{ "bomFormat" : "CycloneDX", "specVersion" : "1.6", "serialNumber" : "urn:uuid:58c42451-1b4a-3725-8fea-6691770c4a4d", "version" : 1, "metadata" : { "lifecycles" : [ { "phase" : "build" } ], "tools" : { "components" : [ { "type" : "library", "author" : "OWASP Foundation", "group" : "org.cyclonedx", "name" : "cyclonedx-maven-plugin", "version" : "2.9.1", "description" : "CycloneDX Maven plugin", "hashes" : [ { "alg" : "MD5", "content" : "9c7a565cf28cce58557d0c621c5ea4b1" }, { "alg" : "SHA-1", "content" : "be882d5a22050bfa9d19090b1420c188617d0e1c" }, { "alg" : "SHA-256", "content" : "698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249" }, { "alg" : "SHA-512", "content" : "c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0" }, { "alg" : "SHA-384", "content" : "d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb" }, { "alg" : "SHA3-384", "content" : "80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f" }, { "alg" : "SHA3-256", "content" : "142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699" }, { "alg" : "SHA3-512", "content" : "af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b" } ] } ] }, "component" : { "type" : "library", "bom-ref" : "pkg:maven/net.sourceforge.pmd/pmd-python@7.22.0?type=jar", "publisher" : "PMD", "group" : "net.sourceforge.pmd", "name" : "pmd-python", "version" : "7.22.0", "description" : "PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex, but supports 16 other languages. It comes with 400+ built-in rules. It can be extended with custom rules. It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations. Rules can be written in Java or using a XPath query. Currently, PMD supports Java, JavaScript, Salesforce.com Apex and Visualforce, Kotlin, Swift, Modelica, PL/SQL, Apache Velocity, JSP, WSDL, Maven POM, HTML, XML and XSL. Scala is supported, but there are currently no Scala rules available. Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in Coco, C/C++, C#, CSS, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica, Objective-C, Perl, PHP, PL/SQL, Python, Ruby, Rust, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript, Apache Velocity, WSDL, XML and XSL.", "licenses" : [ { "license" : { "name" : "BSD-style", "url" : "http://pmd.sourceforge.net/license.html" } } ], "purl" : "pkg:maven/net.sourceforge.pmd/pmd-python@7.22.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://pmd.github.io/pmd-python/" }, { "type" : "build-system", "url" : "https://github.com/pmd/pmd/actions" }, { "type" : "issue-tracker", "url" : "https://github.com/pmd/pmd/issues" }, { "type" : "mailing-list", "url" : "https://sourceforge.net/p/pmd/mailman/pmd-devel" }, { "type" : "vcs", "url" : "https://github.com/pmd/pmd/pmd-python" } ] }, "properties" : [ { "name" : "maven.goal", "value" : "makeBom" }, { "name" : "maven.scopes", "value" : "compile,provided,runtime,system" }, { "name" : "cdx:reproducible", "value" : "enabled" } ] }, "components" : [ { "type" : "library", "bom-ref" : "pkg:maven/net.sourceforge.pmd/pmd-core@7.22.0?type=jar", "publisher" : "PMD", "group" : "net.sourceforge.pmd", "name" : "pmd-core", "version" : "7.22.0", "description" : "PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex, but supports 16 other languages. It comes with 400+ built-in rules. It can be extended with custom rules. It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations. Rules can be written in Java or using a XPath query. Currently, PMD supports Java, JavaScript, Salesforce.com Apex and Visualforce, Kotlin, Swift, Modelica, PL/SQL, Apache Velocity, JSP, WSDL, Maven POM, HTML, XML and XSL. Scala is supported, but there are currently no Scala rules available. Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in Coco, C/C++, C#, CSS, Dart, Fortran, Gherkin, Go, Groovy, HTML, Java, JavaScript, JSP, Julia, Kotlin, Lua, Matlab, Modelica, Objective-C, Perl, PHP, PL/SQL, Python, Ruby, Rust, Salesforce.com Apex and Visualforce, Scala, Swift, T-SQL, Typescript, Apache Velocity, WSDL, XML and XSL.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "c80f2af5e4fcc6e363706c3b84e52746" }, { "alg" : "SHA-1", "content" : "7e13a20f78d0c067fd78c34a24c6ce5a642e90a1" }, { "alg" : "SHA-256", "content" : "827d50df304f83ef715e65a8cef2e80fcd746c001cbf598763a6c9b49e8b7fc5" }, { "alg" : "SHA-512", "content" : "30e749a7b301c707384c198f13e1220120160f48dbceeef53390a3af387d73350ac96ddd6ffad295e3e9c59b4e4b17ded6d2e6a979ac1affbd5094dd8520aec9" }, { "alg" : "SHA-384", "content" : "8229c7cc8a6b52673556d78149f0d5b4250920dc6066a54cc66409717dbb160ee101bf63f3f8704b974478863957c29f" }, { "alg" : "SHA3-384", "content" : "1048fe38ae6e851c7874bcfd8fd97b1679ecf28b628b199304d6154f5cad85b457dada4a8390b18ffce42c489bf6698d" }, { "alg" : "SHA3-256", "content" : "9c2e47be80fe65000b19e022b2436ac4b790355b8305b053dfe2a9830f040ae3" }, { "alg" : "SHA3-512", "content" : "6bfb027e55a5b080e80c56e86e9e03915b3a824a539ad2d2161c60a78240378a99f8aebde5923fd59705b72d75a7d20ca9682068303311ad5dfed4b7d22788ab" } ], "licenses" : [ { "license" : { "name" : "BSD-style", "url" : "http://pmd.sourceforge.net/license.html" } } ], "purl" : "pkg:maven/net.sourceforge.pmd/pmd-core@7.22.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://pmd.github.io/pmd-core/" }, { "type" : "build-system", "url" : "https://github.com/pmd/pmd/actions" }, { "type" : "issue-tracker", "url" : "https://github.com/pmd/pmd/issues" }, { "type" : "mailing-list", "url" : "https://sourceforge.net/p/pmd/mailman/pmd-devel" }, { "type" : "vcs", "url" : "https://github.com/pmd/pmd/pmd-core" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "publisher" : "QOS.ch", "group" : "org.slf4j", "name" : "slf4j-api", "version" : "1.7.36", "description" : "The slf4j API", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "872da51f5de7f3923da4de871d57fd85" }, { "alg" : "SHA-1", "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14" }, { "alg" : "SHA-256", "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0" }, { "alg" : "SHA-512", "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b" }, { "alg" : "SHA-384", "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a" }, { "alg" : "SHA3-384", "content" : "3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b" }, { "alg" : "SHA3-256", "content" : "ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881" }, { "alg" : "SHA3-512", "content" : "14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824" } ], "licenses" : [ { "license" : { "id" : "MIT", "url" : "https://opensource.org/license/mit/" } } ], "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://www.slf4j.org" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/qos-ch/slf4j/slf4j-api" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar", "publisher" : "QOS.ch", "group" : "org.slf4j", "name" : "jul-to-slf4j", "version" : "1.7.36", "description" : "JUL to SLF4J