{ "bomFormat" : "CycloneDX", "specVersion" : "1.6", "serialNumber" : "urn:uuid:015e47e2-ce3b-34f2-ae3f-76d61191d322", "version" : 1, "metadata" : { "lifecycles" : [ { "phase" : "build" } ], "tools" : { "components" : [ { "type" : "library", "author" : "OWASP Foundation", "group" : "org.cyclonedx", "name" : "cyclonedx-maven-plugin", "version" : "2.9.1", "description" : "CycloneDX Maven plugin", "hashes" : [ { "alg" : "MD5", "content" : "9c7a565cf28cce58557d0c621c5ea4b1" }, { "alg" : "SHA-1", "content" : "be882d5a22050bfa9d19090b1420c188617d0e1c" }, { "alg" : "SHA-256", "content" : "698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249" }, { "alg" : "SHA-512", "content" : "c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0" }, { "alg" : "SHA-384", "content" : "d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb" }, { "alg" : "SHA3-384", "content" : "80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f" }, { "alg" : "SHA3-256", "content" : "142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699" }, { "alg" : "SHA3-512", "content" : "af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b" } ] } ] }, "component" : { "type" : "library", "bom-ref" : "pkg:maven/net.sourceforge.pmd/pmd-python@7.14.0?type=jar", "publisher" : "PMD", "group" : "net.sourceforge.pmd", "name" : "pmd-python", "version" : "7.14.0", "description" : "PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex, but supports 16 other languages. It comes with 400+ built-in rules. It can be extended with custom rules. It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations. Rules can be written in Java or using a XPath query. Currently, PMD supports Java, JavaScript, Salesforce.com Apex and Visualforce, Kotlin, Swift, Modelica, PLSQL, Apache Velocity, JSP, WSDL, Maven POM, HTML, XML and XSL. Scala is supported, but there are currently no Scala rules available. Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in Coco, C/C++, C#, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica, Objective-C, Perl, PHP, PLSQL, Python, Ruby, Rust, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript, Apache Velocity, WSDL, XML and XSL.", "licenses" : [ { "license" : { "name" : "BSD-style", "url" : "http://pmd.sourceforge.net/license.html" } } ], "purl" : "pkg:maven/net.sourceforge.pmd/pmd-python@7.14.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://pmd.github.io/pmd-python/" }, { "type" : "build-system", "url" : "https://github.com/pmd/pmd/actions" }, { "type" : "issue-tracker", "url" : "https://github.com/pmd/pmd/issues" }, { "type" : "mailing-list", "url" : "https://sourceforge.net/p/pmd/mailman/pmd-devel" }, { "type" : "vcs", "url" : "https://github.com/pmd/pmd/pmd-python" } ] }, "properties" : [ { "name" : "maven.goal", "value" : "makeBom" }, { "name" : "maven.scopes", "value" : "compile,provided,runtime,system" }, { "name" : "cdx:reproducible", "value" : "enabled" } ] }, "components" : [ { "type" : "library", "bom-ref" : "pkg:maven/net.sourceforge.pmd/pmd-core@7.14.0?type=jar", "publisher" : "PMD", "group" : "net.sourceforge.pmd", "name" : "pmd-core", "version" : "7.14.0", "description" : "PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex, but supports 16 other languages. It comes with 400+ built-in rules. It can be extended with custom rules. It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations. Rules can be written in Java or using a XPath query. Currently, PMD supports Java, JavaScript, Salesforce.com Apex and Visualforce, Kotlin, Swift, Modelica, PLSQL, Apache Velocity, JSP, WSDL, Maven POM, HTML, XML and XSL. Scala is supported, but there are currently no Scala rules available. Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in Coco, C/C++, C#, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica, Objective-C, Perl, PHP, PLSQL, Python, Ruby, Rust, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript, Apache Velocity, WSDL, XML and XSL.