{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.4",
  "serialNumber" : "urn:uuid:ae8da91d-aefb-47d5-be50-4ee43b15a45a",
  "version" : 1,
  "metadata" : {
    "timestamp" : "2022-09-20T11:37:29Z",
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.7.1",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "538c878ebf89b372876e247d056a3fc5"
          },
          {
            "alg" : "SHA-1",
            "content" : "4561e50edb47e12a03712b1afce9b20cba32fd28"
          },
          {
            "alg" : "SHA-256",
            "content" : "f0ea7b3bcf5c7ba649b8d9807e805385330501881677d47333aebce8305ef4d4"
          },
          {
            "alg" : "SHA-512",
            "content" : "a35400ca6411692ae8964fe7030eaba2a83a2fa50e2883def3054191283c3b48e2dcdd68bf80f5a0ede3898cc6b7cb7b998aacd2c1e969320053c43b6ab8d873"
          },
          {
            "alg" : "SHA-384",
            "content" : "75c0c03a03c69e82ad1f7b942d6d733da8261c4058174355d6b24ebd88cee34180f2e8484d2b0fedaf459078bdf6e927"
          },
          {
            "alg" : "SHA3-384",
            "content" : "98cd312d4dfc104a0a66d65023d0aade423f08951f2a9e0215e703f0c81c4f274d8e11a2db1abc30a558b820d65860c4"
          },
          {
            "alg" : "SHA3-256",
            "content" : "0c5fd65013128de457b049a824c4ad11212d668b503613ce19a54d545e5cf82d"
          },
          {
            "alg" : "SHA3-512",
            "content" : "72ea0ed8faa3cc4493db96d0223094842e7153890b091ff364040ad3ad89363157fc9d1bd852262124aec83134f0c19aa4fd0fa482031d38a76d74dfd36b7964"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "Eclipse Steady",
      "group" : "org.eclipse.steady",
      "name" : "lang-python",
      "version" : "3.2.5",
      "description" : "Core classes for Python analysis",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.steady/lang-python@3.2.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://projects.eclipse.org/projects/technology.steady"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/steady/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/steady/tree/master/lang-python"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.steady/lang-python@3.2.5?type=jar"
    }
  },
  "components" : [
    {
      "group" : "javax.validation",
      "name" : "validation-api",
      "version" : "2.0.1.Final",
      "description" : "Bean Validation API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5d02c034034a7a16725ceff787e191d6"
        },
        {
          "alg" : "SHA-1",
          "content" : "cb855558e6271b1b32e716d24cb85c7f583ce09e"
        },
        {
          "alg" : "SHA-256",
          "content" : "9873b46df1833c9ee8f5bc1ff6853375115dadd8897bcb5a0dffb5848835ee6c"
        },
        {
          "alg" : "SHA-512",
          "content" : "2f136d337c49a83dc0eff1caae74ba11413269b779257ae0b76864e207abd729b2392ab2ae3a3dc7a6d065d60baef844ad797a11f69589119a827ccee5c20840"
        },
        {
          "alg" : "SHA-384",
          "content" : "c0559eff2537f82b11f611546b0b387f8076efdee8e90537b2c9f0f2325cc7686c1fbbf4b00d6217dc33677f4d5382f8"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e26cb51beade8cd45a737002c98a400c800928b9a26a702a1833c29e1e0868af355460416d9d813b0830a184a9fefc08"
        },
        {
          "alg" : "SHA3-256",
          "content" : "987342d3fd7c3275cdbde0295e91a0dfac15058f73b57341ba40cce62f581195"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c8e8c4f83fb4c3d881c7dfda07650b035db00251aa8b8030f00c4a0cf1ed919665a76c44a0da78b1bda118279cbf26646c1b813c1f3c21be2b8099020ffdfd01"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/javax.validation/validation-api@2.0.1.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://hibernate.atlassian.net/projects/BVAL/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/beanvalidation/beanvalidation-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.validation/validation-api@2.0.1.Final?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-api",
      "version" : "2.18.0",
      "description" : "The Apache Log4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "38d29af13312d716f8d1d8fd79736f05"
        },
        {
          "alg" : "SHA-1",
          "content" : "c72ad9b1d8d42e4ea7befd8248bf05877af4c63d"
        },
        {
          "alg" : "SHA-256",
          "content" : "b977057233153b242ac58cc5b7d3121136b9c34c86c1e191c042ba4a828144c5"
        },
        {
          "alg" : "SHA-512",
          "content" : "2d96625cb1ad07d7f30edc488506481a199fab30bdfcdb253af28661ce4a442164af3ddd421ac85c154707d5c91009d3ec91ee31d9c46467865370042ccb2455"
        },
        {
          "alg" : "SHA-384",
          "content" : "434791c20db5028fae6310a51d0c3c9950f4ec5eb18049bf9bfeb95a051d753b42fa07ffff53eac7205b3778af4ac3c0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1abde1bb0f560983898656340f033abb412f74d134d4382b5b2697bde0d6c0ce2d191f553e4d82ecad72b5a7ef5dee9a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "867bf8133a3de6e76aef49022ff1124c53ada1f6ff9722762d0a42ab6f891297"
        },
        {
          "alg" : "SHA3-512",
          "content" : "79f4b3dc31f13fab19192ddc1868ca151936cb31bd6c35d320a1863ddb0b7fb3acdcc2dec5381a664d4b669c637128e7b74b8ac36e8afcf5d2512bd0b8ed63e6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.18.0?type=jar",
      "externalReferences" : [
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/logging-log4j2/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://logging.apache.org/log4j/2.x/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LOG4J2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=logging-log4j2.git"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.18.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-core",
      "version" : "2.18.0",
      "description" : "The Apache Log4j Implementation",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8869945da3b66916542b9fdd2e2605f2"
        },
        {
          "alg" : "SHA-1",
          "content" : "07c1882ede137548925eadb750615edab2f6e13c"
        },
        {
          "alg" : "SHA-256",
          "content" : "ec7a23bfaf4d8ddf3394671561dd4a0f35b69d6fa6918734e3e8bc4066f741c4"
        },
        {
          "alg" : "SHA-512",
          "content" : "3f323284793d663bd82811b8a1fb45b6617ac70047fea3410c5403a0b1935e0cf53aa6936cf9986d38936e93c10235eb5a61e1c6ff87fda08c33bb8469a70e0f"
        },
        {
          "alg" : "SHA-384",
          "content" : "1d8f02496df1e6c0bc0e169337b3e45812297b15e099d3f244bf59ca7b00e0d0f8f94692ab4fc4531dd889b1e13a0ff9"
        },
        {
          "alg" : "SHA3-384",
          "content" : "74194f1125448a29dbd6c3af00f79b5174626801be3e691f270f40e03c4d46bdfc0e0125ca2c338c5b90da75ada82b0c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "95e3ac099964e187910e31a65af044b028db586b19c5234b75e86d843d26b3ba"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fbad7e2f569dd6e8f073876ced76c9ae2a477f3b8d5d8a5142b1a22017e7f7b51504971ed6d9c7d19867b8f48b3b15d9af54384804ceeb56ccc3391f55d25e6e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.18.0?type=jar",
      "externalReferences" : [
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/logging-log4j2/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://logging.apache.org/log4j/2.x/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LOG4J2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=logging-log4j2.git"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.18.0?type=jar"
    },
    {
      "group" : "com.github.spotbugs",
      "name" : "spotbugs-annotations",
      "version" : "4.7.2",
      "description" : "Annotations the SpotBugs tool supports",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f9d6498ee19a3e9ace207f1f6d32bd1d"
        },
        {
          "alg" : "SHA-1",
          "content" : "3546c0a24a083e7fdfdf5986bef76b19c477a264"
        },
        {
          "alg" : "SHA-256",
          "content" : "e2b4c654b2d7897490cf1f22a009ac677be4c92bfc493a0dedb5706f5e489839"
        },
        {
          "alg" : "SHA-512",
          "content" : "d306545aae5e8498a26d2a370c2deb1540d01add801240ececf4a3d5e9b3db6d93258c193e8e827c57cafd8d8d02b681998bd5ba14438ca1e1b36f7d1e37dd73"
        },
        {
          "alg" : "SHA-384",
          "content" : "82d9d467f1b61829bea927dacd631c82fc4435bfde438d85325f7abd3fdab5d994b0c0f38ef2ad8b35e98211f7a2c4c1"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f2d5346126ca0d6f8733234fcc252682c8f510e722fbd146c8b98a3201da779fc887e9cfb92dc830547ab5a068828c2a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "804c5188a6f2e3937a72e8db7a42d2530abdc4d025d64f694ef1df7baa377761"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2e7a2c66baa33acf400f37617666f3be225a16c7186c1f23bc35ce5c052c33455bbd63fa514d7b39f12c50edba1eb817668b6c59964295ae6a49ff965a63afdd"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "LGPL-2.1-only"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.spotbugs/spotbugs-annotations@4.7.2?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/spotbugs/spotbugs/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.spotbugs/spotbugs-annotations@4.7.2?type=jar"
    },
    {
      "group" : "com.google.code.findbugs",
      "name" : "jsr305",
      "version" : "3.0.2",
      "description" : "JSR305 Annotations for Findbugs",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "dd83accb899363c32b07d7a1b2e4ce40"
        },
        {
          "alg" : "SHA-1",
          "content" : "25ea2e8b0c338a877313bd4672d3fe056ea78f0d"
        },
        {
          "alg" : "SHA-256",
          "content" : "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7"
        },
        {
          "alg" : "SHA-512",
          "content" : "bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804"
        },
        {
          "alg" : "SHA-384",
          "content" : "ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://code.google.com/p/jsr-305/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"
    },
    {
      "group" : "org.eclipse.steady",
      "name" : "shared",
      "version" : "3.2.5",
      "description" : "Contains class definitions shared between the different Maven modules. They can be classified as follows: Classes for JSON (de)serialization, classes supporting service connectivity, utility classes and classes used to ensure consistency across modules.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ad31ac9925832062409beaa7e1f757b9"
        },
        {
          "alg" : "SHA-1",
          "content" : "b7e25e66a898a5081347f8037dc1916100fd2407"
        },
        {
          "alg" : "SHA-256",
          "content" : "4741e2b0d3868baed649656fbd0ee1afe9f5b88fb246b603825f3cf1fc4f7e91"
        },
        {
          "alg" : "SHA-512",
          "content" : "f3b4979088d6ccd21a1be907a70354137b11f05dc1031f7ac9fbe3cfa546b261857ac03f38fd1d71644aa118e63c010828aa11d3b858d0519043941eadef20cc"
        },
        {
          "alg" : "SHA-384",
          "content" : "094023555256b45ef9e27313b2758f0a369e164830d90545ab28140f55dc3e2723858cc5364cf5ac95dc98cd3eff31fe"
        },
        {
          "alg" : "SHA3-384",
          "content" : "caa26575f2da4bcb3bb2156c3d07115f1307c4e975c1b8ba12a804c55297d86773d8c67421a26398903231f4b181ccb2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "bd0347239f6568a59bf9c1902f9ae5ed374216da8825279cc3b5519c0629307a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4fa707bb438aa0ebe831d10430eeaab3a37caabdeee39a09e8bc004ee055e7aae496fac741afbd8846f2ed9a0253782acfa672ebf3721a30c2607dff8315b4d5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.steady/shared@3.2.5?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/steady/tree/master/shared"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.steady/shared@3.2.5?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-core",
      "version" : "2.13.4",
      "description" : "Core Jackson processing abstractions (aka Streaming API), implementation for JSON",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e8f064827ddb8deb06e45d20988bcaa5"
        },
        {
          "alg" : "SHA-1",
          "content" : "0cf934c681294b97ef6d80082faeefbe1edadf56"
        },
        {
          "alg" : "SHA-256",
          "content" : "4c2e043200edd9ee7ba6fc378bd5c17784a5bf2388e152d208068b51fd0839cf"
        },
        {
          "alg" : "SHA-512",
          "content" : "cf54bf5be3a5015a4b2c3ac986bf01f64517df224c8ba67197118d06f7fbe8ad64e39d002df326a72feb5aec8f0bc7f15338e90c4ba0668a167a0f03a81ce47f"
        },
        {
          "alg" : "SHA-384",
          "content" : "5fd2723a9f5bae811e71b596180c56355497f87cdd6c9bdc74716224ea1d133b6ed4e5df20b6ec169b3745066019ad94"
        },
        {
          "alg" : "SHA3-384",
          "content" : "47217ac4e35397ed519916b26ec780ecbff69de0069afcbf9329a84f52b0e8fc4700e0c7b6bce7b9ddf585df7d944f22"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2be4b3203664ef4249d40af8d3ea9516805a573515a8ece27c5e625c0969ed0f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "75b4fa4464de9e5efbed460b940ef79b34fc7c477cb61540960f6e56039915a520176d6bf42077453cb049ec184d3b6d88006a4016a02b5de87da907d8c0791a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.4?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/jackson-core"
        },
        {
          "type" : "website",
          "url" : "http://fasterxml.com/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.4?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-databind",
      "version" : "2.13.4",
      "description" : "General data-binding functionality for Jackson: works on core streaming API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "03cb7aea126610e4c96ca6d14d75cc55"
        },
        {
          "alg" : "SHA-1",
          "content" : "98b0edfa8e4084078f10b7b356c300ded4a71491"
        },
        {
          "alg" : "SHA-256",
          "content" : "c9faff420d9e2c7e1e4711dbeebec2506a32c9942027211c5c293d8d87807eb6"
        },
        {
          "alg" : "SHA-512",
          "content" : "23f32026b181c6c71efc7789a8420c7d5cbcfb15f7696657e75f9cbe3635d13a88634b5db3c344deb914b719d60e3a9bfc1b63fa23152394e1e70b8e7bcd2116"
        },
        {
          "alg" : "SHA-384",
          "content" : "e25e844575891b2f3bcb2fdc67ae9fadf54d2836052c9ea2c045f1375eaa97e4780cd6752bef0ebc658fa17400c55268"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e6955877c2c27327f6814f06d681118be2ae1a36bc5ff2e84ad27f213203bf77c347ba18d9abc61d5f1c99b6e81f6c2d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "88b12b0643a4791fa5cd0c5e30bc2631903870cf916c8a1b4198c856fd91e5f4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7e86a69bcf7b4c8a6949acce0ec15f33b74d5ac604f23cd631ec16bfdfd70d42499028b9d062648b31d7a187ea4dc98ec296a329f4cfd4952744ed1281fa9d9a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.4?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/jackson-databind"
        },
        {
          "type" : "website",
          "url" : "http://fasterxml.com/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.4?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-annotations",
      "version" : "2.13.4",
      "description" : "Core annotations used for value types, used by Jackson data binding package.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7e982dafcf25c24b365b5088eaf8a0a6"
        },
        {
          "alg" : "SHA-1",
          "content" : "858c6cc78e1f08a885b1613e1d817c829df70a6e"
        },
        {
          "alg" : "SHA-256",
          "content" : "ac5b27a634942391ca113850ee7db01df1499a240174021263501c05fc653b44"
        },
        {
          "alg" : "SHA-512",
          "content" : "788a836b1631dabed472a0387de2ccdf86ab9091b04246d58e257780bb382e6ae068b6df862407c1256b0b83d1f9366813e54e98982f881c3d222a9f4a8e9ebb"
        },
        {
          "alg" : "SHA-384",
          "content" : "7ae717dc399ccfe7c2a4831fae5c410d896e0a5afdff710003fa306ae2663a3c21ca000edfec9cdba30b0997c4c66757"
        },
        {
          "alg" : "SHA3-384",
          "content" : "fd2b435781f0870b572ce493a7c2e8cbc0cdfec80a24ae9a3d0874c27f84fb527a80afdc30a4f641a8f5389865603f4c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d6a55b712e499803461575b89eb8e2114307c88ba0e7fa56a65eab995b155f3d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "295881324b5331e3e9530b26f719020f01f2ffd33ed96cdfad7983c3e4578e1eea0cce9d8ed622a1ec6b7b1b1e60af858b6813d08e4f31a38d1422d9c70a6a5f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.4?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/jackson-annotations"
        },
        {
          "type" : "website",
          "url" : "http://fasterxml.com/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-configuration",
      "name" : "commons-configuration",
      "version" : "1.10",
      "description" : "Tools to assist in the reading of configuration/preferences files in various formats.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b16511ce540fefd53981245f5f21c5f8"
        },
        {
          "alg" : "SHA-1",
          "content" : "2b36e4adfb66d966c5aef2d73deb6be716389dc9"
        },
        {
          "alg" : "SHA-256",
          "content" : "95d4e6711e88ce78992c82c25bc03c8df9ecf5a357f0de0bec72a26db3399374"
        },
        {
          "alg" : "SHA-512",
          "content" : "cc7fdd7d7bd1851b48d10883766fac9d72b0407714b3c653369130e3224bdd19a4cb941fb813dde1e8c7d29bb07a5b1a44d611240ead1717e51a15a31c9630f8"
        },
        {
          "alg" : "SHA-384",
          "content" : "71c60449129b1543aea7b4b85d6f16c41dd71468590f49b4420eef8a3ad2a2e82ad097f08cb0c03decc3c69a7ada6e1e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c928eb961ec77ff29ae805564b78107b79bff66273e4061e3ef028908cbfdce047c6ef6220fd76956a44581b5af10145"
        },
        {
          "alg" : "SHA3-256",
          "content" : "aedaf478de1a1500159495841e0eea1f40bb96c7348f0e20c1e0375fe4e7860b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d15349092cdc0ac565c2a7b84ab515a884ec2117a0a034e600baf6cba9876173eb8f80ee3c7cca07d0a8db0d094b3a3aef4a76bee8bcb8c8113ad5b445f2136d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-configuration/commons-configuration@1.10?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/CONFIGURATION"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/configuration/tags/CONFIGURATION_1_10RC2"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "http://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-configuration/commons-configuration@1.10?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-lang",
      "name" : "commons-lang",
      "version" : "2.6",
      "description" : "Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4d5c1693079575b362edf41500630bbd"
        },
        {
          "alg" : "SHA-1",
          "content" : "0ce1edb914c94ebc388f086c6827e8bdeec71ac2"
        },
        {
          "alg" : "SHA-256",
          "content" : "50f11b09f877c294d56f24463f47d28f929cf5044f648661c0f0cfbae9a2f49c"
        },
        {
          "alg" : "SHA-512",
          "content" : "4a5a3dbe4941c645e2cca068cca5c1882cfe988b02e7cd981d1e51784900767d1deab0e0e0566f559c9fcabb4a180e436d5bb948902d4f4106f37360466afb42"
        },
        {
          "alg" : "SHA-384",
          "content" : "9725bc421adc1dbcd6f937eca0f3075d186a2b353ece4cef66b0fe81bb8d3f7d7641c43e86d657ef526c719f0c2a8c90"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4bc4eaaf2580ded6d552b96ae5261c936de95f69a1d137c47279c51bf2aa1406ae44f69ccc94486267b8441e53c4bd74"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b68d49ef037d428ea0c3e67a7a20f3d68a134bef30a1639ec08d28886b9f5629"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2e9ffc0608827cffc0b48b7a0f35d371c66586c99fea2910f7c2a237c7c57d9ae4d65de7c8e018362c2e4f963c2f70a9196cebf35457f1dd0cea6c65c256f673"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-lang/commons-lang@2.6?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/lang/branches/LANG_2_X"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "http://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-lang/commons-lang@2.6?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-logging",
      "name" : "commons-logging",
      "version" : "1.1.1",
      "description" : "Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ed448347fc0104034aa14c8189bf37de"
        },
        {
          "alg" : "SHA-1",
          "content" : "5043bfebc3db072ed80fbd362e7caf00e885d8ae"
        },
        {
          "alg" : "SHA-256",
          "content" : "ce6f913cad1f0db3aad70186d65c5bc7ffcc9a99e3fe8e0b137312819f7c362f"
        },
        {
          "alg" : "SHA-512",
          "content" : "470323a2ee38be1b7ff8c84f1f5a5f8c4ec2ceb6b0649faa7b961f111865877dbe125409f72b1c52c7f18aa89e3469635c49ff4b83f86cc2f2eb2cc5562f9bff"
        },
        {
          "alg" : "SHA-384",
          "content" : "264a511a601a07558911ccc5f49ef579aa1b1760bb4091bcbe1a0017c7be64d86f1d0b28ef560819614b252907cdd44a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e61a9dafb4f92a3cfd76fc28ff340eb15bc0fca939a48408fd9032362b8a95ce938e58dd01f7c3d0ff90ac21cacc77df"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0799a9105d174ba2f082845e8ca27db236118b00e4a2053ee1fde798b2fbd031"
        },
        {
          "alg" : "SHA3-512",
          "content" : "dbdcf933551c6abe834ac4fa5b4833e47895c2573530b74f51daff7291dab60db88946fc34a518f423a68e9c9ce36507345070e56a86fb5a567be685c1e3cded"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-logging/commons-logging@1.1.1?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/LOGGING"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/repos/asf/commons/proper/logging/tags/commons-logging-1.1.1"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-commits/"
        },
        {
          "type" : "website",
          "url" : "http://www.apache.org/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-logging/commons-logging@1.1.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-collections",
      "name" : "commons-collections",
      "version" : "3.2.2",
      "description" : "Types that extend and augment the Java Collections Framework.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f54a8510f834a1a57166970bfc982e94"
        },
        {
          "alg" : "SHA-1",
          "content" : "8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5"
        },
        {
          "alg" : "SHA-256",
          "content" : "eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8"
        },
        {
          "alg" : "SHA-512",
          "content" : "51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16"
        },
        {
          "alg" : "SHA-384",
          "content" : "dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8ce03528e4a6e95c44283b56eca87e6a6d3bf1363411a55b538f4f9110cf7470581ea5c73925e877ddab08dba0603f40"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fd3d6134b5f07077b82ccf93d148dacf7c4ce5c971209510edd0e77e3e38c19e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c2a523916fb7c7d55a05d5e3d9e9b33000733f4b20a71be174e4e093e3f06ea78ad831edd1505527da7388105f8647efb7d5666ba852c90b4e2d5bb74256efbc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/COLLECTIONS"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/collections/trunk"
        },
        {
          "type" : "build-system",
          "url" : "https://continuum-ci.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "http://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"
    },
    {
      "group" : "com.github.package-url",
      "name" : "packageurl-java",
      "version" : "1.4.1",
      "description" : "The official Java implementation of the PackageURL specification. PackageURL (purl) is a minimal specification for describing a package via a \"mostly universal\" URL.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f8b3a23e6402d317b612251c83d292e7"
        },
        {
          "alg" : "SHA-1",
          "content" : "0a0d1009191c1cf6b04f40d26e4717596f3a90e0"
        },
        {
          "alg" : "SHA-256",
          "content" : "8e23280221afd1e6561d433dfb133252cd287167acb0eca5a991667118ff10a2"
        },
        {
          "alg" : "SHA-512",
          "content" : "ea5ed91a395e3c8ef18d575d363dc30302986dc5cc8423e97950708cd48dd87e97176619a246d72e8f5b4ff1a7fbb2afb5e9b3c7a11aa7340b540655ba4d4e9b"
        },
        {
          "alg" : "SHA-384",
          "content" : "791d86830598ccce6ea59faaa7ece317b84ce1b245194e39cf576f65250b32c8a62c0660478a4d4038040b8650e520b3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c2354f6e79b3feefa44b289a53b9ee05a4db20d75a6a367a4880a2028ec8306fd45c5495962381709b15134136bd3ed6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "29888a1b55158593ef90003638a7ea204b0cff1d255f48780caa37e1c52bcfe3"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3bb0b2ef76d2dc0cff23f70541091bd30744d1fb0e240aca4c930f01f70314f1f7cf80552d0116b77333a2c3a3025b217fc3aceca2755469f6871983d5e9740a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.package-url/packageurl-java@1.4.1?type=jar",
      "externalReferences" : [
        {
          "type" : "build-system",
          "url" : "https://travis-ci.com/package-url/packageurl-java"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/package-url/packageurl-java/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/package-url/packageurl-java.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.package-url/packageurl-java@1.4.1?type=jar"
    },
    {
      "group" : "org.eclipse.steady",
      "name" : "lang",
      "version" : "3.2.5",
      "description" : "Framework and base classes for language analysis",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "03d03a5d2290a7eec5ec7ef6c528a889"
        },
        {
          "alg" : "SHA-1",
          "content" : "ba3be1c78e585254ed726432fdfaedeb7c210241"
        },
        {
          "alg" : "SHA-256",
          "content" : "b190c33a3b84fbe984b4a8de56850e33b5635518fcc4a4beabfe589f4af6f019"
        },
        {
          "alg" : "SHA-512",
          "content" : "9e51882f1eda7df29fd889d543ebaa585127142a3ff99da01579b0b98326d4b34a20cb2d4011573de79b96d84a54e68b655556ab310206b77121d4f19be14116"
        },
        {
          "alg" : "SHA-384",
          "content" : "06368a77d68b63ddc3ce7bf1a705d98e4b8c44257994c265cdca62c8faee08d704a2eecfbed5b78aa489dbe3423de537"
        },
        {
          "alg" : "SHA3-384",
          "content" : "791424f5b52459db4024e533053fa5675d8fa14b749c3bb82b1a8a03598fb6eff568b51f16351299e1f4764f3caaaf9e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0c23aa242141d5064847bc6a798b37edd9317ee867ab65f6a669a11a107e42b8"
        },
        {
          "alg" : "SHA3-512",
          "content" : "bb4734d1e14dbb296df7bbf7f6db991ae54e235b1ff3da5ee3032892ecb8b1519d451090170808b9a75d00e1bd4304c75bb8cd0c66302e6f919b73db7b35fc1e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.steady/lang@3.2.5?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/steady/tree/master/lang"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.steady/lang@3.2.5?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents",
      "name" : "httpclient",
      "version" : "4.5.13",
      "description" : "Apache HttpComponents Client",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "40d6b9075fbd28fa10292a45a0db9457"
        },
        {
          "alg" : "SHA-1",
          "content" : "e5f6cae5ca7ecaac1ec2827a9e2d65ae2869cada"
        },
        {
          "alg" : "SHA-256",
          "content" : "6fe9026a566c6a5001608cf3fc32196641f6c1e5e1986d1037ccdbd5f31ef743"
        },
        {
          "alg" : "SHA-512",
          "content" : "3567739186e551f84cad3e4b6b270c5b8b19aba297675a96bcdff3663ff7d20d188611d21f675fe5ff1bfd7d8ca31362070910d7b92ab1b699872a120aa6f089"
        },
        {
          "alg" : "SHA-384",
          "content" : "093ac3e2dde58e34aa70309c7305eb3c9b5be2509a9293f1672494da55479a86bd112e83326746dc7a32855472952b99"
        },
        {
          "alg" : "SHA3-384",
          "content" : "cd6882e7868624164e460f2f3ea01466f863c0dcb902b031c656b57356f563be83b29530df41d88d634ed3d01fc9964d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "710b1d8d7dae0b8e4270756694ca9c83d64965f42d3b4170c609b14d47c2762c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "276fa6a6599dc89382d658115695cf4da6b0d39b34e9c349c17a5dbd64122eaee553bb9ed75c0378ec4a83be157c8aa39370662de3c9b8fd55ebc1dd608383e6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.apache.org/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTTPCLIENT"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents",
      "name" : "httpcore",
      "version" : "4.4.13",
      "description" : "Apache HttpComponents Core (blocking I/O)",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e07a248f61c52776a2366c075dcd4963"
        },
        {
          "alg" : "SHA-1",
          "content" : "853b96d3afbb7bf8cc303fe27ee96836a10c1834"
        },
        {
          "alg" : "SHA-256",
          "content" : "e06e89d40943245fcfa39ec537cdbfce3762aecde8f9c597780d2b00c2b43424"
        },
        {
          "alg" : "SHA-512",
          "content" : "23430cde8b9bed33c91474ba49f1143284135df1b25fdcbc37bc3bb7e9549e77b3918eb40250093db652ae200367e87316129b23b4f6987e94939d60f467498d"
        },
        {
          "alg" : "SHA-384",
          "content" : "b776d57492478c162d428bdd3139be0fa6c3cf4503355c3a04710ca7bc3ee74d66627f49eb42814fd8f8364dbd17aa91"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f6f9e70b76717b705d040f0b33857f0dde89736f2e6d55ea56585235eb1b6d0ce4d5aa18c82050391ac968dcb5ec29e2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "721a9fc1bb353ddf3e438bed4306a3fa5b55ffafb474be5dc8715bd23d7a5afa"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c78f9d464e4b840e28266658512b1cab0ece1470bef2764deb2dc20ba69b73d526d92a19494ccb87b4408f9235c4294417f2e10ba709469f4bd62d017b9e3cbe"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.13?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.apache.org/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTTPCORE"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.13?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-logging",
      "name" : "commons-logging",
      "version" : "1.2",
      "description" : "Apache Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "040b4b4d8eac886f6b4a2a3bd2f31b00"
        },
        {
          "alg" : "SHA-1",
          "content" : "4bfc12adfe4842bf07b657f0369c4cb522955686"
        },
        {
          "alg" : "SHA-256",
          "content" : "daddea1ea0be0f56978ab3006b8ac92834afeefbd9b7e4e6316fca57df0fa636"
        },
        {
          "alg" : "SHA-512",
          "content" : "ed00dbfabd9ae00efa26dd400983601d076fe36408b7d6520084b447e5d1fa527ce65bd6afdcb58506c3a808323d28e88f26cb99c6f5db9ff64f6525ecdfa557"
        },
        {
          "alg" : "SHA-384",
          "content" : "ac20720d7156131478205f1b454395abf84cfc8da2f163301af32f63bd3c4764bd26cb54ed53800f33193ae591f3ce9c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "628eb4407e95dca84da1a06b08a6d9b832a49de8472b1b217e8607f08efeeed18b996232d64dd07f03e78e0e3bb4b078"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9aab62deccf156ee6e324c925dfc30ecb53e8465802863a551901a461424e807"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3fd76857f6d20c03799537cc961c1c4ddf1c375c6c192fb982363e3b9397ba138b77f24ef38b4202f44e37586789c0320e4de18fdadd2772304fd14a9b26d552"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/LOGGING"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/repos/asf/commons/proper/logging/trunk"
        },
        {
          "type" : "build-system",
          "url" : "https://continuum-ci.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "http://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-logging/commons-logging@1.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-codec",
      "name" : "commons-codec",
      "version" : "1.11",
      "description" : "The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "567159b1ae257a43e1391a8f59d24cfe"
        },
        {
          "alg" : "SHA-1",
          "content" : "3acb4705652e16236558f0f4f2192cc33c3bd189"
        },
        {
          "alg" : "SHA-256",
          "content" : "e599d5318e97aa48f42136a2927e6dfa4e8881dff0e6c8e3109ddbbff51d7b7d"
        },
        {
          "alg" : "SHA-512",
          "content" : "d9586162b257386b5871e7e9ae255a38014a9efaeef5148de5e40a3b0200364dad8516bddd554352aa2e5337bec2cc11df88c76c4fdde96a40f3421aa60650d7"
        },
        {
          "alg" : "SHA-384",
          "content" : "9ae3d8fd4c38f3af52c76c5f98039109901cb0f70700e6d9999b27cc4b30b188e2688aa4adcf6b846376bc3ca125907a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "bd272e22540371e7d834cd897bce9be657293ba9c5584e0d47a4073711dacb524cc59e294e942ffc01613d17ac7d6ac1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "90ec34f9701a8b212c65e6167c505ea6417289f910deedcac8517075b8349728"
        },
        {
          "alg" : "SHA3-512",
          "content" : "101bc04efae2bd16d7923e61bca922c4a006b0e4b34909e0f8865196cb4df4f4f6269737c17880b4dfd0309cb487b806e88d09c6e1a7dc70237563b3f4312f7f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-codec/commons-codec@1.11?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/CODEC"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/codec/trunk"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.11?type=jar"
    },
    {
      "publisher" : "Shigeru Chiba, www.javassist.org",
      "group" : "org.javassist",
      "name" : "javassist",
      "version" : "3.28.0-GA",
      "description" : "Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation simple. It is a class library for editing bytecodes in Java.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1a2dd8c76321cef26cc2669fe70a2557"
        },
        {
          "alg" : "SHA-1",
          "content" : "9a958811a88381bb159cc2f5ed79c34a45c4af7a"
        },
        {
          "alg" : "SHA-256",
          "content" : "57d0a9e9286f82f4eaa851125186997f811befce0e2060ff0a15a77f5a9dd9a7"
        },
        {
          "alg" : "SHA-512",
          "content" : "49d3109104f01efda1ae8a6145fdb91d1b1331587e2981f6cc1a1b991c50af97e8febfea5d9d224a106cab877c1e4850d183eb3c7316b82e62e51b6ca3fc29e8"
        },
        {
          "alg" : "SHA-384",
          "content" : "b71fc9564c478edebbf19b4044bb9cfb80996f779685d79f6a779d98ce3823b5aa234b91b9da35317ebf4534e1e65a31"
        },
        {
          "alg" : "SHA3-384",
          "content" : "bd7f7f52a05aebf17286e7101cafdcb19eb52f14731ce9ad287c07a14f676a8bbba78238e636d2ff5585a90f02f57b82"
        },
        {
          "alg" : "SHA3-256",
          "content" : "bf8cbfa03a6c53bb8aad510a7c6623d5e28f8189295f0dc2a0998993ca8df0d7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "30a7c36e4b4089a5586dd0cb0f8cba1260fbed95e221bd623a66b1d07ff9565227d31c0fd0d131cda9d97483441f08e619aa8bbc758c0df66f3345da7b5adf68"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MPL-1.1"
          }
        },
        {
          "license" : {
            "id" : "LGPL-2.1-only"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.javassist/javassist@3.28.0-GA?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://jira.jboss.org/jira/browse/JASSIST/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.javassist/javassist@3.28.0-GA?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-cli",
      "name" : "commons-cli",
      "version" : "1.4",
      "description" : "Apache Commons CLI provides a simple API for presenting, processing and validating a command line interface.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c966d7e03507c834d5b09b848560174e"
        },
        {
          "alg" : "SHA-1",
          "content" : "c51c00206bb913cd8612b24abd9fa98ae89719b1"
        },
        {
          "alg" : "SHA-256",
          "content" : "fd3c7c9545a9cdb2051d1f9155c4f76b1e4ac5a57304404a6eedb578ffba7328"
        },
        {
          "alg" : "SHA-512",
          "content" : "fa769a08a118141831cd4eaf2ce4f3f65855b8aeee86fbf3e07b4c619facf801f8b55c14c5e56a154cd14f438a8f120bb59a20c1b6be04979501e362f252ca48"
        },
        {
          "alg" : "SHA-384",
          "content" : "aa516a360ed41568a618c45df5288daa75c2d2ddb9a9af61324962f2cf534834bb0fb51bf13710709a771f09992febc5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "cff9bf72b706076f84b27e705c9f56c4f89ddeeb32672346ec37735534e006f631f0a1a9eecf883f475696376cceca91"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ae001ddbe856dfe4395be480cd710615e6759ab122eee9fa909f6bb883b752d2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f4659c0b58616c7f32f0a947b3d94ab5533ca4315e10f009fd2f6092e56942b5c8653f5a0eaef2e3908ffc43363f31fcb53686d1ac40f1b18c7bd305119c8037"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-cli/commons-cli@1.4?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/CLI"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/cli/trunk/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-cli/commons-cli@1.4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-beanutils",
      "name" : "commons-beanutils",
      "version" : "1.9.4",
      "description" : "Apache Commons BeanUtils provides an easy-to-use but flexible wrapper around reflection and introspection.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "07dc532ee316fe1f2f0323e9bd2f8df4"
        },
        {
          "alg" : "SHA-1",
          "content" : "d52b9abcd97f38c81342bb7e7ae1eee9b73cba51"
        },
        {
          "alg" : "SHA-256",
          "content" : "7d938c81789028045c08c065e94be75fc280527620d5bd62b519d5838532368a"
        },
        {
          "alg" : "SHA-512",
          "content" : "7762b348caecead49038a38a89754ff7d9be6199324315495ba47cf24f52c06faadf9306d925c8fe47c587589a939c82e491e1c730267fdf354243a68c0f96ff"
        },
        {
          "alg" : "SHA-384",
          "content" : "dcd3845917b8fb189cf4034b0d7c6d266ec7110f85ffbd2711cdea9eb94b4fa3e1cee9120b484c6a120b82769230ed3a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "dfdb8845989be083de807184910124ad7e7e372959b34686cd5f5020f193a2997831ead497b0a5a0233f031aecdf55f6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "127a81068335d6ca47f5f5e12d849dc1bc5300b2ad8d3f9b64ca30ff2a76d479"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f67405d0a7667adf7cd35cd7416c54e1759380cdb9c8f179a10175058e40292808e17e69d48df4d4d6b5e268c314127cf3ab87af6920a271bb2e6e0df963940d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/BEANUTILS"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/beanutils/tags/BEANUTILS_1_9_3_RC3"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-compress",
      "version" : "1.21",
      "description" : "Apache Commons Compress software defines an API for working with compression and archive formats. These include: bzip2, gzip, pack200, lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2a713d10331bc4e13459a3dc0463f16f"
        },
        {
          "alg" : "SHA-1",
          "content" : "4ec95b60d4e86b5c95a0e919cb172a0af98011ef"
        },
        {
          "alg" : "SHA-256",
          "content" : "6aecfd5459728a595601cfa07258d131972ffc39b492eb48bdd596577a2f244a"
        },
        {
          "alg" : "SHA-512",
          "content" : "c92d9a12547aab475e057955ad815fdfe92ff44c78383fa5af54b089f1bff5525126ef6aef93334f3bfc22e2fef4ad0d969f69384e978a83a55f011a53e7e471"
        },
        {
          "alg" : "SHA-384",
          "content" : "da56f95d420cd7278cee646f4cd0e7a5ee12b6a2894efaec12f0ff7b56c3d43e5db736fe1ed66ff91118b16f2d64ebef"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6d3dc0198dd523a49fa94e054841aece853577b5c3ea1029fc288ad9ff580ab1b65ea99ddbe58c42125054e8c43be461"
        },
        {
          "alg" : "SHA3-256",
          "content" : "37d4a014b50393793d35c70431bd8a1842c197d854c6f174dfa946b9edc2b841"
        },
        {
          "alg" : "SHA3-512",
          "content" : "61609f60746406a7cb1ef3f979488beca6674fde208c9025d3fdee115de4767e8a4a1ee38f5bf79ac0104505ddb3558f1feeba5e318d6545647120ac60db6b89"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-compress@1.21?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/COMPRESS"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-compress.git"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-compress@1.21?type=jar"
    },
    {
      "publisher" : "ANTLR",
      "group" : "org.antlr",
      "name" : "antlr4-runtime",
      "version" : "4.9.3",
      "description" : "The ANTLR 4 Runtime",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "718f199bafa6574ffa1111fa3e10276a"
        },
        {
          "alg" : "SHA-1",
          "content" : "81befc16ebedb8b8aea3e4c0835dd5ca7e8523a8"
        },
        {
          "alg" : "SHA-256",
          "content" : "131a6594969bc4f321d652ea2a33bc0e378ca312685ef87791b2c60b29d01ea5"
        },
        {
          "alg" : "SHA-512",
          "content" : "2c3763a8fbc7af110df5d6bb57692759b23e8bf961a53694c69bde4cd9d8c3a8eaa55cf376ce34c6c4e2035a99d7abf08c6ffa3b75d18a6d93a9c1ca95927ea8"
        },
        {
          "alg" : "SHA-384",
          "content" : "62a62dab4a27733a810b97fe5544eb1b5b25d2df83ea8d93802cb0e6fd1b4b3ca5a130c51aa9198deefc30cd0f062841"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e2919d471a5b4fa318cd34d4a9fa5a9e1fa4ed37e0ee34c72031f950c447c16df828cbe96635e525859153080b97510b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "70c29f56fa10bfccfd47623ca6e9d3625e1b81da7b0e57269def1d6f84c5cd6e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1a80c6cc4e5cd8e1455717e6d9fc3ab7937eb23f907e4189358f4b2f3eb14475689c02a8258419f6956feaf6da0c0c5cdcfb9300f91efef2f5bfbabac092386c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-4-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.antlr.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/antlr/antlr4/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/?fromgroups#!forum/antlr-discussion"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/antlr/antlr4/tree/master"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar"
    },
    {
      "group" : "com.google.code.gson",
      "name" : "gson",
      "version" : "2.9.0",
      "description" : "Gson JSON library",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "53fa3e6753e90d931d62cb89580fde2f"
        },
        {
          "alg" : "SHA-1",
          "content" : "8a1167e089096758b49f9b34066ef98b2f4b37aa"
        },
        {
          "alg" : "SHA-256",
          "content" : "c96d60551331a196dac54b745aa642cd078ef89b6f267146b705f2c2cbef052d"
        },
        {
          "alg" : "SHA-512",
          "content" : "13ff22a60ee6a72ba0c4e8fe3702b8f3f6be6b67ed4279079a9843f57ad0ca125d4ecc1564ac4e736eab10fb6254d2c011b2c08c514d708be7f8091332ed2c2c"
        },
        {
          "alg" : "SHA-384",
          "content" : "fde5b61066a8cdd711874ed42f20cb914e4193f1477456c431fb0ca32d86324414e92b0b2c5696f56d0b9d69521d8dee"
        },
        {
          "alg" : "SHA3-384",
          "content" : "314156bb766c2f792317763322a819ef968e5ecc7f1a236ab0bb383426d1bf396e18099edb16f85e572b42c85a6c89ba"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5e550f5f719c5f5c4ad04fbe6cd0d7868d6bf0e4184f386e4896e72c4839de3e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a3db5a0129c42598b5ded96cdf75d69c75d4a6b317746c9b7fbf238b2ca78cfb48fb0023ae1a4178bc8da3727ceb0bad6930f8f24624e0be6dbbde00adbb0624"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.code.gson/gson@2.9.0?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/gson/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/gson/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.code.gson/gson@2.9.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.velocity",
      "name" : "velocity-engine-core",
      "version" : "2.3",
      "description" : "Apache Velocity is a general purpose template engine.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e761e6088b946b42289c5d676a515581"
        },
        {
          "alg" : "SHA-1",
          "content" : "e2133b723d0e42be74880d34de6bf6538ea7f915"
        },
        {
          "alg" : "SHA-256",
          "content" : "b086cee8fd8183e240b4afcf54fe38ec33dd8eb0da414636e5bf7aa4d9856629"
        },
        {
          "alg" : "SHA-512",
          "content" : "ec8ccd36d6cefd4325f39d6c215f4177900b7c0fb1e4e96b3c0d9391c033df4d5fb83b7899530f32738afa78c193d4dae700cd5c674954a34e7cf627a4fa1204"
        },
        {
          "alg" : "SHA-384",
          "content" : "5aa3f60e17efb01e2bae1d1169da36a55d7b3ede1d90b1f3e1d3984d2b78fa4bbbba2772ac404e9dae7b37812df11f13"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5bc7a76a774653896a0b789726a581de3fbcfa40875945e514f5d8c2e972aeb43ffb2ce5c0da6d4a65b2ef442fc56afc"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6ff993b508c05170c3dbd65f6080edf5cdb8b8fd2fa7b94f7d64f20a79d3de9c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c44791f0b9e6b3d28717ca56582e2c55bff208aa5bc7bc2cc91003afde0ec0111a55d585c9f09717747ee7e78a688e894b7962fb55a56eaf57413a9c365c567b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.velocity/velocity-engine-core@2.3?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=velocity-engine.git"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?general@velocity.apache.org"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.velocity/velocity-engine-core@2.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.11",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c592f49f703f9b3ab25556559b1ff379"
        },
        {
          "alg" : "SHA-1",
          "content" : "68e9a6adf7cf8eb7e9d31bbc554c7c75eeaac568"
        },
        {
          "alg" : "SHA-256",
          "content" : "4ee380259c068d1dbe9e84ab52186f2acd65de067ec09beff731fca1697fdb16"
        },
        {
          "alg" : "SHA-512",
          "content" : "c1f6b5cb9ac47cfb612423a71b347568f3697cf88018b5808678be5234c50b22888db23cb833b7d8d458d39707ab9e4d839107d1d3306de2e4e422010c95180f"
        },
        {
          "alg" : "SHA-384",
          "content" : "80e7831b2b08150b5d05d53b29f1904b298e9194fd02c61989755da04fa2f20e44f6a0f29d13bfde33ce1dbefc7afc52"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a62ff933793a247d9dea0b975995bfc0ecf8c6d2fcf4e38fae09b49bcd75428acaca8bc1fa46202a5e9ab6762bd352d5"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e2b825a32979ce00595cb3f7dd5cf407cb179fd93f7786a061bf1c13762c4779"
        },
        {
          "alg" : "SHA3-512",
          "content" : "833272210e60e151749bb86ed2ac29b1799974f925f1eb392fbbc6a11e1fc8de1bb2a57ef86777c0095ea13834af7774286b5364b1d24000622a9ece96bedc7f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.11?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-lang.git"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.11?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.30",
      "description" : "The slf4j API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f8be00da99bc4ab64c79ab1e2be7cb7c"
        },
        {
          "alg" : "SHA-1",
          "content" : "b5a4b6d16ab13e34a88fae84c35cd5d68cac922c"
        },
        {
          "alg" : "SHA-256",
          "content" : "cdba07964d1bb40a0761485c6b1e8c2f8fd9eb1d19c53928ac0d7f9510105c57"
        },
        {
          "alg" : "SHA-512",
          "content" : "e5435852569dda596ba46138af8ee9c4ecba8a7a43f4f1e7897aeb4430523a0f037088a7b63877df5734578f19d331f03d7b0f32d5ae6c425df211947b3e6173"
        },
        {
          "alg" : "SHA-384",
          "content" : "d8061c2f86f33b813cb86d3d54c615d26aa89afb43cabf8d828ff6a3f4f8e63d4a3b27355033f67ba60c2cdf2558d9de"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9f0fcb3bab20dce3b4cd094145976ce7c9da8702c891ff6f3882072c5a0acc763aeb11c446ef08a80e1bec695b11cb60"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7fd51c94b174d462a8c7ce103ea7b1858e2c0943da8d21b4407f71a250377c8e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a51d2d7d68a41e0ef1430c90d5b4f182d34be2233b92ad6fc32c1def5504b5089afcbda3349fd401df5d8accdbb0571096e91b2badadcec275bcf3bb0cacc7f7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.30?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.qos.ch"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.30?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "javax.xml.bind",
      "name" : "jaxb-api",
      "version" : "2.3.1",
      "description" : "JAXB (JSR 222) API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bcf270d320f645ad19f5edb60091e87f"
        },
        {
          "alg" : "SHA-1",
          "content" : "8531ad5ac454cc2deb9d4d32c40c4d7451939b5d"
        },
        {
          "alg" : "SHA-256",
          "content" : "88b955a0df57880a26a74708bc34f74dcaf8ebf4e78843a28b50eae945732b06"
        },
        {
          "alg" : "SHA-512",
          "content" : "93a47b245ab830d664a48c9d14e86198a38809ce94f72ca66b3d68746ae1d7b902f6fef2d1ac1a92c01701549ae80a07db69bd822ffd831a95d8dbffad435790"
        },
        {
          "alg" : "SHA-384",
          "content" : "1eb2d7f307bda8cbf6a4ab5b2b97d830d33ca48ad94eb4bb1cbce860c54fca96285dbcb1ce9b164dbf37d4475f9a198f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8df7409d3f60888f3a80f4d49af66c2cab6dc9f00e79c87c17703faad19d8ba6c8fc96ad897434170ce2686952921cdd"
        },
        {
          "alg" : "SHA3-256",
          "content" : "41338683257d5ecead579ccc137bdef7bc4fea685d039a3d894e1d6730425e1d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3371a96171f69876b0e6b8354674d252680e6d52c509a2645b1a0b0d7f9e176274bde6c89edb40986264733ffb6794cb7b2cba417666b1e82075bd4fd51197b6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.1"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.oracle.com/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/javaee/jaxb-spec/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/javaee/jaxb-spec.git"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar"
    },
    {
      "publisher" : "Oracle",
      "group" : "javax.activation",
      "name" : "javax.activation-api",
      "version" : "1.2.0",
      "description" : "${project.name}",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5e50e56bcf4a3ef3bc758f69f7643c3b"
        },
        {
          "alg" : "SHA-1",
          "content" : "85262acf3ca9816f9537ca47d5adeabaead7cb16"
        },
        {
          "alg" : "SHA-256",
          "content" : "43fdef0b5b6ceb31b0424b208b930c74ab58fac2ceeb7b3f6fd3aeb8b5ca4393"
        },
        {
          "alg" : "SHA-512",
          "content" : "8ee0db43ae402f0079a836ef2bff5d15160e3ff9d585c3283f4cf474be4edd2fcc8714d8f032efd72cae77ec5f6d304fc24fa094d9cdba5cf72966cc964af6c9"
        },
        {
          "alg" : "SHA-384",
          "content" : "d38a6af7ed00f13de8b46d49b9592af9b67adf3df47ddae5e4672f989f3f39101d446a77d1c11319acf8ff0a5b4feedf"
        },
        {
          "alg" : "SHA3-384",
          "content" : "cfee76de5976d5994758a06113368092f09b0729d753b99969d6a5ec32919428bd7c270c98cbbc682ff8ebcf2b93fd8d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "aff48d0f28d8a99690c5a84c3fffdb3775452d5387e5698f4c9028c92a3b4888"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0507ece74b3147de60a830071bd434569c82e03f414a2b7f0d8a225dda36720d2e2194799cdc04def1909fdec21059b67c518bb9162f7f605764d542194e721d"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.oracle.com"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/javaee/activation/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/javaee/activation"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar"
    },
    {
      "group" : "org.eclipse.steady",
      "name" : "lang-java",
      "version" : "3.2.5",
      "description" : "Core classes for Java analysis",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fe0c77ec58a6214f33f2baa3b37e2f21"
        },
        {
          "alg" : "SHA-1",
          "content" : "c0b01de2d9b60396a16703655615f3fe10627416"
        },
        {
          "alg" : "SHA-256",
          "content" : "f051b6115a61f3c42ea6242c02483c68ca904a1040555a99f4d48de4d54d1f96"
        },
        {
          "alg" : "SHA-512",
          "content" : "97eab19b8914428b6564ef9ba64c1dfccb46e3e29c5aebb8fe5447f7d0abb2da6635224264024df29632ef42505c2c268d5956fd8041f38e427b1cd2abbd4c01"
        },
        {
          "alg" : "SHA-384",
          "content" : "1b34f0cbbc5a6933fa51267053a28a194181ca1c25f37ce963beb4cfffbd2db08409b03c79a9544dfa2587bbe307aed3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "64a2e92cdf7f3d0ee0fe2932c66ee42e34e526c2810ece69f0ac0128da873ec945dbc4f95443a39a4c012cace26e222b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2a8353f4ebb9796b48f1edc11c232e84e5a27d0e6627bf3b7f5fa0ad99a6a43a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "802b4d59c6a17b650bf9ccca5818958f703b4fb1736aabbec193c8cc44584fa96c28b3ea8b3bda9b6c8c291310defcf010426c610b776a98e88b6a2f8a11949b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.steady/lang-java@3.2.5?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/steady/tree/master/lang-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.steady/lang-java@3.2.5?type=jar"
    },
    {
      "group" : "org.bitbucket.mstrobel",
      "name" : "procyon-compilertools",
      "version" : "0.5.36",
      "description" : "Procyon",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3d9dd40aa03a8e9e601c5d4ac62df9a7"
        },
        {
          "alg" : "SHA-1",
          "content" : "14492dac5adad2ec563d0a491a593f9237fc8851"
        },
        {
          "alg" : "SHA-256",
          "content" : "9f737863b5b577746d7594b45187870bf8184ddb3657ac71817ddc950cf6bff5"
        },
        {
          "alg" : "SHA-512",
          "content" : "734cef113f582f9fa189bfce0cd5545cf51acbe51aa2a8b9d7c9fe0ab31e646e2665aa5192edc1f08b593dc2ffaef6d14ea582ca0caced5e520a9c0f14a4684a"
        },
        {
          "alg" : "SHA-384",
          "content" : "655af091a84d1f55d3231f06438ae03788f3bafb16bdd7b953679782806e515cf17f980d70fc9c94daa3463e9f2eb3e2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a6d43198b7c5483246d6e5652517edb8d36a75a3351dbdaa72936922ad41681bf65599ac5845d7a2a05a089226948afd"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8bd30c5e0ecd79669ce6f0205e0843444e3fbe025528c0faba1e25c9d3f179ae"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2d4bf533b77a2b97fddadc9a82d492fa41de6e400da462ce8c43f33eff4a6f52030e628bded38a9b49f6b5d80b555a3a414439d4bdd9ae7636bd8f8e1c9ee866"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.bitbucket.mstrobel/procyon-compilertools@0.5.36?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://bitbucket.org/mstrobel/procyon/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://bitbucket.org/mstrobel/procyon"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.bitbucket.mstrobel/procyon-compilertools@0.5.36?type=jar"
    },
    {
      "group" : "org.bitbucket.mstrobel",
      "name" : "procyon-core",
      "version" : "0.5.36",
      "description" : "Procyon",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f796c4b755f7b3f2b84ff8f26781abf2"
        },
        {
          "alg" : "SHA-1",
          "content" : "4f05cad04f40e6233e546b33b8498e60568142b9"
        },
        {
          "alg" : "SHA-256",
          "content" : "5123b7db09bea2176fd9ec09e3cab05c728e4f3151fc47dabb0b5d7c8e964896"
        },
        {
          "alg" : "SHA-512",
          "content" : "f0ee26e9e19e855578a3d69fdb1d2078ee707cd9f832845fd5defaa587ba8a188fa9302a0c922baad7fd22d66c89c71bfc80633bf43d2383f78d24118683d22d"
        },
        {
          "alg" : "SHA-384",
          "content" : "aae8159d080a3a72ecfb5f0eb40f761b79c9627dbc3e59a66125b2aa996cd33c1638ccc2c89cf604a635196982ace8e5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5380beeed3e40ad0caa9637a11972f52e0de71fe3226a58b22a9b2a251e5f586e026cfeafd3ed56c1f9943a7067573cc"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6868cbda5b47a9c7658bd005a487f3c4f1c332ee9ea6207caf7878e77a8db7de"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f5db5c0f5810ccfda419eebf74036574e235fcf18cd3a021836409d622fb042b5851cc287a7b5a8d4e8dffd629ae6d4cb421135fc7ab230f32626097bef4b4ca"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.bitbucket.mstrobel/procyon-core@0.5.36?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://bitbucket.org/mstrobel/procyon/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://bitbucket.org/mstrobel/procyon"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.bitbucket.mstrobel/procyon-core@0.5.36?type=jar"
    },
    {
      "publisher" : "Software Architecture and Evolution Lab, Department of Informatics, UZH",
      "group" : "ch.uzh.ifi.seal",
      "name" : "changedistiller",
      "version" : "0.0.4",
      "description" : "Fine-grained source code change extractor",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "337fe70072fc60408baa49d221f16ff1"
        },
        {
          "alg" : "SHA-1",
          "content" : "96312300e01199cb6a1b0fa44be357738eaf2b0f"
        },
        {
          "alg" : "SHA-256",
          "content" : "a8d66b2c4f9bef28f31eaac0ff856d904ca726f6f824f8f2486cfa57a2029663"
        },
        {
          "alg" : "SHA-512",
          "content" : "7f07bfaf939b3c1bdec8456cd603b310a2cce4b11f745e02ea409174802a5b4469d13dedb04d5223056b9c8d5472b8320b03b17736456154b696eefd71901421"
        },
        {
          "alg" : "SHA-384",
          "content" : "351406f18d4bd876e53505b87040dcb78a7faec033e74d918a800bc583b8c462713726e401fe859fdeeaab47b83d432a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "cedd74d043073d7b46af4ca2c296b4fb4ed97498be80e66a35a328e3d19c277cf14b9b31d59e22820b2a78d0450fa542"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3a2256eee74b209dd73c0971760cb87c637f18a7ff61e6b380259ab25ea14bbf"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e39fb8c71216e3d4efb3864d64dddfbba12bed8cb53fa3f2080dd1e4a89015ff0ef11a7fbcc75fbac3e9d5b9b2bb6b9c055cd60096a56fd90762a100b54a4335"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/ch.uzh.ifi.seal/changedistiller@0.0.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://seal.ifi.uzh.ch"
        },
        {
          "type" : "build-system",
          "url" : "https://seal-team.ifi.uzh.ch/jenkins/job/changedistiller/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bitbucket.org/sealuzh/tools-changedistiller/issues/"
        },
        {
          "type" : "vcs",
          "url" : "https://bitbucket.org/sealuzh/tools-changedistiller/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/ch.uzh.ifi.seal/changedistiller@0.0.4?type=jar"
    },
    {
      "publisher" : "Google, Inc.",
      "group" : "com.google.inject.extensions",
      "name" : "guice-assistedinject",
      "version" : "4.2.3",
      "description" : "Guice is a lightweight dependency injection framework for Java 6 and above",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "acb899a13864c3e0994f3342b7fdc604"
        },
        {
          "alg" : "SHA-1",
          "content" : "acbfddc556ee9496293ed1df250cc378f331d854"
        },
        {
          "alg" : "SHA-256",
          "content" : "f27810a4b60663fa2d06b8423eda402fa9f8553bfbfde81bf0f0f1f2876b1385"
        },
        {
          "alg" : "SHA-512",
          "content" : "4c66a210eedb335c37dc8e484aa06c40aee52ceade3a9de9693298a21931ad93f838f0097bbe6086f9d263d74bfa5cdffd140f8f95bddc1d65192990b400a0ad"
        },
        {
          "alg" : "SHA-384",
          "content" : "1dacdc09908d8065681af142661ca1ab099410637e486efbabae79f54ca78620f7b00afe718fe72e7b5834553f7af83d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "dc202e9a9d9e57b5778c7198ec9a18ec321b4093052f3289ff5d8a876e2d137ea12509b2764efaaa2a62d955b8f56ccc"
        },
        {
          "alg" : "SHA3-256",
          "content" : "bd1a95aadf69577bc3891c92a2c414c143dfef29606532c72d3f3533e4565ce2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "023b815da05a0cbbd0dcabba487dfa049d4e7427b12aa29460a6c859e64635d3885befbae1c9372c7108941cbf7ec84fd80ed0c55dd3d2ba484fa75300dd1166"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.inject.extensions/guice-assistedinject@4.2.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.google.com"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/google/guice"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guice/issues/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://groups.google.com/group/google-guice/topics"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guice"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.inject.extensions/guice-assistedinject@4.2.3?type=jar"
    },
    {
      "publisher" : "Google, Inc.",
      "group" : "com.google.inject",
      "name" : "guice",
      "version" : "4.2.3",
      "description" : "Guice is a lightweight dependency injection framework for Java 6 and above",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4209f9e543a157db0f194688760409c9"
        },
        {
          "alg" : "SHA-1",
          "content" : "2ea992d6d7bdcac7a43111a95d182a4c42eb5ff7"
        },
        {
          "alg" : "SHA-256",
          "content" : "a21e50ffbb67e7adc5b46cf7b9e1a480f1e0f04fd4201ddb1c65da91290601af"
        },
        {
          "alg" : "SHA-512",
          "content" : "1e811c276d3d953d7e2e6cc2bd33af16645f87e864713db0d70fc2dc7110483c8f40525f2f0f403344e5653bb8375ccdec9fda0c0ba6c42114ac482cba50960d"
        },
        {
          "alg" : "SHA-384",
          "content" : "7e5decbfc09816e1c3d3f5fadce2fd9df9999cad9c30a8af1eb133dd9d1fee15a6153783d18704efc7f538ba4dc48dc3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "df25f6a1e14c9fedff262d4f867a3489e592f8216334630d600e7598034448242e7f4ff75c8fcef2c08f287918697cf5"
        },
        {
          "alg" : "SHA3-256",
          "content" : "73c2a852e4a353b30877e77b4514f0c21c1eecb484558c60783e4c566c9b128e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "84fabf13bbd424d2c65ed9d211e45be224788c1fee5c461c0fe40c8a25989f503238094bc14b8e453583bf6b4d3f3152ae900393304d1b9ff07efaa45afc156c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.inject/guice@4.2.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.google.com"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/google/guice"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guice/issues/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://groups.google.com/group/google-guice/topics"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guice"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.inject/guice@4.2.3?type=jar"
    },
    {
      "group" : "javax.inject",
      "name" : "javax.inject",
      "version" : "1",
      "description" : "The javax.inject API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "289075e48b909e9e74e6c915b3631d2e"
        },
        {
          "alg" : "SHA-1",
          "content" : "6975da39a7040257bd51d21a231b76c915872d38"
        },
        {
          "alg" : "SHA-256",
          "content" : "91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff"
        },
        {
          "alg" : "SHA-512",
          "content" : "e126b7ccf3e42fd1984a0beef1004a7269a337c202e59e04e8e2af714280d2f2d8d2ba5e6f59481b8dcd34aaf35c966a688d0b48ec7e96f102c274dc0d3b381e"
        },
        {
          "alg" : "SHA-384",
          "content" : "ac04c9f03ccbe35a25deb8b50280a0ca01dbe6aff0dd795d55af6112bfe3cd5817eb82f32fb18378d86cd64b07597190"
        },
        {
          "alg" : "SHA3-384",
          "content" : "fca090ecb1edeacb9fe865dc515cd1d109b323cd742d4a9733ff199a96ee96e0db4f924079520b9c189ef750f255475d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5b0054e39e522de0e0ffc4034d12f72270291fb24d94d5ffc9c4d69c25035fc6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fb290f5a70b1efc1dff12f40a0b2d7b94019f66da42e78010c0b8e61f222c4f267b67e356a9e9c346eb801e5515e36243888f280c5cb95c2dd69016a30cadeb9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/javax.inject/javax.inject@1?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "http://code.google.com/p/atinject/source/checkout"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.inject/javax.inject@1?type=jar"
    },
    {
      "group" : "aopalliance",
      "name" : "aopalliance",
      "version" : "1.0",
      "description" : "AOP Alliance",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "04177054e180d09e3998808efa0401c7"
        },
        {
          "alg" : "SHA-1",
          "content" : "0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8"
        },
        {
          "alg" : "SHA-256",
          "content" : "0addec670fedcd3f113c5c8091d783280d23f75e3acb841b61a9cdb079376a08"
        },
        {
          "alg" : "SHA-512",
          "content" : "3f44a932d8c00cfeee2eb057bcd7c301a2d029063e0a916e1e20b3aec4877d19d67a2fd8aaf58fa2d5a00133d1602128a7f50912ffb6cabc7b0fdc7fbda3f8a1"
        },
        {
          "alg" : "SHA-384",
          "content" : "4dddf44338b5aff9580da2532b81c0ac3e1d09e1f28c6db871a55cad442b705dd7791eb07f9d4577d49d0be3673ba783"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2bd64cbaf769c6e4e85e34f7a6119d89e16fbf55af3fc5d6cbd52eb214c367dec1ac7b9062ee0fb35a2e0acfc7c477e1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d4a726b2bf8aa58197021a7d8fca674b4b2790d4c48de43a92f728866a91c2f0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "830bc3f8328be76897990e9b9fc42eef02623115e456af96ad09b20900ad615519c8c8de60155ac04fb332eaa9510110d52edd13911af76271c71d91cbd789cc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Public Domain"
          }
        }
      ],
      "purl" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar"
    },
    {
      "group" : "com.google.guava",
      "name" : "guava",
      "version" : "27.1-jre",
      "description" : "Guava is a suite of core and expanded libraries that include utility classes, google's collections, io classes, and much much more.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1a986c6fa05685f173ad9340b6ab6454"
        },
        {
          "alg" : "SHA-1",
          "content" : "e47b59c893079b87743cdcfb6f17ca95c08c592c"
        },
        {
          "alg" : "SHA-256",
          "content" : "4a5aa70cc968a4d137e599ad37553e5cfeed2265e8c193476d7119036c536fe7"
        },
        {
          "alg" : "SHA-512",
          "content" : "5c32a58148c3b91577cd6d335d61a1994041a2a5c77a240303ba6e786c895336400f6fd449eab0802594bf47c17985c5587ab87c3c4b628bfc1d7090ddc0b006"
        },
        {
          "alg" : "SHA-384",
          "content" : "6502453d9c1a46ffd35d7ffd848f665cedd19a9a169c2835ac38482ca7d19826b4021ad3c10dee06512099fec04d7153"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e1c1d024464ba3797569ba45375b6f84f5d81a5d5970b7cb43529e565d2668d283ace61ad86e839703e0726dea5ccb74"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e3a4c9886f312974a9274575c7c8315bc9215736b437513297d06a85143ec2f7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c90c478a94dbbaa16fcb11815c2c727feb33221773fe94914aab25f07744d24e060be6f90e52955c51b40d5f4bd09fed0ca531555d581c8acb2dd95c9a052c5c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/guava@27.1-jre?type=jar",
      "externalReferences" : [
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/google/guava"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/guava@27.1-jre?type=jar"
    },
    {
      "group" : "com.google.guava",
      "name" : "failureaccess",
      "version" : "1.0.1",
      "description" : "Contains com.google.common.util.concurrent.internal.InternalFutureFailureAccess and InternalFutures. Most users will never need to use this artifact. Its classes is conceptually a part of Guava, but they're in this separate artifact so that Android libraries can use them without pulling in all of Guava (just as they can use ListenableFuture by depending on the listenablefuture artifact).",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "091883993ef5bfa91da01dcc8fc52236"
        },
        {
          "alg" : "SHA-1",
          "content" : "1dcf1de382a0bf95a3d8b0849546c88bac1292c9"
        },
        {
          "alg" : "SHA-256",
          "content" : "a171ee4c734dd2da837e4b16be9df4661afab72a41adaf31eb84dfdaf936ca26"
        },
        {
          "alg" : "SHA-512",
          "content" : "f8d59b808d6ba617252305b66d5590937da9b2b843d492d06b8d0b1b1f397e39f360d5817707797b979a5bf20bf21987b35333e7a15c44ed7401fea2d2119cae"
        },
        {
          "alg" : "SHA-384",
          "content" : "67659dbd9647ec303d7f15128dc9dba19b98fd8d74758ee3b602451e32c855e236ccaafe08edf4bbfa245f981268440f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1460875f0331c5fa3791772a6a322a7db180261bc2adacf7271df1fbf3b088a587a755a604c039982cb593c5cfc1f101"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ea86406e75fcd93eafe3cde1b3135ba485f1bb9b75fed98894a0bf1f0aee04f0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "52ac0f487ab5dd27c9f2e54fd1d84c7a620cae9d49be4072aa2b11501787bf4391ddaa13d02eccdf19e8eea46aecbea5f6064b26777c1b836108a280652e04ac"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/google/guava"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar"
    },
    {
      "group" : "com.google.guava",
      "name" : "listenablefuture",
      "version" : "9999.0-empty-to-avoid-conflict-with-guava",
      "description" : "An empty artifact that Guava depends on to signal that it is providing ListenableFuture -- but is also available in a second \"version\" that contains com.google.common.util.concurrent.ListenableFuture class, without any other Guava classes. The idea is: - If users want only ListenableFuture, they depend on listenablefuture-1.0. - If users want all of Guava, they depend on guava, which, as of Guava 27.0, depends on listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-... version number is enough for some build systems (notably, Gradle) to select that empty artifact over the \"real\" listenablefuture-1.0 -- avoiding a conflict with the copy of ListenableFuture in guava itself. If users are using an older version of Guava or a build system other than Gradle, they may see class conflicts. If so, they can solve them by manually excluding the listenablefuture artifact or manually forcing their build systems to use 9999.0-....",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d094c22570d65e132c19cea5d352e381"
        },
        {
          "alg" : "SHA-1",
          "content" : "b421526c5f297295adef1c886e5246c39d4ac629"
        },
        {
          "alg" : "SHA-256",
          "content" : "b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99"
        },
        {
          "alg" : "SHA-512",
          "content" : "c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f"
        },
        {
          "alg" : "SHA-384",
          "content" : "caff9b74079f95832ca7f6029346b34b606051cc8c5a4389fac263511d277ada0c55f28b0d43011055b268c6eb7184d5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e939f08df0545847ea0d3e4b04a114b08499ad069ba8ec9461d1779f87a56e0c37273630a0f4c14e78c348d3ac7eb97f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1f0a8b1177773b3a8ace839df5eed63cbf56b24a38714898a6e4ed065c42559f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6b495ecc2a18b17365cb08d124a0da47f04bcdde81927b5245edf3edd8e498c3c3fb92ce6a4127f660bac851bb1d3e4510e5c20d03be47ce99dc296d360db285"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "externalReferences" : [
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/google/guava"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar"
    },
    {
      "group" : "org.checkerframework",
      "name" : "checker-qual",
      "version" : "2.5.2",
      "description" : "Checker Qual is the set of annotations (qualifiers) and supporting classes used by the Checker Framework to type check Java source code. Please see artifact: org.checkerframework:checker",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "04acc78b24bbd365423da357da003cf0"
        },
        {
          "alg" : "SHA-1",
          "content" : "cea74543d5904a30861a61b4643a5f2bb372efc4"
        },
        {
          "alg" : "SHA-256",
          "content" : "64b02691c8b9d4e7700f8ee2e742dce7ea2c6e81e662b7522c9ee3bf568c040a"
        },
        {
          "alg" : "SHA-512",
          "content" : "fb32e3893f9ebc956ef99066b219a8fc8049b47b80a7253cd89b7faadf0a2fa14d60b52dd5c2f4aaeb1db0359f49fec9e29d3616bd314ec8c82db1c657be8cd2"
        },
        {
          "alg" : "SHA-384",
          "content" : "62f90d15efb90c3691a577ca58c4b48209e294fda2cb9cf0873af5beb4f79dc4b33958474189d824853b768d2a19add9"
        },
        {
          "alg" : "SHA3-384",
          "content" : "506dd2e0c27cd480f0cb8775a3d9ba486d299ab6385c3c8354b94552531a47ccd379c2e68a63889d80474c287df657ea"
        },
        {
          "alg" : "SHA3-256",
          "content" : "381f414c86b36e9e843565b70cff4aa5ed4aea5f265bacb330343e46015b5135"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b9bdbc3632eb85185408682e1107b886a374b21c77117d75cbecfb812b1c486daad89bd9461512c2b7bf853c82a4bd225d45846909934291dc75349ceb369e22"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.checkerframework/checker-qual@2.5.2?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/typetools/checker-framework.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.checkerframework/checker-qual@2.5.2?type=jar"
    },
    {
      "group" : "com.google.errorprone",
      "name" : "error_prone_annotations",
      "version" : "2.2.0",
      "description" : "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "416757b9e6ba0563368ab59e668b3225"
        },
        {
          "alg" : "SHA-1",
          "content" : "88e3c593e9b3586e1c6177f89267da6fc6986f0c"
        },
        {
          "alg" : "SHA-256",
          "content" : "6ebd22ca1b9d8ec06d41de8d64e0596981d9607b42035f9ed374f9de271a481a"
        },
        {
          "alg" : "SHA-512",
          "content" : "8f5f13fac4c40d680a1f062c609aa598e7585684af37d695357738935fc0683ddcb94c880dddd03e78b1db071c2e5cebd054a061f8f24322c5ffa43aca34a859"
        },
        {
          "alg" : "SHA-384",
          "content" : "df58adbafe449fa2e5ed4dbd498ab7a80456f100430bcba2083e2362c0818449ccd63a64c6ee3703373eeeb4c6fa8da7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a65aa130a3dbe1d7042cd1d2352a443a14b87ed99392700bb3f59e7cb3083d7824afdbb3cf9ee1c9f2995231b371c17a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "06741fae4020e4cb57c8f3277eb5c8e7d0b9caeefe337df2c1e3ca20c6fd9487"
        },
        {
          "alg" : "SHA3-512",
          "content" : "52285027d66e6ae3189d3d308d4dde0dcdf203b9073873411dd284d9fcf1f2abe7ffe3168ff0814db4a672d4dacdd27150009b0f8e5bc2f48e0f663e4ecb5953"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/google/error-prone"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.2.0?type=jar"
    },
    {
      "group" : "com.google.j2objc",
      "name" : "j2objc-annotations",
      "version" : "1.1",
      "description" : "A set of annotations that provide additional information to the J2ObjC translator to modify the result of translation.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "49ae3204bb0bb9b2ac77062641f4a6d7"
        },
        {
          "alg" : "SHA-1",
          "content" : "ed28ded51a8b1c6b112568def5f4b455e6809019"
        },
        {
          "alg" : "SHA-256",
          "content" : "2994a7eb78f2710bd3d3bfb639b2c94e219cedac0d4d084d516e78c16dddecf6"
        },
        {
          "alg" : "SHA-512",
          "content" : "a4a0b58ffc2d9f9b516f571bcd0ac14e4d3eec15aacd6320a4a1a12045acce8c6081e8ce922c4e882221cedb2cc266399ab468487ae9a08124d65edc07ae30f0"
        },
        {
          "alg" : "SHA-384",
          "content" : "8942363710e7473635a2c77ff82db8af1915cb6ac8429851b4acfa04f059183f8e3444dedff75a7da02698f2ee22a181"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a9906146d76704f64b1a1aad3d80be86e0d08a987fdb63d4d8d0399937e7e94076d9878a14593fb4465f3a5fccec0df5"
        },
        {
          "alg" : "SHA3-256",
          "content" : "275370eeb5f02c15358168ea134c4eab1afed8d27750a8a326b9f9f506dfc9f2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d9e2a3943373e1eab933b45f49997b24e01466eb99a177c40f21c7107c9f21ebb135e14d191b0a5b699e3985d20de8e87662e92c0bf59e5e054d3da85fd777dd"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.j2objc/j2objc-annotations@1.1?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.sonatype.org/spice/tags/oss-parent-7"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@1.1?type=jar"
    },
    {
      "publisher" : "MojoHaus",
      "group" : "org.codehaus.mojo",
      "name" : "animal-sniffer-annotations",
      "version" : "1.17",
      "description" : "Animal Sniffer Parent POM.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7ca108b790cf6ab5dbf5422cc79f0d89"
        },
        {
          "alg" : "SHA-1",
          "content" : "f97ce6decaea32b36101e37979f8b647f00681fb"
        },
        {
          "alg" : "SHA-256",