bridge", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "2a3fe73e6cafe8f102facaf2dd65353f" }, { "alg" : "SHA-1", "content" : "ed46d81cef9c412a88caef405b58f93a678ff2ca" }, { "alg" : "SHA-256", "content" : "9e641fb142c5f0b0623d6222c09ea87523a41bf6bed48ac79940724010b989de" }, { "alg" : "SHA-512", "content" : "0bb1e7343d07d41bcfb0c1ffeb2db28cbb35e7a80a409b80042f463b082a292976f09d719e319471e31c7bab716121728a16509fd385fc6e3b400b1b214cffea" }, { "alg" : "SHA-384", "content" : "50e2f326fc00537a5fb3726c7c55556851b3be8b4346f522f27ddecf2fdb44adabae3197b30ccfd854c37d6734adbd8f" }, { "alg" : "SHA3-384", "content" : "4ad0c3870852ac44530a9dcb992d947cd8708ee6f422559da41aaaa8b22d1610fb116b32d2c54df83b110b85487083bf" }, { "alg" : "SHA3-256", "content" : "8e3f5aaaa27f618b52e610376d2a16c6f9dc8dce5e6c2bbe42131a590626aae6" }, { "alg" : "SHA3-512", "content" : "e3da265406b5e69f02235ed7272a48f71cb8b6f0a696820e28e90fb5eafeeb311abf2a4e779b402f384c6a80470fd41116ee52a526f57040fae3b24cb3b19c01" } ], "licenses" : [ { "license" : { "id" : "MIT", "url" : "https://opensource.org/license/mit/" } } ], "purl" : "pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://www.slf4j.org" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/qos-ch/slf4j/jul-to-slf4j" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar", "publisher" : "ANTLR", "group" : "org.antlr", "name" : "antlr4-runtime", "version" : "4.9.3", "description" : "The ANTLR 4 Runtime", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "718f199bafa6574ffa1111fa3e10276a" }, { "alg" : "SHA-1", "content" : "81befc16ebedb8b8aea3e4c0835dd5ca7e8523a8" }, { "alg" : "SHA-256", "content" : "131a6594969bc4f321d652ea2a33bc0e378ca312685ef87791b2c60b29d01ea5" }, { "alg" : "SHA-512", "content" : "2c3763a8fbc7af110df5d6bb57692759b23e8bf961a53694c69bde4cd9d8c3a8eaa55cf376ce34c6c4e2035a99d7abf08c6ffa3b75d18a6d93a9c1ca95927ea8" }, { "alg" : "SHA-384", "content" : "62a62dab4a27733a810b97fe5544eb1b5b25d2df83ea8d93802cb0e6fd1b4b3ca5a130c51aa9198deefc30cd0f062841" }, { "alg" : "SHA3-384", "content" : "e2919d471a5b4fa318cd34d4a9fa5a9e1fa4ed37e0ee34c72031f950c447c16df828cbe96635e525859153080b97510b" }, { "alg" : "SHA3-256", "content" : "70c29f56fa10bfccfd47623ca6e9d3625e1b81da7b0e57269def1d6f84c5cd6e" }, { "alg" : "SHA3-512", "content" : "1a80c6cc4e5cd8e1455717e6d9fc3ab7937eb23f907e4189358f4b2f3eb14475689c02a8258419f6956feaf6da0c0c5cdcfb9300f91efef2f5bfbabac092386c" } ], "licenses" : [ { "license" : { "id" : "BSD-4-Clause" } } ], "purl" : "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://www.antlr.org/antlr4-runtime" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", "url" : "https://github.com/antlr/antlr4/issues" }, { "type" : "mailing-list", "url" : "https://groups.google.com/forum/?fromgroups#!forum/antlr-discussion" }, { "type" : "vcs", "url" : "https://github.com/antlr/antlr4/tree/master/antlr4-runtime" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/net.sf.saxon/Saxon-HE@12.9?type=jar", "publisher" : "Saxonica", "group" : "net.sf.saxon", "name" : "Saxon-HE", "version" : "12.9", "description" : "The XSLT and XQuery