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "126bca122422eedccaba9f9ee151fbe9" }, { "alg" : "SHA-1", "content" : "3fd52cafe3b697a050d5be0ff406716ae7a228d7" }, { "alg" : "SHA-256", "content" : "8938b68d3a71d33fb55e1996d263761ca7d3a85c08a7088823daa52da2395aa8" }, { "alg" : "SHA-512", "content" : "dcbc9d4517a4b1d73d5de9e10d821860033a9595b7aaf4863ca0d36bdc8e72821689e0ec10103b298080bbd2b2edee5d627154c8554a70a7bc8ebc3a8d18c0c0" }, { "alg" : "SHA-384", "content" : "18a2b9ab258c815f32e7ad9f5d1a5593413afdf6bef1df9a96da4683b3736d35a5d549169b03f6bf187043081944236e" }, { "alg" : "SHA3-384", "content" : "5eeed55906dbc03dba7aa25c5003e16ece0dc29174b8f1d5dea3d7e40b259365924a8e2ac9c347611d27dd779da9913e" }, { "alg" : "SHA3-256", "content" : "58a9c9609d26cc94b220c3635f55170889789b3e40c364a0e3b7795869ad1b0a" }, { "alg" : "SHA3-512", "content" : "f0298b98f39a024e9436a76756465f0d5adff7ede75566a9acc7dcf4cf30add2c198c9ce4acdfcfb0a842925f84a5ba98536a4f88560f879af679751ffbb9ec8" } ], "licenses" : [ { "license" : { "name" : "BSD-style", "url" : "http://pmd.sourceforge.net/license.html" } } ], "purl" : "pkg:maven/net.sourceforge.pmd/pmd-core@7.14.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://pmd.github.io/pmd-core/" }, { "type" : "build-system", "url" : "https://github.com/pmd/pmd/actions" }, { "type" : "issue-tracker", "url" : "https://github.com/pmd/pmd/issues" }, { "type" : "mailing-list", "url" : "https://sourceforge.net/p/pmd/mailman/pmd-devel" }, { "type" : "vcs", "url" : "https://github.com/pmd/pmd/pmd-core" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "publisher" : "QOS.ch", "group" : "org.slf4j", "name" : "slf4j-api", "version" : "1.7.36", "description" : "The slf4j API", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "872da51f5de7f3923da4de871d57fd85" }, { "alg" : "SHA-1", "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14" }, { "alg" : "SHA-256", "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0" }, { "alg" : "SHA-512", "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b" }, { "alg" : "SHA-384", "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a" }, { "alg" : "SHA3-384", "content" : "3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b" }, { "alg" : "SHA3-256", "content" : "ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881" }, { "alg" : "SHA3-512", "content" : "14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824" } ], "licenses" : [ { "license" : { "id" : "MIT", "url" : "https://opensource.org/license/mit/" } } ], "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://www.slf4j.org" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/qos-ch/slf4j/slf4j-api" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar", "publisher" : "QOS.ch", "group" : "org.slf4j", "name" : "jul-to-slf4j", "version" : "1.7.36", "description" : "JUL to SLF4J bridge", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "2a3fe73e6cafe8f102facaf2dd65353f" }, { "alg" : "SHA-1", "content" : "ed46d81cef9c412a88caef405b58f93a678ff2ca" }, { "alg" : "SHA-256", "content" : "9e641fb142c5f0b0623d6222c09ea87523a41bf6bed48ac79940724010b989de" }, { "alg" : "SHA-512", "content" : "0bb1e7343d07d41bcfb0c1ffeb2db28cbb35e7a80a409b80042f463b082a292976f09d719e319471e31c7bab716121728a16509fd385fc6e3b400b1b214cffea" }, { "alg" : "SHA-384", "content" : "50e2f326fc00537a5fb3726c7c55556851b3be8b4346f522f27ddecf2fdb44adabae3197b30ccfd854c37d6734adbd8f" }, { "alg" : "SHA3-384", "content" : "4ad0c3870852ac44530a9dcb992d947cd8708ee6f422559da41aaaa8b22d1610fb116b32d2c54df83b110b85487083bf" }, { "alg" : "SHA3-256", "content" : "8e3f5aaaa27f618b52e610376d2a16c6f9dc8dce5e6c2bbe42131a590626aae6" }, { "alg" : "SHA3-512", "content" : "e3da265406b5e69f02235ed7272a48f71cb8b6f0a696820e28e90fb5eafeeb311abf2a4e779b402f384c6a80470fd41116ee52a526f57040fae3b24cb3b19c01" } ], "licenses" : [ { "license" : { "id" : "MIT", "url" : "https://opensource.org/license/mit/" } } ], "purl" : "pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://www.slf4j.org" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/qos-ch/slf4j/jul-to-slf4j" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar", "publisher" : "ANTLR", "group" : "org.antlr", "name" : "antlr4-runtime", "version" : "4.9.3", "description" : "The ANTLR 4 