{
  "bomFormat": "CycloneDX",
  "specVersion": "1.4",
  "serialNumber": "urn:uuid:37e2e7e6-5463-4f83-8dd1-e611e38b4580",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "vendor": "OWASP Foundation",
        "name": "CycloneDX Maven plugin",
        "version": "2.7.1",
        "hashes": [
          {
            "alg": "MD5",
            "content": "538c878ebf89b372876e247d056a3fc5"
          },
          {
            "alg": "SHA-1",
            "content": "4561e50edb47e12a03712b1afce9b20cba32fd28"
          },
          {
            "alg": "SHA-256",
            "content": "f0ea7b3bcf5c7ba649b8d9807e805385330501881677d47333aebce8305ef4d4"
          },
          {
            "alg": "SHA-512",
            "content": "a35400ca6411692ae8964fe7030eaba2a83a2fa50e2883def3054191283c3b48e2dcdd68bf80f5a0ede3898cc6b7cb7b998aacd2c1e969320053c43b6ab8d873"
          },
          {
            "alg": "SHA-384",
            "content": "75c0c03a03c69e82ad1f7b942d6d733da8261c4058174355d6b24ebd88cee34180f2e8484d2b0fedaf459078bdf6e927"
          },
          {
            "alg": "SHA3-384",
            "content": "98cd312d4dfc104a0a66d65023d0aade423f08951f2a9e0215e703f0c81c4f274d8e11a2db1abc30a558b820d65860c4"
          },
          {
            "alg": "SHA3-256",
            "content": "0c5fd65013128de457b049a824c4ad11212d668b503613ce19a54d545e5cf82d"
          },
          {
            "alg": "SHA3-512",
            "content": "72ea0ed8faa3cc4493db96d0223094842e7153890b091ff364040ad3ad89363157fc9d1bd852262124aec83134f0c19aa4fd0fa482031d38a76d74dfd36b7964"
          }
        ]
      }
    ],
    "component": {
      "type": "application",
      "bom-ref": "pkg:maven/org.dependencytrack/dependency-track@4.7.1?type=war",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "dependency-track",
      "version": "4.7.1",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/dependency-track@4.7.1?type=war",
      "externalReferences": [
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git",
          "type": "vcs"
        }
      ]
    }
  },
  "components": [
    {
      "type": "library",
      "bom-ref": "pkg:maven/us.springett/alpine-common@2.2.0?type=jar",
      "group": "us.springett",
      "name": "alpine-common",
      "version": "2.2.0",
      "description": "An opinionated scaffolding library that jumpstarts Java projects with an API-first design, secure defaults, and minimal dependencies.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d238e008f8a08ae8978894dde0b27c7f"
        },
        {
          "alg": "SHA-1",
          "content": "5609ef5f54afd6dc78b29f9366fdff5e68285e32"
        },
        {
          "alg": "SHA-256",
          "content": "02412092e70a156962743a34ceca05ffc2b9180787a0c4a82e93517a35a2a099"
        },
        {
          "alg": "SHA-512",
          "content": "9fad6d52c33f7d24554cf3ce019d2f71df9a01d95d2ab93bf858cad45e5a96ab35e56d20ce78da30e213406f61f78dca2a2fa61b8c8320161353f5263f9d14a4"
        },
        {
          "alg": "SHA-384",
          "content": "2252088673e83049779e1194b3749b5c11981ae42c527f6fb7630a6e7133f2cc92ff51cdfe862bc07d8eec307d73d401"
        },
        {
          "alg": "SHA3-384",
          "content": "20b7169c355ef0fcc3392520081e6b9f2ad05df27be9262fdba76826b196b514cd16e6d483c52f1d72065e0c612fce0e"
        },
        {
          "alg": "SHA3-256",
          "content": "2c02617959d0e1bbd78b0c5ce29902f6e5efbdb2a3986d0e7ba0be9716bda56e"
        },
        {
          "alg": "SHA3-512",
          "content": "bf934c4d06fba5e1fa57f35a17bd26ed8ce16498e05223cd0dd11f5974d73715194487a28c7b98b71d6beebc9f69ba9044fa0155ea62758cf607a21322cef200"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/us.springett/alpine-common@2.2.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/Alpine/actions",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/stevespringett/Alpine/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/stevespringett/Alpine.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "publisher": "QOS.ch",