          "content" : "92654f493ecfec52082e76354f0ebf87648dc3d5cec2e3c3cdb947c016747a53"
        },
        {
          "alg" : "SHA-512",
          "content" : "94d0335cdf94aa547ad6c0c7e44b8e3bda736ce19d941dd0faa3a45390e5ab2d122022ff4e07bb9aaedd41ffbd9500f324e0a9e42f4c5441bce0774f44872f45"
        },
        {
          "alg" : "SHA-384",
          "content" : "58c3caa2ed13416384c519aa52b26c8b93cb43ca6921027c8ac9f321d77979a01634e42de4dd645edc687c266ac58748"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6dc341f4b80b80da2751d9284ca61852333863a36373aed33a59b80c3771d3113fe4ac550923a282b1c4d3bd616ad8e7"
        },
        {
          "alg" : "SHA3-256",
          "content" : "022761cb42cb64b957756b985165ed9f7d3978c4670f770599aed938b100a46e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "730314b9682777eb64897e6033db857d9924bb749c473fe2111e03b9c1ed2788359c983a07b0e262552b3390104239ac1df42cffc3d0053b14955d1a36ee3244"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.mojo/animal-sniffer-annotations@1.17?type=jar",
      "externalReferences" : [
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/mojohaus/animal-sniffer"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/mojohaus/animal-sniffer/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/mojohaus/animal-sniffer"
        },
        {
          "type" : "website",
          "url" : "http://www.mojohaus.org"
        },
        {
          "type" : "distribution",
          "url" : "http://oss.sonatype.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/mojohaus-dev"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.mojo/animal-sniffer-annotations@1.17?type=jar"
    },
    {
      "group" : "org.eclipse.jdt.core.compiler",
      "name" : "ecj",
      "version" : "4.6.1",
      "description" : "Eclipse JDT Core Batch Compiler",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "127e660140c0b17ef651295287102555"
        },
        {
          "alg" : "SHA-1",
          "content" : "5555607add54eb79c5a0729134e663fe2e6300c2"
        },
        {
          "alg" : "SHA-256",
          "content" : "9cddda75f4a1b4469e73f44e7b61a3e897d0f657df4797f9106ffe88c4eeade0"
        },
        {
          "alg" : "SHA-512",
          "content" : "b406977208bb0ee9461089c7356b1c3a13b3487c11542d0a131049ba155b34aaf77a85cb0aff697d801fbf16b0f8469158f0e83cff30a5575ae90195839a44fd"
        },
        {
          "alg" : "SHA-384",
          "content" : "b90ec909392cc5edadb93199fdba6e577881e6525d5c1c8248b66a6116d6e7830956871d375679c8786c38fb8b2676e0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1e8b6348c0745c6f35f39ad0acb554c94aa3db2bdaa49a9627323b259e815e79b0a430903d25eecf373f027ff6905893"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ece30e4b3bacc3f669dcc362b260af6a8fbe2ccb9c2cb9cf86f3494c4d4c8b86"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1ecdba85ff89adbadf5ca3e2d1120322d3cc39639f56634c7b17c19d5a4d6bda5df4ebbe954af347b5282f439f2aeddcf6966d5fa0fe8dd174309716ce7f9fca"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jdt.core.compiler/ecj@4.6.1?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "http://dev.eclipse.org/viewcvs/index.cgi/org.eclipse.jdt.core/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jdt.core.compiler/ecj@4.6.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.12.0",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "19fe50567358922bdad277959ea69545"
        },
        {
          "alg" : "SHA-1",
          "content" : "c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e"
        },
        {
          "alg" : "SHA-256",
          "content" : "d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e"
        },
        {
          "alg" : "SHA-512",
          "content" : "fbdbc0943cb3498b0148e86a39b773f97c8e6013740f72dbc727faeabea402073e2cc8c4d68198e5fc6b08a13b7700236292e99d4785f2c9989f2e5fac11fd81"
        },
        {
          "alg" : "SHA-384",
          "content" : "c34b8a0e0eba2168ad56fedeb7a1d710b6f1d3f1ce6aae99a4e0247bd120efbbadc8dcb2f731045b8a16e3efd30604dc"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8ad6ebe7754bf0caa8cda7e59c0e95360d76e06a7ad6aeec5637985519dbd1dd06e7eed04711039f36ec4c49de280def"
        },
        {
          "alg" : "SHA3-256",
          "content" : "18ef639b2aeeb5aedffb18dbf20c79f33e300d99fb31b131689639cc470e6e4c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fbea96114dcf4f31cfaaa99987be756ddda3a6c74f8c835461997df794d54b92da1f60fe5c3f1f2a43cb8c5f5db7f4048bef77c70993673c7a93f3660fffc8da"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-lang.git"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-io",
      "name" : "commons-io",
      "version" : "2.11.0",
      "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3b4b7ccfaeceeac240b804839ee1a1ca"
        },
        {
          "alg" : "SHA-1",
          "content" : "a2503f302b11ebde7ebc3df41daebe0e4eea3689"
        },
        {
          "alg" : "SHA-256",
          "content" : "961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908"
        },
        {
          "alg" : "SHA-512",
          "content" : "5bd78eed456ede30119319c5bed8e3e4c443b6fd7bdb3a7a5686647bd83094d0c3e2832a7575cfb60e4ef25f08106b93476939d3adcfecf5533cc030b3039e10"
        },
        {
          "alg" : "SHA-384",
          "content" : "114f1e324d90ad887c177876d410f5787a8e8da6c48d4b2862d365802c0efded3a88cb24046976bf6276cadad3712f0f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "80288c03ad4d80d69f91d056ffc5570d49a9c76bf54ad2dff0121ecde26a560df76d05156f281f5c6db2a38ff07a873d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5adfb5ccaf5f21a549422f426118a9542673926fcd18c68390cf813e791dcf6c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7573f47f0babb53cefdc7c2309a0b982d800139064537b0797da442853d081010ad7c3c74a500598a0f800639a5d540eca21963ea652c68613907059bd4278c2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/IO"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.21",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c9be56284a92dcb2576679282eff80bf"
        },
        {
          "alg" : "SHA-1",
          "content" : "139535a69a4239db087de9bab0bee568bf8e0b70"
        },
        {
          "alg" : "SHA-256",
          "content" : "1d5aeb6bd98b0fdd151269eae941c05f6468a791ea0f1e68d8e7fe518af3e7df"
        },
        {
          "alg" : "SHA-512",
          "content" : "50024056475f4a4d0e2169c765ad1d8bf256ebef4cd0768f7e2b62833771a8ebb1ceab9bb47f5e6b582001a6099292598b7033496e8236f2a4fff4a2a5fffe00"
        },
        {
          "alg" : "SHA-384",
          "content" : "70c444a1a034b797742a7cb0ab5e88478370831f569ed66a87d77cc60b2387ac6de466585c90697e4d86af374457839c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2f93b26cec52b7813f2fc2e83f7b15cab3d1a2dbb870ed7f3e619eb1c9c930eb5e229f93a1a74889864ba46a863354f5"
        },
        {
          "alg" : "SHA3-256",
          "content" : "664155ed0e93b5c47afc2685c824543c723cceabe66db5ac36aca465df39acd0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "56a7903974dad1396cc95c7c56a6f075a792df6924aa542f9c6a365ef74e95b3a18b86253b1ffc69cb0a4df5ff2005cfc2f8dfa8f7a7daee7c14e85db416184f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.21?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.qos.ch"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.21?type=jar"
    },
    {
      "group" : "org.eclipse.steady",
      "name" : "lang-java-reach",
      "version" : "3.2.5",
      "description" : "Performs static analysis of application and OSS source code in order to analyze the reachability of vulnerable Java constructs",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "225d74a4619502af564c1893d42fe908"
        },
        {
          "alg" : "SHA-1",
          "content" : "875722c2602ec8ac0a95e5b06bce934fca976246"
        },
        {
          "alg" : "SHA-256",
          "content" : "7c22a597753599a5967485afd630d3382d1d5e895ba034b48ea50ef0ed7052a0"
        },
        {
          "alg" : "SHA-512",
          "content" : "3da2e48aaff7ae8102878bd82b6972e1a28e62d0756c89bf527ec7e30434da5c025e049791eea1186059fb479e63f7a3475ac5288e2441a36e45e9cec30df521"
        },
        {
          "alg" : "SHA-384",
          "content" : "c60133f10eb82271004b5929444e8c416f7f4ddc9288d0f2be4eaad1cd7d43c505ac02603d7b6bfce57aa89e5506105b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0b17e60c77601ac077b77fc50fa4848b8bb00accead933ae761de62c1f21c23737cd71121759ef0870409b69b61e8909"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1b68813bf221efc9c41b8cff7ff4e64bcd711d89aa0ebc6aa7351785ac5950a0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4f98852bcbc1bff9265fe6c4a00878d97165893f2b648f9ea0a7d5e85eea62c8e568b9ec388e6998706cae315b460bd121707ee9fb25b32fb4af424965f6dd3f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.steady/lang-java-reach@3.2.5?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/steady/tree/master/lang-java-reach"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.steady/lang-java-reach@3.2.5?type=jar"
    },
    {
      "group" : "com.ibm.wala",
      "name" : "com.ibm.wala.core",
      "version" : "1.4.3",
      "description" : "Core WALA analysis libraries",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8515a552f88d7a2976e99efa3f950ed6"
        },
        {
          "alg" : "SHA-1",
          "content" : "60cd6d68dcdd9e9fb84b23717f7e61089b2fe925"
        },
        {
          "alg" : "SHA-256",
          "content" : "262eb3ea8c0dc76578587e5761bb3dd29185bc14f5a9663155479cc1bba96dd0"
        },
        {
          "alg" : "SHA-512",
          "content" : "4e5de93aec1deae640b6cff074cf89e2aaae4a309d3f21429f357526bdd2db9b0d317943f0af938984bc2cd9def6f0493461c8b692c6a61cb19eaef3fbe86b73"
        },
        {
          "alg" : "SHA-384",
          "content" : "858afdd29f63aa3ffbbafffeea301ca0bdf7982689d161e7d9aee94b82fb3267bfec482a888ddc2f6234acb7619572f5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4b92182dacf6da09dc1fbd2035142977195863da701858442453bc8b5f593d2bb09b6409c07b147907426f2e629d5fe4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6e1a55fe79b451b2605dd6774d36553b4522a0eed6c1bc514fe4cc81ad69cbca"
        },
        {
          "alg" : "SHA3-512",
          "content" : "86bf3b99f7f7e130c4a2edc0e9381d6732787734bc3196ed2add4838f21f3ce19e5264c7add5544b432aceccfae39024d019366c0a379420dcbf58876c7c2558"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.ibm.wala/com.ibm.wala.core@1.4.3?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/com.ibm.wala/com.ibm.wala.core@1.4.3?type=jar"
    },
    {
      "group" : "com.ibm.wala",
      "name" : "com.ibm.wala.util",
      "version" : "1.4.3",
      "description" : "Utility library included with the T. J. Watson Libraries for Analysis (WALA).",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1a47f9f8198e6451c1f233c4b91adf6e"
        },
        {
          "alg" : "SHA-1",
          "content" : "d6e16b869e0d7b072b74443ef3806a1845b5eee9"
        },
        {
          "alg" : "SHA-256",
          "content" : "c2c1526c208f7efac0eb2641163493a65e4740327ed2bd81ba070e5679b911db"
        },
        {
          "alg" : "SHA-512",
          "content" : "f445df5477232cdda81853af64efd3dfe0b6765390e865bd72a7ec674fd9e4df8c56ffd0ec49773a779b841fae321af76144538031bdea18e7c648ab07d63ce5"
        },
        {
          "alg" : "SHA-384",
          "content" : "eff0bb3fd3daf4217af8ab6cd097b2ecf27978bac642966072d949de482116d4f9cbb32ac7bdca70079f63a9a67fe8c8"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7ab3dbbd1752f761fb01f94ad5f70737950d46537eb5ce5c48f1af1b853d6e325c4b687e967c648fd37e1a06613aab2a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "718a518f6c11f3689c69dd8284f6cfac3b2fadf2efbb61f6813a9b1d559788a5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5043a1f14422a21cf376a244d0af8a3e2af1c7497c773688f8a033693641106d2a60b990fccce65578e5eae81c11502d90e8b6103faa52b827e0e7974b6954f1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.ibm.wala/com.ibm.wala.util@1.4.3?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/com.ibm.wala/com.ibm.wala.util@1.4.3?type=jar"
    },
    {
      "group" : "com.ibm.wala",
      "name" : "com.ibm.wala.shrike",
      "version" : "1.4.3",
      "description" : "WALA Shrike library for bytecode reading and instrumentation",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cd4e627005f49b2b175c4a4488b3a2d6"
        },
        {
          "alg" : "SHA-1",
          "content" : "7db1a2333202adeb6f454e1c0642467262eb8282"
        },
        {
          "alg" : "SHA-256",
          "content" : "49de6ec88c24c36be523ad40e3caf2340d0a263bdf0b7d513560718f00791942"
        },
        {
          "alg" : "SHA-512",
          "content" : "8c3f6e3dc399ddb0336e48f4a24a5f08aeaa45ade4eb04b4712253aa54ea37369cca55257a0bc8c87a0176b9e74d0d0d856621d8893f7f7084f4ada99f364dd4"
        },
        {
          "alg" : "SHA-384",
          "content" : "04cdf8f733907efed7d0562fc3b244e7b2571834d3b3c901ce180165228d27243b0fbc83f19dc736d2d82349f460780b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e849507937c6ead2bb62526c1b4f85910f78a037f4c311c2ff4116120c9765eb7f9dddbb031ffe0c74fa8ec3b3ff4245"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a1390d915c61ee5c53c32f7d970f97827c94e2c8b793fe397c361bd13a4f034f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f8466ad6d6fc5b8df235506313cf209c059b6e3ec4486bd52b0e093cba3f15d960568572c6b641730de804ef69d658776281d322a4ba7a0c66bdf40db98966b3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.ibm.wala/com.ibm.wala.shrike@1.4.3?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/com.ibm.wala/com.ibm.wala.shrike@1.4.3?type=jar"
    },
    {
      "group" : "org.eclipse.steady",
      "name" : "lang-java-reach-wala",
      "version" : "3.2.5",
      "description" : "Wala call graph constructor service",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ed9744e7ea4560f242280a33e31894ca"
        },
        {
          "alg" : "SHA-1",
          "content" : "c848f38f65b159c263c60634a4ff2eb6256d5dbd"
        },
        {
          "alg" : "SHA-256",
          "content" : "0e72de8db563c212054eb6eda8b9477abad4e4cee2066b5b6bd8880c50c20be9"
        },
        {
          "alg" : "SHA-512",
          "content" : "9aa745417867842c5cc83f5d4c9f913bbd546d7b602113d1e348a6ae02450072b33af620ff4e64cb25957a1130fec5f2b0ad948b99ac3f937ca578b182a46371"
        },
        {
          "alg" : "SHA-384",
          "content" : "2fdbedc8b90208abe1182cfaac1de56ec76ed02d68ddd1f34b9bb310759db1cb35cf151ca7e9474054118389243e08a1"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d77b540c8798852b7d851eea3ce93b5adad465160c40e861698760c8988414a9adfb0fc48dad21f6c1cb78293783b118"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f51f7a26a060ebf32951d62149facdb026df1e4513056dad98504a6b3b723f47"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2fb82ee7ca5abc584a04c890cd2c7021658f18901ae4fe5bf96979d82683a4a16f5dbd25d1020feea6c7447b7c695d4505456021ade4e63da7e1831dc1011e74"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.steady/lang-java-reach-wala@3.2.5?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/steady/tree/master/lang-java-reach-wala"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.steady/lang-java-reach-wala@3.2.5?type=jar"
    },
    {
      "group" : "org.eclipse.steady",
      "name" : "lang-java-reach-soot",
      "version" : "3.2.5",
      "description" : "Soot call graph constructor service",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3708725b688d92662ab26ada60eab4aa"
        },
        {
          "alg" : "SHA-1",
          "content" : "7178b8f9e87fffc8ec32e06086424eff97581686"
        },
        {
          "alg" : "SHA-256",
          "content" : "f45ab8ea67dc34aa88be78de6f64ee9bd7c3d1ebb14eb24e2031c0fd0d36d03e"
        },
        {
          "alg" : "SHA-512",
          "content" : "224e0a9af2a68b0c0c0e9ae464cb8fa6cdbff4c598a431e5c7d9491bb9833c37e0dd436918fe8af7eb819eb6a5e7b863a7a5d0b896ec2491df0dda4e87b11e95"
        },
        {
          "alg" : "SHA-384",
          "content" : "d226c0d58da92113a21f6ed5111fbed0e5f104cf5b18f33ba209e292ef2b856976228c0c0458cfeca81f41862ea55b6e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5f4d9edb5b15536ea7ffae7add56165c1bbebe036296a6b8526996f8f4df6d3a90ce19d19a1b2412ee418ef787f395ef"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1b5720c85f79b7d70996fd84a6650a8d90d150cb0f99c4a390deaee34a0924c1"
        },
        {
          "alg" : "SHA3-512",
          "content" : "50b76e7d6a355a75fa969d828740aa9e2a212a99fedcf6eadabe8b00b6ee8cb45d29d3b465afa0eb7a1b3568ad4cf51f4de4705e65d8efa248c42d091936297a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.steady/lang-java-reach-soot@3.2.5?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/steady/tree/master/lang-java-reach-soot"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.steady/lang-java-reach-soot@3.2.5?type=jar"
    },
    {
      "publisher" : "Sable",
      "group" : "ca.mcgill.sable",
      "name" : "soot",
      "version" : "4.1.0",
      "description" : "A Java Optimization Framework",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1518cd8d896459853d074a1de5f51046"
        },
        {
          "alg" : "SHA-1",
          "content" : "aef5d705862a93daa568c33182ff3fbdc7ee8c16"
        },
        {
          "alg" : "SHA-256",
          "content" : "72a83c14a2ba2a82ab9b86c70c41e8e06325de5f98caba276217cde8588f8b46"
        },
        {
          "alg" : "SHA-512",
          "content" : "7976118ffb65a52eee50b6c015f4f41644e36c9229a6037c39a62444d8c37909f2a4ab4dae004c1f4568aaf33cc2c4a62ffc663b67250c25ef96ab78df55f74f"
        },
        {
          "alg" : "SHA-384",
          "content" : "b829a937260f37fb7bf146b43bdb0ec08b8f084fe7e79d573f165f1b3b4360b734eb99a278d352868ca0ed347c170998"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9edf61ca7eee373d915b28a5f96443da884e4498eea0da131bc65782993104f106e6e5bf782ae171a40b2e0ca1d76dcf"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f0bd5cc859459b604462617631d48f305b68ba9e4ba4bf85e8c67ac01d604e82"
        },
        {
          "alg" : "SHA3-512",
          "content" : "63e84e4d0e99be426c66381dfdc1525d1289a86c3e4099d1bad491c607d6bbd19d160c9fc1b4469ef34512174102877e5fa918c871ed7a00874e3270dccec821"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "GNU LESSER GENERAL PUBLIC LICENSE 2.1",
            "url" : "https://www.gnu.org/licenses/lgpl-2.1.txt"
          }
        }
      ],
      "purl" : "pkg:maven/ca.mcgill.sable/soot@4.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.sable.mcgill.ca/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/Sable/soot/tree/master"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/ca.mcgill.sable/soot@4.1.0?type=jar"
    },
    {
      "group" : "org.smali",
      "name" : "dexlib2",
      "version" : "2.3.4",
      "description" : "dexlib2 is a library for reading/modifying/writing Android dex files",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ec27df1158c3f007b6d7634d4f24ba1a"
        },
        {
          "alg" : "SHA-1",
          "content" : "9a8c80d8404f68922b905b06ce1145a76d5a7fac"
        },
        {
          "alg" : "SHA-256",
          "content" : "b7b45e790da22950b16177a668193d026b8f611c46f7b941340a61cc8cbe8b3b"
        },
        {
          "alg" : "SHA-512",
          "content" : "5327a6f3dfb2fca74a5eb73786b35228a55b3f6dfa19d6ace819df50d745f27a1318e0f65416b8e85c75f007d0ab86952f837a4dd330b8e516395e13c0ea56aa"
        },
        {
          "alg" : "SHA-384",
          "content" : "b01d1910429c5768018c65f9df4d14cb960d422fae13d3ea80b8b99ed0caf6d03a9587e21440caedbe050899792b9116"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f0d86f034e429923fc320e12402df64b1bbffed87cb3a3caeb35a8daff141680ab2cd105bfac183b7b8537c0bc0671fb"
        },
        {
          "alg" : "SHA3-256",
          "content" : "906b141741366bf85f41f695c6b43bc9d0aa0bc651d079e729a0fb7a2b5792d1"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2d001f093f9e6cc3b2bdcfd2056a1a3583ad7e364ee6cf812125a6991656efa9414c215f51d8280546fdc3dc84999de5a17a0d554a344503847e1e708eb93793"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.smali/dexlib2@2.3.4?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/JesusFreke/smali/tree/master/dexlib2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.smali/dexlib2@2.3.4?type=jar"
    },
    {
      "publisher" : "OW2",
      "group" : "org.ow2.asm",
      "name" : "asm",
      "version" : "7.1",
      "description" : "ASM, a very small and fast Java bytecode manipulation framework",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "04fc92647ce25b41121683674a50dfdf"
        },
        {
          "alg" : "SHA-1",
          "content" : "fa29aa438674ff19d5e1386d2c3527a0267f291e"
        },
        {
          "alg" : "SHA-256",
          "content" : "4ab2fa2b6d2cc9ccb1eaa05ea329c407b47b13ed2915f62f8c4b8cc96258d4de"
        },
        {
          "alg" : "SHA-512",
          "content" : "7eba7097109389f48fa9142bf22d225f5d3104d68013d3b8e0a6d4054a8cd0ef64614372bdcb38987d68adb6d33a3804e98ddf112ba84dbb09d448ce702dacc4"
        },
        {
          "alg" : "SHA-384",
          "content" : "0be9cd29939b809320f8984fc938bb909b8dce253fdce624b35bc58cf904049ad9e5f6d9b62b07cc7aa7308b86403282"
        },
        {
          "alg" : "SHA3-384",
          "content" : "069be10d23f8e1c9f64a15edffeca54afc48f72ceb7032bd5e700895ecab51510649a40941248a1975fd2b1d2ba97c35"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1325013f5a4a6b82d3e250e091cebab4dfcefb5fef44d40cd68d750c2f967da5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9df72eca1487a2dd7581df7a1625b61983396c1faac93ffd3b150dba6798341a1e9aeea374161ef019b4dd55b9968b42ce5d396392f8aa91cebd4da4365c9cb6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-4-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.ow2.asm/asm@7.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.ow2.org/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://gitlab.ow2.org/asm/asm/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail.ow2.org/wws/arc/asm/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitlab.ow2.org/asm/asm/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.ow2.asm/asm@7.1?type=jar"
    },
    {
      "publisher" : "OW2",
      "group" : "org.ow2.asm",
      "name" : "asm-tree",
      "version" : "7.1",
      "description" : "Tree API of ASM, a very small and fast Java bytecode manipulation framework",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "de9019ffee1e642e122b529f58ddd74b"
        },
        {
          "alg" : "SHA-1",
          "content" : "a3662cf1c1d592893ffe08727f78db35392fa302"
        },
        {
          "alg" : "SHA-256",
          "content" : "c0e82b220b0a52c71c7ca2a58c99a2530696c7b58b173052b9d48fe3efb10073"
        },
        {
          "alg" : "SHA-512",
          "content" : "7c285e6de13ced1fd6110c616f9f38120d5d37da9e39be1b6fc16224595f54f645c675313f75ed819ae27e66d84e9bc378a6fb42df2f4dd2819ed745767a79ac"
        },
        {
          "alg" : "SHA-384",
          "content" : "d5b5e8b7c4645242f871f9b03d90f1475315f5ecc4371a0de0df8acaae5487e2588c438bbf79a064340fbb81c2ab508f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "dc6b53474e8e2799cd799ed54cf5d162d5292de8860b929b4e4d74d84eb889af6afe4718019f56c08ef59f4dd1e1b077"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f1c8dd9dfdc39164514426aeb9707126f31bc5234def29fa1b8bfdf0e561ec63"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7daa7514b1451e2b5276a082797ba28ae2604dded1bae939f74b85be4162505610ab4fddde2bae31fb036f752ffac849f35f8bad574133d1cfafb034499e690b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-4-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.ow2.asm/asm-tree@7.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.ow2.org/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://gitlab.ow2.org/asm/asm/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail.ow2.org/wws/arc/asm/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitlab.ow2.org/asm/asm/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.ow2.asm/asm-tree@7.1?type=jar"
    },
    {
      "publisher" : "OW2",
      "group" : "org.ow2.asm",
      "name" : "asm-util",
      "version" : "7.1",
      "description" : "Utilities for ASM, a very small and fast Java bytecode manipulation framework",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5777b00daedeaf5987b92ad35d2a8cb2"
        },
        {
          "alg" : "SHA-1",
          "content" : "5b0b0f8cdb6c90582302ffcf5c20447206122f48"
        },
        {
          "alg" : "SHA-256",
          "content" : "a24485517596ae1003dcf2329c044a2a861e5c25d4476a695ccaacf560c74d1a"
        },
        {
          "alg" : "SHA-512",
          "content" : "f8f693c0efdedb244ec09d0fd1e32e2c3dd392c464468abbad1d730c80fb2fdac889719c57911d5eeccaa9e20ea4fbb47452fa24b6afe31b07e7bbdf70f25466"
        },
        {
          "alg" : "SHA-384",
          "content" : "f0316bbcc87b542ad4daea5b257c6b5500a5ef516249ee593370738f8316be8f83dd0ab12a18ece11bc2cb637c03f591"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5ec349cc5d8faccff15fd8b21a912cfc24116cd525d9403019c46bebf331c012dc5e0477b80a78720a9abcb0f727d063"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c93583f02046404f6aad114f3bc75dc734c2ebb560183d9a59d40fdb2313cc28"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f41ac7084f3723c4ff44770bd79892c037970d04fa5126459460598aa63ad2129fb737ce6ee488c1d922508272e664757e506c5541068351b0f014d8500e36d0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-4-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.ow2.asm/asm-util@7.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.ow2.org/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://gitlab.ow2.org/asm/asm/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail.ow2.org/wws/arc/asm/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitlab.ow2.org/asm/asm/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.ow2.asm/asm-util@7.1?type=jar"
    },
    {
      "publisher" : "OW2",
      "group" : "org.ow2.asm",
      "name" : "asm-analysis",
      "version" : "7.1",
      "description" : "Static code analysis API of ASM, a very small and fast Java bytecode manipulation framework",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7f66f9d85c5bf11f6bd94e249392c86f"
        },
        {
          "alg" : "SHA-1",
          "content" : "379e0250f7a4a42c66c5e94e14d4c4491b3c2ed3"
        },
        {
          "alg" : "SHA-256",
          "content" : "4612c0511a63db2a2570f07ad1959e19ed8eb703e4114da945cb85682519a55c"
        },
        {
          "alg" : "SHA-512",
          "content" : "d74fd51f49a8278545eaaaaf808692d69f7140fa73f4cf1eec01a21d5d2a378356a5d74fadc2f6983ee023cdf6e06851f9f37a084be547120300ac97d9cc6bba"
        },
        {
          "alg" : "SHA-384",
          "content" : "609c937964b2c0e8c82345fa89e80d26a4a17cb36fe9536ef876d568d37cd943a9848be18cc9b04b9038a8c1119f98d5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d7b185834756496cede9bf69e63abff8b2771301a79985bed79dc479c4aabbde6dbdda0be71a1f9ac5dfb5396a5cd7a9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "87f5da2ef52ef0d26678bb7d86c45cbd69850221a4ac65ffaac282c4ff45fa81"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ae003ade54f7320dae00420e6266f056123cb0757b852933293783c88c3fe68e518b08519b760ca52053f62eaed57eeca6856bbe1d12d54f33174a305457f5a8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-4-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.ow2.asm/asm-analysis@7.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.ow2.org/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://gitlab.ow2.org/asm/asm/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail.ow2.org/wws/arc/asm/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitlab.ow2.org/asm/asm/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.ow2.asm/asm-analysis@7.1?type=jar"
    },
    {
      "publisher" : "OW2",
      "group" : "org.ow2.asm",
      "name" : "asm-commons",
      "version" : "7.1",
      "description" : "Usefull class adapters based on ASM, a very small and fast Java bytecode manipulation framework",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a53524cb592585ce48f2de0ada82b885"
        },
        {
          "alg" : "SHA-1",
          "content" : "431dc677cf5c56660c1c9004870de1ed1ea7ce6c"
        },
        {
          "alg" : "SHA-256",
          "content" : "e5590489d8f1984d85bfeabd3b17374c59c28ae09d48ec4a0ebbd01959ecd358"
        },
        {
          "alg" : "SHA-512",
          "content" : "2879ae5e7b796f0777b4730fb3f21b8d42cbdbf3a090acadf2ce52082f1ea030059b0067d9a3b4d2c4b4680519a8ee9b2cf1563901931645245a973b9f60b1c2"
        },
        {
          "alg" : "SHA-384",
          "content" : "17a11634e5eb73dcb345f21fbf2d029a813b440a9e822471f142a1a2f2dd55834795859002300a207a1478c1998326b2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4723920c0c47757ca7fedfb060bedfe207f92cbfc7722e7d4612f690a019459dacbd7ae376a11cf4e0acce5b817cfdfc"
        },
        {
          "alg" : "SHA3-256",
          "content" : "63785b924b0a4b150008cb72baf7c192f1556edc9bbd13b0b4f86c99837db2f9"
        },
        {
          "alg" : "SHA3-512",
          "content" : "24bb7c1612347ffeabdbff52109c1fa6c206d99c6529a49af455df0bc24449b8e74886216095f74b14942685a1af45ec7597e38c22d878cea1bc02c411013b96"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-4-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.ow2.asm/asm-commons@7.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.ow2.org/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://gitlab.ow2.org/asm/asm/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail.ow2.org/wws/arc/asm/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitlab.ow2.org/asm/asm/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.ow2.asm/asm-commons@7.1?type=jar"
    },
    {
      "group" : "xmlpull",
      "name" : "xmlpull",
      "version" : "1.1.3.4d_b4_min",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "65b83a177c60e69440a8e4f44f51eb97"
        },
        {
          "alg" : "SHA-1",
          "content" : "6dcdbef481ff8fbac336a47048048b2b31855015"
        },
        {
          "alg" : "SHA-256",
          "content" : "b09c1108a561b4fa92afb105c49f66554b744b0f821c1ac9b92f9fb7c3acb17d"
        },
        {
          "alg" : "SHA-512",
          "content" : "0548e666561eda35aa9d052f57e8c13da56b0c445911d434642617fc3b464bae7f65c3e299eb9ec4b1a404f3c945899d3c0963d3c2a32d5a9a41de0010ff7845"
        },
        {
          "alg" : "SHA-384",
          "content" : "67a6e0d65e1e243d6f39b11830be1561a37a217aa134ddf33dea19b492313604b7ccd86e0712f79b218a6d04829ac56a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c1086e07906645672205ac8c04ed179614f9edb4e5743bb02922541002707dbad21578ac3f50b3ce0d86b99c01b48c98"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f798c67619258aa66b4b1196223fdfe7c7991e1927f3dc9d0622cbfe142bf076"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3476872c48e38356b1d31bea09cd8a46c4736227d8bf6cd8949499400e9c7a869201b31222e81d01f32fdff055c5e7442c7400d6dcb45185092b1ebaa6d580ec"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Public Domain",
            "url" : "http://www.xmlpull.org/v1/download/unpacked/LICENSE.txt"
          }
        }
      ],
      "purl" : "pkg:maven/xmlpull/xmlpull@1.1.3.4d_b4_min?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/xmlpull/xmlpull@1.1.3.4d_b4_min?type=jar"
    },
    {
      "publisher" : "Secure Software Engineering Group - University of Paderborn",
      "group" : "de.upb.cs.swt",
      "name" : "axml",
      "version" : "2.0.0",
      "description" : "The axml components for reading binary Android XML files forked from a not further maintained repository created by Bob Pan",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2cf30274755c29883d7caa9005a11fae"
        },
        {
          "alg" : "SHA-1",
          "content" : "2dccd674060b3756c4bb8e085334bb1ca266be08"
        },
        {
          "alg" : "SHA-256",
          "content" : "76f0cd142ca974d28ed09276aea9ac9e8f63e9d8502fdc511d6f02615fb875da"
        },
        {
          "alg" : "SHA-512",
          "content" : "7c7bb4fa77c38cb05f3d0a2fe308dec76d1d8ca3aae94bf2075665d23660f531caa12666b986c9f0fca722408dc6b6b3abbf9ab95ce5e66e9045809f6b6af41e"
        },
        {
          "alg" : "SHA-384",
          "content" : "c446d73676d1ec36a85cc969bb595cd913d36914f0856787c1704dffbca80c2f2f9daac30aa6d22dda8c5ee963c78070"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2d0ea7d0bfe46a1fe06f183bb767c07736dd36a516994076539adfbfb12aae61783e609333da570bc83b13e04e116d8b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5ee9141e979c42109f0899bc55224b26c6152cf122ec56c0bf2a84a563685684"
        },
        {
          "alg" : "SHA3-512",
          "content" : "cdb658859498abb76ff3af1fc09b9c27051e7cab86921f8726d74ac54c584f5e55b4adf6ae930311271e518a37d1f91f876b042ae4dea01d6f38a42732c1fb98"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/de.upb.cs.swt/axml@2.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.hni.uni-paderborn.de/en/software-engineering/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/Sable/axml"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/de.upb.cs.swt/axml@2.0.0?type=jar"
    },
    {
      "publisher" : "Sable",
      "group" : "ca.mcgill.sable",
      "name" : "polyglot",
      "version" : "2006",
      "description" : "polyglot",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e0e85c25cc81f4279a9e608e49c0048f"
        },
        {
          "alg" : "SHA-1",
          "content" : "f0e528051faa260d83f53d58275954d973231ce7"
        },
        {
          "alg" : "SHA-256",
          "content" : "d145d53b44264b24b588f649e6c95a6d8934079ba491146e4289f4ac1a631773"
        },
        {
          "alg" : "SHA-512",
          "content" : "bfb8955990886df5a4a9e0b590dcd6e6113ffab3156d796db35feea7121b0e5a2887dd68c4945c0b198b5b918ab8893d7d4c5ec7df01f53eea4d1b3dfaf09caa"
        },
        {
          "alg" : "SHA-384",
          "content" : "9c67c8fcd76b3534ac796afb379131f113c9c84d13b3bed860a34dd93800d56b93752dcb3ed988ca94b24aa24b1901df"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1a605c7b06df0ac2cec06ea22c3683dfca2951ced8f5620fc35229a5153178f8b3e947a6ab86e8e75c567f3d131d0e94"
        },
        {
          "alg" : "SHA3-256",
          "content" : "dfadb9ff96fc9280b3f07f731e2d93b08df077bc6d94c8300aeb64f5fbc20d61"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4e265c2758c259989cd901df10df4b53e10487145f577daab77853df486bea1ddd94f3798a9dc778d7830e3573786eb037622d7b2ef993fcc8aa2be82d8de77f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "LGPL-2.1-only"
          }
        }
      ],
      "purl" : "pkg:maven/ca.mcgill.sable/polyglot@2006?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.sable.mcgill.ca/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/Sable/polyglot"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/ca.mcgill.sable/polyglot@2006?type=jar"
    },
    {
      "publisher" : "Secure Software Engineering Group - University of Paderborn",
      "group" : "de.upb.cs.swt",
      "name" : "heros",
      "version" : "1.2.0",
      "description" : "Heros is a generic implementation of an IFDS/IDE Solver that can be plugged into existing, Java-based program analysis frameworks. A reference connector exists for the Soot framework.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "08d69842f7122be5f6bce6c4ae7792ed"
        },
        {
          "alg" : "SHA-1",
          "content" : "675778f9cf26035925fcb0f14b059d4b485819c0"
        },
        {
          "alg" : "SHA-256",
          "content" : "516aa6011d84f348746a918d375f3c02d18076fc9a760305e1bf708725e71e90"
        },
        {
          "alg" : "SHA-512",
          "content" : "f316fa0a6da6026b4513f206d0317fb4ce1b0a01982f968dc16907755210c651a211d171edf29f82f74a33ae67af3d9a789669965b5b73f8864234ee1613ea1a"
        },
        {
          "alg" : "SHA-384",
          "content" : "24780a203bc4d4a1064a23463cc4e93c8dde67d4369da1004ac149eee2af88f3dc760b00dd87242c0c03f26317af87b1"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9f6f85e0c219c26236cb229a1f774c44c719e180a2191e2287d1c24de7498443449f09f11b91ff40a99ac52792b96cfa"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b79c9e077827f3f66bfce22bee671c6b47662184832c54e96bd2b80de3d8d627"
        },
        {
          "alg" : "SHA3-512",
          "content" : "83ae6e7f92b724f029332c6ab8e0ec7450037333c31520f60df3bea35a9d010486ea9cb8fcac81fb3ddfe3c85bfeb3964054cc825535dba49d48c917be8830db"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "GNU LESSER GENERAL PUBLIC LICENSE 2.1",
            "url" : "https://www.gnu.org/licenses/lgpl-2.1.txt"
          }
        }
      ],
      "purl" : "pkg:maven/de.upb.cs.swt/heros@1.2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.hni.uni-paderborn.de/en/software-engineering/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/Sable/heros/tree/master"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/de.upb.cs.swt/heros@1.2.0?type=jar"
    },
    {
      "publisher" : "Functional Java",
      "group" : "org.functionaljava",
      "name" : "functionaljava",
      "version" : "4.2",
      "description" : "Functional Java is an open source library that supports closures for the Java programming language",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "44bbc1184c2ff1c26c8e8ffba2fad2a5"
        },
        {
          "alg" : "SHA-1",
          "content" : "f26bdd90a8d6b6faeb38ab2ba4c39580c1eb989f"
        },
        {
          "alg" : "SHA-256",
          "content" : "d8cfc6ed3071e818d1273c1b243edb4c96c0e10eacf6bed80724aa2987ebdcc5"
        },
        {
          "alg" : "SHA-512",
          "content" : "6320bd705d3954081d428b5b6488181f62243efebdb14440ac2658bcf8facec8ddc7022cdf6d5a7210dc2e0cf8565f1f3b4ced0261b78d049580f63d64a3e5e0"
        },
        {
          "alg" : "SHA-384",
          "content" : "8668e4bb5b1f260027e88be50e1601ab75cefc8b2f955d0ae25431df013f5bab09a2306e1a66bd6b423cbeff095bb8fa"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1fb2f49861c43ee4ea29037520b185be10607ab898f4359337bad685f96a16b0138d5c6e1bb2289da5d8fe177e7e8838"
        },
        {
          "alg" : "SHA3-256",
          "content" : "19c125a501af1c7bdc38c1fbfc480903f4f7bcd34ec567a3ddf47b15fc778c8c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2798b567a8e8e1884206f13b9dca41489d4492e3c1f4fb1d5d70bfd050ffa643ebc7a22f214d1316782219431dd7c308a0a7b2501e0e2124046d9c90b5c26545"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "The BSD3 License",
            "url" : "https://github.com/functionaljava/functionaljava/blob/master/etc/LICENCE"
          }
        }
      ],
      "purl" : "pkg:maven/org.functionaljava/functionaljava@4.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://functionaljava.org/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.functionaljava/functionaljava@4.2?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.5",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3b1ececad9ebc3fbad2953ccf4a070ca"
        },
        {
          "alg" : "SHA-1",
          "content" : "6b262da268f8ad9eff941b25503a9198f0a0ac93"
        },
        {
          "alg" : "SHA-256",
          "content" : "fe30825245d2336c859dc38d60c0fc5f3668dbf29cd586828d2b5667ec355b91"
        },
        {
          "alg" : "SHA-512",
          "content" : "fe8885069fbe999485e25fa5e019486f9661bdb99834df2ca2888981f47bd4a7685f83859a315f8e7dd208b7dd29717e2d108e6d8366755e6d971cac4cf9e437"
        },
        {
          "alg" : "SHA-384",
          "content" : "41e16b4c59b038e0963b8c2c02a860ecbed984ad66ad9f2c46e0ed80e870a73c422c2760cf3e089cdd65012437bfb8ef"
        },
        {
          "alg" : "SHA3-384",
          "content" : "10fb8f440ec47794ba7bbbbeedcee0b5f102bac18f8bda89e4a6b714c0982a69fe8db9a43b85f68eb5437171c32f1c84"
        },
        {
          "alg" : "SHA3-256",
          "content" : "499f1d3b92c2b39fc2fdf25dab2db8b629a0fcf0445f7a86f86ab223bbab5766"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5e813a54d7c8bf977d8f2f13227ec0a1acf5454895e1cb5c115afab8b65fa7d3d35362d2209e78baa39996de8c334fd2799cc0b80e70aaae4af55fde9f07e1c1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.qos.ch"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/ceki/slf4j"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.5?type=jar"
    },
    {
      "publisher" : "GlassFish Community",
      "group" : "javax.annotation",
      "name" : "javax.annotation-api",
      "version" : "1.3.2",
      "description" : "Common Annotations for the JavaTM Platform API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2ab1973eefffaa2aeec47d50b9e40b9d"
        },
        {
          "alg" : "SHA-1",
          "content" : "934c04d3cfef185a8008e7bf34331b79730a9d43"
        },
        {
          "alg" : "SHA-256",
          "content" : "e04ba5195bcd555dc95650f7cc614d151e4bcd52d29a10b8aa2197f3ab89ab9b"
        },
        {
          "alg" : "SHA-512",
          "content" : "679cf44c3b9d635b43ed122a555d570292c3f0937c33871c40438a1a53e2058c80578694ec9466eac9e280e19bfb7a95b261594cc4c1161c85dc97df6235e553"
        },
        {
          "alg" : "SHA-384",
          "content" : "fc0058495e54efb6e05a34e3ff422e7c8347bcc77d6d9b87e9253424968dee6ef6a215c318d7e54f8705276be81f0682"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ed6464b715de6ced0d9981a3f28140824946a4b7a02ffaff6116c833bb36e8f77a6282ce63c0d82cfe841d4fd6916891"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ecfc9bef24ae28cf94c6775ecf6e2086d90a25d8d5476a4f6bb24001601b6cd0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f2b333527faedf504f60aa70a3d491972fa76f7e61e6351027f74613f41001157656824fe312b6e1df6dc4979704fe2a745b618d5368a97fe0bf8749739de9e2"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://javaee.github.io/glassfish"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/javaee/javax.annotation/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/javaee/javax.annotation"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "javax.xml.bind",
      "name" : "jaxb-api",
      "version" : "2.4.0-b180725.0427",
      "description" : "JAXB (JSR 222) API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ebc2c217121173faeef5c300d26503a9"
        },
        {
          "alg" : "SHA-1",
          "content" : "7400ad346870308bcc46bb60f3c553af3e331b4d"
        },
        {
          "alg" : "SHA-256",
          "content" : "59ed20be31b88bb8a16ca760ab50082665a680380cbb4bbcf366eeef7f6b39a1"
        },
        {
          "alg" : "SHA-512",
          "content" : "169f93ca28e081458c1b19ac3edbcfe68d977c0181a9843acf5dcb0c05186a602e2e2f9d08c47df3b11b96f25d64a29c0ca41982f176f26e282d0f2f8464d61e"
        },
        {
          "alg" : "SHA-384",
          "content" : "b61749f02f543d22688b44359380b87b70fe8e2f0b0ed9311849f313a4b53801030d2dd76d5b129c09cb3786ed6b67d2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "47e737930787125501559ef66dba4408ed8b1f4bc0940e60bf24f104b9d3810b225a4edba3e25ffeaa62b11f06f82d20"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d574ba946747cf67fc75bc18eaf3327ec2aaccd6c522c47348ccc014dd39bc90"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6d79c6098ba8f5398d8cb98f1e6f7f41889f7093c313bdf9c08866c88a3d6b0ea41f3bd08b274e303654ce40bb5d23fa83523eb23a246c6acbb9ca68de2afc17"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.1"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/javax.xml.bind/jaxb-api@2.4.0-b180725.0427?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.oracle.com/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/javaee/jaxb-spec/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/javaee/jaxb-spec.git"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.xml.bind/jaxb-api@2.4.0-b180725.0427?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "org.glassfish.jaxb",
      "name" : "jaxb-runtime",
      "version" : "2.4.0-b180830.0438",
      "description" : "JAXB (JSR 222) Reference Implementation",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "44285523aa85797f4634fcfaa5083db8"
        },
        {
          "alg" : "SHA-1",
          "content" : "2a0705ce8aa988b691c70e8bdcc1613050a148a2"
        },
        {
          "alg" : "SHA-256",
          "content" : "dec58bd4828227afffe5cdec56ce3b668a8e0ff7c4217999598eec68a8665ae2"
        },
        {
          "alg" : "SHA-512",
          "content" : "e290c772dea08b442c6fb6ef5c86e9287c2ef27527581a312315c514bd433452c1b699969c14bb9e4d87f7937f79bf772c2f4bd8c0c93b094ff3e1d13dce72ff"
        },
        {
          "alg" : "SHA-384",
          "content" : "8ecff1331a383c24ef7e75d2b849120dcc8a55492de031c8c11995be3dc3b31f286d7ba1f236d115295cd4e02cc79fbc"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4423492d8a8abd552c457c151fbe3317f8fe2fdd5f7b0ce8c9db7a3b33311e43d5e8dbd7619209a3ad39a9cf458a59b7"
        },
        {
          "alg" : "SHA3-256",
          "content" : "85c348fe162118b98eea7ee5859efaaaefca3c60b8223567a95086c9e49e5ff7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "288d4eab9d54f62df432c5dae75161c60a7db2c04a93819772eb1099538036f7b8327ce4611871610951a4723e335b7e0cf580bc9457389a58aa0522cb00d61d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.1",
            "url" : "http://glassfish.java.net/public/CDDL+GPL_1_1.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.4.0-b180830.0438?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.oracle.com/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://java.net/jira/browse/JAXB"
        },
        {
          "type" : "mailing-list",
          "url" : "http://java.net/projects/jaxb/lists/users/archive"
        },
        {
          "type" : "vcs",
          "url" : "http://java.net/projects/jaxb/sources/v2/show"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.4.0-b180830.0438?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "org.glassfish.jaxb",
      "name" : "txw2",
      "version" : "2.4.0-b180830.0438",
      "description" : "TXW is a library that allows you to write XML documents.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fc3c5b2147a96531196e6d0c69b3dca4"
        },
        {
          "alg" : "SHA-1",
          "content" : "31bae7fb5924472b3243b265b47cb741da715419"
        },
        {
          "alg" : "SHA-256",
          "content" : "def433e60b3e1fb84950ea57e09ba1664aabc017ffa67c2a4ff7a0557753ba01"
        },
        {
          "alg" : "SHA-512",
          "content" : "8eff8a0d4c73ce1e5e2ed1f15ebb6f8db8252f49111542fb5dace3f00007254b2173c5e5d8d9c6a9d9d1b3da28667e9f649f0a4f95d394bd0ede33c7c63328a9"
        },
        {
          "alg" : "SHA-384",
          "content" : "009fbfeda32b3ab28e8667ed7a1e9bfd106ddf5b0b137e6a5b89ff97a0cf74310756f2e33969af5c05b7957d5e007a5a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "aa615fac96136294736b0f4547e90ee96361c2e324720e9e33486739e42493eef8f24519e1d6c3f56a9c6fe08875c6d8"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d7a1315a927428a7d185502a6f0f23dd57ad82787abf11ab7f46e6c48e28dbde"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d12e60a0f534b64ab77b88cefe57767d99e94e44ac8c26c0fe9c62338233f24de74441d5331be52b4fe903ab9c098a877f41b015db1a4fdca9e68f0cb4b48cda"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.1",
            "url" : "http://glassfish.java.net/public/CDDL+GPL_1_1.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.jaxb/txw2@2.4.0-b180830.0438?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.oracle.com/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://java.net/jira/browse/JAXB"
        },
        {
          "type" : "mailing-list",
          "url" : "http://java.net/projects/jaxb/lists/users/archive"
        },
        {
          "type" : "vcs",
          "url" : "http://java.net/projects/jaxb/sources/v2/show"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.jaxb/txw2@2.4.0-b180830.0438?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "com.sun.istack",
      "name" : "istack-commons-runtime",
      "version" : "3.0.7",
      "description" : "istack common utility code",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "83e9617b86023b91bd54f65c09838f4b"
        },
        {
          "alg" : "SHA-1",
          "content" : "c197c86ceec7318b1284bffb49b54226ca774003"
        },
        {
          "alg" : "SHA-256",
          "content" : "6443e10ba2e259fb821d9b6becf10db5316285fc30c53cec9d7b19a3877e7fdf"
        },
        {
          "alg" : "SHA-512",
          "content" : "1fbb4d883725319028fd3b558086a29ffd0fd0006b56eca627ddda23b1155e287af29860038d92d4c475975f4d1f4ac8249ac55b88852869623485171934b31a"
        },
        {
          "alg" : "SHA-384",
          "content" : "59c1249a26ec6052bca487c453af2da7d159841c1e20da0acb98bdec292656d9b17bf655c3c69fe87c00f1834808db55"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5d12aa1ebe44172b1b63c6ec2452c19131970c1f00846f3f05f243a4a082bd43f753451c226464db616caf4867a574e3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "bd12121bad35eb802e4bb7519b976d2cf46c2b9e5081388d1589f779d1afa165"
        },
        {
          "alg" : "SHA3-512",
          "content" : "29f5a8853221522e5ffe21d03e4ca603f70ae6c28df5f78efd76e4ef25f23a47aff64ba22fe2f037347d4970d8f589b9ee84ad367e222c948d4956d84b96260a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.1"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.oracle.com/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/javaee/jaxb-istack-commons"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.7?type=jar"
    },
    {
      "group" : "org.jvnet.staxex",
      "name" : "stax-ex",
      "version" : "1.8",
      "description" : "Extensions to JSR-173 StAX API.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a0ebfdbc6b5a34b174a1d1f732d1bdda"
        },
        {
          "alg" : "SHA-1",
          "content" : "8cc35f73da321c29973191f2cf143d29d26a1df7"
        },
        {
          "alg" : "SHA-256",
          "content" : "95b05d9590af4154c6513b9c5dc1fb2e55b539972ba0a9ef28e9a0c01d83ad77"
        },
        {
          "alg" : "SHA-512",
          "content" : "ebabd330a2d7c109105fa55c4236fc2f2d52668e70b17b8fc36b8ac9f524aa2c67040e75371267d8e9523d94dee0ce064e76584c9f206687e89b9f3b2a387f03"
        },
        {
          "alg" : "SHA-384",
          "content" : "990e24d22d5881e2996c1ca257d9bc30194e2e09d798c197e062e80675f920765ffcc00bce91c0307833e8fb1d2a4e28"
        },
        {
          "alg" : "SHA3-384",
          "content" : "345eeb08734becd7695b7671345deeb5f2b3257d03dbf147209c8efb3b3c53e2f031a7830513d14203b139cb7ed97044"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3b5a013f0ee704db2635e06eedf4d9af48276d7c5d18e9e90e7f66e4effdb76b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "357af43a8a49ec2e72d4f5c6b941777848cf29684c6e8169f18035d1d3a331c30e56ba7d18d67b492396b762fe1a5308d2f104d3c6d4d9a8ce85448214534c6a"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.jvnet.staxex/stax-ex@1.8?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/javaee/metro-stax-ex"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.jvnet.staxex/stax-ex@1.8?type=jar"
    },
    {
      "publisher" : "Oracle Corpration",
      "group" : "com.sun.xml.fastinfoset",
      "name" : "FastInfoset",
      "version" : "1.2.15",
      "description" : "Open Source implementation of the Fast Infoset Standard for Binary XML (http://www.itu.int/ITU-T/asn1/).",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "57f3894ad7e069ae740b277d92d10fa0"
        },
        {
          "alg" : "SHA-1",
          "content" : "bb7b7ec0379982b97c62cd17465cb6d9155f68e8"
        },
        {
          "alg" : "SHA-256",
          "content" : "785861db11ca1bd0d1956682b974ad73eb19cd3e01a4b3fa82d62eca97210aec"
        },
        {
          "alg" : "SHA-512",
          "content" : "95950422534fe074f993d9e9dac2eef3bac16d5843e12f63b05cf6779dc30752f87e065df918fc41fd8b8ef89d86b44a4861cadcb808a1c62d93a25fc2cf4ce2"
        },
        {
          "alg" : "SHA-384",
          "content" : "9cfafbf8b080e28786bbb10b001f187222d3e71a104e745df8c2ceb32c7aa87fa96769aa3523586eab4ce12509049551"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c434e7daae3c5f52558602844563984a69d42933ad5f7d599ed047150eb596774a74ea28da9852e3d1533a861a77b704"
        },
        {
          "alg" : "SHA3-256",
          "content" : "633e8afaa8d30d1f537624cdf3fa33985bd2f09a4de65b330d9c0585bd2a8720"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2c4271dd94d7dea713fedfebd9ffd190a3f6571f45a501700bc132b57b0344f740e114a05e78404e102e445d577dd0d783d76761cc9c83356c5d7435deaabcc3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.sun.xml.fastinfoset/FastInfoset@1.2.15?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.oracle.com"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://java.net/jira/browse/FI"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/javaee/metro-fi"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.xml.fastinfoset/FastInfoset@1.2.15?type=jar"
    },
    {
      "publisher" : "Fraunhofer SIT",
      "group" : "de.fraunhofer.sit.sse.flowdroid",
      "name" : "soot-infoflow",
      "version" : "2.10.0",
      "description" : "Soot extending data flow tracking components for Java",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "16ddecc07aab480b7e52787d9080e6b9"
        },
        {
          "alg" : "SHA-1",
          "content" : "8bf5dda1f5e9c2822a2d36fd283f8ade0032f2a8"
        },
        {
          "alg" : "SHA-256",
          "content" : "5a726eae2793b53265f7e15fbc3a0be7d1ca386e61fb7141edec4fd461480808"
        },
        {
          "alg" : "SHA-512",
          "content" : "e3b66b213e0eee72a2bbaaa2ef53424e29cd4745dacba95577f2dec298e45a8524c6638deb0f6c09555592a45c5b0bb3c7a035d04c0c16f5a800a189146f811b"
        },
        {
          "alg" : "SHA-384",
          "content" : "a342d2e72d0b43e3aa78e6314fb31e48d9af35b0b9f2c1b6792e5a135f6870e8ee6c567182e8bb375fe3ed7716a2f5e4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7a7874a086061dbd7ec2f958cae87c4f7ce7a5a8765b11c4ff004b0c8e1fd09bce7a8e59ff027589d4ae2c4e760423ac"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7e112c86abd2a460c3f25dc52a8673d025b28fd6560affb5e3c300551a8e87fc"
        },
        {
          "alg" : "SHA3-512",
          "content" : "53e811a8dd285b8842c54de5785c82b9b394167dbcb73de60525e5b670b7f0a6c2e3b79033c71af877cadc3568654cf2d09dbdb8034b1841ca2c55cde7e72dca"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "GNU LESSER GENERAL PUBLIC LICENSE 2.1",
            "url" : "https://www.gnu.org/licenses/lgpl-2.1.txt"
          }
        }
      ],
      "purl" : "pkg:maven/de.fraunhofer.sit.sse.flowdroid/soot-infoflow@2.10.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.sit.fraunhofer.de/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/secure-software-engineering/FlowDroid/tree/develop"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/de.fraunhofer.sit.sse.flowdroid/soot-infoflow@2.10.0?type=jar"
    },
    {
      "publisher" : "Soot OSS",
      "group" : "org.soot-oss",
      "name" : "soot",
      "version" : "4.3.0",
      "description" : "A Java Optimization Framework",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c611564ef405b283146118160e68c949"
        },
        {
          "alg" : "SHA-1",
          "content" : "1c1d2a6728e12e0f54c0d056c0778d0b1ed04941"
        },
        {
          "alg" : "SHA-256",
          "content" : "ee7a4b8bbc41b4c09a11b51b61500208cb424eb4ba0b736ce083c00dec57dd5c"
        },
        {
          "alg" : "SHA-512",
          "content" : "76f471fb62f2a3d045ab148441f9389e779120d5707af152b313d728aeaa2cda70dc335a57115670862fd2976dcbe538de6beb5579904f31b1008ea138778453"
        },
        {
          "alg" : "SHA-384",
          "content" : "8675f4b09026396384c02962986f4ed0be19bb0063ad3ffc92a5de1971bfe4fb871d8a4be9c0a61948ab3bc6e63217b8"
        },
        {
          "alg" : "SHA3-384",
          "content" : "552a96f337fbade9b68bfec94604e7c5c33bd488b515cbd27ed44fd8088404844cf753cc3152f18f6599d080602221b2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e4d70a0c86302534245a0b30ee2c0acf6c8b420dd90aac0603b6abfaf2ed61a5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "88180a191e63b284798c669ae183a141b07e595c608255a6e3f0770d2306f1539f13ea7cffd26a2506ff2af3e0b3023cc4a2c3c342d696300318571fdcb74c8f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "GNU LESSER GENERAL PUBLIC LICENSE 2.1",
            "url" : "https://www.gnu.org/licenses/lgpl-2.1.txt"
          }
        }
      ],
      "purl" : "pkg:maven/org.soot-oss/soot@4.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://soot-oss.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/soot-oss/soot"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.soot-oss/soot@4.3.0?type=jar"
    },
    {
      "group" : "net.sf.trove4j",
      "name" : "trove4j",
      "version" : "3.0.3",
      "description" : "The Trove library provides high speed regular and primitive collections for Java.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8fc4d4e0129244f9fd39650c5f30feb2"
        },
        {
          "alg" : "SHA-1",
          "content" : "42ccaf4761f0dfdfa805c9e340d99a755907e2dd"
        },
        {
          "alg" : "SHA-256",
          "content" : "3c8616203d61a12a7e3487e8b34f3c198c2b5ba9e90da0c7ea32d99cd4958012"
        },
        {
          "alg" : "SHA-512",
          "content" : "a53815fd52c43ca069f8526e2d1041c881ae833ef64272989c54ea6491c529a7bb830f88a1c8dd016aed158f961b8f404e76f510a384ce89df4edf44c87647b5"
        },
        {
          "alg" : "SHA-384",
          "content" : "293c0364a06bd5edca0e45af6ec39bfef183d3af73063b6f60f055d5cf504f5a6be528d581ad7404ed1448c2d2d92672"
        },
        {
          "alg" : "SHA3-384",
          "content" : "41b0b5319dad736bf012a401c6bcc58328f9cffe14ef552ac475469468d6659dffe660738598060abf02f19a05b8c17a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "701e5478dadaeb35b23916635070f5f551468000c70f88daa4d62197d0449102"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e62c6b1feb9eff3ecfebcf76b9ce32f0059672e3b0e8ca2224c827fa83070658b552bbc57d49a0020ca30b46c6272580c85726f5f46f85e5b532f90643ebc9e8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "GNU Lesser General Public License 2.1",
            "url" : "http://www.gnu.org/licenses/lgpl-2.1.txt"
          }
        }
      ],
      "purl" : "pkg:maven/net.sf.trove4j/trove4j@3.0.3?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://trove4j.svn.sourceforge.net/svnroot/trove4j"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sf.trove4j/trove4j@3.0.3?type=jar"
    },
    {
      "group" : "com.google.guava",
      "name" : "guava",
      "version" : "30.1.1-jre",
      "description" : "Guava is a suite of core and expanded libraries that include utility classes, Google's collections, I/O classes, and much more.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "05374f163d0a4141db672fff9df95b12"
        },
        {
          "alg" : "SHA-1",
          "content" : "87e0fd1df874ea3cbe577702fe6f17068b790fd8"
        },
        {
          "alg" : "SHA-256",
          "content" : "44ce229ce26d880bf3afc362bbfcec34d7e6903d195bbb1db9f3b6e0d9834f06"
        },
        {
          "alg" : "SHA-512",
          "content" : "025cdd70db7d896d57cc04a8a735ded609b393e8d56af23d454198b64a263147ab0d68fbdffabcb926b143433fccdc022f76aaed658b9448c5ce85f07c42140f"
        },
        {
          "alg" : "SHA-384",
          "content" : "5a7d9c9792f0912bf49ecc97fabbce703408e2009f84a827ca3ff3bc5a3e171f2759821a75da155b4e45e5ad87893053"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f9870f5a878e7c21c70973b8c6269c7f11a81543c2318c4542e1f471276483d74694d3a80892e71eff34599c3dce8e12"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6178c64bce389dd1a93d9c34fe5dc75e91d5af0c1f0d1956b0466e807ad6fa3c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "06a197858dbccd9ae008a50224a1e94e2bb71197dde13ea9b95c014001bfd4730da2faca306103848666df5b696df28954f365645d19b38bb3b75244b0bf14ca"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/guava@30.1.1-jre?type=jar",
      "externalReferences" : [
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/google/guava"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/guava@30.1.1-jre?type=jar"
    },
    {
      "group" : "org.checkerframework",
      "name" : "checker-qual",
      "version" : "3.8.0",
      "description" : "Checker Qual is the set of annotations (qualifiers) and supporting classes used by the Checker Framework to type check Java source code. Please see artifact: org.checkerframework:checker",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b9822b33f72326c74abded69b7c717cc"
        },
        {
          "alg" : "SHA-1",
          "content" : "6b83e4a33220272c3a08991498ba9dc09519f190"
        },
        {
          "alg" : "SHA-256",
          "content" : "c88c2e6a5fdaeb9f26fcf879264042de8a9ee9d376e2477838feaabcfa44dda6"
        },
        {
          "alg" : "SHA-512",
          "content" : "742f5442d72b37cb7d2e8e069dbe03545e5e21f1cba51254fc62beea3ed688446cbb5c4e505670c4c4e3f12b35fe9292ec501bd799319c6f0dfc129495bc90c9"
        },
        {
          "alg" : "SHA-384",
          "content" : "a81585e7d06d9d385a1eb39b819f850de5ced8086be99b5e558a2698557320376caf61c73449b233cc809a20f05a2b5d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8e705ba81122587a44bdeb9a9d26e9e0f1d848af3c77151eb43473953b8370ccb84988cd30c9b658f151466827ccf528"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6d690908e08540b0aaa4daf1073fe73ea3094e875e62c240ecb2db01941c6cd6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e65188d34d2762b0323a910e29f15fd46536e0774fda0c44fe7ae42b25197f68018121e7990b54c9b3e8f0c98cde83efd33391930be07c40bcb5de2a40a98d7d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.checkerframework/checker-qual@3.8.0?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/typetools/checker-framework.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.checkerframework/checker-qual@3.8.0?type=jar"
    },
    {
      "group" : "com.google.errorprone",
      "name" : "error_prone_annotations",
      "version" : "2.5.1",
      "description" : "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2bf3239388cf5c817cd83ecb692b045f"
        },
        {
          "alg" : "SHA-1",
          "content" : "562d366678b89ce5d6b6b82c1a073880341e3fba"
        },
        {
          "alg" : "SHA-256",
          "content" : "ff80626baaf12a09342befd4e84cba9d50662f5fcd7f7a9b3490a6b7cf87e66c"
        },
        {
          "alg" : "SHA-512",
          "content" : "24d512c97bbea2b972addff6bb28b9e7edae62249dfb6693835f077fe239395bb15ce82ad58d4ee42d8c4891a0e62b51398450ad6c9dec473173eacb6c6bcd3a"
        },
        {
          "alg" : "SHA-384",
          "content" : "f6d6abc35181b26b4dc66ceafd20f0712f881d9ff4043f39c82bb37ac22dcc7c7850fcc6e125d480f657f1c06b343e9a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f57c681d2afd44aed3a7cf261fe31c4a163da413b6222d27711f8becee2eb45531134ced8cc4b321037c5f447dde823b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "90157e4740d1094a2fb153c2ae3d290c4a8ac62831d72f61c199ff3a2a586fce"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3820fc8036692cdff0b51c8d679c240aa14fb8b49a635d6de679006959a8b8226ff9cb73e5b2f107c77bdf78a5bb8caa206cea1fe539389ff9c502d3d514be9b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.5.1?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/google/error-prone"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.5.1?type=jar"
    },
    {
      "group" : "com.google.j2objc",
      "name" : "j2objc-annotations",
      "version" : "1.3",
      "description" : "A set of annotations that provide additional information to the J2ObjC translator to modify the result of translation.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5fa4ec4ec0c5aa70af8a7d4922df1931"
        },
        {
          "alg" : "SHA-1",
          "content" : "ba035118bc8bac37d7eff77700720999acd9986d"
        },
        {
          "alg" : "SHA-256",
          "content" : "21af30c92267bd6122c0e0b4d20cccb6641a37eaf956c6540ec471d584e64a7b"
        },
        {
          "alg" : "SHA-512",
          "content" : "51ea975179f809cb260751d11a513881b643bf016d15949bcb63b57d3c8868a2197e0620ccbaa5739e032797ec6faa3aa6d64606e999fce32930314780ca4115"
        },
        {
          "alg" : "SHA-384",
          "content" : "d2a54e4bb17793a98f85fb8f91138cd3b3d311385b7fb2c09d05c3112d42218a6da29154ba184f00031919548022aa71"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8ba512ee47d36d5712335849e8f0fae21498c983c48fc2b4749ac7dfb4eeddf75dd51d21366667f90d6414db032a7b5b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e97bbe4e1ac9f9785ad0b81fd29fc9c6b0d9e37acc6da6d0b31ce9e6da072664"
        },
        {
          "alg" : "SHA3-512",
          "content" : "864bc6181c8ad8372e0a05ec3b0bdebc876571692331d3519e19df54a21ef333e992fe5c4e84759f010cf0657f9ea1c435bea8f103735ec3dc9dd31493e7d4a6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.j2objc/j2objc-annotations@1.3?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.sonatype.org/spice/tags/oss-parent-7"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@1.3?type=jar"
    },
    {
      "group" : "org.eclipse.steady",
      "name" : "repo-client",
      "version" : "3.2.5",
      "purl" : "pkg:maven/org.eclipse.steady/repo-client@3.2.5?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.steady/repo-client@3.2.5?type=jar"
    },
    {
      "publisher" : "TMate Software",
      "group" : "org.tmatesoft.svnkit",
      "name" : "svnkit",
      "version" : "1.9.3",
      "description" : "Java(tm) library to manage Subversion working copies and repositories",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fe12b57f5c35612d39c9ea6e25ee5530"
        },
        {
          "alg" : "SHA-1",
          "content" : "58ef49dcf3e565f8008442842812f13faa50981c"
        },
        {
          "alg" : "SHA-256",
          "content" : "18d501b481363595dc376fa4c4c81bd02e980e67269a7de35ccc7fe18e408fe7"
        },
        {
          "alg" : "SHA-512",
          "content" : "de981eccc343f73e5e93d143114b9128ef4ac337a5a2f23353668bd1658ba15ef2b592779bce6e905015f48056976c6a4ca5c4058e3d2e97abbe1ee624a32298"
        },
        {
          "alg" : "SHA-384",
          "content" : "c3aeee81b720089fde2096dd387aa57882e6dd6ee4f1471a1dcc608c9bdd6dc5b3cfcb5a65a5d99df6b961fbf71e763a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b475d01a27d1fe69dc5fea1f03814a1f51892267fd3dbc6c8207049fc1c36278a05c5287c2b0b2778306795c210631a1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0c16a2aa3b0a320cc47010169f119670f977039aff9357f92d8a7d4b0944092f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "017cd9377d716e474e90072699072f52d1f41da6b842c83125d87ed8c884eaac43c22306dc782f9b6ffd6c9088a668a12af5441c581431c6ee58d74c27f5d3e6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "TMate",
            "url" : "http://svnkit.com/license.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.tmatesoft.svnkit/svnkit@1.9.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://svnkit.com/"
        },
        {
          "type" : "vcs",
          "url" : "https://svn.tmatesoft.com/repos/svnkit"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.tmatesoft.svnkit/svnkit@1.9.3?type=jar"
    },
    {
      "group" : "de.regnis.q.sequence",
      "name" : "sequence-library",
      "version" : "1.0.3",
      "description" : "Textual Diff and Merge Library",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0c7450d250b594fcbc6bc170dbe2a98e"
        },
        {
          "alg" : "SHA-1",
          "content" : "3bcf12fa805a735bb26369cd66c5933767c026de"
        },
        {
          "alg" : "SHA-256",
          "content" : "cb876d3b370b227ed9852a5a874427dce24a0df3e2f7409a11edfbcc5c4243a8"
        },
        {
          "alg" : "SHA-512",
          "content" : "eeaa2ec7160de4c15f3fd03fdbde459a55703a9585084b75d4fab17e0f1049f40fce243f8ad7d0a6aa7e901c2409af485cce914ca60bd247922fb737402bed56"
        },
        {
          "alg" : "SHA-384",
          "content" : "ac19e261a762457973c8b91d17663ce6178510e0c44b928fc4dcb0f7bbf34973ce966f9faa8a9f2a8076df68779d1044"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a28c3625398bd6c797acdc9ee0d56b9b12815e08e1d17697d9390e8e331b54e00d984cb3a84de5fc83d0a12bd6492100"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c882d4821339a90a524a8f93876404544278b0ac4c79961b51506bb5ff113d9c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e3835ab4bfb4dd6d2542d7f2d4cff7bf1da6295c84a0edaa531e71f673140c1906effff3e3cc33c6b8410459ab6ca752a9822a2eb2be62b52cf1743232f77124"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Sequence Library License",
            "url" : "http://www.svnkit.com/SEQUENCE-LICENSE.txt"
          }
        }
      ],
      "purl" : "pkg:maven/de.regnis.q.sequence/sequence-library@1.0.3?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "http://svn.svnkit.com/repos/3rdparty/de.regnigs.q.sequence"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/de.regnis.q.sequence/sequence-library@1.0.3?type=jar"
    },
    {
      "publisher" : "TMate Software",
      "group" : "org.tmatesoft.sqljet",
      "name" : "sqljet",
      "version" : "1.1.11",
      "description" : "Java(tm) library to manage sqlite databases",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "920464becd225d7419807aaf67cbc26a"
        },
        {
          "alg" : "SHA-1",
          "content" : "68c946d051fa4aa9d3f2a793c556c35fcfba0be3"
        },
        {
          "alg" : "SHA-256",
          "content" : "bbfdd44fe8e00165431aee31bb8988534ea7ba4869076c621d9ee87d097edab6"
        },
        {
          "alg" : "SHA-512",
          "content" : "932e6c1bba9ae586c7b05d2560a0621f344ba0a5e479a14d61d063053d6f686c733f3f2509685f242b973d866f881fbb6f3b1ccaf068b689514c89da91076a60"
        },
        {
          "alg" : "SHA-384",
          "content" : "840b7d9dc692ef73964d9ad9102f06bf88689a983426c2318ef7ecd8f0014c34a20411a6e71f0a24187f2fe4206aa481"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2786fd68f167a8477588560162093878eaabc1fe8dcf7d267c62aed8efdea8a57e963b8a485433f8977cddf690e9cc05"
        },
        {
          "alg" : "SHA3-256",
          "content" : "23df1c45e54feffbb83b85708a20f0e1125aa3004fda56b3258a0ead75f16d2c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4eda01920156de3b89499a7f6166691ef55df67ef53863e2eda547b6084c732cc5e35059e49ee61b1a7aff844a55dda473cbea1fc0abc20413591bd4a36672b2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "GNU General Public License (GPL)",
            "url" : "https://sqljet.com/"
          }
        }
      ],
      "purl" : "pkg:maven/org.tmatesoft.sqljet/sqljet@1.1.11?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://sqljet.com/"
        },
        {
          "type" : "vcs",
          "url" : "https://svn.tmatesoft.com/repos/sqljet"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.tmatesoft.sqljet/sqljet@1.1.11?type=jar"
    },
    {
      "group" : "org.antlr",
      "name" : "antlr-runtime",
      "version" : "3.4",
      "description" : "A framework for constructing recognizers, compilers, and translators from grammatical descriptions containing Java, C#, C++, or Python actions.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0e0318be407e51fdf7ba6777eabfdf73"
        },
        {
          "alg" : "SHA-1",
          "content" : "8f011408269a8e42b8548687e137d8eeb56df4b4"
        },
        {
          "alg" : "SHA-256",
          "content" : "5b7cf53b7b30b034023f58030c8147c433f2bee0fe7dec8fae6bebf3708c5a63"
        },
        {
          "alg" : "SHA-512",
          "content" : "1786aff2df4664483adcb319e64be7b69b643ac9508c3f11796b5aa45b9072b46f53f0a21b2ff7291162afe81506de16161746273e4532ebad75adbd81203f0d"
        },
        {
          "alg" : "SHA-384",
          "content" : "6ee2dcd3cf8366fe6ee18fb87aebe2d162b232c89e0aab417f97fed368cdf652d27db518dc5e71aa2a4aadda2e7f4c7a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "db284c93203cbbec1b22b482a45c70c68e858a90e73b23fae66c1bc53231b0f61c5576fcf51ea0d3a30070428d7dd865"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3f6cf631e9f792a41128400f8690266d915c0588ef85073a6cae73624a155b10"
        },
        {
          "alg" : "SHA3-512",
          "content" : "13d1f73c44e807b36946c21cfd506e91e8cbdf685b770cbc0dcb4e55ec28b5bc91bd90eb7f24ebfd13386a47eccf552dd2a1ab277fccabafdb7a9b40aa9d4fc5"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.antlr/antlr-runtime@3.4?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "http://fisheye2.cenqua.com/browse/antlr"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.antlr/antlr-runtime@3.4?type=jar"
    },
    {
      "group" : "net.java.dev.jna",
      "name" : "jna",
      "version" : "4.1.0",
      "description" : "Java Native Access",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b0e08c9936dc52aa40439c71fcad6297"
        },
        {
          "alg" : "SHA-1",
          "content" : "1c12d070e602efd8021891cdd7fd18bc129372d4"
        },
        {
          "alg" : "SHA-256",
          "content" : "1aa37e9ea6baa0ee152d89509f758f0847eac66ec179b955cafe0919e540a92e"
        },
        {
          "alg" : "SHA-512",
          "content" : "ea1b400cf25c6032160553f19baedb21103341f1c4236fbecf5f8462cc4db06f3459d7812ed0ad07a0b9faa3b576f8fa6edbd9ed64f9486b85e5bf982c21775e"
        },
        {
          "alg" : "SHA-384",
          "content" : "5224672e925785b80737e084f4e4fb7005327c45b6ddf698a5d5bb687fff63b56efa8d8d283707b922443590b3529a3f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "dfd9e7ddb6a0929f004910056c445d84ac496f229d0606aca08682ea594ee8bcc83d46961b8adec11c06bca272c116a7"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0db5f48ff7e2de2c987491eeaf33a7cf1716081b8716548fb49178a9ac7090b3"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c62abaa20d16ff933afed6a3277325ef74d6d774e17c32b6884b3f9893ac05bc3ab2c5ffbab7cdf1e3b8947c9cd00314321a58809a09d4893e2430cca928928e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "LGPL, version 2.1",
            "url" : "http://www.gnu.org/licenses/licenses.html"
          }
        },
        {
          "license" : {
            "name" : "ASL, version 2",
            "url" : "http://www.apache.org/licenses/"
          }
        }
      ],
      "purl" : "pkg:maven/net.java.dev.jna/jna@4.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/twall/jna"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.java.dev.jna/jna@4.1.0?type=jar"
    },
    {
      "group" : "net.java.dev.jna",
      "name" : "jna-platform",
      "version" : "4.1.0",
      "description" : "Java Native Access Platform",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "533e404eda70bbf8e40de134ffeec95b"
        },
        {
          "alg" : "SHA-1",
          "content" : "23457ad1cf75c2c16763330de5565a0e67b4bc0a"
        },
        {
          "alg" : "SHA-256",
          "content" : "f91ba7c0f26c34f04bf57d2ae30d4b19f906e7bb1de90eb3e1f4fdbf45d0c541"
        },
        {
          "alg" : "SHA-512",
          "content" : "8ab09d04fd7e86b505f917e0a2b11d2c2e9f3a3e923a9fb94ad7e0bf6715f1923e02d8f3927f9580ab9f39f9fa213176013c3bcd977c2d1ef6461e2610571455"
        },
        {
          "alg" : "SHA-384",
          "content" : "a221c3fecdb184a285468a2674646644952f6765a404db2f8c59038c71d816bea98f48aba5c2dd9115e4f64ff7a71d7e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "fc29373b43a5462f1c0366b0c5d0f8e8aed683499bdccbc1e1acab01c5fb77a1a443b456793afa36c6b9297e6d65c953"
        },
        {
          "alg" : "SHA3-256",
          "content" : "55e5e2c9254185eccb2baa5b94dd15d33ec89990c387769bf560f1dbb443119d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8b34ec69172aa635b6ab1223d4de3d5f4ac957062b65d980b23b2625fe49d13535509ab691a4046a8ba1cef317992f472f2db493204a47ee865e64137e7fc036"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "LGPL, version 2.1",
            "url" : "http://www.gnu.org/licenses/licenses.html"
          }
        },
        {
          "license" : {
            "name" : "ASL, version 2",
            "url" : "http://www.apache.org/licenses/"
          }
        }
      ],
      "purl" : "pkg:maven/net.java.dev.jna/jna-platform@4.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/twall/jna"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.java.dev.jna/jna-platform@4.1.0?type=jar"
    },
    {
      "group" : "com.trilead",
      "name" : "trilead-ssh2",
      "version" : "1.0.0-build221",
      "description" : "Pure Java SSH-2 Library",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0216689db62589e318219f1a746fd8fd"
        },