Runtime", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "718f199bafa6574ffa1111fa3e10276a" }, { "alg" : "SHA-1", "content" : "81befc16ebedb8b8aea3e4c0835dd5ca7e8523a8" }, { "alg" : "SHA-256", "content" : "131a6594969bc4f321d652ea2a33bc0e378ca312685ef87791b2c60b29d01ea5" }, { "alg" : "SHA-512", "content" : "2c3763a8fbc7af110df5d6bb57692759b23e8bf961a53694c69bde4cd9d8c3a8eaa55cf376ce34c6c4e2035a99d7abf08c6ffa3b75d18a6d93a9c1ca95927ea8" }, { "alg" : "SHA-384", "content" : "62a62dab4a27733a810b97fe5544eb1b5b25d2df83ea8d93802cb0e6fd1b4b3ca5a130c51aa9198deefc30cd0f062841" }, { "alg" : "SHA3-384", "content" : "e2919d471a5b4fa318cd34d4a9fa5a9e1fa4ed37e0ee34c72031f950c447c16df828cbe96635e525859153080b97510b" }, { "alg" : "SHA3-256", "content" : "70c29f56fa10bfccfd47623ca6e9d3625e1b81da7b0e57269def1d6f84c5cd6e" }, { "alg" : "SHA3-512", "content" : "1a80c6cc4e5cd8e1455717e6d9fc3ab7937eb23f907e4189358f4b2f3eb14475689c02a8258419f6956feaf6da0c0c5cdcfb9300f91efef2f5bfbabac092386c" } ], "licenses" : [ { "license" : { "id" : "BSD-4-Clause" } } ], "purl" : "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://www.antlr.org/antlr4-runtime" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/antlr/antlr4/issues" }, { "type" : "mailing-list", "url" : "https://groups.google.com/forum/?fromgroups#!forum/antlr-discussion" }, { "type" : "vcs", "url" : "https://github.com/antlr/antlr4/tree/master/antlr4-runtime" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/net.sf.saxon/Saxon-HE@12.5?type=jar", "publisher" : "Saxonica", "group" : "net.sf.saxon", "name" : "Saxon-HE", "version" : "12.5", "description" : "The XSLT and XQuery Processor", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "39b53a0dcd01522e79223e2506061d44" }, { "alg" : "SHA-1", "content" : "57c007520e2879387b8d13d0a512e9566eeffa73" }, { "alg" : "SHA-256", "content" : "98c3a91e6e5aaf9b3e2b37601e04b214a6e67098493cdd8232fcb705fddcb674" }, { "alg" : "SHA-512", "content" : "f8385b52b9de03bbbcfd9900b78d7e1b544102900316d8d95b5f36b75b6f8f492cee7a1ecf737bd0b4caf85d79c003996f83ac156739d60e4d41edd5ef43a182" }, { "alg" : "SHA-384", "content" : "1e08a834684848bfb6c8029b98d2c8f5634acba483c6cd783aa753a15551c48e32fe718c72abdbb1114bab6e8cbf654d" }, { "alg" : "SHA3-384", "content" : "89a7d4688edba721f2960ed5a1d572cf9cf83b6d3d71987ef9b8d4a1b00fbcb47f7f6469d8d14cae2ea3eb8b63841a4d" }, { "alg" : "SHA3-256", "content" : "b963a7cb8580e362ee06b8fbd395016900a9842fa03f6f38106544259ebfc464" }, { "alg" : "SHA3-512", "content" : "f47e8e8922b657d8190b391178fc86b4808b0c1d40cdc4de8231cefd619d645de971d9b0e33c8da8c25de5cb4f558861cbed77839dd619f4f4f4317378cbdb3d" } ], "licenses" : [ { "license" : { "id" : "MPL-2.0", "url" : "https://www.mozilla.org/MPL/2.0/" } } ], "purl" : "pkg:maven/net.sf.saxon/Saxon-HE@12.5?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://www.saxonica.com/" }, { "type" : "vcs", "url" : "https://saxonica.plan.io/projects/saxonmirrorhe/repository" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.xmlresolver/xmlresolver@5.2.2?type=jar", "group" : "org.xmlresolver", "name" : "xmlresolver", "version" : "5.2.2", "description" : "An XML entity/uri resolver", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "0de20e8f7acfa5942d78c239d3034deb" }, { "alg" : "SHA-1", "content" : "152378e04ba01898847bf38fad5023c7d52f0c9d" }, { "alg" : "SHA-256", "content" : "efc92bd7ed32b3e57095e0b3e872051ccfbbdcc980831ef33e89e38161a85222" }, { "alg" : "SHA-512", "content" : "4213b91ddf162a2ee0515f823d859333fa475b84675277bf657eff03162eff4b91660313ce8c19fa9f30b02e2002d87cf06c492e4c303448a96b577b6928f3c0" }, { "alg" : "SHA-384", "content" : "f093746aa8a39a5d1309fe7d14315ce851d649fe3700d2ec49013947d701c33345e32e4a4306d1475e266487b7ba0169" }, { "alg" : "SHA3-384", "content" : "a0eb7e9622c96a0dfbd141030b33b24e796e9ae438befde00a77629408a07d855d681f93b0fb052e19e762f5f170c77b" }, { "alg" : "SHA3-256", "content" : "d808c261e2be19a82e25034d0a21cf40bad78eabdfba3bc6ff93f0f91ac30397" }, { "alg" : "SHA3-512", "content" : "e53fd7e8cc1f17144ac3667667d32a7a6fc21f7b7f7dce715590533f5d276e10be768156338d5e878c47d1e880f9e4799f18f289e00bfa155d45571d02787899" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.xmlresolver/xmlresolver@5.2.2?