Processor", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "0da2a0f62cf07d1ae5f76d65569cd3f2" }, { "alg" : "SHA-1", "content" : "1397a02bd22c63db3e902b28b23c59009fa3b5c4" }, { "alg" : "SHA-256", "content" : "8f3a9216a537367132293eacbba9df062eace8f8b16a184af59e2e4839d4cd41" }, { "alg" : "SHA-512", "content" : "91712b90b683ff0a7e027f9a9bf48902c427057c9cc1868accca77e39100b0dcb90a2415c5783df188a12f7aa425f93e7832e3cb97b404dc34c24c5fad93e469" }, { "alg" : "SHA-384", "content" : "1f7e19e138ba41b69b802572da415e740dac73b191b38bacfa12a77d52d3cc2314c9ba269b50dce6de9ff6f0493a3612" }, { "alg" : "SHA3-384", "content" : "2ab479d9f0acbd57995af68b794c492621f50851f77d0d23319aea782a8bc94a396dbfb674724e16cdd554cf01b2fa73" }, { "alg" : "SHA3-256", "content" : "54afc8248603183f15d4be5a34383793c10c9ec3c0f13c9e19696222430ddc29" }, { "alg" : "SHA3-512", "content" : "092271bf758a1d137102b1ddec19d4b13d528ba2bc9ee1c35859f16c3fe50a573e3bae623e770c940aa43a1631a15303cfbe33e600ac0ff07a1611d3b4f9be9c" } ], "licenses" : [ { "license" : { "id" : "MPL-2.0", "url" : "https://www.mozilla.org/MPL/2.0/" } } ], "purl" : "pkg:maven/net.sf.saxon/Saxon-HE@12.9?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://www.saxonica.com/" }, { "type" : "issue-tracker", "url" : "https://saxonica.plan.io/projects/saxon" }, { "type" : "mailing-list", "url" : "http://sourceforge.net/mailarchive/forum.php?forum_name=saxon-help" }, { "type" : "vcs", "url" : "https://saxonica.plan.io/projects/saxonmirrorhe/repository" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.xmlresolver/xmlresolver@5.3.3?type=jar", "group" : "org.xmlresolver", "name" : "xmlresolver", "version" : "5.3.3", "description" : "An XML entity/uri resolver", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "e883f28e14ce902f66941bd8bc25233a" }, { "alg" : "SHA-1", "content" : "1b838b0d69eef8d46c813d88a604e3cb4c6035fe" }, { "alg" : "SHA-256", "content" : "1fe4d5b92f708dcdb82dbce12919e0171e6b5ca62c6dca6220483625098feb5f" }, { "alg" : "SHA-512", "content" : "e426f802202b69004b94d7ff67c907b1e10e3005854ed4b9fcf4898a8f727c782e06da58ebc746345e9ed30881a6006c8d588e604f3fd28a107b49f55a632f0a" }, { "alg" : "SHA-384", "content" : "78c42fec61b2008f922152fdee78811bec25da32a27adce0eb228297b62b586bb8d7bd344fac914962c2d0393f66de32" }, { "alg" : "SHA3-384", "content" : "bea5e339f64751df3e0606c53a850ff1f1e40cdc3c37ad2c3465d6f218e8a8fcde880652008ccfc2cc0a133ce91cd19c" }, { "alg" : "SHA3-256", "content" : "c8c61aad263d72404d0ff57bc173d9195cb30cd320c6cf73a917ca44ee12ca21" }, { "alg" : "SHA3-512", "content" : "7b0fab3b03366830d7bd8c1b2c6465971d80bb8cac00fb51f52f95f51040f5178a42abf469a3e31a74d8ae21c9578f16e0c90548b4eccc6da132c653c44cd038" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.xmlresolver/xmlresolver@5.3.3?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/xmlresolver/xmlresolver" }, { "type" : "vcs", "url" : "scm:git@github.com:xmlresolver/xmlresolver.git" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.xmlresolver/xmlresolver@5.3.3?classifier=data&type=jar", "group" : "org.xmlresolver", "name" : "xmlresolver", "version" : "5.3.3", "description" : "An XML entity/uri resolver", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "59c51b08ba448bc9473d92e68bf84873" }, { "alg" : "SHA-1", "content" : "e0c9cb7fcad389a50c1fbe3237af8857eca9c2b3" }, { "alg" : "SHA-256", "content" : "b0c487ad2f3e558be8d829c916d2458d10aca6a5bafa7a4d0524b70845e48a5c" }, { "alg" : "SHA-512", "content" : "3968f78e0c36009f9bbb6e6ce3c0b95a91f6f723a71d93ef9855fe4de674a22c7fc0d426d0bf95d4cdfed4b2cd8213ab8a21d235f64cdd8add9729bac948af8c" }, { "alg" : "SHA-384", "content" : "f79c1d4557cf6045010c01a9467f966f70120e7979281bfc4211960f3680285d8936143254de92307d0c32fd2f55f2a3" }, { "alg" : "SHA3-384", "content" : "638fa3393665ade60320cb93378e6592da92f3fcb3d50d6d9331b7a01086e8f67c7f13