      "group": "org.slf4j",
      "name": "slf4j-api",
      "version": "1.7.36",
      "description": "The slf4j API",
      "hashes": [
        {
          "alg": "MD5",
          "content": "872da51f5de7f3923da4de871d57fd85"
        },
        {
          "alg": "SHA-1",
          "content": "6c62681a2f655b49963a5983b8b0950a6120ae14"
        },
        {
          "alg": "SHA-256",
          "content": "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0"
        },
        {
          "alg": "SHA-512",
          "content": "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b"
        },
        {
          "alg": "SHA-384",
          "content": "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a"
        },
        {
          "alg": "SHA3-384",
          "content": "3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b"
        },
        {
          "alg": "SHA3-256",
          "content": "ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881"
        },
        {
          "alg": "SHA3-512",
          "content": "14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "externalReferences": [
        {
          "url": "http://www.qos.ch",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/qos-ch/slf4j",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.commons",
      "name": "commons-lang3",
      "version": "3.12.0",
      "description": "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang\u0027s hierarchy, or are considered to be so standard as to justify existence in java.lang.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "19fe50567358922bdad277959ea69545"
        },
        {
          "alg": "SHA-1",
          "content": "c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e"
        },
        {
          "alg": "SHA-256",
          "content": "d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e"
        },
        {
          "alg": "SHA-512",
          "content": "fbdbc0943cb3498b0148e86a39b773f97c8e6013740f72dbc727faeabea402073e2cc8c4d68198e5fc6b08a13b7700236292e99d4785f2c9989f2e5fac11fd81"
        },
        {
          "alg": "SHA-384",
          "content": "c34b8a0e0eba2168ad56fedeb7a1d710b6f1d3f1ce6aae99a4e0247bd120efbbadc8dcb2f731045b8a16e3efd30604dc"
        },
        {
          "alg": "SHA3-384",
          "content": "8ad6ebe7754bf0caa8cda7e59c0e95360d76e06a7ad6aeec5637985519dbd1dd06e7eed04711039f36ec4c49de280def"
        },
        {
          "alg": "SHA3-256",
          "content": "18ef639b2aeeb5aedffb18dbf20c79f33e300d99fb31b131689639cc470e6e4c"
        },
        {
          "alg": "SHA3-512",
          "content": "fbea96114dcf4f31cfaaa99987be756ddda3a6c74f8c835461997df794d54b92da1f60fe5c3f1f2a43cb8c5f5db7f4048bef77c70993673c7a93f3660fffc8da"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
      "externalReferences": [
        {
          "url": "https://issues.apache.org/jira/browse/LANG",
          "type": "issue-tracker"
        },
        {
          "url": "https://gitbox.apache.org/repos/asf?p=commons-lang.git",
          "type": "vcs"
        },
        {
          "url": "https://builds.apache.org/",
          "type": "build-system"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/commons-user/",
          "type": "mailing-list"
        },
        {
          "url": "https://www.apache.org/",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.1?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-annotations",
      "version": "2.14.1",
      "description": "Core annotations used for value types, used by Jackson data binding package.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "da4742ba6aeb24bf1bd29382fd95647b"
        },
        {
          "alg": "SHA-1",
          "content": "2a6ad504d591a7903ffdec76b5b7252819a2d162"
        },
        {
          "alg": "SHA-256",