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/xmlresolver/xmlresolver" }, { "type" : "vcs", "url" : "scm:git@github.com:xmlresolver/xmlresolver.git" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.1.3?type=jar", "publisher" : "The Apache Software Foundation", "group" : "org.apache.httpcomponents.client5", "name" : "httpclient5", "version" : "5.1.3", "description" : "Apache HttpComponents Client", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "757bfb86277b9b11798db8fdb351bf74" }, { "alg" : "SHA-1", "content" : "13c984b7b881afcff3a7f0bb95878724a48a4b66" }, { "alg" : "SHA-256", "content" : "28c759254f4e35319e078bb6ffea75676608dc12cb243b24fb3c8732522977fe" }, { "alg" : "SHA-512", "content" : "4fb38b6bf164103e68320ce430776915a6831923eb3e0b6e6f29ff57647e6bd29efc07d46b107aec23bf9004cfd959fbda8153740ba0060260a54d67ccf8a093" }, { "alg" : "SHA-384", "content" : "8e6c7bc00b5e25c564faa6f20d01b26288163de846273943bdc7a043348cbe4a5540dc875ed057054c2af5c6e10f8147" }, { "alg" : "SHA3-384", "content" : "ecfe2613d27758859bfadc02b97b073b5ca74c2e983198c949851c2d287de00e85d4c1c822329e63a38617f85ff281fb" }, { "alg" : "SHA3-256", "content" : "29df48d822099ef07e6687f12acdecd8f22dcfe84106667183d6790bbc9ed121" }, { "alg" : "SHA3-512", "content" : "46cafa187fb940370f545efc73ff7d160d9b54810a9556d13c4e0010b44a0155e0cfad0251fb030f0cbae2d2108a6ef0ac918c32b3ad6d6dc2da1a360815b564" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.1.3?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://hc.apache.org/httpcomponents-client-5.0.x/5.1.3/httpclient5/" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/HTTPCLIENT" }, { "type" : "mailing-list", "url" : "https://lists.apache.org/list.html?httpclient-users@hc.apache.org" }, { "type" : "vcs", "url" : "https://github.com/apache/httpcomponents-client/tree/5.1.3/httpclient5" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.1.3?type=jar", "publisher" : "The Apache Software Foundation", "group" : "org.apache.httpcomponents.core5", "name" : "httpcore5-h2", "version" : "5.1.3", "description" : "Apache HttpComponents HTTP/2 Core Components", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "e12cc9746f6635675a408e641c95b177" }, { "alg" : "SHA-1", "content" : "4664b59b09f5ee008e37a963bbb92f4068e91696" }, { "alg" : "SHA-256", "content" : "d0e78ba15aa8ebe77982b660ac4b09a95d6e035dbdbea762577dc1c8e2935807" }, { "alg" : "SHA-512", "content" : "76a22785285a3c12a98db24d678f1fd695cb4941be438fd80a7c41b4fbf804452694f93947579aba3bcee652671e362ae6d76bfb60a8db75518e52aba4ddad36" }, { "alg" : "SHA-384", "content" : "cfead6178cd1cc30fcd9da2f8753897a2039e7915eded3278fb74545a49db68a10860ed064e9f52d0f1526e3cd7caa35" }, { "alg" : "SHA3-384", "content" : "d98a2ba3eaf1eb38629e2d02eb6b31e4e4b2290c321bd58c0377ad4427a969b881d6b31cf8afdc8b9e306ef8d7d39439" }, { "alg" : "SHA3-256", "content" : "7114b9fd4612be12d156312568633e13745c8bd3da7c28af60373a70f31875b5" }, { "alg" : "SHA3-512", "content" : "3f32c0564b4af84b886df450df91498523c40ba6bf98354413ff3f4c85f782cd2a3cd9e6ef2f38c18a79ecb8c444326c7b043feb5fc3f8cafe043e9217362255" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.1.3?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://hc.apache.org/httpcomponents-core-5.1.x/5.1.3/httpcore5-h2/" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/HTTPCORE" }, { "type" : "mailing-list", "url" : "https://lists.apache.org/list.html?httpclient-users@hc.apache.org" }, { "type" : "vcs", "url" : "https://github.com/apache/httpcomponents-core/tree/5.1.3/httpcore5-h2" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar", "publisher" : "The Apache Software Foundation", "group" : "commons-codec", "name" : "commons-codec", "version" : "1.15", "description" : "The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "303baf002ce6d382198090aedd9d79a2" }, { "alg" : "SHA-1", "content" : "49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d" }, { "alg" : "SHA-256", "content" : "b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63" }, { "alg" : "SHA-512", "content" : "da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787" }, { "alg" : "SHA-384", "content" : "05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0" }, { "alg" : "SHA3-384", "content" : "12fad4ef78274b06f97b1243cea6f970088abde082d2de9377d915a34b44f7d7d67807c03e59c849b69f1544e2a9a1be" }, { "alg" : "SHA3-256", "content" : "87be248f33f241121f54aad61a9a460a79eabefbf1b5b0dd22aeb95b581f727e" }, { "alg" : "SHA3-512", "content" : "8c992c9c569ebaa0bf956a4c5b34fbf5e1ed1c212c2dd896fa216183ee0bcd341e96698af4b9cec7e8880762faa081a3d3a27f51349aa457cb8e373e4f57c788" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://commons.apache.org/proper/commons-codec/" }, { "type" : "build-system", "url" : "https://builds.apache.org/" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/CODEC" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", "url" : "https://github.com/apache/commons-codec" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.1.3?type=jar", "publisher" : "The