        {
          "alg" : "SHA-1",
          "content" : "c14d6fbab5e4ac1eb355f92e91b4c2c28a17e9b9"
        },
        {
          "alg" : "SHA-256",
          "content" : "b8ece3a1d49859687701738007b76261672f969cb02ca0c05110981678342a78"
        },
        {
          "alg" : "SHA-512",
          "content" : "9b946e775c7958ad3e6fcfa9463b34a93680bc1884073fc9e602a353082474907c6d78fbaf4bd078d305893140b26c1b1b52745e64bf7868aab7a77d54ae6997"
        },
        {
          "alg" : "SHA-384",
          "content" : "2594f238b9a946632413edce09d8c54bee3ad3bb3676666d6763bd8cf483d67eb2177e12267d46a1137cc1cf70c6e350"
        },
        {
          "alg" : "SHA3-384",
          "content" : "088bf5e7f861d4f3e04b4c760ad49e1ce3ef9b28104bdb69256d0af294cbe5bcc5095b3f5e3b75722418c82da76418fa"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c58141c2cc2db5880b68bc5a7c5026950c633f25654a786ee1a65b1f9641eea9"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fc9ae08a0daa2f050f6304473af3b0a7528a2aec6edce16c7469158083ec071ffc5d9bbd98cfacd675e5262df030a0f3789aba10e12e18682f303545041c9dc0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Trilead Library License (BSD-Like)",
            "url" : "http://svn.tmatesoft.com/repos/3rdparty/com.trileads.ssh2/trunk/LICENSE.txt"
          }
        }
      ],
      "purl" : "pkg:maven/com.trilead/trilead-ssh2@1.0.0-build221?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://svn.tmatesoft.com/repos/3rdparty/com.trilead.ssh2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.trilead/trilead-ssh2@1.0.0-build221?type=jar"
    },
    {
      "publisher" : "JCraft,Inc.",
      "group" : "com.jcraft",
      "name" : "jsch.agentproxy.connector-factory",
      "version" : "0.0.7",
      "description" : "a proxy to ssh-agent and Pageant in Java",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "50885bf953879373de768314dcf222a7"
        },
        {
          "alg" : "SHA-1",
          "content" : "780e0312287dd4e4f3601d401a073a081e403f2d"
        },
        {
          "alg" : "SHA-256",
          "content" : "b576930d6a822761123365358d90281351d88cec2dd845912873c1696184d6cb"
        },
        {
          "alg" : "SHA-512",
          "content" : "69f5a9c53f867a7d17aa4ec3877a39a7cd9ea99d535f538963e8366bfed5c398d5c0110922ffff12f2495b64a67b5de9368f3c4bd92e988abc8a56d3266d6339"
        },
        {
          "alg" : "SHA-384",
          "content" : "d903bb7e0084c1c81fea018952ff0903688baea262559fe3f6996a0dad15fffab21b36432dc337bba957e575794470ad"
        },
        {
          "alg" : "SHA3-384",
          "content" : "190bf2eb4d4f4767e2ac5f054501aae5b3b3737716d3527305d33efae69e74655128cdd7454c62d824c3ca36bf57bfb7"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b66334e9e7f89008b164a8c3b7d35511e7270f2084b1d7272dfc20f2c09d4670"
        },
        {
          "alg" : "SHA3-512",
          "content" : "55ceecc1b5cef6990b52edffbbd9dbc7e7b5c96f111955a1235bbe54f6f0d7f8ae8708aef36d7ceee965b6bbb41121e28df70056a980696f9443e71e8ca62de1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.jcraft/jsch.agentproxy.connector-factory@0.0.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.jcraft.com/"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/ymnk/jsch-agent-proxy/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.jcraft/jsch.agentproxy.connector-factory@0.0.7?type=jar"
    },
    {
      "publisher" : "JCraft,Inc.",
      "group" : "com.jcraft",
      "name" : "jsch.agentproxy.core",
      "version" : "0.0.7",
      "description" : "a proxy to ssh-agent and Pageant in Java",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0d4248a640962d82159b4e9c4bb48c76"
        },
        {
          "alg" : "SHA-1",
          "content" : "9bcf818dc9e5247b01b1b18671a12caac293ae40"
        },
        {
          "alg" : "SHA-256",
          "content" : "c5cb21fed78fd2c581e40276e428b6407e4801edb0baa1f7ef0c1025d06a3a7f"
        },
        {
          "alg" : "SHA-512",
          "content" : "65061ae678cd28fe17993504c14ba51d729c0e696c469745c48bc0f1475eb9309f6cb1a8ce957ed2b16bb34c0957dd5357e432cc1d463e700c74985bccdc6169"
        },
        {
          "alg" : "SHA-384",
          "content" : "dfb7efb6feb7f0d1c887e3b327e133efd1ab1916c78ab7b5050a544c0658b54c2a0815dadef05072e68b5e1465a82793"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d932b1d332490285d3c51fe14b3f464d364d18711ce19e69ec0c88522879d71a3bd4faeda14dc8c76015b2bd8579fa64"
        },
        {
          "alg" : "SHA3-256",
          "content" : "afe1e9213bacc41c245450470c3e80375115d311eacc33eb249e373545079811"
        },
        {
          "alg" : "SHA3-512",
          "content" : "cb6afc131972e8b8d1df2e22e1ce190f500906766a29d7ca63aeb4d49b1282534646b3793bd909c7bf7314b2692dbc1ae11aa4c34da5d3844a971a103df5a475"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.jcraft/jsch.agentproxy.core@0.0.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.jcraft.com/"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/ymnk/jsch-agent-proxy/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.jcraft/jsch.agentproxy.core@0.0.7?type=jar"
    },
    {
      "publisher" : "JCraft,Inc.",
      "group" : "com.jcraft",
      "name" : "jsch.agentproxy.usocket-jna",
      "version" : "0.0.7",
      "description" : "a proxy to ssh-agent and Pageant in Java",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "154b2f744a11226fd8abd92baef84523"
        },
        {
          "alg" : "SHA-1",
          "content" : "98cf51ca8d7882c203729ffa48e9b7be4c50b835"
        },
        {
          "alg" : "SHA-256",
          "content" : "57b8169c4877a4820a57df9ec5e5306d195d633d90672d3cc05ea876ba6d4999"
        },
        {
          "alg" : "SHA-512",
          "content" : "b9b51cc6fb03c1ac4ead14846dbe89f30853ad9fe7a3d463620de20035aa86d7b4642a0f2d2053c46d51dc830795720595d30bed13ebd78abc4ae285c5c2d571"
        },
        {
          "alg" : "SHA-384",
          "content" : "bc04e31ee2ddd07fd7ee2dbce52cb18669b015692a8dbdf86a142f4f471aef3446d0060df82cc094a41880b4d283e12b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1681d1efe1eb2f0fe94d6a9f3ae96efcc57f6201ebfb97e07fb03d968df47a295fa130a224d03ba835828964f2be77d3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a35eae779984dcca21bb770c0fbb7b2b3dbca1be116e456d97b96e65124149e0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8f1c2b0fae8dc249afd9187233be501977aca2f0e58808961959f696051f2badc02f93ba4b9abb7216fed147da94bfe71febcbd9e25ba10bdd4fb1766e15f45a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.jcraft/jsch.agentproxy.usocket-jna@0.0.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.jcraft.com/"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/ymnk/jsch-agent-proxy/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.jcraft/jsch.agentproxy.usocket-jna@0.0.7?type=jar"
    },
    {
      "group" : "net.java.dev.jna",
      "name" : "platform",
      "version" : "3.4.0",
      "description" : "Java Native Access Platform",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c5057d6dc3a531708e4a91249fadda3f"
        },
        {
          "alg" : "SHA-1",
          "content" : "e3f70017be8100d3d6923f50b3d2ee17714e9c13"
        },
        {
          "alg" : "SHA-256",
          "content" : "ea89d5090c8303ba4e9a0056e6d8a20429f3e021411e950bfd9eba3b6e6cf15c"
        },
        {
          "alg" : "SHA-512",
          "content" : "a89db5e82b44181d1b76ab9a7c1a0156f0511374a0d2c374ed815d4941f8566da0864e14492c85041938286dc2b27b8b0ed32188fa30e2e6286bc6f15339f7d3"
        },
        {
          "alg" : "SHA-384",
          "content" : "f7112e2d67595f8554a0aa72fadab872281afedfc7fd0013590300a48feb38dbc270d497dd15b92f6c73d0d9a286a89d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9f02e57719d009fad600d60ac09e8c7f8ac2e8a9801fba565c9965c5d1525bbfc9add02d6b68bc8dc77694ed692607e6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ef7e3c22120bb98ae347aceb982e23fc8cb58cb1cbf1fe2ce206865b52a0d826"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3a3fa2439540a43f99b87c16772191ff54845e8c74c0f189f55ffd22f895ab06c7cf2e7966596ec90b4c7c58e7c33be796327f9d40b8c38d2991b39dd57f16f0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "LGPL, version 2.1",
            "url" : "http://creativecommons.org/licenses/LGPL/2.1/"
          }
        }
      ],
      "purl" : "pkg:maven/net.java.dev.jna/platform@3.4.0?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/twall/jna"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.java.dev.jna/platform@3.4.0?type=jar"
    },
    {
      "publisher" : "JCraft,Inc.",
      "group" : "com.jcraft",
      "name" : "jsch.agentproxy.usocket-nc",
      "version" : "0.0.7",
      "description" : "a proxy to ssh-agent and Pageant in Java",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b67c8e11e8792fd5a96c08a2e50bddb6"
        },
        {
          "alg" : "SHA-1",
          "content" : "aff6f0f3a68f9731580d7c48075fdf177532dfe6"
        },
        {
          "alg" : "SHA-256",
          "content" : "231294f658fb855c0c8d070fc1c654d2b82772acc092e8d5ba53e9ae717a7096"
        },
        {
          "alg" : "SHA-512",
          "content" : "580854025c7c5299a0911df7829c5e61046877228e2b9d3d1d0e785660c9b41314a5fb66000785680a027917af3278d61ac3c3d477fe4cbdcdcb88eccb0a8145"
        },
        {
          "alg" : "SHA-384",
          "content" : "f7eff42d13e414ad421b0d0c9f568ae6e7483e2454226ff6240ed32bf54d81789b7f403d06cdf329329d2f1e805601be"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f17ebf34669858876286f1b2d574670f266b2c96b189c2b9100cba62e09fd6321b1a28b91f047167660fc4e8c9476c22"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c9c8efcae5a468fb3bb22957dcccbcbdd401c158fb6b655e6bf95c59f3e877bb"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d9a4141a279f38ab69f239dc723d114bc81367f3f33b94565bf022007874cb6f66060e87c444b23e333aeb555356f1307e4d1c62769d8d284d61da3eb8b61951"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.jcraft/jsch.agentproxy.usocket-nc@0.0.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.jcraft.com/"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/ymnk/jsch-agent-proxy/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.jcraft/jsch.agentproxy.usocket-nc@0.0.7?type=jar"
    },
    {
      "publisher" : "JCraft,Inc.",
      "group" : "com.jcraft",
      "name" : "jsch.agentproxy.sshagent",
      "version" : "0.0.7",
      "description" : "a proxy to ssh-agent and Pageant in Java",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5c4483e01a032a784be2f0b2ccb983ea"
        },
        {
          "alg" : "SHA-1",
          "content" : "5c09a3d2a0562de53cf616794f43f51a3c0a496c"
        },
        {
          "alg" : "SHA-256",
          "content" : "fd03fdeb40312846a0827cce1b2f93773d0d1ccc134bdb953dfac2d2cd44b321"
        },
        {
          "alg" : "SHA-512",
          "content" : "ce29ea8889a04b4e4ee3321db3859cf935e0d508c3725033d470560f12a37641502a6645e8f2e89f64026f3ebd3b601a9cd9b528361af2da31fda2fe519aa8c8"
        },
        {
          "alg" : "SHA-384",
          "content" : "e439a78eed8766a03d6e2657f4b82f8518fe5dc0b3d25d8a1a43f83e5e1842315d5d69e87b70d0f5c214544aef28d5a5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0a262e500b86cc63ea5bcec13aee3577f332efe45614bb41ab54905374b9c110aa65d31490b278735940689697a36e3b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "abeb1212cdfea5c4c8357d095685876e33848ffe9b4c4b66f8efce0d97000266"
        },
        {
          "alg" : "SHA3-512",
          "content" : "59399bcde768a9ff992bd5c6c7fa94e54dca5f37cc88a635c94b5c2fbb78b1e9baaf0081e5813ac850645fc4b25fe1b9861242a70c3f30a9a9b0cd353cdf574a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.jcraft/jsch.agentproxy.sshagent@0.0.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.jcraft.com/"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/ymnk/jsch-agent-proxy/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.jcraft/jsch.agentproxy.sshagent@0.0.7?type=jar"
    },
    {
      "publisher" : "JCraft,Inc.",
      "group" : "com.jcraft",
      "name" : "jsch.agentproxy.pageant",
      "version" : "0.0.7",
      "description" : "a proxy to ssh-agent and Pageant in Java",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "200f22f9b2845e11eaa5f6a8bad51feb"
        },
        {
          "alg" : "SHA-1",
          "content" : "b40c0d9b10d79a0683ca93e3f70360b3d8045b62"
        },
        {
          "alg" : "SHA-256",
          "content" : "609b7b9d00b29021397544652b649045209c41165790612b2b0df6f74c8dfb27"
        },
        {
          "alg" : "SHA-512",
          "content" : "a19ef8c0823e8fbb6d1eef41dfc124c810523235deff7d31bc7db4140751ded187d04a705e5cc68ab8ebc447795f88ef751cb79ee05d797d18f639b487e0a01a"
        },
        {
          "alg" : "SHA-384",
          "content" : "faddf23d9b119b906286a6513541f5fb0f8b7e5625e443b622dd8b57df102393a44e68d5e05b4e937cec3a705ec59378"
        },
        {
          "alg" : "SHA3-384",
          "content" : "cb0b598e9f98b3d1d34c0b781fa997addf1d26958f2dd3e0cb310a48ec4d91a75bdedc53792dd42825406a6aebb56ffc"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2f0d0ae5db0c40d950dbbb60e2a297dc37268467b30da33de83ec25b7b784126"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9ff7c45071745fcc484c85fd36031499866156614e24cc015c4536c0b0dd1b1c80f914bf79428e1dcf99cfdcc08c86a5acb4e89700c0fea9aa4d2047a9a452d4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.jcraft/jsch.agentproxy.pageant@0.0.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.jcraft.com/"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/ymnk/jsch-agent-proxy/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.jcraft/jsch.agentproxy.pageant@0.0.7?type=jar"
    },
    {
      "publisher" : "JCraft,Inc.",
      "group" : "com.jcraft",
      "name" : "jsch.agentproxy.svnkit-trilead-ssh2",
      "version" : "0.0.7",
      "description" : "a proxy to ssh-agent and Pageant in Java",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3f5cb0506577bb2c3dd1488079cd789f"
        },
        {
          "alg" : "SHA-1",
          "content" : "95015f649026507428aa2f37baba69ba8a86dc67"
        },
        {
          "alg" : "SHA-256",
          "content" : "d0f54fa650ef7130046dd752c1cf46b2dd1f1009632cf82ad0a2dc6e7dde0f57"
        },
        {
          "alg" : "SHA-512",
          "content" : "c93b941c919be45f0e4f62d6020ba33fed860b941e760aef8fb8c41465ac4d90a486b710c8be464d318ae2fc42fc62253ef08778bb0d7fde5a37d292181cf0ce"
        },
        {
          "alg" : "SHA-384",
          "content" : "2033840432c52c68f4e72256bffe4689f8b3dfa0858b3baacbb7ba44af7ffc05804a09f2a1bd571c9665d04408fad275"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3b68fddbadca49d00948ec5289624167bee4ae73e24e9a92ffd6d0108ccb5df5425187ef15a5a4d64d51d3ef6c47886b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9ddb2fd0695cc39632e1d386f4ab1bd3ef2bdfe7f3e0e4d81b22f3196b761173"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8b1783a6f28f7a166d2ba8d5f7b3c12d6bb15b0b2ce21012fff2991efee73e9c6b2a456fc6dc827938ccda7406e3e65791b519fca4cb2b911f05a4c3d4121add"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.jcraft/jsch.agentproxy.svnkit-trilead-ssh2@0.0.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.jcraft.com/"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/ymnk/jsch-agent-proxy/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.jcraft/jsch.agentproxy.svnkit-trilead-ssh2@0.0.7?type=jar"
    },
    {
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit",
      "version" : "4.11.7.201903122105-r",
      "description" : "Repository access and algorithms",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "baf665a45cccd9600301ecff68830990"
        },
        {
          "alg" : "SHA-1",
          "content" : "9dcc2516b5eac5aa2d412d776b17ecfbdb411cc3"
        },
        {
          "alg" : "SHA-256",
          "content" : "9a5caa0e467e448796643bfc3a5e3deb09140905f5a640810876d7df706a2a98"
        },
        {
          "alg" : "SHA-512",
          "content" : "0ff9044343525998dce8934085f5fc4b3ce321295e3c75082f63deb21525b3c541ac7d80a731cf63c74a81cb308fdc4eb9202a00a9783c7083d3b4428ccae191"
        },
        {
          "alg" : "SHA-384",
          "content" : "195b5d83cdb1f3918f3d447430ebc3393b05ef5c1827fd12f5dc80d073e1253626cefe74c5f4330ad7a7d63777075dbb"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f716e528a82bd66822580bc8b797ae5ecc56e274b04783f67003f82b9d0a88053336cb38cc33101912be3aabcf41f931"
        },
        {
          "alg" : "SHA3-256",
          "content" : "741c1291bd71004872cb9f7c26e76bfa9df6c57244f60f0b7798a5541c8d1209"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2c5a450728b0b45f8855a82475cae68c0cf535b9a6dda58fc4590a2d20d64e0db108c1e140ca9570ebc4423e775f3bebecb8728790e44da4ea396555d47c42d3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@4.11.7.201903122105-r?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.eclipse.org/jgit"
        },
        {
          "type" : "build-system",
          "url" : "https://hudson.eclipse.org/jgit/"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=advanced;component=JGit;product=JGit;classification=Technology"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "http://git.eclipse.org/c/jgit/jgit.git/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@4.11.7.201903122105-r?type=jar"
    },
    {
      "publisher" : "JCraft,Inc.",
      "group" : "com.jcraft",
      "name" : "jsch",
      "version" : "0.1.54",
      "description" : "JSch is a pure Java implementation of SSH2",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "56a6c6fc5819e21c665355b39b9097d8"
        },
        {
          "alg" : "SHA-1",
          "content" : "da3584329a263616e277e15462b387addd1b208d"
        },
        {
          "alg" : "SHA-256",
          "content" : "92eb273a3316762478fdd4fe03a0ce1842c56f496c9c12fe1235db80450e1fdb"
        },
        {
          "alg" : "SHA-512",
          "content" : "97ec6de64f4870ee3c84f883bd3664562bfd600ca9f3364966e7dbee7e4e8520647c03f9f81d6808e330052ca1333e37f497d6252cd26fe721a90f573cbe2036"
        },
        {
          "alg" : "SHA-384",
          "content" : "f18a28efc1b7869c57f679ada330a889f748f782dbe2dfc403aa55ef65de76fdfb779541dc7b59ace118cc8dbfc49e9f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5a55e9af0daa852cba4e8bad1028baadcc3c7963e63f523a829e9e783934d5fa335f0bbcf4cc0a582bd8c9ce63810cfb"
        },
        {
          "alg" : "SHA3-256",
          "content" : "87625beb207f951fa4dfa826a7276ab886fa45a2971319a0da8701984a36ccec"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1f9a0621a9f004714dce44790b67f48f7d6e02550e12789ed65ebe961d4bf8de148d6955dcf76972fc2605cced7cdc33e7b9b71d9f3a8db0b4f8dd075992b91d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.jcraft/jsch@0.1.54?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.jcraft.com/"
        },
        {
          "type" : "vcs",
          "url" : "http://git.jcraft.com/jsch.git"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.jcraft/jsch@0.1.54?type=jar"
    },
    {
      "publisher" : "JCraft,Inc.",
      "group" : "com.jcraft",
      "name" : "jzlib",
      "version" : "1.1.1",
      "description" : "JZlib is a re-implementation of zlib in pure Java",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "553b605c56ec6f508ab46ed026e21622"
        },
        {
          "alg" : "SHA-1",
          "content" : "a1551373315ffc2f96130a0e5704f74e151777ba"
        },
        {
          "alg" : "SHA-256",
          "content" : "5cb1e9f9cf0be011487545694ff0a178237c6bfcbb21c97865cdc52c60b9347a"
        },
        {
          "alg" : "SHA-512",
          "content" : "223af0806a19fd25e2496c980b9824b7612528013eab9e7e21161acfe81a6f808d3d65148bdaa794c9ab73c518f6b49aa7a69107c9bc0d66d6f8e78c39964f8f"
        },
        {
          "alg" : "SHA-384",
          "content" : "1ba64c0b6f58c5c7eb1b72f2fd773cb1e3fc68d8342ef05b5a4c059d5acca7a901cd8f8e0f11eebfa2d8903ec0e4d739"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9553412a7f5fdf143afbef4df2997f572d2937d9e6484308527d3239c8a2708382266fb146ba342067f54dc14d630fc4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2a156f13e0e371d1990f2a740c05133dd31b259c8b4a2592198ade970288940c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a02ad837904a671ce4029d80d34644a736da9e1063e1df347fc2685cb3904c23adcd18d3dd3ce84b1ad0369eeffce3a405c684fefc3beae06aec2674ec2c3534"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.jcraft/jzlib@1.1.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.jcraft.com/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.jcraft/jzlib@1.1.1?type=jar"
    },
    {
      "group" : "com.googlecode.javaewah",
      "name" : "JavaEWAH",
      "version" : "1.1.6",
      "description" : "The bit array data structure is implemented in Java as the BitSet class. Unfortunately, this fails to scale without compression. JavaEWAH is a word-aligned compressed variant of the Java bitset class. It uses a 64-bit run-length encoding (RLE) compression scheme. The goal of word-aligned compression is not to achieve the best compression, but rather to improve query processing time. Hence, we try to save CPU cycles, maybe at the expense of storage. However, the EWAH scheme we implemented is always more efficient storage-wise than an uncompressed bitmap (implemented in Java as the BitSet class). Unlike some alternatives, javaewah does not rely on a patented scheme.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ad90237fa8e47defd9fdac73e68608fd"
        },
        {
          "alg" : "SHA-1",
          "content" : "94ad16d728b374d65bd897625f3fbb3da223a2b6"
        },
        {
          "alg" : "SHA-256",
          "content" : "f78d44a1e3877f1ce748b4a85df5171e5e8e9a5c3c6f63bb9003db6f84cce952"
        },
        {
          "alg" : "SHA-512",
          "content" : "fea689d1e29761ce90c860ee3650c4167ae9e5ecaa316247bdafac5833bce48d2b3e04e633b426e3ab7ef3a5c9c7fd150ffa0c21afdcae9c945cb2bb85f8a82f"
        },
        {
          "alg" : "SHA-384",
          "content" : "29bb6137d8fe88d77da372eb92e8ea746594ce407765317d5b3ed30fc28fb88bc0c103d7d61285e536a6412c94223441"
        },
        {
          "alg" : "SHA3-384",
          "content" : "09dcd5b653672743c56c88af38837884890ceb35b231baa3e5db908833a69b7ce5f110206f2e64d12212320e29796973"
        },
        {
          "alg" : "SHA3-256",
          "content" : "479933fb6e93f4c00b3ca0ffdc1a3e42b94694b4cbcc9a4b57b0d210221c344f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "56170a27378da13f8b591f80251f21e1c3c2d0bf9cc1bed1d3c024f2b8978f1a439761dd73e51bd281087adec75a1ad5195aae943f044d71bcec380b86450d8e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.googlecode.javaewah/JavaEWAH@1.1.6?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/lemire/javaewah/issues"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.googlecode.javaewah/JavaEWAH@1.1.6?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.2",
      "description" : "The slf4j API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "21216c2ee1bf4f097a51e49418527100"
        },
        {
          "alg" : "SHA-1",
          "content" : "0081d61b7f33ebeab314e07de0cc596f8e858d97"
        },
        {
          "alg" : "SHA-256",
          "content" : "3bae789b401333b2a1d1603b7fa573e19908628191707203f6eb708cdee2c052"
        },
        {
          "alg" : "SHA-512",
          "content" : "bfe12c722ed57faa3e26fef214d95b9bdd2192742901920954979926d51e7b1bf0f61ea538f858328f4d6a306affecdcef9d52452530cd2fe5c03552350c0ea0"
        },
        {
          "alg" : "SHA-384",
          "content" : "71781e6afb1b0b3de37efa280c4d06cd53c1a9ef8d4dac24c77f591f9316fd93dec2606409e7762cdb9f4440f525c218"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8a4975d4d3ad1a850d18a61de00c1146a426571fa6f6b1341c5ed2f36763f442ced826417fb6f9ef718448b8fba171d8"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b16b52c7e7922225546047213ae79173211d0d949671588cd013e426b845702f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fa3fe0802b7724d8afc7d312b631090d8c94991f0fc17044433cb374dcc1e83a2968ff6ebb245094f97a71ef63edac3b1751ff1bcd4442d8eeed1b3fd92c410c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.qos.ch"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/ceki/slf4j"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.2?type=jar"
    },
    {
      "group" : "org.eclipse.steady",
      "name" : "patch-analyzer",
      "version" : "3.2.5",
      "purl" : "pkg:maven/org.eclipse.steady/patch-analyzer@3.2.5?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.steady/patch-analyzer@3.2.5?type=jar"
    },
    {
      "group" : "org.eclipse.steady",
      "name" : "patch-lib-analyzer",
      "version" : "3.2.5",
      "purl" : "pkg:maven/org.eclipse.steady/patch-lib-analyzer@3.2.5?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.steady/patch-lib-analyzer@3.2.5?type=jar"
    },
    {
      "group" : "org.eclipse.steady",
      "name" : "kb-importer",
      "version" : "3.2.5",
      "purl" : "pkg:maven/org.eclipse.steady/kb-importer@3.2.5?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.steady/kb-importer@3.2.5?type=jar"
    },
    {
      "group" : "com.jayway.jsonpath",
      "name" : "json-path",
      "version" : "2.7.0",
      "description" : "Java port of Stefan Goessner JsonPath.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2db2100b179bd83518fef0b563433a15"
        },
        {
          "alg" : "SHA-1",
          "content" : "f9d7d9659f2694e61142046ff8a216c047f263e8"
        },
        {
          "alg" : "SHA-256",
          "content" : "de82f0e4602eea0187df36779ae8cfc1653b6d920125674af4d365d0bca59508"
        },
        {
          "alg" : "SHA-512",
          "content" : "1f2b97f22607a2032f9c618eeb0c9f78aa3f99e94c902326d9f7e84903d603bcad293d2f566b7cc999c1aa6c9d607ef7509314e504fe9290b2b93913631790de"
        },
        {
          "alg" : "SHA-384",
          "content" : "e5d79e4ad4bec36a1bf1c7fd9aaa820fb3473e9cdbe55791e5e909a835ee595c47957e4e0033195d46968ed103c95355"
        },
        {
          "alg" : "SHA3-384",
          "content" : "387b0d8e9a9b776a43b21e24260956b22b01f70b624ddd8c26ad383781398e416fef938d210113805a1788f3b3127841"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ba2605ba7fa4ca243837889be020d9a3151fdbb6197420d849a705744e5a634c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "12f7c20f8ae51508f36efa2ca141fa7dd305d5bf90dfa37f01f8505c4ab925b60e87f05eca8be57263552bde597efe068040204281a5ead472b94e6b11ad0629"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.jayway.jsonpath/json-path@2.7.0?type=jar",
      "externalReferences" : [ ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.jayway.jsonpath/json-path@2.7.0?type=jar"
    },
    {
      "publisher" : "Chemouni Uriel",
      "group" : "net.minidev",
      "name" : "json-smart",
      "version" : "2.4.7",
      "description" : "JSON (JavaScript Object Notation) is a lightweight data-interchange format. It is easy for humans to read and write. It is easy for machines to parse and generate. It is based on a subset of the JavaScript Programming Language, Standard ECMA-262 3rd Edition - December 1999. JSON is a text format that is completely language independent but uses conventions that are familiar to programmers of the C-family of languages, including C, C++, C#, Java, JavaScript, Perl, Python, and many others. These properties make JSON an ideal data-interchange language.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f04005088df03f6efac608a7a5d53cd1"
        },
        {
          "alg" : "SHA-1",
          "content" : "8d7f4c1530c07c54930935f3da85f48b83b3c109"
        },
        {
          "alg" : "SHA-256",
          "content" : "28c17ed16ac22e6845743fd1e84321edf5d7735fc216e44ee269d106bf3d8146"
        },
        {
          "alg" : "SHA-512",
          "content" : "03e9e1ee9a44ea15044b588b06a956ac150a37b63c161bf9b08a60539f5c90efc7718deb24fd084f503b68092516aac3349dbb74049777ea4c6619ac26090a1d"
        },
        {
          "alg" : "SHA-384",
          "content" : "98fde2ff0ad963262f9a9b42aed678b4d3fdc90ccb4bc25f4ca936ba7e2186af6477f06a3554bc5d8e0efe8851e13649"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c35c95619c5ecd50fb10524e5b586668dc3cd373135b133c7edfb8ecfaf6b529eade283d64dafc25b24617bd3c509043"
        },
        {
          "alg" : "SHA3-256",
          "content" : "74f712690732f92214901da8877de6edc207d0f68105c21e58ebff69d90b31f2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "cd7364f1244b7928b88ff158560a28374f5e9c3bac96206fb852def44ebcff64ffeda63f6a90204646a9a076c5f4aa8f338ac21a8b0801fff86a735d7dfe6d84"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/net.minidev/json-smart@2.4.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://urielch.github.io/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netplex/json-smart-v2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.minidev/json-smart@2.4.7?type=jar"
    },
    {
      "publisher" : "Chemouni Uriel",
      "group" : "net.minidev",
      "name" : "accessors-smart",
      "version" : "2.4.7",
      "description" : "Java reflect give poor performance on getter setter an constructor calls, accessors-smart use ASM to speed up those calls.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "53cb6c796eb91346af5edb178c42b39b"
        },
        {
          "alg" : "SHA-1",
          "content" : "3970cfc505e6657ca60f3aa57c849f6043000d7a"
        },
        {
          "alg" : "SHA-256",
          "content" : "ef5103429f101f7e3ff62f3a182342720439eaea43d2eed3119bba770bb202a9"
        },
        {
          "alg" : "SHA-512",
          "content" : "6daaf2fe1b278599d6d0bbd3f157096f8bccf3d25616099c128139ce164b29461860eb2786f3d3728937a0d0505df73f1c9673b0766f946c50878e5f60305736"
        },
        {
          "alg" : "SHA-384",
          "content" : "bb0e03f5855bc2949f43bb98bc39e4713421612daf89f951d7affcc081e0ae0acb2fe0cb0d189e34ed65178fff5b3a2e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "08d26f6dcce42a6f8bb5b1d1478d8f7cce0b2b423cb8b8792d9bde23019f6dea5d90bfb17f980bcf316271626c12e723"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2052bad14a640f3a455cf2350df1d9b583cb7e99826d958df6d67d8e391995cb"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a5945f8d187a46aa3ea3754974d98f6aace29ff89d7f3c828c8f7e3395adc68786a8f7e874cf1e140433a3e60cd3e3f907af43fc29043461f10018aee60e881a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/net.minidev/accessors-smart@2.4.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://urielch.github.io/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netplex/json-smart-v2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.minidev/accessors-smart@2.4.7?type=jar"
    },
    {
      "publisher" : "OW2",
      "group" : "org.ow2.asm",
      "name" : "asm",
      "version" : "9.1",
      "description" : "ASM, a very small and fast Java bytecode manipulation framework",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "54b9f5d15e4877a4ea4cf9ec48e07afa"
        },
        {
          "alg" : "SHA-1",
          "content" : "a99500cf6eea30535eeac6be73899d048f8d12a8"
        },
        {
          "alg" : "SHA-256",
          "content" : "cda4de455fab48ff0bcb7c48b4639447d4de859a7afc30a094a986f0936beba2"
        },
        {
          "alg" : "SHA-512",
          "content" : "0a586544f3053ec8425d252b6f7e3e6772f010eb81d75020b4fd4759a561a4534dab4f805ffd18130594d1abbeb1ad7116b9d3a1e2e643d427e12bb866655954"
        },
        {
          "alg" : "SHA-384",
          "content" : "9f936b2ffa1f1fccfea3c53b5206a6d94fa193aa12a0cdec2f0baf98f0cb2a0b699e99291c60be44fab6b39a1f6f2e10"
        },
        {
          "alg" : "SHA3-384",
          "content" : "142b7dc3b521f681f41e8467cf292ba87ed6bfb88d57372bf6d9cc3e3042cc49fd735b367d2336ff43a3ccb64b5bc87e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "be955c19490cbd305f4168b6ead4116659ef6fbdf96954d2c124ae8d3f4c4739"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fa07cc8156842f8c18e286517fd751b3e2d51be13e2e8181f1b75a6c1f98715eb3ef583cbda01ca95ca0806ffc9817d4d9ab327dca6a16152c367a319e128fed"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.ow2.asm/asm@9.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.ow2.org/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://gitlab.ow2.org/asm/asm/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail.ow2.org/wws/arc/asm/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitlab.ow2.org/asm/asm/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.ow2.asm/asm@9.1?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.33",
      "description" : "The slf4j API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "de8684fca5e9042d0120cb3306e8278f"
        },
        {
          "alg" : "SHA-1",
          "content" : "d375aa1b98d34d5ddf73a3f19eaad66e98975b12"
        },
        {
          "alg" : "SHA-256",
          "content" : "336811855ee97fcd8413343dc42f4d26362502860e8a9193e4db305e3e8ef80a"
        },
        {
          "alg" : "SHA-512",
          "content" : "ccde4a938e90d683288f84375224ecd9b46aca20de7544c6300c82ef07780d25306239ea9c5565c3ff58038c9d5becc85c846df3c1809585ae33b20a32e6b8d9"
        },
        {
          "alg" : "SHA-384",
          "content" : "dd31ce1f4fa4c7a892388422b4694d8a51bac05e4f2789eb7be734cdb2738f9f796eb951cfe989834ec78a65d5d762b5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "75d1aa5e386f2c71c598cda5b995ff5fd496e4003489d58d217be1951d24f5444c8de2fe7bf7a7ce9c40d6cfc0ee01b2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ef2ec74302de597f6eec560b04a8de12a331302cbd5b9c178c237c3b683426a5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4528a2981a1107261f6798c628075e9ac724060a72338e0ca8786b27162b17e358a96711b3d0cc673dff85d36fa9eb6eba907e15697b4c40a5236f140fb6a6f2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.33?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.qos.ch"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.33?type=jar"
    },
    {
      "group" : "org.eclipse.steady",
      "name" : "cli-scanner",
      "version" : "3.2.5",
      "purl" : "pkg:maven/org.eclipse.steady/cli-scanner@3.2.5?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.steady/cli-scanner@3.2.5?type=jar"
    },
    {
      "group" : "org.eclipse.steady",
      "name" : "plugin-maven",
      "version" : "3.2.5",
      "purl" : "pkg:maven/org.eclipse.steady/plugin-maven@3.2.5?type=maven-plugin",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.steady/plugin-maven@3.2.5?type=maven-plugin"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-core",
      "version" : "3.8.4",
      "description" : "Maven Core classes.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a48e7160f4b6769d5c23ce2d93a6bf26"
        },
        {
          "alg" : "SHA-1",
          "content" : "cb11bac5ed848b900c2533d42ae8f23a73e6a015"
        },
        {
          "alg" : "SHA-256",
          "content" : "2415e64ffbc3ff4e7265268f651623342c7b0a9e0a77c5c54b4e82d1522f3189"
        },
        {
          "alg" : "SHA-512",
          "content" : "228665bba3dfe2423e4738756a3fc6e5128170ca074c905fc46ee328b8726237b9839db481785078624325d7a951a096bf0dc75f632b5f30268f2cc457871e13"
        },
        {
          "alg" : "SHA-384",
          "content" : "a8807af072544314e0c8deae853db81c22dae000b31b39a60e2b87c264d178c28d00aea42ccdfa31bc263026a98cd1fa"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1eb40d24c2adff1ff0813cebfce41c4a5ec18179ba89baaa2d1ce4a0a2920a93130daee91888c23b222939d702a54f5d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "034d6ec07ba4380b567f48e68b33bf98298502a2a4bb48ca9c75937a00e3a043"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0928d612d271811547f8c9d97802ff537fe4aa549ef8133c4045ad1be259f37decbec0bec8f47fbd00c8ca1a60606b9121d75d1ed140e787a03ce6ebf8534e4d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-core@3.8.4?type=jar",
      "externalReferences" : [
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-core@3.8.4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-model",
      "version" : "3.8.4",
      "description" : "Model for Maven POM (Project Object Model)",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5c12178e3109a060c91cf231bc798d67"
        },
        {
          "alg" : "SHA-1",
          "content" : "71057054ea1e5e341b2196804a426e3243f6cb2e"
        },
        {
          "alg" : "SHA-256",
          "content" : "91ec0d6d564a12483e1569b0ef72ff3d9e921c5ba07201fa7ab9c7694db8844a"
        },
        {
          "alg" : "SHA-512",
          "content" : "64b96a0f8779efe75103afd1ec685a9e50e810fd51c5afb5e6839fd875365cb61e534818a6ec1119520541e960f63692172d8bdae3d8e63a583558296f9ecb4d"
        },
        {
          "alg" : "SHA-384",
          "content" : "fee89278bab1c5353bef293396f9fe9679325bada7e77e7faa1f44623d6b6b106713bdf355051508080133bcd4c62756"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ef0acdd04c208d57d9845e4be8be2a5227801594dd0e599c860d68a132507241ebd306ceb210b386361a731befdaf55b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9a6a2392032c3690e1e10a529f60585d98420de62d381f132c39c45894c5f8f5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4485c81a61f050834c06e2f88c1af505f2f88b88c5afda2c0f7f4af6a45282c85a746b0bdd56b23ed61d8e99f070575751bbd1967df9c6c2c6a6ffa035cf434a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-model@3.8.4?type=jar",
      "externalReferences" : [
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-model@3.8.4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-settings",
      "version" : "3.8.4",
      "description" : "Maven Settings model.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "751088d39fb1c71564058e23ef59240c"
        },
        {
          "alg" : "SHA-1",
          "content" : "ece24ec40b7d73e755f2ebd22bf8471b6c0b8fbd"
        },
        {
          "alg" : "SHA-256",
          "content" : "4f12ed49761c4b486c171996643d8d80246286ab14489a736ce0dd06e6bc6886"
        },
        {
          "alg" : "SHA-512",
          "content" : "3e0d2652164dbdbadccd60aba6ee2d6ca41d4065080f29f5f1654ea4884d28b054703a8a64a01cf8c6ccfa02cf8af29cab161514d8e852abcb1b3411aba74be7"
        },
        {
          "alg" : "SHA-384",
          "content" : "011151e44b3c8b5fca21b776c3558e7605bbf0ec211697f7ba6baa40fc697a882659887f4dcd91c10130c1353a7f6117"
        },
        {
          "alg" : "SHA3-384",
          "content" : "623a1a2e3a479a25ab26ceff4dfea94a6efb98e287e64c3187006d2ee3f417ba61317a318196d48a4939e1dca7d6f65b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2bd6e5f0c25db477c82ec44c2b629e3f5f0fa6fd5d4da87e15415f64513b8aa8"
        },
        {
          "alg" : "SHA3-512",
          "content" : "08dc94dc2fe2cc3f8f63f19bf21989f9a2ad3d1fd6039ef6754b9f66d60b952e22f37b38ac2068f9f2dae17c6c89dc6573d6278821c249babe44bf03a891849a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-settings@3.8.4?type=jar",
      "externalReferences" : [
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-settings@3.8.4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-settings-builder",
      "version" : "3.8.4",
      "description" : "The effective settings builder, with inheritance and password decryption.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "37ac108b65138015e749d8ef90c1a729"
        },
        {
          "alg" : "SHA-1",
          "content" : "50bf143b0e338a26651970860e3067dd94cf31aa"
        },
        {
          "alg" : "SHA-256",
          "content" : "7e72b48fcb3c88a146425e3bd1265c3bc4ac546852fe4bbab61064f1dd1835b7"
        },
        {
          "alg" : "SHA-512",
          "content" : "233ebc32f26209a0f0615d8737becd396dc4d3f1ce349dbe793b437db1c64ac8c54ce055c636bbcbee7b489d0be7188b7fec0a9a4cf6a2f8d94873a374c91d3d"
        },
        {
          "alg" : "SHA-384",
          "content" : "034e092bb6fca114c35dff12116db0c5936bbd93d3fb59157c9a05a60c4c5a611c4401d6a8d62a8271df53ceb30cafa0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "41cf63ca6c09937f020fae6832b2af3c8cb2042915cf2d1511b91f20c3ddb08f1f14df5743567a12d85ddda87c4f92dc"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5b0836cd60d3274bf525929f54fa5455362fc3d58e575ceb74784aa1c2fb0f29"
        },
        {
          "alg" : "SHA3-512",
          "content" : "13c189bee544f6310358e0683e78a46d5f182fdcf5ae0c9136f4bf72d637bb3be6a4d6a120bbf5da23fe2e5cdac960b78f64c693760a71e6a4e0547f7caec8f2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-settings-builder@3.8.4?type=jar",
      "externalReferences" : [
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-settings-builder@3.8.4?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-sec-dispatcher",
      "version" : "2.0",
      "description" : "The Plexus project provides a full software stack for creating and executing software projects.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e68635a721630177ac70173e441336b6"
        },
        {
          "alg" : "SHA-1",
          "content" : "f89c5080614ffd0764e49861895dbedde1b47237"
        },
        {
          "alg" : "SHA-256",
          "content" : "873139960c4c780176dda580b003a2c4bf82188bdce5bb99234e224ef7acfceb"
        },
        {
          "alg" : "SHA-512",
          "content" : "ad4e814c8baff780a4eee064903e52b09ae00420a59fb075ef72dbb8d64d12d3d5009b03d56c15f93587d931c3a7f06cad6351ab2dc9415ccc6eeab0daebeb07"
        },
        {
          "alg" : "SHA-384",
          "content" : "4af3426b6409cce7d5fcda4e2af407fc2dbae9873e06d98332bcd032c0039d9080a291e42223ea2bbef9825d3d63493f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "41720858dd5804f9cb26a8878c16dbdf0372a90e99c037809fe76c3de2c5517ba252af8f8cdf534c1a09900702e6a917"
        },
        {
          "alg" : "SHA3-256",
          "content" : "50fa723aefb551a3fd5888375d01f1d776c534cdf833baea392818e9bfa8166e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a43f823d31b377c0c7ec8d36ace69e5dbcdaf4dc4ebb45ff0561fea9e12d74c06090ee24b29b06769d4031693faf5d7e3146583d3a64bfaef6b7c79773a8831f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-sec-dispatcher/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/codehaus-plexus/plexus-sec-dispatcher.git"
        },
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://archive.plexus.codehaus.org/user"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-builder-support",
      "version" : "3.8.4",
      "description" : "Support for descriptor builders (model, setting, toolchains)",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "df11e28001f975f7b04833536fa97375"
        },
        {
          "alg" : "SHA-1",
          "content" : "19e7c1dd9ab8c3266db19e067e2b7b8764f0fa6a"
        },
        {
          "alg" : "SHA-256",
          "content" : "b64161e6ffd30782d97c205942bba219d60c53a8f4442e69abdfd428d7691135"
        },
        {
          "alg" : "SHA-512",
          "content" : "a9dccb93c090840112045e605a4777bc41fe04fe7e518148095ec31078c6d87c8fae312aefd6d35cc1475fd622b361d7010251735c738ccef85b3f42e8c13f1a"
        },
        {
          "alg" : "SHA-384",
          "content" : "13f1024c1957af7738c1255519b98c7b8320e3ba852e82bf51df7f6b26fe4765ba843757e204134ea3c2ad24e316e789"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f802de7b6b38da1d5996b17b0ecef81cd7cb1a11941fbd8fb6b5604d9df975ba1f2fb8f9dbcbcdf6798443dc20c65b1d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e5c99c351d13101d76efad68add11f2698f74576b93c306bdce1c1b97f4eb7c8"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9d253b3ea2ce29d770217e31928b83881514aeb3632eb0524dcc9a72ce7117b5190ed7ebd38ba13b8ea5c3f1b7ffe8f14b8d8a869a9af21b357424093a87a899"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-builder-support@3.8.4?type=jar",
      "externalReferences" : [
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-builder-support@3.8.4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-repository-metadata",
      "version" : "3.8.4",
      "description" : "Per-directory local and remote repository metadata.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b0aa47731437c6daaf70353756d2da10"
        },
        {
          "alg" : "SHA-1",
          "content" : "c62113372f740797767d520f604d0543dcdfc92f"
        },
        {
          "alg" : "SHA-256",
          "content" : "62a97989068af34eef374bedcca120a1c2b0bd5a2d48460d306944084cc495f9"
        },
        {
          "alg" : "SHA-512",
          "content" : "67f0a5048054e8cf03c608fc846021a3be64b6733595260ccd46796673b2abdebb5afedd9599f7060fb560932e16c6f7637281969a1e7b43d352fde0b99945f3"
        },
        {
          "alg" : "SHA-384",
          "content" : "13f9a3c9b44002ca24d8308555bfc600586015d7fc4286110beeafc481f454a30e75f9136ef7c8d6ef7d18ade3d41993"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ade685b2e6e1f5965202fbf595e7c38db056d19c99ec211735d3bf5dc261b4ab60e68c34f485d8fe42503ec9e9da1576"
        },
        {
          "alg" : "SHA3-256",
          "content" : "820b2a1eb448a29a33b01f2852f39126fddcfbff88fbf84139b60a3cccbfd2c3"
        },
        {
          "alg" : "SHA3-512",
          "content" : "94d4dd13a3d00e2b000cbd3d6c93ba68c7d109c3a3f3dad948d02f74405fdb44d664ac6c3022bad99acbdb2784357838cec4da7b28423706f6418c9624d0496e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-repository-metadata@3.8.4?type=jar",
      "externalReferences" : [
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-repository-metadata@3.8.4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-artifact",
      "version" : "3.8.4",
      "description" : "Maven is a software build management and comprehension tool. Based on the concept of a project object model: builds, dependency management, documentation creation, site publication, and distribution publication are all controlled from the declarative file. Maven can be extended by plugins to utilise a number of other development tools for reporting or the build process.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "12fcb750af57b284313d2a356e7de928"
        },
        {
          "alg" : "SHA-1",
          "content" : "6dba6d03ac7abd8b895595b0ee7000ce35c3d421"
        },
        {
          "alg" : "SHA-256",
          "content" : "4273b4e84805f7350eb61a1eea5debfd71d1147414b3b441b92d535218cdf0ae"
        },
        {
          "alg" : "SHA-512",
          "content" : "eae74088cf0ef66ff6cecd5ce6cf476e3df39e167988c1efbaa17f3c88fe55c59451125678cd041517702eb865190cdff64e691313f99c2e2f316e3e1c8a9daf"
        },
        {
          "alg" : "SHA-384",
          "content" : "0b7bb9bbffc4ec3bc85e7dc05e18bb24fcd60985d77ec70412e31f17fceb16ee78398a45e3a55c6f2c6e186f29f638d7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "535844419e7e0342020ee9b950af62f2b672393268ac8ad609fddab171cd9b5baae5bcb7f2cd1116dbad13c2d37773ac"
        },
        {
          "alg" : "SHA3-256",
          "content" : "38460b5974c909a22778b2791234c5c7a2f4a97e23b4ebe4f55c0ebecc799986"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7027886491da813f6226e43289239fc73dff2efaae5d14c093ace1396c1fc0a9a63423ad0d4b57538ec3b9cf6ee9472bfd1b4b633f184b9dc2ffc98806e4aeb8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-artifact@3.8.4?type=jar",
      "externalReferences" : [
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-artifact@3.8.4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-model-builder",
      "version" : "3.8.4",
      "description" : "The effective model builder, with inheritance, profile activation, interpolation, ...",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "096f604d1a8a6fdb6e0a57173945dc62"
        },
        {
          "alg" : "SHA-1",
          "content" : "8e039db854cee3ddbca932b90c0c06cdcb9dc640"
        },
        {
          "alg" : "SHA-256",
          "content" : "8d0ed4b5cc5c06610f97935982458260165cb7e57c781ca7c9ef8b6e01ce1456"
        },
        {
          "alg" : "SHA-512",
          "content" : "e6493b88baaab589e42286ee4965fbce6842cfbbbbfdaf441c504a22332705d1ed0537683099c2d6d11208137c35a0295898925a17aec0c63884b327f7fc2abf"
        },
        {
          "alg" : "SHA-384",
          "content" : "637f99e85db1b5efc73722f4d4f1008a3b2a64525285248ea5c1e2792e6b8de8e74b6acd17bfb224eea2f029902216ac"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6bb88ab050811db4202f48d8bff5ea881a412ffe2ba6d39f6bc8484f024d586e49aa053ce0245121df05804119c2b0b8"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3c57b97ce6cc3252544fe2b95e48a601f4075231afa146c98e7cd7e2cd55bc4d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "cbd64670624e5cf816bc6f795dd345060c804ba52011abe3b1e22d215a5331089c3503dd8611b8fa228aaafc518ac3d1697a84af937f37ee3c264247a8b1156f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-model-builder@3.8.4?type=jar",
      "externalReferences" : [
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-model-builder@3.8.4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-resolver-provider",
      "version" : "3.8.4",
      "description" : "Extensions to Maven Resolver for utilizing Maven POM and repository metadata.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9824f1a800182fca787cc4f49bb1b58a"
        },
        {
          "alg" : "SHA-1",
          "content" : "2ccbd1e2c713922353ccd779e56aeefc7a9fa56f"
        },
        {
          "alg" : "SHA-256",
          "content" : "046c7d1635f91283b4f7a41b579953857914c7e0d96545b557491537b327e156"
        },
        {
          "alg" : "SHA-512",
          "content" : "26a359bf14c2c6c3a748f95a244f5bc0251ef75082155e931481f6c93b4b29db5b032ed3d6659e7241d7a166c662dab55aa41c4e7dd82bf52ae583536eda7b40"
        },
        {
          "alg" : "SHA-384",
          "content" : "36c5975e34fd58a1f3ea2904404c427ea2c37d087e70c733b48909c0224453fd95ef6dd7d823a9e1b2d1b9864a4695db"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5a137402686a31a481291d24ed88fd1b2eec0ac8e584d443b330bec562e27d729860e00c48d046683dfb3a57ab762480"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9b14ad5c6658067f0e02265f5c83d48a9349cff0ded6af326aef7e9f60a9a632"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8aa9421b5e1e2e287879b05dab855b1cbbd20448d1424e76238ce81a84fc9d52c3f5853b139e9fa8feca4d348f3225cd87241fd8005bbc76fa86382adf89e972"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-resolver-provider@3.8.4?type=jar",
      "externalReferences" : [
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-resolver-provider@3.8.4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.resolver",
      "name" : "maven-resolver-impl",
      "version" : "1.6.3",
      "description" : "An implementation of the repository system.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2145b5eb9ddd8bdf9f3171122c703d4b"
        },
        {
          "alg" : "SHA-1",
          "content" : "2714ffe60bd71259a41b3e4816122504b5f2db93"
        },
        {
          "alg" : "SHA-256",
          "content" : "17aaebe6e3e59df8cb5b4ec210196f7084637312b9bc4ff14cb77ad1ae3c381b"
        },
        {
          "alg" : "SHA-512",
          "content" : "ef011e67152290379da6db1ce256b70dc436eb1596d58c38ee5bf9df65fbe75ed2ddc7768f6c61901c8cb83af88c42ad0b7bf24ad1775949eb4522511825280d"
        },
        {
          "alg" : "SHA-384",
          "content" : "37f1caeeb7f6b3a7358e457a2a9c6f2d0f037f2603f82d580a458d6e687a72335355d931885a2156ffc7b81abb715a82"
        },
        {
          "alg" : "SHA3-384",
          "content" : "200626d2ecc3736cdc13526c4ba88dcc664a1cc4305d8c9c03a9aefdd46759c956188a6908e7b845802fb30bc5818edf"
        },
        {
          "alg" : "SHA3-256",
          "content" : "051baae5e07302175081aa2163a03364fe15d7bea230a81f13302552c47c7db7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c6c926e1d8ae8874b8467b9d9ee0fdf01655aa5591ed69fcc8051438d80ea848b318a56febd6995ce9c4b9e26e8edf1fa561cd46a84c3a6d12e307dc484ae5df"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.6.3?type=jar",
      "externalReferences" : [
        {
          "type" : "build-system",
          "url" : "https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-resolver/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MRESOLVER"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.6.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.resolver",
      "name" : "maven-resolver-api",
      "version" : "1.6.3",
      "description" : "The application programming interface for the repository system.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c1f8b0046b6219ef49dbd73638ce33e2"
        },
        {
          "alg" : "SHA-1",
          "content" : "5ee235aa5ac5994b5dc847f8e78ffe9d77dd55d7"
        },
        {
          "alg" : "SHA-256",
          "content" : "d0b28ed944058ba4f9be4b54c25d6d5269cc4f3f3c49aa450d4dc2f7e0d552f6"
        },
        {
          "alg" : "SHA-512",
          "content" : "002cb75f6e07b27108e79a4d37d94fa882e89a2db30dd2ac69ecf0907cc548e13f579ebfbb5c019da6df4a950e3420b69dac3d49ae94b5646b7968ef7ea811ca"
        },
        {
          "alg" : "SHA-384",
          "content" : "57a6cc8ea7620331169230771e7564837193d217e9dd6289a09cc874e05f87aeb84fb613d44917cf4835a783f9c572ee"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1d303b3805945970de6d9bf3f4098e9582d79a6b5dcd126ee2af74fd2787c3469c693a125799323e9da3d5e5e1be54b3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d883a9b0c67d5be1e4c2e52eb530d432e87565cdfa9df0a4b3e72ea9e080b766"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c7c325a744e63c72fef9f31fdcb64343a6e315f7c780417479f502ac24d0e6f506519e358e0c82e809adc62223ec606c41be7156c2b27635722dd21e622d9c83"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.6.3?type=jar",
      "externalReferences" : [
        {
          "type" : "build-system",
          "url" : "https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-resolver/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MRESOLVER"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.6.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.resolver",
      "name" : "maven-resolver-spi",
      "version" : "1.6.3",
      "description" : "The service provider interface for repository system implementations and repository connectors.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "39ccba873cf05b2b5405d24a55133a37"
        },
        {
          "alg" : "SHA-1",
          "content" : "176425f73fe768bf9cdb8b5a742e7a00c1d8d178"
        },
        {
          "alg" : "SHA-256",
          "content" : "17441a39045ac19bc4a8068fb7284facebf6337754bf2bf8f26a76b5f98ed108"
        },
        {
          "alg" : "SHA-512",
          "content" : "2972b721213bfee654460468b2a2aa50546d7f1957be40d955728875af3a9801f8d78a2f796e832b9332d1f90ffb5ccb651289e7b5c8a175628b21b13594df43"
        },
        {
          "alg" : "SHA-384",
          "content" : "e497fcbb12f4d64ad35a506c370ebf611c08a26b36bb592d9dc31a70b4244b06d57b10340912bb1d419e4791de4d746d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "92cc0dfd2087a4a33fffc796987753f36024d892db64fbe8f2a30a08de20cb7fff1204c65b1df0293d59a3204b70599b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "79a77fc7ce9a0a1383e9636d34f2bd46cf16a7e65f808e199856c2551e26a5b4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "af7b9a702626ba48d9f5ae50001831167f20c13b2a416e45c2241de7d96fcc113bdc75b04d21a8b2d88e86cf8629c72d9f0d46d19ee64d904c4cf52f479be58c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.6.3?type=jar",
      "externalReferences" : [
        {
          "type" : "build-system",
          "url" : "https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-resolver/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MRESOLVER"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.6.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.resolver",
      "name" : "maven-resolver-util",
      "version" : "1.6.3",
      "description" : "A collection of utility classes to ease usage of the repository system.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "71d7fea851a889aae2cfd632e96d01c1"
        },
        {
          "alg" : "SHA-1",
          "content" : "07d5a6879037b34c61c2f527dfcfb59084e86ed0"
        },
        {
          "alg" : "SHA-256",
          "content" : "cdcad9355b625743f40e4cead9a96353404e010c39c808d23b044be331afa251"
        },
        {
          "alg" : "SHA-512",
          "content" : "45bd05eee2e2e606155916ec06efdb62e4a147af7ed0bb0b443b2a71b72576fec8e0ced0eee3ae3c86778198de227c1c7fe5d423cff0b96ba382fb563239694a"
        },
        {
          "alg" : "SHA-384",
          "content" : "1e7eb3fbead86751b552e75ea2fe853ac81b0c349f89d8d4cfdad9246091fb72f67192ef9c037e3be2de57e6ee8cea85"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3439dd1e245d36fc026b74b31359c0271159b05612c05f9e06a6f2361ecdc48d9c864af103baa8cf9d343c0f951dee99"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a1dba2a839537adff9bd0f166c893313c260d97b1b4e6dfdb69b2f4553c6808e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "03d6b8f694bc7552c217128f6469571efc84566f6f49805c03d5ff64df2e2ed545a1aac141010a3e8bce4a731ec9c07acfec1e33d7ecb06282e4753cc74a4212"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.6.3?type=jar",
      "externalReferences" : [
        {
          "type" : "build-system",
          "url" : "https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-resolver/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MRESOLVER"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.6.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.shared",
      "name" : "maven-shared-utils",
      "version" : "3.3.4",
      "description" : "Shared utilities for use by Maven core and plugins",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "908f2a0107ff330ac9b856356a0acaef"
        },
        {
          "alg" : "SHA-1",
          "content" : "f87a61adb1e12a00dcc6cc6005a51e693aa7c4ac"
        },
        {
          "alg" : "SHA-256",
          "content" : "7925d9c5a0e2040d24b8fae3f612eb399cbffe5838b33ba368777dc7bddf6dda"
        },
        {
          "alg" : "SHA-512",
          "content" : "c6693f8a061de74ac59c61d185f5b130cb574405cfc37febb8e73806ea64eea822a4a75c24098fb49b7871373091543a6f4c526c0842589e528cacad40e5554a"
        },
        {
          "alg" : "SHA-384",
          "content" : "bc5b42831ff598f42dda54738be004a619d60201a009b04cb3aaa0dc343d0e4fbc423b19739391eb7c33efcac3c08dd5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "385bebb35d7ea13d92ae6a5afa9257b184a1fcf40cba077a103c7a91d39a4d3e0180a475febdba73ac75949968e77186"
        },
        {
          "alg" : "SHA3-256",
          "content" : "888fde30d4f9a9e1b7c4c5e4d61f9cf0499192e5bc1212538e2e3320688e44da"
        },
        {
          "alg" : "SHA3-512",
          "content" : "40b55bb907452777443b8162d456bf1d48e02bfd9124062faed9c9bf51e0f522d40b02f4c24eb39f760469ad226570876f0de6afecd74903112ec794f0aa9a78"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.3.4?type=jar",
      "externalReferences" : [
        {
          "type" : "build-system",
          "url" : "https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-shared-utils/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/issues/?jql=project%20%3D%20MSHARED%20AND%20component%20%3D%20maven-shared-utils"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.3.4?type=jar"
    },
    {
      "publisher" : "The Eclipse Foundation",
      "group" : "org.eclipse.sisu",
      "name" : "org.eclipse.sisu.plexus",
      "version" : "0.3.5",
      "description" : "Plexus-JSR330 adapter; adds Plexus support to the Sisu-Inject container",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "30c4a9fa2137698ed66c8542f1be196a"
        },
        {
          "alg" : "SHA-1",
          "content" : "d71996bb2e536f966b3b70e647067fff3b73d32f"
        },
        {
          "alg" : "SHA-256",
          "content" : "7e4c61096d70826f20f7a7d55c59a5528e7aa5ad247ee2dfe544e4dd25f6a784"
        },
        {
          "alg" : "SHA-512",
          "content" : "38d7dbe023f9751cb5e30bf154e31696590317dc7b7f768811fe0f5940513fcea4665670cd47d0b72ded85453b10f7d129b0b7428b155a41c903c7b56c986e8d"
        },
        {
          "alg" : "SHA-384",
          "content" : "2e943a72f0ca201d50ba90b4cf70c3c1f7b5ffc3bbfdee45875bc2f6f2e2a3a93acbba3a2f1e7ffb32b70e041633b6de"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a7b121732001b6f225b0687e7747993f48b3fc1d9a4325b4321a4c59adae36b49677193f5e31e3b1f11a6cd266e459f3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b879a16dd84d8d4f39c1009029b3a3a55e18049c7910f77814a32ca088b56585"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8f8fbebd2a3024bcf6f2e27e8206e3f3c2b2673217c1220743b1869bf60341490db7d1877d9eaf3c452500690df98ccda11a19bda996b74a6ebedc37bc9bc554"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.eclipse.org/"
        },
        {
          "type" : "build-system",
          "url" : "https://hudson.eclipse.org/sisu/job/sisu-plexus-nightly/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/enter_bug.cgi?product=Sisu&component=Plexus&format=guided"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/sisu-dev/"
        },
        {
          "type" : "vcs",
          "url" : "http://git.eclipse.org/c/sisu/org.eclipse.sisu.plexus.git/tree/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.5?type=jar"
    },
    {
      "publisher" : "The Eclipse Foundation",
      "group" : "org.eclipse.sisu",
      "name" : "org.eclipse.sisu.inject",
      "version" : "0.3.5",
      "description" : "JSR330-based container; supports classpath scanning, auto-binding, and dynamic auto-wiring",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1b296b0ddd911ed3750b3df93b395cd5"
        },
        {
          "alg" : "SHA-1",
          "content" : "d4265dd4f0f1d7a06d80df5a5f475d5ff9c17140"
        },
        {
          "alg" : "SHA-256",
          "content" : "c5994010bcdce1d2bd603a4d50c47191ddbd7875d1157b23aaa26d33c82fda13"
        },
        {
          "alg" : "SHA-512",
          "content" : "f4790768c0d958b3429a3241abb15f9bb6e2fd7f43a5e034dde6a3a6820e6941c00f10ad084d5c38f8edc144e7acbea7ba3dc8952f01dab41e443803db2a4efc"
        },
        {
          "alg" : "SHA-384",
          "content" : "b76e74a0cda6d88c1c03d40e71d238fa13e2070485c026945ee8dc6da62eacb02071a65df35fa3e4d9d6b343a89fb605"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a2d3bae2f5e518c7d11e584f6b8b7368f3b927c3405f48e27d4225d4e2f4917fb5623c0071fc47f081200b7d754571d1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b998bcdf4f8b5550a543865408e94fadcf1dd37ac19ec37269ff5307220b2775"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e9331e8a1b4281b45abec89dd9b7dd948207ebd7bed6be5978a5792d59327f7a4d4ee87c6f60392021f24f28439ab4ca4b6305ef6528e1c241c7a27c883b5931"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.eclipse.org/"
        },
        {
          "type" : "build-system",
          "url" : "https://hudson.eclipse.org/sisu/job/sisu-inject-nightly/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/enter_bug.cgi?product=Sisu&component=Inject&format=guided"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/sisu-dev/"
        },
        {
          "type" : "vcs",
          "url" : "http://git.eclipse.org/c/sisu/org.eclipse.sisu.inject.git/tree/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.5?type=jar"
    },
    {
      "group" : "com.google.inject",
      "name" : "guice",
      "version" : "4.2.2",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "57d2b333c34d0f834189d54b6e59d1a6"
        },
        {
          "alg" : "SHA-1",
          "content" : "fa13659f9128f4c011c8e1d06f137083b4876377"
        },
        {
          "alg" : "SHA-256",
          "content" : "0f4f5fb28609a4d2b38b7f7128be7cf9b541f25283d71b4e56066d99683aafff"
        },
        {
          "alg" : "SHA-512",
          "content" : "78f17b090f34564db0fa6903c966e79d8002903d2604f9605a0d713e770a9c772c11d615a5e112dbb15464b9f8945edff6ac3d23ac84ccb08eb1657ec64d4442"
        },
        {
          "alg" : "SHA-384",
          "content" : "b8dbffa5d7d5d747da5bcbf80c5642caf7d845210b6246b3fbe37fe35fb62296a143bd131c394c97a09d78c06e05c4f8"
        },
        {
          "alg" : "SHA3-384",
          "content" : "77c03af1ee596ff17baf62893037dc7c3b2476a68f928811c94c19c6ef33df0098f6bb4bde97be887797442359a17205"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d6c7802ae9da1ede2a1fd5bddaec3fadbe6cce96754ac1777abe23656da61616"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a2f0e757d29e73175af02a00b34f35065080ffc9be10e2445e51df556180e2e10b68216277c384f07729cf4b326061a870d6ced32045ee545c43a7c6cb209821"
        }
      ],
      "purl" : "pkg:maven/com.google.inject/guice@4.2.2?classifier=no_aop&type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.inject/guice@4.2.2?classifier=no_aop&type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-classworlds",
      "version" : "2.6.0",
      "description" : "A class loader framework",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "67e722b27e3a33b33c1b263b99dd7c43"
        },
        {
          "alg" : "SHA-1",
          "content" : "8587e80fcb38e70b70fae8d5914b6376bfad6259"
        },
        {
          "alg" : "SHA-256",
          "content" : "52f77c5ec49f787c9c417ebed5d6efd9922f44a202f217376e4f94c0d74f3549"
        },
        {
          "alg" : "SHA-512",
          "content" : "6a58048d9db54e603b9cfd35373cf695b66dd860bec878c663b4fc53b6b3d44dd5b0c92e7603654911b1f78e63ef277cf6b272fe069a360989138550545f274d"
        },
        {
          "alg" : "SHA-384",
          "content" : "e839707ea5c4351f2703c6861ee4d58e08df0f7509110af13d4b3824e6ec5cfd65508fa80cc3f222baf5cf6c4ab5d5ac"
        },
        {
          "alg" : "SHA3-384",
          "content" : "75389fc7ed9aa3ad33ff317b0d41851fe0073b37aa8c33081722bfafb851493fb0e3b9629f924026fc32841f01399695"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3aef41be29373137c58c415693b312c95e048731dce519ab88649eae9ba0e492"
        },
        {
          "alg" : "SHA3-512",
          "content" : "312eff142f86b9e110131dcca69527fbec80478e463fed5a34e2bd628673bce7be9ddb6fe0cda7fab2a119d1f310629413740019e686e9162194984ab6e06bf4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.6.0?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "http://github.com/codehaus-plexus/plexus-classworlds/issues"
        },
        {
          "type" : "website",
          "url" : "http://codehaus-plexus.github.io/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://archive.plexus.codehaus.org/user"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.6.0?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-interpolation",
      "version" : "1.26",
      "description" : "The Plexus project provides a full software stack for creating and executing software projects.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1049ae9f5cd8cf618abf5bc5805e6b94"
        },
        {
          "alg" : "SHA-1",
          "content" : "25b919c664b79795ccde0ede5cee0fd68b544197"
        },
        {
          "alg" : "SHA-256",
          "content" : "b3b5412ce17889103ea564bcdfcf9fb3dfa540344ffeac6b538a73c9d7182662"
        },
        {
          "alg" : "SHA-512",
          "content" : "6c3b40442adf721d325ee9cbf935d758223a04b3bd8e0f3b60fdb652175c1ca65a6010f7ea8288617ffa73cb1f19d2737c79c403d343b285e0f9afb1729caa60"
        },
        {
          "alg" : "SHA-384",
          "content" : "93dcdffb567f4b7d24eecf9fb0733243ebfe1fd80c92fe69532fed9d1727a58ffa5ce7da4ab26b5c6aa8a6a59beb3844"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7489d45be45f74f7639db3b18ae6075d32d84adfaa9c4568f3fe2b2fc35c7de73ffce6f42e494466a8c81e78747b0f17"
        },
        {
          "alg" : "SHA3-256",
          "content" : "62145ec219beb405063de848cb54e0d63efc8c255322998858d7df74f8d1ae18"
        },
        {
          "alg" : "SHA3-512",
          "content" : "12fba4d2ffab1f89003e375bf74df3fc5d0f831906f9716f2ab2fc5a4ca7084c8a61500b24c5fa0ded27d1cef14b030df70b34c148c138136070e27f7cc41536"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.26?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-interpolation/issues"
        },
        {
          "type" : "website",
          "url" : "http://codehaus-plexus.github.io/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://archive.plexus.codehaus.org/user"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.26?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-component-annotations",
      "version" : "2.1.0",
      "description" : "Plexus Component \"Java 5\" Annotations, to describe plexus components properties in java sources with standard annotations instead of javadoc annotations.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "141fd7a2ae613cb17d25ecd54b43eb3f"
        },
        {
          "alg" : "SHA-1",
          "content" : "2f2147a6cc6a119a1b51a96f31d45c557f6244b9"
        },
        {
          "alg" : "SHA-256",
          "content" : "bde3617ce9b5bcf9584126046080043af6a4b3baea40a3b153f02e7bbc32acac"
        },
        {
          "alg" : "SHA-512",
          "content" : "cc534fda54272f074fe9edd581a6c3e1ea98127340c7f852c4b4953a44dad048ace22dfa10f30d6adcdfc15efd319dac778a03ebbe20de7779fd1df640506e88"
        },
        {
          "alg" : "SHA-384",
          "content" : "dd102351fada419b7e66f38b62868db4141cf93863b8117926564dd883b4a3960d9c9682b346f7106cdaa2a4138c794f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2b335733d7683e8bae312b0608af7c17b1aa22a1b9cbc4cc11549faf6bacc51c7591f1073aac99e5d70fdea31c6253c4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2e9f44d1c5df160563d3cedaf01929682fb3e0432beca7c782d8ba0324fb32b1"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5051e4210310ec60fae9f32284a93da3cff63bf43a7dda30eaf2715d24cfc7f2353a6c2731521f4d6ef32e7a3e2526b6a41c8a11b0889c8dbf7ffc7914812641"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "http://github.com/codehaus-plexus/plexus-containers/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/codehaus-plexus/plexus-containers"
        },
        {
          "type" : "website",
          "url" : "http://codehaus-plexus.github.io/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://archive.plexus.codehaus.org/user"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.8.1",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "540b1256d887a6993ecbef23371a3302"
        },
        {
          "alg" : "SHA-1",
          "content" : "6505a72a097d9270f7a9e7bf42c4238283247755"
        },
        {
          "alg" : "SHA-256",
          "content" : "dac807f65b07698ff39b1b07bfef3d87ae3fd46d91bbf8a2bc02b2a831616f68"
        },
        {
          "alg" : "SHA-512",
          "content" : "fb0fe98385496a565678a000c26a3245082abfbf879cc29a35112b4bf18c966697a7a63bb1fd2fae4a42512cd3de5a2e6dc9d1df4a4058332a6ddeae06cdf667"
        },
        {
          "alg" : "SHA-384",
          "content" : "72c6fd199936f06db886eba9dccd188e26afabf7b9e6744cea18f27e414abfe04d3d3f609f8505311a01f43e885bec1a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3b6eede7aaff2bbbf5133872b59e9c4932e60064951a68c219f128a8c3a2556c25c2c90a599b342ee3fdef25a745a474"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4e708ddf8ed0c6dbd8c6bba07e06425b5d263d899884b91bf11f86ec0d6f8463"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f43e89519e803e976f7b4d756d934be802ab36077cf2dc38dd9aa901eaf7104e58157859f45ccef7b38e072007a60f17270923e2ed7eabd41a4c776dee1458e1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.8.1?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "vcs",
          "url" : "https://git-wip-us.apache.org/repos/asf?p=commons-lang.git"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.8.1?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.32",
      "description" : "The slf4j API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fbcf58513bc25b80f075d812aad3e3cf"
        },
        {
          "alg" : "SHA-1",
          "content" : "cdcff33940d9f2de763bc41ea05a0be5941176c3"
        },
        {
          "alg" : "SHA-256",
          "content" : "3624f8474c1af46d75f98bc097d7864a323c81b3808aa43689a6e1c601c027be"
        },
        {
          "alg" : "SHA-512",
          "content" : "4ca4045775a879c3ce3021908db7b4778235a322fd8e2567da960156f24b9da86e6812a4956c8dc19920cd83e4c61141168c580829f43f10bbac925d465c3fd1"
        },
        {
          "alg" : "SHA-384",
          "content" : "c95aa5a652533b3b54e721b7f20c4ef19a022ac6c8cd353b032bfd65f636b1adc3eb2e5ca0b409f19456e265cbfd3cb0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b08f2d668d9233a3380c37c028486014db65000e918aa1c59e2db35fb5661b3a40183e51677b73a5d96a308f9c2346c0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f6a3b253b2c5a06a9559fd9f21e36d04198e660d4e9437ddeb78245969f03fe4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0a45c046c106cf88a510bde208b1ac92d7b3dc547b2516583afdbb829219ec31b0bba9fc4b7fd240d2ef859abb722ce307f9572d87409d261887130a5df6827d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.32?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.qos.ch"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.32?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-plugin-api",
      "version" : "3.8.4",
      "description" : "The API for plugins - Mojos - development.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cd69b582bb49b758dc840653497cdf89"
        },
        {
          "alg" : "SHA-1",
          "content" : "699bf28a990398caa3c7dc860476c409fe538036"
        },
        {
          "alg" : "SHA-256",
          "content" : "3aa48d91a54aab6fea95d98218345621eb3952e693ae591d41b63ac5b86eb76a"
        },
        {
          "alg" : "SHA-512",
          "content" : "f3e8881e3ecdba8725583a214f5133fa23aafcb306b0ae43b20f438c483be446a205841e473eb04d641a84dd1ac3647ff1bd25f0ce1b094b9e975a0f7e3758a2"
        },
        {
          "alg" : "SHA-384",
          "content" : "25089a158b362d868a1e791473326ff41a26048f468eb1a4272c2124c11e64d57a1e37810fe936a4c7a6c80115878043"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1e6c3804b77b3616a671de99aca36b73c44040f5ab2ba6a98ee03f46f25b1b12cd55d807e5cda01a61c7d64873954df5"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c14a2dd375220a01366d251ed0ed86274d48f41b74068eb1b8d340e32aeef1f5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c6027b34bbe924dd76014033b99a1523701ad2e157cdd23acb92c8441c191a162a4ddcc05a115dcb1130c3dc9d79b5cdef2153e5f873f0d55fdd4c8181f4390d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-plugin-api@3.8.4?type=jar",
      "externalReferences" : [
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-plugin-api@3.8.4?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-cipher",
      "version" : "2.0",
      "description" : "The Plexus project provides a full software stack for creating and executing software projects.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "55d612839faf248cbe3e273969c002c2"
        },
        {
          "alg" : "SHA-1",
          "content" : "425ea8e534716b4bff1ea90f39bd76be951d651b"
        },
        {
          "alg" : "SHA-256",
          "content" : "9a7f1b5c5a9effd61eadfd8731452a2f76a8e79111fac391ef75ea801bea203a"
        },
        {
          "alg" : "SHA-512",
          "content" : "8f187b07867a7c29d77454aae4b76479300238d9c4e777c1afa2aebe33b88dab916e29111dd55acac1341849f4579fe91a5470fdd45ccba0e05709c2ce3a1d65"
        },
        {
          "alg" : "SHA-384",
          "content" : "6973eefe06a8992aa8db1775c0f43a84cbef54eeea9122a5a30c362af3e4fb13b6cbd6fba229142e2a4495f97d71f409"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ea780d218f96e61005c5582bf3785ddbb33b53ccb4efbffd76ab58166cf261d3c256d52fea28759380684b7e9b0db8eb"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e2e51d5350ffdce341464ddcdf9ae60108bff40bf5174dc6be43e33ffcd84af9"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f3e17ea31bdefc8094ba3495b8231ec7f90c7175839b009d9fd230110b66ac4c68c912fda1a6e644d93dbce639d738e2535f1ade5841e072a604f5f8ac536729"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-cipher/issues"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/codehaus-plexus/plexus-cipher"
        },
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://archive.plexus.codehaus.org/user"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.plugin-tools",
      "name" : "maven-plugin-annotations",
      "version" : "3.6.4",
      "description" : "Java annotations to use in Mojos",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "00a800d6df39e3ae3a96135983e21e36"
        },
        {
          "alg" : "SHA-1",
          "content" : "23dcee7834a0b854365c14eaa9f473d2fed951e5"
        },
        {
          "alg" : "SHA-256",
          "content" : "0fe41f2ffa4fc6f3b8e65c0b16d9e5f00dd256113a4114e7a9466f9c1952eff1"
        },
        {
          "alg" : "SHA-512",
          "content" : "fd1b8a3690ed2837d5cce81c712ce8f3b5a26bc1caffb11e2304ac771358f3c040d82c75852149ccc353252f8ad081c1dd200c4f1ef4510cee11d744c931101d"
        },