ace73bb7a747f45f0574ab15dd" }, { "alg" : "SHA3-256", "content" : "eb68a8a8de6126987953b82f58b2bb58da107aed2cb22bfd169e0028b079174b" }, { "alg" : "SHA3-512", "content" : "87b5283102a265524dc2259b2518cfb08db450a7bb738fea34cc666cea9d2e557abc73e50a2e542bb1874df6afa3d767e75875fa0a404c8387da5432e6a2688d" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.xmlresolver/xmlresolver@5.3.3?classifier=data&type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/xmlresolver/xmlresolver" }, { "type" : "vcs", "url" : "scm:git@github.com:xmlresolver/xmlresolver.git" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar", "publisher" : "The Apache Software Foundation", "group" : "org.apache.commons", "name" : "commons-lang3", "version" : "3.20.0", "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. The code is tested using the latest revision of the JDK for supported LTS releases: 8, 11, 17, 21 and 25 currently. See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml Please ensure your build environment is up-to-date and kindly report any build issues.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "4b29562ded527aa074e1d44f8646dac5" }, { "alg" : "SHA-1", "content" : "65897b3e5731220962e659e001904af3c3cbeba9" }, { "alg" : "SHA-256", "content" : "69e5c9fa35da7a51a5fd2099dfe56a2d8d32cf233e2f6d770e796146440263f4" }, { "alg" : "SHA-512", "content" : "1c72db334ea44f932c35e602b78907865f5bab43e30c871c9be67c8184eaa778f32d7bc3ab525d5921cd28619d3f9babfd483f17de54f007ee07db2e074b0307" }, { "alg" : "SHA-384", "content" : "77dd27c4d5e9372c002bd6878d2cfaaec3cf46dd57d65de63d7f2e09351344531cfa81a537b56628ac6db18adee7e484" }, { "alg" : "SHA3-384", "content" : "3456de40eef224b3ad195d2f218dd28eacb0da07607aee7ead94bd8d54bd8311d51c28d4066db4bf8b69a2df48c415f5" }, { "alg" : "SHA3-256", "content" : "36e3f71352fa14bc580db45a05b09b063392c6d39acf9e24ffa6a67bbc07a336" }, { "alg" : "SHA3-512", "content" : "6ecbc05bb5cd3f7537078b0cf51b0a5f7189dfa60c22e5ec0d6b9e2fd3f7fa7566770b5da87e0c9929f48769933c3e3a473fd5cc7231672fca36ab1fee1f8670" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://commons.apache.org/proper/commons-lang/" }, { "type" : "build-system", "url" : "https://github.com/apache/commons-lang/actions" }, { "type" : "distribution-intake", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/LANG" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", "url" : "https://gitbox.apache.org/repos/asf/commons-lang.git" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.ow2.asm/asm@9.9.1?type=jar", "publisher" : "OW2", "group" : "org.ow2.asm", "name" : "asm", "version" : "9.9.1", "description" : "ASM, a very small and fast Java bytecode manipulation framework", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "1888ad1f49038441bb2d12aa6dffe396" }, { "alg" : "SHA-1", "content" : "2ceea6ab43bcae1979b2a6d85fc0ca429877e5ab" }, { "alg" : "SHA-256", "content" : "6f3828a215c920059a5efa2fb55c233d6c54ec5cadca99ce1b1bdd10077c7ddd" }, { "alg" : "SHA-512", "content" : "bb43eaca8777c7b2b4bce9fc19f9be5742a736a23415e271643c3e14d3d82f565f6de0e29ebac570ce66b3921ece1ebd4de06abeb633ae28c17891de56973807" }, { "alg" : "SHA-384", "content" : "9448b1eeafccfe061a7533a633b3cf7445312f916d372a3b6bbae8747267b6d6a9387fd100aec22bc22160007a819fa9" }, { "alg" : "SHA3-384", "content" : "b684b8c0bc4d7cb21245b2d9e20e103460686e80b16d2b4ea5452c82948ba74fc2bcb093f4ab1d6b010448da5dc12457" }, { "alg" : "SHA3-256", "content" : "f59abda303b133b832ad3d81076241d924dce6304dce5a1a60f8d816797dbbc2" }, { "alg" : "SHA3-512", "content" : "d42ab2d7dfb1e11b896a1aad31d945639b5aa85ac9b5c2e33fc2e9174c4333eaa018217b58147930fb8017c7f569a6390c242c0e500f5b70600a2100bd08035b" } ], "licenses" : [ { "license" : { "id" : "BSD-3-Clause", "url" : "https://opensource.org/licenses/BSD-3-Clause" } } ], "purl" : "pkg:maven/org.ow2.asm/asm@9.9.