Apache Software Foundation", "group" : "org.apache.httpcomponents.core5", "name" : "httpcore5", "version" : "5.1.3", "description" : "Apache HttpComponents HTTP/1.1 core components", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "e3311847fc70a84038fb2c079dd08c4a" }, { "alg" : "SHA-1", "content" : "d1638d1e5f2793f187d4144c702a93524ba6fd3b" }, { "alg" : "SHA-256", "content" : "f2bf2f2c7772169c9e30699719667ad30f9b46c4e9d7841907deb2d12d9923fe" }, { "alg" : "SHA-512", "content" : "c9b439da0fb0124f37676686c69f8fdb824a30e0d6a3b9ebc0ebca5555727ae18cc5a146d8874b4cfe6fa966d5eb6083a44c379a76017ec79863596a23c571b3" }, { "alg" : "SHA-384", "content" : "63d37103c0b040ed9f0c70af0bcc9792c68afe8c7da5f445f30458c7c802524f07a1bdb573661e680955a257e0fb6b4c" }, { "alg" : "SHA3-384", "content" : "5ddd51ea89b40049c0b92bdfd0fc59fd2963c025895bece1b9438166e9e468b8b54694e9e72a8d026f681ec92824f224" }, { "alg" : "SHA3-256", "content" : "0a1d52398f2a13124591cc6fce1fee5f353c29c9726b4f68813b01f077940947" }, { "alg" : "SHA3-512", "content" : "eecbd33885bb1718a1803951d9217b108e42e39cedfeac99bd0938cec94674b1c67d6f4d6141c8e225061a51a1ac3af07f553501ff2b136e358a3eeffbcd3ea9" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.1.3?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://hc.apache.org/httpcomponents-core-5.1.x/5.1.3/httpcore5/" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/HTTPCORE" }, { "type" : "mailing-list", "url" : "https://lists.apache.org/list.html?httpclient-users@hc.apache.org" }, { "type" : "vcs", "url" : "https://github.com/apache/httpcomponents-core/tree/5.1.3/httpcore5" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.xmlresolver/xmlresolver@5.2.2?classifier=data&type=jar", "group" : "org.xmlresolver", "name" : "xmlresolver", "version" : "5.2.2", "description" : "An XML entity/uri resolver", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "0e77f628aa613bbe3145c6a24f8973f3" }, { "alg" : "SHA-1", "content" : "5624ede8b8e374979194acaae9f34cff23b62b3e" }, { "alg" : "SHA-256", "content" : "173904bdbd783ba0fac92c5bcc05da5d09f0ce7eed24346666ea0a239461f9b4" }, { "alg" : "SHA-512", "content" : "18f9f0ab3426800c82a707bf5e85a281955695fc703dc6c80c055227e5b78d825329f6b0eee0605b80c3c5cc33c7b81056a7504dd4c2f289e41d608d0ad1c357" }, { "alg" : "SHA-384", "content" : "3c3e1b18e2e0ac1f4b67e17ba189c86d7f69bbf0f1bb491cb65a2a4a4efc76f695559bc61900e5ec5ad694b137547207" }, { "alg" : "SHA3-384", "content" : "1623fc11b9650912008cc32276d58c6a3a89e730f3343f4db546218a654bed959050b6a2553393a08a4779c8c36a7b18" }, { "alg" : "SHA3-256", "content" : "e5d26342451df2725301cf0ca980906e1b90c2dbbd67561e78a6fc77aafb1789" }, { "alg" : "SHA3-512", "content" : "f5199748a7503a51444711a1414ceb5034f0e8730a46a6f20dd2e71c95eaf9e0323b1f41f0b7c70f6051780ed90c6b78282b0f3ff6a302794d0be281374dd3a5" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.xmlresolver/xmlresolver@5.2.2?classifier=data&type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/xmlresolver/xmlresolver" }, { "type" : "vcs", "url" : "scm:git@github.com:xmlresolver/xmlresolver.git" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar", "publisher" : "The Apache Software Foundation", "group" : "org.apache.commons", "name" : "commons-lang3", "version" : "3.17.0", "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. The code is tested using the latest revision of the JDK for supported LTS releases: 8, 11, 17 and 21 currently. See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml Please ensure your build environment is up-to-date and kindly report any build issues.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "7730df72b7fdff4a3a32d89a314f826a" }, { "alg" : "SHA-1", "content" : "b17d2136f0460dcc0d2016ceefca8723bdf4ee70" }, { "alg" : "SHA-256", "content" : "6ee731df5c8e5a2976a1ca023b6bb320ea8d3539fbe64c8a1d5cb765127c33b4" }, { "alg" : "SHA-512", "content" : "dfd5ff7fe7f852b9caabc81e5a00e20616f98405085f059b64dc2121feb5fa6cb327e11a3d2f954c079811c31f6fd484e90f932d45078796fbfa7dbf1f1eb5aa" }, { "alg" : "SHA-384", "content" : "c6ed55a5c2b05332890a43a3ea73b30f42dc23c92ebd054a8b0d29ca8f49fb9361f7325cfa90715be457804b087221b5" }, { "alg" : "SHA3-384", "content" : "bb9e148a87928c3053bcccee361d5d8d81b3c6ea41a390d96c615afd242409f909361c945f3b4238a297e4ebb2ed413b" }, { "alg" : "SHA