          "content": "d255b4b863ff8ec714a8f96fa55c34621d43dbb82b82d3f57476496a4c09e1e7"
        },
        {
          "alg": "SHA-512",
          "content": "80c98ab07cf49a2114882f955e5eefe9cef888a495b7db34f0a3c171525dff645f091fbc4dcea8d124ff85ae6eb530f481d25249420c9413772a712c78feb93d"
        },
        {
          "alg": "SHA-384",
          "content": "1a68c63fd1c9d5114e39aa07f36a688a4d5c2c07a66bbf2370ca67483f8569c8bd2ad446b36f24724bb73905e59eda53"
        },
        {
          "alg": "SHA3-384",
          "content": "1f5eb50fb9c3681daf3103d041f2cc6dfa938d8038f1945871260fcb2a8e417c8366f346f916898a0099c36cdfb964d1"
        },
        {
          "alg": "SHA3-256",
          "content": "4f2842ab076e5107fad346f0a79c3f87a75f5667b400e7087c6fee7951a37cdb"
        },
        {
          "alg": "SHA3-512",
          "content": "60038ae7eeb69fca94e497dda74649e53e9b406d13fa03ef6833bff46f59605b53d17a4004c45b7edaf04ab329b08a6c70e50e177362eb147c2ad70f98b2eee2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-annotations",
          "type": "vcs"
        },
        {
          "url": "http://fasterxml.com/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.micrometer/micrometer-registry-prometheus@1.9.4?type=jar",
      "group": "io.micrometer",
      "name": "micrometer-registry-prometheus",
      "version": "1.9.4",
      "description": "Application monitoring instrumentation facade",
      "hashes": [
        {
          "alg": "MD5",
          "content": "45e5bdba87362b16852ec279c254eb57"
        },
        {
          "alg": "SHA-1",
          "content": "6f9c4fa47bd16610363db7f1d924d768b5a45223"
        },
        {
          "alg": "SHA-256",
          "content": "bc274c1c3d86a28b02f11f36598db5a61008b876e1a2b2b428c936d8ed19ae8a"
        },
        {
          "alg": "SHA-512",
          "content": "8c16f4abecb41f6b7dc141c65dd25682f0285943ae89a61f5b028cdf4d85e3e929ff0d471d062ceec45610acefc9691c1af968d4cee11f802a1a6ef7500d63f3"
        },
        {
          "alg": "SHA-384",
          "content": "d67106a38c7a0a6b4c5746d1066d5ec2c1ffa387221b16f9b97bd3ea8eff7f451b4ac0d6bd0d3e90eb76ef8443693c10"
        },
        {
          "alg": "SHA3-384",
          "content": "9b654e0426795c0fdcc3f405cdf8744f1bb753d2860b25bf9484cb6e396e5eb8deed9df468fe0da6d41eef4f93773e6b"
        },
        {
          "alg": "SHA3-256",
          "content": "4b79929700790ffa000f091e3c97c180c0dec5a35cb67dd78f8fea84ee9882c2"
        },
        {
          "alg": "SHA3-512",
          "content": "3f4a3147dbc34f6addcd4d18da30edc4b379dab5a2090364d10be3666e9448da26bac5e92d016c2bcde4e39c07d2c70820470df8c2f3378ce3daff6443d7e768"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.micrometer/micrometer-registry-prometheus@1.9.4?type=jar"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/simpleclient_common@0.15.0?type=jar",
      "group": "io.prometheus",
      "name": "simpleclient_common",
      "version": "0.15.0",
      "description": "Common code used by various modules of the Simpleclient.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "75d8a0acdb1026b23eaa64ae68e4b333"
        },
        {
          "alg": "SHA-1",
          "content": "57bd1d8be9f4d965a38c6b1b35ee60358cc679fc"
        },
        {
          "alg": "SHA-256",
          "content": "8d2fa21b5c7959010818245788bd43131633dea989d3facb28cec45b2da37918"
        },
        {
          "alg": "SHA-512",
          "content": "a861523f91db9558c3e64790344b6e837d55764a2156f9c3782a7ca7b57bce2df5f8b551d665e36a58fe80886784954526ff801505ea4d42c937a226c8cbe568"
        },
        {
          "alg": "SHA-384",
          "content": "7e282b98173f76afdc8199ba76972046a002f852ed1043ecfb7370560bc87c35e7aa14aad632dcf65ab18e384c95e709"
        },
        {
          "alg": "SHA3-384",
          "content": "1161f6121e59abb79e17bfd517b8947fab314f5a8ebaad57e7af99214a6cddf5c9d774add71da6a07d7563bb6c75c5be"
        },
        {
          "alg": "SHA3-256",