        {
          "alg" : "SHA-384",
          "content" : "f4df4f0bc701f5298842dc912dda55d31485a04468150c06442c12ef20df76557f48e3934a7788ae5f85e3720f10f66a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d138f5e5485dbb93ca3c2ac05a2a7a9ed5426d3f95e01f4fa1ef60b387ea314d922f83f0a5172ab35506b4966583b49f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1aefe13497b38cc037292dbb3cf6eed4f3b20105aeed1566d8ae09d7e8b18885"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a1b5dd73cdb6ced6d91b292cdd1990a2fba4fcda53c1a28149fa6db973411cc6f3c7766bc1184739167c36628b60be55d6d81c2af70993b026868e5d49a73a7f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.6.4?type=jar",
      "externalReferences" : [
        {
          "type" : "build-system",
          "url" : "https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-plugin-tools/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MPLUGIN"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.6.4?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-utils",
      "version" : "3.4.1",
      "description" : "A collection of various utility classes to ease working with strings, files, command lines, XML and more.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c155c4135ef7ba134659bf1af31c5156"
        },
        {
          "alg" : "SHA-1",
          "content" : "4de9992988c534efd668bfcca0480ebe13e0c0eb"
        },
        {
          "alg" : "SHA-256",
          "content" : "52d85e04b3918722af11d12855b4a8257df96a0e76c8f4e3852e6faa851f357b"
        },
        {
          "alg" : "SHA-512",
          "content" : "0668d413520a713d9279123eccae3b5e9bc79f41dd8da3b3a1ba79b7b60086c009639d91d84df230e490192fe63b10390f3901478c69bfd452a1280364d24876"
        },
        {
          "alg" : "SHA-384",
          "content" : "cefd95e956f79c103c95f15d8a5b914b7158dfdf1bb1d7a1cb1eb4f89ab47f841f5fbc3f1cd9380bb57252a036cb63ee"
        },
        {
          "alg" : "SHA3-384",
          "content" : "26aa374d12efd70c423a45794427f3ca297a20663b2297ef806e7f2bd57bb9e885da1222e1c557a80fb2a012cef5de52"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6ec121dba759799e676e53ab9b57d379907c6fb8f844177f63c21b7324011dc3"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3ba2485a1471edd0e43819277db828573ba2299599dd273bbb09ae4453343bc8e32672adc3b7a4eb523edd64aed8a50427f5b7a968870c152e7859f2c6bcbf34"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-utils@3.4.1?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "http://github.com/codehaus-plexus/plexus-utils/issues"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/codehaus-plexus/plexus-utils"
        },
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://archive.plexus.codehaus.org/user"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-utils@3.4.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.ant",
      "name" : "ant",
      "version" : "1.10.12",
      "description" : "master POM",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f5b97fb267862b35d1eb398defe1831a"
        },
        {
          "alg" : "SHA-1",
          "content" : "be08c4f63e92e03bac761404cf77bc270928b6c5"
        },
        {
          "alg" : "SHA-256",
          "content" : "5c6a438c3ebe7a306eba452b09fa307b0e60314926177920bca896c4a504eaf6"
        },
        {
          "alg" : "SHA-512",
          "content" : "d54f635e948cfc29e0f65fce6925867102534469b8ee01f777be7d0e2e5155d813f574934dfabae11dab08d41c2b3fcd9ff003b93ca1dbe8e0a9435a02ac8147"
        },
        {
          "alg" : "SHA-384",
          "content" : "677a1209966ff72c89dd57c00889bb3eb93dedd392922e589c34193ea9926dce899306df51d1b0f8d5c052c76b630971"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0671ca87a7aaf98c57c94f2f3ffc470d0a01ca8af10fa9e60aaf38d57c1a8740ed4f0605746388fa7f21b309d33ab42e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d83a0191344157a13b02cb21fc40870054a6c5cadc81337298ba8bb269d7db9e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b3e3612ed4edfed70b085711140ef30dd3d3b974cfc354eb1ac85c77636f8c81c4a2abe404bfd29c7332fbe46b3cc61db6d505847841909ee882d91a61891636"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.ant/ant@1.10.12?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Ant-Build-from-POMs/"
        },
        {
          "type" : "distribution",
          "url" : "https://nowhere.net/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/bugzilla/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/ant-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/ant.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.ant/ant@1.10.12?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.ant",
      "name" : "ant-launcher",
      "version" : "1.10.12",
      "description" : "master POM",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "709ed15ea16a95903e7b3e8be130fa1e"
        },
        {
          "alg" : "SHA-1",
          "content" : "e090b4f9d3ecf45491cc16e759f1e843a1a224c0"
        },
        {
          "alg" : "SHA-256",
          "content" : "42a7ca7e7bb777fe7ee75a5ed4cc529c766bc43486367fdaad0ab4a32ee9c249"
        },
        {
          "alg" : "SHA-512",
          "content" : "d00dc7a8c7d724e8ae665f727b7754f0a54dea5a55a55b0e7f2e7ca3223a460d8322f9deb89e2ac0103cbc7cab1a018472aefb12aab4635270f896ec80db5686"
        },
        {
          "alg" : "SHA-384",
          "content" : "3bb3e3969e8b48b100e825a61e5ee278d3d659ef1a6f8751aa7d775b7024cce627065bfcd73ae73183425121ed4e34bf"
        },
        {
          "alg" : "SHA3-384",
          "content" : "289807457cb924c089f10c8ccc9ab1d6d740260ad59239b6aab97b23dae14c4c6ba246488eb73d46d32940e437266bb6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "65aac82d8461dab9dc5f58980c18b160cca1ef59c6ea24a98f7256107725a647"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2f346da5cd1799fc8b049b67421bda999a1e3e328c668a9d4315d584fead608681f453d39a9cb150685ab66400a16674fdd4f331b86671457230819cf57ff237"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.ant/ant-launcher@1.10.12?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Ant-Build-from-POMs/"
        },
        {
          "type" : "distribution",
          "url" : "https://nowhere.net/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/bugzilla/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/ant-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/ant.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.12?type=jar"
    },
    {
      "group" : "org.eclipse.steady",
      "name" : "frontend-apps",
      "version" : "3.2.5",
      "purl" : "pkg:maven/org.eclipse.steady/frontend-apps@3.2.5?type=war",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.steady/frontend-apps@3.2.5?type=war"
    },
    {
      "group" : "org.eclipse.steady",
      "name" : "frontend-bugs",
      "version" : "3.2.5",
      "purl" : "pkg:maven/org.eclipse.steady/frontend-bugs@3.2.5?type=war",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.steady/frontend-bugs@3.2.5?type=war"
    },
    {
      "group" : "org.eclipse.steady",
      "name" : "rest-lib-utils",
      "version" : "3.2.5",
      "purl" : "pkg:maven/org.eclipse.steady/rest-lib-utils@3.2.5?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.steady/rest-lib-utils@3.2.5?type=jar"
    },
    {
      "group" : "com.google.code.gson",
      "name" : "gson",
      "version" : "2.8.9",
      "description" : "Gson JSON library",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e67627f67e03301092dc7de0a2d7cef8"
        },
        {
          "alg" : "SHA-1",
          "content" : "8a432c1d6825781e21a02db2e2c33c5fde2833b9"
        },
        {
          "alg" : "SHA-256",
          "content" : "d3999291855de495c94c743761b8ab5176cfeabe281a5ab0d8e8d45326fd703e"
        },
        {
          "alg" : "SHA-512",
          "content" : "46501e4dd34c9a6f33ff63aeeec45b049579365c5273490e5dfd5ea4effaeced907d0fc728204c619aa136e867ad826204582ff9ba3080d06693c1c675c8473f"
        },
        {
          "alg" : "SHA-384",
          "content" : "2f2897912784595e52d3f8e57741aed7dd866f16a69562d57e0604d85e2fef08b2a32e58afd00d264f66cc6ec775dc79"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3ce084f79191afdbdb0a9aa83073b128f620cf585b65c2e81ba98080fd91e9f327db3f0952903094b7dd387bc802b5ba"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e82ae9fa3a783ee683880d219ab529bb3d0b45ea721d002ee948fad99a67b4f0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "25cfe43039c6d41344434f89e9a8ad6f93a341512baf93e894a14a9dfd3af1cb0f0afaed4ade6db3c719f910fd9dfbeb7bec8bcfd7f49ac572ab217bce9e595e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.code.gson/gson@2.8.9?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/gson/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/gson/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.code.gson/gson@2.8.9?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-api",
      "version" : "2.17.2",
      "description" : "The Apache Log4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0c39d90e7819c92c111e447bdf786a90"
        },
        {
          "alg" : "SHA-1",
          "content" : "f42d6afa111b4dec5d2aea0fe2197240749a4ea6"
        },
        {
          "alg" : "SHA-256",
          "content" : "09351b5a03828f369cdcff76f4ed39e6a6fc20f24f046935d0b28ef5152f8ce4"
        },
        {
          "alg" : "SHA-512",
          "content" : "8f986171ee6ca94ba8eacfc83b5b45bb87221c176076eb152715fcb4e1f351c4e9f88d56420fc02ee166ebe0b896fb52eda21355dec49302ab3e83a56b245d04"
        },
        {
          "alg" : "SHA-384",
          "content" : "e4ba0afbfd91ef295e6c1c1edfa7854e216a29705b5c4b520f803697ae6badf3630c5d55e56394954988fa88e62176b4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ef8ecf2f848bcb18790d79b1d4e0fac0582e94f226eb8c7039d7316bd9f4c472556a4052b4a93958eb1248c7a3756433"
        },
        {
          "alg" : "SHA3-256",
          "content" : "bdcccb79127c28c0f42374eeac65891e7c0d02f18e1469c705e946f74cfc89db"
        },
        {
          "alg" : "SHA3-512",
          "content" : "14a4d4f38dc5392f378e006994780d686095e1190d476fd18efcd4211bd4dcd64b699d79c5f4351c51f2d26a3ab98b4a49745df6dbd404e3bc981797a5b8c075"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.17.2?type=jar",
      "externalReferences" : [
        {
          "type" : "build-system",
          "url" : "https://ci-builds.apache.org/job/Logging/job/log4j/"
        },
        {
          "type" : "distribution",
          "url" : "https://logging.apache.org/log4j/2.x/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LOG4J2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=logging-log4j2.git"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.17.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-core",
      "version" : "2.17.2",
      "description" : "The Apache Log4j Implementation",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b35d06ffd3ea52e5ba9efe455108745c"
        },
        {
          "alg" : "SHA-1",
          "content" : "fa43ba4467f5300b16d1e0742934149bfc5ac564"
        },
        {
          "alg" : "SHA-256",
          "content" : "5adb34ff4197cd16a8d24f63035856a933cb59562a6888dde86e9450fcfef646"
        },
        {
          "alg" : "SHA-512",
          "content" : "c2fc60a1e8c866c09f4787d1edb1bd87a5a5fe114c477d065a3c43f4e513f055d61560b597f06ef6d95c09763b6adb3be17812c8611c00df6f4959311bc9599d"
        },
        {
          "alg" : "SHA-384",
          "content" : "a8e03c55833df8f96d7066645440281ba212040af247733db6f4debcb38b7fe8e1e9ac79eb9b67105670e82136125e7c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f59e8609518ae9be81b30a480bf72a93cbf2b5e25e1465a0124945817a0a98969205147289177631a2a38783d3815af4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ce14c5b6c9c5285db2089e70bd78ade549b6b3109b897aad868a4a2e642489b7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "51f5519f25b534e1d9eb43b9e53d56e93c373b0dd64fa9d80a187e1ede7b5c32823d6fa5a034ec37f2a8c19d8af4dba0827912e7546824320a98af5348e6e83f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.17.2?type=jar",
      "externalReferences" : [
        {
          "type" : "build-system",
          "url" : "https://ci-builds.apache.org/job/Logging/job/log4j/"
        },
        {
          "type" : "distribution",
          "url" : "https://logging.apache.org/log4j/2.x/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LOG4J2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=logging-log4j2.git"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.17.2?type=jar"
    },
    {
      "publisher" : "Pivotal Software, Inc.",
      "group" : "org.springframework.boot",
      "name" : "spring-boot-starter",
      "version" : "2.5.12",
      "description" : "Core starter, including auto-configuration support, logging and YAML",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "82beae27be7cbcdb841dcf9184107e2a"
        },
        {
          "alg" : "SHA-1",
          "content" : "c43224a577cab8985ec17d971cd25ae88c92a94d"
        },
        {
          "alg" : "SHA-256",
          "content" : "ba354f3ca0b36da70468b3ce16b8bca52d125f7925c309803889b4398ca30998"
        },
        {
          "alg" : "SHA-512",
          "content" : "b4785cd2400fa03fc55fa130c0c4bc79ac7f8f9dd77527c7441de88de65599e76be3817100ddfe5325bb7bcc4d769fa4d186c4cc67a72b9c5e9f9b4fd4f86ee5"
        },
        {
          "alg" : "SHA-384",
          "content" : "6dfbad5171f59ac09efeeab0ebfdcfde462fe90c1ada078c78e8ec2a4b63872d5109f5bdb5fecefea22f6bb9c8fd692a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "94f98f178c294880446e336e7350d1ae10b2ddbad8cbcd696e40477d9b0ef5fd25419ce22edecf1a28f092fff067ab14"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1d4f532978137d57962793e62210b1c0bbd0b9319bf1d3cc89e592467925b128"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b466d188711efd0fae03bb96299287c3622d388f28ef7d6338b9937acc8db9ba02e9cfb4052b8b6d0ac207562c896f6f8863e7fbd96e6d94f30663b9d76461a6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.springframework.boot/spring-boot-starter@2.5.12?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://spring.io"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/spring-projects/spring-boot/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/spring-projects/spring-boot"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.springframework.boot/spring-boot-starter@2.5.12?type=jar"
    },
    {
      "publisher" : "Pivotal Software, Inc.",
      "group" : "org.springframework.boot",
      "name" : "spring-boot",
      "version" : "2.5.12",
      "description" : "Spring Boot",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0318f1936643f4982ba5251cf69a49f7"
        },
        {
          "alg" : "SHA-1",
          "content" : "afa269ff27342e8c472a70a4f9355c6b66f16384"
        },
        {
          "alg" : "SHA-256",
          "content" : "4723b82ad4f492bbb4bb2b8e158a52f6b6de5fd508ca3f347628a0f9dbfce527"
        },
        {
          "alg" : "SHA-512",
          "content" : "30644948751520249bc59f2c8f665227e317b3dc8dc42953dad6907b0b1ba354642f43caf1899a7124cc7a4da1aaaadb2d5ef5836438d93c1fb31054ab9aabf0"
        },
        {
          "alg" : "SHA-384",
          "content" : "95d245d97bade66710f216014c646f15ca2335bd0fd554246b7a0dc0a3401b77c85cdfc2aefa5780200444775bc55814"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f2edcf8d63a40afca30be885554f3ff5376f262d7ee26029e261c18373cde1a453d51fee3bc21ef4b63408971517c476"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6fd987a29da8c96aaecde0a729280118cadf2d66681d40e9dd368571a0e598f5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ce88b2621901292a78812d0841e180cd7967e5aec5f09a3dc14b70de2b4c558bc9ae7823e9f26c57438219b2fe25366a5b05aaa089c0293a24d35603be69e0d7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.springframework.boot/spring-boot@2.5.12?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://spring.io"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/spring-projects/spring-boot/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/spring-projects/spring-boot"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.springframework.boot/spring-boot@2.5.12?type=jar"
    },
    {
      "publisher" : "Spring IO",
      "group" : "org.springframework",
      "name" : "spring-context",
      "version" : "5.3.18",
      "description" : "Spring Context",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3ae3003c3d7da5c8890e8af2b6a41213"
        },
        {
          "alg" : "SHA-1",
          "content" : "34f6683d9dbe6edb02ad9393df3d3211b5484622"
        },
        {
          "alg" : "SHA-256",
          "content" : "6f307ea6e140d7f6f7fcffc7bb8c1540dd244c1039d8f7e7b8f3ddec6c73f59c"
        },
        {
          "alg" : "SHA-512",
          "content" : "3e38262247fd1800015ec7eab2fa6cd3a1a957490399836ba14628a466b51020797ba05fa9a09ede0d78be61144281230e2401a1544ff8ddf0783b9dcf77f6e0"
        },
        {
          "alg" : "SHA-384",
          "content" : "1f52b6a17f2afe374a898e661400e6813839143651f65acb500c1de0153c0ef3f88299a35f89e6a2cfb0180facfa345a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9c50bf0083286b362f03638fa268dbe7885dd18f99f26387ebd7d633024d1d8221f0a1426da6321d8e122b80fa3fcc1c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e5f12b8e2564612d5e855dd594807802b9b649ceeee3dd56588b7657220b28b1"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b55021bbd4b7d845e26abf45260e63a71f6840773f093b4b349f293beb3ae533941c3a389f9b24a335e34f075c8e51235304bade31122cd1a839920c77890ca3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.springframework/spring-context@5.3.18?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://spring.io/projects/spring-framework"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/spring-projects/spring-framework/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/spring-projects/spring-framework"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.springframework/spring-context@5.3.18?type=jar"
    },
    {
      "publisher" : "Pivotal Software, Inc.",
      "group" : "org.springframework.boot",
      "name" : "spring-boot-autoconfigure",
      "version" : "2.5.12",
      "description" : "Spring Boot AutoConfigure",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "945afd28b0df41cb712470e74a66bd56"
        },
        {
          "alg" : "SHA-1",
          "content" : "59251dea0eac5480100e93ec4c56ca26fbce22f4"
        },
        {
          "alg" : "SHA-256",
          "content" : "c186ecde7a6c563212d9425a1235148e76f33adb1bfc1e2901fa3559d343a12c"
        },
        {
          "alg" : "SHA-512",
          "content" : "0dbd9ba2c213d416067cfc8a579dbad3d43cf84bed9a13c0e683cf035502aeaa3b7266178d01e68b60186bf236ed1fb1e78c7c1d70f9d766ef0507cf045220e9"
        },
        {
          "alg" : "SHA-384",
          "content" : "377064d6adf72a504ea49a8c6da548e327bb74232a4ad2769ae7d27d930ea88c54995edc06466943ceb7be4bbd1dab02"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c28d6e1bbb87d32b250e998296a3c4032698877db03b0d3121801a15e4bed283910152399e7699f6ac1c2deebd2d8a2f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a643dc566bb7500eaf0cd17ee1e4783d2c8d0f37955204ebde06ea3da82c27c2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "511a92f21b3a8e50eb09e6660b33ed63bdc89a8435e934463c093d8a7753de7d5d81f5bd10b8f05572f5a051ef834f49344f80813f2806583ba00e8aff2e0e31"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.springframework.boot/spring-boot-autoconfigure@2.5.12?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://spring.io"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/spring-projects/spring-boot/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/spring-projects/spring-boot"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.springframework.boot/spring-boot-autoconfigure@2.5.12?type=jar"
    },
    {
      "publisher" : "Pivotal Software, Inc.",
      "group" : "org.springframework.boot",
      "name" : "spring-boot-starter-logging",
      "version" : "2.5.12",
      "description" : "Starter for logging using Logback. Default logging starter",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0b3312dab3d2e84c93e93fe864601162"
        },
        {
          "alg" : "SHA-1",
          "content" : "de71318e8383c1460902ef336b4a4467bd2fbb19"
        },
        {
          "alg" : "SHA-256",
          "content" : "31421249bf449fafbe6ea68057e7ef5886e81836b416be6f3fa0d6c3b1646107"
        },
        {
          "alg" : "SHA-512",
          "content" : "250107ae4340a4f9b77bf0879f3fdbd763984ec2885d902a26bd57d35f393cb69fa1f8f027c48bfde595c006a379791134a9a8e6107fa67f8abdbd4901c2e3b4"
        },
        {
          "alg" : "SHA-384",
          "content" : "edc4d5ee0c0b98da03c44243de02a8b514125a0d74cde857d4af7cd75b7506d0c90c50645278461c6c2602c3e147ae1d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "24d2cac2586be50d6e49b898684e3322461a80c53bf79d8607558c064583825d3001ba3e5367833fb5b4614f5650e800"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f7037db798b922a1e0aa27ea67c0e3177ee3f451e31b5e1ecf90a6730381f3f4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c2d5389da02f084330ae21f708f73ef715e8dcb5dfd6d1e7cdac97bc9bf75e858c6a21123a7b56a97808eee3d6b174632340bd363bcdffe38adeec5a9e8ac652"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.springframework.boot/spring-boot-starter-logging@2.5.12?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://spring.io"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/spring-projects/spring-boot/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/spring-projects/spring-boot"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.springframework.boot/spring-boot-starter-logging@2.5.12?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "ch.qos.logback",
      "name" : "logback-classic",
      "version" : "1.2.11",
      "description" : "logback-classic module",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e13679004cc76ad5792f275f04884fab"
        },
        {
          "alg" : "SHA-1",
          "content" : "4741689214e9d1e8408b206506cbe76d1c6a7d60"
        },
        {
          "alg" : "SHA-256",
          "content" : "4d8e899621a3006c2f66e19feab002b11e6cfc5cb1854fc41f01532c00deb2aa"
        },
        {
          "alg" : "SHA-512",
          "content" : "6df8b42396c5d3257f11fb19c280533aa28d66e647115816d4ebfd6a58c9b5adf0e098504772261b29435df75b86cb2b9a47f846ed45d770179c9d10f39941de"
        },
        {
          "alg" : "SHA-384",
          "content" : "d480881d1a0d58c94aba0b719d56cd492147bc6481b67370dc7426ea7a81326af5b19f32d6a95fee714f37b90a5eed76"
        },
        {
          "alg" : "SHA3-384",
          "content" : "070647c93da744f04cc13ab3f1958c61a8b1e219fe221ed0bf251e4cc97563c64be323bfb3a9e2fd4839e33ded424b21"
        },
        {
          "alg" : "SHA3-256",
          "content" : "60c1dbe51066ffb3885673255a279e8894c89fe26f079180fa992478c1d9b03e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ce16fae69767bca975bec0d7dd0ceeb40c15cf034a4a949721c828a0f2c25cb9d619c4db3f986f6d9805d5b76d27b8926c55be5579522cd5ab3fa5e69bb68aeb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        },
        {
          "license" : {
            "name" : "GNU Lesser General Public License",
            "url" : "http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html"
          }
        }
      ],
      "purl" : "pkg:maven/ch.qos.logback/logback-classic@1.2.11?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.qos.ch"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/ceki/logback"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/ch.qos.logback/logback-classic@1.2.11?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "ch.qos.logback",
      "name" : "logback-core",
      "version" : "1.2.11",
      "description" : "logback-core module",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "115da115b5e66ef64e774ec35af1fb1a"
        },
        {
          "alg" : "SHA-1",
          "content" : "a01230df5ca5c34540cdaa3ad5efb012f1f1f792"
        },
        {
          "alg" : "SHA-256",
          "content" : "6ce1e9397be8298a2e99029f55f955c6fa3cef255171c554d0b9c201cffd0159"
        },
        {
          "alg" : "SHA-512",
          "content" : "86b12a74c2a822a12ba2e9a7b0db5013803f18784a3cb1201c95d5f7872a6aa8cf06d5861a5c35777a7decc7ea26df7b4388fab3b3b71aab7274527d9b339318"
        },
        {
          "alg" : "SHA-384",
          "content" : "2afd896ebe6333d99e5baa553d80b7851d8ff51c06c725267e061df81bc9a878b74a65394699ae853f9738a08963aa0a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "43d39acc5608b60d671c000bf6114f4623d3057399142abca01b0fc2381f2191479a2f0dd74f812223b66f57fa48fd9c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c23af1733b972e958369a2e14372fd2b306d4f552d7ae5ff6b9dfad3c14611c6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c7f6357d32a3b9fd82dfbd162c3a6cbe4b4909ef530e956bcd18649b2d3624eb51c5a71fee54533a9786e87cf1ccdc693f563ef6e3c6fbff7beedbd1d670f9bb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        },
        {
          "license" : {
            "name" : "GNU Lesser General Public License",
            "url" : "http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html"
          }
        }
      ],
      "purl" : "pkg:maven/ch.qos.logback/logback-core@1.2.11?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.qos.ch"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/ceki/logback"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/ch.qos.logback/logback-core@1.2.11?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-to-slf4j",
      "version" : "2.17.2",
      "description" : "The Apache Log4j binding between Log4j 2 API and SLF4J.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "14b27a4266c6d71c949cb4591ee463cc"
        },
        {
          "alg" : "SHA-1",
          "content" : "17dd0fae2747d9a28c67bc9534108823d2376b46"
        },
        {
          "alg" : "SHA-256",
          "content" : "9bcfa5273527b950d79739d11e8f8080cfc881908fa2a946b4e891c0293094de"
        },
        {
          "alg" : "SHA-512",
          "content" : "c90bbaacaabeed35f80be4d723b54234fd137413888870d6e1c1b16c067cbede57d637a18f0d25421a9c419fc55a9c388ce235077cfd6497178dfe67c5d398e8"
        },
        {
          "alg" : "SHA-384",
          "content" : "c8374c05542d5a04a831a66596fe31cf385a303643e724840a70508aaa98e4870234aa8a26ac1f4fab167fe45bf34e6f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "25c843c30137e459b94476843d8312a49d75b40d80469b1943b44a6bd2fd51f6b6f71b23d4bc559f91ae0f28763c7b0b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d0e8a8996e79cc881a10a55b4887436a9458625007f03b071230d1c4e96b54b6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6d0ec7c51ea40dee55c3c9a60ec198fe7461fba1f6b30a88b866608e83f47fb1328754b8fe33f3993f8c1ececc89c9ea83cb8b266f36fd9c1b8095946d330e2f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-to-slf4j@2.17.2?type=jar",
      "externalReferences" : [
        {
          "type" : "build-system",
          "url" : "https://ci-builds.apache.org/job/Logging/job/log4j/"
        },
        {
          "type" : "distribution",
          "url" : "https://logging.apache.org/log4j/2.x/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LOG4J2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=logging-log4j2.git"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-to-slf4j@2.17.2?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "jul-to-slf4j",
      "version" : "1.7.36",
      "description" : "JUL to SLF4J bridge",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2a3fe73e6cafe8f102facaf2dd65353f"
        },
        {
          "alg" : "SHA-1",
          "content" : "ed46d81cef9c412a88caef405b58f93a678ff2ca"
        },
        {
          "alg" : "SHA-256",
          "content" : "9e641fb142c5f0b0623d6222c09ea87523a41bf6bed48ac79940724010b989de"
        },
        {
          "alg" : "SHA-512",
          "content" : "0bb1e7343d07d41bcfb0c1ffeb2db28cbb35e7a80a409b80042f463b082a292976f09d719e319471e31c7bab716121728a16509fd385fc6e3b400b1b214cffea"
        },
        {
          "alg" : "SHA-384",
          "content" : "50e2f326fc00537a5fb3726c7c55556851b3be8b4346f522f27ddecf2fdb44adabae3197b30ccfd854c37d6734adbd8f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4ad0c3870852ac44530a9dcb992d947cd8708ee6f422559da41aaaa8b22d1610fb116b32d2c54df83b110b85487083bf"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8e3f5aaaa27f618b52e610376d2a16c6f9dc8dce5e6c2bbe42131a590626aae6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e3da265406b5e69f02235ed7272a48f71cb8b6f0a696820e28e90fb5eafeeb311abf2a4e779b402f384c6a80470fd41116ee52a526f57040fae3b24cb3b19c01"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.qos.ch"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.annotation",
      "name" : "jakarta.annotation-api",
      "version" : "1.3.5",
      "description" : "Jakarta Annotations API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8b165cf58df5f8c2a222f637c0a07c97"
        },
        {
          "alg" : "SHA-1",
          "content" : "59eb84ee0d616332ff44aba065f3888cf002cd2d"
        },
        {
          "alg" : "SHA-256",
          "content" : "85fb03fc054cdf4efca8efd9b6712bbb418e1ab98241c4539c8585bbc23e1b8a"
        },
        {
          "alg" : "SHA-512",
          "content" : "d1acff146c0f9ea923a9325ad4c22ba2052ec474341ab8392abab7e8abd3ca010db2400ff9b5849fc4f1fa5c0a18830eb104da07a13bd26b4f0a43d167935878"
        },
        {
          "alg" : "SHA-384",
          "content" : "004a4bde333c0575f72df1cb9cf95ee0c6c7f738a6f0f723a5ec545aaa1664abeb82f01627708a1377e3136754fb7859"
        },
        {
          "alg" : "SHA3-384",
          "content" : "abcc5b1fbad59b3e9b6d2d6195ec11d6254f689116c534a964724b61f815cca60ba3a2c1489933403f3f78dc54fd20a6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3d3ef16365e7a0357d82f874fa26b2b0a146cf7bf98a351c65ef1586444fa009"
        },
        {
          "alg" : "SHA3-512",
          "content" : "88625a8811be514851209291344df32478b527bc7838ddee58752269bf2457ae8f4e6b6a0d0b5c18522e287ba6df1def0cb19dee2b85e01ee21f0b48ac2630d3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/common-annotations-api/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/ca-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/common-annotations-api"
        },
        {
          "type" : "website",
          "url" : "https://www.eclipse.org"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar"
    },
    {
      "publisher" : "Spring IO",
      "group" : "org.springframework",
      "name" : "spring-core",
      "version" : "5.3.18",
      "description" : "Spring Core",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "91eb16af497ab752763f5bb24e1239e7"
        },
        {
          "alg" : "SHA-1",
          "content" : "7ff3000f3342989cb011b6095a0e86f2e5176cef"
        },
        {
          "alg" : "SHA-256",
          "content" : "ca6fbdcf571fe1ee036d8e0b990175169baf629d38a8714f59e0e0fdc8f7a361"
        },
        {
          "alg" : "SHA-512",
          "content" : "0b687ac0ae4ca715a451f50a221bb317fec0fc5bfec5962454a91bb0158da6ad49a79ded964158a2bbdc5733cc829489b9ee56759684644a757d613daaf18dd1"
        },
        {
          "alg" : "SHA-384",
          "content" : "ec1befb91ddce4c5d61868050cd7b233e28150e412a7456d64d9b90ad46029b2b296ef73bbb72b9dd15fa7d9773af82b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5a8820e72f4ad25e97cbad8a2cf1df6a27e0c2ad7df9465bfbbf1ded9c13b5a09a24e44614854866b2faa47e4fc68152"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8190f9815df340fe3019584d8b6f72b091f82f82663ea9597ceeb18295631528"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e5d8c1ca790bf535db1330a061629a11cd26445cd0d81412dbf1525966796cdfe560e690b0d30de7ebb3f54eb8e8c63fc1f82eb819a270020161e2005d7a7a3d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.springframework/spring-core@5.3.18?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://spring.io/projects/spring-framework"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/spring-projects/spring-framework/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/spring-projects/spring-framework"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.springframework/spring-core@5.3.18?type=jar"
    },
    {
      "publisher" : "Spring IO",
      "group" : "org.springframework",
      "name" : "spring-jcl",
      "version" : "5.3.18",
      "description" : "Spring Commons Logging Bridge",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4a258a1588318010d00aa66db45e03ef"
        },
        {
          "alg" : "SHA-1",
          "content" : "7e5d8cd447981bc20d4c397a2ba0a1c65ff2267a"
        },
        {
          "alg" : "SHA-256",
          "content" : "5769aae0e6addd8f5f59cbacd1b0635d819851e66baec4fce7d6c1fad1fadf8e"
        },
        {
          "alg" : "SHA-512",
          "content" : "cde1bcfa290715c3004f89cabe6064be50a25d3a7d0cd58ef67db330e62ea187c42b4c7546f607798c8bf965d51e956f009e5e76165b906cfcd7e1750302d703"
        },
        {
          "alg" : "SHA-384",
          "content" : "5d3f84317dd562012878ff60096201801fb7e9c80bdca9c41ed1a8ea253baec0ba57ff66daeda38d06bc1fec089845ef"
        },
        {
          "alg" : "SHA3-384",
          "content" : "348e9ce34388e36de3cad5cbff6c7185c629f01da5a7bffda0b41a2ae75ccae4d0494ef203c88925a45792d75afea60e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5042505cf6cfd15d3101898beed68431781800ca3e4a11c11666bb89219b3910"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c22c3fb371d7364c749275fda4ec54c858280b3dde780762d656e428aaeca5c7805286dcb5eb92bd84011326f13405c2b5f66e15514ee11dc37e9bce38b2b2e7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.springframework/spring-jcl@5.3.18?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://spring.io/projects/spring-framework"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/spring-projects/spring-framework/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/spring-projects/spring-framework"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.springframework/spring-jcl@5.3.18?type=jar"
    },
    {
      "group" : "org.yaml",
      "name" : "snakeyaml",
      "version" : "1.28",
      "description" : "YAML 1.1 parser and emitter for Java",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0fac676adf839a85e0ca7a3df05cb28b"
        },
        {
          "alg" : "SHA-1",
          "content" : "7cae037c3014350c923776548e71c9feb7a69259"
        },
        {
          "alg" : "SHA-256",
          "content" : "35446a1421435d45e4c6ac0de3b5378527d5cc2446c07183e24447730ce1fffa"
        },
        {
          "alg" : "SHA-512",
          "content" : "448c82a2ba0c644cd4a697f02699829e1e431b9ef69f80b23f5d79d164996cf15841961d7b2246c08aadb910a8ffcdc695b8baedf26066d7fbe11e5d7e6f61bd"
        },
        {
          "alg" : "SHA-384",
          "content" : "0f9dfa1eea336700c6f7aeed9724eb417d0d3e8f52e3edf19d2dbee16fd63b37926a71fb54b9937dec8914247cc6f475"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f3e243627814aab986ce5c3380bb19d02edb6876fa2296cd124b782cfa8a07e5564ba28aa4aaed3fef688df378617696"
        },
        {
          "alg" : "SHA3-256",
          "content" : "336150cfec9501a5d40d57a8abf53771c6431c48d4ce78f37ed247b1199fad83"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fc504b8575f0b5d5cbfac0a6e557466bc58cc37f08cbb0c5869f15fec275a2e109a8d54c2e729fa58170c77d0c42bbfac795ff5e00b27fa42012dc676dce659f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.yaml/snakeyaml@1.28?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://bitbucket.org/asomov/snakeyaml/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://bitbucket.org/asomov/snakeyaml/src"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.yaml/snakeyaml@1.28?type=jar"
    },
    {
      "publisher" : "Pivotal Software, Inc.",
      "group" : "org.springframework.boot",
      "name" : "spring-boot-starter-web",
      "version" : "2.5.12",
      "description" : "Starter for building web, including RESTful, applications using Spring MVC. Uses Tomcat as the default embedded container",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fcdcc7a4407694a34cfcbe22f18fe0a5"
        },
        {
          "alg" : "SHA-1",
          "content" : "0c217615248c94a218bb00ea415ad6eebe460ba3"
        },
        {
          "alg" : "SHA-256",
          "content" : "be0c193ac2ca2e39d5a3395f5d07625f04b4a0ab16bb0fb04506ecb2c57e87eb"
        },
        {
          "alg" : "SHA-512",
          "content" : "7e141e17916a063d0de0041b82eb3b3ad54bf8d2e3d785a7f73f33501c68d26c54af241e6392d576bbcbbd7fb9e999a5388d140511ac9fbb86f92606beab9425"
        },
        {
          "alg" : "SHA-384",
          "content" : "bdaea95bf4280d3722fd5e223965be150414d5f418d70774b79e0f34465e420ebb5bf9141268eeb656a7d5280e9c1469"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b9f1963890874dbdc611636fe43cd00bfab5933d649cf44758bbe2333acf1c02385f61e5296581801983a87588677c9d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "950d02839e0c9df6577e2dcaac78787a611d72ebf65b0bf13a5232eaea83cc44"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e5d99c76fa9bdb9740403b10907b39a2f0b6b18afec6cca5913fbd0e52c8235656779df1f3f674afad8f6a24d7312b2c2026c4c73a08585f694d0af5f9741e00"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.springframework.boot/spring-boot-starter-web@2.5.12?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://spring.io"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/spring-projects/spring-boot/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/spring-projects/spring-boot"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.springframework.boot/spring-boot-starter-web@2.5.12?type=jar"
    },
    {
      "publisher" : "Pivotal Software, Inc.",
      "group" : "org.springframework.boot",
      "name" : "spring-boot-starter-json",
      "version" : "2.5.12",
      "description" : "Starter for reading and writing json",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "97d3415ccb5ecb864f106d1b8d70769e"
        },
        {
          "alg" : "SHA-1",
          "content" : "549b45bb8d9edefb693406cc7e6c590943009cd8"
        },
        {
          "alg" : "SHA-256",
          "content" : "1526c9f00bf84835c746f9182228188373864f965d8ac66580af0672634f08bd"
        },
        {
          "alg" : "SHA-512",
          "content" : "ad2898a33c8cbf5e5d7dd8ae80eff3dad4b48af356e5a54cd0dbc1e9ff93f37c47e61ab198cf2942d08e59a344d8ab396b155f18c37d484a18fd8837ebcab62f"
        },
        {
          "alg" : "SHA-384",
          "content" : "ab888391b65d54210ab041dcfd6aee312261ae0ae1777e48ad0c7c6add6e8f554e6d9c38c7846cc076a79c4fd30c04bf"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0bd59e34f0f026c9fa5b280b164534a00b267aed2185f3db2317d9f79f393d719870407a4b84d7addcd41916be0adfcd"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e187c25a7768b43acb37f91459c4738dff7621af1d75a89d6f1e770a9583d7fb"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ae18d314c0a6b10383e561a63006a55aa6c142ae86626e277f24a3e742bb49ced77319b76684d89855e7bb4a917d322dcb192341f666fa9d4dcfee1c2a77c506"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.springframework.boot/spring-boot-starter-json@2.5.12?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://spring.io"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/spring-projects/spring-boot/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/spring-projects/spring-boot"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.springframework.boot/spring-boot-starter-json@2.5.12?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.datatype",
      "name" : "jackson-datatype-jdk8",
      "version" : "2.12.6",
      "description" : "Add-on module for Jackson (http://jackson.codehaus.org) to support JDK 8 data types.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2af8967df4fbe28274051430886f5cba"
        },
        {
          "alg" : "SHA-1",
          "content" : "ccbbe6e72e3665e7ad9d0eee4613e1d8a09b81ae"
        },
        {
          "alg" : "SHA-256",
          "content" : "3602428cafcef7819ac1fc718fe5b2ab933944f9f781874cbd44a50273bbcee2"
        },
        {
          "alg" : "SHA-512",
          "content" : "4e0ad569a8e4f08927d6f70081a66574afc6c3a740b99e804842802f21689fdf2f91c278abc078648606b7e34e44a592c5c9d6213f43c03c285e98073f49bb1e"
        },
        {
          "alg" : "SHA-384",
          "content" : "602b2b31b44cfdc5c3a2424a5493d27ca057a50ea878e6a447cf4f0852d54d4f1ab3ab74e3edc77c354d1b351f1965e3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f49c3feb3c47bfe38262f66bce03f86bdb3e206092d657a6e9fd8220a1a027e568d14428e90722f2fba8224e4c2159b0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "56a60e3a87f99545a6155cc35d50c48b95b7bdf3a4ac144ce5d7c88f2d5f7d24"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5c0e40fdc8409e22c0d49e7b9266bf13a77c0e8837c7200b4580e67b11228fa142b921452742203ebb5f45785b8d490692e46c54d26d8107ba4c24d1a96f99e7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.12.6?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-modules-java8/issues"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/jackson-modules-java8"
        },
        {
          "type" : "website",
          "url" : "http://fasterxml.com/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.12.6?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.datatype",
      "name" : "jackson-datatype-jsr310",
      "version" : "2.12.6",
      "description" : "Add-on module to support JSR-310 (Java 8 Date & Time API) data types.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0dcce05f281b2f8bc0e7d422eebb8f7c"
        },
        {
          "alg" : "SHA-1",
          "content" : "0f7d0d854f24c4254885c275a09fb885ef578b48"
        },
        {
          "alg" : "SHA-256",
          "content" : "b4539d431f019239699691820dfea70a65cf8e882120a72b3a7713ed1dc66fcb"
        },
        {
          "alg" : "SHA-512",
          "content" : "cd589a330ff73905be347c1f97b003ebe3e19a24062309505c6080517dd6b2c711400e8479fb5d93a11c425641072d2752242eb742056b8afdc3e85773a4c4be"
        },
        {
          "alg" : "SHA-384",
          "content" : "77d6ed6d536cd22722e834a9cfadf4cdbeda0f4d0ea866d391f0291ac201fa9054369d51b4ce8bf03ddf16200501a6e7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5796ef725a1e0cd23ce4bd421202a5c2d5941a93705384143eeb9be30eaed12b86fa024bc384938ffbc8a764c4b8a844"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c4bea88772b37186e4f54589f5a7ec35f06ae6d1a9d2e698ebdf177fba06a37a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d2ceb0451fcbaae572532524bcccb4b3898fbac771cd9baad957952a5635c21d8bad239dd0df1b26b984ad1b5f8ad64e103ff6b0906f26c221613ffadd6c4ea7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.12.6?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-modules-java8/issues"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/jackson-modules-java8"
        },
        {
          "type" : "website",
          "url" : "http://fasterxml.com/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.12.6?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.module",
      "name" : "jackson-module-parameter-names",
      "version" : "2.12.6",
      "description" : "Add-on module for Jackson (http://jackson.codehaus.org) to support introspection of method/constructor parameter names, without having to add explicit property name annotation.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "64d9623e71a4d62b7184701d90d310d1"
        },
        {
          "alg" : "SHA-1",
          "content" : "6149920352cfbdde97e6a3d35437260a72907761"
        },
        {
          "alg" : "SHA-256",
          "content" : "bcd0e6411465100f2b90c9d7c940d191ef037079662fe82d8aba995511206d42"
        },
        {
          "alg" : "SHA-512",
          "content" : "5f615d11eb63520212af566bd6aff748de9e82e225899dcdd2f35f1e7dca9bfe47f0864f0431e04f9b232569082f42affeb39335b9a7025e190b3c84012168e2"
        },
        {
          "alg" : "SHA-384",
          "content" : "437d5d02d235d14bee9e55d0e549fbb0cf5e503abf659a8b86df0bd944e4e1de4e0afd37d747a0eaae2cb7252b9bafe3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "cf852068c0e482bb7a5edad75b88dd76bda9c7550b74a119b4788f27a09443ea297409c6821b45ec5bd4ba69024b1b50"
        },
        {
          "alg" : "SHA3-256",
          "content" : "381054c8322730e31190b9d1716a072cbd3efadd11cc5790f88c31cf6108c8f4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4a6e87066a4130d7077f6ef09114198a30b30016f3b67ff8aca6bb29f39b3d379f0bf9ea12b00fda0a45dcb69bc2484be57b92b4137cdf5077eb6c0d0ed36be0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.module/jackson-module-parameter-names@2.12.6?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-modules-java8/issues"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/jackson-modules-java8"
        },
        {
          "type" : "website",
          "url" : "http://fasterxml.com/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.module/jackson-module-parameter-names@2.12.6?type=jar"
    },
    {
      "publisher" : "Pivotal Software, Inc.",
      "group" : "org.springframework.boot",
      "name" : "spring-boot-starter-tomcat",
      "version" : "2.5.12",
      "description" : "Starter for using Tomcat as the embedded servlet container. Default servlet container starter used by spring-boot-starter-web",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c967cd03a6bef373b4f02a9314e09db0"
        },
        {
          "alg" : "SHA-1",
          "content" : "15fe18ed97e21ca94e86e6cdd54ddd2baa6964a5"
        },
        {
          "alg" : "SHA-256",
          "content" : "cba38d192023500a8b6e35f76a3e07a6ba927fbe472229d651138b1b098c5145"
        },
        {
          "alg" : "SHA-512",
          "content" : "4b4ca724e520cc229c3111e742da6037932fa143c4e1df1bed8e1a3afb8566a394f84a14b749d4708693728fafa79b69a4900c996db21f563f5887faca1177d8"
        },
        {
          "alg" : "SHA-384",
          "content" : "44119dfc70a3a2edbc8bd0dcf0e5750e7338e8d27b752e31c3baa957c9a2b894da08dfd7e5550e9e2aff8c587edd245d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "30166c774444c1a915a39db66ac0f3c992ecb19e2d8714e93dfee26fab8b8ad0cf4f48d7c247d04165c07f4bfff11c8a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "51e1823b9b9eac3076ff64e706a2003b00e539451f5112d1c086510701de2d25"
        },
        {
          "alg" : "SHA3-512",
          "content" : "63833aed62e2ec013e1a485f01b6214594f9c1ed72d88cf46bcc980229cf325ce24bddc3e51ac1972fb1eca608787aeeb9b11a089a0904cfc86ffa4b848fc616"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.springframework.boot/spring-boot-starter-tomcat@2.5.12?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://spring.io"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/spring-projects/spring-boot/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/spring-projects/spring-boot"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.springframework.boot/spring-boot-starter-tomcat@2.5.12?type=jar"
    },
    {
      "group" : "org.apache.tomcat.embed",
      "name" : "tomcat-embed-core",
      "version" : "9.0.60",
      "description" : "Core Tomcat implementation",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d44c65e29d1a56777c9fdd2453f02159"
        },
        {
          "alg" : "SHA-1",
          "content" : "0e14045220243804544ddb168cb532f4640a220c"
        },
        {
          "alg" : "SHA-256",
          "content" : "7f7ce6b70a0750202d8ef7f4f8832fc59d6b474d303c7135cba6646d95a1a314"
        },
        {
          "alg" : "SHA-512",
          "content" : "3302b2504b9881f4ee8d1570b70429859f6d3bb506fe34903f6643f21377efd4cb40b6569ede018f71b0916b277cc512add3a5cbf8d9982f59e62101f1622766"
        },
        {
          "alg" : "SHA-384",
          "content" : "0f89d01bf7b4730b5ab6201b03a58e5711dffd2b0d242f6df68023d247c8a9acd297d7a86825093d7a37db6f52808b35"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d054665b443d80199a2fd04dd2080bc16a3238d465fb79a6528c3ff44c36b05aa2392bc53216cce6a00ab9466342ca52"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5580998d1549d171d4f7fe4bda8b6b8809e3ef40c243ad712f707a82c3dec635"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ff7adaa28d58e0b45a42f024e6f70bf474f62f57980a0e8bf9af532e8b34710bb52980336290baa6f30678dad1e43f5bbd41a0359001d59511ac1c5b84360728"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.60?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.60?type=jar"
    },
    {
      "group" : "org.apache.tomcat.embed",
      "name" : "tomcat-embed-el",
      "version" : "9.0.60",
      "description" : "Core Tomcat implementation",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "99bba291948e6db87de404569b2be6eb"
        },
        {
          "alg" : "SHA-1",
          "content" : "46dad1a278f348ca73466e0b73132bf4c4892c06"
        },
        {
          "alg" : "SHA-256",
          "content" : "526e7cbe8d6e3b35e5e355ee299809d5acfb4c9cc948ca1670db6508b07f47be"
        },
        {
          "alg" : "SHA-512",
          "content" : "e81fa0823d6a4843f5cd65d3001ed51a47bd29b1dfec26c2ae6bb8a5195523076a8a6926da79150cd49ac5ecf0ae2c8773275b76f5053fc58375236e1b2015c5"
        },
        {
          "alg" : "SHA-384",
          "content" : "3f8a58680c9e89fa33e868071d053ae7d7a5ed68bebbba5c95fded0d4101137892ea66c7da70b57fe5481fada247f3ff"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a3b5c1db218c1a87b83c0032a6b7099db11455f1be0db87b582357c515c9e5d04c60b294d8881119aed3fc003a0b789e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "eef13678dcc4966da4545680531420b8d3a424de6074c45f0ac305dd9c1cd7e1"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fc56e3b461cce6ff0356b5a6139d3f1bdd04d2ccc351f056841eaa0beb5f3b4df8351e3d40e4dff63d186d91a53150177be648aefde56ce6df6b31ee28d583c1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.60?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.60?type=jar"
    },
    {
      "group" : "org.apache.tomcat.embed",
      "name" : "tomcat-embed-websocket",
      "version" : "9.0.60",
      "description" : "Core Tomcat implementation",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "15464af3b2cdd9087643af53e1cfebeb"
        },
        {
          "alg" : "SHA-1",
          "content" : "a88262a55ae2c4b5404149a48122523688be341a"
        },
        {
          "alg" : "SHA-256",
          "content" : "673b88109fda4344c484d858a6ad8b8dc87336d9f317a93e3b6ac0ce850c7326"
        },
        {
          "alg" : "SHA-512",
          "content" : "209a9a5ffa41a892d710179e82f61e006d3db9f5f384714e3a7222e83bc43da8557a750f167d62568fbc4dc34a09a69006aa2d460f3ef786ad34dd26bc4723b7"
        },
        {
          "alg" : "SHA-384",
          "content" : "8167fef876b4eb61e8028c7286c99bd530bd4e8bde8069d2a2e77110b594178659b9e0427fb6931a2df3ef9f398ce456"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e2d6ea027ee07577aeb369b7e6e0f3aff6ece130c3674b42bc939f70e0d4a059fbd3e5c22158e8ccae953f5c3c007fd2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "af946b40d668739b3a8d2c5f53342b2213961b17d45501ace1ba22b740cc2ed4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3c47313ac89811402b632f8224ae282ab95c8edad98348ab864c9fa588379ef1f2efb127a7576c4a11954eb54bd7b353331cf5ea111b3b7f6682a4222522916e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.60?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.60?type=jar"
    },
    {
      "publisher" : "Spring IO",
      "group" : "org.springframework",
      "name" : "spring-web",
      "version" : "5.3.18",
      "description" : "Spring Web",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "68bf9d2892d68a1b19060647d6605f24"
        },
        {
          "alg" : "SHA-1",
          "content" : "8db103c4109e925ec6f5fbfe577d447d3e95ded5"
        },
        {
          "alg" : "SHA-256",
          "content" : "7918618bd44e82fee77ed878e86e556353370c66d1703344b2f5f6a795c9669d"
        },
        {
          "alg" : "SHA-512",
          "content" : "f95b6ba21e635af8e43741c7ecac53c9ab1fb4978b1f7207b031495a9e30bf09d465f9d598a1169ea2032d0605f20aeb30cc0c8ec093cc0b7ffc7706c9e2f863"
        },
        {
          "alg" : "SHA-384",
          "content" : "7b765494c8d2f0ce6ad2a934344dcf0b2d35f0e03f3f7089b7c959925ab4fe24673ac8379f71fcb985060ddb255145dd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e59fcfb42912c533a322add76a795cdf22d69890bf7c774dff040106becac874f1b6c9aaa34879a9ed0a0ad02c0fdcbf"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8c975ad894681a49edb927bcef787458dfcec68b458e599e85c1dbe139b5e7bf"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f4501e9be315745416b0c900f297042c408a106d5c6ceb5a23a28526f64819d63aecc024794d13cbb0b29401185e002df4cb70629a8ed1315a0e4bd1b6c951f3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.springframework/spring-web@5.3.18?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://spring.io/projects/spring-framework"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/spring-projects/spring-framework/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/spring-projects/spring-framework"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.springframework/spring-web@5.3.18?type=jar"
    },
    {
      "publisher" : "Spring IO",
      "group" : "org.springframework",
      "name" : "spring-beans",
      "version" : "5.3.18",
      "description" : "Spring Beans",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8afc1c508b017da98daf0f9e1a6a9d2c"
        },
        {
          "alg" : "SHA-1",
          "content" : "3f0ea6598a5a1eae0a672f025a33a0b7e0d6dfd3"
        },
        {
          "alg" : "SHA-256",
          "content" : "e962d99bf7b3753cded86ce8ce6b4be5bed27d0b59feeb2a85948e29bba2807d"
        },
        {
          "alg" : "SHA-512",
          "content" : "9695f878109a3d78c03a52031bac5841088097de8679711768ced7d6186747bb23f70acb97d01aba275fc4b054e40f2fe2fc28e2373678ba5e88fba4a93bbe47"
        },
        {
          "alg" : "SHA-384",
          "content" : "ffeda3567ee7bce5b0c0fe56fd1cf02e7bd229a4063e943ea498a8107f853dc77051f4641546a750edfca5f70e53d81a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "036fa1333fff5abdfa373821b46bc5f69f69ce6d535b5af798568a82f9489224e7c9502b79043aceba4db34462680fab"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5d2487a54db2fd7dab8b68084bafc54fb14341198f07eae43768f7142f3a513d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0cf1cb767d8b0c87f9973da7f7725fccd6075230cb55f1cbd741677ade055480b1b5cdf72ec03472adb8ecd79e3e9914314835e0e02db7aa51d1764800ccd5bb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.springframework/spring-beans@5.3.18?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://spring.io/projects/spring-framework"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/spring-projects/spring-framework/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/spring-projects/spring-framework"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.springframework/spring-beans@5.3.18?type=jar"
    },
    {
      "publisher" : "Spring IO",
      "group" : "org.springframework",
      "name" : "spring-webmvc",
      "version" : "5.3.18",
      "description" : "Spring Web MVC",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2cf4d20d68efd5b9adb8aa9fe719ed0d"
        },
        {
          "alg" : "SHA-1",
          "content" : "806b4ac997761daa32cba3f766d8ac09c132fe81"
        },
        {
          "alg" : "SHA-256",
          "content" : "22bc86890b53dab50522bd646cd57180616a651da45ae588d5e0e1f72aa2bc7d"
        },
        {
          "alg" : "SHA-512",
          "content" : "3dc7281d612278e2796be26a5b8ca0906de71d0b1a735430eb31ff63ba0008c58242f4a19b53255093f3a7fcd6da815e5a7c5bad7a4a9ffaf62029964b44695d"
        },
        {
          "alg" : "SHA-384",
          "content" : "5f4e0a1f4e34f772abcd0d7f57aa55bd729ff0fb96e7183e9903a29a16cfd993bf0ee664a94dfe40ebf8218804102f40"
        },
        {
          "alg" : "SHA3-384",
          "content" : "343df9577fd3676ed862bce83817eb6097ddef34dc2ecd0875525f80da237637b8e57cf006811d82f008fc92ccb7ab50"
        },
        {
          "alg" : "SHA3-256",
          "content" : "48fc4ddf5e7918bd14ad89ddbc75e6f7c7c67796f196431f707858f3a1528654"
        },
        {
          "alg" : "SHA3-512",
          "content" : "dd732440e46e363e2a5c85710f3844bbdee4a7d6915e7510901d067c41da381dcb330cc7cd72b3e3561c82593e87fd13ed121a338bee84045d9d50a013044ab9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.springframework/spring-webmvc@5.3.18?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://spring.io/projects/spring-framework"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/spring-projects/spring-framework/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/spring-projects/spring-framework"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.springframework/spring-webmvc@5.3.18?type=jar"
    },
    {
      "publisher" : "Spring IO",
      "group" : "org.springframework",
      "name" : "spring-aop",
      "version" : "5.3.18",
      "description" : "Spring AOP",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b1be5b3d7f482926b4c9c55fff219fd0"
        },
        {
          "alg" : "SHA-1",
          "content" : "8e9cce60c60257ae1d5b3cd675ec3a8286ed1955"
        },
        {
          "alg" : "SHA-256",
          "content" : "8678295dd6dfd35960f220087480ec1741a448e7ca018ad6525935672584ee88"
        },
        {
          "alg" : "SHA-512",
          "content" : "34babe32287bf2914fa12e5dff8a39e434056a523b63f037a680934d2478ef8a49f22a8643fe68d022d9c519166d9c04a7caafbf46d4cbbdf9c33a4bb4032463"
        },
        {
          "alg" : "SHA-384",
          "content" : "d9c0085c2a852632f68e91ef31252c4787e17662549a4ad858d3e07fbdbafe8730f6d2a75207e8c19ad75c72bfd4cfa0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "eca9524e7798d553625572456bc38798dfa532ea4cdf3ec6933d480128ad04173be4686124a92fb615ee6aa33986a599"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e6f55ac2720d77f82d0408f5496a02ab76c407232444b94b8c3c7f7799210f65"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4123256e1992bb05ab56ba2e1e98feaf7c02339647cd49c7508fbb24ab8ea346b3dabad264d02554d1d6aa88a5f56a1727d66acd583dba31a70c20ee12c22013"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.springframework/spring-aop@5.3.18?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://spring.io/projects/spring-framework"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/spring-projects/spring-framework/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/spring-projects/spring-framework"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.springframework/spring-aop@5.3.18?type=jar"
    },
    {
      "publisher" : "Spring IO",
      "group" : "org.springframework",
      "name" : "spring-expression",
      "version" : "5.3.18",
      "description" : "Spring Expression Language (SpEL)",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "240d2a18a4e363082c9748a9663fb7b8"
        },
        {
          "alg" : "SHA-1",
          "content" : "61c51831e49a85fc5bf925253ca63f46fec6f013"
        },
        {
          "alg" : "SHA-256",
          "content" : "c0fea3c2a8dcc231070a74a473f7589b39db22fbd03edf4fd3f4740434ff7814"
        },
        {
          "alg" : "SHA-512",
          "content" : "4749443a12126e225361aaae2b2e06070d6d4dbfd29169dfcdfe6914de3aade5bb83092f17acd5917ccf8787f7e5e4664ef55e597c7d24a9cd069ad4ce0bed51"
        },
        {
          "alg" : "SHA-384",
          "content" : "57fb01d8b2cf244e47757aa5d7f16ab3bd3a9719e2603719eae50b9e1c2c43d465f93e9b20b53aff71e4a50b8c45e1b6"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1b5e091d4002b45da700d20c38af0fb845ca3d6d0c87a3f2b429c7d9897264387f7a860b99d29eddca845e423b749d5d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "824afcd5e837ae9258086941becc99c6d1f308c79642fea7d1caf2b30a43d39e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3750aeea4cde05236bd76f604a9cb58ec5b0113f1debcaba706a25b1c2f78b1313695889c22a34180905f925bdd1d843fda8c83bae1d0d2b2cffabae63a31727"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.springframework/spring-expression@5.3.18?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://spring.io/projects/spring-framework"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/spring-projects/spring-framework/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/spring-projects/spring-framework"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.springframework/spring-expression@5.3.18?type=jar"
    },
    {
      "publisher" : "Pivotal Software, Inc.",
      "group" : "org.springframework.boot",
      "name" : "spring-boot-starter-data-rest",
      "version" : "2.5.12",
      "description" : "Starter for exposing Spring Data repositories over REST using Spring Data REST",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8dd40897670a95a94f4ccfcf1811725c"
        },
        {
          "alg" : "SHA-1",
          "content" : "4391a04014c493c72e058c540a1fc5bdf776ac3e"
        },
        {
          "alg" : "SHA-256",
          "content" : "23179e1435b2e2fdc7b1aae786d4352394e7f4d6dec723e01cb1ab48d0d11451"
        },
        {
          "alg" : "SHA-512",
          "content" : "fa28c275e542ad04bf15a18d4a0d4d25f1e6f3498fc52b367c6ea25cef5bdc53c4d1995c4c5e00e67a052972bef692147cb333e34cc25e7d8a86407b75323e7e"
        },
        {
          "alg" : "SHA-384",
          "content" : "f9492fe6e7b86a90320a0c33672b2207078a0355dcdf15b596eb98f8fb78b3706f7af258abb96a3979af4c7c365f8def"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f5a9cc5d9a46cf23074be3c1f64b9f2f769ae0e566fd73444d531c1d36b7b54a14040399b22f37c794b13619371ece78"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2e6440a3e8bb793db146bb845f3b495f78e8567eb97d2af9eaeb2f5e324b54e4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "94cebd91a8e3618a37a96835d58e14dcf4347a242bb9a7453a77e4ca8acb389ce7cdd96120f3947d9358c7d6e06aa8b61dee11acd31fe4313a84f7ea91aabc13"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.springframework.boot/spring-boot-starter-data-rest@2.5.12?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://spring.io"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/spring-projects/spring-boot/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/spring-projects/spring-boot"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.springframework.boot/spring-boot-starter-data-rest@2.5.12?type=jar"
    },
    {
      "publisher" : "Pivotal Software, Inc.",
      "group" : "org.springframework.data",
      "name" : "spring-data-rest-webmvc",
      "version" : "3.5.10",
      "description" : "Spring Data REST - WebMVC",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6909b906b3ecf6a72d7154ced70a4cb0"
        },
        {
          "alg" : "SHA-1",
          "content" : "ced2d9730e8725111c4d15eff3d62fd48c913e56"
        },
        {
          "alg" : "SHA-256",
          "content" : "d02533707c4768a5dc188361b93563d986b9d1efc28e7f6e829141c6d57f440d"
        },
        {
          "alg" : "SHA-512",
          "content" : "3070836010cffeee9faa79225b9db4c24bda90e53b2cdea4c26d4ffb2535527de43cb8e62685fc9500732724131e2d95204a66786057e658c162eecfdc4802d1"
        },
        {
          "alg" : "SHA-384",
          "content" : "b41e3d674e577d070a7e6d3fc00ce1080e668e5f19e6cd6af5ace664b984d8c39655b088310d6a4b782b0370cedb08a3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d725ff50a4e0314ced041acc065765564a85a03dfde59372dcfb81402a6cf1358978d68d8ba29e0bba3fca4ff042e8a8"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5779489f821ab98b83629c31b386ab0bb4699b3e9bc2db85377f13236be19e4b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5015ee10c8df521fea58af340d029e94d76cb017110df9c6982f0e16cd0d0bf89252454e8f903193028b80412c37196115ff67b9ada573579167266fcbad931d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.springframework.data/spring-data-rest-webmvc@3.5.10?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.spring.io"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/spring-projects/spring-data-build/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/spring-projects/spring-data-build"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.springframework.data/spring-data-rest-webmvc@3.5.10?type=jar"
    },
    {
      "publisher" : "Pivotal Software, Inc.",
      "group" : "org.springframework.data",
      "name" : "spring-data-rest-core",
      "version" : "3.5.10",
      "description" : "Spring Data REST - Core",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4aa73b1540d388af32173df8d6ac4322"
        },
        {
          "alg" : "SHA-1",
          "content" : "80fe9d1fb6823a5ba2849b4035fb089790868343"
        },
        {
          "alg" : "SHA-256",
          "content" : "c59dc0bc40b0d2893742569d6c6cbcf1e02455fbc9eeb3b0dbedca55b798c293"
        },
        {
          "alg" : "SHA-512",
          "content" : "cc64172dc53f08d9d26ba1cb19a7397ed2a92bc7f687fd0539a1f1f37f45160f0406be386cef7c22c4c7a670dbd7ee14bacd70d4f9ba303af44b744a939c23e6"
        },
        {
          "alg" : "SHA-384",
          "content" : "4e82d7ad0d5f207c57327cd256c65c8966c426ba19200375bfc93ce40a287733c60c4e1bb0b52d96f06465b6c07130b4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "75ca833a888e0dff5a63f65d2645c65ef3b74e959be1826ceb57a1d68e03a2056f4a73c732868c062683ab4d16443207"
        },
        {
          "alg" : "SHA3-256",
          "content" : "cbaf8e4c12f2b260b79f37c2204b9870c8cd7d4d438dc730f12dedcedd36fd3e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f0f24c886bfa8bb31b217d10a6cb8a5a2801fffe6f76db8d0e40a643e3e55436f23214c8d4258ca4472714a860dbdcfb361a345d4582433eb345d735de8a53ad"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.springframework.data/spring-data-rest-core@3.5.10?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.spring.io"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/spring-projects/spring-data-build/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/spring-projects/spring-data-build"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.springframework.data/spring-data-rest-core@3.5.10?type=jar"
    },
    {
      "publisher" : "Spring IO",
      "group" : "org.springframework",
      "name" : "spring-tx",
      "version" : "5.3.18",
      "description" : "Spring Transaction",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fc71fae4e214d2a00cdf46fd4f4f47a7"
        },
        {
          "alg" : "SHA-1",
          "content" : "a93f91200e40b22ac0fda1308ecac081b820b099"
        },
        {
          "alg" : "SHA-256",
          "content" : "e976af3135e466533ece3ae1fc2fa1ac893f7f766cbc4321b92579e5768544ff"
        },
        {
          "alg" : "SHA-512",
          "content" : "2a505a42d3e426505f90719812844aca484780e44d9c23ed86cde5bb8fcaeb795132ba4cfab6b10c313b62606ac15338baddf615d79cb7176c496f0d982bddef"
        },
        {
          "alg" : "SHA-384",
          "content" : "628bd63b567688c9117cf3ad6af94dcd5f7d876817580854599f337b1416e0afb0b928d4f939ed985d55cf610415fcaa"
        },
        {
          "alg" : "SHA3-384",
          "content" : "82999ab31924a2fd5a4e85fac6e6e53ffdb149e198c391eb6879ce8974f09fcf6097cac9d9a498242cab7d83b21fa67f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6411c3d55d193aa54b6cb13ce7a23b716802731ca1e19f767649241904a37e40"
        },
        {
          "alg" : "SHA3-512",
          "content" : "505398bdb331bb5b9e31a74131ed0aeff7fe5b23e29000c12571a253e62af8aa81a2a9cede0edfd20ffc14fc979ecefaf700b34f65f1ae2ba6aed5b42368be5e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.springframework/spring-tx@5.3.18?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://spring.io/projects/spring-framework"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/spring-projects/spring-framework/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/spring-projects/spring-framework"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.springframework/spring-tx@5.3.18?type=jar"
    },
    {
      "publisher" : "Pivotal, Inc.",
      "group" : "org.springframework.hateoas",
      "name" : "spring-hateoas",
      "version" : "1.3.7",
      "description" : "Library to support implementing representations for hyper-text driven REST web services.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4f96b4605a657db6137dcf12359c6be4"
        },
        {
          "alg" : "SHA-1",
          "content" : "c5b5e4156471bd73ff452aa68e3cc708ceb1d85f"
        },
        {
          "alg" : "SHA-256",
          "content" : "4fb7368b7444e6e4fccf0665e7fb93bab94c65430640486a6ffa5cd3e015d4b6"
        },
        {
          "alg" : "SHA-512",
          "content" : "f9ff212cdbc8e3b31685a2807ce63da036694f421622b5fd1a0e37521ac67b5cc479a6752e736fcea72ce4f200f93aa0201917035afd276d66051a3d233788b9"
        },
        {
          "alg" : "SHA-384",
          "content" : "5a0ce25847c33f11248098acce599bf1337f9f9cd7c7649a5ef83b2f1f435ff54508b56a2eacbd8046a7c5ee49909eb3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c3f169ce7b053da40ef79f63c26ec3f3bfe78ef83c5b0e97e6fe82a86aa9de31aca41d6513bad76700be301f2c5b25ad"
        },
        {
          "alg" : "SHA3-256",
          "content" : "704c0b6a59f4e2a9a619e972a98da97c6398ab45b40de02a3b73ca23c2c8779b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "429cde84df352c1329f17d1bd95662d979613af00f557a846734d0783bd5d77ee647a91dfeb9a349a9ed70ffa9ecdd3dc5866ef3fe8cd3cfc514331dac880df3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.springframework.hateoas/spring-hateoas@1.3.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.spring.io"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/spring-projects/spring-hateoas"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.springframework.hateoas/spring-hateoas@1.3.7?type=jar"
    },
    {
      "publisher" : "Pivotal Software, Inc.",
      "group" : "org.springframework.data",
      "name" : "spring-data-commons",
      "version" : "2.5.10",
      "description" : "Global parent pom.xml to be used by Spring Data modules",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8dfc3911f9944ed46f6fda1a42b9a4a6"
        },
        {
          "alg" : "SHA-1",
          "content" : "55040a7d9413d0e9371aca04473f2f362edd3507"
        },
        {
          "alg" : "SHA-256",
          "content" : "49920a4203c067f09b0b43bbebc1b95086f44e3dd08fd0795bac13d6173e768f"
        },
        {
          "alg" : "SHA-512",
          "content" : "970167f35e1e51c0e5ad6eb0fe6936daf56febca5d8ce179aaa65ccd86cc0e2308add061b081f38b75b138c0f1cdd0f4299783003cec08163dab60fd83326db4"
        },
        {
          "alg" : "SHA-384",
          "content" : "aa0c1dd43ad75c719d385d179f1cff61fded8039d1179a9daa23f709091f03a81e03b8d07ed45ee3ff3280ebe9e91a6c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "602f7100bff4154f6a49cdf544a365c248dd24e7d9d2de04cc6fb9547417f4eab83a309e2189a880e0172f45f5bb503b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "cb4d405324a7f50b1d4d35cb368f9724e21b2b8bb538d5bebfab1b4005d895ea"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3bf0d0b8335902ea78255ebd650d483c8c950d363f354c53a0ac991512bbf4d6b3818d97e636cc2c9eda192abcffa4bb6a7dec03fa7545b1afa216713b5f2bb6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.springframework.data/spring-data-commons@2.5.10?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.spring.io"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/spring-projects/spring-data-build/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/spring-projects/spring-data-build"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.springframework.data/spring-data-commons@2.5.10?type=jar"
    },
    {
      "publisher" : "Pivotal Software, Inc.",
      "group" : "org.springframework.plugin",
      "name" : "spring-plugin-core",
      "version" : "2.0.0.RELEASE",
      "description" : "Core plugin infrastructure",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a89cd7b77db3ed7d0c9ea71ee9784e2e"
        },
        {
          "alg" : "SHA-1",
          "content" : "95fc8c13037630f4aba9c51141f535becec00fe6"
        },
        {
          "alg" : "SHA-256",
          "content" : "6e6d026d6b572495533692173a264c6959f48d5ef7f3d6faf4555a577d4a38d2"
        },
        {
          "alg" : "SHA-512",
          "content" : "2ea2c22caf7c89a7878a156c7adfb1154c9f194a4cc2d77aabd5f003d480a5705b86535fc9a5afcf863985437c820356e41b8f2f5e51f3d869ce63c2dcf67c60"
        },
        {
          "alg" : "SHA-384",
          "content" : "b3fb4671c3cb504a0ad0213e55d1adeada8df67d47eb51f7fa2826ba6204aa661a3bfc742d5080c840b90c08eaaaf9d1"
        },
        {
          "alg" : "SHA3-384",
          "content" : "cb2555d329d3a2e5904bc50021eee7fce678e4d769144fd19fcd3b1e135dc4a330d048be91e01133233c55edbc1c1434"
        },
        {
          "alg" : "SHA3-256",
          "content" : "17e03ea8f3cc139df934330987e13e91c3b1fe455aac7f6c08a8f80d74fda9a1"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c56f48c8ec1cf9a4c0bd0dd6ee21f2f3070b8f75fdc949622e5e125975cc1221aca1fd4b8ed2ba96bc3cfeca397b61e286ca417c21144580436d932522fb2aa0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.springframework.plugin/spring-plugin-core@2.0.0.RELEASE?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.spring.io"
        },
        {
          "type" : "build-system",
          "url" : "https://build.springsource.org/browse/PLUGIN-MASTER"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/spring-projects/spring-plugin/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/spring-projects/spring-plugin"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.springframework.plugin/spring-plugin-core@2.0.0.RELEASE?type=jar"
    },
    {
      "publisher" : "Atteo",
      "group" : "org.atteo",
      "name" : "evo-inflector",
      "version" : "1.2.2",
      "description" : "Evo Inflector implements English pluralization algorithm.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "da63c9ef600b74c760d81a09f9053d04"
        },
        {
          "alg" : "SHA-1",
          "content" : "2551aad98d65ac5464d81fe05f0e1516cfe471c9"
        },
        {
          "alg" : "SHA-256",
          "content" : "c485c110870c597ba401dda2c7c5819a3b2e15ee064f539323138302bd591d48"
        },
        {
          "alg" : "SHA-512",
          "content" : "2d60a399908887d50b2abfe69508338001807ea40938891a74ce4e44c68a6af151002e2b2543579ec2c4c1f860c144bd05183775f919a68a35d80a22b5cd6cf4"
        },
        {
          "alg" : "SHA-384",
          "content" : "42425c3dc1f2b8a30ed3e660993ec0d8de5275c1e875966a968646e8fcc2fdb80d4eef8f5b064641ae228d98531996db"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1b028b1bded8e5ade8eddd9cde64874f4698dce2257391a492b83c1f1a4438a255807b5753541f28262af3aa97b6d54c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6217788f54285a7713c127d8a7ceb13c7b5a4627fb0841d346c36b6b79b39906"
        },
        {
          "alg" : "SHA3-512",
          "content" : "323716ba7bfb95bd7b6f35ea449429a649d08807bb87b1dafbb50dae8763a900e481d6d219c55d43914646f1f2b7e0351b266a976bbcb22ab41d840f705c09d5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.atteo/evo-inflector@1.2.2?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/atteo/evo-inflector"
        },
        {
          "type" : "website",
          "url" : "http://www.atteo.com"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.atteo/evo-inflector@1.2.2?type=jar"
    },
    {
      "publisher" : "Pivotal Software, Inc.",
      "group" : "org.springframework.boot",
      "name" : "spring-boot-starter-actuator",
      "version" : "2.5.12",
      "description" : "Starter for using Spring Boot's Actuator which provides production ready features to help you monitor and manage your application",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e7e25761ec93f114d7fc3d734eafb8b7"
        },
        {
          "alg" : "SHA-1",
          "content" : "4d0366d721e2394649a461e7ee151f221c9eb684"
        },
        {
          "alg" : "SHA-256",
          "content" : "4c3473b2ef7c599557c2e2e82d930275fd0e3073699a2701f51d10c9307f1e34"
        },
        {
          "alg" : "SHA-512",
          "content" : "96a51713f10b234fa6f40dd45cb3b0cf9daaf1447f770ad3676e3dcb1ed997bfce3b587a113c4b9d62dcdc67f8cfeebf347e0aeeefd3a26ceda54e58caafe143"
        },
        {
          "alg" : "SHA-384",
          "content" : "82ea4cbddfb8daeaa46ee1f0bcb2142c9d608197ef2a25352c7dd4d0d61de98cb5354463a1f5a5b5f4476245d7d5b228"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b093e2b49e59d65cf7ee3ed23e664333754aff1cb443372671b2f89e9364f622faa7f8b9e1cc0fc32068f9f679ebc938"
        },
        {
          "alg" : "SHA3-256",