3-256", "content" : "f28f34565f25dd65fd1a47916e917df9e3ff2c6721897ea57391a238227c96a2" }, { "alg" : "SHA3-512", "content" : "4c8e7a5f10d091bb240e7eb59287d0e4e4420e7a2d2be2b8060111e479540ffae89040377c99ec7f458cd54e1ac0ed0778951cd1f34d5d90571b8a303fbb9baf" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://commons.apache.org/proper/commons-lang/" }, { "type" : "build-system", "url" : "https://github.com/apache/commons-parent/actions" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/LANG" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", "url" : "https://gitbox.apache.org/repos/asf?p=commons-lang.git" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.ow2.asm/asm@9.8?type=jar", "publisher" : "OW2", "group" : "org.ow2.asm", "name" : "asm", "version" : "9.8", "description" : "ASM, a very small and fast Java bytecode manipulation framework", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "f5adf3bfc54fb3d2cd8e3a1f275084bc" }, { "alg" : "SHA-1", "content" : "dc19ecb3f7889b7860697215cae99c0f9b6f6b4b" }, { "alg" : "SHA-256", "content" : "876eab6a83daecad5ca67eb9fcabb063c97b5aeb8cf1fca7a989ecde17522051" }, { "alg" : "SHA-512", "content" : "cbd250b9c698a48a835e655f5f5262952cc6dd1a434ec0bc3429a9de41f2ce08fcd3c4f569daa7d50321ca6ad1d32e131e4199aa4fe54bce9e9691b37e45060e" }, { "alg" : "SHA-384", "content" : "b4ad6e6c1afe432ce8a60367c743107cfc9d1d2f1f1c6b7be4b6ba625cca862cc7ffff404566086bce4b6650556df953" }, { "alg" : "SHA3-384", "content" : "f51a3b7cee5543672cc2a4d71dda7aa992fb900cb68b79908efbd1efcc3e731f4ab8e2c1099e7b905f4aea6350489e08" }, { "alg" : "SHA3-256", "content" : "3c66be179e6b4881b1901a6a8c6fc980d773d1faa6edb54ed878e5985615a831" }, { "alg" : "SHA3-512", "content" : "ccbf812616e5997ba7cf59704cf78e360650d773ac53581243da6c47fe884560db5ec48f8f4b71ccd4b8c2b332619c19aea053458d14abe443fcdd4fa313d5dc" } ], "licenses" : [ { "license" : { "id" : "BSD-3-Clause", "url" : "https://opensource.org/licenses/BSD-3-Clause" } } ], "purl" : "pkg:maven/org.ow2.asm/asm@9.8?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://asm.ow2.io/" }, { "type" : "distribution-intake", "url" : "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://gitlab.ow2.org/asm/asm/issues" }, { "type" : "mailing-list", "url" : "https://mail.ow2.org/wws/arc/asm/" }, { "type" : "vcs", "url" : "https://gitlab.ow2.org/asm/asm/" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.google.code.gson/gson@2.13.1?type=jar", "group" : "com.google.code.gson", "name" : "gson", "version" : "2.13.1", "description" : "Gson JSON library", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "d82c16b045ce4832679d70f26a67b30c" }, { "alg" : "SHA-1", "content" : "853ce06c11316b33a8eae5e9095da096a9528b8f" }, { "alg" : "SHA-256", "content" : "94855942d4992f112946d3de1c334e709237b8126d8130bf07807c018a4a2120" }, { "alg" : "SHA-512", "content" : "4c13440cd080c13a160a13a8f350816487b3c2a77aed8ea900721af07a595f6b2f414ac5fb6a628011e9d366a5c4c3c5633f5efa669700144b659dfe4d14419b" }, { "alg" : "SHA-384", "content" : "6885615e03106d8fce81f944a8bdb8fbc4f8c237df1cb08f54ee7b99359e8ef61a4ccff5988654caaab7aa5c12b1a8d9" }, { "alg" : "SHA3-384", "content" : "3081761a4473de6e8b60c77cbcf936359931cd0346fcd5c37e7e171ad7b7bb6edafd642d717e330bac76424e76a96e0b" }, { "alg" : "SHA3-256", "content" : "cfe7d63307f9a13d265c5ccf80794f7b9cf637e5019add01c499259aeb23f589" }, { "alg" : "SHA3-512", "content" : "c01c15b52fc6859de901173c0f17becb3976a5a9f35c1ff15262d675f8519a5430de3ad2756951f660b8b137ed479db9af0a17af26eb30daff2af29ae6fa1307" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/com.google.code.gson/gson@2.13.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/google/gson" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/google/gson/issues" }, { "type" : "vcs", "url" : "https://github.com/google/gson/" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.38.0?type=jar", "publisher" : "Google