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://asm.ow2.io/" }, { "type" : "distribution-intake", "url" : "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://gitlab.ow2.org/asm/asm/issues" }, { "type" : "mailing-list", "url" : "https://mail.ow2.org/wws/arc/asm/" }, { "type" : "vcs", "url" : "https://gitlab.ow2.org/asm/asm/" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", "group" : "com.google.code.gson", "name" : "gson", "version" : "2.13.2", "description" : "Gson JSON library", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "a2c47e14ce5e956105458fe455f5d542" }, { "alg" : "SHA-1", "content" : "48b8230771e573b54ce6e867a9001e75977fe78e" }, { "alg" : "SHA-256", "content" : "dd0ce1b55a3ed2080cb70f9c655850cda86c206862310009dcb5e5c95265a5e0" }, { "alg" : "SHA-512", "content" : "8974a052656d2e5ec968b6bac2edf51413ffc62040fdc65f14f00597e738ab544d22487f8579ba90618b5a7f94ef33773510fac67b408fee6ed274b38f3d9947" }, { "alg" : "SHA-384", "content" : "98e8afe5b23c43b84e7a57e0e27f683a182fcf97ee3eeb6a1311582f7fecd846c806ffb092b620088dc03d256d8eaf27" }, { "alg" : "SHA3-384", "content" : "d61d6b1cf6997c75287f454e536f855db8404e5fb9d0b8faa4dcc1e7a60ffefc05c2f92f3514e091808a8677b29f3619" }, { "alg" : "SHA3-256", "content" : "1c051cfe5e630b35d003f96e135de7c5d5cab145b6e1159143570cb246426a0d" }, { "alg" : "SHA3-512", "content" : "55ddee7f6c1659ffa82e5c308a0181b459cfeb3442f1f9868ff7e9a3c83376bd2ad527b16d5131df442ffd03d06c35dbd64458df6b02a111c1654f01db381ba5" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0", "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], "purl" : "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/google/gson" }, { "type" : "issue-tracker", "url" : "https://github.com/google/gson/issues" }, { "type" : "vcs", "url" : "https://github.com/google/gson/" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar", "publisher" : "Google LLC", "group" : "com.google.errorprone", "name" : "error_prone_annotations", "version" : "2.41.0", "description" : "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "75e3b25da8b8a2136463c4674f5e49bf" }, { "alg" : "SHA-1", "content" : "4381275efdef6ddfae38f002c31e84cd001c97f0" }, { "alg" : "SHA-256", "content" : "a56e782b5b50811ac204073a355a21d915a2107fce13ec711331ad036f660fcc" }, { "alg" : "SHA-512", "content" : "e2eb4bf9f36f95a4d4c5ea344db5cd90a456e63bef8e52932b8f6f4ecfdd59cb2f6c2ce9e67b0070c82177e42885688b95afef591b16001f789b378f18afdf30" }, { "alg" : "SHA-384", "content" : "43700b378624aa37197ef03a6b5ea40b5fbb6c0aa667eadf810ad36f0707dffaf3ea23471f2553327c3f5644cc875ee7" }, { "alg" : "SHA3-384", "content" : "8bf3293cf4b72c9a999948f8812190636ef3b0c35bab8dbf9a54c263eeab2a3b3d0774fdcab52c6d114551ff74a8aea2" }, { "alg" : "SHA3-256", "content" : "2ca1a59f4fdc37a3c83501542c63842fa4fe40c06f69a59a2a072e4af442a16a" }, { "alg" : "SHA3-512", "content" : "6d1f419996b15e5a2bd9b268d166046e38fe9cc6c58fe56aaacbe71b95e3db8c8fe1d226e7f549ea227956feaf3087706bdfa79930fe432298bba9ec06c26a90" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://errorprone.info/error_prone_annotations" }, { "type" : "vcs", "url" : "https://github.com/google/error-prone/error_prone_annotations" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.checkerframework/checker-qual@3.53.1?type=jar", "group" : "org.checkerframework", "name" : "checker-qual", "version" : "3.53.1", "description" : "checker-qual contains annotations (type qualifiers) that a programmerwrites to specify Java code for type-checking by the Checker Framework.