          "content" : "642d530a44df80aab87d6901056c41bae35fdf40d2cb459de8c67e2741b06a3c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "78a2d787873001243d4f5c8999bda3002d3d9bb752a9358f0d882ce00e82b23768e82bbf802bda071724d86942795e570254d8f2e1adb51432e5431c0c18b6f9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.springframework.boot/spring-boot-starter-actuator@2.5.12?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://spring.io"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/spring-projects/spring-boot/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/spring-projects/spring-boot"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.springframework.boot/spring-boot-starter-actuator@2.5.12?type=jar"
    },
    {
      "publisher" : "Pivotal Software, Inc.",
      "group" : "org.springframework.boot",
      "name" : "spring-boot-actuator-autoconfigure",
      "version" : "2.5.12",
      "description" : "Spring Boot Actuator AutoConfigure",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "92cf14234178ff3b42f1c86b06df558f"
        },
        {
          "alg" : "SHA-1",
          "content" : "2e5435c7b0849b298b53165ef952fbfc6a742cb4"
        },
        {
          "alg" : "SHA-256",
          "content" : "b680605023f09c07accc62e9b0be9d007d25acd2d5c7b2ddb7d39ce681b51a82"
        },
        {
          "alg" : "SHA-512",
          "content" : "a44236b928eb96676d0d42daad3041df2d4e0640cb942acd6699bf1c3213da1186aa9f3b44b747516acd16c06b31db54e6b9cbcee04d150b9745c104329c17b4"
        },
        {
          "alg" : "SHA-384",
          "content" : "ea4d45ebb3b0d052172c58829d8bea97f89362e60c5af97c0dd57b4f37bbac7ff9749d7c501935bc0cc31958206aa9b4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ed57af5166b202024b8a1e5d2ab3c7d016dde357164d4b86c077708298916009566f41283c689ce042e10810f383409c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a9faad8e8d7ee01613d5bd90b00305924b4a0ff0b7bbd5041c2c54e919611dec"
        },
        {
          "alg" : "SHA3-512",
          "content" : "989f8cc44b6e3c1a1180b5802bbb311ecf1fc895df10e74017d9d6b593402b42512141f09969ab22b392e339ee8a8be834af5d72ba5594de33ba66aa78dd5e8d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.springframework.boot/spring-boot-actuator-autoconfigure@2.5.12?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://spring.io"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/spring-projects/spring-boot/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/spring-projects/spring-boot"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.springframework.boot/spring-boot-actuator-autoconfigure@2.5.12?type=jar"
    },
    {
      "publisher" : "Pivotal Software, Inc.",
      "group" : "org.springframework.boot",
      "name" : "spring-boot-actuator",
      "version" : "2.5.12",
      "description" : "Spring Boot Actuator",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "95697c3e7acbca1ac2b6fb4488373b08"
        },
        {
          "alg" : "SHA-1",
          "content" : "bbe668b28b7b5736e14bec44030065c1f5fabe72"
        },
        {
          "alg" : "SHA-256",
          "content" : "5cb3307a32f7506ce79cbd0e29b6d4da232ee7d766a8e3d3004084fbbf29f316"
        },
        {
          "alg" : "SHA-512",
          "content" : "72d9b30b78c80c2db2a4189552d2643f2c6dd6b26a5e11406e13d28fa53ff8ccc866e7eeecd44d7bbb2dd8f9ae8e3b58fe21ebca9085d054a90cdda105d1c65d"
        },
        {
          "alg" : "SHA-384",
          "content" : "6486cacb027c8dc1b1ac169725b68bc66485faa09c8f22bea6941f51e481c670b9f3798ee72a9f84b076b78839e2cb16"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3ff74d18c384b0729388283c883d11384e02e54b8f7832f71979093c44971bfc135ed3cfde0360c9cf8a4c44bce4a657"
        },
        {
          "alg" : "SHA3-256",
          "content" : "57ce5aa4977732b050ae40890c7df080538d6b0595a334294b3da68bf90230c9"
        },
        {
          "alg" : "SHA3-512",
          "content" : "35ab61fe5de6b5e90dc3055b49c52c69567ab8bedff64e575f0b80f1396ba507bcd48f789797921df50f3c2ae7774eccf62f2a96a22d4876d99ec40b1428fbd9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.springframework.boot/spring-boot-actuator@2.5.12?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://spring.io"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/spring-projects/spring-boot/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/spring-projects/spring-boot"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.springframework.boot/spring-boot-actuator@2.5.12?type=jar"
    },
    {
      "group" : "io.micrometer",
      "name" : "micrometer-core",
      "version" : "1.7.10",
      "description" : "Core module of Micrometer containing instrumentation API and implementation",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0d3375d39802b9bb98cd1a93af366f3c"
        },
        {
          "alg" : "SHA-1",
          "content" : "11e2e84a7bfc13ca5d6f9a9b72d4af831df4cc64"
        },
        {
          "alg" : "SHA-256",
          "content" : "2035a19821953bc76839c576ebc6e0942385c543e6d41bafc6649d4c0364e1be"
        },
        {
          "alg" : "SHA-512",
          "content" : "ceebcc4fe79dd1d87de509526577fd0bca948d767892c42264cd7f899dd53187bb7e455c55b12985500c5cff780ded8fbe17f98e428920648383333a0011f6af"
        },
        {
          "alg" : "SHA-384",
          "content" : "07e8a54e4ffc93de9e614ba55be917100fc3aafeff44b97262b04803bad2197d0908a91824e4a45fa05e6b87081673b4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "02441f5805573d1c15f86ce2b61342cb6dcee01c81583487cb857cfc650688f086d34e62290c97db54e4625a52f40fbd"
        },
        {
          "alg" : "SHA3-256",
          "content" : "838189ab7326d07eeda776ea7b9deacde66487a0de6f458828a14c855d41b397"
        },
        {
          "alg" : "SHA3-512",
          "content" : "33086f6acf3c615e621f2a0677e0da531ee7355df46b8a318808f8fcfc8f87fafbb9840fef5f620751d2e7ee52bb5bc77d6124299b1c3bf3c55b6f1587d61760"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.micrometer/micrometer-core@1.7.10?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/io.micrometer/micrometer-core@1.7.10?type=jar"
    },
    {
      "group" : "org.hdrhistogram",
      "name" : "HdrHistogram",
      "version" : "2.1.12",
      "description" : "HdrHistogram supports the recording and analyzing sampled data value counts across a configurable integer value range with configurable value precision within the range. Value precision is expressed as the number of significant digits in the value recording, and provides control over value quantization behavior across the value range and the subsequent value resolution at any given level.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4b1acf3448b750cb485da7e37384fcd8"
        },
        {
          "alg" : "SHA-1",
          "content" : "6eb7552156e0d517ae80cc2247be1427c8d90452"
        },
        {
          "alg" : "SHA-256",
          "content" : "9b47fbae444feaac4b7e04f0ea294569e4bc282bc69d8c2ce2ac3f23577281e2"
        },
        {
          "alg" : "SHA-512",
          "content" : "b03b7270eb7962c88324858f94313adb3a53876f1e11568a78a5b7e00a9419e4d7ab8774747427bff6974b971b6dfc47a127fca11cb30eaf7d83b716e09b1a0d"
        },
        {
          "alg" : "SHA-384",
          "content" : "06977d680dafd803d32441994474e598384a584411a67c95ab4a64698c9e4cbd613e0119b54685cea275b507a0a6f362"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b5ccb4d39bf7cc8ccc33f0f8fcbab0a63c99a94feda840b5d80fc3ae061127f1475cfb869b060933783a1f2eafb103a1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ef2113f27862af1d24d90c2028fc566902720248468d3c0f2f1807cc86918882"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4fca2f75bdfd3f2ac40dc227ae2ef0272142802b1546d4f5edf9155eaeed84eff07b0c3a978291a1df096ec94724b0defb045365e6a51acfdd5da68d72c5a8eb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CC0-1.0"
          }
        },
        {
          "license" : {
            "id" : "BSD-2-Clause",
            "url" : "https://opensource.org/licenses/BSD-2-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.hdrhistogram/HdrHistogram@2.1.12?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/HdrHistogram/HdrHistogram/issues"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.hdrhistogram/HdrHistogram@2.1.12?type=jar"
    },
    {
      "group" : "org.latencyutils",
      "name" : "LatencyUtils",
      "version" : "2.0.3",
      "description" : "LatencyUtils is a package that provides latency recording and reporting utilities.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2ad12e1ef7614cecfb0483fa9ac6da73"
        },
        {
          "alg" : "SHA-1",
          "content" : "769c0b82cb2421c8256300e907298a9410a2a3d3"
        },
        {
          "alg" : "SHA-256",
          "content" : "a32a9ffa06b2f4e01c5360f8f9df7bc5d9454a5d373cd8f361347fa5a57165ec"
        },
        {
          "alg" : "SHA-512",
          "content" : "bb81a42498c65389366205f4e07cee336920e2f05cc0daae213f2784b1d0ce9a908b038daec20478f23eb00b2bf704f96c5b00f63c99615193ab2a3cc4a9f890"
        },
        {
          "alg" : "SHA-384",
          "content" : "16ca4640dc9d848e6c6d15441897e1b5a9f27f34207b0bb456dd54d8f267b73b348092e548e78634144de44ba3515205"
        },
        {
          "alg" : "SHA3-384",
          "content" : "406c2b5c6f64b0c090568e479b5e6136a04a4e77f8eea65d32b4e2b01deebcdf6a0a851240cdb740c25b5a5e61e6c179"
        },
        {
          "alg" : "SHA3-256",
          "content" : "50ae828358301033542fd7c412e86ee318d5451f89a182e2a679aaf18099d26d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "456c337b9fb385579aae707409ed6a04d08e5fc87b1a46733dca617c22c625bf253dc4747e0cdbf5e7d8b48102d2938cb482b6b688a79aab645a7459c592258f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CC0-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.latencyutils/LatencyUtils@2.0.3?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/LatencyUtils/LatencyUtils/issues"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.latencyutils/LatencyUtils@2.0.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents",
      "name" : "httpcore",
      "version" : "4.4.15",
      "description" : "Apache HttpComponents Core (blocking I/O)",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "be7c67929df007fcac6c8eff5322d3a0"
        },
        {
          "alg" : "SHA-1",
          "content" : "7f2e0c573eaa7a74bac2e89b359e1f73d92a0a1d"
        },
        {
          "alg" : "SHA-256",
          "content" : "3cbaed088c499a10f96dde58f39dc0e7985171abd88138ca1655a872011bb142"
        },
        {
          "alg" : "SHA-512",
          "content" : "f0605e4d521c6e9c7e645905687c519239fa9e2128403a515e6118b0406b503b0865a8ead197f8532186b0c9aaa4189ff5bb301d5b0cf84bd54fa2258d17551d"
        },
        {
          "alg" : "SHA-384",
          "content" : "fffa9cd7434271990e20230ef9c3754f4b198958437573cdec2d4e7063147a765cb0cdf0b79a9688e81ff85dc704c25b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0b72d65d0c3a7d74d1baf1a2fc4e9510e64bd34f7b23f52d436621d2043d81b5395c9b05803e7471537964ac42e2fe94"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3290e3547fd3ea688f30ba6a554c779c784bb209642ec4d48b284ca8374191b3"
        },
        {
          "alg" : "SHA3-512",
          "content" : "230b7196270183aaaf5e89e8d7598a3c65ac6bbede816e222e6d457fe5fca50fbe8ca2cb30ecf161bf4ddf34a08ee3a95d2f559e0aa513e9e730eeb5624b296b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.15?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.apache.org/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTTPCORE"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.15?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-codec",
      "name" : "commons-codec",
      "version" : "1.15",
      "description" : "The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "303baf002ce6d382198090aedd9d79a2"
        },
        {
          "alg" : "SHA-1",
          "content" : "49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d"
        },
        {
          "alg" : "SHA-256",
          "content" : "b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63"
        },
        {
          "alg" : "SHA-512",
          "content" : "da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787"
        },
        {
          "alg" : "SHA-384",
          "content" : "05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "12fad4ef78274b06f97b1243cea6f970088abde082d2de9377d915a34b44f7d7d67807c03e59c849b69f1544e2a9a1be"
        },
        {
          "alg" : "SHA3-256",
          "content" : "87be248f33f241121f54aad61a9a460a79eabefbf1b5b0dd22aeb95b581f727e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8c992c9c569ebaa0bf956a4c5b34fbf5e1ed1c212c2dd896fa216183ee0bcd341e96698af4b9cec7e8880762faa081a3d3a27f51349aa457cb8e373e4f57c788"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CODEC"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/commons-codec"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-io",
      "name" : "commons-io",
      "version" : "2.7",
      "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "87709c85b69a685ddba69c65fe6dd6f9"
        },
        {
          "alg" : "SHA-1",
          "content" : "3f2bd4ba11c4162733c13cc90ca7c7ea09967102"
        },
        {
          "alg" : "SHA-256",
          "content" : "4547858fff38bbf15262d520685b184a3dce96897bc1844871f055b96e8f6e95"
        },
        {
          "alg" : "SHA-512",
          "content" : "bc2dd1790a26cf48a1353226d55c8b5334aa65c3f2bf2b19efba4d007348888f2bebe20f76eba9e3685cf1d109b48dad7a597d5278078be4e9deb0d75c12bdd7"
        },
        {
          "alg" : "SHA-384",
          "content" : "0f2aefbd798c73410274bb9c0590ebf94b116ab7e37a31e6a48a1f2f4451d2eb2a6390e1098090287d45f782d220bc80"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f29b55f6936dc645678069812e9be3ad1b588348e488326fad22a5102553c184183be7319e83fb76cf2af64615a43216"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3fd90c753bdcfc7144da3e91c07a71822f7ffc3e05afdfa927d19e09e220a615"
        },
        {
          "alg" : "SHA3-512",
          "content" : "bf72edb17a5711284de88c763d49d4fcc1f2990eb8fac5143948f063e0fe5fbe78a1da45cdd234876778daf5d1c9cce992e8c1ab5bd64bcda08a3d2ad7bbd391"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-io/commons-io@2.7?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/IO"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-io/commons-io@2.7?type=jar"
    },
    {
      "group" : "org.springdoc",
      "name" : "springdoc-openapi-ui",
      "version" : "1.2.32",
      "description" : "Spring openapi documentation generator",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b4655bb295c09862610469ccf42c0066"
        },
        {
          "alg" : "SHA-1",
          "content" : "473ccb692becebd121577fdff0b61e4c9914b3eb"
        },
        {
          "alg" : "SHA-256",
          "content" : "91792e7e30d22827ae304090f0a94fc76b4f7671d36395d8a3461dc18c55b917"
        },
        {
          "alg" : "SHA-512",
          "content" : "b7e16abefc9221f1f7de0e23249217dfadaf4799e1860e86185ab3c09c481563dd9925b8f74fe381c36f33d819eb044fd2b403a53e8c9f003dfedceffe9218c2"
        },
        {
          "alg" : "SHA-384",
          "content" : "36bfcbc134b73bf6a4eed6243fbd7538b075fc860b2606e510432ebf5485103cd9d2d120b12144d7a1983bc5339dac44"
        },
        {
          "alg" : "SHA3-384",
          "content" : "245472404c3e6e051e855cf022cd812683ec3425006a1e01abd365b393ef1abbc4952da05fbe4ff0c125f36fa7488032"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b5588fcca0a1dd3ff40b7e90cd92c36f5b3fb3746453c385d0048698c50684da"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9088b0fe507ac2dbcee63b3dfe5f1dbd270f41e8e355bb2dd345770c73290760d9384fdad1fe4a209dfcfb3765a58199e5cc46f9154d3ba4e9f1f2c3ed85b884"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.springdoc/springdoc-openapi-ui@1.2.32?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/spring-projects/spring-boot"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.springdoc/springdoc-openapi-ui@1.2.32?type=jar"
    },
    {
      "group" : "org.springdoc",
      "name" : "springdoc-openapi-webmvc-core",
      "version" : "1.2.32",
      "description" : "Spring openapi documentation generator",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "93a0a50f76506bfa2fe4f11d5e5026e3"
        },
        {
          "alg" : "SHA-1",
          "content" : "caad2a403f73fb61eb2f98c592f8785f76fd827a"
        },
        {
          "alg" : "SHA-256",
          "content" : "973b13759b0ae116f0cfd9b2d9ac0b1171799d49509d80cf85658375db22c077"
        },
        {
          "alg" : "SHA-512",
          "content" : "880fd05cca34306e227bd77e75b3ccb607d7b24a4ac6524e9df0935d80dc2c928d30f26d9d2aeac0f69ffaf0580afb87afd2c52d9a21cc70a664caef20405d8d"
        },
        {
          "alg" : "SHA-384",
          "content" : "9051728462fc563957f960df51885ec9f5309a5f7864e860b70db0552b9244559c5b6e018abb75273ee47d2ebcbb31c7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7a07cfdf966c2817c080868922fc1f4ebf4cac29436ce9df258e03643123f782e1251a5031e59ed511dda6d888d1c6a2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8b03f31ec1a66c039c5ef5993bbb082c020a6748c3e9a997002142d9bfe5bce5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3809bfd5493edae8e498513319e49b5cd31418913b2c54962f12a2ee61f0dce54b0980334bb3826b9a9ad32c437b5ecd1e46902018bf53a3ae2aa08de7181d3f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.springdoc/springdoc-openapi-webmvc-core@1.2.32?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/spring-projects/spring-boot"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.springdoc/springdoc-openapi-webmvc-core@1.2.32?type=jar"
    },
    {
      "group" : "org.springdoc",
      "name" : "springdoc-openapi-common",
      "version" : "1.2.32",
      "description" : "Spring openapi documentation generator",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e2aacb4423b0c11d33bbe090a251420e"
        },
        {
          "alg" : "SHA-1",
          "content" : "089dac17e97c4e41fcd0227370f9a3213e99574d"
        },
        {
          "alg" : "SHA-256",
          "content" : "261e12fa645c9ea74f004745268a7d15957816815c91bf472c29051eb06c88fd"
        },
        {
          "alg" : "SHA-512",
          "content" : "c6882aa24c98109f0ca7afe8e5bb0e815d1583301ae2735c3897195bb273396651f72f4b2379a9345a3bfdc3a75acff2e3e10fde23f4edd4b3ec2e6d6a8864fc"
        },
        {
          "alg" : "SHA-384",
          "content" : "bcfaae974dc22a3e47dc14919398f643a656e39c7867ec918252caa8aaaeb4b0894bb56f3330c8bc7dd1ae68be4254f3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "fc40868040dd7848b5ec132108a2fe7ae3a0a87673be8d74fea475513a071bb99020ba1519f9594083fe802c3fcd09ef"
        },
        {
          "alg" : "SHA3-256",
          "content" : "94ce24ac3861a0f65cab476216121e89ed74a5de3bcf4bb198432e1059543507"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d7ee63d8f7e7f0ea0ef50099c8a0f8aca580512c8e5db7a05c89b1d7def9d8ffee4b035374b7434575cdd0e855323850a1bc5238772547910d4f4186d50f2f10"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.springdoc/springdoc-openapi-common@1.2.32?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/spring-projects/spring-boot"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.springdoc/springdoc-openapi-common@1.2.32?type=jar"
    },
    {
      "group" : "io.swagger.core.v3",
      "name" : "swagger-models",
      "version" : "2.1.1",
      "description" : "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d837ea4186b7f7e35ea3c88d74512496"
        },
        {
          "alg" : "SHA-1",
          "content" : "9c18e2c834dee2b6c8ec2b67259fdaef2adba3c0"
        },
        {
          "alg" : "SHA-256",
          "content" : "fb190ca75763ed290f93f08c9079cc02d8621d2a352759880c00c6b53c669233"
        },
        {
          "alg" : "SHA-512",
          "content" : "0dc79b2bf65ab9982e82abe34d5155d39cbdebf2ccabc462b23aefedef0d175e8d0bc4b78dc051381b4614d173368c927ec60b10cc52f0d2b9a134d7629f4a0c"
        },
        {
          "alg" : "SHA-384",
          "content" : "d31008319d2a68664511fe7f35bcf2382d313863be5049758b80a19e2940098ffc97f00e9c2473bd7e3549cbabc3b6bf"
        },
        {
          "alg" : "SHA3-384",
          "content" : "cc3c9abc2b8f16a0e77cf664d14ce46ce66f2e5278f70b5dedced8153a66e26fb61473bbcb488d36b4f7a3ae5166b172"
        },
        {
          "alg" : "SHA3-256",
          "content" : "49487515a3526ab396bcf780bf4269c80299954ac0e913b1cbcf4c478d2fbe99"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b26d7e5581f460b61b1d622c8e59de9beed6582e119723c3dfd197ae58d3f938b03cf69253c9a2709c5abc7f27e6a127e0b69ff9bf19c131c4d680a2f4ad98a0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.swagger.core.v3/swagger-models@2.1.1?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/swagger-api/swagger-core/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/swagger-swaggersocket"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/swagger-api/swagger-core"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.swagger.core.v3/swagger-models@2.1.1?type=jar"
    },
    {
      "group" : "io.swagger.core.v3",
      "name" : "swagger-annotations",
      "version" : "2.1.1",
      "description" : "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "474583342ea1968dc0d624c9d37c1aa5"
        },
        {
          "alg" : "SHA-1",
          "content" : "4d645f0d4a1ec1f13bef19ad1b10e72b30fe9307"
        },
        {
          "alg" : "SHA-256",
          "content" : "a138af458693ef5edd32869260e49becaf02a370619e031f817e215275cc48a1"
        },
        {
          "alg" : "SHA-512",
          "content" : "18d8fce936b509c8485e3a455463205ec39e454389945a034fa1a93c4d34d378dca1ee29cbed9547fc485f41c13aeaffd9036d4b93acedb92a8ee278cea632af"
        },
        {
          "alg" : "SHA-384",
          "content" : "1fad522fab00349864e4b0fcad9b6c6c912c947bd1d3fab9de42e7af600ed75fb086ed5afa19ad2d0ce7b0e68230cd37"
        },
        {
          "alg" : "SHA3-384",
          "content" : "11518b48dab9f9625a7a08db13cd6b2f9b31304a39ba05117784c58e5ba887d49886d1776cca32ed1096008d109e133f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "42d9709d36119138b099b4f598304d3db3b796d1f4e9e8310926743ca856b68e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3ea7780a77c5241e796b3be1541be11702b911ed0ea08fe3fe1c985bbd6f5a44089fffa9b54f6c64ee98b7ec39792931f1ec4637b2b8fdf1ad90810f688bc3ef"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.swagger.core.v3/swagger-annotations@2.1.1?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/swagger-api/swagger-core/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/swagger-swaggersocket"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/swagger-api/swagger-core"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.swagger.core.v3/swagger-annotations@2.1.1?type=jar"
    },
    {
      "group" : "io.swagger.core.v3",
      "name" : "swagger-integration",
      "version" : "2.1.1",
      "description" : "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7ce4d1435e77c69a7d6e19f4a0c0e9c0"
        },
        {
          "alg" : "SHA-1",
          "content" : "79454bd29a5d133d7cc15f9062488399fbe96c06"
        },
        {
          "alg" : "SHA-256",
          "content" : "4853b2bb894570d0fbb104a98b3b20e7ae0db195aa52836eaebc5c0e94ed79d4"
        },
        {
          "alg" : "SHA-512",
          "content" : "5defb27fdd829b7dc434b84a3ed2bb7bc37184f5c7552ab16b770edef78c889ef96feea050378375789ecfb279fa4f4fc73ff66fd3d63619fe1d92eb869e9bfb"
        },
        {
          "alg" : "SHA-384",
          "content" : "d55bb7f586fd8132b45cd81cba7e03117f346913c78ca604f4abc2c3bd60667d293719581179d064d109d14196bc1a62"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f7bb03d671dd75dd3b9d8899eec8f1856215ae39510438b90bb0471cc33b9f66fc1b526a1a05abd5abbcbe6c61dd7bb9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "50c2d565e3376d4a7008a3484726fa3cdb07a29e9d677be91fab926d7feec0b5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8d0a7bd1f8aca92c890d19855e647ac25b3e299647d0620fd062657821e2283ae4e9f66de9b382e0302f67b3a2fed69ee44730ef3d1b99fdccbd6bb688691b57"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.swagger.core.v3/swagger-integration@2.1.1?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/swagger-api/swagger-core/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/swagger-swaggersocket"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/swagger-api/swagger-core"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.swagger.core.v3/swagger-integration@2.1.1?type=jar"
    },
    {
      "group" : "io.swagger.core.v3",
      "name" : "swagger-core",
      "version" : "2.1.1",
      "description" : "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2a6af5f5deb819f3688d980f38d35522"
        },
        {
          "alg" : "SHA-1",
          "content" : "7c8d69356c3521734f0225ce6ea15d6b26b1eecc"
        },
        {
          "alg" : "SHA-256",
          "content" : "c322a84c5fe8ca4e762f61bd50e283be6dca7065dd1f07b0199bcf41f027e48f"
        },
        {
          "alg" : "SHA-512",
          "content" : "114f91074d0ad1f7ce261b34ddd4bdedd58b1ab6ddbdfb4ea6a7c3a365f2582ba782fe3fa1d4d95c5dca4c180c2e8d634aba6654e0fc646a616bfd596248b695"
        },
        {
          "alg" : "SHA-384",
          "content" : "a2d1877b9003e791731ca661f80f8e7e6674fc44ae5159240a856a73b8a65adcd3e4bc011f0a01b009a50b6f4b3e0c2f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "594986b3dd06c9bb3cb97161ade93556b619dd29aa82d736df2193cafb7841e948e17491ac11a2d2314ba4518304b1c7"
        },
        {
          "alg" : "SHA3-256",
          "content" : "98a0a97c2afc231980956395efbd2e5dbfae8c0ef148166840bcc380974bf979"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a4918d0c73f8c37220d01e964f9df64d7174e321963b2a635f1cbd9c84e9dbe5f91e91fbde9da8b972d1f4481bddb91c93ac1c05ef3daddda616a65f31ec5499"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.swagger.core.v3/swagger-core@2.1.1?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/swagger-api/swagger-core/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/swagger-swaggersocket"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/swagger-api/swagger-core"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.swagger.core.v3/swagger-core@2.1.1?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.dataformat",
      "name" : "jackson-dataformat-yaml",
      "version" : "2.12.6",
      "description" : "Support for reading and writing YAML-encoded data via Jackson abstractions.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "998d69617a7f33297233736002c20b82"
        },
        {
          "alg" : "SHA-1",
          "content" : "cfba448bc4e92b8656968756a9c4af1ad8e502e4"
        },
        {
          "alg" : "SHA-256",
          "content" : "f34baee89a7040b83f5806ef7bd83e7160b0dbaeaf141ba8423004cd9c1864c2"
        },
        {
          "alg" : "SHA-512",
          "content" : "50e683bb25f4837b0bd080417d9c391ee1962920991ff5f2ce381e9e02dd03b724c66806e6560762750af3fab1ae275e165cde0906f0eb3ddc947faab653b459"
        },
        {
          "alg" : "SHA-384",
          "content" : "fa601fb487682023ee5836b4ecffce8b8d6f1f15e6196bf4b09cfe463fec361ffb01ae3340b3c983f1d870218c2f9713"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5df8d945a4f80d586b2440103ae4f75dd8d3b03f7140749cb8e85e38bc5fd6866e290dd30469815aedc131b4cf9c7bdb"
        },
        {
          "alg" : "SHA3-256",
          "content" : "53d73d14b4c6397655d788b7b0f0b17cae42b06d1d94ad5566aa12dcfa3913ac"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5d5976f2c8966955e140568f478ff5a383d33279cad8f40728eb92fa49f8962932c0e9daa7295c44a9c472617f5f5cb406e655f81acfd4b9d70f606e6dc5e5b0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.12.6?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-dataformats-text/issues"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/jackson-dataformats-text"
        },
        {
          "type" : "website",
          "url" : "http://fasterxml.com/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.12.6?type=jar"
    },
    {
      "group" : "io.github.classgraph",
      "name" : "classgraph",
      "version" : "4.8.44",
      "description" : "The uber-fast, ultra-lightweight classpath and module scanner for JVM languages.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bfa81305f4fc016325b5ce8ab3f15bf3"
        },
        {
          "alg" : "SHA-1",
          "content" : "52f4c19484041e8857f444985b7b8f8a9783da56"
        },
        {
          "alg" : "SHA-256",
          "content" : "c4b213084ca1f4bf88484a5fe3d53cc46b9b6c17ebec74be30abdfd4f1c43790"
        },
        {
          "alg" : "SHA-512",
          "content" : "b5b656d540521f1781f5622c0261a2f88c105a837d1f1eafb1263e61f655d9dca4f42c5e8b6a03eb97187eedd86ebbaa0ca4298614de7aabab14c69f20fbb1e0"
        },
        {
          "alg" : "SHA-384",
          "content" : "23c35ab23351a455bb48469c471e64593d69f989bcab24b69cc2a7023eb979b2c1eb3fcbb963cb117ff9e512c8c17676"
        },
        {
          "alg" : "SHA3-384",
          "content" : "02c56710e007529c810ee913e14d154bbe145f320ef5ce147e469abe7ae9d441e5b494189ebf40f768507cf28591b797"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c5b3940dd6d2b162b5e59beb1afcf81e7d30354f17d47a0e5dc2b44439232b27"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4058ba338463ac0d59acfd44f1698c2adbb08f2477c429394f2a07fed78276d5ed6afd379f049d259963c3ff320958c9cf2035a3f49177a101a3ab46484ed655"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT"
          }
        }
      ],
      "purl" : "pkg:maven/io.github.classgraph/classgraph@4.8.44?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/classgraph/classgraph/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/classgraph/classgraph"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.github.classgraph/classgraph@4.8.44?type=jar"
    },
    {
      "group" : "org.webjars",
      "name" : "swagger-ui",
      "version" : "3.25.0",
      "description" : "WebJar for Swagger UI",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9dad163ba9533c3a7db4f5a867133a03"
        },
        {
          "alg" : "SHA-1",
          "content" : "7b41c520c163d4308f19e5f879e1abaf0a3f03f9"
        },
        {
          "alg" : "SHA-256",
          "content" : "e06d0dd86936192c3e0bbc0d461d9adbc75a02b07b2cf9fb8edf5677525aaf7b"
        },
        {
          "alg" : "SHA-512",
          "content" : "809a8db8c845ae0e16a27c8b3cca3913c110579b63994097ffdaee167268467adbdeb16b6d478cc2240dcba9e335f35a171f1e12a32693559be65993d1e9588d"
        },
        {
          "alg" : "SHA-384",
          "content" : "35a4658437557858d9a1199186f1ac3488dd4f4352c96e4817e04ce487dc57b9a7b963b0035751d5c055242dde0c8459"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d490467a915c0f519e231e2963381fc5e33f6a28ae4cc3e6f7f0f72cc46b8d972f41e8858d9aedb3d214c74c4c6cf2cd"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6679d9361800c32736a4b9eb6f970dca749a6861189f878f6fb3df8cac960af2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "09a79aaa33fcd477bde7ac80ba0a3f8ec28c9b03570f7e73ebf8041c2610212918bb5d8e018b90f4118b515269e6b91d5ae2dd84bff8c144fdfac8c6d7408ea9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.webjars/swagger-ui@3.25.0?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "http://github.com/webjars/swagger-ui"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.webjars/swagger-ui@3.25.0?type=jar"
    },
    {
      "group" : "org.webjars",
      "name" : "webjars-locator",
      "version" : "0.38",
      "description" : "WebJar Locator",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ccb0179a7a0db487bdcc811a86faa421"
        },
        {
          "alg" : "SHA-1",
          "content" : "d27083737381eadbd11b3f94dbd207149b1a7dd3"
        },
        {
          "alg" : "SHA-256",
          "content" : "aa62e73553cd87d9894c13bd8010c8c078af03c68723bbda51cddc38eb72f3ff"
        },
        {
          "alg" : "SHA-512",
          "content" : "6f5fccc5286be1bdc815a0aaee690285737168a749c8ee1f7cd8e13bf2a07f66427fbf7b207fd5e994f075afc135b492a40785f33f784c686ec3198b07945646"
        },
        {
          "alg" : "SHA-384",
          "content" : "2e0a9f0f64a88fefe036b6e083fb95b2f896584986d1ef676a1179f7990b71f3fe46f0fc21512d98f6e7d4a71401cb2f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2854d3f6974d17c995b60e0797963ff34594cc0d0455e86e99299780845803110ebfc80eb9103c9e498705aae4a9744d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "beae1ac09418fcf4ff1fe2a592bf8910ae1feeb90929a263fbbe80adfb170318"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c4c10954f7690d3119413857a678a93f878fb2ab615ae58b611928c17189c355fbdd52e40309f9c675a24f6dd141a78761674d3cecba27eafd1641898ce3d99d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.webjars/webjars-locator@0.38?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "http://github.com/webjars/webjars-locator"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.webjars/webjars-locator@0.38?type=jar"
    },
    {
      "group" : "org.webjars",
      "name" : "webjars-locator-core",
      "version" : "0.46",
      "description" : "WebJar Locator Core functionality",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "467243ddcdf07d23e2bd040ae096d61f"
        },
        {
          "alg" : "SHA-1",
          "content" : "2c207eae0bf475d6e2444ece594c199f1f418322"
        },
        {
          "alg" : "SHA-256",
          "content" : "2295de3f8b84fd2f55aca565a97213e826f8bbad1ca8b16a8c75aa98f7a20110"
        },
        {
          "alg" : "SHA-512",
          "content" : "f30fb89449c3f139b5c3a70ff0e40feb9f2e3229b1ef36feedf6d66283ec29202ffc14903542cc304eafdb61ce4ba1d7c598169150dd086faedd9cb61135e9a2"
        },
        {
          "alg" : "SHA-384",
          "content" : "ab145fb651a77281af894078fb8cb09aef9c1b6e0a04aed8e8669e92832b7e64d65f01dbc3ec7810db4d47b04fc83599"
        },
        {
          "alg" : "SHA3-384",
          "content" : "fb3c5544c31cbe9d039a291514b739b8506b6bdf796570dd682b46f2cc1aac6e6e155d76ac640ca8892edf9c8380f8da"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f43e85bf22464a097dc0e94792833225fe71f126c66b63f87b6d468bd7010220"
        },
        {
          "alg" : "SHA3-512",
          "content" : "516bfd53431bf5e4117fe347ccd0846204ae3a60dfae14c8e898f8e0a2d50b126e0b523e713cdd879a43140439238780a9484fc2c3019b2715efb772fe6b2512"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.webjars/webjars-locator-core@0.46?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "http://github.com/webjars/webjars-locator-core"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.webjars/webjars-locator-core@0.46?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-core",
      "version" : "2.12.6",
      "description" : "Core Jackson processing abstractions (aka Streaming API), implementation for JSON",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3976126e023f2969b4267963fe841f43"
        },
        {
          "alg" : "SHA-1",
          "content" : "5bf206c0b5982cfcd868b3d9349dc5190db8bab5"
        },
        {
          "alg" : "SHA-256",
          "content" : "0026cff293bdba389fbbbc67a20fdd5f73e091554ab46671efa654c25c807ee6"
        },
        {
          "alg" : "SHA-512",
          "content" : "faf2dcac732b824ed1728011363ec9c2345ab62a6e38f623e623ae0df068afb241bb24d2dcbf625d2184e07262fe1651796706f4958362daeee28dd8e93ca4bd"
        },
        {
          "alg" : "SHA-384",
          "content" : "febced79e3d0c7b130c065602dfa537e08ee288ef9fb197180e13087dc4efb2326672ffc3680c8cf8acaa0507240d7d7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f8da6d69b3285b773d959f5f12ffc360e41f16092411fbc206251fba0de3deb8463c415179e3d6f8dd59cb4841af1e9c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "36900837f190f6aedf6d8ecd2384fe24d27c3ce73391db1d73839a55b9a53f5f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2b65bb589addd185ffad8ebc355e55d9e3835a6fbd07e8f16fa4b125baa3af1509ce92d7d76d4752e8f539f62488fd5299b99241ed50ab4b426244386ae80943"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.12.6?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/jackson-core"
        },
        {
          "type" : "website",
          "url" : "http://fasterxml.com/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.12.6?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-databind",
      "version" : "2.12.6.1",
      "description" : "General data-binding functionality for Jackson: works on core streaming API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "88088e2e9bbc93adb021ae8bf436e544"
        },
        {
          "alg" : "SHA-1",
          "content" : "df01cc0c2d4acb913d73d587274986a12e3dec8c"
        },
        {
          "alg" : "SHA-256",
          "content" : "eb60e494ba8c23e653da4db8e29af0342927fc7e1c60501bf99e93145738c696"
        },
        {
          "alg" : "SHA-512",
          "content" : "9fa25c2a2917a751a1d77ff5301627a1adf48fb8b9924acb47d176b142fe791e4b12b7a526327e93557d0052dc10ea210a87849f1d292ba4ec581357f1b21971"
        },
        {
          "alg" : "SHA-384",
          "content" : "48ec219d4a8692ce850d7eedaf7fadad2c1891887773d3b90767538a4174248c8b51ceb5360ba8fa3e69efa736c3abde"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8ca6c47360018827f1593d66786ecea285851c502ac43f7f42e81eb4254d637df7d45f5e88318e386de3d6bece38fca3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "40bdbd0d303793df14d3fa8c5d6266a208793e466c0fc7ba5b39d29c134dcf80"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ff1a8f9259cb6ff708a5ccc2505815b7c6fefb8ca6995a33a821bbea6f8a6f253cd69d9651b087de9cd3b8345ec75f59760e064f5389e0976e09e73efee6faf9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.12.6.1?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/jackson-databind"
        },
        {
          "type" : "website",
          "url" : "http://fasterxml.com/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.12.6.1?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-annotations",
      "version" : "2.12.6",
      "description" : "Core annotations used for value types, used by Jackson data binding package.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9c936122eb418ee985b195d183623618"
        },
        {
          "alg" : "SHA-1",
          "content" : "9487231edd6b0b1f14692c9cba9e0462809215d1"
        },
        {
          "alg" : "SHA-256",
          "content" : "ddf46e401a7d9ea3b481c263fa192285d13c50982a5882b22f806639b9645ee4"
        },
        {
          "alg" : "SHA-512",
          "content" : "a4faf2e4b6ff9af14a9d5916606257ec537d05dc5a84585ce3d26ea52a38e4cf13295351bdef05274dccdcc3e415e21686e50f9f5ac414754eefe66463e4a75a"
        },
        {
          "alg" : "SHA-384",
          "content" : "0f263e4f5f5a31a14c65203f5aa2f52bfd43220db4923367bd7b206b91f26ae998a5b56fcd7547d48ac760161501d3c2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ec6344be5cc3c21e7ab113959fec9a28bf96040c778a3daa2187079c8598cf748fec4a9895261d4511380bcda559fdda"
        },
        {
          "alg" : "SHA3-256",
          "content" : "38c2bbfdaf41c6c9fa90e690b383021998a9dd7be7ca881db12b8d09fee0c9ef"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fa4394114b48c986a24064915050444c782d23dc64e8838af1ee02f087523093430fd3384e2bac4bb6bb3edc3dbc19022c36521405480a06de1ece06398526fe"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.12.6?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/jackson-annotations"
        },
        {
          "type" : "website",
          "url" : "http://fasterxml.com/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.12.6?type=jar"
    },
    {
      "group" : "com.jayway.jsonpath",
      "name" : "json-path",
      "version" : "2.5.0",
      "description" : "Java port of Stefan Goessner JsonPath.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c16241d78783e2e2b93429afb4c783aa"
        },
        {
          "alg" : "SHA-1",
          "content" : "c35ef29095125b51638d19120f63e2b56eff20e9"
        },
        {
          "alg" : "SHA-256",
          "content" : "4ed3c4c2d4e477cb2a349c0ebb8c22f0584702221ddbaafd166fddcd2101029b"
        },
        {
          "alg" : "SHA-512",
          "content" : "11cdc35b8d72d452e0c89f5bf6a04b37996624d108e23aa3b489d54509391212e6172e775e5703b47416d971f125028d47f1eb87291847d70d430b5f9b81e34f"
        },
        {
          "alg" : "SHA-384",
          "content" : "e6d7889ed440d8ebe5d0153e01588526f774980b1f6a0af978b178871e900a1a32604b789c42d85bffb81b99794121cb"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ae90c12be2e3c0a5c8cc4b3e92a89eadc3107fb1ffe68f59ad3d366052468c43afa742b6523051ffd53fa7a4c191bcd8"
        },
        {
          "alg" : "SHA3-256",
          "content" : "44d9217e1fb952afeb796aceb1f8c517befea6d2585f04799d2c1bdca7ea58bd"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6f9b067daf7895e9a716af1c197b6e76f44c270bd029285ca8b224ed0a8406908a403757d0c33671528f98cf3d01c07de16d926fccb3e43eda3ea938532fdce8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.jayway.jsonpath/json-path@2.5.0?type=jar",
      "externalReferences" : [ ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.jayway.jsonpath/json-path@2.5.0?type=jar"
    },
    {
      "publisher" : "Chemouni Uriel",
      "group" : "net.minidev",
      "name" : "json-smart",
      "version" : "2.4.8",
      "description" : "JSON (JavaScript Object Notation) is a lightweight data-interchange format. It is easy for humans to read and write. It is easy for machines to parse and generate. It is based on a subset of the JavaScript Programming Language, Standard ECMA-262 3rd Edition - December 1999. JSON is a text format that is completely language independent but uses conventions that are familiar to programmers of the C-family of languages, including C, C++, C#, Java, JavaScript, Perl, Python, and many others. These properties make JSON an ideal data-interchange language.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "20a8427206313ed3aa85cdc47f730415"
        },
        {
          "alg" : "SHA-1",
          "content" : "7c62f5f72ab05eb54d40e2abf0360a2fe9ea477f"
        },
        {
          "alg" : "SHA-256",
          "content" : "174a9ad578b56644e62b3965d8bf94ac3a76e707c6343b8abac9d3671438b4b2"
        },
        {
          "alg" : "SHA-512",
          "content" : "13f4609fe72df98c81f86d25616e5b0ce1426688aa5a9dd953733fa98a8deadb87b3e69a77741dc9d31dd4485265d3b9e4ec71d99346e4a7558f2500f3677714"
        },
        {
          "alg" : "SHA-384",
          "content" : "1426a97474b44c58d1f30c70afec9dd658207d89ce5067932bb4dbe2ddb31970d31d2b682631e208d4b7f435b97b14aa"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f80d75137a6ed01e53a7a168a39d33b15c26de832268d61a80affa7f9472639f2b19165fb4fdd1b6cbcc2601cf1b413c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "60607471f4e886f0959dae77ac61ffd1b5662f9d39bd7efc552290e90e965c38"
        },
        {
          "alg" : "SHA3-512",
          "content" : "84f2e3c1840bbec18ad0fade94791a759f9a2e0de4dfe3a52fc9a54d2a7cffa94e8645273c7417db7ebd9e3a35884eaa6381ca6a6d5d48eae5bb0563b741247a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/net.minidev/json-smart@2.4.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://urielch.github.io/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netplex/json-smart-v2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.minidev/json-smart@2.4.8?type=jar"
    },
    {
      "publisher" : "Chemouni Uriel",
      "group" : "net.minidev",
      "name" : "accessors-smart",
      "version" : "2.4.8",
      "description" : "Java reflect give poor performance on getter setter an constructor calls, accessors-smart use ASM to speed up those calls.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e5761631acc11ded0255af1249937e85"
        },
        {
          "alg" : "SHA-1",
          "content" : "6e1bee5a530caba91893604d6ab41d0edcecca9a"
        },
        {
          "alg" : "SHA-256",
          "content" : "7dd705aa1ac0e030f8ee2624e8e77239ae1eef6ccc2621c0b8c189866ee1c42c"
        },
        {
          "alg" : "SHA-512",
          "content" : "45405c083334b05efa07572497b9d510ca771af32ce93d960be802216a9714ffff8418384ea48e197d3dfb6ebec4ec3e610155841e8a257a7fb9a4bd6a1b668f"
        },
        {
          "alg" : "SHA-384",
          "content" : "9f3a75bcd9a9c00dc7437d0dfcf075d411c4bcc125ab6761f0bec3f00eec4d0e5c7d0e7f304f69d3491a12f542ee0823"
        },
        {
          "alg" : "SHA3-384",
          "content" : "764e26adb705500f3e1a81b8360ce2c9d2c23ec09e3fcc9b673378d5e10fb8846843547ec0c5383e2bed1a20c48aaa43"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7017996397067155374396bea86ac9871f6c672da91c91faf2ff8aa8b154624d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a1050d7f9e728546989c62e1a9ca7b583070012d766e7e77ed0d958a2271cf21326b8ed8d2d4690277e8da5b7ac3599a617ff68418fb5be903f6b59ad21dae8b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/net.minidev/accessors-smart@2.4.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://urielch.github.io/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netplex/json-smart-v2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.minidev/accessors-smart@2.4.8?type=jar"
    },
    {
      "group" : "com.jeantessier",
      "name" : "dependency-finder",
      "version" : "1.2.1-beta5-log4j",
      "description" : "JarJarDiff is particularly interesting",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6609f69643ad810d335b743641ec1f41"
        },
        {
          "alg" : "SHA-1",
          "content" : "b6b7f77ce559a1fd86f3ee626d0ebd8682cd4fe6"
        },
        {
          "alg" : "SHA-256",
          "content" : "617189460dac0264997053727bbf2f8de00a284c856394758afc95a678189058"
        },
        {
          "alg" : "SHA-512",
          "content" : "f8008e21227bd2e63a4131dfb4301a5c580c7d7349fe6978e191145057548ed64f1cdc9b93b1ec5b4edd88880bc34037f00cc72249db58a82063ad404e3db0e2"
        },
        {
          "alg" : "SHA-384",
          "content" : "cdeba2ba474582d96ef9a449bc35ce6e8bf98c50c73e22b0ee2ae297ae237574179632a9ff38c0391e91eaa796ddd195"
        },
        {
          "alg" : "SHA3-384",
          "content" : "565a093eb8673d5d0be91fa4636e12eba870bd99f8c8d7a568bf37ad4dba9e31a775894a85150154a2fe58179868d45d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b673af624d252d720d5220703db02715aaf3910883db2e7017f8b0dfb6679ebf"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0edb0d35dfb45666f5b4b39badf1240f89a6315ac43ede35b702b0a5f2bba758434358fd3a8eac7804b25ac3e7654932b3179158b93dc93a7f69004797871c88"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/com.jeantessier/dependency-finder@1.2.1-beta5-log4j?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/com.jeantessier/dependency-finder@1.2.1-beta5-log4j?type=jar"
    },
    {
      "group" : "oro",
      "name" : "oro",
      "version" : "2.0.8",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "42e940d5d2d822f4dc04c65053e630ab"
        },
        {
          "alg" : "SHA-1",
          "content" : "5592374f834645c4ae250f4c9fbb314c9369d698"
        },
        {
          "alg" : "SHA-256",
          "content" : "e00ccdad5df7eb43fdee44232ef64602bf63807c2d133a7be83ba09fd49af26e"
        },
        {
          "alg" : "SHA-512",
          "content" : "9a98e493c4d771322b1331ec05ab0e363a83d8ac2af8018d96a44df2bf5bfc97d33ebe6f6f93e46ab10bf1536f0c29e9d9569318ed49bc18b4e96b1a8b476d37"
        },
        {
          "alg" : "SHA-384",
          "content" : "f542e92b7a86bcb20cc21f0c4b29778428944391344ca11df432f9ce36a96ce8e8f65da67e450e52c0e8ba441d2a7332"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e483eec12e463136ea4163a280dc17d62e48f5d49f0f0ad2ab672c4c5366b1f4e5fd460e880caaa4b39666106ac98ca1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e558c00adc56713dc57cebed64b966e3ca0d8f096056d8843fa8bb11c7c96017"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f6e02d2cd83014e4a4d5ca0f24b189ec944c3b1e306c5eb04fac7e148b47ad2432256ef6b05292cf6d34a31c72420637702cc0fff4b38edcfae21bc0ffda98aa"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/oro/oro@2.0.8?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/oro/oro@2.0.8?type=jar"
    },
    {
      "group" : "org.eclipse.steady",
      "name" : "rest-backend",
      "version" : "3.2.5",
      "purl" : "pkg:maven/org.eclipse.steady/rest-backend@3.2.5?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.steady/rest-backend@3.2.5?type=jar"
    },
    {
      "publisher" : "Pivotal Software, Inc.",
      "group" : "org.springframework.boot",
      "name" : "spring-boot-starter-data-jpa",
      "version" : "2.5.12",
      "description" : "Starter for using Spring Data JPA with Hibernate",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3b5d3b17e41ce14f66ed67918d8aee3d"
        },
        {
          "alg" : "SHA-1",
          "content" : "fb29004f637a6c55535321e51d6d11837f348d48"
        },
        {
          "alg" : "SHA-256",
          "content" : "629cabd7b85c7f935aa69c5f4350e93a33a14cfac8f6956350a27c481b6ea73a"
        },
        {
          "alg" : "SHA-512",
          "content" : "b89a0290a3144a38ded08ccd74a98b004d179749ad9c130070f74c14d916e38c880b405d3dffe6de7b3a2da65b9eb34e78edcc4c7761bc278574773823cc108e"
        },
        {
          "alg" : "SHA-384",
          "content" : "6803cc7f40e9719d35c3a5d08d7805f20eb637019f398a83a883b608552a4a970078b5b66e4eb2705a5406b6801ffeaa"
        },
        {
          "alg" : "SHA3-384",
          "content" : "78e9cbe224775beb8485283b4aada129d7c84ed9b622ba07e09408031911b2b515d5e18be5198972e6f061c006d2da0f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1a70fcb852c95c3a5f9418d5a2e091fa5eb7213de4fc2dc4d0be46104bb6d1bc"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3c444c3b620b7c2bece75fcb443f0e81365afa6a2e723a928228f5e5b173027d8db371190e4d4ff118144953221c932087196332d7b63c55b2f1ced9d96b0d2e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@2.5.12?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://spring.io"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/spring-projects/spring-boot/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/spring-projects/spring-boot"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@2.5.12?type=jar"
    },
    {
      "publisher" : "Pivotal Software, Inc.",
      "group" : "org.springframework.boot",
      "name" : "spring-boot-starter-aop",
      "version" : "2.5.12",
      "description" : "Starter for aspect-oriented programming with Spring AOP and AspectJ",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "12ad4702492d470680038b590a0de8f2"
        },
        {
          "alg" : "SHA-1",
          "content" : "12d557bf73679e2ae91409bb627e4648a1f085a0"
        },
        {
          "alg" : "SHA-256",
          "content" : "9b75645e440ea1eaa35afaa669b2f6684f33fd7efb57cc269de1c104ddf3e9b5"
        },
        {
          "alg" : "SHA-512",
          "content" : "44e9bd94a6dc87c1e91dfdaa1b361471fb6689ee8887d3e80648f287dc21757fe0530dda37b8ed22782a7e896b592e48cdc3823fae0158e9f8562e5d6bf7e6bb"
        },
        {
          "alg" : "SHA-384",
          "content" : "0d64f3f48376e71f9285ab8ee1887fad16272bc4d817fd6fa630e8d9f38e3185324b05e0c76e18fd728ee73a54e154aa"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1033c6f30e7cd01b0cd43143b21ca72109e99b9db3d3259d75c0b8384324a0d63d616bc97c389689fef23e512af6ecdf"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7f0f2a8af6a630a244396c1e7d8d09b97c8a6d497cf865b9ee24bcb1736400c3"
        },
        {
          "alg" : "SHA3-512",
          "content" : "89249e61189173ed57fe9fb7e04856455c7693ece2a8e094f225e8ecabf54a37e542f2c4226cda72f7d19baf0ea67bcfb94b04da98d65bcd0b1d0d1733ed7234"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.springframework.boot/spring-boot-starter-aop@2.5.12?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://spring.io"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/spring-projects/spring-boot/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/spring-projects/spring-boot"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.springframework.boot/spring-boot-starter-aop@2.5.12?type=jar"
    },
    {
      "group" : "org.aspectj",
      "name" : "aspectjweaver",
      "version" : "1.9.7",
      "description" : "The AspectJ weaver applies aspects to Java classes. It can be used as a Java agent in order to apply load-time weaving (LTW) during class-loading and also contains the AspectJ runtime classes.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a4d97c5a2f94b8b5d132761a769e5eeb"
        },
        {
          "alg" : "SHA-1",
          "content" : "158f5c255cd3e4408e795b79f7c3fbae9b53b7ca"
        },
        {
          "alg" : "SHA-256",
          "content" : "1b448d82bd0f8a8c1842506e6c7edb95ff1a1275ce39f766e7884122b866fe5d"
        },
        {
          "alg" : "SHA-512",
          "content" : "490fcf238486848e27cbed45fd437613193c9e89748a0818fb532aed5c213aab2624d148ed9fd58080c6934da5f7ec12c64e40b64bb46d16e361eb404393c5ba"
        },
        {
          "alg" : "SHA-384",
          "content" : "4d3b13d7e7ab437410226974ad3acebc8c663b21d9ccad6d70b5adede33bc4033858e8b303c7263a8e17c073c354b87b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0d56981fa691d1d79f39aa65dc091def5fb106f65d5d1b0836a7279b95195961c5a49f07979cda49e35768276a30477d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e10b7535b50a0017f062b7eb71f1f1b301beadfe474d050f7100996797a8640c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a77467b7b04410e7eb33214e84b4061f3e7112eb4c29a2c826691bdc0af6136c7a78789ae685273e9e69cfb40e674b64ecb31d1e516a8b5d79afefb13f57ffa1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.aspectj/aspectjweaver@1.9.7?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/org.aspectj"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.aspectj/aspectjweaver@1.9.7?type=jar"
    },
    {
      "publisher" : "Pivotal Software, Inc.",
      "group" : "org.springframework.boot",
      "name" : "spring-boot-starter-jdbc",
      "version" : "2.5.12",
      "description" : "Starter for using JDBC with the HikariCP connection pool",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fcf899d1b3add515b85872a8f9c88889"
        },
        {
          "alg" : "SHA-1",
          "content" : "0423e05e8769e97be1d1dcfe0b3c151e900ab820"
        },
        {
          "alg" : "SHA-256",
          "content" : "baa1dbe2142bded162156311913b5255591ba8bf01f07044b25f6be4cd2dbb53"
        },
        {
          "alg" : "SHA-512",
          "content" : "edbc42a8c7e05c0736d95bc063b88ada1e542928327c6befb5f3a95d5395df95d036b0b9ba9de91da93a71b01435f629bb2852919a388374295c2e3f58eee3b8"
        },
        {
          "alg" : "SHA-384",
          "content" : "5ad8cfe340793f12d749e9a38bcf92a152d9e2d6683a2b363669663cc113c7e22314d56279bc45abc8fdcfda3bd28583"
        },
        {
          "alg" : "SHA3-384",
          "content" : "de43d7e87b4cc56a0b32c91911f9deff1e1cf99e33baae45eba91ee026adc1d61f034b7336ccfdc455b72b215603d9e0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d578bf5cbb1402218e2bbb51fdf69d141ba062845281a134ac24b5c814d21789"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fb9d09b6c1bcc1a5e34fc8dfdf51f25f975829cfc29c8a91f91347ea87afd379f2e26e041dd9fd36fb610f2008759a9bcf8733e490342d9d87fa898550092c30"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.springframework.boot/spring-boot-starter-jdbc@2.5.12?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://spring.io"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/spring-projects/spring-boot/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/spring-projects/spring-boot"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.springframework.boot/spring-boot-starter-jdbc@2.5.12?type=jar"
    },
    {
      "publisher" : "Zaxxer.com",
      "group" : "com.zaxxer",
      "name" : "HikariCP",
      "version" : "4.0.3",
      "description" : "Ultimate JDBC Connection Pool",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e725642926105cd1bbf4ad7fdff5d5a9"
        },
        {
          "alg" : "SHA-1",
          "content" : "107cbdf0db6780a065f895ae9d8fbf3bb0e1c21f"
        },
        {
          "alg" : "SHA-256",
          "content" : "7c024aeff1c1063576d74453513f9de6447d8e624d17f8e27f30a2e97688c6c9"
        },
        {
          "alg" : "SHA-512",
          "content" : "34a9ee96c51ae070634cd0b642cad3c4c54b9d2ab7f1714f59dad805512ae27c9c69b8be83da473689f55474c4e2874c93e727f9f31d3bfc9b80ec37aeb68898"
        },
        {
          "alg" : "SHA-384",
          "content" : "9c49efde42b89a8cd2b119d666076bc9d532c4a835c640b77d8a5858d3325f9ba99f8cd19cd21b9df4f386d1c21855ae"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ccea43e68e6dcf0426c271640abf132575a9e28b439ac968b5608e3d04d7ec80dd948d33c474e31fb18bab9b80959c2b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "163e0d75894a0a4c2d36f4a992449e2dfd71bf495f5789813cd333ad1b571fc5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "bc20907f677b6fceaf8f81361d5a7e0099799561af550a2a49dfed531a3b8ee29f35ecc2c4419cd8eef9e25a147a2cf88cfb7ffc9218b8b35b0e0524caf56d8d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.zaxxer/HikariCP@4.0.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/brettwooldridge"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.sonatype.org/spice/trunk/oss/oss-parent-9"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.zaxxer/HikariCP@4.0.3?type=jar"
    },
    {
      "publisher" : "Spring IO",
      "group" : "org.springframework",
      "name" : "spring-jdbc",
      "version" : "5.3.18",
      "description" : "Spring JDBC",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c12e56d5bd660d5f7b765164c08f5077"
        },
        {
          "alg" : "SHA-1",
          "content" : "b168d4c024cb002377bca91f2b804297d8b74003"
        },
        {
          "alg" : "SHA-256",
          "content" : "cfb6b8be5b6f4029cce12f78d185c22e38452483069c5ee971a249235378cdac"
        },
        {
          "alg" : "SHA-512",
          "content" : "80baac96f79f52a55981afe8d3d420a52c3344313b131fa30b30b225b4d4dbc78ada92f3a2dd6f5615dc38952ea7923239f75eecaf3dca342c0c0700250af5ae"
        },
        {
          "alg" : "SHA-384",
          "content" : "b5874762c6055e44e4d4567feddff0c2087a10b3df5d049454dff668f2739e4ec3c6b1eca9bf6972b3e4bb2da0e2a0fd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a9c2f2164ce1adae1d470554253e30b96b6e3e64bf9f4e7e8f8d54468dcfff16a1cd0c0e6176dea6168f3b0470396112"
        },
        {
          "alg" : "SHA3-256",
          "content" : "70ac842370613d37f4b2e7bff5e76d920e60a7e70d6851a26a018c72437bd450"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a5f235d705c49804fd7b67d1cfcab1cde0c36c9367329dfce960fe249b2758008fa769d24b5f0550c6f2418f055119d19c2ff84c2f127236027d5f202efcb43a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.springframework/spring-jdbc@5.3.18?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://spring.io/projects/spring-framework"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/spring-projects/spring-framework/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/spring-projects/spring-framework"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.springframework/spring-jdbc@5.3.18?type=jar"
    },
    {
      "publisher" : "EE4J Community",
      "group" : "jakarta.transaction",
      "name" : "jakarta.transaction-api",
      "version" : "1.3.3",
      "description" : "Jakarta Transactions",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cc45726045cc9a0728f803f9db4c90c4"
        },
        {
          "alg" : "SHA-1",
          "content" : "c4179d48720a1e87202115fbed6089bdc4195405"
        },
        {
          "alg" : "SHA-256",
          "content" : "0b02a194dd04ee2e192dc9da9579e10955dd6e8ac707adfc91d92f119b0e67ab"
        },
        {
          "alg" : "SHA-512",
          "content" : "764ade8ba807682dcd1ec7382c35275f3d8ab09a03d5b45c48e732501190e2738269080aaf28aa8dd656c11ee84bfb7dae6953dd2768f2acecd3a8cf0ca4961e"
        },
        {
          "alg" : "SHA-384",
          "content" : "63adeb3c5eb24ad0147377436b6e3208d5e97c0e800e0e1e4cb3ba92699f1b06034c2ba00e3689aa8f909ee96c432db0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "dd0a253f45dac003d40ebeed7f38b0850ff4b08941d55db5b3bbf4c936f94062d23799729ff718c54a565de2482bfd3d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d47afbaf1daba46c7aa107bf1b476857523738370309394958f96a2105686684"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1b744b2d939a8d0a2bbd0be29c717af4a5e2374ca26fbb95a16df03aa55d2aa092e9314f20d5b080f02030ae1b70e4904ef0f8e1509680b9001153cdb7bc1934"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.transaction/jakarta.transaction-api@1.3.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/eclipse-ee4j"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jta-api/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jta-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jta-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.transaction/jakarta.transaction-api@1.3.3?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.persistence",
      "name" : "jakarta.persistence-api",
      "version" : "2.2.3",
      "description" : "Eclipse Enterprise for Java (EE4J) is an open source initiative to create standard APIs, implementations of those APIs, and technology compatibility kits for Java runtimes that enable development, deployment, and management of server-side and cloud-native applications.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e0a655f398f8e68e0afebb0f71fba4e5"
        },
        {
          "alg" : "SHA-1",
          "content" : "8f6ea5daedc614f07a3654a455660145286f024e"
        },
        {
          "alg" : "SHA-256",
          "content" : "0c2d73ab36ad24eeed6e0bea928e9d0ef771de8df689e23b7754d366dda27c53"
        },
        {
          "alg" : "SHA-512",
          "content" : "1e07257b631ae3331a71d7cd9136152cddebbe786ba50c689bec618a9eb659be8e952fe0405db36332cb6c12c6c87c6d648e817c027ea8c6e0c660ce82f6f424"
        },
        {
          "alg" : "SHA-384",
          "content" : "d68e1f600244d7a3628244e0265208ce08881f4ea33a3cd1f085886f7ce755cdd44bc6788ebda1baf8bc23b1f3c844dd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "fb77e58872d4e3ef6475094ea96f1ce32a1a7c3617393fcab47c47cb84f6995315c5f805d518c69a0cea751ce980bf13"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3619596135b169649ed16b75972c39614192d2a802291a7eb4c1814ef7dc9ff8"
        },
        {
          "alg" : "SHA3-512",
          "content" : "045c7f1ec7f9191cd2ff35fadf5c037aa596a288189185fd10d5fed89cd3661b6353945083f4c3943c87e343b61a556699f43f00a0e928c165e52d57fe514fa5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.persistence/jakarta.persistence-api@2.2.3?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jpa-api/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jpa-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jpa-api.git"
        },
        {
          "type" : "website",
          "url" : "https://www.eclipse.org"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.persistence/jakarta.persistence-api@2.2.3?type=jar"
    },
    {
      "publisher" : "Hibernate.org",
      "group" : "org.hibernate",
      "name" : "hibernate-core",
      "version" : "5.4.33",
      "description" : "Hibernate's core ORM functionality",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9d7ab2e3d7b9e4116415fb47765a05af"
        },
        {
          "alg" : "SHA-1",
          "content" : "23fae08d13475d71acd374928e38d3f8e1baa3d3"
        },
        {
          "alg" : "SHA-256",
          "content" : "594ee0cb3532db0896f1ded317747bcb6e460adbd37d0ce27f01363237cd1f5b"
        },
        {
          "alg" : "SHA-512",
          "content" : "09b187258e60b518b5f67e4163e58d7c3679e65dbc04b9c09d9b95f4cca70911efd4a3a9c7237f4b28b7fa0aa5cb27943d5b0862217072ba2c527ca484ac9c28"
        },
        {
          "alg" : "SHA-384",
          "content" : "129f4d26298a747124253c4d31d0041effb64322a3859069cff200506d69b23f39c93576b50ff82a8bade32e91bab7a8"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f3c59d1c7452397b834aaee9e2df8bf983f3820e560f745b46e7fcf34e827c467b06df84a3ddc9b030bcda063f8d85e2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9bcdf2ee10829df094b865960197d7a6e7383ac09dfaecc2a4fc6c0dd9eab53a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a505e6a37d03e9f672de9dbc14b71e91678488c92da517c6efc032f90482e70428aa25dcc740efb5111fe5f7f774de37e5357b6a80283078377e8d3c2037739b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "LGPL-2.1+",
            "url" : "https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.hibernate/hibernate-core@5.4.33?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://hibernate.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://hibernate.atlassian.net/browse/HHH"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/hibernate/hibernate-orm"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.hibernate/hibernate-core@5.4.33?type=jar"
    },
    {
      "publisher" : "JBoss by Red Hat",
      "group" : "org.jboss.logging",
      "name" : "jboss-logging",
      "version" : "3.4.3.Final",
      "description" : "The JBoss Logging Framework",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b298d4b79e591843c1eb1458ea79f070"
        },
        {
          "alg" : "SHA-1",
          "content" : "c4bd7e12a745c0e7f6cf98c45cdcdf482fd827ea"
        },
        {
          "alg" : "SHA-256",
          "content" : "0b324cca4d550060e51e70cc0045a6cce62f264278ec1f5082aafeb670fcac49"
        },
        {
          "alg" : "SHA-512",
          "content" : "60759c4340a7c1af0f10a5c2252e028150413d2437547f42018a94a838dc4a2bb24256411490a7e5f109b76305e2752ecf37def85e631d7e7b7e8461e0b54dda"
        },
        {
          "alg" : "SHA-384",
          "content" : "1c07afd380f25c076ca0e568be205ede18c875471547133711f04bb2ffc9936c7c97708605cca18c9a98fc94b072caea"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f17eeff5983e9e0562c90b8b3051b2dbee885818adb104ba8700a399f90a1a3c85a766686dafa06122cd6f8979561ea9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c41833778a14d364e29767d543ac402e93222616bfcc020552f0f037cfc6b02a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0dace1456d22070719b6e7322cdfb64b34f36f5c8f271f62026c691b00fe32fba50ac17f61b467160ec2b7cabdeeac77029ded3d7f9b1e08a4a0f709222a5017"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.jboss.logging/jboss-logging@3.4.3.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/jboss-logging/jboss-logging"
        },
        {
          "type" : "website",
          "url" : "http://www.jboss.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.redhat.com/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://lists.jboss.org/pipermail/jboss-user/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.jboss.logging/jboss-logging@3.4.3.Final?type=jar"
    },
    {
      "publisher" : "Shigeru Chiba, www.javassist.org",
      "group" : "org.javassist",
      "name" : "javassist",
      "version" : "3.27.0-GA",
      "description" : "Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation simple. It is a class library for editing bytecodes in Java.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "05ea852668c9e38294d1bb823af95a70"
        },
        {
          "alg" : "SHA-1",
          "content" : "f63e6aa899e15eca8fdaa402a79af4c417252213"
        },
        {
          "alg" : "SHA-256",
          "content" : "0730bdb1547a5a3f458d60400d804078d80f329c5b5dbc2498a4e220de8f7013"
        },
        {
          "alg" : "SHA-512",
          "content" : "7237c6ba9ed082ea635d378d4fae27ae325a79ba747a3c082fd8d8f0fe5cfee60468165abbd152b71d34d5a7707911238e11ebb7f1ebaf8cb21006b4016bab76"
        },
        {
          "alg" : "SHA-384",
          "content" : "423796fee40c128f09ea8dec4658e088a868733e79796a5a5a11ca179a86890189a3f02fa1219a33dd1dec53071b6b53"
        },
        {
          "alg" : "SHA3-384",
          "content" : "cf398eaad8030f71b728c2ddfefff614368651fc3b311db878fd4159800c61543a9ad4be7989565da7ee0ef524bb60ac"
        },
        {
          "alg" : "SHA3-256",
          "content" : "64c28c2b64bbed18d0a5c1be7d844ec8394315daf7a88e1e555378a2d1b8ce00"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4f7f3f11e7cac3bf7f3f26dd910d6fd64f92f7bc37988c89bd70bc507eeaab5f3ce8ba9f502a806c926aa3275c6f2009448121b410e4be0c27aaad845eacef2a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MPL-1.1"
          }
        },
        {
          "license" : {
            "id" : "LGPL-2.1-only"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.javassist/javassist@3.27.0-GA?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://jira.jboss.org/jira/browse/JASSIST/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.javassist/javassist@3.27.0-GA?type=jar"
    },
    {
      "group" : "net.bytebuddy",
      "name" : "byte-buddy",
      "version" : "1.10.22",
      "description" : "Byte Buddy is a Java library for creating Java classes at run time. This artifact is a build of Byte Buddy with all ASM dependencies repackaged into its own name space.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8307313c20c0b9417cf5f60b2cda7436"
        },
        {
          "alg" : "SHA-1",
          "content" : "ef45d7e2cd1c600d279704f492ed5ce2ceb6cdb5"
        },
        {
          "alg" : "SHA-256",
          "content" : "f931adc4393177afa5244c47257a83955e27fe047c409378c6eda090fb074a84"
        },
        {
          "alg" : "SHA-512",
          "content" : "e7b44444cb918b7e33fc19e722e0b31bfe595b6d4f9557b739b04893e72b8d9d25340c453f093cc35ebe7e13abb4c5caf08e21074218ac47e61d445c0fd8b725"
        },
        {
          "alg" : "SHA-384",
          "content" : "de9451d04f858a08cc758ccc1794fe1b8df0a5fcf3e8f37b734b1eff69c93d516ec173872e517719e054fa3721815c12"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ce491feb30e5898108e2432f79ae32f1df0f7984085aaaf7dab558262ea740b041137722daa0fc1c4739b296da6ae7b1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7081bf3e0573ca322a3d15dcf133c124239b0fb85bb73380a642cd05f136e419"
        },
        {
          "alg" : "SHA3-512",
          "content" : "39af86b90dc15899e0390654be25dda5f584bd962172caa30276796d47104db3c9bc6326548e5d2e97ed42d593f9b5894d8d95f76d6eb4154c1e3db73b4a9f4c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/net.bytebuddy/byte-buddy@1.10.22?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/raphw/byte-buddy/issues"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.bytebuddy/byte-buddy@1.10.22?type=jar"
    },
    {
      "group" : "antlr",
      "name" : "antlr",
      "version" : "2.7.7",
      "description" : "A framework for constructing recognizers, compilers, and translators from grammatical descriptions containing Java, C#, C++, or Python actions.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f8f1352c52a4c6a500b597596501fc64"
        },
        {
          "alg" : "SHA-1",
          "content" : "83cd2cd674a217ade95a4bb83a8a14f351f48bd0"
        },
        {
          "alg" : "SHA-256",
          "content" : "88fbda4b912596b9f56e8e12e580cc954bacfb51776ecfddd3e18fc1cf56dc4c"
        },
        {
          "alg" : "SHA-512",
          "content" : "311c3115f9f6651d1711c52d1739e25a70f25456cacb9a2cdde7627498c30b13d721133cc75b39462ad18812a82472ef1b3b9d64fab5abb0377c12bf82043a74"
        },
        {
          "alg" : "SHA-384",
          "content" : "2e811e531ce30a2a905d093a00de596cf04406413b60422db8252b46125cadf07b71459cf6ac6da575ec030a9bf05e57"
        },
        {
          "alg" : "SHA3-384",
          "content" : "bdf019332ae8714ef6a3904bb42bb08c1fe4feacf5e6137274884b0377d4e5b5f7aa9fe8e1ef5ca9b3e15f12320fdb67"
        },
        {
          "alg" : "SHA3-256",
          "content" : "babce5c8beb1d5907a7ed6354589e991da7d8d5cbd86c479abfa1e1dfc4d2eb8"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3a8ce565280a157dd6e08fb68c317a4c28616099c56bc4992c38cf74a10a54a89e18e7c45190ce8511360798a87adc92f432382f9d9bdde0d56664b50044b517"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/antlr/antlr@2.7.7?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/antlr/antlr@2.7.7?type=jar"
    },
    {
      "publisher" : "JBoss by Red Hat",
      "group" : "org.jboss",
      "name" : "jandex",
      "version" : "2.2.3.Final",
      "description" : "Parent POM for JBoss projects. Provides default project build configuration.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "721b5868cfbb718dd97facc96929dde8"
        },
        {
          "alg" : "SHA-1",
          "content" : "d3865101f0666b63586683bd811d754517f331ab"
        },
        {
          "alg" : "SHA-256",
          "content" : "0544d55ec0cb378fd8f3b20e66277f893f3094cb67e71a1ec0cce6ce150f83b3"
        },
        {
          "alg" : "SHA-512",
          "content" : "a2011fb69d4853d4386c6878d9f6cde8335e39d28699dabb5b4253dcc5376ea9468dd6d8f1c0ec5b87fa3e54ad80ec2f2c71da3e1232900c64ea4ccd754931b2"
        },
        {
          "alg" : "SHA-384",
          "content" : "021ce3373801c97602202a5d25bb8eaa16814fe9fd37cd2083c0781f2f746d9e183dc5e7210a39543b09ea685426bbf0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2f6d1427c9bcb203d488b1f60ffe0048cbfa32020fd4c6e1dbec88a6a39c4a0f7912892b33a9df4ee5f5704afcac4cec"
        },
        {
          "alg" : "SHA3-256",
          "content" : "675de7c27c684b5025ff85e00cf1d2d8075acac9f839fe2727305b74ee60ba84"
        },
        {
          "alg" : "SHA3-512",
          "content" : "185ada941cea594b0a419e16259fa52ee059410a69100959141ea72cbad086c1e94b218bb2bebd5231f70a746b21a1d1c4d008094c66d00ec1a1dd1d0b644a7d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.jboss/jandex@2.2.3.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.jboss.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.jboss.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://lists.jboss.org/pipermail/jboss-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/jboss/jboss-parent-pom"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.jboss/jandex@2.2.3.Final?type=jar"
    },
    {
      "publisher" : "fasterxml.com",
      "group" : "com.fasterxml",
      "name" : "classmate",
      "version" : "1.5.1",
      "description" : "Library for introspecting types with full generic information including resolving of field and method types.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e91fcd30ba329fd1b0b6dc5321fd067c"
        },
        {
          "alg" : "SHA-1",
          "content" : "3fe0bed568c62df5e89f4f174c101eab25345b6c"
        },
        {
          "alg" : "SHA-256",
          "content" : "aab4de3006808c09d25dd4ff4a3611cfb63c95463cfd99e73d2e1680d229a33b"
        },
        {
          "alg" : "SHA-512",
          "content" : "7fc4764eb65227f5ba614698a5cf2f9430133f42ec6e2ae53b4c724ee53f258541a0109fe0659e0b9e45729b46c95c00227e696b8d1addcd772c85f877658c9a"
        },
        {
          "alg" : "SHA-384",
          "content" : "28b4780b2353ebc08dbc02c9a343527a9062a0455bfb4ab135cb639c03e5dfd9c2250a835c44d5f17d275667c2009694"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b194ace8f1f49f410286bd859866678b95a1b2c6f73e41f48291eb7438dffea57aaa9b177459038b6997771ce4d1cee1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "50234c94efed4c816eb77bd2f70b869c9f89ddf8ee73dc25e354f4d0b81b3e1f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9886421726066b313a62283a6811b76d904ea1c1e9b7b2d850cb47afa189b03cdef053c8f7f6b79e77f2269c45f8cc2ed75c3389e96594b50987fef311d5a25f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml/classmate@1.5.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://fasterxml.com"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/java-classmate"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml/classmate@1.5.1?type=jar"
    },
    {
      "group" : "org.dom4j",
      "name" : "dom4j",
      "version" : "2.1.3",
      "description" : "flexible XML framework for Java",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "41efcf234c5a05a8c590f9b51d53ca66"
        },
        {
          "alg" : "SHA-1",
          "content" : "a75914155a9f5808963170ec20653668a2ffd2fd"
        },
        {
          "alg" : "SHA-256",
          "content" : "549f3007c6290f6a901e57d1d331b4ed0e6bf7384f78bf10316ffceeca834de6"
        },
        {
          "alg" : "SHA-512",
          "content" : "c17d210d2a3d304ae03f725fcc6644e44185c945807f4980681972cbff946b5468d1dec84eb4f660627ee1f86ad4b8372990cd63ab956d4eb75a22d20dbd9cd1"
        },
        {
          "alg" : "SHA-384",
          "content" : "930553b442d977537ccc76cf230d28f4c41d19ff438a5a33481942c3cc4dbe42378180c5cfdaf3872a0a8ec5e3518bb5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ddae9d6c0816a5c39d05c5dfa9c98810e375164b0c9d0f89a3de179e7f52c830cc2ccbbc9731cca34fd78b5cb3457419"
        },
        {
          "alg" : "SHA3-256",