LLC", "group" : "com.google.errorprone", "name" : "error_prone_annotations", "version" : "2.38.0", "description" : "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "912f8206614000252841d89cb0461895" }, { "alg" : "SHA-1", "content" : "fc0ae991433e8590ba51cd558421478318a74c8c" }, { "alg" : "SHA-256", "content" : "6661d5335090a5fc61dd869d2095bc6c1e2156e3aa47a6e4ababdf64c99a7889" }, { "alg" : "SHA-512", "content" : "b13fdb7e06ec1f12ea1d63b0ff942c239e4decb391d736a1f7d46c9aa9e2744e9391be4398a02a78d551a96969622e65b75bbd31e5bf67a5938716765f451f3a" }, { "alg" : "SHA-384", "content" : "47be5289bf8ca3f9dfe2d22e4baf6defc71dabb5476f878a240412e336d77d81148b2f79ffc0702079e48bd67ad7fd22" }, { "alg" : "SHA3-384", "content" : "53f3f57b51ea34afd38e1270fbe08dfcf1e2dcfb50f4ac9369bb625febb75611c9e5d8bb09f4dfcb504b5d0b9ac47443" }, { "alg" : "SHA3-256", "content" : "02eaa5431cda49a9e702cac4ad8051d88397e1d5219a0ef65673dae8eaf9c70d" }, { "alg" : "SHA3-512", "content" : "0307dfc76cae6d539d93649ef3ccb85937d62f6f74be212e8a05ae1cc892f3b63a5c03cd6f61ace9f5dbd0f8dfb0baf086eaf3cd10bbefd22640966d00686dac" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.38.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://errorprone.info/error_prone_annotations" }, { "type" : "vcs", "url" : "https://github.com/google/error-prone/error_prone_annotations" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.checkerframework/checker-qual@3.49.3?type=jar", "group" : "org.checkerframework", "name" : "checker-qual", "version" : "3.49.3", "description" : "checker-qual contains annotations (type qualifiers) that a programmerwrites to specify Java code for type-checking by the Checker Framework.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "5881721126d6f442ba085fcd81145a4d" }, { "alg" : "SHA-1", "content" : "119a4df4ba2e6a432b23989a785f81be38a56849" }, { "alg" : "SHA-256", "content" : "367edbf2fe9f606c1fdb5a8ba6e1c9c27625993e1ff954e3868de70bcc6416b7" }, { "alg" : "SHA-512", "content" : "ac7086d64d28b9b39f8c95ec07c0f2531c30d51e24dc531210ca6b266a99f8bc59da4132e7e386a8ddf321652609611ad62dd1aa5ee3bc7db6948cbb72259ff5" }, { "alg" : "SHA-384", "content" : "08b5076a8ba525ff20631908da99632b7755e977894dae4f7f6b1fa2bdfd6eca6cf0760aad7188cc242618700407bfc9" }, { "alg" : "SHA3-384", "content" : "efa2a0a28871c2131877c15a2300d8942fb76ca85ef12ace80d704807cd4dd1dfd5a3b4b5faef2ff4d7150af64d8dfcf" }, { "alg" : "SHA3-256", "content" : "ade16f420610d75fba10a9a8bc6197214fd6cb90b9d3434b6c8bfe8a8f13fd91" }, { "alg" : "SHA3-512", "content" : "721649c4ec14031dc0805488666d1672df365f4d404b2fd195b388a1f09aeee2cac76f9b68dddf8a79ba6d74984179a49ee83f7a1521c79544abac12216bf2e2" } ], "licenses" : [ { "license" : { "id" : "MIT" } } ], "purl" : "pkg:maven/org.checkerframework/checker-qual@3.49.3?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://checkerframework.org/" }, { "type" : "vcs", "url" : "https://github.com/typetools/checker-framework.git" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.pcollections/pcollections@4.0.2?type=jar", "group" : "org.pcollections", "name" : "pcollections", "version" : "4.0.2", "description" : "A Persistent Java Collections Library", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "3bc80c4568bb9766e119df617ef8b553" }, { "alg" : "SHA-1", "content" : "c8398b4443deae11e6eaffbc04a371b4eb8f6b8e" }, { "alg" : "SHA-256", "content" : "2bbeef5797a241300c4f7513cd546239629ed7deda4fc0c31df90bb95f5f13ef" }, { "alg" : "SHA-512", "content" : "b1c87f1569c61b079fb50bf4cb0e885aefde3138ab8f1777386aa47652bf9ed359e4437ecff3c6f09e7974c10af88b6c27baaa147b95e1fd69b3fdf3fdbd4da5" }, { "alg" : "SHA-384", "content" : "a9a0266da1d32de32547431c6f1a629d697f5330a1cb85485b698958d1b5861797cc8037b8dd9cfb6979b52e51b8aede" }, { "alg" : "SHA3-384", "content" : "7971fad6691a1b90eb2729119582ee638b58a70f11c3232bd277183ce675e4c70dae63a0ba56982c87efc0bc3c2ea338" }, { "alg" : "SHA3-256", "content" : "338d7fdf8c11b4fc538c05420fb2c6426dab2209e2b1e2a20f1549277f4a4a4f" }, { "alg" : "SHA3-512", "content" : "5722d084f2f3aaa11147ce496c548647555669895d8f456d501a07ba0027a86eea44335c906efcd7a035b7a9ecc1ffe55963023b3581f3005b8acf81f7c9c7fa" } ], "licenses" : [ { "license" : { "id" : "MIT" } } ], "purl" : "pkg:maven/org.pcollections/pcollections@4.0.2?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/hrldcpr/pcollections" }, { "type" : "vcs", "url" : "https://github.com/hrldcpr/pcollections" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.github.oowekyala.ooxml/nice-xml-messages@3.1?type=jar", "group" : "com.github.oowekyala.ooxml", "name" : "nice-xml-messages", "version" : "3.1", "description" : "Associates XML DOM nodes to their position in source, to enrich error messages. This builds on top of the standard org.w3c.dom API. Should probably not be used in performance critical code, but can hopefully cleanup reporting logic in places where user-friendly messages are important.