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "32323b38c10c96ebc485317bb59efdb6" }, { "alg" : "SHA-1", "content" : "c64abd7701559c8a03b8703df48f7cb63f65247d" }, { "alg" : "SHA-256", "content" : "befe4b15773dc92ccc88ecb5ab1607786a10c3b889813cb39ef21c7f5e3643dc" }, { "alg" : "SHA-512", "content" : "a4191ba3a43e6977485afcf24e8889de32b870475aadae731096cba583c92764192c15afcf84c5759e6d8e3707f81d3fd839bddbfb8ed528fac0a656b9ce1401" }, { "alg" : "SHA-384", "content" : "139794acdf1131f5e951131f2c273dc136ddfdda7cd4e4cf9d6294bcbf7b5acd6a6c7b9962e780b48e090e751ed7fba0" }, { "alg" : "SHA3-384", "content" : "042134a34f013eb1f5cc0d92572d29c9cece897197a51830bc04b7803d0f5dbf81571a8da4bac452aa11556b7521988c" }, { "alg" : "SHA3-256", "content" : "23ceb1d60bc98acbf9ee091bb3179ab12f108969ffd32900c0267a48a004b5a8" }, { "alg" : "SHA3-512", "content" : "d8c069896c4efbcfcb3ad308d84367ca7ed70760987ad97c63253cac1a7f6e40caf37661df109d9b77e56e4938240a04b59b480138442bd6a71ad3e735e21eb9" } ], "licenses" : [ { "license" : { "id" : "MIT" } } ], "purl" : "pkg:maven/org.checkerframework/checker-qual@3.53.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://checkerframework.org/" }, { "type" : "vcs", "url" : "https://github.com/typetools/checker-framework.git" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/org.pcollections/pcollections@4.0.2?type=jar", "group" : "org.pcollections", "name" : "pcollections", "version" : "4.0.2", "description" : "A Persistent Java Collections Library", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "3bc80c4568bb9766e119df617ef8b553" }, { "alg" : "SHA-1", "content" : "c8398b4443deae11e6eaffbc04a371b4eb8f6b8e" }, { "alg" : "SHA-256", "content" : "2bbeef5797a241300c4f7513cd546239629ed7deda4fc0c31df90bb95f5f13ef" }, { "alg" : "SHA-512", "content" : "b1c87f1569c61b079fb50bf4cb0e885aefde3138ab8f1777386aa47652bf9ed359e4437ecff3c6f09e7974c10af88b6c27baaa147b95e1fd69b3fdf3fdbd4da5" }, { "alg" : "SHA-384", "content" : "a9a0266da1d32de32547431c6f1a629d697f5330a1cb85485b698958d1b5861797cc8037b8dd9cfb6979b52e51b8aede" }, { "alg" : "SHA3-384", "content" : "7971fad6691a1b90eb2729119582ee638b58a70f11c3232bd277183ce675e4c70dae63a0ba56982c87efc0bc3c2ea338" }, { "alg" : "SHA3-256", "content" : "338d7fdf8c11b4fc538c05420fb2c6426dab2209e2b1e2a20f1549277f4a4a4f" }, { "alg" : "SHA3-512", "content" : "5722d084f2f3aaa11147ce496c548647555669895d8f456d501a07ba0027a86eea44335c906efcd7a035b7a9ecc1ffe55963023b3581f3005b8acf81f7c9c7fa" } ], "licenses" : [ { "license" : { "id" : "MIT" } } ], "purl" : "pkg:maven/org.pcollections/pcollections@4.0.2?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/hrldcpr/pcollections" }, { "type" : "vcs", "url" : "https://github.com/hrldcpr/pcollections" } ] }, { "type" : "library", "bom-ref" : "pkg:maven/com.github.oowekyala.ooxml/nice-xml-messages@3.1?type=jar", "group" : "com.github.oowekyala.ooxml", "name" : "nice-xml-messages", "version" : "3.1", "description" : "Associates XML DOM nodes to their position in source, to enrich error messages. This builds on top of the standard org.w3c.dom API. Should probably not be used in performance critical code, but can hopefully cleanup reporting logic in places where user-friendly messages are important.