          "content" : "79165a5f9c7051a61182d14233e2868a2fc05eb556f08c574b3c990b3151fb66"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d7ef116204278ecac874ac3e42ae9a6653411b02cc3202ebeb67badf1e317ca8d38f6e10d6c3eb11e16f53cfc83d0bb2d3a496daa5c93ad4ccb5746202257a2f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.dom4j/dom4j@2.1.3?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.dom4j/dom4j@2.1.3?type=jar"
    },
    {
      "publisher" : "Hibernate.org",
      "group" : "org.hibernate.common",
      "name" : "hibernate-commons-annotations",
      "version" : "5.1.2.Final",
      "description" : "Common reflection code used in support of annotation processing",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2a2490b3eb8e7585a6a899d27d7ed43f"
        },
        {
          "alg" : "SHA-1",
          "content" : "e59ffdbc6ad09eeb33507b39ffcf287679a498c8"
        },
        {
          "alg" : "SHA-256",
          "content" : "1c7ce712b2679fea0a5441eb02a04144297125b768944819be0765befb996275"
        },
        {
          "alg" : "SHA-512",
          "content" : "9ce69f19b2e080071a69a2faa992be70b2c153d94862c306f784d1f91fe66e01139c13a3b4f156ee17bdc58ea9c93b61e2dbdfc43152d43896610251488c6e24"
        },
        {
          "alg" : "SHA-384",
          "content" : "4f1652cc7f93556ca615f7a70a63e22004f7e1325b6d38492c5601d9b13f9ee3292b7e8919c1a0ef41de0266ed84b941"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c39a9a94055696454d0ecc5c9718ca1ca7ea05f3b22eb8991c69f31e976a595b86fcaa37fd030c03c0860610bd7251c4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a2dc556200c3503ae769c6efa3634a94ac30f475f60b9fd7e478c8919e326720"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4c791c5d5c43a3d4907f495966d89bd281d90727e3884d889b07a6e88c0ad3f9a712fabf4f2d73c57412d9eff1946ac48ad5450067ca9f6e83212ab09c18907e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "LGPL-2.1+",
            "url" : "https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.hibernate.common/hibernate-commons-annotations@5.1.2.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://hibernate.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://hibernate.atlassian.net/browse/HCANN"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/hibernate/hibernate-commons-annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.hibernate.common/hibernate-commons-annotations@5.1.2.Final?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "org.glassfish.jaxb",
      "name" : "jaxb-runtime",
      "version" : "2.3.6",
      "description" : "JAXB (JSR 222) Reference Implementation",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "29acad12b7cdd22b2a5ab66cd7439d48"
        },
        {
          "alg" : "SHA-1",
          "content" : "1e6cd0e5d9f9919c8c8824fb4d310b09a978a60e"
        },
        {
          "alg" : "SHA-256",
          "content" : "cd87d4b98a8bec1d237aed61472ef4adb6a8bb0515cbde1fd62fdd9781c16770"
        },
        {
          "alg" : "SHA-512",
          "content" : "8e8042f4a2a45f3520ce6376d826c0445a54509a728f9f61b274c2e2d92d242bfabfba112994d0df56f59f58c48e4069fb2dabf0fcc67208e651597de5eeaa98"
        },
        {
          "alg" : "SHA-384",
          "content" : "6c3cfac49412ee125c0183e39ef751b8a7db04f02133ca6e039259708d2bd36df88bca3163672c8ab809cca9824e8d7e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3a0e2fbe2231fb39ae58afc52ad6dabf3cb932d4b56116f5ed3697b57bd0970c915e1f2b14df48576277c50ebb055a3b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "00c4b10fb5581894c010618d4af73b821fbc262d883e5e1089438efa72243668"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f5657b09370ecd381e76148b52fd8aa8e904f09424f2c7df5307b11ac0403db885d8a82e50002047c5be4c532c8f5778bd11833beebef3ddfe02fbf2fd35b464"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.6?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jaxb-ri/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://accounts.eclipse.org/mailing-list/jaxb-impl-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jaxb-ri.git"
        },
        {
          "type" : "website",
          "url" : "https://www.eclipse.org"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.6?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "org.glassfish.jaxb",
      "name" : "txw2",
      "version" : "2.3.6",
      "description" : "TXW is a library that allows you to write XML documents.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "dd02e61e4662e6461f0c21b08e721021"
        },
        {
          "alg" : "SHA-1",
          "content" : "45db7b69a8f1ec2c21eb7d4fc0ee729f53c1addc"
        },
        {
          "alg" : "SHA-256",
          "content" : "f8bc249d22ad950257c373aea80c2f16f18f5eb4d557bdb2660bf5e1f1e84776"
        },
        {
          "alg" : "SHA-512",
          "content" : "468cd89821480364a49f73f1774383fd483fd8273d373601a4867b37267f125c3fdf3ffd8a73a114408699137c469c02e47f94b80c7d21df236b4a187d12680d"
        },
        {
          "alg" : "SHA-384",
          "content" : "02c99a070c038081922bdae47cd9e739045342b223c55204716bba9f81eca971ed1313eab8bb103dc596bfd7b84a6b72"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e63ebe6d86a51506c45b430c8a71d80ac0fa95f99692a30697468b242ccd5c818f5d4aaf967e049797fee704a92307db"
        },
        {
          "alg" : "SHA3-256",
          "content" : "585be97a69d2a94b6647330ac36b3d5b2389eadfb92138f2b80a3e8c3bcc4b63"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2e7ed6f7267f7e4eb0c0b0e89f845fcd253eec4ab1fa66fd915b7a4bd738e881c9e8f801af17dbbbfbc4311409f0fad9737780693a1018582e307a3293d27405"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.jaxb/txw2@2.3.6?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jaxb-ri/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://accounts.eclipse.org/mailing-list/jaxb-impl-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jaxb-ri.git"
        },
        {
          "type" : "website",
          "url" : "https://www.eclipse.org"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.jaxb/txw2@2.3.6?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "com.sun.istack",
      "name" : "istack-commons-runtime",
      "version" : "3.0.12",
      "description" : "istack common utility code",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1952bd76321f8580cfaa57e332a68287"
        },
        {
          "alg" : "SHA-1",
          "content" : "cbbe1a62b0cc6c85972e99d52aaee350153dc530"
        },
        {
          "alg" : "SHA-256",
          "content" : "27d85fc134c9271d5c79d3300fc4669668f017e72409727c428f54f2417f04cd"
        },
        {
          "alg" : "SHA-512",
          "content" : "af36b11cc0d82b7f62c64941f4e7d441d25cb9f3c4b3e08753d038c388e5a09364b5dac9127f29a9b8df6d96034133caadab6d74371077478d2f301605913460"
        },
        {
          "alg" : "SHA-384",
          "content" : "ad8ba1f6538e087915b1e7fbf4a7a60b006ebecc4ab52986c10dfe88ae11ae7eb6e1f302bee06f70b16ec316f001375b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2207c7e1570860d6300ef3157905498efaf26ba85566b053495f583b20c755cc07d6855b2d79136ab4d6544635e39f4d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "50a425e524a6ee81110ecd86190d039a84d46aa3c45855310fe4f95abba3c21e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "286997280ee0885c456686cf91c601e600106138f39eb81fc27381868f7ede0d1521cdf22c420331b1a961ed2f1ba1887a9ae05073f4364e3ffc297f40f0de53"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jaxb-istack-commons/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jaxb-impl-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jaxb-istack-commons"
        },
        {
          "type" : "website",
          "url" : "https://www.eclipse.org"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "com.sun.activation",
      "name" : "jakarta.activation",
      "version" : "1.2.2",
      "description" : "${project.name}",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0b8bee3bf29b9a015f8b992035581a7c"
        },
        {
          "alg" : "SHA-1",
          "content" : "74548703f9851017ce2f556066659438019e7eb5"
        },
        {
          "alg" : "SHA-256",
          "content" : "02156773e4ae9d048d14a56ad35d644bee9f1052a791d072df3ded3c656e6e1a"
        },
        {
          "alg" : "SHA-512",
          "content" : "8bd94a4370b827e3904f31253b022e5c1851896d3b616ca7daebfef259238cedc56d4ced32c74f24a13c3e2295b0ea012af5d04656b7f713cc53a2f18d5e2cf7"
        },
        {
          "alg" : "SHA-384",
          "content" : "1cb0aff8b73ba52a9931b2cf13c75a1ce6665fb826bf97ede66db75c532136aa189fb53a1925e62b6eef572309ef3b9a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "83801332576d931f4091ba65ea240d49c23e3b93dae939ce2eed63de943f80f251a4347638b99900de5b831796b12590"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5363211b59dfaff6e1973e93548e5e4062189c6d0f43d7802627ebeb7b7ff37d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0c7b62a3432b19ffad02eafffc7e598391cd32b1313d075f94cda09913402770b4ba2314716625571f266431067229c93cec36e17c3ea598623542988634ca0a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jaf/issues/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jaf"
        },
        {
          "type" : "website",
          "url" : "https://www.eclipse.org"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar"
    },
    {
      "publisher" : "Pivotal Software, Inc.",
      "group" : "org.springframework.data",
      "name" : "spring-data-jpa",
      "version" : "2.5.10",
      "description" : "Spring Data module for JPA repositories.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1c2afbe3eef42c4039e625fd9806330f"
        },
        {
          "alg" : "SHA-1",
          "content" : "25830894d7ccf948e42903b100463a5f9f8c9a3a"
        },
        {
          "alg" : "SHA-256",
          "content" : "f30a20ac8dcda22319f6df8f1e2ff804dce6fba0669a4a8b23f9b5db746fe551"
        },
        {
          "alg" : "SHA-512",
          "content" : "15d2c9b72c29e21b174c9f3959527f309c4530a53f40924a4a757a9a7d12ea746f815b773f132484d35283eaa3c5d67be42614f9a143cc25ebbc812092ba7f29"
        },
        {
          "alg" : "SHA-384",
          "content" : "5eae5c22411b56e7eed3b8ca149a1f21ec87f429c8718da4ac23e6f4dc379295ffe304134b9e79fba077216bdb7ed86b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "bf64eb301283a147468f032777d17be589dfc9640e6fd60f0c750170f2cb610e7ebebbb5faa45905a43b283cf6c87ad7"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8b3ef686924ee8369ace3267992d9f0f216b6ef00c0a3e1d35953ebcd19a9488"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ab3e10cc6bbda551c39acccd3dcce856227ad6d6d39e9d93e35320ba8d97a4bcd6f3a8a49016178b6641098e6e2b1813d0a6a02167864e975fbf8546f5fdcea3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.springframework.data/spring-data-jpa@2.5.10?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.spring.io"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/spring-projects/spring-data-build/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/spring-projects/spring-data-build"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.springframework.data/spring-data-jpa@2.5.10?type=jar"
    },
    {
      "publisher" : "Spring IO",
      "group" : "org.springframework",
      "name" : "spring-orm",
      "version" : "5.3.18",
      "description" : "Spring Object/Relational Mapping",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9888adaf9c9ab46c75bdc9a6c38042f2"
        },
        {
          "alg" : "SHA-1",
          "content" : "ec32d5f4c718cc63e7c44adf5c4e7c49cdffa147"
        },
        {
          "alg" : "SHA-256",
          "content" : "12faa2c7347b58db005424078cb325a9c9f427f91c167d4b926ecda5e70cfc8d"
        },
        {
          "alg" : "SHA-512",
          "content" : "9080e4ac343ba5afac821d6c90cba0e298baba7053d78dec4b710470b6ab77a199d96b8a4e3c5cb136642c9dbc9b50330ea8b1b105644fd39c7912695991d18c"
        },
        {
          "alg" : "SHA-384",
          "content" : "f40d4102eb379075d0a362beb3e47fb1324917e85fbf010e635b6c1f18fd105956d7ae1195571444b4bac696b41c11b6"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a237850d594841c78026a8b5b4c02bdbd5a60c8d624e02871e5b35d19fff6fe0bda0dc79bdab88f36dec6d3544175dfd"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e65bfdccc95a40a359c98a5d297c0b444b4dfe10f04e84a0e8fb3fb9b9f01efe"
        },
        {
          "alg" : "SHA3-512",
          "content" : "33f7c5e745c34dc6fa92429e20af46035ad83ddf4c0ea48f6c437c63b4a8964f92b9579a9aacc3f0571ee672030740cf6405d0137032c4e1b7c27439de448363"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.springframework/spring-orm@5.3.18?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://spring.io/projects/spring-framework"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/spring-projects/spring-framework/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/spring-projects/spring-framework"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.springframework/spring-orm@5.3.18?type=jar"
    },
    {
      "publisher" : "Spring IO",
      "group" : "org.springframework",
      "name" : "spring-aspects",
      "version" : "5.3.18",
      "description" : "Spring Aspects",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "75dad3c83d647a04ec36d14ea09d7f02"
        },
        {
          "alg" : "SHA-1",
          "content" : "78e473c68f3f579f6dff4810530260bcfe97ca8f"
        },
        {
          "alg" : "SHA-256",
          "content" : "13aec9ce656f9dbe64b8d336d0564b6603442a6655bd4aeeaac617500c9a9a05"
        },
        {
          "alg" : "SHA-512",
          "content" : "50c5937dd41ecc6b004168d04cfc306fbed2845246dca9eb22f04dd61ffe2541ccd1fe415e6c822e88c9a0bffbce3800ce26b87680035e31ff23185ceedb1632"
        },
        {
          "alg" : "SHA-384",
          "content" : "57533ea6271ddef10d40a104f56f8ebbfc9583650563363f889903d638807c758ef6a120f6160c0582995bfad3966ded"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b785a7c78435e0167f187bca2beb1be35105e2d9e1c40720819087b8c8ec9285c8e8ea2222afc01f2041368cff64f0a3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f497801aee778182393f01adbf9ff661415cff64be9c28adb69738d2366182d1"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3dad86186785fcdd9ac52cca3ac4ceb411519e0416d6702abc3e685ab28ab68cbc575872302a7b701e6be0d560d59b34da0d8d3d69fd91c033ff3b698a9aa4a6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.springframework/spring-aspects@5.3.18?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://spring.io/projects/spring-framework"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/spring-projects/spring-framework/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/spring-projects/spring-framework"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.springframework/spring-aspects@5.3.18?type=jar"
    },
    {
      "publisher" : "Oracle",
      "group" : "com.sun.mail",
      "name" : "javax.mail",
      "version" : "1.6.2",
      "description" : "${project.name}",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0b81d022797740d72d21620781841374"
        },
        {
          "alg" : "SHA-1",
          "content" : "935151eb71beff17a2ffac15dd80184a99a0514f"
        },
        {
          "alg" : "SHA-256",
          "content" : "45b515e7104944c09e45b9c7bb1ce5dff640486374852dd2b2e80cc3752dfa11"
        },
        {
          "alg" : "SHA-512",
          "content" : "d76243093d93c556ae399ce9b65ea35bc5a7e12703110108cf8eaa314d8f9b094034dd530438189775f61f0994727cac6f68efb8eab2f13349922b08eb00d4ec"
        },
        {
          "alg" : "SHA-384",
          "content" : "44300db745c6a065b5ca907e04d06bc42e42d4bf59470b24d2c40f889cf8fc79f0793997321874b2c25bc269900f9c51"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4884616293856fe9d2ed2c6bb838f32d645ccab65a05b949351e6d93d6ed9ea408c8666ef17e19bd033c25545bafb490"
        },
        {
          "alg" : "SHA3-256",
          "content" : "905d9b5869f8ee5ad4b1027293beb5af5051aa2b929f52500611beedd2d5c992"
        },
        {
          "alg" : "SHA3-512",
          "content" : "bec15cc6423179fb27e01c149e9c761a5cc98844e47f2182101d69f84736a85390da487eef7cc2dca94992c14d6ba7fe3d5833d2ad554731bec439ef11d547d8"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/com.sun.mail/javax.mail@1.6.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.oracle.com"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/javaee/javamail/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/javaee/javamail"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.mail/javax.mail@1.6.2?type=jar"
    },
    {
      "group" : "javax.activation",
      "name" : "activation",
      "version" : "1.1",
      "description" : "JavaBeans Activation Framework (JAF) is a standard extension to the Java platform that lets you take advantage of standard services to: determine the type of an arbitrary piece of data; encapsulate access to it; discover the operations available on it; and instantiate the appropriate bean to perform the operation(s).",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8ae38e87cd4f86059c0294a8fe3e0b18"
        },
        {
          "alg" : "SHA-1",
          "content" : "e6cb541461c2834bdea3eb920f1884d1eb508b50"
        },
        {
          "alg" : "SHA-256",
          "content" : "2881c79c9d6ef01c58e62beea13e9d1ac8b8baa16f2fc198ad6e6776defdcdd3"
        },
        {
          "alg" : "SHA-512",
          "content" : "c0ff5bf3ace7acc1b31fcc109cee48d9eb8f025ae15a31dc91eca760933bdb97c93f05d61e95af1e317859d72e5f179f897f5bf3df0e3810f4212d43bacee4bd"
        },
        {
          "alg" : "SHA-384",
          "content" : "c4ee54d80a2e67e819700051d6cfa01a17631c89f942b8690afb601e491f02d7497fe57bd5c70edfb9b444ae8222b846"
        },
        {
          "alg" : "SHA3-384",
          "content" : "de0777d2d1d7aad105defb12aed17ef38abfe89db2449c5243fa3c69304ea24dd8df0881330351d0733313e8f7252814"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5fb94d2742cc3d44abad42c5d61b9c7464a2ef33bc58b4b5b121d49799123460"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c5e37fe3d9c420a9035f1160eb1d396e94f01851c01c6e2f19f19a221bfc484e63f9660c7377f58aa65246b95a9eb799ac4e6798c0b20f658edf00a4435e1efa"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/javax.activation/activation@1.1?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://maven-repository.dev.java.net/nonav/repository/javax.activation/jars/activation-1.1.jar"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.activation/activation@1.1?type=jar"
    },
    {
      "group" : "com.google.guava",
      "name" : "guava",
      "version" : "30.0-jre",
      "description" : "Guava is a suite of core and expanded libraries that include utility classes, google's collections, io classes, and much much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a7379037e654274e3544f2488a29b31f"
        },
        {
          "alg" : "SHA-1",
          "content" : "8ddbc8769f73309fe09b54c5951163f10b0d89fa"
        },
        {
          "alg" : "SHA-256",
          "content" : "56b292df9ec29d102820c1fd7dd581cd749d5c416c7b3aeac008dbda3b984cc2"
        },
        {
          "alg" : "SHA-512",
          "content" : "137b74502a104d744239261923ea725949ea8f101290f9c3b4bfbfee2e6635e61c6a61207236df8c00670d45a5b50c1b7710c7553b370a7ad9dd32b4268d1f84"
        },
        {
          "alg" : "SHA-384",
          "content" : "dad46a3438e9e2fc42032e6a249240fb706d58535dd1844fdf45c8739ba9d430afd17523042f93d81aeddafedb226c34"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6806083c88d7aafc72c3869001e081afd3ad99a2d09e4f624a239fb81bf10562478f99d684ad4479d337cb4420cc938d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ac7bf441042441fa56d46bc51e07a88138c4d911c6b37e490cde0711eb8fac90"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7c7df6a6bdc3e97f6cc3ef3e522669927fb3e973ca94cef85e7e5b4e141f9b10ce6d5a87ac785907f0bc570e9cd9333f4b85a4c52be8c72f6a14423b3aa11b53"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/guava@30.0-jre?type=jar",
      "externalReferences" : [
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/google/guava"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/guava@30.0-jre?type=jar"
    },
    {
      "group" : "org.checkerframework",
      "name" : "checker-qual",
      "version" : "3.5.0",
      "description" : "Checker Qual is the set of annotations (qualifiers) and supporting classes used by the Checker Framework to type check Java source code. Please see artifact: org.checkerframework:checker",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4464def1ed5c10f248ebfe1bccbedf1a"
        },
        {
          "alg" : "SHA-1",
          "content" : "2f50520c8abea66fbd8d26e481d3aef5c673b510"
        },
        {
          "alg" : "SHA-256",
          "content" : "729990b3f18a95606fc2573836b6958bcdb44cb52bfbd1b7aa9c339cff35a5a4"
        },
        {
          "alg" : "SHA-512",
          "content" : "407d0ac59b02cbef7d93f25c8b287cd587232aa5ddfee6d2c7ba34d712565b0a5adfe52b5daa20d3e6c3ab1e7a5f8b08698078d9179185a1b35ada1eb92213bf"
        },
        {
          "alg" : "SHA-384",
          "content" : "01fb1d7a7440f807b2bdb697c709dfa5897edc0755152c0fef465cf77dd820623fccb410ad033e3d52d4b0bc57409ecf"
        },
        {
          "alg" : "SHA3-384",
          "content" : "626beff2173578c3a2ad732c81c48a9b091c9ffdea7d50f4b812fd14cd8299ab7a726b052808490b1022faca69aa6e91"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4fbe95b196e75e549f66831e9b1f8f46cfe1793f4fda350857f5f24349d74af1"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2c84365b1fcd16a765e49c5d8f30f28c3fe7cfe868ac32be726d8b9351c9053ffea23cfa1db9fb5c59c9928d22ad01c3c894d798e115bc446447228c7c4b24c6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.checkerframework/checker-qual@3.5.0?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/typetools/checker-framework.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.checkerframework/checker-qual@3.5.0?type=jar"
    },
    {
      "group" : "com.google.errorprone",
      "name" : "error_prone_annotations",
      "version" : "2.3.4",
      "description" : "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "67beeee58df00366100061c7da82f4c2"
        },
        {
          "alg" : "SHA-1",
          "content" : "dac170e4594de319655ffb62f41cbd6dbb5e601e"
        },
        {
          "alg" : "SHA-256",
          "content" : "baf7d6ea97ce606c53e11b6854ba5f2ce7ef5c24dddf0afa18d1260bd25b002c"
        },
        {
          "alg" : "SHA-512",
          "content" : "d48080d877aa121a7e46323f0af3581c583c6375ad3b4632332a63290c0a4bd454f908caf777448ba83288968d532fcdb5400ea2a84bc0549f4fd4c38a9bfd7a"
        },
        {
          "alg" : "SHA-384",
          "content" : "f034bbbaad111dc7935696875e09d103ae0e4d2e6ae1dab7f69cc93c6d1ebf48d73e7f42c5f7c0610fb43cf528c32049"
        },
        {
          "alg" : "SHA3-384",
          "content" : "dd8e705636f0ce876bb7d05cb94ffd233599f1e65e618c20a048fa9d1962c494c7c6b61b50cf0504d9db4021043772b7"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6ea64e731417e1230c440c44f52fffa9b90682249b835e97ca9980ac76ea0742"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9196dde8dbffc6e111d1b17c57709e453dc999e1f8d601cef8d8c1c9618ab1008ff80f132d139b47c3110cbcd6c4e8e565045e55ac43e5653517b0cf0069e2f9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.3.4?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/google/error-prone"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.3.4?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.xml.bind",
      "name" : "jakarta.xml.bind-api",
      "version" : "2.3.3",
      "description" : "Jakarta XML Binding API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "61286918ca0192e9f87d1358aef718dd"
        },
        {
          "alg" : "SHA-1",
          "content" : "48e3b9cfc10752fba3521d6511f4165bea951801"
        },
        {
          "alg" : "SHA-256",
          "content" : "c04539f472e9a6dd0c7685ea82d677282269ab8e7baca2e14500e381e0c6cec5"
        },
        {
          "alg" : "SHA-512",
          "content" : "adf6436a7a9dc6f64b97127861d7a89b78e82bea67f72bda800ef285163adcd84dbf006f679108a2a8c2eed013e0b771da2354087e0845479ff2b6318b881442"
        },
        {
          "alg" : "SHA-384",
          "content" : "bad8b9f52bf7a7e1d3974cb305a69c093fb32d2131539c18d34e471e3ec32bdd9dd136bb4b38bb14d84e99c562f208c7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8131aaf65f996cfa2c3f7d406caab3acf3e6650bcbbcd5595f8a457a211810ff110c1923876e068831a07388ddc26f33"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a9e4179a6bfa8b363b9fd4f32f8892c4a7954ed1695d3f33ccef73ceffcaa1d4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9ecbc0f4aa9cff28d519cbf74c8234b5180ae6ff0d6de4efe2de126b3251d466a5ddb878e70b9968095a843c82721c93a4dec53bfe09e3700f4cfe2e38bcac0a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jaxb-api/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jaxb-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jaxb-api.git"
        },
        {
          "type" : "website",
          "url" : "https://www.eclipse.org"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.activation",
      "name" : "jakarta.activation-api",
      "version" : "1.2.2",
      "description" : "${project.name}",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1cbb480310fa1987f9db7a3ed7118af7"
        },
        {
          "alg" : "SHA-1",
          "content" : "99f53adba383cb1bf7c3862844488574b559621f"
        },
        {
          "alg" : "SHA-256",
          "content" : "a187a939103aef5849a7af84bd7e27be2d120c410af291437375ffe061f4f09d"
        },
        {
          "alg" : "SHA-512",
          "content" : "e3d846ff5f62ad9fef514f0726846c63d4aa74b2bb8f60c76258dba37701f83ae75872401071bf40da40697d43a8a6e36d08fa4ef39fe70797fb6f2b1712599f"
        },
        {
          "alg" : "SHA-384",
          "content" : "3e25702596eca7dd48f904b3985d64b4b394d162d3884a907d8b2ee647542808713a42a02f0eeff2c07518a206cc91cf"
        },
        {
          "alg" : "SHA3-384",
          "content" : "07196bf6c1ba4fe3e14e7690b521d3a156ee136a0b34d93f7a20d485c528c25ed5eeaec013172b08bdc63800fa94fe5d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5010f77dbc8c2a28269c7b5b662732ec4a01806f3af9af0b5a12882670303b6e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6e63931ef5638e4919b210ef3fffc731d3b91a34bd88cf4b4410e583e28d9e8652377b74dbdb63ba4b7b11b68ded509200737527412984c9d5bc6e5b4b938993"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jaf/issues/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jaf"
        },
        {
          "type" : "website",
          "url" : "https://www.eclipse.org"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar"
    },
    {
      "group" : "org.flywaydb",
      "name" : "flyway-core",
      "version" : "6.5.7",
      "description" : "Flyway: Database Migrations Made Easy.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1c5e9f27f858860ea608a27314da2606"
        },
        {
          "alg" : "SHA-1",
          "content" : "58c28ead296b8e8152f2beae74ad468b98b3ec96"
        },
        {
          "alg" : "SHA-256",
          "content" : "e940146d5ea10512f43132c3c737a4362825476c07931410d63e636675d56588"
        },
        {
          "alg" : "SHA-512",
          "content" : "89d6a42356fdd49e24dcd71d16970dd6e6bf154a09ab8e6edc9f5d970631a717e2a3f633d3872b57c38ccdae18e673db192ab8a26a78e3c38fd69f22023fd606"
        },
        {
          "alg" : "SHA-384",
          "content" : "e48b9ad00802f06ec2ee7eefb0d798101027cdf9c826f3710b9c1314b9f3505ec7cb4a47396d0cbd0e655f154dbf2282"
        },
        {
          "alg" : "SHA3-384",
          "content" : "fa9e552efe51e68f5f4808a943ddb6a439a65d49fa3ce5c8fe5ddac5967d6e36fa68c7e572889cc6c16bb27a7dfa87e2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "46fd1345182c0bfa1f999bf8608a82d171c0e9df0645075808618d2ba08e2fc5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0a1682345c9c910ee62a496777bf449e57030574fbc1cb8d08951b925c4fc91ee688379e57675cffb72fae209dee29fda8c0f9b04e9abeeb10d2a2305e58fe0f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.flywaydb/flyway-core@6.5.7?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/flyway/flyway"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.flywaydb/flyway-core@6.5.7?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "javax.interceptor",
      "name" : "javax.interceptor-api",
      "version" : "1.2.2",
      "description" : "Project GlassFish Interceptor API",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d46f2dac1607941fbfb81eb7bc83157a"
        },
        {
          "alg" : "SHA-1",
          "content" : "b076d5887ff19f7311fd70cbe03fa3d3d8628a8e"
        },
        {
          "alg" : "SHA-256",
          "content" : "a4df5166bf344be3772f9cd81551ea1f03fe90100b1f6ed30713ea30740440b8"
        },
        {
          "alg" : "SHA-512",
          "content" : "0c949c10a81d3ac7310e18f14e5d1736d558ba0cbc06b82235efe60616a59225fabd523794eb542e95423f9e2dd86c56ce37740f482f8097509c94a568e2bbec"
        },
        {
          "alg" : "SHA-384",
          "content" : "f7d3d02f5f6f7607eca7e8bd4a461033beaa50dd9e6f017fc2a4c0650ec4540e9a5ca915aefb7aacbe1a764bfa6ada4f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "72117f9570c3237668355982907ff3eba2627e434766826f0261999071b4e92d77fc7dac1b486aa86163c13e992a89f0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "59cc4ce0f38a0711a5d35ed04dcdb8e5f95999d68adc2a049e2942d76e073eb9"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b406864aee739a29e98811945efbf5d4e2b0e62a3f7eb81c587133911b25a418362fe325fa37e80e5dd01d9c8dd3d78a1893e359db61a8006e8c8b761a846881"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/javax.interceptor/javax.interceptor-api@1.2.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.oracle.com/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/javaee/javax.interceptor/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/javaee/javax.interceptor"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.interceptor/javax.interceptor-api@1.2.2?type=jar"
    },
    {
      "publisher" : "PostgreSQL Global Development Group",
      "group" : "org.postgresql",
      "name" : "postgresql",
      "version" : "42.4.2",
      "description" : "PostgreSQL JDBC Driver Postgresql",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "22e07f2a7c4fa1100b341c29036c5a37"
        },
        {
          "alg" : "SHA-1",
          "content" : "974fecc1725156b7a646eca68656cbd945201d2f"
        },
        {
          "alg" : "SHA-256",
          "content" : "692b7e93f3a0e793d56138582aa2f8107430b8efce8c11faf44b0a20fce4890f"
        },
        {
          "alg" : "SHA-512",
          "content" : "7bdc8fc6c73cec9a192cc9163f31da7b462ec21009ab6ce3941e8c9b83a7bc805c2f23ef83908a4d855a1da8161587f0cf73afda99ab2e13026c1ba84861127a"
        },
        {
          "alg" : "SHA-384",
          "content" : "288bec2b4c1989b4c6cbda676b62ffae5e622323e123b8d9d6b756fb948aac1f80c5f241e27eaa472481e8d427bdfbcd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e1d1cc9f2c5affb374db23618edc70e3708bbe0be89c4d0d49e076de74a6833c4f597a60c51c2f6d979acaf54a035130"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5a75945c06013f2cbc14df712f7e3fe29a8bce70eb4574ebb1dc1758b9ed7f53"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1b39e3ff3aaa041c8a2696cf1919fa3cc326cafff9f83d88129346f8ac84a75dbd78697e6813040d82f349113f22d529a860bd3f1dd9186691042421c573718e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-2-Clause",
            "url" : "https://opensource.org/licenses/BSD-2-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.postgresql/postgresql@42.4.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jdbc.postgresql.org/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/pgjdbc/pgjdbc/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.postgresql.org/list/pgsql-jdbc/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/pgjdbc/pgjdbc"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.postgresql/postgresql@42.4.2?type=jar"
    },
    {
      "group" : "org.eclipse.steady",
      "name" : "plugin-gradle",
      "version" : "3.2.5",
      "purl" : "pkg:maven/org.eclipse.steady/plugin-gradle@3.2.5?type=pom",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.steady/plugin-gradle@3.2.5?type=pom"
    },
    {
      "group" : "com.android.tools.build",
      "name" : "gradle",
      "version" : "4.2.1",
      "description" : "Gradle plug-in to build Android applications.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d115e8e4e8e963dd1986bf21b24e3cb9"
        },
        {
          "alg" : "SHA-1",
          "content" : "572d7e961572989ba62fa11f361d5e8c5669a417"
        },
        {
          "alg" : "SHA-256",
          "content" : "058d7c727442d3f2bbf325c52cf76d3490c5a2036b192390e3b972fc025dbcf8"
        },
        {
          "alg" : "SHA-512",
          "content" : "8f87ed8ada9c52b891ac18ae0fcf4f0dc12f8e11e689d69c2b2a564145bb92527e5eb9c8cd7b6262ade45164d52f58eafd0a7b5cda27057f486289d8930a2aa6"
        },
        {
          "alg" : "SHA-384",
          "content" : "3f5a4b140d58be3222b23a2d58c4ec551934d419127c82508b6df34e8ea9c5342ccb417786d94b19f46a5021f34cb536"
        },
        {
          "alg" : "SHA3-384",
          "content" : "05de6a89ac5509c23cd3168e3bb1f25e677a72129106228b8fc10389180a9efb78239e5d3efef48a3feba52f93a10670"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e34143abce58f5f42f28257d9a5f325a5573b2b006d5a3f130496c88499ba48d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "50ea882cf013217246147db0a37cf4b7e5b5a2aede11cf3c21a666194887a0d9c38da70c3e10b197e821ef9a8eb3591e8d81186a3c580e34fa33fec5cd127e9f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.android.tools.build/gradle@4.2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://android.googlesource.com/platform/tools/base"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.android.tools.build/gradle@4.2.1?type=jar"
    },
    {
      "group" : "com.android.tools.build",
      "name" : "builder",
      "version" : "4.2.1",
      "description" : "Library to build Android applications.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1c8cad9274380497ec7969a2b1dfe0bd"
        },
        {
          "alg" : "SHA-1",
          "content" : "f40605b579c3c348c2aa24f4cc2927cb32ac5a49"
        },
        {
          "alg" : "SHA-256",
          "content" : "7623c31b41671c49aa15d8775a1987d4f4bb54733571d5c3ec84aa1c7b67dc2f"
        },
        {
          "alg" : "SHA-512",
          "content" : "7ac77c5b5f1468317309a55331cff3f0ddd25e453c8cb03e7900881ef7fbad3e69debfcc056c330fa589179b3853929f81db4ff165d32a777c803668b848b977"
        },
        {
          "alg" : "SHA-384",
          "content" : "65a314ef05f30d742eaeee5e87999622c7a73caf96a5be0ed9ca8663f63770424895d98a004b147375443451a1f1b58e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "000360f90d41166e799b9ff1e474650a62dd3f2233ae12f83dd15b19826b3d6409f02ed5cbf23e7de5a849e524b68865"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6a2142af311183d79bffb3040b1eccdcaf7c0b26e00d62986956aa81dfdafe16"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c8b65950926b73229310367903bc9e83d1066afc38064e710a4aa4c9129bec45f931dea679559fb0d104c89566516635c628d53ed8f3dfabce21eef5318601d4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.android.tools.build/builder@4.2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://android.googlesource.com/platform/tools/base"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.android.tools.build/builder@4.2.1?type=jar"
    },
    {
      "group" : "com.android.tools.build",
      "name" : "builder-model",
      "version" : "4.2.1",
      "description" : "Model for the Builder library.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "109ac8dd5a6712e6520e06263f75d086"
        },
        {
          "alg" : "SHA-1",
          "content" : "04f39d22c9d255667388c4fee54c1ec59688be37"
        },
        {
          "alg" : "SHA-256",
          "content" : "315dcbfc26b5da56d11b627b31ac82c9bfc02a95e656b9c4eb0fd633b15d64e2"
        },
        {
          "alg" : "SHA-512",
          "content" : "4803731256a9ca5f4ec41adff492926832898329db5ce751620c99cd7b55b916ba70527a415cd459a469df8ee0add362e800e90f856f26c12f459dfc5a7018d7"
        },
        {
          "alg" : "SHA-384",
          "content" : "f898c9099914f1f4d0df6ae527916b6de0bd38b75df4c0257cc70ac9d0b14ec306a608580f2b3d23be5960bcf4f94cf4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "143e08ddaa171208edd8d3323ecbc3edf21d91410cec9c985cfc1ee1c65abc6f8bcedb22efc15aa8ad2fc22f83c5f5e0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9c732b3fa74269b061e83dea2c15def6a4968263c41e22b3aca2c76640bcd61a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "bc17db378f8483ad2512eaae62082e06364f15f91d638fde281d9c4fb0168c817a07d9bd534a997d56a5d75ca079af249940ec55db2dc7394a29570987da3b53"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.android.tools.build/builder-model@4.2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://android.googlesource.com/platform/tools/base"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.android.tools.build/builder-model@4.2.1?type=jar"
    },
    {
      "group" : "com.android.tools.build",
      "name" : "builder-test-api",
      "version" : "4.2.1",
      "description" : "API for the Test extension point in the Builder library.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "40681fa1987e788b6ae973562187a9ad"
        },
        {
          "alg" : "SHA-1",
          "content" : "4ffccb1d6d40e885c50d548b1ef709fda8509074"
        },
        {
          "alg" : "SHA-256",
          "content" : "7daa32db5b483b750e3c36016443142825b46f867e4750f19d54da659552604c"
        },
        {
          "alg" : "SHA-512",
          "content" : "bc95979fa68fe71f099c009ce5877c657fd1e66655a0ff9941900b699053b5ecfc356aa42c142167474835746c6332244969c8e5b8ab3f70df735339bbadb4ec"
        },
        {
          "alg" : "SHA-384",
          "content" : "a254ead946b74dce0159a56ca66a2a4eaeae4d56ad799f119f406f2305dce434d9e36889d41401d64277e9629aa44218"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9d62b2519208fe614aaabc6d39221eb04811c3d96a195fee4c8b5648e0e559c1f10e39f2eb7fb0195a6c9047b20e0c0d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "87a4580f2129f107b58d9b1e7c96a574cb99e042640264d6e37dde929a651e58"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c1fc3aed7964235ef1972df54d91ad452e239c96fdd746eb2a9ebfa45fb34e082cf8bef77a3f47ec742e8a88c07c1450f1071cc1f6223d52ea66e6ce4011c774"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.android.tools.build/builder-test-api@4.2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://android.googlesource.com/platform/tools/base"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.android.tools.build/builder-test-api@4.2.1?type=jar"
    },
    {
      "group" : "com.android.tools",
      "name" : "sdklib",
      "version" : "27.2.1",
      "description" : "A library to parse and download the Android SDK.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b05516cf63470a9c9a7a9ef29e50f20b"
        },
        {
          "alg" : "SHA-1",
          "content" : "6218ad99ca8df65a7a478545e41f6da405f9099e"
        },
        {
          "alg" : "SHA-256",
          "content" : "a25e87f7bc176f4afc254b12c9b798eb5f22c921ebcb09fcfc014786e2c87845"
        },
        {
          "alg" : "SHA-512",
          "content" : "d045d3896eb2fcfcdb55a2cd860ce66a3b3a3775e38a2a2654cb339ec4c541294628cca68d12bf8a9dd26175f6979495d4e17634368084d776b76d3e44ac7dd2"
        },
        {
          "alg" : "SHA-384",
          "content" : "60baedaa1b1d70a231bbd4ada043cc78c1dc73f4f79dd29ae00167e01eb1106c6a75f0f99112d1f6d3a373fbd0625cf3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "87bbcca4afe77cbe996dd27c6f88c4a53e205543e164fea8242f3c0aba0bfff903048a65278497c417cdef75e4ce4095"
        },
        {
          "alg" : "SHA3-256",
          "content" : "593f0c9500b65c55f9e2a9412d31bc715356ffc9590fa627ea56bc62be8497a4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c731f552ce56693bfd139b7b68ad0178b53ad0da4c5d85e15cf2d02480b2c111fb24d5bf8c97f812a5106ede5c3db924b78142b910c478d9f548a7592b708a44"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.android.tools/sdklib@27.2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://android.googlesource.com/platform/tools/base"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.android.tools/sdklib@27.2.1?type=jar"
    },
    {
      "group" : "com.android.tools",
      "name" : "dvlib",
      "version" : "27.2.1",
      "description" : "A Library to manage the Android device database XML files.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5282a74b447cc81f1f161480e7b9b352"
        },
        {
          "alg" : "SHA-1",
          "content" : "f65e54f58c599151d934f5477c89c2ab267a79c5"
        },
        {
          "alg" : "SHA-256",
          "content" : "00d012a78bc785327cea1c531332eee99c71e5746257dd006fb5793344caf2cd"
        },
        {
          "alg" : "SHA-512",
          "content" : "dc727b864e4a5d6e82586188c36a26041fd9056c90be6555510353f1bc34ef9497b8c44e647eac226ef4d330277a58c15da299db3b26b9353a15710feadf00d1"
        },
        {
          "alg" : "SHA-384",
          "content" : "8f2dfd0563c93087ff19924eb92971ed28104c1f94ff795f8c0ea43cfa3111538e01a7a9af86ee08110c2fa1380cb91f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "908ffed81264da63c6cef0657ccc19f11e76b398be890fe2052824ca656caa8151a7b214da93f4b715561ef9b1e657f3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d3ef118c6b2930f786413fafd7991c73ad63e15f4cc0e58b7d9cb59b4e708354"
        },
        {
          "alg" : "SHA3-512",
          "content" : "dbfeb2972713ab3ff698e73227d05c787fe7685092067b4ccd50abaa44eb00794549ed9e4e40f279401b23d5b91f22a87b73799adb20ec6f45276a0da4b2704a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.android.tools/dvlib@27.2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://android.googlesource.com/platform/tools/base"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.android.tools/dvlib@27.2.1?type=jar"
    },
    {
      "group" : "com.android.tools",
      "name" : "repository",
      "version" : "27.2.1",
      "description" : "A library for downloading and managing package repositories",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "78952d3a5c93f9afa0885161f9a5595c"
        },
        {
          "alg" : "SHA-1",
          "content" : "54de33de8655ac6a61f4b68a09276cf535ee3f29"
        },
        {
          "alg" : "SHA-256",
          "content" : "fcf13eccdf769380376f675595ab2ec527de9190137da252c896ff9444886ef8"
        },
        {
          "alg" : "SHA-512",
          "content" : "63e5182efe8b1b6d81c933bded30b88991f36bb87839123791fc1f09456cd8d193891693d0adba48adca7c513aa5ac1f97ae24e1dc2b2ee27aa72a5f8cb3b45d"
        },
        {
          "alg" : "SHA-384",
          "content" : "b16139d6e99d4d0784a98909744b1a2ca4af089a977008a5ab92392cad80009ffb9b1bed9a5fb82de09b4bda4a796312"
        },
        {
          "alg" : "SHA3-384",
          "content" : "721e3941f365b0deb8f22eded5552a54ce6bf9747667e4550d19af4f418c83aa83e6a138d8b66a6afc9adb677921de4f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "04ec34d155f0c38371840b0d48ad5d9aa77cbfdb34e34969f5349556c7aeba50"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ca71e0eeb2cf940b7debb46bc7c303e5141b3b6cbe5c5874be47e4196e2d8cd45087464a36be5fe1e3391bd742ee6ca3b11373ceba6132a6518dcdba68a0654b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.android.tools/repository@27.2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://android.googlesource.com/platform/tools/base"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.android.tools/repository@27.2.1?type=jar"
    },
    {
      "publisher" : "Oracle",
      "group" : "com.sun.activation",
      "name" : "javax.activation",
      "version" : "1.2.0",
      "description" : "${project.name}",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "be7c430df50b330cffc4848a3abedbfb"
        },
        {
          "alg" : "SHA-1",
          "content" : "bf744c1e2776ed1de3c55c8dac1057ec331ef744"
        },
        {
          "alg" : "SHA-256",
          "content" : "993302b16cd7056f21e779cc577d175a810bb4900ef73cd8fbf2b50f928ba9ce"
        },
        {
          "alg" : "SHA-512",
          "content" : "b4cbdd8fd1703e4b2e1e691db78fbcf2232d836f740d1821c4c191a14f9472508e27a40d06e4b6b153964af68032959c22945ba169a0ca4018b7748162f420a6"
        },
        {
          "alg" : "SHA-384",
          "content" : "7e64f03db2d4f9bacde713ca8aadfcf55e327d92b3cfa54b8cb2f2ffa0cc478d3c7e16f23230ae8266f0dace035142d4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b41aa6abfccc16e1f21760b4b3dbec7422f917fcd0c072d109c3024b1c40793820820940dfe07bfa50e00b47c3a0d504"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ab6207acdd72036b3a5c6e647776b7466e089212602962d87eeb2ac1845508a1"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e9fea84495f286e0f0ec1de6d002cae9e4676b0d2a9ac4706d155ac6d5ed515a76f3fcf0b8c22161f3cb456e048cce9171e3e42edc83888776173c8e2004a035"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/com.sun.activation/javax.activation@1.2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.oracle.com"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/javaee/activation/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/javaee/activation"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.activation/javax.activation@1.2.0?type=jar"
    },
    {
      "publisher" : "Google Inc.",
      "group" : "com.google.jimfs",
      "name" : "jimfs",
      "version" : "1.1",
      "description" : "Jimfs is an in-memory implementation of Java 7's java.nio.file abstract file system API.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2a66dd6ae1115e7547be594d52ea7546"
        },
        {
          "alg" : "SHA-1",
          "content" : "8fbd0579dc68aba6186935cc1bee21d2f3e7ec1c"
        },
        {
          "alg" : "SHA-256",
          "content" : "c4828e28d7c0a930af9387510b3bada7daa5c04d7c25a75c7b8b081f1c257ddd"
        },
        {
          "alg" : "SHA-512",
          "content" : "a915da137c45e2ce1aca552b3658545a50c893c9dc971a1992d1e05b9c7901ee22d5b19f9489353ed4de149a8a72d150e1605ad164e52ce4ff97753969794751"
        },
        {
          "alg" : "SHA-384",
          "content" : "f6ceeefe9ca5151fca7529a2824a1e01b36c555bb1fee209b8699ae049b4f405cc6e52cd6954d086fe90d4c99606d043"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9a0e89986f744b773e95a95a04ac023fc566bd3faff83262a5bc44b78d94f25d1a16bbf657b100078a55cfec2618dfcf"
        },
        {
          "alg" : "SHA3-256",
          "content" : "caf267439bfcec46c735cca54b5959a7404d2e23389b0e0eb047fb2c967cb66f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "016f2eeec65f1ddc6e459cd22a29db84e01c9ad1b47ebf5cdee61a8fd5fa3f48043515d7cdcf0d36043cf879010278ca50b89ae92ff73d197aab1e0d19f1a2e0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.jimfs/jimfs@1.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.google.com/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://github.com/google/jimfs/issues"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/google/jimfs/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.jimfs/jimfs@1.1?type=jar"
    },
    {
      "group" : "com.android.tools",
      "name" : "sdk-common",
      "version" : "27.2.1",
      "description" : "sdk-common library used by other Android tools libraries.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5d94b0da75417e7a146e82d57db8725c"
        },
        {
          "alg" : "SHA-1",
          "content" : "63928bf7ade493ec02d74295aa5b21c26a0c9cb7"
        },
        {
          "alg" : "SHA-256",
          "content" : "fcfe5fcc903e3a8037a53b3dd8ccf2ca021cd3e7b6820a1d289a7c20c427bcc0"
        },
        {
          "alg" : "SHA-512",
          "content" : "1e2422b865d88be07961714cbe8b9c66ad8674051f0dd0c9532f6fad592fa40692637a2d4bdaf639c051853124fabb7384cffe89ba32e7ffea3140a8005d6540"
        },
        {
          "alg" : "SHA-384",
          "content" : "c3b4c1be8bdc0d7132c3e66776de309e5be1dcc239b4295bd550ca161fd79352389ffa1b037c9bbc3c96c1e48f3105db"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ecb0d1f3cb9d44d1ea074cd6e20449d99906f34156ed30308178fad0f735f2069c3d6dd48173d480e37c05aaa520da2b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "436b41c427ffed000782a0b606000fa721b225729165c2425b017487836209ad"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0d9d9624a5598302c10f3dd9762a6028853a38f6c3796f3f51bf271fdbce8b0ead2e5973b8c3e9f3d26ca21240fdbcb9a3ff7ed06e7fe437c20a022c9d325108"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.android.tools/sdk-common@27.2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://android.googlesource.com/platform/tools/base"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.android.tools/sdk-common@27.2.1?type=jar"
    },
    {
      "group" : "com.android.tools.analytics-library",
      "name" : "shared",
      "version" : "27.2.1",
      "description" : "Helper Library for tracking usage analytics.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8d319baf0cdb8acf15d8cda82887a4a0"
        },
        {
          "alg" : "SHA-1",
          "content" : "a821362358ade7d43dce2934486c08253747427e"
        },
        {
          "alg" : "SHA-256",
          "content" : "1e88737c2d846d126479de3d487643fb7d1f154faabbf46afc6c87c95016bdf9"
        },
        {
          "alg" : "SHA-512",
          "content" : "e292afce707fabb9bf040b91bc716cce16b92c3be1d52eadf4286e66299833402d3df9d4d89d8c1d1e47693cb034bc80d9eac4af8d35a5961e202b5b6a9e30cc"
        },
        {
          "alg" : "SHA-384",
          "content" : "b4e3ba8e85d23cea7a760e225672086a4e3e16c2846eb7700021e97e2534d0d4ddbab2daa8c9e2f190b0fdc13eafd9f3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "04ec9abbf37560a6a80930ab38a72bee9390108887d04bb0032d8a76646e0f60848fe88b97d6612c461da1bd48e7e0f2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "99ffc47842a3ea6e8f0ffa13bed77a37f7065fbb068b1a86ada3be0208d5772f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "749b4a51c764b501c6f5979d17225019b6116242b58ea92bbde1f1b3affa2a5bab34e6e14c36b1c5e8530a3342869d50ac661b40255b0eb95c33a3bd509dc6b3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.android.tools.analytics-library/shared@27.2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://android.googlesource.com/platform/tools/base"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.android.tools.analytics-library/shared@27.2.1?type=jar"
    },
    {
      "group" : "net.java.dev.jna",
      "name" : "jna-platform",
      "version" : "5.6.0",
      "description" : "Java Native Access Platform",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3c345206c4f2243e5d1d7caceb9243cd"
        },
        {
          "alg" : "SHA-1",
          "content" : "d18424ffb8bbfd036d71bcaab9b546858f2ef986"
        },
        {
          "alg" : "SHA-256",
          "content" : "9ecea8bf2b1b39963939d18b70464eef60c508fed8820f9dcaba0c35518eabf7"
        },
        {
          "alg" : "SHA-512",
          "content" : "e55cb2eb60742d4a1de61e5d85b4c71d1a6769ef793b9cb5454ed1775ed593201e3c833e42ea033c99ee256217fde17bac5b93c8f12cbb90795c14956eb31d61"
        },
        {
          "alg" : "SHA-384",
          "content" : "84699857ef1cfa8fe2f28948ea9dfcad919baeb23b9f9924a4d892b6fd1f35a07dabef13dac94789a2819c6085068403"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9b0eef31d59f23cb1edd2eae298627133dbb8e6c41dc9bf6b7ffcedde0f3d77d75855cf1ed7ca3f1c48a88d073847ae2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a97bc213427a2cc8099b5ea6db10ba9db07132db7320b92a9bf36ace8dcc57fb"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5066f9068db1960ee9733c11cb5cd5975ec20c2742529985dca03931709329fd4e9df7d97074b5f2319756039e3b10804edd043836746c29a13d25ebfede2aaa"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "LGPL, version 2.1",
            "url" : "http://www.gnu.org/licenses/licenses.html"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/net.java.dev.jna/jna-platform@5.6.0?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/java-native-access/jna"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.java.dev.jna/jna-platform@5.6.0?type=jar"
    },
    {
      "group" : "net.java.dev.jna",
      "name" : "jna",
      "version" : "5.6.0",
      "description" : "Java Native Access",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "56892d6f4d27019833fd53b7cc57ec86"
        },
        {
          "alg" : "SHA-1",
          "content" : "330f2244e9030119ab3030fc3fededc86713d9cc"
        },
        {
          "alg" : "SHA-256",
          "content" : "5557e235a8aa2f9766d5dc609d67948f2a8832c2d796cea9ef1d6cbe0b3b7eaf"
        },
        {
          "alg" : "SHA-512",
          "content" : "f250d92a70ef686466d44592a10513420dc6d6ec188e479f4ceb5ee6615505f3aad2941949364c89f09781b3f8bb09e0679f779ce81c1231f714f9a4f7d769ba"
        },
        {
          "alg" : "SHA-384",
          "content" : "5056dabe84e2923c4ed2daeae55808e4de01074c7251b5a3eaf0045dcbebfbf02618d116cb4841f3d3d6185929b4ab67"
        },
        {
          "alg" : "SHA3-384",
          "content" : "fdfdc50f3d2c6f8121ae9b12ec790c7a4c4e0cc45277324d429ed5da38969a8d9600367fa204a7ef12ed70f3e7ef219d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "30d7f5e60e3deb930a6513bf2e94e4706ea7cad20e7e10acd7d6ce6a1d05459c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8772429dc8d2e68cd0de832a96ed76e39390d6d7f9e25a042cd5f4168a7faee8db79ea74461d023ad0d16980b40cc734a96bab760466d90a1a1c5f7f9e11e94a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "LGPL, version 2.1",
            "url" : "http://www.gnu.org/licenses/licenses.html"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/net.java.dev.jna/jna@5.6.0?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/java-native-access/jna"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.java.dev.jna/jna@5.6.0?type=jar"
    },
    {
      "group" : "org.jetbrains.intellij.deps",
      "name" : "trove4j",
      "version" : "1.0.20181211",
      "description" : "Fork of trove4j library used in IntelliJ Platform.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5cc726d08f3d05f7a7cadd4c20c2de78"
        },
        {
          "alg" : "SHA-1",
          "content" : "216c2e14b070f334479d800987affe4054cd563f"
        },
        {
          "alg" : "SHA-256",
          "content" : "affb7c85a3c87bdcf69ff1dbb84de11f63dc931293934bc08cd7ab18de083601"
        },
        {
          "alg" : "SHA-512",
          "content" : "1c805efe0dd5700941d20f02d6ba8dd79c54bffe3b0147d82af9b7525dbdcc97eee5b3258cbce161a39a699c28574ba43ba401dbf3ad3d73600293146949d512"
        },
        {
          "alg" : "SHA-384",
          "content" : "a3ec0b67cec580f96e952cc33e184e49d78ec792c5d19ccecc306751ad14605affb709b4a0a95741029a985bfb41affd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5ceb87dc6783bd5148f011f92dcc6f79e0a894d3ea1cac1d09aeec9ebdd210917c612e9f3081c71eabe6f90ddea6974a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ed4cb3c40de4ff800cfb0865696ea8c84a8d126539ca78c7135b896bf3c1b047"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9629c8aa2822a3bb9273f146a6a57eedbfa4909c458412d818eada71bf707067e9bfe5909f72144a4b28913da3914a43ede05cae697fb1b897faf3b537c83e05"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "GNU LESSER GENERAL PUBLIC LICENSE 2.1",
            "url" : "https://www.gnu.org/licenses/old-licenses/lgpl-2.1.en.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.jetbrains.intellij.deps/trove4j@1.0.20181211?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/JetBrains/intellij-deps-trove4j"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.jetbrains.intellij.deps/trove4j@1.0.20181211?type=jar"
    },
    {
      "group" : "xerces",
      "name" : "xercesImpl",
      "version" : "2.12.0",
      "description" : "Xerces2 is the next generation of high performance, fully compliant XML parsers in the Apache Xerces family. This new version of Xerces introduces the Xerces Native Interface (XNI), a complete framework for building parser components and configurations that is extremely modular and easy to program. The Apache Xerces2 parser is the reference implementation of XNI but other parser components, configurations, and parsers can be written using the Xerces Native Interface. For complete design and implementation documents, refer to the XNI Manual. Xerces2 is a fully conforming XML Schema 1.0 processor. A partial experimental implementation of the XML Schema 1.1 Structures and Datatypes Working Drafts (December 2009) and an experimental implementation of the XML Schema Definition Language (XSD): Component Designators (SCD) Candidate Recommendation (January 2010) are provided for evaluation. For more information, refer to the XML Schema page. Xerces2 also provides a complete implementation of the Document Object Model Level 3 Core and Load/Save W3C Recommendations and provides a complete implementation of the XML Inclusions (XInclude) W3C Recommendation. It also provides support for OASIS XML Catalogs v1.1. Xerces2 is able to parse documents written according to the XML 1.1 Recommendation, except that it does not yet provide an option to enable normalization checking as described in section 2.13 of this specification. It also handles namespaces according to the XML Namespaces 1.1 Recommendation, and will correctly serialize XML 1.1 documents if the DOM level 3 load/save APIs are in use.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b89632b53c4939a2982bcb52806f6dec"
        },
        {
          "alg" : "SHA-1",
          "content" : "f02c844149fd306601f20e0b34853a670bef7fa2"
        },
        {
          "alg" : "SHA-256",
          "content" : "b50d3a4ca502faa4d1c838acb8aa9480446953421f7327e338c5dda3da5e76d0"
        },
        {
          "alg" : "SHA-512",
          "content" : "e9d62dc311df808f88ac63b427bb40567c19cec618a33d0a9c7c830b1bb7c64dae263a5ee6c824d8e51a63cd24f49fe2ef4e2563d6e6aa0400f63e9bb35dce97"
        },
        {
          "alg" : "SHA-384",
          "content" : "4638b651e5f29f0e82dfa308924859f707ba7877610688710dd77c5ae5e53e3e4a3168f962bb3d985f4e5b9236776988"
        },
        {
          "alg" : "SHA3-384",
          "content" : "bdcedc76039beedc082ca899f067b091d31dd98544bba2e79f0841dd51833ba27641eb0cb268356b1e291e7ae8a99396"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0288ce50309db0b4e1801962cf13db0f3c9bda069b904710daebaa162fb37828"
        },
        {
          "alg" : "SHA3-512",
          "content" : "092f009fe5dc0238d8df05f35138017570097932183ee7b08aa039bd112877f47e0bcc73550de390a54c3a09539e8ba02404a2e9bb11148e6d45938383252dd8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/xerces/xercesImpl@2.12.0?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://svn.apache.org/repos/asf/xerces/java/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/xerces/xercesImpl@2.12.0?type=jar"
    },
    {
      "group" : "xml-apis",
      "name" : "xml-apis",
      "version" : "1.4.01",
      "description" : "xml-commons provides an Apache-hosted set of DOM, SAX, and JAXP interfaces for use in other xml-based projects. Our hope is that we can standardize on both a common version and packaging scheme for these critical XML standards interfaces to make the lives of both our developers and users easier. The External Components portion of xml-commons contains interfaces that are defined by external standards organizations. For DOM, that's the W3C; for SAX it's David Megginson and sax.sourceforge.net; for JAXP it's Sun.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7eaad6fea5925cca6c36ee8b3e02ac9d"
        },
        {
          "alg" : "SHA-1",
          "content" : "3789d9fada2d3d458c4ba2de349d48780f381ee3"
        },
        {
          "alg" : "SHA-256",
          "content" : "a840968176645684bb01aed376e067ab39614885f9eee44abe35a5f20ebe7fad"
        },
        {
          "alg" : "SHA-512",
          "content" : "8db0283b6840cd6407957d296b802e3edf90653e2722f8e29f86c1c0b60996c4b43e9e065e6864dab89b2138ddb0174d9b4fdda4a93f94eeb884783db82f3268"
        },
        {
          "alg" : "SHA-384",
          "content" : "bce0ec0f0f692213a1110197c4a11c333673ae0630481255d12b441a8cba70aecfaf104c3d8d9b500ed2a0a19a2bfcce"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c1d8154ef6eee57dfe6ae9a1c1a2525e9ec2aab3631911a53c064ea6480c0b3b1ce8dd079db7b3693d7ef81daba28ace"
        },
        {
          "alg" : "SHA3-256",
          "content" : "09eb76497eac5012ce1000c52f4e597c4941a44b9d960b1ac58a19beb2dd63fc"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1e4eb902e50b3388da4d161ee49f4d47b61dddd2ad10e6ef6cbb67c4ebc9043e0b65ae59a4a0c8eb03dd28814ce4aedd7e0d4962a0aedc3bdcf7de37cde38f66"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "SAX-PD",
            "url" : "http://www.saxproject.org/copying.html"
          }
        },
        {
          "license" : {
            "name" : "The W3C License",
            "url" : "http://www.w3.org/TR/2004/REC-DOM-Level-3-Core-20040407/java-binding.zip"
          }
        }
      ],
      "purl" : "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/bugzilla/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/xml-commons-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://svn.apache.org/viewvc/xml/commons/tags/xml-commons-external-1_4_01/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar"
    },
    {
      "group" : "com.android.tools",
      "name" : "common",
      "version" : "27.2.1",
      "description" : "common library used by other Android tools libraries.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b4bcd47cad27c5ff049acdd765cd13c7"
        },
        {
          "alg" : "SHA-1",
          "content" : "59809f064b774204b35635db19f97a79e64588c8"
        },
        {
          "alg" : "SHA-256",
          "content" : "54fb5c771da68137e91a2a474d896efe2797cbeab69d6f449f60e4edc8f42f46"
        },
        {
          "alg" : "SHA-512",
          "content" : "bc7eaa199c4e399035ae622148b90b1285d7fbb6c1fb2ad97920c7a9ecd78055d5be4d991d1a6a1d37f0a79df9f0c17f7dce1004ef529e13fada23d7f112f204"
        },
        {
          "alg" : "SHA-384",
          "content" : "da84754933e4038defd7b33cc2ba8168cae457e861a5ff275c1f3e68cc56ec3b2c81128149acd928149f07d4cc061157"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f5e5e811ddfe680c70a194182b0938f5cbf535edd9c7cae8060ad22a6ca2f40fc053bbcddd3b18ec8a5782edb64adc55"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e805ee4297ea1c1f63632283aa0acf96fbdbd70812004c4ab0dfe397fe6aef38"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b2cc8fef462d6c2af4ee4da9ae9d95dd76a6ddcb765e3727465d458c4718f21fc932040c906678ebbf28afe2ae9446df882abfc0929c260ad28d62b2416b2ebb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.android.tools/common@27.2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://android.googlesource.com/platform/tools/base"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.android.tools/common@27.2.1?type=jar"
    },
    {
      "group" : "com.android.tools.build",
      "name" : "manifest-merger",
      "version" : "27.2.1",
      "description" : "A Library to merge Android manifests.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fa4ae1187ce5c1f99964dfd1fca28ef1"
        },
        {
          "alg" : "SHA-1",
          "content" : "79540210e63306f1ed4abe6ebed3e4e9359f0f19"
        },
        {
          "alg" : "SHA-256",
          "content" : "cde7e801b72b798611ba33e384734452bf997ea599b75a3ba4c7476e3702f6aa"
        },
        {
          "alg" : "SHA-512",
          "content" : "75be119f745b132aa4ef4a8e59aea18bfa99afe9331b894a5cba9ea90170ba53d5702ee1bdb1f8db163181b522966f2f70de26f57a64bce5e5f192b36c166301"
        },
        {
          "alg" : "SHA-384",
          "content" : "4aaa4a4c0c5953bac4b0198a0d39858593790e2d1e470c59ebdc02e99e7865240a85b47d68bf2bbf32a4ad7364b72ff4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9628b987d9dda7d74c71b6cb8bb8848afde5978f552569272130dc6401c009fb9479a00c864d986ce0fb49365b5d6cc4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7df462370d5e4a679b2acd9b310e4451df006d82763dc6bc99e46311711fb2ab"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d287cff1cf023592dbd0b3d61bf9c7074e9b0d91c4024622e78e1a107aeaffe6faca2c1df1d4fb6b23d253a47073e78bb020b1e9959d5a26ce01c6868a7f496c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.android.tools.build/manifest-merger@27.2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://android.googlesource.com/platform/tools/base"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.android.tools.build/manifest-merger@27.2.1?type=jar"
    },
    {
      "publisher" : "Stefan Haustein, Oberhausen, Rhld., Germany",
      "group" : "net.sf.kxml",
      "name" : "kxml2",
      "version" : "2.3.0",
      "description" : "kXML is a small XML pull parser, specially designed for constrained environments such as Applets, Personal Java or MIDP devices. In contrast to kXML 1, kXML 2 is based on the common XML pull API.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "04a03b3a4f1ef0e3fda28bf1792e2ee7"
        },
        {
          "alg" : "SHA-1",
          "content" : "ccbc77a5fd907ef863c29f3596c6f54ffa4e9442"
        },
        {
          "alg" : "SHA-256",
          "content" : "f264dd9f79a1fde10ce5ecc53221eff24be4c9331c830b7d52f2f08a7b633de2"
        },
        {
          "alg" : "SHA-512",
          "content" : "f97d418d4c2892fa184f5be83166ac2cd771fd10d7625104d9b054ec0ff361927a2ac2539d38f326f61373b6d700a3b5075605763562ac0ae6714903773cd1cb"
        },
        {
          "alg" : "SHA-384",
          "content" : "961f81219fe04900852844c5d86f5ccfb816fb70cce2032ed63048477ab571e2fc9153283178a86704d1f4ff91015d37"
        },
        {
          "alg" : "SHA3-384",
          "content" : "95518ac11af688c996dc4e61ad6dce3ef516bb418d379a8b3e988676f5fcce154b74a094fab509f159213207d8854e9b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "989bacf9f120cc10c10b0c7f885de3d3e98aac3064644d793e28adbaecfaff2d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a0b211754ffef3b458e5a1df916df62990f7143379aee14815b2986d40a809e36b9c22e23af401eed5297d11e7b9a24a3c60590f1dc8dcf93cc1656d631d2c39"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "BSD style",
            "url" : "http://kxml.cvs.sourceforge.net/viewvc/kxml/kxml2/license.txt?view=markup"
          }
        },
        {
          "license" : {
            "name" : "Public Domain",
            "url" : "http://creativecommons.org/licenses/publicdomain"
          }
        }
      ],
      "purl" : "pkg:maven/net.sf.kxml/kxml2@2.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://kxml.sourceforge.net/"
        },
        {
          "type" : "vcs",
          "url" : "http://kxml.cvs.sourceforge.net/viewvc/kxml/kxml2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sf.kxml/kxml2@2.3.0?type=jar"
    },
    {
      "group" : "com.android.tools.ddms",
      "name" : "ddmlib",
      "version" : "27.2.1",
      "description" : "Library providing APIs to talk to Android devices",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f53ba8bac306911a77160b4703dd50a4"
        },
        {
          "alg" : "SHA-1",
          "content" : "f8fa36cfb13aa6f5b682f250f03a94393fe9e98b"
        },
        {
          "alg" : "SHA-256",
          "content" : "757b43f32f4c2a57fbc4bfd34e4100be808fcdda240fcba812edbb6702a2b668"
        },
        {
          "alg" : "SHA-512",
          "content" : "aa4668fbf3e805758e5d4d002c9b5dcade1398d3961fa4d63ddadc5c08c8e5a1d281ad80f55dff91ad55440acea3812a1ab680913707f4007f94a8d04c29d33a"
        },
        {
          "alg" : "SHA-384",
          "content" : "632ef15581b2ef54ce85cdc6e200bad5435e6a4e69bd3b74e22725e737c2926f6dbddf64ed6db0b58a6e7a04781eb34c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "89390c1b2648c5990ef1f84f763ee7320d4d0bab94c3c337a78913bbf95748bd87fc6b49e8630514ad2565591aac2889"
        },
        {
          "alg" : "SHA3-256",
          "content" : "030c4d8661265a653a61348b09a744a44264b29f5a1921e72562d1eb711e381b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "538ad751e1bedb16ff9edbf15653a619b488f73def0d617aa84d0ef6bff0c87c70853ec85d406a6d90164dc62b8a20e9f7968bb3b8b8c9bbf530b7cfe7e22e22"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.android.tools.ddms/ddmlib@27.2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://android.googlesource.com/platform/tools/base"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.android.tools.ddms/ddmlib@27.2.1?type=jar"
    },
    {
      "group" : "com.android",
      "name" : "zipflinger",
      "version" : "4.2.1",
      "description" : "Library used to build and incrementally modify zip files",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b626a12ecfb819c3e704c2ee6fd5c265"
        },
        {
          "alg" : "SHA-1",
          "content" : "9005c12d9c9ab8f1981eb9c270464ed995d29d6b"
        },
        {
          "alg" : "SHA-256",
          "content" : "a00f8e0126c19695c779971ea8ecce9374cb696cc78fce62028749938ba461ef"
        },
        {
          "alg" : "SHA-512",
          "content" : "f279684a60d6c4a42d2f27e8e045b872cabeb28494fe1713c865dffd9453edc8df66563f7ed77943d0e6660bad57d87bb4a5466c9ce01fa0d9af2c352246fc68"
        },
        {
          "alg" : "SHA-384",
          "content" : "7ffb6ba1b705c0c459adb24333006251c8b273a39f0a79788bf6d28d01e9540d0465984761ca3aaba0a6860c3d87d610"
        },
        {
          "alg" : "SHA3-384",
          "content" : "cb948e6ef357248f74bffc17c1b2365bde2ffaca7c8477391417b4ea4a4c92ea62bdcb65da553ce9aec97b7b809e16e8"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4127af18f367a89d75e28f55e9690a0afe3d3bb223e9bbfa703494a809fe99a7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "28439728d7b43cc4b41b7057e1801cfa8e28c502b2a525a2662abc579e0867d16640955d7fc9f381d63eb3bf1acdf07c96eafc785b294c02cf42fa4cdef56cbb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.android/zipflinger@4.2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://android.googlesource.com/platform/tools/base"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.android/zipflinger@4.2.1?type=jar"
    },
    {
      "group" : "com.android",
      "name" : "signflinger",
      "version" : "4.2.1",
      "description" : "Library used to sign APKs",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ac51698392ae64ece02635621e0148fc"
        },
        {
          "alg" : "SHA-1",
          "content" : "748d78d00ab3a432f7dc7511c51807219441448d"
        },
        {
          "alg" : "SHA-256",
          "content" : "90ddb3e00cbeabff00fc014947a4de2504567e43eafabdb0f920c99d9ee29572"
        },
        {
          "alg" : "SHA-512",
          "content" : "ca24f635d4c17590bb9c1f9a1ca65a14721f8a5bacfa2a874c715f6ac11b46f973d518337a6d90b1e51f1761469a4c0edc32e12876076589d9971746efc11ed2"
        },
        {
          "alg" : "SHA-384",
          "content" : "8830624b30b083f944bfd6feb2dbca81443525dd1286232780cc5f4addb535ebf4edbe81c6ab73b4f3f2b7a1614b4fb2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d15d80ba654e973ac804f88aa75141d8f5d30f971bde442b22d11f489128f9f5e8ee4d85c01f25ec2f167bafd4d4d44b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b0552a842e7cf3165dfb6535836f4e8313a76c1c270f1c150703dc0d1b993a1e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9a9b7f7cf3d9f0abfecf521c4b5612751526ac82bb04251ee119641965582319aa766eb9e9333bb13f6e18bc733e1db77702921742235e1afcce096c5d586752"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.android/signflinger@4.2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://android.googlesource.com/platform/tools/base"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.android/signflinger@4.2.1?type=jar"
    },
    {
      "group" : "com.android.tools.analytics-library",
      "name" : "protos",
      "version" : "27.2.1",
      "description" : "Library containing protobufs for usage analytics.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4ded4cb485fe6b4efaca069a3256a8fa"
        },
        {
          "alg" : "SHA-1",
          "content" : "45417b17a24015da5e888d0480014da3132d08e0"
        },
        {
          "alg" : "SHA-256",
          "content" : "1ce0868dad3694e63f6203777444f36c335737a5836dda91e81185baa843c1db"
        },
        {
          "alg" : "SHA-512",
          "content" : "c76b83bd4e702a7cc404e9d1e6d98064a9cedd08e5d70caae496d760fe8f5d3ad99e28de64a2936ec2ca32e23e9dccea000c229651fc896b110cc39e666b210e"
        },
        {
          "alg" : "SHA-384",
          "content" : "b36946a2fb0c5dd1839f4324184fce0f9bacc72e266c4ce7291a997e0147d5becfe3b29fd25f63d82cdc80b4d0a03e64"
        },
        {
          "alg" : "SHA3-384",
          "content" : "349530bc1a06c5c04c1cebb7513c5c884359f6e6356635d9d937a9579f960ca68483fd5471f33956c4ed6d5c31c73d35"
        },
        {
          "alg" : "SHA3-256",
          "content" : "65e9b848158b887b39a0a2b9507ec50b5719fc1bd6745909c25381231abbbfe2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a0035744c328d618c50efb8cae100d10558be5d5dd0166b80641c6b50a30b39791991c9b2b22dd4854b9d844414f1e64f050f22a86260768bb025c3b3dbfcc22"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.android.tools.analytics-library/protos@27.2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://android.googlesource.com/platform/tools/base"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.android.tools.analytics-library/protos@27.2.1?type=jar"
    },
    {
      "group" : "com.android.tools.analytics-library",
      "name" : "tracker",
      "version" : "27.2.1",
      "description" : "Library for tracking usage analytics.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "39c00a5b733841a5a579f8f746940e9f"
        },
        {
          "alg" : "SHA-1",
          "content" : "1e7d97d4c33cfee548c98e53964e8cb3a83f2b8a"
        },
        {
          "alg" : "SHA-256",
          "content" : "1beca5db6495219d8924cabc5704a1e097eccc627f78bd764985bd3f7a174e5c"
        },
        {
          "alg" : "SHA-512",
          "content" : "1be037303770db645278db53d94861b7465d924056b81aac939978b3592087d8ab40bf630db15054476fa3c20825c806e5b43ad009ecf1d0d1498c5a54e40082"
        },
        {
          "alg" : "SHA-384",
          "content" : "1146a72022fbf72701d0c82674958b928acd934fac6afcd523d40850ba2ff12a35ccd3b41ad618ea82686757390aad3b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "026b1402f0a60b1f2a5bdb7b9373f3959cb31d60fb5f94f5dc020449cc2a329991518db927f94e4141ca32c15973a2db"
        },
        {
          "alg" : "SHA3-256",
          "content" : "53df591ace2129e7aa1848c8c83eef534eaa5e8f6885f228afa1c7e6ca72ff78"
        },
        {
          "alg" : "SHA3-512",
          "content" : "46d6ecfec7e7ecf111b85a7d6dfaffa2093f15b150cdb709e3b81cdb421baa03d86af5432f319058a8c8fe4555b0e0f2d534c465460107c13c938dc92aafac40"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.android.tools.analytics-library/tracker@27.2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://android.googlesource.com/platform/tools/base"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.android.tools.analytics-library/tracker@27.2.1?type=jar"
    },
    {
      "group" : "com.android.tools.build",
      "name" : "apksig",
      "version" : "4.2.1",
      "description" : "Library for signing APKs and for checking that APK signatures verify on Android",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b5ccfb5bf162f18f39d0efeb0f260f08"
        },
        {
          "alg" : "SHA-1",
          "content" : "a41647afcefced7a855fd1616db37f1c9574990e"
        },
        {
          "alg" : "SHA-256",
          "content" : "d8ea8eb467d310850fa80bbcc2b0f9daa8ceec1d1397d26a282f0b1f79b76c89"
        },
        {
          "alg" : "SHA-512",
          "content" : "2becc4b72ae3fbddf590ad83a4a085d2906a0b5dbcd431a12a9e8f4d24afff6a2fc97757613e2224ecd76a4c224856c3d622f1cb9fa013bf643ae46e03b756a8"
        },
        {
          "alg" : "SHA-384",
          "content" : "2fe95b5c4e5afee92283d17fe9b9b5b659197d2ea48dac459edd26b75a223aaf2a736a6fa43d686e5b82bc526d775fc8"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7f8c8f93dc45eb7f29e823acfa42c38e9ebcea3bc1fbea4cd3d029257571054b870f55864f293c4a68c8a8c5cf202c96"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2c335fe3dd9fe156402a096f69c3b99b9b7509da2eec4795169c6d2d6e154f45"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b853d204105a396cf52235ff0518fb93e5e69e3b6ea7aa1951701400ba72ebdee97c194b668f572898923b9cf080f337974123deafe10aa3fb7aca0a4aaf020d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.android.tools.build/apksig@4.2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://android.googlesource.com/platform/tools/base"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.android.tools.build/apksig@4.2.1?type=jar"
    },
    {