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "39c913451ff2d2ec740c58a77a26fa16" }, { "alg" : "SHA-1", "content" : "4c3863b0f015af5cfd9abe02fab364fb99867167" }, { "alg" : "SHA-256", "content" : "0b4ceb5b8362d43c9c6c49b1bd57f1c5da54d3c5c7c305fa39c0a04462bb4799" }, { "alg" : "SHA-512", "content" : "6b3e7c2f1d4b9a46c8dc113b60deee5e2a70b57f308886074816e0d7e3a5460cfb7c1c547171c0ad125deb551bafbb41b911c52db8bac448be3504b0d407a7fc" }, { "alg" : "SHA-384", "content" : "c79cd24010cfcfcc712509412dacbfb5bcc4a64e98bfd6a638698350c4f45c1a2c6724491368cc56a4d5947cbe0482e1" }, { "alg" : "SHA3-384", "content" : "218130aec89a116471d0dd34b9c733f144e36f1cbcd2b705fea4ed2f7fb90e8c6a5386aaff037bc772e180868b13c03f" }, { "alg" : "SHA3-256", "content" : "02b4007b4ada909e9bb676189310b233c8c2c254e2bdc901928030ef0f96f346" }, { "alg" : "SHA3-512", "content" : "f2e7883ab42ba31eb380ed9dc7199f3d7d4b0c0c8b06432ebe502c6e117017abdd579f86032a14bf842fb68889a13d1bd504a60a212f889e171e78003c0322a0" } ], "licenses" : [ { "license" : { "id" : "MIT", "url" : "https://opensource.org/license/mit/" } } ], "purl" : "pkg:maven/com.github.oowekyala.ooxml/nice-xml-messages@3.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/oowekyala/nice-xml-messages" }, { "type" : "distribution-intake", "url" : "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/oowekyala/nice-xml-messages" } ] } ], "dependencies" : [ { "ref" : "pkg:maven/net.sourceforge.pmd/pmd-python@7.14.0?type=jar", "dependsOn" : [ "pkg:maven/net.sourceforge.pmd/pmd-core@7.14.0?type=jar" ] }, { "ref" : "pkg:maven/net.sourceforge.pmd/pmd-core@7.14.0?type=jar", "dependsOn" : [ "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar", "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar", "pkg:maven/net.sf.saxon/Saxon-HE@12.5?type=jar", "pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar", "pkg:maven/org.ow2.asm/asm@9.8?type=jar", "pkg:maven/com.google.code.gson/gson@2.13.1?type=jar", "pkg:maven/org.checkerframework/checker-qual@3.49.3?type=jar", "pkg:maven/org.pcollections/pcollections@4.0.2?type=jar", "pkg:maven/com.github.oowekyala.ooxml/nice-xml-messages@3.1?type=jar" ] }, { "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar", "dependsOn" : [ "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar" ] }, { "ref" : "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/net.sf.saxon/Saxon-HE@12.5?type=jar", "dependsOn" : [ "pkg:maven/org.xmlresolver/xmlresolver@5.2.2?type=jar", "pkg:maven/org.xmlresolver/xmlresolver@5.2.2?classifier=data&type=jar" ] }, { "ref" : "pkg:maven/org.xmlresolver/xmlresolver@5.2.2?type=jar", "dependsOn" : [ "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.1.3?type=jar", "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.1.3?type=jar" ] }, { "ref" : "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.1.3?type=jar", "dependsOn" : [ "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.1.3?type=jar", "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.1.3?type=jar", "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "pkg:maven/commons-codec/commons-codec@1.15?type=jar" ] }, { "ref" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.1.3?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.1.3?type=jar", "dependsOn" : [ "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.1.3?type=jar" ] }, { "ref" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.xmlresolver/xmlresolver@5.2.2?classifier=data&type=jar", "dependsOn" : [ "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.1.3?type=jar", "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.1.3?type=jar" ] }, { "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.ow2.asm/asm@9.8?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.google.code.gson/gson@2.13.1?type=jar", "dependsOn" : [ "pkg:maven/com.google.errorprone/error_prone_annotations@2.38.0?type=jar" ] }, { "ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.38.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.checkerframework/checker-qual@3.49.3?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.pcollections/pcollections@4.0.2?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.github.oowekyala.ooxml/nice-xml-messages@3.1?type=jar", "dependsOn" : [ ] } ] }