          "content": "e03114f72d9085448ed5ffd480acf47e30c26e030798f7ebaad2b8b426037289"
        },
        {
          "alg": "SHA3-512",
          "content": "d93bf623832a14dfbf2bfbd99a78d2923f85ee59fbb827341191b4ca71d104f06792dd8ae4d388141f1679b431432d9e8b7a07d6c27cac7ad4426f112b553cce"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/simpleclient_common@0.15.0?type=jar",
      "externalReferences": [
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/simpleclient@0.15.0?type=jar",
      "group": "io.prometheus",
      "name": "simpleclient",
      "version": "0.15.0",
      "description": "Core instrumentation library for the simpleclient.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d63578929ec6ff4ebcbeb4857c315293"
        },
        {
          "alg": "SHA-1",
          "content": "144aaf1ac9361a497d98079e0db8757a95e22fc4"
        },
        {
          "alg": "SHA-256",
          "content": "a43d6c00e3964a7063c1360ddcddc598df4f8e659a8313b27f90e4c555badb1d"
        },
        {
          "alg": "SHA-512",
          "content": "78c54084674053cc50df966b15eb31bdbd4a7c8cd2db36cee3f0a53bc0b7a2734716fd85c1b240a08e9270632f40fc87c329876cb5b98e5109ab61a481442371"
        },
        {
          "alg": "SHA-384",
          "content": "e9d586bdd9bc74252995fc343369b8eafb0e948000427bb3b71a401b48a3bd46b7ec77c64713c2fc21a0c74db7d7e806"
        },
        {
          "alg": "SHA3-384",
          "content": "6af611a9a3f0138f0563a08c297b3dc2ebad158d888f57d99df0d903bff16e979dfbbd61a89587090391ad6e6e69bdd2"
        },
        {
          "alg": "SHA3-256",
          "content": "2c2f24d76fcfaf53eeaa5859a2c62b7ec93741eedca1527039838faee6df06b4"
        },
        {
          "alg": "SHA3-512",
          "content": "99c63895a1237ad0ac5565b351a97132e144170482f3bbbc85a0ee72f0122919d101eafe02c3f117e93bb8bbdec79c4ecfc1ee4e9cf800bcd4d560c37b44873e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/simpleclient@0.15.0?type=jar",
      "externalReferences": [
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/simpleclient_tracer_otel@0.15.0?type=jar",
      "group": "io.prometheus",
      "name": "simpleclient_tracer_otel",
      "version": "0.15.0",
      "description": "The Prometheus Java Suite: Client Metrics, Exposition, and Examples",
      "hashes": [
        {
          "alg": "MD5",
          "content": "3b44d45799cb5399c11bd218d1b214c7"
        },
        {
          "alg": "SHA-1",
          "content": "53770a575d13d5aeebc7e2ebd7cc714496d7ab28"
        },
        {
          "alg": "SHA-256",
          "content": "0595251da49aa7997777b365ffdf97f5e2e88cd7f0dacf49add91b4fc8222b50"
        },
        {
          "alg": "SHA-512",
          "content": "b0cc68e748b5aaf1f9d17d352ff04fa77cac12e8bd3e96f24cb1b4b8b6a04c619665eec3d27e9c5130abcbebbcf43ad6272d926c3b849adf12148128f38ddf85"
        },
        {
          "alg": "SHA-384",
          "content": "54f584ae500908c29f23c523a3b24f4628a105104308d5c30254f1ad02541c2281c3cc33295e55590d58e2c1a08cdb5e"
        },
        {
          "alg": "SHA3-384",
          "content": "aaaaae7c900f05a104b74224e72839221f532e84adad4dd0b5681e296b3b1c5330b6bfc1d6cc9b89e875023db55ab61f"
        },
        {
          "alg": "SHA3-256",
          "content": "0da3dabae7658ba2c335d2e9e5a8df402a165bd9fed127e00766d4415155d461"
        },
        {
          "alg": "SHA3-512",
          "content": "ba487b4205ac5029ab9a51aa8821f5eaa0b01a8d9b555f216ba4beca5b2de5290d91884588b67d30b9fef18c297399d2d8daf14977dbd64d5b05516597274c0e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/simpleclient_tracer_otel@0.15.0?type=jar",
      "externalReferences": [
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/simpleclient_tracer_common@0.15.0?type=jar",
      "group": "io.prometheus",
      "name": "simpleclient_tracer_common",
      "version": "0.15.0",
      "description": "The Prometheus Java Suite: Client Metrics, Exposition, and Examples",
      "hashes": [
        {
          "alg": "MD5",