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "39c913451ff2d2ec740c58a77a26fa16" }, { "alg" : "SHA-1", "content" : "4c3863b0f015af5cfd9abe02fab364fb99867167" }, { "alg" : "SHA-256", "content" : "0b4ceb5b8362d43c9c6c49b1bd57f1c5da54d3c5c7c305fa39c0a04462bb4799" }, { "alg" : "SHA-512", "content" : "6b3e7c2f1d4b9a46c8dc113b60deee5e2a70b57f308886074816e0d7e3a5460cfb7c1c547171c0ad125deb551bafbb41b911c52db8bac448be3504b0d407a7fc" }, { "alg" : "SHA-384", "content" : "c79cd24010cfcfcc712509412dacbfb5bcc4a64e98bfd6a638698350c4f45c1a2c6724491368cc56a4d5947cbe0482e1" }, { "alg" : "SHA3-384", "content" : "218130aec89a116471d0dd34b9c733f144e36f1cbcd2b705fea4ed2f7fb90e8c6a5386aaff037bc772e180868b13c03f" }, { "alg" : "SHA3-256", "content" : "02b4007b4ada909e9bb676189310b233c8c2c254e2bdc901928030ef0f96f346" }, { "alg" : "SHA3-512", "content" : "f2e7883ab42ba31eb380ed9dc7199f3d7d4b0c0c8b06432ebe502c6e117017abdd579f86032a14bf842fb68889a13d1bd504a60a212f889e171e78003c0322a0" } ], "licenses" : [ { "license" : { "id" : "MIT", "url" : "https://opensource.org/license/mit/" } } ], "purl" : "pkg:maven/com.github.oowekyala.ooxml/nice-xml-messages@3.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/oowekyala/nice-xml-messages" }, { "type" : "distribution-intake", "url" : "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/oowekyala/nice-xml-messages" } ] } ], "dependencies" : [ { "ref" : "pkg:maven/net.sourceforge.pmd/pmd-python@7.22.0?type=jar", "dependsOn" : [ "pkg:maven/net.sourceforge.pmd/pmd-core@7.22.0?type=jar" ] }, { "ref" : "pkg:maven/net.sourceforge.pmd/pmd-core@7.22.0?type=jar", "dependsOn" : [ "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar", "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar", "pkg:maven/net.sf.saxon/Saxon-HE@12.9?type=jar", "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar", "pkg:maven/org.ow2.asm/asm@9.9.1?type=jar", "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", "pkg:maven/org.checkerframework/checker-qual@3.53.1?type=jar", "pkg:maven/org.pcollections/pcollections@4.0.2?type=jar", "pkg:maven/com.github.oowekyala.ooxml/nice-xml-messages@3.1?type=jar" ] }, { "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar", "dependsOn" : [ "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar" ] }, { "ref" : "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/net.sf.saxon/Saxon-HE@12.9?type=jar", "dependsOn" : [ "pkg:maven/org.xmlresolver/xmlresolver@5.3.3?type=jar", "pkg:maven/org.xmlresolver/xmlresolver@5.3.3?classifier=data&type=jar" ] }, { "ref" : "pkg:maven/org.xmlresolver/xmlresolver@5.3.3?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.xmlresolver/xmlresolver@5.3.3?classifier=data&type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.ow2.asm/asm@9.9.1?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", "dependsOn" : [ "pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar" ] }, { "ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.checkerframework/checker-qual@3.53.1?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.pcollections/pcollections@4.0.2?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.github.oowekyala.ooxml/nice-xml-messages@3.1?type=jar", "dependsOn" : [ ] } ] }