87f1569c61b079fb50bf4cb0e885aefde3138ab8f1777386aa47652bf9ed359e4437ecff3c6f09e7974c10af88b6c27baaa147b95e1fd69b3fdf3fdbd4da5</hash>
        <hash alg="SHA-384">a9a0266da1d32de32547431c6f1a629d697f5330a1cb85485b698958d1b5861797cc8037b8dd9cfb6979b52e51b8aede</hash>
        <hash alg="SHA3-384">7971fad6691a1b90eb2729119582ee638b58a70f11c3232bd277183ce675e4c70dae63a0ba56982c87efc0bc3c2ea338</hash>
        <hash alg="SHA3-256">338d7fdf8c11b4fc538c05420fb2c6426dab2209e2b1e2a20f1549277f4a4a4f</hash>
        <hash alg="SHA3-512">5722d084f2f3aaa11147ce496c548647555669895d8f456d501a07ba0027a86eea44335c906efcd7a035b7a9ecc1ffe55963023b3581f3005b8acf81f7c9c7fa</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.pcollections/pcollections@4.0.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/hrldcpr/pcollections</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/hrldcpr/pcollections</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.github.oowekyala.ooxml/nice-xml-messages@3.1?type=jar">
      <group>com.github.oowekyala.ooxml</group>
      <name>nice-xml-messages</name>
      <version>3.1</version>
      <description>Associates XML DOM nodes to their position in source, to enrich error messages.
        This builds on top of the standard org.w3c.dom API. Should probably not be used
        in performance critical code, but can hopefully cleanup reporting logic in places
        where user-friendly messages are important.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">39c913451ff2d2ec740c58a77a26fa16</hash>
        <hash alg="SHA-1">4c3863b0f015af5cfd9abe02fab364fb99867167</hash>
        <hash alg="SHA-256">0b4ceb5b8362d43c9c6c49b1bd57f1c5da54d3c5c7c305fa39c0a04462bb4799</hash>
        <hash alg="SHA-512">6b3e7c2f1d4b9a46c8dc113b60deee5e2a70b57f308886074816e0d7e3a5460cfb7c1c547171c0ad125deb551bafbb41b911c52db8bac448be3504b0d407a7fc</hash>
        <hash alg="SHA-384">c79cd24010cfcfcc712509412dacbfb5bcc4a64e98bfd6a638698350c4f45c1a2c6724491368cc56a4d5947cbe0482e1</hash>
        <hash alg="SHA3-384">218130aec89a116471d0dd34b9c733f144e36f1cbcd2b705fea4ed2f7fb90e8c6a5386aaff037bc772e180868b13c03f</hash>
        <hash alg="SHA3-256">02b4007b4ada909e9bb676189310b233c8c2c254e2bdc901928030ef0f96f346</hash>
        <hash alg="SHA3-512">f2e7883ab42ba31eb380ed9dc7199f3d7d4b0c0c8b06432ebe502c6e117017abdd579f86032a14bf842fb68889a13d1bd504a60a212f889e171e78003c0322a0</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/license/mit/</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.github.oowekyala.ooxml/nice-xml-messages@3.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/oowekyala/nice-xml-messages</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/oowekyala/nice-xml-messages</url>
        </reference>
      </externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-python@7.11.0?type=jar">
      <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-core@7.11.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/net.sourceforge.pmd/pmd-core@7.11.0?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar"/>
      <dependency ref="pkg:maven/net.sf.saxon/Saxon-HE@12.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar"/>
      <dependency ref="pkg:maven/org.ow2.asm/asm@9.7.1?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.gson/gson@2.12.1?type=jar"/>
      <dependency ref="pkg:maven/org.checkerframework/checker-qual@3.49.0?type=jar"/>
      <dependency ref="pkg:maven/org.pcollections/pcollections@4.0.2?type=jar"/>
      <dependency ref="pkg:maven/com.github.oowekyala.ooxml/nice-xml-messages@3.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    <dependency ref="pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar"/>
    <dependency ref="pkg:maven/net.sf.saxon/Saxon-HE@12.5?type=jar">
      <dependency ref="pkg:maven/org.xmlresolver/xmlresolver@5.2.2?type=jar"/>
      <dependency ref="pkg:maven/org.xmlresolver/xmlresolver@5.2.2?classifier=data&amp;type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.xmlresolver/xmlresolver@5.2.2?type=jar">
      <dependency ref="pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.1.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.1.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.1.3?type=jar">
      <dependency ref="pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.1.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.1.3?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.1.3?type=jar"/>
    <dependency ref="pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.1.3?type=jar">
      <dependency ref="pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.1.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar"/>
    <dependency ref="pkg:maven/org.xmlresolver/xmlresolver@5.2.2?classifier=data&amp;type=jar">
      <dependency ref="pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.1.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.1.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar"/>
    <dependency ref="pkg:maven/org.ow2.asm/asm@9.7.1?type=jar"/>
    <dependency ref="pkg:maven/com.google.code.gson/gson@2.12.1?type=jar">
      <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.36.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.36.0?type=jar"/>
    <dependency ref="pkg:maven/org.checkerframework/checker-qual@3.49.0?type=jar"/>
    <dependency ref="pkg:maven/org.pcollections/pcollections@4.0.2?type=jar"/>
    <dependency ref="pkg:maven/com.github.oowekyala.ooxml/nice-xml-messages@3.1?type=jar"/>
  </dependencies>
</bom>