      "group" : "com.android.tools.build",
      "name" : "apkzlib",
      "version" : "4.2.1",
      "description" : "Library used to incrementally build and sign APKs",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1682371408feea87f9db8eb242134351"
        },
        {
          "alg" : "SHA-1",
          "content" : "a19c241e678e42a5bc3ff3a206c76f8438a3f4db"
        },
        {
          "alg" : "SHA-256",
          "content" : "3278f75167831fab7108f181f9aee89b2fde7d4c630d553ddee30f275701a0ba"
        },
        {
          "alg" : "SHA-512",
          "content" : "6f05bbbe86e8686725945e842e8aaefbe7f943504ed82cfa1e3fa3730f8fe05584532a682dd9a563b5dee456a931eb055aa17b12fdacc70f1efe88bd3efc29c8"
        },
        {
          "alg" : "SHA-384",
          "content" : "16cbbca10a77a4ad3b0eb4d9511b914377da7bdd18576c987f109d1d6a4f59ef781425533f136b7abcbe16a3cabba29e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6e85e16d2a9ad91ef5a6eea60d4a766122e408d43542826dfbe15eb237dc542c36b5557adde637713e97374f4fcdd628"
        },
        {
          "alg" : "SHA3-256",
          "content" : "76803ec66e5aa819de80982bb1ab38234a575d2cb555abebd3cef731a36b7243"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7019f49eb3b8b22f6b0352ddb7a81de6e22dfb5b606d3902ec33e6d026596141117628a7f4ba77b8fde2e4c2e2c6558b5db50c8254e8f0bab5585080e7155a2d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.android.tools.build/apkzlib@4.2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://android.googlesource.com/platform/tools/base"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.android.tools.build/apkzlib@4.2.1?type=jar"
    },
    {
      "publisher" : "Square, Inc.",
      "group" : "com.squareup",
      "name" : "javawriter",
      "version" : "2.5.0",
      "description" : "A utility class which aids in generating Java source files.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "900f1a447597237cabd9896fb5cd8db9"
        },
        {
          "alg" : "SHA-1",
          "content" : "81241ff7078ef14f42ea2a8995fa09c096256e6b"
        },
        {
          "alg" : "SHA-256",
          "content" : "fcfb09fb0ea0aa97d3cfe7ea792398081348e468f126b3603cb3803f240197f0"
        },
        {
          "alg" : "SHA-512",
          "content" : "0d1df927a41b762b30bdc520ae6ea465ded1385a2b0a0d91dfcac8c0d87388089d8a881361060d1df0fe833944864fc23f9fe38c30d9ce106cc3e846f072dcf3"
        },
        {
          "alg" : "SHA-384",
          "content" : "7be18e96bfe57056df5fbd791b0d3ee958d999015ec358f2c325eb92af86830867510a578925273d66b080658c674eb7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b40feb9b4496bd3017141753c166154cc73d6ce843e3b3abfa8c8eaadc11b5b3e625b1686a799b650741bc06fa747570"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b2bfdb25026df4b92efeca51f45c28371f54d960c8ccfbb76ae5b9e469f5dc19"
        },
        {
          "alg" : "SHA3-512",
          "content" : "068ccb766b87c7637f12ae383a69f41626325ce4c2796bf445f73cf3ac7b75ad2bf43a4184ac2d592f763572370fafa9431e513d024f88d387ad9bc90db53ddd"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.squareup/javawriter@2.5.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://squareup.com"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://github.com/square/javawriter/issues"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/square/javawriter/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.squareup/javawriter@2.5.0?type=jar"
    },
    {
      "group" : "org.bouncycastle",
      "name" : "bcpkix-jdk15on",
      "version" : "1.56",
      "description" : "The Bouncy Castle Java APIs for CMS, PKCS, EAC, TSP, CMP, CRMF, OCSP, and certificate generation. This jar contains APIs for JDK 1.5 to JDK 1.8. The APIs can be used in conjunction with a JCE/JCA provider such as the one provided with the Bouncy Castle Cryptography APIs.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "17b2b704b3ad9b36a6fca1ace60a2a06"
        },
        {
          "alg" : "SHA-1",
          "content" : "4648af70268b6fdb24674fb1fd7c1fcc73db1231"
        },
        {
          "alg" : "SHA-256",
          "content" : "7043dee4e9e7175e93e0b36f45b1ec1ecb893c5f755667e8b916eb8dd201c6ca"
        },
        {
          "alg" : "SHA-512",
          "content" : "6cbc73005b662440c395d81d44d0f52a3e20550f64be3d4fe413c344257c6ef31f8080421b247273f8be42e724de370b1f1b2f0dae58a47010ef4c890d8cf5b8"
        },
        {
          "alg" : "SHA-384",
          "content" : "8147d3692b03ac84ccdd20f8ff7f3d319583434ad1a0178ab31d6433a3ed11c6e05967b26bbaf0420f400a32fb5941c5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "899934416d5f5c3cfe0377b41d1403730c760b6d9edec6079e73a70ec8b92616055c37fb1fee3b227a6dae360cd9cc65"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e57c428533d3222b66f93c6bd530ee3bd0e4584c32d5ad50424072f6e8de2d98"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a6f07a263da0a69665d916d9b41f42d74061630c5ff83e8c407fa3b9aa47708c23a0a3c3c2b9f953af66b60374556c8e89eed2bb7ff3176fc4f603f957f0fffa"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Bouncy Castle Licence",
            "url" : "http://www.bouncycastle.org/licence.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.bouncycastle/bcpkix-jdk15on@1.56?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "http://www.bouncycastle.org/jira/secure/Dashboard.jspa"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/bcgit/bc-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.bouncycastle/bcpkix-jdk15on@1.56?type=jar"
    },
    {
      "group" : "org.bouncycastle",
      "name" : "bcprov-jdk15on",
      "version" : "1.56",
      "description" : "The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.5 to JDK 1.8.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3c1bc7aaf3449308e34296546078d9f7"
        },
        {
          "alg" : "SHA-1",
          "content" : "a153c6f9744a3e9dd6feab5e210e1c9861362ec7"
        },
        {
          "alg" : "SHA-256",
          "content" : "963e1ee14f808ffb99897d848ddcdb28fa91ddda867eb18d303e82728f878349"
        },
        {
          "alg" : "SHA-512",
          "content" : "47e5f73d2b66891cf21412b807481fff4b1a844ff247ba170e7bab25a7f6303cbd5ada22e7382ba20ee344d8cc3a1909a3d255f4b24defe9357523b4a122db68"
        },
        {
          "alg" : "SHA-384",
          "content" : "c9de4efe55d8737d5c84e7253cabe2de7b7d72180ef4c0a645ede19f627d3ebce7c0c4f19e51412b7e0a16d6c6255d32"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ef69f74fbf1f5416c90038f07aad6aa83e60932cf8a31400554e0380c134921ed8638528b4339edd5e8b7d1df4f62a3f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ab4e77030ace3c79f45602cf94baf81ae18305ae83037c5a37077a752cb5bfab"
        },
        {
          "alg" : "SHA3-512",
          "content" : "24ea4d76cc78baecafd8baeae0e201201463d920c102fe20f8dd29ff307785194dc27323215dd24680b77bbb1e65841f8150f047a3b8f007c9b04f4860b4a181"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Bouncy Castle Licence",
            "url" : "http://www.bouncycastle.org/licence.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.bouncycastle/bcprov-jdk15on@1.56?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "http://www.bouncycastle.org/jira/secure/Dashboard.jspa"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/bcgit/bc-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.bouncycastle/bcprov-jdk15on@1.56?type=jar"
    },
    {
      "group" : "it.unimi.dsi",
      "name" : "fastutil",
      "version" : "8.4.0",
      "description" : "fastutil extends the Java Collections Framework by providing type-specific maps, sets, lists and priority queues with a small memory footprint and fast access and insertion; provides also big (64-bit) arrays, sets and lists, and fast, practical I/O classes for binary and text files.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "74803ff50bd95b5d1e55a2879a5e70e8"
        },
        {
          "alg" : "SHA-1",
          "content" : "60fbeaa50799581f6244fcff1cebba0353ec0141"
        },
        {
          "alg" : "SHA-256",
          "content" : "2ad2824a4a0a0eb836b52ee2fc84ba2134f44bce7bfa54015ae3f31c710a3071"
        },
        {
          "alg" : "SHA-512",
          "content" : "59a2782979d20fe990b4f3c12e167b7d617385a5bcde8100f3dad8fb3390204407b0edbafd83b5cb6ee0b128d4c8c315c037cbe22d99cefd7a7bd065331fad80"
        },
        {
          "alg" : "SHA-384",
          "content" : "36ded3097425e4665010cb4145516524ddbf5ae18934b9650563c542875a92567cc228855a0aec80835cb75900979c22"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a8ef18863cbed03a345d801bc0a155e0d3ef25caac3368005bbd3514861408375264a2144871e6502666770c3efc4662"
        },
        {
          "alg" : "SHA3-256",
          "content" : "099ece8d91ceb106ae05884d95e41c1d191fb9ccd55ab49e8c7ade85369581f7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "11665d273d344d0eae5434eedf574577014685464b93fa454bce4fbb00358f88040cfeeb821761f896844609b3d5e88bc516f60831f07561941906159647a987"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/it.unimi.dsi/fastutil@8.4.0?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/vigna/fastutil"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/it.unimi.dsi/fastutil@8.4.0?type=jar"
    },
    {
      "group" : "com.googlecode.json-simple",
      "name" : "json-simple",
      "version" : "1.1",
      "description" : "A simple Java toolkit for JSON",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "eb342044fc56be9ba49fbfc9789f1bb5"
        },
        {
          "alg" : "SHA-1",
          "content" : "5e303a03d04e6788dddfa3655272580ae0fc13bb"
        },
        {
          "alg" : "SHA-256",
          "content" : "2d9484f4c649f708f47f9a479465fc729770ee65617dca3011836602264f6439"
        },
        {
          "alg" : "SHA-512",
          "content" : "f9caafc041eea982d5ba266482418dca05d46fb992bef3f076a83d564765083a0870e30f68e7c6fc8c80ebd3c88b087eecd2f8455c12daaf7db3b5a975b622e4"
        },
        {
          "alg" : "SHA-384",
          "content" : "8b08037bb87aef9ba1d6236332834b6ab24602084097f10416de8b40e14a0d2108ec0fa877348655b8ccdc3598d47341"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b7d5578beb966f002e851c9bcda5fc487e0c2cbeb14e49fea7ac3b02ad9ff5636ac9e16abb017c6a841b68eca52d2413"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ac4609e5fae460fc0586b14c6171e4f5e738ea25c6772a279bd0e21e1efcc95c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4a80925f23a26e7a91e94bc28c6c6e5e5bc5e633842f33b4ee0eed8402f76d41f3a89d0761719bf2b9c964b64aa900bd7c53d0d972c15a7a6fdebef8b6b62266"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.googlecode.json-simple/json-simple@1.1?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/com.googlecode.json-simple/json-simple@1.1?type=jar"
    },
    {
      "group" : "com.android.tools.build",
      "name" : "aapt2-proto",
      "version" : "4.2.1-7147631",
      "description" : "Android Asset Packaging Tool 2. Protocol Buffer Files",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "71599b12725f8a7aaed120af50657ea7"
        },
        {
          "alg" : "SHA-1",
          "content" : "5b444efbd34ad1dc57615030de678423d6df7bf7"
        },
        {
          "alg" : "SHA-256",
          "content" : "1c315f59f7f9a1f0b479d59682880e6c6968bd7df41ddac4cc30b6c16e31b8b5"
        },
        {
          "alg" : "SHA-512",
          "content" : "89c2d52b9be94b9b8c3e796b45123a52a3c4aca3806e409c6e7f1d1b257160699b5f84383fb2e2413dcc20e96311beb516f89c0f54d067ad7a6814fe86ad7101"
        },
        {
          "alg" : "SHA-384",
          "content" : "95cdada06451bfaf45e8c63ed5bbf8d37e51996c4bcbab26e474eebe9ad4ddc53839eac44e73eeb3f44734cbc7f3e0a7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5e0e0d44b3fb44cd4f6e6636f762cbe0e6c61ff7e371b488c127d8fe8a56fb50feb9b2f1cae7db59a288eafbe046f2c6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9a4762fb0cb7d215fffb675903acd90f9c3765af0b4bec21341055b56da23e63"
        },
        {
          "alg" : "SHA3-512",
          "content" : "de00d5b2c51e100f2230d5b0260b0099998501299539d97b97b772bebcc88cbebf3e81e143be6911a15df1d758af02efb01d36b4cad8b9a46cb184919373af79"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.android.tools.build/aapt2-proto@4.2.1-7147631?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://android.googlesource.com/platform/tools/base"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.android.tools.build/aapt2-proto@4.2.1-7147631?type=jar"
    },
    {
      "group" : "com.android.tools.build",
      "name" : "aaptcompiler",
      "version" : "4.2.1",
      "description" : "Compiler for Android Resources, to be used by AAPT2.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a819b2b407daaf55ab0959694be8d13b"
        },
        {
          "alg" : "SHA-1",
          "content" : "a0b00ce0fa756ec6b0b070018745db8e274492e6"
        },
        {
          "alg" : "SHA-256",
          "content" : "3eb1563fa0f5e3a1dc009ee2fd6b3ed88c9e091c9fb3794010491f056a6e32a3"
        },
        {
          "alg" : "SHA-512",
          "content" : "c97f77660f4db64e224695edc44c44f3f1b558c17ebc334c4fc21ce0d5cb3cd6591d4ac69af37eb979b49e4012804f9ff7ef949ffa1e46b8b0275559f39fac3e"
        },
        {
          "alg" : "SHA-384",
          "content" : "352e9077b0b13e7c57af210f533c67d6ac4a70d905f3d7456b565d2a6c821ca28590ff2062d606ab99354da319ba229b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a3f41e654bf30713affda4518ac75bd1fc7492456f2fc9e5f180f835c760addf7436317eeaf692871b99dbc3b927749c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4b49a4b53609c8f972270ef429410c6a780a15b489ef71e9af823aa64930e38d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ce7d53060597477b3d84291cbed841c12eec1891deafd5fd93c38aeb3747ead6e24fb81efb7ce9576a5c190320a0bd5b09893b9a92806c1aa28c51485220bf35"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.android.tools.build/aaptcompiler@4.2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://android.googlesource.com/platform/tools/base"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.android.tools.build/aaptcompiler@4.2.1?type=jar"
    },
    {
      "group" : "com.android.tools.layoutlib",
      "name" : "layoutlib-api",
      "version" : "27.2.1",
      "description" : "Library to use the rendering library for Android layouts: layoutlib",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "449414c8d1e9e15282fa7414e73561dd"
        },
        {
          "alg" : "SHA-1",
          "content" : "959a2b023b211fbe465cd37ad2ac06e52cbc8d87"
        },
        {
          "alg" : "SHA-256",
          "content" : "4b6e1395c13d3312324490ce767cb154e9a9046cd89ca921dc0a0e4edd88c07f"
        },
        {
          "alg" : "SHA-512",
          "content" : "791dc4c3dcfc704c006aee696659f10592ebe9ed7a33126f5dda6c7d8ed43522a49449b7361f4154f1ef51c91a0e8aa3a2dd526a93f375810bc9118b2ef851af"
        },
        {
          "alg" : "SHA-384",
          "content" : "abeb99cc2d2e8d942d9da4dbdf52badd5d3322a01337a254d6eaa943737bb58a3031dc3f17d80d3cd6ba45be243b5ad2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ac3de08dab36924855b2dfef0f975cf8a80fd63423208b2206d537b0088ff05ad314a912788a4e8d76598b4b6943d8c0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fe75419c2a09362aed4860032be57a45f9487e374b7b735382423097698b86cf"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1b13c83ad01f5f6a65dd6d381ec014551aebb725b7fdccd18329b3a44ef4489a860806c62b16ee2644dd11f1a38513a5fd6b5d9cfcbc89c956f8881d31b66acd"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.android.tools.layoutlib/layoutlib-api@27.2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://android.googlesource.com/platform/tools/base"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.android.tools.layoutlib/layoutlib-api@27.2.1?type=jar"
    },
    {
      "group" : "org.jetbrains",
      "name" : "annotations",
      "version" : "13.0",
      "description" : "A set of annotations used for code inspection support and code documentation.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f4fb462172517b46b6cd90003508515a"
        },
        {
          "alg" : "SHA-1",
          "content" : "919f0dfe192fb4e063e7dacadee7f8bb9a2672a9"
        },
        {
          "alg" : "SHA-256",
          "content" : "ace2a10dc8e2d5fd34925ecac03e4988b2c0f851650c94b8cef49ba1bd111478"
        },
        {
          "alg" : "SHA-512",
          "content" : "5622d0ffe410e7272e2bb9fae1006caedeb86d0c62d2d9f3929a3b3cdcdef1963218fcf0cede82e95ef9f4da3ed4a173fa055ee6e4038886376181e0423e02ff"
        },
        {
          "alg" : "SHA-384",
          "content" : "6bcde3a6e471d416522e6288474bc4f9115e2e8abf8ce5d300829bee4aa98dff73be7d8c6f0607f3d6d423c7f5abbf90"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f4d5a5d5a76b24c4751c8c52f2879b097d2430c3571c59b4630e8c871c9bdb08e24e803a14c24fc8d3378417f29b7244"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b4a80ea81c4bc7e364e07981465f547e8ed83031806eaf3b97dfb38f894f5b6f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "15b23bce818b4399b334dd632eb85de5a1b70c47fb9260561e70b1f726211c83bddbc957f3b4c32a1d8c687f9bc6c38d0a638c731cb5daf5b619aa725d6050c2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.jetbrains/annotations@13.0?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "http://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/JetBrains/intellij-community"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.jetbrains/annotations@13.0?type=jar"
    },
    {
      "group" : "com.android.tools.analytics-library",
      "name" : "crash",
      "version" : "27.2.1",
      "description" : "Helper Library for uploading crash reports.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1cef91409f338280f0fa87ae536e62ab"
        },
        {
          "alg" : "SHA-1",
          "content" : "640d33b81bd696d1c25d08b2887f3d19fd26a0da"
        },
        {
          "alg" : "SHA-256",
          "content" : "dc9cc72f113633f1eb03817ffadc4ecb3f7a15320ef213a3e71aa2715c678aa2"
        },
        {
          "alg" : "SHA-512",
          "content" : "07e0c2f61c6a31a515f714597e046b8b82b199f12db22b7d2724951fa4e6bc892ae6f51baaa839b0c95020a84310545c1d07fed16b4908b9d4ac2528c2c724c2"
        },
        {
          "alg" : "SHA-384",
          "content" : "9db990983564bf0802af05b3f4b1ca7788d6eac2997b93a26d7b444a8a28a42162d9ef4384d98bf4cf40ff8eefac5ccc"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b5fd5563866baa5f1f72299de3293fdf4cccd01adf12fb65193f8e5efabdfc5697faf9b1992bb9af73c1cb35d5ae954c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "22f88cf8abac4ae9f421b53c55df31ad3fb30bdd903e945a21c3afdb836262ac"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f46d655b6399c30aa9a0ab27c41cac1f8852ce10be41ce60e7d03acb624036fb4c67bde2788f65f93cf2fdab158f4f35609f689797ec37da4c2d4d05b5f1ebbe"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.android.tools.analytics-library/crash@27.2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://android.googlesource.com/platform/tools/base"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.android.tools.analytics-library/crash@27.2.1?type=jar"
    },
    {
      "group" : "com.android.tools",
      "name" : "annotations",
      "version" : "27.2.1",
      "description" : "annotations used throughout the Android tools libraries.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e0e98c532ad1ca9ec859a469c556f496"
        },
        {
          "alg" : "SHA-1",
          "content" : "afac51efb78c3eef296a4ff0dfef56c6d0d6dfb8"
        },
        {
          "alg" : "SHA-256",
          "content" : "898149a83a49f20913f47b77aa78fa6a9c42c58673b0cfca377f8b870eee63b0"
        },
        {
          "alg" : "SHA-512",
          "content" : "03a89425529aa7492201f5ad3b77604e4ddfe6adeb561e63622192ea10de015a72c7e36dc2c5baf0ff018adcd86803c3047772fdbf020081325d5d1195760770"
        },
        {
          "alg" : "SHA-384",
          "content" : "397b58f65c6c360867b4cbe7d95931cc2894a6413488f8d22235a3d01e2aeecd5c39986f1f00a3fd7930827fcc6417ab"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f4448a35822581b416ed841145b17475e1429122e025e854fc18c23bab626fe0789f69c9c30ede1d9390d806cd117e74"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d2e1761136910e7f6e09b0d9434f7188a12f6be52b483fbad8a40ad45c5385f4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "31b2569073573f970f9c9059dbf909877770985e1586b68ce1c3bb2a9ff1f4513f4045dab7265709e063c3c6c89317136fc131d4745bb6bc2bf5f271d184ab3e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.android.tools/annotations@27.2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://android.googlesource.com/platform/tools/base"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.android.tools/annotations@27.2.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents",
      "name" : "httpmime",
      "version" : "4.5.6",
      "description" : "Apache HttpComponents HttpClient - MIME coded entities",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "420691e1f1627f04fbc4b52eccddddd5"
        },
        {
          "alg" : "SHA-1",
          "content" : "164343da11db817e81e24e0d9869527e069850c9"
        },
        {
          "alg" : "SHA-256",
          "content" : "0b2b1102c18d3c7e05a77214b9b7501a6f6056174ae5604e0e256776eda7553e"
        },
        {
          "alg" : "SHA-512",
          "content" : "9841db7779b647de4668ded9b79e8c510a653076384fc3059ef186ea5d82828e149de48c016b5cb89a1beabe60981429265a8324be3108473c57af77a62abd6a"
        },
        {
          "alg" : "SHA-384",
          "content" : "1fee5082585e0485ad87f25385b172a308468838a35da8b2485e285193721ddaabc2f2eac1cb9e170cd73b35b1b1522d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4d7d325baa52a50d286655c6ee18d82b37939cafd971864e8a3ce99fc9ade4f3fcb255998242c834ca142aec5ecfd008"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f51b42b7c36cb650d58854044983e2c243ef8ab77b65d27872af2c6ededfbe9f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e6fe7d3561f5eaa68d646ac750b5ae6094a91b5c7cc0d6df8a422190b8b0bb7a36a32d4073c700436a5987ab5ea7fe045a727cb9c5cc8be64273ae55ac65f70e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents/httpmime@4.5.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.apache.org/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTTPCLIENT"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "vcs",
          "url" : "https://svn.apache.org/viewvc/maven/pom/tags/apache-18"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents/httpmime@4.5.6?type=jar"
    },
    {
      "group" : "com.android.tools.lint",
      "name" : "lint-gradle-api",
      "version" : "27.2.1",
      "description" : "Lint integration API for Gradle",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b4edf2240291923c29483abded3b21d5"
        },
        {
          "alg" : "SHA-1",
          "content" : "0710a95892d4fb9830be3a362027cb444cdd6329"
        },
        {
          "alg" : "SHA-256",
          "content" : "59618021a9252e39a2000cbd8cee23347d262d2e05ab9561fb615e56c4511c35"
        },
        {
          "alg" : "SHA-512",
          "content" : "fb49388516726f23a976cb6cf626a038c1c43cff7c11dda8e1bbc22860d72fc37a11162339bf5128dcaff97a86158ee14763576af88ca078b97f79134216276a"
        },
        {
          "alg" : "SHA-384",
          "content" : "c2a45f3a2062ed0384899c4d703a41f26b37389a42ec16fcab3358879cc23f693fab2b460b24dae7d2cc119485ae1126"
        },
        {
          "alg" : "SHA3-384",
          "content" : "fca553cf91b1ae3402c7bd4e9af7a667ea22aee7d519d87382c9c623aa35968d10f8d31f6017dc2f4535ba7a5969f29a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "48546798da91d9032da5e80b5ecae30d2d40dcdc9c2e19fec45145c59daef242"
        },
        {
          "alg" : "SHA3-512",
          "content" : "839aa8056274363353c4acbd6f9d1ed3f19f596a9d8c1e6fd00d1a428195020e82d2e167286d237d60962564b35ab7e11d660633ef57397f6f7ac16f04062a76"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.android.tools.lint/lint-gradle-api@27.2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://android.googlesource.com/platform/tools/base"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.android.tools.lint/lint-gradle-api@27.2.1?type=jar"
    },
    {
      "group" : "com.android.tools.lint",
      "name" : "lint-model",
      "version" : "27.2.1",
      "description" : "Lint build system model",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e4cae9090c57d833f699fce8c7825b4a"
        },
        {
          "alg" : "SHA-1",
          "content" : "97f0f1057777e12b2ea4ab6810730e6f1466a54a"
        },
        {
          "alg" : "SHA-256",
          "content" : "1530bcd47ca17b7b8245cc3f5dd8e4630538c139f9c98ebda508cab1ed9dd1dd"
        },
        {
          "alg" : "SHA-512",
          "content" : "ebf53e0dfc97916f756021c73b8cc71943769798cd1accb49dd8b5fbec1756fd34f372b5df7d118642e749dac9585db73e7e2f1ff6261c4e235613a11518220b"
        },
        {
          "alg" : "SHA-384",
          "content" : "d08c5e6c7f5ab6e0079f05360186528619f684bbb35911bf0d67d6c0edd519c11070aba76307a7a7b4fc21a1cc2018c8"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e9f9664773ab6ec855a7f6cec5db8f28663ed6da6f022d7cb34e07fb176a0a8e6815fb3d2f4703c83080634086d29ff6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c1210c8c27d4244832f6b4b6d81d6506bd0230fd227eafc3cceb9c572263f433"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6afb4e17ea667143d15b461e2c6f66b80f66e374be4ee4f96ded8dbdeeab04e47174b8bcb9b32c4b1c9742266ab3fd0f432a333441a669d6206b27916b3faa77"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.android.tools.lint/lint-model@27.2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://android.googlesource.com/platform/tools/base"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.android.tools.lint/lint-model@27.2.1?type=jar"
    },
    {
      "group" : "org.jetbrains.kotlin",
      "name" : "kotlin-reflect",
      "version" : "1.4.31",
      "description" : "Kotlin Full Reflection Library",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a970b96602f05c10546cfc086007fed0"
        },
        {
          "alg" : "SHA-1",
          "content" : "63db9d66c3d20f7b8f66196e7ba86969daae8b8a"
        },
        {
          "alg" : "SHA-256",
          "content" : "91fad0b42974a7d5811e30a61f05706e176b144235717c6de7e81e3a781028f2"
        },
        {
          "alg" : "SHA-512",
          "content" : "877c69ac4b8f27cf655c2e65930d9547394428607b55db3613737daf09272ed8858720cdfefa6af47dd9d79e9e8121236d9abf453d8ac6b64fb81b589182fee9"
        },
        {
          "alg" : "SHA-384",
          "content" : "deb1c95ab5d3edaf93cf2e9058bbea57315321c5c78542dbc361ebd00cf52457d1052c1bec4878a8525db37333615fc8"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8308ec55a08e289c9d5c3ce992a66bf03e12c6141705285f851e2158684af37e148f2393bc93e6b0f9a36ac7dba1d30c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8acd1b715b3de8510a201a3f81423768b6575c8e8b0c9bd6ccc6a14f850c39cc"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0633a3d8edb2ada70462b4b82e2e1d6682e10244c82bf6dfd1051080a54319385f32ef10ff348d3e17ef3168582abff36527d20fb470e6ff53b4c7861796606c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.jetbrains.kotlin/kotlin-reflect@1.4.31?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/JetBrains/kotlin"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.jetbrains.kotlin/kotlin-reflect@1.4.31?type=jar"
    },
    {
      "group" : "com.android.tools.build",
      "name" : "gradle-api",
      "version" : "4.2.1",
      "description" : "APIs to customize Android Gradle Builds",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "29ef4930b5e4689ea3faaffe351bfe94"
        },
        {
          "alg" : "SHA-1",
          "content" : "2dd4c353611fba9faa35e9afb396fbd219cd3867"
        },
        {
          "alg" : "SHA-256",
          "content" : "1e199938ec9e838852bef9a3e276da5258da875decff307a851eced06b7b297e"
        },
        {
          "alg" : "SHA-512",
          "content" : "37ceb7301c947c6b51a0ae62cc0f5a8ff3fa5a09510c2927ef8707a873f31e9d95c7296356e047e425b2a493be2f202b73733be0adbf401cfb706734b1bdbc1d"
        },
        {
          "alg" : "SHA-384",
          "content" : "c6bf39bc8c562ee62824061824790e0ca3587f0e94118869e088540ba487f0a6ef3f773afddaa79caa64da91b1f85818"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c1efeb00f9c5427b47be5beeb37b97f7542dda7284549c8c0dc768fb4da8aad33713d6a0867970ddbe8b74b1ebc20540"
        },
        {
          "alg" : "SHA3-256",
          "content" : "57a22f6f0a36e5a07e535ab9b26d583206cb276f84c2411281ed73fc390a57e2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0a4b7dea4762ac0cc3e64066cd490e1bdf4599c4c8760ab6d61b82f3b4584e7ee7ad8ea6e5b0884f974b994e3f0975ec5c2d4fcc43f453151d05602125cd1868"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.android.tools.build/gradle-api@4.2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://android.googlesource.com/platform/tools/base"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.android.tools.build/gradle-api@4.2.1?type=jar"
    },
    {
      "group" : "androidx.databinding",
      "name" : "databinding-compiler-common",
      "version" : "4.2.1",
      "description" : "Common library that can be shared between different build tools",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a1e940dad991c394d72a25572aa66530"
        },
        {
          "alg" : "SHA-1",
          "content" : "aaba33f6adc2ef79619b4d6401c46d277992fa71"
        },
        {
          "alg" : "SHA-256",
          "content" : "f387c65ebf3b413a89b640fe106c9b8b5165f787637bbf8840b7803f97e9ed48"
        },
        {
          "alg" : "SHA-512",
          "content" : "d5e70b44695278b7a3077afb06a50d830add294e74ebba0f3a16bb2c5c1c02d8e41d13f40d7554198c630671ebb7ab0168c96bc48d52ff1ab1b5f606b31e09cd"
        },
        {
          "alg" : "SHA-384",
          "content" : "8d7d6cfcb5b2a7a8615000690cd07fb2d2700feb9fa5fb11f5063868bb172472a1eaba00e2e2b6069411a726c6c4ea7e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f006bd93999ddfc6c9c6a22620b97e91de5a2eb1f4cb9cd8eff17eddee765bc9c3dad58df135eb22d29cb5ae5aba2e95"
        },
        {
          "alg" : "SHA3-256",
          "content" : "851fa4721a16d8e758d27fa5ae543d102dfdbdf432aec3d0827cb8f4e20a4ce3"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c8d9ed57211d4fbe1c66d2cbb186ce437f55d8975b19c4a47ac3e928951487392dd0405d558271fa18060a94e4c835ec84e478ad8e535b566899ed9bb882932f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/androidx.databinding/databinding-compiler-common@4.2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://android.googlesource.com/platform/tools/base"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/androidx.databinding/databinding-compiler-common@4.2.1?type=jar"
    },
    {
      "group" : "androidx.databinding",
      "name" : "databinding-common",
      "version" : "4.2.1",
      "description" : "Shared library between Data Binding runtime lib and compiler",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6e94f15cde86f832b9caa1f5e591ca5c"
        },
        {
          "alg" : "SHA-1",
          "content" : "07cd151c60e0967a321e5731b714faf89fb95319"
        },
        {
          "alg" : "SHA-256",
          "content" : "4c10017bc927f42627397c4ad2ab46b3bdb9b28e4e86c0bdb62d898aeeff1415"
        },
        {
          "alg" : "SHA-512",
          "content" : "cf10e24bd8da2f4f8d9e73f587a9aac0f7622ca1e680bd51bb3ea01f0488eb0919c5fcc8cf0150d39c5df2805d05e867920994fa6555667865f17b1d513d80d1"
        },
        {
          "alg" : "SHA-384",
          "content" : "925255b6c9000e04d1f0076f1dde6ae42ce49adb0fb78ea02f8c815439b0ce9714f808cba23825f60cfc38987b4fbf37"
        },
        {
          "alg" : "SHA3-384",
          "content" : "fce7aa72b96d2a329cb6d83b9972ff5f32b8d0c546d5a0d676ab72edb18e6c05087c7dcf01baffeac5d0ba86cc7a7482"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4390fa7cd7b58aeefa3502eb13c22d62c5b63edbf35cb55688d9436716b0c007"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d29597d08d64969b1a482895eff3350401b00e958aad2132068147534ccffbfbd6688de26cd44e9e46fa4a2585ea5a2f2e9bc1df441be966d292df1f0c2b3d98"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/androidx.databinding/databinding-common@4.2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://android.googlesource.com/platform/tools/base"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/androidx.databinding/databinding-common@4.2.1?type=jar"
    },
    {
      "group" : "com.android.databinding",
      "name" : "baseLibrary",
      "version" : "4.2.1",
      "description" : "Shared library between Data Binding runtime lib and compiler",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "12da4c31a0441949f93ff92ee22b60dc"
        },
        {
          "alg" : "SHA-1",
          "content" : "a59d2bbfff5e546e7bc60844512d4f2ec4e06619"
        },
        {
          "alg" : "SHA-256",
          "content" : "efef9b153c42eb4b78f7a9cdb00ba8ddc6c81c5a0c792d3cf8788b99a35f3f64"
        },
        {
          "alg" : "SHA-512",
          "content" : "cdf1eb43ef87f84ccefbb43c0d8fc04bbb38a0849aa6d22787854db258a6ba4bac8d763078127cf1b93fdfb25c8379019cad37da72915a109e5716d5d90f552c"
        },
        {
          "alg" : "SHA-384",
          "content" : "0725d20631761a40aebd0ad82f2430df694a22f9eee621cb2d170953c77e767e85e939af0db0ea58aced4090fe29e2e0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a1843ba327b843f18a1d2d79f58b58e0500a147ee283de2ce2c27c8d00fb48d36c2bdeea64e07d5165132d5b01fe34a9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "dc373005ed1157c8f29bf2565d198a487d207a37893aa96d1edc14b4f592bc3c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1a7e28ce4e1329a5e10e49fa7520036ced0641288ce7689001a262b5f2c3e58f3ed2d76312d4beabdcc2d1446ac4d3dccf7bfaf1e1c2b6a11873f1ff5c635f17"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.android.databinding/baseLibrary@4.2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://android.googlesource.com/platform/tools/base"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.android.databinding/baseLibrary@4.2.1?type=jar"
    },
    {
      "group" : "com.googlecode.juniversalchardet",
      "name" : "juniversalchardet",
      "version" : "1.0.3",
      "description" : "Java port of universalchardet",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d9ea0a9a275336c175b343f2e4cd8f27"
        },
        {
          "alg" : "SHA-1",
          "content" : "cd49678784c46aa8789c060538e0154013bb421b"
        },
        {
          "alg" : "SHA-256",
          "content" : "757bfe906193b8b651e79dc26cd67d6b55d0770a2cdfb0381591504f779d4a76"
        },
        {
          "alg" : "SHA-512",
          "content" : "62278bb82d1dcbf64e92e5314ff1ce481e34e3d4bcc2aad54d410b339f00b33ceb8aaddf6ed86e839d924f17d25948a0ae4a37015724076048d14e1aa66c942d"
        },
        {
          "alg" : "SHA-384",
          "content" : "17ad5525fd595e689360c705f2e193e82857968fa99ea8641a1fb6ae1b25c2a5c693e4c136fd90cbee1e9121913bd54c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "04bf9b2cdf53e90b443abbc20dd17557af4b5bb13528b3f2333525d0832b94745fba2758df52fe0b0ddb9fc4d551f7e9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3b62397adb580090f5c226f4d4bedf4e01d505fd34615df83210cb7a3dc29e68"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c4b850c0dfe6d9235c2402b8d5b20e8e793a851665e8d12fe60aae10024c5a5ff5b91ab07d1cfcb752144ac5402e56d73ecec472837a39ef973b86235853d332"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MPL-1.1",
            "url" : "http://www.mozilla.org/MPL/MPL-1.1.html"
          }
        }
      ],
      "purl" : "pkg:maven/com.googlecode.juniversalchardet/juniversalchardet@1.0.3?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "http://code.google.com/p/juniversalchardet/source/browse/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.googlecode.juniversalchardet/juniversalchardet@1.0.3?type=jar"
    },
    {
      "group" : "org.jetbrains.kotlin",
      "name" : "kotlin-stdlib-jdk8",
      "version" : "1.4.31",
      "description" : "Kotlin Standard Library JDK 8 extension",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7a11cd5fe40b6103e529d281b57b03a9"
        },
        {
          "alg" : "SHA-1",
          "content" : "e613be5465ef1e6fd0468707690b7ebf625ea2fe"
        },
        {
          "alg" : "SHA-256",
          "content" : "b2f8364435ebcb0106ff9d4415a11ffdef8ec7786ee6e5ed465a01556cbd1683"
        },
        {
          "alg" : "SHA-512",
          "content" : "2ae074efbc1c02bb502bc5d4c7f30e4b00d222d31bcd0b4dc0ffc19046ba60f4e1d18c4db107c60861d41eb95cedeb8e1d731608a0ade966bdb2a921ffb5c558"
        },
        {
          "alg" : "SHA-384",
          "content" : "24a725d283a832ccece7e563377513ddb8cb0dac4b8a66c0ce0714b2044a58c7ca184643dc41af34e085dd41d76be363"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d9d432a41db6a7f3b63b53e68c9e5bd25261787ecb81e4806edf640b6268c6e882a6fcc2762afe580e7f7a22c2300f24"
        },
        {
          "alg" : "SHA3-256",
          "content" : "55bf89b9627860d949b33ef84b4bccb4d697e237ace244de3fafc46c39b956f6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e477fd52bd9b53d77fcc8b7ceb711e2e4aadda09266658bdcedde84dbc0abfee35287197a62441f36486015d114df262a92f4403527f165c83ef29c97684de13"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.4.31?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/JetBrains/kotlin"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.4.31?type=jar"
    },
    {
      "group" : "org.jetbrains.kotlin",
      "name" : "kotlin-stdlib",
      "version" : "1.4.31",
      "description" : "Kotlin Standard Library for JVM",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f3d746fbfc44a2ee06403d42622e0018"
        },
        {
          "alg" : "SHA-1",
          "content" : "a58e0fb9812a6a93ca24b5da75e4b5a0cb89c957"
        },
        {
          "alg" : "SHA-256",
          "content" : "76a599d88b167e8ac90879b6daa722c6ad3452ba714c9aba19bd196544b97f1c"
        },
        {
          "alg" : "SHA-512",
          "content" : "0f20c70556c245903558107d24ef517f770f0984e124548f88162fb86914573c8cde538e45b3b12e18594b6964b7826948cb577859483f2fe122222474eae293"
        },
        {
          "alg" : "SHA-384",
          "content" : "93dde73e34cfb6f0cce57910c316daca04460f94ea479b2b7128d90f3c99322414fdf79b11f9edfed7e2aa692b0ff72a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "aa61bc22096839c6bcff61a7389ca28671b0e00a24b066ec843e870d12009bff0b846c1aad924953172d4d2ddff162e2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e8da14ac6885ab93227a0ca665c61de8c0151f4c7d7be3806b0a7a8c6b735f93"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b4057575eb42e669911c301ca707349d32acc557887360353eff99d2b41fc28645ae40af300ffebc9892db5a795b83cfccb47707821042855f92c84087fb8d83"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@1.4.31?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/JetBrains/kotlin"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@1.4.31?type=jar"
    },
    {
      "group" : "org.jetbrains.kotlin",
      "name" : "kotlin-stdlib-common",
      "version" : "1.4.31",
      "description" : "Kotlin Common Standard Library",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "db67651389ca7f657990d4f69985f7fc"
        },
        {
          "alg" : "SHA-1",
          "content" : "6dd50665802f54ba9bc3f70ecb20227d1bc81323"
        },
        {
          "alg" : "SHA-256",
          "content" : "57962f44371a746b678218a0802a8712c6255206de9a69ede215e3aa4b044708"
        },
        {
          "alg" : "SHA-512",
          "content" : "9b6afed55003cc51b6f4dc662b4eccf8dd70050c6ffe38b8de48ad4b9c56de8f0120e546e0b606af5758239d35bf46a33e57913e1c2c011c97c83c658553aa91"
        },
        {
          "alg" : "SHA-384",
          "content" : "ae8eb5936a4fcfb2491a7059ec1f9ca19a037ac2ecf0b332a48864a0c95695349cd8bdbeace18178c8cfe18e7df57695"
        },
        {
          "alg" : "SHA3-384",
          "content" : "708688aea6c3abf3d03f63f43ff1d0d2530f05b57ee5dae185f34ca17b3fc2bc2cf2a48942a31bedd5d13edcfa0dc110"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7bcfedd841c7d3720f8cb96f2ee4089da1dab9978e9d53b4696bf5d8dcd57869"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5d4f195ef276907bb0ddd516f07aca6e9504b82b1c1554508f785b553cf416ecab1e93c9ac17913c7f171572be49683632880862226facbb3ade12afe4a53b59"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-common@1.4.31?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/JetBrains/kotlin"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-common@1.4.31?type=jar"
    },
    {
      "group" : "org.jetbrains.kotlin",
      "name" : "kotlin-stdlib-jdk7",
      "version" : "1.4.31",
      "description" : "Kotlin Standard Library JDK 7 extension",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b471182f952997b2ed62911d28321c7a"
        },
        {
          "alg" : "SHA-1",
          "content" : "84ce8e85f6e84270b2b501d44e9f0ba6ff64fa71"
        },
        {
          "alg" : "SHA-256",
          "content" : "1f966e54e86cf4b7d7014afdce04e0f3ee4625084cda3494edccc7b84af52664"
        },
        {
          "alg" : "SHA-512",
          "content" : "2b2a88686de991924b488ab0bfa250b432efbf4da2df5fa9cd62d6d983c8bdb8a17909f02561263966734a72ea07e6f2849aa95719deed2294e6ec28a99c6f52"
        },
        {
          "alg" : "SHA-384",
          "content" : "bb11751e75bf5a47e89890e7b7bc6852dbbe6683d78bc09135e4e231b9013b4b76d087f5a9f89249c8607bc3680c086b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1e814a0ea41566dd17c46b3bc42ed264979168d6de661831ec60bb64a87153c8cccff83aedd117a811f32d32b00824fd"
        },
        {
          "alg" : "SHA3-256",
          "content" : "60cb557a16bff3d6ecdb3fb08390e1e2324edd1dfd3faceb679879aba579eee9"
        },
        {
          "alg" : "SHA3-512",
          "content" : "555a72779de1dbee18f179ef91618c0dbec2927ea2d4fd112f191e886a79f1f7816dbdba6e3e505aca4863afc398114982d18ac2dd9a8340aca6af7d2e9078a6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk7@1.4.31?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/JetBrains/kotlin"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk7@1.4.31?type=jar"
    },
    {
      "group" : "com.android.tools.build",
      "name" : "transform-api",
      "version" : "2.0.0-deprecated-use-gradle-api",
      "description" : "Deprecated, use gradle-api",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bb3cff3fec88b7172642c0fe85f59202"
        },
        {
          "alg" : "SHA-1",
          "content" : "47f6c56527c42425742fa9b56ffd3fd80763fe03"
        },
        {
          "alg" : "SHA-256",
          "content" : "4de4a3d05e1c534c2db9e4588bf34082bb2bd232d8abb9727c430290ce225740"
        },
        {
          "alg" : "SHA-512",
          "content" : "f7af126566e550c43586db59bb020a2f85387d4e60b533b2a04f988e75350584cc557e49ea3f1237327e487e2a50de98196514eb218c6ce83661d2291d2cde54"
        },
        {
          "alg" : "SHA-384",
          "content" : "1417c0c960c4b1498dc050fecaaf60b4932110c28e0f0e6cd05ca32c35e021b3b91ba51074432d14f1336cebc0e78da5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2420b525d003f90519204b5b4618ac95255eed1c2d120f26005cd9a4d1053abd94678e1c01dc1d15390766e694ac3e1a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b3214ebd7567b239bbd3408df23d96b20092c4a0b2f43da85d0f7f4958a13ac9"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f4f8ed8763444751e758099f507d63e72a939ed6c7b41b02745ec34464fbdc198a4137fd155f4b952777e900428c960738ec5d53ee6ceb8da44aa411b2588578"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.android.tools.build/transform-api@2.0.0-deprecated-use-gradle-api?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://android.googlesource.com/platform/tools/base"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.android.tools.build/transform-api@2.0.0-deprecated-use-gradle-api?type=jar"
    },
    {
      "publisher" : "OW2",
      "group" : "org.ow2.asm",
      "name" : "asm",
      "version" : "7.0",
      "description" : "ASM, a very small and fast Java bytecode manipulation framework",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4cdf9fd77ce48671ff9fd607f2a8a93c"
        },
        {
          "alg" : "SHA-1",
          "content" : "d74d4ba0dee443f68fb2dcb7fcdb945a2cd89912"
        },
        {
          "alg" : "SHA-256",
          "content" : "b88ef66468b3c978ad0c97fd6e90979e56155b4ac69089ba7a44e9aa7ffe9acf"
        },
        {
          "alg" : "SHA-512",
          "content" : "b31699f50485ddc4e84466064cf5789a3e61bafbec53c4b9cb19ffef07b36722d3efdca8722884fd6d6dedaca65db4dd6f71cd886bba599e8a77971955167a60"
        },
        {
          "alg" : "SHA-384",
          "content" : "ece91dc20be47d396ae9218b789cd41aa8290ce79b60369c42f2e974647b5fd32898181a0f44b08275e32f07ea9a411f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8b9b0416bf4739b698ff8c5ab97c8d70f535ea92f88d2227680b01b2d508ad59a9c364d8a21bd96d78884834d4312ebe"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6e99b37e75db90a648fef1f1ae8aafda0f6cf597ec282236f03ec978dd7e11e4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "dd99c004f99697944316707aedd3822f86c27b0cf42ceda83b8807daab2f495e1b79d6e5bdfffaaa833a7f7626585947787f665ebf35b607316bde9499ceb7c6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-4-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.ow2.asm/asm@7.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.ow2.org/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://gitlab.ow2.org/asm/asm/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail.ow2.org/wws/arc/asm/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitlab.ow2.org/asm/asm/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.ow2.asm/asm@7.0?type=jar"
    },
    {
      "publisher" : "OW2",
      "group" : "org.ow2.asm",
      "name" : "asm-analysis",
      "version" : "7.0",
      "description" : "Static code analysis API of ASM, a very small and fast Java bytecode manipulation framework",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "eb378b389aef721ccd1486c1701e8454"
        },
        {
          "alg" : "SHA-1",
          "content" : "4b310d20d6f1c6b7197a75f1b5d69f169bc8ac1f"
        },
        {
          "alg" : "SHA-256",
          "content" : "e981f8f650c4d900bb033650b18e122fa6b161eadd5f88978d08751f72ee8474"
        },
        {
          "alg" : "SHA-512",
          "content" : "1a6ca169e9e2d29256f9c45570d89e5b039eaf7d405ccb3f7f79926552f2a0818975ce2c6adce3f1f59e28172e4303a1c790c52ab06263c61c9c8181ff279cee"
        },
        {
          "alg" : "SHA-384",
          "content" : "bdf9db7f450616fe8abe758198f198776e648f19900e9cfa159308529b963244562a825264c4859fbe89cb8f348c6ca4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8b9895306a8949b0326c46a97f522f2a54bc19c918f9da91a5f9ddf831b5bdb0a7527c089c483fe4018253188d6d5381"
        },
        {
          "alg" : "SHA3-256",
          "content" : "64c0a75eda17462e5587d402f7bb418704444413410b6bfc1f03b750ca9cc162"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1be3ba5233fea8f1c52dc89a0ba28c3133dac217e9508dad11ad136f29f01ce83b99bbc5cd3ccd08742f614b2209d592c00d30057d805f05c0160e07fc43647b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-4-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.ow2.asm/asm-analysis@7.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.ow2.org/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://gitlab.ow2.org/asm/asm/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail.ow2.org/wws/arc/asm/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitlab.ow2.org/asm/asm/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.ow2.asm/asm-analysis@7.0?type=jar"
    },
    {
      "publisher" : "OW2",
      "group" : "org.ow2.asm",
      "name" : "asm-commons",
      "version" : "7.0",
      "description" : "Usefull class adapters based on ASM, a very small and fast Java bytecode manipulation framework",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "770446a3d6e7f26ded138b5f04eae84f"
        },
        {
          "alg" : "SHA-1",
          "content" : "478006d07b7c561ae3a92ddc1829bca81ae0cdd1"
        },
        {
          "alg" : "SHA-256",
          "content" : "fed348ef05958e3e846a3ac074a12af5f7936ef3d21ce44a62c4fa08a771927d"
        },
        {
          "alg" : "SHA-512",
          "content" : "ca97b49eece30da774055b58a63c6e4f65a6bc4c0f40a829dcaf7164fbffdec10c6b2d9a22df0a0918fdc83a47ea9906294aa99d3f170b35fd9e0632578c80b2"
        },
        {
          "alg" : "SHA-384",
          "content" : "5096769c920a15959e64671e1b2191f4df6ea4a5b4b1e5655534818f57d6fe8cf4217683e845d214b863af8308a54fb2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0f7aa8e2f7af53541d20fa5d574e336c1317e72471b9eefb4ba0205a383309a22649521d3ba4be5ef99e21339f4ecc76"
        },
        {
          "alg" : "SHA3-256",
          "content" : "df6aa823d566fb89cd1c8b3eba64b882ce9f3ef3a85b97072065bcf6208a635f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "eb3cd224e64ab158a71ed31eb7eb80d687da6f8daf39b26cdbf5ce4a6637d13d292a472e1b11534e867eb95fd6b0a6441ab0c3c2d039f6fe4dcd13124315bbf9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-4-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.ow2.asm/asm-commons@7.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.ow2.org/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://gitlab.ow2.org/asm/asm/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail.ow2.org/wws/arc/asm/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitlab.ow2.org/asm/asm/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.ow2.asm/asm-commons@7.0?type=jar"
    },
    {
      "publisher" : "OW2",
      "group" : "org.ow2.asm",
      "name" : "asm-util",
      "version" : "7.0",
      "description" : "Utilities for ASM, a very small and fast Java bytecode manipulation framework",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e3fa78c498141910fa0dacbda87b182c"
        },
        {
          "alg" : "SHA-1",
          "content" : "18d4d07010c24405129a6dbb0e92057f8779fb9d"
        },
        {
          "alg" : "SHA-256",
          "content" : "75fbbca440ef463f41c2b0ab1a80abe67e910ac486da60a7863cbcb5bae7e145"
        },
        {
          "alg" : "SHA-512",
          "content" : "6b9630ad4c5f6abc2724f9d85a7c0e81e524f8b0bf25273dd5578edc20efc7ab400095cd48e904d2536071181a8e9f39635ff3fee0986bd078016d2dff8241b1"
        },
        {
          "alg" : "SHA-384",
          "content" : "87e29c6f412647d551dcddd6d6f4e42ba0989690df6ab8c144291fcce433707c5be5211c91a4d30839a9aef881767eba"
        },
        {
          "alg" : "SHA3-384",
          "content" : "49fd228b1e6c5573791e2d5739e099f74a64134c40edf1363d269df5934c182d9464939dc1a1ca00c5b92437ca949530"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0f5190b7c02c225c67a8536f15699b84d1f78294be63da5b7e5e31ef58d2b0c2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6416b584be3f084c616e6c84f69499279a9afbe694108cca9e1f6132baeadcac08c3bbc610414e935b991369576c53a33671dca848064d89690e0d9a9e4c33ab"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-4-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.ow2.asm/asm-util@7.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.ow2.org/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://gitlab.ow2.org/asm/asm/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail.ow2.org/wws/arc/asm/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitlab.ow2.org/asm/asm/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.ow2.asm/asm-util@7.0?type=jar"
    },
    {
      "group" : "net.sf.jopt-simple",
      "name" : "jopt-simple",
      "version" : "4.9",
      "description" : "A Java library for parsing command line options",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "39c6476e4de3d4f90ad4ca0ddca48ec2"
        },
        {
          "alg" : "SHA-1",
          "content" : "ee9e9eaa0a35360dcfeac129ff4923215fd65904"
        },
        {
          "alg" : "SHA-256",
          "content" : "26c5856e954b5f864db76f13b86919b59c6eecf9fd930b96baa8884626baf2f5"
        },
        {
          "alg" : "SHA-512",
          "content" : "fd04c19bce810a1548b2d2eaadb915cff2cbc81a81ec5258aafc1ba329100daedc49edad1fc7b254ab892996796124283d7004b5414f662c0efa3979add9ca5f"
        },
        {
          "alg" : "SHA-384",
          "content" : "4243f57f3c37f2a357134dc4e75c1141088ee77b4341bc8865d25f38bf63bfa7173bc95a33961378504cc0cd328be7b6"
        },
        {
          "alg" : "SHA3-384",
          "content" : "86c5705458fdefc71e6b76d328f38700541ceeece7908552bbed25d2a283636018a4eac1c1664ec5accbf9cd16c6e2b0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e77a0c4c75d8f5c4efcb6462e960c2c4f105deb138e5fbbb8c889ebff52d7b6a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a35f74cb2d400dc2a7b54120ff71d939d4edb4af613e4bf3e238522822d9338f1215b1c5d65633dacb4c92d49c6a78f04b97f521ab88abd2f998ae95d2dfd29b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT"
          }
        }
      ],
      "purl" : "pkg:maven/net.sf.jopt-simple/jopt-simple@4.9?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "http://github.com/pholser/jopt-simple/issues"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/pholser/jopt-simple"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sf.jopt-simple/jopt-simple@4.9?type=jar"
    },
    {
      "group" : "net.sf.proguard",
      "name" : "proguard-gradle",
      "version" : "6.0.3",
      "description" : "ProGuard is a free Java class file shrinker, optimizer, obfuscator, and preverifier.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "746019c6d91972bcac32b7ffc37837b7"
        },
        {
          "alg" : "SHA-1",
          "content" : "e5becf2356695a396b788110e386c38bad523bfc"
        },
        {
          "alg" : "SHA-256",
          "content" : "cc12b1168e521491dd0e687cfebec11a4af874b22af70e10cf2a05b47ca00c8f"
        },
        {
          "alg" : "SHA-512",
          "content" : "416903aefe5d652cfb7c139d5c16c0a7ba26ba7d592ecfbadca1df72eb98848781665e6d034d0377c1db7c1da746e3e39e01d08137411bd0101e025d6760ae3c"
        },
        {
          "alg" : "SHA-384",
          "content" : "3fe13f0263c9f183861fa5cb07b4f3a1c287761d7773614405a392ba5202d463b7a45f9bb2b927109b4a2890d61714ca"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ae64def66533f2892a2b307a5c4c025be2b4e1273f91dae368b5e130af40fe9a4da478823949d7a30b878f894a952769"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ea7e4591e0064d1fca199d00b777d7fbb3e821e1cab7c6117f60d9f86afb8ed2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2db9d756dc9f5831e040d227e4c8ef21396f69f918dfd6d2db6ca710821ef1415f208cfa15d6de451eec67cd9c26867833766cb8c5305bab138316acaf513a1f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "GNU General Public License, Version 2",
            "url" : "http://www.gnu.org/licenses/gpl-2.0.txt"
          }
        }
      ],
      "purl" : "pkg:maven/net.sf.proguard/proguard-gradle@6.0.3?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://sourceforge.net/p/proguard/bugs/"
        },
        {
          "type" : "vcs",
          "url" : "http://hg.code.sf.net/p/proguard/code"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sf.proguard/proguard-gradle@6.0.3?type=jar"
    },
    {
      "group" : "net.sf.proguard",
      "name" : "proguard-base",
      "version" : "6.0.3",
      "description" : "ProGuard is a free Java class file shrinker, optimizer, obfuscator, and preverifier.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a5b0635dabbe4f57e9793bbcf96ac8b2"
        },
        {
          "alg" : "SHA-1",
          "content" : "7135739d2d3834964c543ed21e2936ce34747aca"
        },
        {
          "alg" : "SHA-256",
          "content" : "75bc89695fa66e75374ecda439b802406f0ab1d826dd386eed0a23b1f0a9d264"
        },
        {
          "alg" : "SHA-512",
          "content" : "b16059cc7ea1b0a9419e304e7bb87ac1ae8528711d3121a78a3389b623689540c70f7e09022922150f6e5cca4b453ba1956490811cd21d51e122d9bb527c411a"
        },
        {
          "alg" : "SHA-384",
          "content" : "03ed3ef3bcb1763c98c4509d6e7bd0bb8b7e211059bbc800127774cba21e77cb34acb29e984a8643ce3569402062b157"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a365efac080fe459ebfdf3a7c6a34b6c0e92ea913ebf92f2a7e526ba4b9ec8d41ac944fd0b90c564264b0e36a7225d86"
        },
        {
          "alg" : "SHA3-256",
          "content" : "268325f1d6f80bc87b2c9743e93288c7cce8b71a37c83b934d86b96ecc9bab4f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c366708c940fc2a786f1f333ebd07d4a03739507898083a0ebb7e995fdb2973500b3a3abb0fcdd59d656fe8f7cdda5264236544754e7e31e4ff38a2fc3b00317"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "GNU General Public License, Version 2",
            "url" : "http://www.gnu.org/licenses/gpl-2.0.txt"
          }
        }
      ],
      "purl" : "pkg:maven/net.sf.proguard/proguard-base@6.0.3?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://sourceforge.net/p/proguard/bugs/"
        },
        {
          "type" : "vcs",
          "url" : "http://hg.code.sf.net/p/proguard/code"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sf.proguard/proguard-base@6.0.3?type=jar"
    },
    {
      "group" : "com.android.tools.build",
      "name" : "bundletool",
      "version" : "1.1.0",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c881469cf5926da3af7c07d30df0a74f"
        },
        {
          "alg" : "SHA-1",
          "content" : "582c071113a4447a8f9743a0dea8558f5c499c61"
        },
        {
          "alg" : "SHA-256",
          "content" : "4cb02a7963fa7c82c302fdcde679b336e669e928f5bbad00457d9c562ef1cd30"
        },
        {
          "alg" : "SHA-512",
          "content" : "980296986860fd0af3f1805e50396909e0a47319a1afeb899dc199a767cddbfa2d43c15f647a8937a05001dc7c401e301f399885f4afe9274e1c6e1899e76a87"
        },
        {
          "alg" : "SHA-384",
          "content" : "98749d4db72345d40c9355d4db09485a158e830b1717822d581228a68430ddd5eb59926a912cbf7823e46a627b17357f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "46220f596cc720071590640fece71ad5cd4ba576c61caafa4ecb62243c6657096422e3185d5eb360e2ac873ce324ae44"
        },
        {
          "alg" : "SHA3-256",
          "content" : "037260a21cb70842fd7284e73715b2a74a2186928dcde668e8a1ec8d352ce8b5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "51f5300aa39bdb5ae37f09192f75f0218454e39e4fdad5a351b1a0cadf6f908beda5a7669d278dca84fafb152fcb48753b185ec25599bd69af4ace45d1f4cacf"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.android.tools.build/bundletool@1.1.0?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/com.android.tools.build/bundletool@1.1.0?type=jar"
    },
    {
      "publisher" : "Google, Inc.",
      "group" : "com.google.auto.value",
      "name" : "auto-value-annotations",
      "version" : "1.6.2",
      "description" : "Immutable value-type code generation for Java 1.6+.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "df4979e8a486e4ecd145adcf03e445c9"
        },
        {
          "alg" : "SHA-1",
          "content" : "ed193d86e0af90cc2342aedbe73c5d86b03fa09b"
        },
        {
          "alg" : "SHA-256",
          "content" : "b48b04ddba40e8ac33bf036f06fc43995fc5084bd94bdaace807ce27d3bea3fb"
        },
        {
          "alg" : "SHA-512",
          "content" : "37fc4689f2885261fecee345300934025fd65b9e43a65a696c9046c3d2919c1c09f30dcbe0b74099f9307a5248dd08030edd4233637e3db3ab40a16b30cb23b4"
        },
        {
          "alg" : "SHA-384",
          "content" : "b23b057c217591781ee233078b8ee56915ea3d8ae79e81689d9cbfc95f972466c82e2f1cb881cc1ec5f6d751b06b0060"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1c1bcea90a93e01bdbb75920327ae6ff3a313cb87c9a86c73510a0c8f75d2f17647b5f7850708539a355f6216adfa8d5"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3f47ec976ddba7e0af02b1cc57003ce80eb6a4da2e07dc57d39b819d120e2989"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ccb942164bbfd25a7e5cded5af4e20f7e45332d9a84b2438464faddf21016d98403b4be79844a176795d002e2bc50a4b77043333e777350397fc1cebd90609c6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.auto.value/auto-value-annotations@1.6.2?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "http://github.com/google/auto"
        },
        {
          "type" : "website",
          "url" : "http://www.google.com"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://github.com/google/auto/issues"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.auto.value/auto-value-annotations@1.6.2?type=jar"
    },
    {
      "publisher" : "Google, Inc.",
      "group" : "com.google.dagger",
      "name" : "dagger",
      "version" : "2.28.3",
      "description" : "A fast dependency injector for Android and Java.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ef0f824a008de1689a451d402afdbfc8"
        },
        {
          "alg" : "SHA-1",
          "content" : "10d83810ef9e19714116ed518896c90c6606d633"
        },
        {
          "alg" : "SHA-256",
          "content" : "f1dd23f8ae34a8e91366723991ead0d6499d1a3e9163ce550c200b02d76a872b"
        },
        {
          "alg" : "SHA-512",
          "content" : "0ab9b4b48db3393127c4979f7f9ed9af63a1d9ceab8eade10ba9c6a7f480204c9951740fe400e8940afb28089d4915ab8670565cd381c70d4b10ffb65e3383dc"
        },
        {
          "alg" : "SHA-384",
          "content" : "9d561ea96425a28f2b8c0c8b3d08fbeff8fcb23ae30035485fa0ac574161e1b47de810d0ca5a4f2f006b1f14762f452e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6703a6bc773062ea3d1daa08ed1706c192b263476a061c62ab71232c2492dffaf46dfb62337d1e14565f95404bee9423"
        },
        {
          "alg" : "SHA3-256",
          "content" : "51f67e7a289845d3be8acbfa909acd2c4fd3bfe4637c551d4f1bd35ba3a7fd88"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b8f4aecf6d635f9ad3a04518cf589c18e1b0f5c52adbfa71fd5066626eb8b723abca705162b4b69e8f3cc01413fb9af5a2c7b037d16fe6d9130b915a9ec4b741"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.dagger/dagger@2.28.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.google.com"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/dagger/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/dagger/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.dagger/dagger@2.28.3?type=jar"
    },
    {
      "group" : "com.android.tools.build.jetifier",
      "name" : "jetifier-core",
      "version" : "1.0.0-beta09",
      "description" : "Android Jetifier Core",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a6b614ed04be204ab4ca983b36e1a737"
        },
        {
          "alg" : "SHA-1",
          "content" : "c98ee0e5579aed97e17f605a89b101115a2f5a61"
        },
        {
          "alg" : "SHA-256",
          "content" : "9bb3a91e871e784446e4dd1e1d1dea5c322e271cba8278c1dec3669a66aee858"
        },
        {
          "alg" : "SHA-512",
          "content" : "de9c1c73a9b5393bc38bb6d942148312f325537b1d57df49ac82eb17ee31e61ee72435244f21f76154da57859a5ee15a3a3e3c40a8be81b5afb4ecc72fadba97"
        },
        {
          "alg" : "SHA-384",
          "content" : "fcc7d17ebfba5e1bb382fc0b62bd168791ce6662884895b5d1f6f523f452bbcf3d8231f3c81bab5012eb267799b496ae"
        },
        {
          "alg" : "SHA3-384",
          "content" : "940784281e3ab9b13f3375d856d61baef10152f9cc6c0056548320804829ffd74dd9838e6a56e6d4b0a5e69c755e283b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "68d0ff451444fdcf31821528f51479252836b672e5cf3db77240bfe8b26818a4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "75e0632cacdf254b5a57b96efd0540e9f24f9eebbdbb990f850d3eeafb2061991d5868794c1f9c38f255aa8111d159a9e972e925de106f7c875e72a3ee45b2bd"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.android.tools.build.jetifier/jetifier-core@1.0.0-beta09?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "http://source.android.com"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.android.tools.build.jetifier/jetifier-core@1.0.0-beta09?type=jar"
    },
    {
      "group" : "com.android.tools.build.jetifier",
      "name" : "jetifier-processor",
      "version" : "1.0.0-beta09",
      "description" : "Android Jetifier Processor",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e61c807b62018a2951fb9ad632ef2fb9"
        },
        {
          "alg" : "SHA-1",
          "content" : "fb2a015ff56e24939a88593ac73b84e627864476"
        },
        {
          "alg" : "SHA-256",
          "content" : "1838f9ee70120e64f45612ca071972ac83ddc118185abffbce3932a4710325eb"
        },
        {
          "alg" : "SHA-512",
          "content" : "44769eb08bf1841d5ed454d600cf0384238a5d59756d7e607083cf4f3a5d53f99595cc5fbebed6d904592fe014230bcba94dd44fc0a9961e28bb68f87a7eeeca"
        },
        {
          "alg" : "SHA-384",
          "content" : "68c205ab0e0352365d24c23627a0c729a0f4b25ddd2f4a37c4ee6d8c2679696e1993ba5bcd89540b5be398c179f7c502"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d215d4ad58731184464d3fb631d7d968243227822acf77c1c48e671b00ee06b7233e84fd63edebca650e2e2b22cf2d6e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "acb69d3d149c30be8de968c7e88e58ba542dd133ec0993f771339b327ba4588e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d13ff9d5f1e16385f35ae0cecad5895f48040874153e3cab95ac771edc46c493cc4951037c25d3e56bc3d9cf42d074053a81b9826a7f147fa6ad935791149f78"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.android.tools.build.jetifier/jetifier-processor@1.0.0-beta09?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "http://source.android.com"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.android.tools.build.jetifier/jetifier-processor@1.0.0-beta09?type=jar"
    },
    {
      "publisher" : "JDOM",
      "group" : "org.jdom",
      "name" : "jdom2",
      "version" : "2.0.6",
      "description" : "A complete, Java-based solution for accessing, manipulating, and outputting XML data",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "86a30c9b1ddc08ca155747890db423b7"
        },
        {
          "alg" : "SHA-1",
          "content" : "6f14738ec2e9dd0011e343717fa624a10f8aab64"
        },
        {
          "alg" : "SHA-256",
          "content" : "1345f11ba606d15603d6740551a8c21947c0215640770ec67271fe78bea97cf5"
        },
        {
          "alg" : "SHA-512",
          "content" : "315791dc16bc6240d81da7fee9ae325102ff7db19a57805335d189bc747abc4d1c80144589ebf956613b93b2263c7565fdf171aca0c6c598616eb3f0bdf4cc58"
        },
        {
          "alg" : "SHA-384",
          "content" : "6240f6747c788c1d512aa1383ff5648dc1c528504010d1dea0667cfa7b291e5521ad70521a8753e52c057edbdc190d36"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5905840ddfa1bdad2bf8cc3b61a0509c438de94585473b5e4a4dccd8c653fe0a97b094b6703b502605b1141ad6b83d23"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e46ea1f3ddd97c9e6a5714ed0e4f981962f4c11c28ec96f63edff801c202921a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4db8ae655765f69ffd94f4cfbf1d637a9159bb015af198902449ad0f9654b41aa3ec8695e36c358ce36ec7d3ebb67feafd955be6eefdb5d72f308e95a97ab8a9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Similar to Apache License but with the acknowledgment clause removed",
            "url" : "https://raw.github.com/hunterhacker/jdom/master/LICENSE.txt"
          }
        }
      ],
      "purl" : "pkg:maven/org.jdom/jdom2@2.0.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.jdom.org"
        },
        {
          "type" : "mailing-list",
          "url" : "http://jdom.markmail.org/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.jdom/jdom2@2.0.6?type=jar"
    },
    {
      "publisher" : "Square, Inc.",
      "group" : "com.squareup",
      "name" : "javapoet",
      "version" : "1.10.0",
      "description" : "Use beautiful Java code to generate beautiful Java code.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "58f542814fa3501790a57c212f20dafe"
        },
        {
          "alg" : "SHA-1",
          "content" : "712c178d35185d8261295913c9f2a7d6867a6007"
        },
        {
          "alg" : "SHA-256",
          "content" : "20ef4b82e43ff7c652281a21313cf3b941092467add3fa73509c26f6969efdab"
        },
        {
          "alg" : "SHA-512",
          "content" : "67fe213b5ddd71fca4e28758025b34feb82fe7b5e5f50aa9c652714c21fddf0bf6fbd0c21c555e6824f5ff989a1feefc448a0cb376b2fa7c684abff70d51769c"
        },
        {
          "alg" : "SHA-384",
          "content" : "ca019700d32113ada83dca632f532c4f838b86aeee22ca30cd03c730ae14c57fd43ac873ae2713bce7067d634cb53088"
        },
        {
          "alg" : "SHA3-384",
          "content" : "af84f36d1679e78975cf87bb02ce77eb70698e937225ff9464250a8c1560de70938d6c675d602abab2860177bb5d5087"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ff8dfc5b06ca179b3338d46e18b2c2517afd16aa7ac03e314a309f70cb01afb6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0fd2e2d3bc64d134878303ffd0a1b194b12f80153b92deaecbb782af3f299e617d60467d2307303a2a30a15bba48b7dcccc85129af8799771e978c3064f0e889"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.squareup/javapoet@1.10.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://squareup.com"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://github.com/square/javapoet/issues"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/square/javapoet/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.squareup/javapoet@1.10.0?type=jar"
    },
    {
      "group" : "com.google.protobuf",
      "name" : "protobuf-java",
      "version" : "3.10.0",
      "description" : "Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an efficient yet extensible format.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ee4e91af9399c52cdad88bd078f5a71a"
        },
        {
          "alg" : "SHA-1",
          "content" : "410b61dd0088aab4caa05739558d43df248958c9"
        },
        {
          "alg" : "SHA-256",
          "content" : "161d7d61a8cb3970891c299578702fd079646e032329d6c2cabf998d191437c9"
        },
        {
          "alg" : "SHA-512",
          "content" : "19ab3bca6cf7cdc255248e20b4d8347e049919ce3848214b99495adec810a63f8f866975e33498f15fbaf3765b8b1ec9df28cc5030d9c6d7930b288f684783a0"
        },
        {
          "alg" : "SHA-384",
          "content" : "5fdfc9e37c6027eed0cbace8915764af36560454d774de485c9f348df65a7e21c0b2d32106c37bf5cbc33a8eaf492273"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5931fa5756acb48017e9ef9916b2e6c4269ef583f6368ed4e9958646dd2ebf1c5a748e201ea673a0240af7ae9feea023"
        },
        {
          "alg" : "SHA3-256",
          "content" : "19230575172d85efa1ea68eae59cb0e6aa9308d7e64556a7364cba5d19cad5d6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3c67f581a56aa2d8e7f0a6723395b030db3b62c8b8c10433501cbe602c2ae28729e2aa03a44cf478a440729f59d4c947e3430c308c0708dfc53314f348dbf44a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.protobuf/protobuf-java@3.10.0?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/protocolbuffers/protobuf"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.protobuf/protobuf-java@3.10.0?type=jar"
    },
    {
      "group" : "com.google.protobuf",
      "name" : "protobuf-java-util",
      "version" : "3.10.0",
      "description" : "Utilities for Protocol Buffers",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2e87271cc08f426faf26f474f7308a74"
        },
        {
          "alg" : "SHA-1",
          "content" : "a68c906db83e93babbb4024ce91e7441bb7598dd"
        },
        {
          "alg" : "SHA-256",
          "content" : "619b0b0dc344cb141e493cbedc5687c8fb7c985e609a1b035e621bfab2f89021"
        },
        {
          "alg" : "SHA-512",
          "content" : "9f34853b22f70138e82e88bafe2480ad37b8716ad9c0558ce17c787dff75dd563cfa0d8fc75b306bb84c18c4e55e8a1636a3bd27e9a6328ae193c1480448eec8"
        },
        {
          "alg" : "SHA-384",
          "content" : "13ba4abfae62f251cf62732063c9d12229cec4d898ec86aa498af309e3952671a1596b5b2cf3358ced6f1db806fba440"
        },
        {
          "alg" : "SHA3-384",
          "content" : "67f141bd526eee32ca6e2bc1b274f6bf79345db2f3b168686299b178677b6ae351710887f56270894d0a360ea421f4db"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ccda6c4c88448309d081732e28f2b026797dc782563005fba1ec91b359288708"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8e0e03e4e57fca340cfa08279e88cb1075e61a4793189d19002ec50d2cc8cd642be09c4bbf76aeb549533d854c262041ab04402f49c18eaab1266d4fa0b9f4d2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.protobuf/protobuf-java-util@3.10.0?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/protocolbuffers/protobuf"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.protobuf/protobuf-java-util@3.10.0?type=jar"
    },
    {
      "group" : "com.google.crypto.tink",
      "name" : "tink",
      "version" : "1.3.0-rc2",
      "description" : "Tink is a small cryptographic library that provides a safe, simple, agile and fast way to accomplish some common cryptographic tasks.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "db3c9fedcd9cc7daf4c09657c0bba262"
        },
        {
          "alg" : "SHA-1",
          "content" : "c7efb1ecc3b667b8a0789a1b019b06269037e19b"
        },
        {
          "alg" : "SHA-256",
          "content" : "3aa576b5671d0e26d83d7fdb7186810b5672f00bf8e72184260bcc7c2d7dc07a"
        },
        {
          "alg" : "SHA-512",
          "content" : "a598e6f9f0bd9ea49cbc89029b39d520472237a27e379573673ab545844ffe3d71ae1a0a0660c2615442ef5d72a0c7427e1b4bd21cbc565024e1324e94f80f98"
        },
        {
          "alg" : "SHA-384",
          "content" : "02453ec0b7b38a3729fec2ccd67a38477ded796260b5cce989054d62a7f68f76153e5647d6fefb5ed4cb9574adc30ec9"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5440f104eb2bef8b164cb07323d715ea2cb6a0066080278b70b28695c9e0696b97e1965e40cb98c6e90f8f12756794ac"
        },
        {
          "alg" : "SHA3-256",
          "content" : "54c041a200633145630ad630807a3fb556a0bd2587fe478d430e8f1bd5d77bb6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0312502554709374c729464924ce0ee3fdf4acbf60ddb3ffdaa0746eb7b1637d1289322659ba16b5697210e71fb087588a599998a9e3c4c77b92a0f660c5f81c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.crypto.tink/tink@1.3.0-rc2?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/tink/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/group/tink-users"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/tink.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.crypto.tink/tink@1.3.0-rc2?type=jar"
    },
    {
      "group" : "org.json",
      "name" : "json",
      "version" : "20180813",
      "description" : "JSON is a light-weight, language independent, data interchange format. See http://www.JSON.org/ The files in this package implement JSON encoders/decoders in Java. It also includes the capability to convert between JSON and XML, HTTP headers, Cookies, and CDL. This is a reference implementation. There is a large number of JSON packages in Java. Perhaps someday the Java community will standardize on one. Until then, choose carefully. The license includes this restriction: \"The software shall be used for good, not evil.\" If your conscience cannot live with that, then choose a different package.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0b1d8d278105d260dd8f5a97d80bfd5a"
        },
        {
          "alg" : "SHA-1",
          "content" : "8566b2b0391d9d4479ea225645c6ed47ef17fe41"
        },
        {
          "alg" : "SHA-256",
          "content" : "518080049ba83181914419d11a25d9bc9833a2d729b6a6e7469fa52851356da8"
        },
        {
          "alg" : "SHA-512",
          "content" : "f95d5ace1435e8c889e937ec75f32e3a6715a134bd2eae9e8a1b1decd9c306836b2a24324ee1abf445a53209c2311c62d41896f4a5a7730932ce9acdccf90682"
        },
        {
          "alg" : "SHA-384",
          "content" : "5ccc68d1d1bd2ff863189925abd8c03d2932d32cc8d104db310bd1768a11d86578ed28030b4079f48c249eb294ab9b60"
        },
        {
          "alg" : "SHA3-384",
          "content" : "784b8d82cc6560ca628fecaee2f8b2c0e00e03ab1754c9da89b4258a7fb0191436ed9da34d54f162e79ba3521d790d6f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fb0bdba8443b4552bcf224841689f5e40be43f62727ec805621c661021661e42"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e617ba9cc7f5ca6d303280fd5c14dded476cbbea4c5f1741cfc389cb8440574771bead563978a1f49e0dec045357a3e89a1efebe4ae7183f91bed814ecbf0e9b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "JSON"
          }
        }
      ],
      "purl" : "pkg:maven/org.json/json@20180813?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/douglascrockford/JSON-java.git"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.json/json@20180813?type=jar"
    },
    {
      "group" : "com.google.testing.platform",
      "name" : "core-proto",
      "version" : "0.0.8-alpha01",
      "description" : "The AndroidX Test Library provides an extensive framework for testing Android apps",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c4ca15c622b6ecbf566cd8ea28a90a55"
        },
        {
          "alg" : "SHA-1",
          "content" : "f107a202fcbb34706f08e7fb8c31ea25bf504d7c"
        },
        {
          "alg" : "SHA-256",
          "content" : "2deaa8c40f27c8af158ae2c2132927cd9be345deb1450da49aca29cb168289cd"
        },
        {
          "alg" : "SHA-512",
          "content" : "19899c81d88c9a591c305b1e295284e11363ab94c6a667225cadc00f0b3565205349a93c7717152506e4a5545bc26e523c45b6b3a3341be37eb3704110f8405a"
        },
        {
          "alg" : "SHA-384",
          "content" : "f460c4aacfb104837974ab73de303c2edfa6e3aa667607f8f6d95e49627092c92a5e12c4ee151e96e649a85e39384889"
        },
        {
          "alg" : "SHA3-384",
          "content" : "bd6a231d037bebab042a31418f6c30c5ed78b403b92bc9327ecaaeddb9ad3be8f065f666ad4156185120c4d471a3c6da"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1e02d047e6bfd265c64a7428d8f5cb3a7b2d274d0c9afcfea4a7daf66d5cce95"
        },
        {
          "alg" : "SHA3-512",
          "content" : "30975d228c4b1b32ceeb463ea2037684cf6d6e3cdd61a5a55c420d1eee4531ad46235a953aca68cbce7b84863392cc4853563cdd3968a178ad40bb357d02853b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.testing.platform/core-proto@0.0.8-alpha01?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.testing.platform/core-proto@0.0.8-alpha01?type=jar"
    },
    {
      "group" : "com.google.flatbuffers",
      "name" : "flatbuffers-java",
      "version" : "1.12.0",
      "description" : "Memory Efficient Serialization Library",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "26ecc1a330e441f909226a338d4bef65"
        },
        {
          "alg" : "SHA-1",
          "content" : "8201cc7b511177a37071249e891f2f2fea4b32e9"
        },
        {
          "alg" : "SHA-256",
          "content" : "3f8c088b4dd04a9858721f2e162508c94db0dd86f961e306ee63ef2eda871bf7"
        },
        {
          "alg" : "SHA-512",
          "content" : "20750e91441c074ca28f72b0b6494e8f0bfbc94caff04eb49727efc6b28e453c84732f24acc52cf36b36ba66b57a145d003e87f749c5c4518ddc6f9247b8ab47"
        },
        {
          "alg" : "SHA-384",
          "content" : "7af7d2e03ae71bea1ebac6cc9c2926b9f952c48a124db160ee2327f2f7e6b2e3ba153e5924971788392fc278b0e04ee9"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f52d13b7971ff376414123865fef4def1cf674d12cde8159f77ab4a795438a1c623fd966a014cea9a17cb313aafa7fe2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5a1eaf3b52f2b67805156d2c4ec964dc97598fb4d134446fd0ca13b45a6f4b6a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "294e6a25c027d9dc81be912e60923f2ea20eb3f705233840e4c5bae4775c3476d57a6bc73f320f3407f0f7796a2e926b21c3207181ebb90cbaff6d9c272ae61c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.flatbuffers/flatbuffers-java@1.12.0?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/google/flatbuffers"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.flatbuffers/flatbuffers-java@1.12.0?type=jar"
    },
    {
      "group" : "org.tensorflow",
      "name" : "tensorflow-lite-metadata",
      "version" : "0.1.0-rc2",
      "description" : "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "81dd4a19e1838d552b1da1a70b1db1de"
        },
        {
          "alg" : "SHA-1",
          "content" : "7aa9b3e16d85c2aae5eff741265315a37c9f731a"
        },
        {
          "alg" : "SHA-256",
          "content" : "2c2a264f842498c36d34d2a7b91342490d9a962862c85baac1acd54ec2fca6d9"
        },
        {
          "alg" : "SHA-512",
          "content" : "eb5ce0e80d98c1b60a52b699c7c7bc7c908852785e94e0f5aa54eaca751a7dd8eb1eefa330a14479c1ff13bb3cde2856c67afe8ff5572be0f4120e5cf1b884b8"
        },
        {
          "alg" : "SHA-384",
          "content" : "522e7f0619a1d6f79681addeac1a0d9df53db120c9420215632a6894e8c9aec78e877ebc975b555a238a03600b196b08"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5fdd11059314c53d83d1b328e29ab317dbd0b1a54ca6f8c0d6285c87156f1b744f40b35a9f53b300e2f3a56c742c4f29"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5d1c98185ca4260f46c58c3ac6fabe3ae13e860aa8d73108592e16d173ff3119"
        },
        {
          "alg" : "SHA3-512",
          "content" : "536417385574140e7808776280cafc5b0981e0c98d4734f7e59b0ff3d6a75f58047e09b7440ea0c055e5d910afc8788ea94cfff640ad33d76d8296fed2bec490"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.tensorflow/tensorflow-lite-metadata@0.1.0-rc2?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.sonatype.org/spice/tags/oss-parent-7"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.tensorflow/tensorflow-lite-metadata@0.1.0-rc2?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.eclipse.steady/root@3.2.5?type=pom",
      "dependsOn" : [
        "pkg:maven/javax.validation/validation-api@2.0.1.Final?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.18.0?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-core@2.18.0?type=jar",
        "pkg:maven/com.github.spotbugs/spotbugs-annotations@4.7.2?type=jar",
        "pkg:maven/org.eclipse.steady/shared@3.2.5?type=jar",
        "pkg:maven/org.eclipse.steady/lang@3.2.5?type=jar",
        "pkg:maven/org.eclipse.steady/lang-java@3.2.5?type=jar",
        "pkg:maven/org.eclipse.steady/lang-java-reach@3.2.5?type=jar",
        "pkg:maven/org.eclipse.steady/lang-java-reach-wala@3.2.5?type=jar",
        "pkg:maven/org.eclipse.steady/lang-java-reach-soot@3.2.5?type=jar",
        "pkg:maven/org.eclipse.steady/lang-python@3.2.5?type=jar",
        "pkg:maven/org.eclipse.steady/repo-client@3.2.5?type=jar",
        "pkg:maven/org.eclipse.steady/patch-analyzer@3.2.5?type=jar",
        "pkg:maven/org.eclipse.steady/patch-lib-analyzer@3.2.5?type=jar",
        "pkg:maven/org.eclipse.steady/kb-importer@3.2.5?type=jar",
        "pkg:maven/org.eclipse.steady/cli-scanner@3.2.5?type=jar",
        "pkg:maven/org.eclipse.steady/plugin-maven@3.2.5?type=maven-plugin",
        "pkg:maven/org.eclipse.steady/frontend-apps@3.2.5?type=war",
        "pkg:maven/org.eclipse.steady/frontend-bugs@3.2.5?type=war",
        "pkg:maven/org.eclipse.steady/plugin-gradle@3.2.5?type=pom"
      ]
    },
    {
      "ref" : "pkg:maven/javax.validation/validation-api@2.0.1.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.18.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.18.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.18.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.github.spotbugs/spotbugs-annotations@4.7.2?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.steady/shared@3.2.5?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.4?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.4?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.4?type=jar",
        "pkg:maven/commons-configuration/commons-configuration@1.10?type=jar",
        "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.4.1?type=jar",
        "pkg:maven/javax.validation/validation-api@2.0.1.Final?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.18.0?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-core@2.18.0?type=jar",
        "pkg:maven/com.github.spotbugs/spotbugs-annotations@4.7.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.4?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.4?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-configuration/commons-configuration@1.10?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-lang/commons-lang@2.6?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.1.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-lang/commons-lang@2.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-logging/commons-logging@1.1.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.github.package-url/packageurl-java@1.4.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.steady/lang@3.2.5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.steady/shared@3.2.5?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar",
        "pkg:maven/org.javassist/javassist@3.28.0-GA?type=jar",
        "pkg:maven/commons-cli/commons-cli@1.4?type=jar",
        "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
        "pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.21?type=jar",
        "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.9.0?type=jar",
        "pkg:maven/org.apache.velocity/velocity-engine-core@2.3?type=jar",
        "pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar",
        "pkg:maven/javax.validation/validation-api@2.0.1.Final?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.18.0?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-core@2.18.0?type=jar",
        "pkg:maven/com.github.spotbugs/spotbugs-annotations@4.7.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.13?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.11?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.13?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-codec/commons-codec@1.11?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.javassist/javassist@3.28.0-GA?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-cli/commons-cli@1.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
        "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-compress@1.21?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.antlr/antlr4-runtime@4.9.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.code.gson/gson@2.9.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.velocity/velocity-engine-core@2.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.commons/commons-lang3@3.11?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.30?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.11?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.30?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.steady/lang-java@3.2.5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.steady/lang@3.2.5?type=jar",
        "pkg:maven/org.bitbucket.mstrobel/procyon-compilertools@0.5.36?type=jar",
        "pkg:maven/ch.uzh.ifi.seal/changedistiller@0.0.4?type=jar",
        "pkg:maven/com.google.inject.extensions/guice-assistedinject@4.2.3?type=jar",
        "pkg:maven/org.eclipse.jdt.core.compiler/ecj@4.6.1?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
        "pkg:maven/commons-io/commons-io@2.11.0?type=jar",
        "pkg:maven/javax.validation/validation-api@2.0.1.Final?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.18.0?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-core@2.18.0?type=jar",
        "pkg:maven/com.github.spotbugs/spotbugs-annotations@4.7.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.bitbucket.mstrobel/procyon-compilertools@0.5.36?type=jar",
      "dependsOn" : [
        "pkg:maven/org.bitbucket.mstrobel/procyon-core@0.5.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.bitbucket.mstrobel/procyon-core@0.5.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/ch.uzh.ifi.seal/changedistiller@0.0.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.inject.extensions/guice-assistedinject@4.2.3?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.inject/guice@4.2.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.inject/guice@4.2.3?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/aopalliance/aopalliance@1.0?type=jar",
        "pkg:maven/com.google.guava/guava@27.1-jre?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/javax.inject/javax.inject@1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/guava@27.1-jre?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
        "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/org.checkerframework/checker-qual@2.5.2?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.2.0?type=jar",
        "pkg:maven/com.google.j2objc/j2objc-annotations@1.1?type=jar",
        "pkg:maven/org.codehaus.mojo/animal-sniffer-annotations@1.17?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.checkerframework/checker-qual@2.5.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.2.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@1.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.mojo/animal-sniffer-annotations@1.17?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jdt.core.compiler/ecj@4.6.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.steady/lang-java-reach@3.2.5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.steady/lang-java@3.2.5?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.9.0?type=jar",
        "pkg:maven/com.ibm.wala/com.ibm.wala.core@1.4.3?type=jar",
        "pkg:maven/com.ibm.wala/com.ibm.wala.util@1.4.3?type=jar",
        "pkg:maven/com.ibm.wala/com.ibm.wala.shrike@1.4.3?type=jar",
        "pkg:maven/javax.validation/validation-api@2.0.1.Final?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.18.0?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-core@2.18.0?type=jar",
        "pkg:maven/com.github.spotbugs/spotbugs-annotations@4.7.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.ibm.wala/com.ibm.wala.core@1.4.3?type=jar",
      "dependsOn" : [
        "pkg:maven/com.ibm.wala/com.ibm.wala.util@1.4.3?type=jar",
        "pkg:maven/com.ibm.wala/com.ibm.wala.shrike@1.4.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.ibm.wala/com.ibm.wala.util@1.4.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.ibm.wala/com.ibm.wala.shrike@1.4.3?type=jar",
      "dependsOn" : [
        "pkg:maven/com.ibm.wala/com.ibm.wala.util@1.4.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.steady/lang-java-reach-wala@3.2.5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.steady/lang-java-reach@3.2.5?type=jar",
        "pkg:maven/javax.validation/validation-api@2.0.1.Final?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.18.0?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-core@2.18.0?type=jar",
        "pkg:maven/com.github.spotbugs/spotbugs-annotations@4.7.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.steady/lang-java-reach-soot@3.2.5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.steady/lang-java-reach@3.2.5?type=jar",
        "pkg:maven/ca.mcgill.sable/soot@4.1.0?type=jar",
        "pkg:maven/de.fraunhofer.sit.sse.flowdroid/soot-infoflow@2.10.0?type=jar",
        "pkg:maven/com.google.guava/guava@30.1.1-jre?type=jar",
        "pkg:maven/javax.validation/validation-api@2.0.1.Final?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.18.0?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-core@2.18.0?type=jar",
        "pkg:maven/com.github.spotbugs/spotbugs-annotations@4.7.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/ca.mcgill.sable/soot@4.1.0?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-io/commons-io@2.11.0?type=jar",
        "pkg:maven/org.smali/dexlib2@2.3.4?type=jar",
        "pkg:maven/org.ow2.asm/asm@7.1?type=jar",
        "pkg:maven/org.ow2.asm/asm-tree@7.1?type=jar",
        "pkg:maven/org.ow2.asm/asm-util@7.1?type=jar",
        "pkg:maven/org.ow2.asm/asm-commons@7.1?type=jar",
        "pkg:maven/org.javassist/javassist@3.28.0-GA?type=jar",
        "pkg:maven/xmlpull/xmlpull@1.1.3.4d_b4_min?type=jar",
        "pkg:maven/de.upb.cs.swt/axml@2.0.0?type=jar",
        "pkg:maven/ca.mcgill.sable/polyglot@2006?type=jar",
        "pkg:maven/de.upb.cs.swt/heros@1.2.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.5?type=jar",
        "pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar",
        "pkg:maven/javax.xml.bind/jaxb-api@2.4.0-b180725.0427?type=jar",
        "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.4.0-b180830.0438?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.smali/dexlib2@2.3.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.ow2.asm/asm@7.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.ow2.asm/asm-tree@7.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.ow2.asm/asm@7.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.ow2.asm/asm-util@7.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.ow2.asm/asm@7.1?type=jar",
        "pkg:maven/org.ow2.asm/asm-tree@7.1?type=jar",
        "pkg:maven/org.ow2.asm/asm-analysis@7.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.ow2.asm/asm-analysis@7.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.ow2.asm/asm-tree@7.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.ow2.asm/asm-commons@7.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.ow2.asm/asm@7.1?type=jar",
        "pkg:maven/org.ow2.asm/asm-tree@7.1?type=jar",
        "pkg:maven/org.ow2.asm/asm-analysis@7.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/xmlpull/xmlpull@1.1.3.4d_b4_min?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/de.upb.cs.swt/axml@2.0.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/ca.mcgill.sable/polyglot@2006?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/de.upb.cs.swt/heros@1.2.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.functionaljava/functionaljava@4.2?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.5?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.functionaljava/functionaljava@4.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.5?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/javax.xml.bind/jaxb-api@2.4.0-b180725.0427?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.4.0-b180830.0438?type=jar",
      "dependsOn" : [
        "pkg:maven/org.glassfish.jaxb/txw2@2.4.0-b180830.0438?type=jar",
        "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.7?type=jar",
        "pkg:maven/org.jvnet.staxex/stax-ex@1.8?type=jar",
        "pkg:maven/com.sun.xml.fastinfoset/FastInfoset@1.2.15?type=jar",
        "pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.jaxb/txw2@2.4.0-b180830.0438?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.7?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.jvnet.staxex/stax-ex@1.8?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.sun.xml.fastinfoset/FastInfoset@1.2.15?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/de.fraunhofer.sit.sse.flowdroid/soot-infoflow@2.10.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.soot-oss/soot@4.3.0?type=jar",
        "pkg:maven/net.sf.trove4j/trove4j@3.0.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.soot-oss/soot@4.3.0?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-io/commons-io@2.11.0?type=jar",
        "pkg:maven/org.javassist/javassist@3.28.0-GA?type=jar",
        "pkg:maven/xmlpull/xmlpull@1.1.3.4d_b4_min?type=jar",
        "pkg:maven/ca.mcgill.sable/polyglot@2006?type=jar",
        "pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar",
        "pkg:maven/javax.xml.bind/jaxb-api@2.4.0-b180725.0427?type=jar",
        "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.4.0-b180830.0438?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.sf.trove4j/trove4j@3.0.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/guava@30.1.1-jre?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
        "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/org.checkerframework/checker-qual@3.8.0?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.5.1?type=jar",
        "pkg:maven/com.google.j2objc/j2objc-annotations@1.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.checkerframework/checker-qual@3.8.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.5.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@1.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.steady/lang-python@3.2.5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.steady/lang@3.2.5?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.21?type=jar",
        "pkg:maven/javax.validation/validation-api@2.0.1.Final?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.18.0?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-core@2.18.0?type=jar",
        "pkg:maven/com.github.spotbugs/spotbugs-annotations@4.7.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.steady/repo-client@3.2.5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.steady/shared@3.2.5?type=jar",
        "pkg:maven/org.tmatesoft.svnkit/svnkit@1.9.3?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@4.11.7.201903122105-r?type=jar",
        "pkg:maven/commons-configuration/commons-configuration@1.10?type=jar",
        "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
        "pkg:maven/commons-io/commons-io@2.11.0?type=jar",
        "pkg:maven/javax.validation/validation-api@2.0.1.Final?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.18.0?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-core@2.18.0?type=jar",
        "pkg:maven/com.github.spotbugs/spotbugs-annotations@4.7.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.tmatesoft.svnkit/svnkit@1.9.3?type=jar",
      "dependsOn" : [
        "pkg:maven/de.regnis.q.sequence/sequence-library@1.0.3?type=jar",
        "pkg:maven/org.tmatesoft.sqljet/sqljet@1.1.11?type=jar",
        "pkg:maven/net.java.dev.jna/jna@4.1.0?type=jar",
        "pkg:maven/net.java.dev.jna/jna-platform@4.1.0?type=jar",
        "pkg:maven/com.trilead/trilead-ssh2@1.0.0-build221?type=jar",
        "pkg:maven/com.jcraft/jsch.agentproxy.connector-factory@0.0.7?type=jar",
        "pkg:maven/com.jcraft/jsch.agentproxy.svnkit-trilead-ssh2@0.0.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/de.regnis.q.sequence/sequence-library@1.0.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.tmatesoft.sqljet/sqljet@1.1.11?type=jar",
      "dependsOn" : [
        "pkg:maven/org.antlr/antlr-runtime@3.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.antlr/antlr-runtime@3.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/net.java.dev.jna/jna@4.1.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/net.java.dev.jna/jna-platform@4.1.0?type=jar",
      "dependsOn" : [
        "pkg:maven/net.java.dev.jna/jna@4.1.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.trilead/trilead-ssh2@1.0.0-build221?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.jcraft/jsch.agentproxy.connector-factory@0.0.7?type=jar",
      "dependsOn" : [
        "pkg:maven/com.jcraft/jsch.agentproxy.core@0.0.7?type=jar",
        "pkg:maven/com.jcraft/jsch.agentproxy.usocket-jna@0.0.7?type=jar",
        "pkg:maven/com.jcraft/jsch.agentproxy.usocket-nc@0.0.7?type=jar",
        "pkg:maven/com.jcraft/jsch.agentproxy.sshagent@0.0.7?type=jar",
        "pkg:maven/com.jcraft/jsch.agentproxy.pageant@0.0.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.jcraft/jsch.agentproxy.core@0.0.7?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.jcraft/jsch.agentproxy.usocket-jna@0.0.7?type=jar",
      "dependsOn" : [
        "pkg:maven/com.jcraft/jsch.agentproxy.core@0.0.7?type=jar",
        "pkg:maven/net.java.dev.jna/platform@3.4.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.java.dev.jna/platform@3.4.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.jcraft/jsch.agentproxy.usocket-nc@0.0.7?type=jar",
      "dependsOn" : [
        "pkg:maven/com.jcraft/jsch.agentproxy.core@0.0.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.jcraft/jsch.agentproxy.sshagent@0.0.7?type=jar",
      "dependsOn" : [
        "pkg:maven/com.jcraft/jsch.agentproxy.core@0.0.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.jcraft/jsch.agentproxy.pageant@0.0.7?type=jar",
      "dependsOn" : [
        "pkg:maven/com.jcraft/jsch.agentproxy.core@0.0.7?type=jar",
        "pkg:maven/net.java.dev.jna/platform@3.4.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.jcraft/jsch.agentproxy.svnkit-trilead-ssh2@0.0.7?type=jar",
      "dependsOn" : [
        "pkg:maven/com.jcraft/jsch.agentproxy.core@0.0.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@4.11.7.201903122105-r?type=jar",
      "dependsOn" : [
        "pkg:maven/com.jcraft/jsch@0.1.54?type=jar",
        "pkg:maven/com.jcraft/jzlib@1.1.1?type=jar",
        "pkg:maven/com.googlecode.javaewah/JavaEWAH@1.1.6?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.jcraft/jsch@0.1.54?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.jcraft/jzlib@1.1.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.googlecode.javaewah/JavaEWAH@1.1.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.steady/patch-analyzer@3.2.5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.steady/lang@3.2.5?type=jar",
        "pkg:maven/org.eclipse.steady/repo-client@3.2.5?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.9.0?type=jar",
        "pkg:maven/org.eclipse.steady/lang-java@3.2.5?type=jar",
        "pkg:maven/org.eclipse.steady/lang-python@3.2.5?type=jar",
        "pkg:maven/javax.validation/validation-api@2.0.1.Final?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.18.0?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-core@2.18.0?type=jar",
        "pkg:maven/com.github.spotbugs/spotbugs-annotations@4.7.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.steady/patch-lib-analyzer@3.2.5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.steady/lang-java@3.2.5?type=jar",
        "pkg:maven/org.eclipse.steady/lang-python@3.2.5?type=jar",
        "pkg:maven/javax.validation/validation-api@2.0.1.Final?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.18.0?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-core@2.18.0?type=jar",
        "pkg:maven/com.github.spotbugs/spotbugs-annotations@4.7.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.steady/kb-importer@3.2.5?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-cli/commons-cli@1.4?type=jar",
        "pkg:maven/commons-io/commons-io@2.11.0?type=jar",
        "pkg:maven/org.eclipse.steady/lang@3.2.5?type=jar",
        "pkg:maven/org.eclipse.steady/lang-java@3.2.5?type=jar",
        "pkg:maven/org.eclipse.steady/lang-python@3.2.5?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.4.1?type=jar",
        "pkg:maven/com.jayway.jsonpath/json-path@2.7.0?type=jar",
        "pkg:maven/javax.validation/validation-api@2.0.1.Final?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.18.0?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-core@2.18.0?type=jar",
        "pkg:maven/com.github.spotbugs/spotbugs-annotations@4.7.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.jayway.jsonpath/json-path@2.7.0?type=jar",
      "dependsOn" : [
        "pkg:maven/net.minidev/json-smart@2.4.7?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.33?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.minidev/json-smart@2.4.7?type=jar",
      "dependsOn" : [
        "pkg:maven/net.minidev/accessors-smart@2.4.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.minidev/accessors-smart@2.4.7?type=jar",
      "dependsOn" : [
        "pkg:maven/org.ow2.asm/asm@9.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.ow2.asm/asm@9.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.33?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.steady/cli-scanner@3.2.5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.steady/lang@3.2.5?type=jar",
        "pkg:maven/org.eclipse.steady/lang-java-reach@3.2.5?type=jar",
        "pkg:maven/org.eclipse.steady/lang-java-reach-wala@3.2.5?type=jar",
        "pkg:maven/org.eclipse.steady/lang-java-reach-soot@3.2.5?type=jar",
        "pkg:maven/org.eclipse.steady/lang-python@3.2.5?type=jar",
        "pkg:maven/javax.validation/validation-api@2.0.1.Final?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.18.0?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-core@2.18.0?type=jar",
        "pkg:maven/com.github.spotbugs/spotbugs-annotations@4.7.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.steady/plugin-maven@3.2.5?type=maven-plugin",
      "dependsOn" : [
        "pkg:maven/org.eclipse.steady/lang@3.2.5?type=jar",
        "pkg:maven/org.eclipse.steady/lang-java-reach@3.2.5?type=jar",
        "pkg:maven/org.eclipse.steady/lang-java-reach-wala@3.2.5?type=jar",
        "pkg:maven/org.eclipse.steady/lang-java-reach-soot@3.2.5?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.9.0?type=jar",
        "pkg:maven/org.apache.maven/maven-core@3.8.4?type=jar",
        "pkg:maven/org.apache.maven/maven-plugin-api@3.8.4?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar",
        "pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.6.4?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@3.4.1?type=jar",
        "pkg:maven/org.apache.ant/ant@1.10.12?type=jar",
        "pkg:maven/javax.validation/validation-api@2.0.1.Final?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.18.0?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-core@2.18.0?type=jar",
        "pkg:maven/com.github.spotbugs/spotbugs-annotations@4.7.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.32?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-core@3.8.4?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-model@3.8.4?type=jar",
        "pkg:maven/org.apache.maven/maven-settings@3.8.4?type=jar",
        "pkg:maven/org.apache.maven/maven-settings-builder@3.8.4?type=jar",
        "pkg:maven/org.apache.maven/maven-builder-support@3.8.4?type=jar",
        "pkg:maven/org.apache.maven/maven-repository-metadata@3.8.4?type=jar",
        "pkg:maven/org.apache.maven/maven-artifact@3.8.4?type=jar",
        "pkg:maven/org.apache.maven/maven-plugin-api@3.8.4?type=jar",
        "pkg:maven/org.apache.maven/maven-model-builder@3.8.4?type=jar",
        "pkg:maven/org.apache.maven/maven-resolver-provider@3.8.4?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.6.3?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.6.3?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.6.3?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.6.3?type=jar",
        "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.3.4?type=jar",
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.5?type=jar",
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.5?type=jar",
        "pkg:maven/com.google.inject/guice@4.2.2?classifier=no_aop&type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.6.0?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.26?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.8.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.32?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-model@3.8.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-settings@3.8.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-settings-builder@3.8.4?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-builder-support@3.8.4?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.26?type=jar",
        "pkg:maven/org.apache.maven/maven-settings@3.8.4?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-builder-support@3.8.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.26?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@3.4.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-utils@3.4.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.inject/javax.inject@1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-repository-metadata@3.8.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-artifact@3.8.4?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.commons/commons-lang3@3.8.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.8.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-plugin-api@3.8.4?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-model@3.8.4?type=jar",
        "pkg:maven/org.apache.maven/maven-artifact@3.8.4?type=jar",
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.5?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.6.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-model-builder@3.8.4?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.26?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.apache.maven/maven-model@3.8.4?type=jar",
        "pkg:maven/org.apache.maven/maven-artifact@3.8.4?type=jar",
        "pkg:maven/org.apache.maven/maven-builder-support@3.8.4?type=jar",
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.5?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.5?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-resolver-provider@3.8.4?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-model@3.8.4?type=jar",
        "pkg:maven/org.apache.maven/maven-model-builder@3.8.4?type=jar",
        "pkg:maven/org.apache.maven/maven-repository-metadata@3.8.4?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.6.3?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.6.3?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.6.3?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.6.3?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.6.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.6.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.6.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.6.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.6.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.6.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.6.3?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.6.3?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.6.3?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.8.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.30?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.3.4?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-io/commons-io@2.11.0?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.6.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.5?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.inject/guice@4.2.2?classifier=no_aop&type=jar",
      "dependsOn" : [
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/aopalliance/aopalliance@1.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.6.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.ant/ant@1.10.12?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.ant/ant-launcher@1.10.12?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.ant/ant-launcher@1.10.12?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.steady/frontend-apps@3.2.5?type=war",
      "dependsOn" : [
        "pkg:maven/javax.validation/validation-api@2.0.1.Final?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.18.0?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-core@2.18.0?type=jar",
        "pkg:maven/com.github.spotbugs/spotbugs-annotations@4.7.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.steady/frontend-bugs@3.2.5?type=war",
      "dependsOn" : [
        "pkg:maven/javax.validation/validation-api@2.0.1.Final?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.18.0?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-core@2.18.0?type=jar",
        "pkg:maven/com.github.spotbugs/spotbugs-annotations@4.7.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.steady/rest-lib-utils@3.2.5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.steady/lang-java@3.2.5?type=jar",
        "pkg:maven/org.eclipse.steady/lang-python@3.2.5?type=jar",
        "pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar",
        "pkg:maven/org.springframework.boot/spring-boot-starter@2.5.12?type=jar",
        "pkg:maven/org.springframework.boot/spring-boot-starter-web@2.5.12?type=jar",
        "pkg:maven/org.springframework.boot/spring-boot-starter-data-rest@2.5.12?type=jar",
        "pkg:maven/org.springframework.boot/spring-boot-starter-actuator@2.5.12?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar",
        "pkg:maven/commons-io/commons-io@2.7?type=jar",
        "pkg:maven/org.springdoc/springdoc-openapi-ui@1.2.32?type=jar",
        "pkg:maven/com.jeantessier/dependency-finder@1.2.1-beta5-log4j?type=jar",
        "pkg:maven/oro/oro@2.0.8?type=jar",
        "pkg:maven/com.google.guava/guava@30.1.1-jre?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
        "pkg:maven/org.apache.ant/ant@1.10.12?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.21?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.12.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.12.6.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.12.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.17.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.17.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.17.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.code.gson/gson@2.8.9?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.springframework.boot/spring-boot-starter@2.5.12?type=jar",
      "dependsOn" : [
        "pkg:maven/org.springframework.boot/spring-boot@2.5.12?type=jar",
        "pkg:maven/org.springframework.boot/spring-boot-autoconfigure@2.5.12?type=jar",
        "pkg:maven/org.springframework.boot/spring-boot-starter-logging@2.5.12?type=jar",
        "pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar",
        "pkg:maven/org.springframework/spring-core@5.3.18?type=jar",
        "pkg:maven/org.yaml/snakeyaml@1.28?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.springframework.boot/spring-boot@2.5.12?type=jar",
      "dependsOn" : [
        "pkg:maven/org.springframework/spring-core@5.3.18?type=jar",
        "pkg:maven/org.springframework/spring-context@5.3.18?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.springframework/spring-core@5.3.18?type=jar",
      "dependsOn" : [
        "pkg:maven/org.springframework/spring-jcl@5.3.18?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.springframework/spring-context@5.3.18?type=jar",
      "dependsOn" : [
        "pkg:maven/org.springframework/spring-aop@5.3.18?type=jar",
        "pkg:maven/org.springframework/spring-beans@5.3.18?type=jar",
        "pkg:maven/org.springframework/spring-core@5.3.18?type=jar",
        "pkg:maven/org.springframework/spring-expression@5.3.18?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.springframework/spring-aop@5.3.18?type=jar",
      "dependsOn" : [
        "pkg:maven/org.springframework/spring-beans@5.3.18?type=jar",
        "pkg:maven/org.springframework/spring-core@5.3.18?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.springframework/spring-beans@5.3.18?type=jar",
      "dependsOn" : [
        "pkg:maven/org.springframework/spring-core@5.3.18?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.springframework/spring-expression@5.3.18?type=jar",
      "dependsOn" : [
        "pkg:maven/org.springframework/spring-core@5.3.18?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.springframework.boot/spring-boot-autoconfigure@2.5.12?type=jar",
      "dependsOn" : [
        "pkg:maven/org.springframework.boot/spring-boot@2.5.12?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.springframework.boot/spring-boot-starter-logging@2.5.12?type=jar",
      "dependsOn" : [
        "pkg:maven/ch.qos.logback/logback-classic@1.2.11?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-to-slf4j@2.17.2?type=jar",
        "pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/ch.qos.logback/logback-classic@1.2.11?type=jar",
      "dependsOn" : [
        "pkg:maven/ch.qos.logback/logback-core@1.2.11?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/ch.qos.logback/logback-core@1.2.11?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-to-slf4j@2.17.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.17.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.springframework/spring-jcl@5.3.18?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.yaml/snakeyaml@1.28?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.springframework.boot/spring-boot-starter-web@2.5.12?type=jar",
      "dependsOn" : [
        "pkg:maven/org.springframework.boot/spring-boot-starter@2.5.12?type=jar",
        "pkg:maven/org.springframework.boot/spring-boot-starter-json@2.5.12?type=jar",
        "pkg:maven/org.springframework.boot/spring-boot-starter-tomcat@2.5.12?type=jar",
        "pkg:maven/org.springframework/spring-web@5.3.18?type=jar",
        "pkg:maven/org.springframework/spring-webmvc@5.3.18?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.springframework.boot/spring-boot-starter-json@2.5.12?type=jar",
      "dependsOn" : [
        "pkg:maven/org.springframework.boot/spring-boot-starter@2.5.12?type=jar",
        "pkg:maven/org.springframework/spring-web@5.3.18?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.12.6.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.12.6?type=jar",
        "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.12.6?type=jar",
        "pkg:maven/com.fasterxml.jackson.module/jackson-module-parameter-names@2.12.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.springframework/spring-web@5.3.18?type=jar",
      "dependsOn" : [
        "pkg:maven/org.springframework/spring-beans@5.3.18?type=jar",
        "pkg:maven/org.springframework/spring-core@5.3.18?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.12.6?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.12.6?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.12.6.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.12.6?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.12.6?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.12.6?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.12.6.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.module/jackson-module-parameter-names@2.12.6?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.12.6?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.12.6.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.springframework.boot/spring-boot-starter-tomcat@2.5.12?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar",
        "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.60?type=jar",
        "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.60?type=jar",
        "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.60?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.60?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.60?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.60?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.60?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.springframework/spring-webmvc@5.3.18?type=jar",
      "dependsOn" : [
        "pkg:maven/org.springframework/spring-aop@5.3.18?type=jar",
        "pkg:maven/org.springframework/spring-beans@5.3.18?type=jar",
        "pkg:maven/org.springframework/spring-context@5.3.18?type=jar",
        "pkg:maven/org.springframework/spring-core@5.3.18?type=jar",
        "pkg:maven/org.springframework/spring-expression@5.3.18?type=jar",
        "pkg:maven/org.springframework/spring-web@5.3.18?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.springframework.boot/spring-boot-starter-data-rest@2.5.12?type=jar",
      "dependsOn" : [
        "pkg:maven/org.springframework.boot/spring-boot-starter-web@2.5.12?type=jar",
        "pkg:maven/org.springframework.data/spring-data-rest-webmvc@3.5.10?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.springframework.data/spring-data-rest-webmvc@3.5.10?type=jar",
      "dependsOn" : [
        "pkg:maven/org.springframework.data/spring-data-rest-core@3.5.10?type=jar",
        "pkg:maven/org.springframework/spring-webmvc@5.3.18?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.12.6.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.12.6?type=jar",
        "pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar",
        "pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.springframework.data/spring-data-rest-core@3.5.10?type=jar",
      "dependsOn" : [
        "pkg:maven/org.springframework/spring-tx@5.3.18?type=jar",
        "pkg:maven/org.springframework.hateoas/spring-hateoas@1.3.7?type=jar",
        "pkg:maven/org.springframework.data/spring-data-commons@2.5.10?type=jar",
        "pkg:maven/org.springframework.plugin/spring-plugin-core@2.0.0.RELEASE?type=jar",
        "pkg:maven/org.atteo/evo-inflector@1.2.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.12.6?type=jar",
        "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.12.6?type=jar",
        "pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar",
        "pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.springframework/spring-tx@5.3.18?type=jar",
      "dependsOn" : [
        "pkg:maven/org.springframework/spring-beans@5.3.18?type=jar",
        "pkg:maven/org.springframework/spring-core@5.3.18?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.springframework.hateoas/spring-hateoas@1.3.7?type=jar",
      "dependsOn" : [
        "pkg:maven/org.springframework/spring-aop@5.3.18?type=jar",
        "pkg:maven/org.springframework/spring-beans@5.3.18?type=jar",
        "pkg:maven/org.springframework/spring-context@5.3.18?type=jar",
        "pkg:maven/org.springframework/spring-core@5.3.18?type=jar",
        "pkg:maven/org.springframework/spring-web@5.3.18?type=jar",
        "pkg:maven/org.springframework.plugin/spring-plugin-core@2.0.0.RELEASE?type=jar",
        "pkg:maven/com.jayway.jsonpath/json-path@2.5.0?type=jar",
        "pkg:maven/net.minidev/json-smart@2.4.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.springframework.plugin/spring-plugin-core@2.0.0.RELEASE?type=jar",
      "dependsOn" : [
        "pkg:maven/org.springframework/spring-beans@5.3.18?type=jar",
        "pkg:maven/org.springframework/spring-context@5.3.18?type=jar",
        "pkg:maven/org.springframework/spring-aop@5.3.18?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.jayway.jsonpath/json-path@2.5.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/net.minidev/json-smart@2.4.8?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.springframework.data/spring-data-commons@2.5.10?type=jar",
      "dependsOn" : [
        "pkg:maven/org.springframework/spring-core@5.3.18?type=jar",
        "pkg:maven/org.springframework/spring-beans@5.3.18?type=jar",
        "pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.atteo/evo-inflector@1.2.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.springframework.boot/spring-boot-starter-actuator@2.5.12?type=jar",
      "dependsOn" : [
        "pkg:maven/org.springframework.boot/spring-boot-starter@2.5.12?type=jar",
        "pkg:maven/org.springframework.boot/spring-boot-actuator-autoconfigure@2.5.12?type=jar",
        "pkg:maven/io.micrometer/micrometer-core@1.7.10?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.springframework.boot/spring-boot-actuator-autoconfigure@2.5.12?type=jar",
      "dependsOn" : [
        "pkg:maven/org.springframework.boot/spring-boot-actuator@2.5.12?type=jar",
        "pkg:maven/org.springframework.boot/spring-boot@2.5.12?type=jar",
        "pkg:maven/org.springframework.boot/spring-boot-autoconfigure@2.5.12?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.12.6.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.12.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.springframework.boot/spring-boot-actuator@2.5.12?type=jar",
      "dependsOn" : [
        "pkg:maven/org.springframework.boot/spring-boot@2.5.12?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.micrometer/micrometer-core@1.7.10?type=jar",
      "dependsOn" : [
        "pkg:maven/org.hdrhistogram/HdrHistogram@2.1.12?type=jar",
        "pkg:maven/org.latencyutils/LatencyUtils@2.0.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.hdrhistogram/HdrHistogram@2.1.12?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.latencyutils/LatencyUtils@2.0.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.15?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-io/commons-io@2.7?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.springdoc/springdoc-openapi-ui@1.2.32?type=jar",
      "dependsOn" : [
        "pkg:maven/org.springdoc/springdoc-openapi-webmvc-core@1.2.32?type=jar",
        "pkg:maven/org.webjars/swagger-ui@3.25.0?type=jar",
        "pkg:maven/org.webjars/webjars-locator@0.38?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.springdoc/springdoc-openapi-webmvc-core@1.2.32?type=jar",
      "dependsOn" : [
        "pkg:maven/org.springdoc/springdoc-openapi-common@1.2.32?type=jar",
        "pkg:maven/org.springframework/spring-webmvc@5.3.18?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.springdoc/springdoc-openapi-common@1.2.32?type=jar",
      "dependsOn" : [
        "pkg:maven/org.springframework.boot/spring-boot-autoconfigure@2.5.12?type=jar",
        "pkg:maven/org.springframework/spring-web@5.3.18?type=jar",
        "pkg:maven/io.swagger.core.v3/swagger-models@2.1.1?type=jar",
        "pkg:maven/io.swagger.core.v3/swagger-annotations@2.1.1?type=jar",
        "pkg:maven/io.swagger.core.v3/swagger-integration@2.1.1?type=jar",
        "pkg:maven/io.github.classgraph/classgraph@4.8.44?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.swagger.core.v3/swagger-models@2.1.1?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.12.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.swagger.core.v3/swagger-annotations@2.1.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.swagger.core.v3/swagger-integration@2.1.1?type=jar",
      "dependsOn" : [
        "pkg:maven/io.swagger.core.v3/swagger-core@2.1.1?type=jar",
        "pkg:maven/io.swagger.core.v3/swagger-models@2.1.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.swagger.core.v3/swagger-core@2.1.1?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.12.6?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.12.6.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.12.6?type=jar",
        "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.12.6?type=jar",
        "pkg:maven/io.swagger.core.v3/swagger-annotations@2.1.1?type=jar",
        "pkg:maven/io.swagger.core.v3/swagger-models@2.1.1?type=jar",
        "pkg:maven/ch.qos.logback/logback-classic@1.2.11?type=jar",
        "pkg:maven/ch.qos.logback/logback-core@1.2.11?type=jar",
        "pkg:maven/javax.validation/validation-api@2.0.1.Final?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.12.6?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.12.6.1?type=jar",
        "pkg:maven/org.yaml/snakeyaml@1.28?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.12.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.github.classgraph/classgraph@4.8.44?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.webjars/swagger-ui@3.25.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.webjars/webjars-locator@0.38?type=jar",
      "dependsOn" : [
        "pkg:maven/org.webjars/webjars-locator-core@0.46?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.12.6.1?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.webjars/webjars-locator-core@0.46?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.12.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.jeantessier/dependency-finder@1.2.1-beta5-log4j?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/oro/oro@2.0.8?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.21?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.steady/rest-backend@3.2.5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.steady/shared@3.2.5?type=jar",
        "pkg:maven/org.springframework.boot/spring-boot-starter@2.5.12?type=jar",
        "pkg:maven/org.springframework.boot/spring-boot-starter-web@2.5.12?type=jar",
        "pkg:maven/org.springframework.boot/spring-boot-starter-data-rest@2.5.12?type=jar",
        "pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@2.5.12?type=jar",
        "pkg:maven/org.springframework.boot/spring-boot-starter-actuator@2.5.12?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.21?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar",
        "pkg:maven/com.jayway.jsonpath/json-path@2.7.0?type=jar",
        "pkg:maven/org.springdoc/springdoc-openapi-ui@1.2.32?type=jar",
        "pkg:maven/com.sun.mail/javax.mail@1.6.2?type=jar",
        "pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar",
        "pkg:maven/com.google.guava/guava@30.0-jre?type=jar",
        "pkg:maven/org.flywaydb/flyway-core@6.5.7?type=jar",
        "pkg:maven/javax.interceptor/javax.interceptor-api@1.2.2?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.21?type=jar",
        "pkg:maven/org.postgresql/postgresql@42.4.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@2.5.12?type=jar",
      "dependsOn" : [
        "pkg:maven/org.springframework.boot/spring-boot-starter-aop@2.5.12?type=jar",
        "pkg:maven/org.springframework.boot/spring-boot-starter-jdbc@2.5.12?type=jar",
        "pkg:maven/jakarta.transaction/jakarta.transaction-api@1.3.3?type=jar",
        "pkg:maven/jakarta.persistence/jakarta.persistence-api@2.2.3?type=jar",
        "pkg:maven/org.hibernate/hibernate-core@5.4.33?type=jar",
        "pkg:maven/org.springframework.data/spring-data-jpa@2.5.10?type=jar",
        "pkg:maven/org.springframework/spring-aspects@5.3.18?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.springframework.boot/spring-boot-starter-aop@2.5.12?type=jar",
      "dependsOn" : [
        "pkg:maven/org.springframework.boot/spring-boot-starter@2.5.12?type=jar",
        "pkg:maven/org.springframework/spring-aop@5.3.18?type=jar",
        "pkg:maven/org.aspectj/aspectjweaver@1.9.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.aspectj/aspectjweaver@1.9.7?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.springframework.boot/spring-boot-starter-jdbc@2.5.12?type=jar",
      "dependsOn" : [
        "pkg:maven/org.springframework.boot/spring-boot-starter@2.5.12?type=jar",
        "pkg:maven/com.zaxxer/HikariCP@4.0.3?type=jar",
        "pkg:maven/org.springframework/spring-jdbc@5.3.18?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.zaxxer/HikariCP@4.0.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.springframework/spring-jdbc@5.3.18?type=jar",
      "dependsOn" : [
        "pkg:maven/org.springframework/spring-beans@5.3.18?type=jar",
        "pkg:maven/org.springframework/spring-core@5.3.18?type=jar",
        "pkg:maven/org.springframework/spring-tx@5.3.18?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/jakarta.transaction/jakarta.transaction-api@1.3.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/jakarta.persistence/jakarta.persistence-api@2.2.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.hibernate/hibernate-core@5.4.33?type=jar",
      "dependsOn" : [
        "pkg:maven/org.jboss.logging/jboss-logging@3.4.3.Final?type=jar",
        "pkg:maven/org.javassist/javassist@3.27.0-GA?type=jar",
        "pkg:maven/net.bytebuddy/byte-buddy@1.10.22?type=jar",
        "pkg:maven/antlr/antlr@2.7.7?type=jar",
        "pkg:maven/org.jboss/jandex@2.2.3.Final?type=jar",
        "pkg:maven/com.fasterxml/classmate@1.5.1?type=jar",
        "pkg:maven/org.dom4j/dom4j@2.1.3?type=jar",
        "pkg:maven/org.hibernate.common/hibernate-commons-annotations@5.1.2.Final?type=jar",
        "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.jboss.logging/jboss-logging@3.4.3.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.javassist/javassist@3.27.0-GA?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/net.bytebuddy/byte-buddy@1.10.22?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/antlr/antlr@2.7.7?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.jboss/jandex@2.2.3.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml/classmate@1.5.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.dom4j/dom4j@2.1.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.hibernate.common/hibernate-commons-annotations@5.1.2.Final?type=jar",
      "dependsOn" : [
        "pkg:maven/org.jboss.logging/jboss-logging@3.4.3.Final?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.6?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar",
        "pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar",
        "pkg:maven/org.glassfish.jaxb/txw2@2.3.6?type=jar",
        "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar",
        "pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.jaxb/txw2@2.3.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.springframework.data/spring-data-jpa@2.5.10?type=jar",
      "dependsOn" : [
        "pkg:maven/org.springframework.data/spring-data-commons@2.5.10?type=jar",
        "pkg:maven/org.springframework/spring-orm@5.3.18?type=jar",
        "pkg:maven/org.springframework/spring-context@5.3.18?type=jar",
        "pkg:maven/org.springframework/spring-aop@5.3.18?type=jar",
        "pkg:maven/org.springframework/spring-tx@5.3.18?type=jar",
        "pkg:maven/org.springframework/spring-beans@5.3.18?type=jar",
        "pkg:maven/org.springframework/spring-core@5.3.18?type=jar",
        "pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.springframework/spring-orm@5.3.18?type=jar",
      "dependsOn" : [
        "pkg:maven/org.springframework/spring-beans@5.3.18?type=jar",
        "pkg:maven/org.springframework/spring-core@5.3.18?type=jar",
        "pkg:maven/org.springframework/spring-jdbc@5.3.18?type=jar",
        "pkg:maven/org.springframework/spring-tx@5.3.18?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.springframework/spring-aspects@5.3.18?type=jar",
      "dependsOn" : [
        "pkg:maven/org.aspectj/aspectjweaver@1.9.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.minidev/accessors-smart@2.4.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.ow2.asm/asm@9.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.sun.mail/javax.mail@1.6.2?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.activation/activation@1.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/javax.activation/activation@1.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/guava@30.0-jre?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
        "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/org.checkerframework/checker-qual@3.5.0?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.3.4?type=jar",
        "pkg:maven/com.google.j2objc/j2objc-annotations@1.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.checkerframework/checker-qual@3.5.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.3.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.flywaydb/flyway-core@6.5.7?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/javax.interceptor/javax.interceptor-api@1.2.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.postgresql/postgresql@42.4.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.checkerframework/checker-qual@3.5.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.steady/plugin-gradle@3.2.5?type=pom",
      "dependsOn" : [
        "pkg:maven/org.eclipse.steady/lang@3.2.5?type=jar",
        "pkg:maven/org.eclipse.steady/lang-java-reach@3.2.5?type=jar",
        "pkg:maven/org.eclipse.steady/lang-java-reach-wala@3.2.5?type=jar",
        "pkg:maven/org.eclipse.steady/lang-java-reach-soot@3.2.5?type=jar",
        "pkg:maven/com.android.tools.build/gradle@4.2.1?type=jar",
        "pkg:maven/javax.validation/validation-api@2.0.1.Final?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.18.0?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-core@2.18.0?type=jar",
        "pkg:maven/com.github.spotbugs/spotbugs-annotations@4.7.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.android.tools.build/gradle@4.2.1?type=jar",
      "dependsOn" : [
        "pkg:maven/com.android.tools.build/builder@4.2.1?type=jar",
        "pkg:maven/com.android.tools.build/aapt2-proto@4.2.1-7147631?type=jar",
        "pkg:maven/com.android.tools.build/aaptcompiler@4.2.1?type=jar",
        "pkg:maven/com.android.tools.analytics-library/crash@27.2.1?type=jar",
        "pkg:maven/com.android.tools.lint/lint-gradle-api@27.2.1?type=jar",
        "pkg:maven/com.android.tools.build/gradle-api@4.2.1?type=jar",
        "pkg:maven/androidx.databinding/databinding-compiler-common@4.2.1?type=jar",
        "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.4.31?type=jar",
        "pkg:maven/com.android.tools.build/transform-api@2.0.0-deprecated-use-gradle-api?type=jar",
        "pkg:maven/org.ow2.asm/asm@7.0?type=jar",
        "pkg:maven/org.ow2.asm/asm-analysis@7.0?type=jar",
        "pkg:maven/org.ow2.asm/asm-commons@7.0?type=jar",
        "pkg:maven/org.ow2.asm/asm-util@7.0?type=jar",
        "pkg:maven/net.sf.jopt-simple/jopt-simple@4.9?type=jar",
        "pkg:maven/net.sf.proguard/proguard-gradle@6.0.3?type=jar",
        "pkg:maven/com.android.tools.build/bundletool@1.1.0?type=jar",
        "pkg:maven/com.android.tools.build.jetifier/jetifier-core@1.0.0-beta09?type=jar",
        "pkg:maven/com.android.tools.build.jetifier/jetifier-processor@1.0.0-beta09?type=jar",
        "pkg:maven/com.squareup/javapoet@1.10.0?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@3.10.0?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@3.10.0?type=jar",
        "pkg:maven/com.google.crypto.tink/tink@1.3.0-rc2?type=jar",
        "pkg:maven/com.google.testing.platform/core-proto@0.0.8-alpha01?type=jar",
        "pkg:maven/com.google.flatbuffers/flatbuffers-java@1.12.0?type=jar",
        "pkg:maven/org.tensorflow/tensorflow-lite-metadata@0.1.0-rc2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.android.tools.build/builder@4.2.1?type=jar",
      "dependsOn" : [
        "pkg:maven/com.android.tools.build/builder-model@4.2.1?type=jar",
        "pkg:maven/com.android.tools.build/builder-test-api@4.2.1?type=jar",
        "pkg:maven/com.android.tools/sdklib@27.2.1?type=jar",
        "pkg:maven/com.android.tools/sdk-common@27.2.1?type=jar",
        "pkg:maven/com.android.tools/common@27.2.1?type=jar",
        "pkg:maven/com.android.tools.build/manifest-merger@27.2.1?type=jar",
        "pkg:maven/com.android.tools.ddms/ddmlib@27.2.1?type=jar",
        "pkg:maven/com.android/zipflinger@4.2.1?type=jar",
        "pkg:maven/com.android/signflinger@4.2.1?type=jar",
        "pkg:maven/com.android.tools.analytics-library/protos@27.2.1?type=jar",
        "pkg:maven/com.android.tools.analytics-library/tracker@27.2.1?type=jar",
        "pkg:maven/com.android.tools.build/apksig@4.2.1?type=jar",
        "pkg:maven/com.android.tools.build/apkzlib@4.2.1?type=jar",
        "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.4.31?type=jar",
        "pkg:maven/com.squareup/javawriter@2.5.0?type=jar",
        "pkg:maven/org.bouncycastle/bcpkix-jdk15on@1.56?type=jar",
        "pkg:maven/org.bouncycastle/bcprov-jdk15on@1.56?type=jar",
        "pkg:maven/org.ow2.asm/asm@7.0?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.ow2.asm/asm-commons@7.0?type=jar",
        "pkg:maven/org.ow2.asm/asm-util@7.0?type=jar",
        "pkg:maven/it.unimi.dsi/fastutil@8.4.0?type=jar",
        "pkg:maven/net.sf.jopt-simple/jopt-simple@4.9?type=jar",
        "pkg:maven/com.googlecode.json-simple/json-simple@1.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.android.tools.build/builder-model@4.2.1?type=jar",
      "dependsOn" : [
        "pkg:maven/com.android.tools/annotations@27.2.1?type=jar",
        "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.4.31?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.android.tools/annotations@27.2.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.4.31?type=jar",
      "dependsOn" : [
        "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@1.4.31?type=jar",
        "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk7@1.4.31?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.android.tools.build/builder-test-api@4.2.1?type=jar",
      "dependsOn" : [
        "pkg:maven/com.android.tools.ddms/ddmlib@27.2.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.android.tools.ddms/ddmlib@27.2.1?type=jar",
      "dependsOn" : [
        "pkg:maven/com.android.tools/common@27.2.1?type=jar",
        "pkg:maven/net.sf.kxml/kxml2@2.3.0?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@3.10.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.android.tools/sdklib@27.2.1?type=jar",
      "dependsOn" : [
        "pkg:maven/com.android.tools.layoutlib/layoutlib-api@27.2.1?type=jar",
        "pkg:maven/com.android.tools/dvlib@27.2.1?type=jar",
        "pkg:maven/com.android.tools/repository@27.2.1?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.9.0?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.21?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpmime@4.5.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.android.tools.layoutlib/layoutlib-api@27.2.1?type=jar",
      "dependsOn" : [
        "pkg:maven/com.android.tools/common@27.2.1?type=jar",
        "pkg:maven/net.sf.kxml/kxml2@2.3.0?type=jar",
        "pkg:maven/com.android.tools/annotations@27.2.1?type=jar",
        "pkg:maven/org.jetbrains/annotations@13.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.android.tools/dvlib@27.2.1?type=jar",
      "dependsOn" : [
        "pkg:maven/com.android.tools/common@27.2.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.android.tools/common@27.2.1?type=jar",
      "dependsOn" : [
        "pkg:maven/com.android.tools/annotations@27.2.1?type=jar",
        "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.4.31?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.android.tools/repository@27.2.1?type=jar",
      "dependsOn" : [
        "pkg:maven/com.android.tools/common@27.2.1?type=jar",
        "pkg:maven/com.sun.activation/javax.activation@1.2.0?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.21?type=jar",
        "pkg:maven/com.google.jimfs/jimfs@1.1?type=jar",
        "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.4.31?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.sun.activation/javax.activation@1.2.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.jimfs/jimfs@1.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents/httpmime@4.5.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.android.tools/sdk-common@27.2.1?type=jar",
      "dependsOn" : [
        "pkg:maven/com.android.tools/sdklib@27.2.1?type=jar",
        "pkg:maven/com.android.tools.build/builder-test-api@4.2.1?type=jar",
        "pkg:maven/com.android.tools.build/builder-model@4.2.1?type=jar",
        "pkg:maven/com.android.tools.ddms/ddmlib@27.2.1?type=jar",
        "pkg:maven/com.android.tools.analytics-library/shared@27.2.1?type=jar",
        "pkg:maven/org.bouncycastle/bcpkix-jdk15on@1.56?type=jar",
        "pkg:maven/org.bouncycastle/bcprov-jdk15on@1.56?type=jar",
        "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.4.31?type=jar",
        "pkg:maven/org.jetbrains.kotlin/kotlin-reflect@1.4.31?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@3.10.0?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.jetbrains.intellij.deps/trove4j@1.0.20181211?type=jar",
        "pkg:maven/xerces/xercesImpl@2.12.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.android.tools.analytics-library/shared@27.2.1?type=jar",
      "dependsOn" : [
        "pkg:maven/com.android.tools.analytics-library/protos@27.2.1?type=jar",
        "pkg:maven/com.android.tools/annotations@27.2.1?type=jar",
        "pkg:maven/com.android.tools/common@27.2.1?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.9.0?type=jar",
        "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.4.31?type=jar",
        "pkg:maven/net.java.dev.jna/jna-platform@5.6.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.android.tools.analytics-library/protos@27.2.1?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.protobuf/protobuf-java@3.10.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.java.dev.jna/jna-platform@5.6.0?type=jar",
      "dependsOn" : [
        "pkg:maven/net.java.dev.jna/jna@5.6.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.java.dev.jna/jna@5.6.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.bouncycastle/bcpkix-jdk15on@1.56?type=jar",
      "dependsOn" : [
        "pkg:maven/org.bouncycastle/bcprov-jdk15on@1.56?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.bouncycastle/bcprov-jdk15on@1.56?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.jetbrains.kotlin/kotlin-reflect@1.4.31?type=jar",
      "dependsOn" : [
        "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@1.4.31?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.protobuf/protobuf-java@3.10.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.jetbrains.intellij.deps/trove4j@1.0.20181211?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/xerces/xercesImpl@2.12.0?type=jar",
      "dependsOn" : [
        "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.android.tools.build/manifest-merger@27.2.1?type=jar",
      "dependsOn" : [
        "pkg:maven/com.android.tools/common@27.2.1?type=jar",
        "pkg:maven/com.android.tools/sdklib@27.2.1?type=jar",
        "pkg:maven/com.android.tools/sdk-common@27.2.1?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.9.0?type=jar",
        "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.4.31?type=jar",
        "pkg:maven/net.sf.kxml/kxml2@2.3.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.sf.kxml/kxml2@2.3.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.android/zipflinger@4.2.1?type=jar",
      "dependsOn" : [
        "pkg:maven/com.android.tools/annotations@27.2.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.android/signflinger@4.2.1?type=jar",
      "dependsOn" : [
        "pkg:maven/com.android.tools.build/apksig@4.2.1?type=jar",
        "pkg:maven/com.android/zipflinger@4.2.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.android.tools.build/apksig@4.2.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.android.tools.analytics-library/tracker@27.2.1?type=jar",
      "dependsOn" : [
        "pkg:maven/com.android.tools/annotations@27.2.1?type=jar",
        "pkg:maven/com.android.tools/common@27.2.1?type=jar",
        "pkg:maven/com.android.tools.analytics-library/protos@27.2.1?type=jar",
        "pkg:maven/com.android.tools.analytics-library/shared@27.2.1?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@3.10.0?type=jar",
        "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.4.31?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.android.tools.build/apkzlib@4.2.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.bouncycastle/bcpkix-jdk15on@1.56?type=jar",
        "pkg:maven/org.bouncycastle/bcprov-jdk15on@1.56?type=jar",
        "pkg:maven/com.android.tools.build/apksig@4.2.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.squareup/javawriter@2.5.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.ow2.asm/asm@7.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.ow2.asm/asm-commons@7.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.ow2.asm/asm@7.0?type=jar",
        "pkg:maven/org.ow2.asm/asm-analysis@7.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.ow2.asm/asm-util@7.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.ow2.asm/asm@7.0?type=jar",
        "pkg:maven/org.ow2.asm/asm-analysis@7.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/it.unimi.dsi/fastutil@8.4.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/net.sf.jopt-simple/jopt-simple@4.9?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.googlecode.json-simple/json-simple@1.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.android.tools.build/aapt2-proto@4.2.1-7147631?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.protobuf/protobuf-java@3.10.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.android.tools.build/aaptcompiler@4.2.1?type=jar",
      "dependsOn" : [
        "pkg:maven/com.android.tools.build/aapt2-proto@4.2.1-7147631?type=jar",
        "pkg:maven/com.android.tools.layoutlib/layoutlib-api@27.2.1?type=jar",
        "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.4.31?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.jetbrains/annotations@13.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.android.tools.analytics-library/crash@27.2.1?type=jar",
      "dependsOn" : [
        "pkg:maven/com.android.tools/annotations@27.2.1?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpmime@4.5.6?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.android.tools.lint/lint-gradle-api@27.2.1?type=jar",
      "dependsOn" : [
        "pkg:maven/com.android.tools/sdklib@27.2.1?type=jar",
        "pkg:maven/com.android.tools.lint/lint-model@27.2.1?type=jar",
        "pkg:maven/com.android.tools.build/gradle-api@4.2.1?type=jar",
        "pkg:maven/org.jetbrains.kotlin/kotlin-reflect@1.4.31?type=jar",
        "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.4.31?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.android.tools.lint/lint-model@27.2.1?type=jar",
      "dependsOn" : [
        "pkg:maven/com.android.tools/common@27.2.1?type=jar",
        "pkg:maven/com.android.tools/sdk-common@27.2.1?type=jar",
        "pkg:maven/com.android.tools.build/builder-model@4.2.1?type=jar",
        "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.4.31?type=jar",
        "pkg:maven/net.sf.kxml/kxml2@2.3.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.android.tools.build/gradle-api@4.2.1?type=jar",
      "dependsOn" : [
        "pkg:maven/com.android.tools.build/builder-test-api@4.2.1?type=jar",
        "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.4.31?type=jar",
        "pkg:maven/org.ow2.asm/asm@7.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@1.4.31?type=jar",
      "dependsOn" : [
        "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-common@1.4.31?type=jar",
        "pkg:maven/org.jetbrains/annotations@13.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/androidx.databinding/databinding-compiler-common@4.2.1?type=jar",
      "dependsOn" : [
        "pkg:maven/androidx.databinding/databinding-common@4.2.1?type=jar",
        "pkg:maven/com.android.databinding/baseLibrary@4.2.1?type=jar",
        "pkg:maven/commons-io/commons-io@2.11.0?type=jar",
        "pkg:maven/com.googlecode.juniversalchardet/juniversalchardet@1.0.3?type=jar",
        "pkg:maven/com.squareup/javapoet@1.10.0?type=jar",
        "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.4.31?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.9.0?type=jar",
        "pkg:maven/com.android.tools/annotations@27.2.1?type=jar",
        "pkg:maven/com.android.tools.build.jetifier/jetifier-core@1.0.0-beta09?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/androidx.databinding/databinding-common@4.2.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.android.databinding/baseLibrary@4.2.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.googlecode.juniversalchardet/juniversalchardet@1.0.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.squareup/javapoet@1.10.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.android.tools.build.jetifier/jetifier-core@1.0.0-beta09?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.code.gson/gson@2.9.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-common@1.4.31?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk7@1.4.31?type=jar",
      "dependsOn" : [
        "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@1.4.31?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.android.tools.build/transform-api@2.0.0-deprecated-use-gradle-api?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.ow2.asm/asm-analysis@7.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/net.sf.proguard/proguard-gradle@6.0.3?type=jar",
      "dependsOn" : [
        "pkg:maven/net.sf.proguard/proguard-base@6.0.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.sf.proguard/proguard-base@6.0.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.android.tools.build/bundletool@1.1.0?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.auto.value/auto-value-annotations@1.6.2?type=jar",
        "pkg:maven/com.google.dagger/dagger@2.28.3?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.auto.value/auto-value-annotations@1.6.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.dagger/dagger@2.28.3?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.inject/javax.inject@1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.android.tools.build.jetifier/jetifier-processor@1.0.0-beta09?type=jar",
      "dependsOn" : [
        "pkg:maven/com.android.tools.build.jetifier/jetifier-core@1.0.0-beta09?type=jar",
        "pkg:maven/org.jdom/jdom2@2.0.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.jdom/jdom2@2.0.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.protobuf/protobuf-java-util@3.10.0?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.protobuf/protobuf-java@3.10.0?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.9.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.crypto.tink/tink@1.3.0-rc2?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.protobuf/protobuf-java@3.10.0?type=jar",
        "pkg:maven/org.json/json@20180813?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.json/json@20180813?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.testing.platform/core-proto@0.0.8-alpha01?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.flatbuffers/flatbuffers-java@1.12.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.tensorflow/tensorflow-lite-metadata@0.1.0-rc2?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.flatbuffers/flatbuffers-java@1.12.0?type=jar"
      ]
    }
  ]
}