          "content": "291982a7045d430377ce2bd3b7b48c03"
        },
        {
          "alg": "SHA-1",
          "content": "f1bac57eaf6c04e6b72a08b44a0e6569e87974a4"
        },
        {
          "alg": "SHA-256",
          "content": "1baef082e619c06262e23de1b46ad35eb4df36ceb19be06ac7ef32a9833e12a4"
        },
        {
          "alg": "SHA-512",
          "content": "5bfa8bccc01d702f4085401c91ee6e4a0e50ad87c88d1f129583ea5af067ab2e5df5ae4d2bee5c2add562c271d763909cbf7727031a47ffad5ab22438fdb65f3"
        },
        {
          "alg": "SHA-384",
          "content": "ac5fa3e47815a7f877dbb0257a2ad45a2bd6213924d4bbd859544d27abe37179673c74834133c0ae3785a88460d15110"
        },
        {
          "alg": "SHA3-384",
          "content": "d55aec19e9260fbb482a2aab43f39a3c36a7867720b1490686bdcbba13cd2178a06005f2e846ec5c3755c281bae449a0"
        },
        {
          "alg": "SHA3-256",
          "content": "3cf685c664b7cce7410466cf9c1d522e1c8d5071d2694f39d038627eec22d070"
        },
        {
          "alg": "SHA3-512",
          "content": "b9bc19c6a4ad38b80bfb10f299a02b8e91326f8a5a096a3de070b07995c9c906dfe6df45cb375fe1d47954f8c79e00cce970cda7119c9c52d69889457ae31367"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/simpleclient_tracer_common@0.15.0?type=jar",
      "externalReferences": [
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/simpleclient_tracer_otel_agent@0.15.0?type=jar",
      "group": "io.prometheus",
      "name": "simpleclient_tracer_otel_agent",
      "version": "0.15.0",
      "description": "The Prometheus Java Suite: Client Metrics, Exposition, and Examples",
      "hashes": [
        {
          "alg": "MD5",
          "content": "66286cc563df7a4c82a1debe8a1e3352"
        },
        {
          "alg": "SHA-1",
          "content": "9c2f1a317960110581857911ca5fd7379ba77e28"
        },
        {
          "alg": "SHA-256",
          "content": "0cbb4c29d17e9fe71bb2cec013c2999ae8a9050f237ad33211761b40d2586e0b"
        },
        {
          "alg": "SHA-512",
          "content": "42a0005330ce859f834024def718861cc1551113fe89907a0c2e49902152bd399aa9c1fff95883292f538916fc7f993af94447a5ef65bc25ac33547590b96211"
        },
        {
          "alg": "SHA-384",
          "content": "20d5f53d63e8e0a59fff78c7a9b19eddf68324e0928fff5010b65aa5f015d91d7c4ced98a9203b7c5a68cb6a9eeac43d"
        },
        {
          "alg": "SHA3-384",
          "content": "94e0c8c965dbadec2fd9d38e6e53b27b2144d22b2edc42542556019f8f424b8dcb3cb302b1e3ca32f3a12377678a95be"
        },
        {
          "alg": "SHA3-256",
          "content": "87c1a733978cd5161a812663c87476316c3a8d1d97037bf758e30d0a7ace4d98"
        },
        {
          "alg": "SHA3-512",
          "content": "654d50d39bfb9b3826632b9b923717a0168a268fa554108fa3a7a0004e2e35c9aaaf4ea29724020d51e54cc7b9ae8f5969287feb3fcf941fac4338d45fda5304"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/simpleclient_tracer_otel_agent@0.15.0?type=jar",
      "externalReferences": [
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/us.springett/alpine-model@2.2.0?type=jar",
      "group": "us.springett",
      "name": "alpine-model",
      "version": "2.2.0",
      "description": "An opinionated scaffolding library that jumpstarts Java projects with an API-first design, secure defaults, and minimal dependencies.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "fceca8d94ce6d2d099184fcacec89cf6"
        },
        {
          "alg": "SHA-1",
          "content": "796671868c3c5784986bcab015b1cf2ee0096d6a"
        },
        {
          "alg": "SHA-256",
          "content": "0a3d64421850876bd7e27865c4093b2fc5e59b580bb3088f06c8389868c94529"
        },
        {
          "alg": "SHA-512",
          "content": "d0621afd65bb9949e99b9950f2991c59def2d1fba7fe316f1f9a668c42b119b58990d40d8a79fd53358a371e63c93f480641901d056a4e635ae820bb3cb55d01"
        },
        {
          "alg": "SHA-384",
          "content": "ee6fa0682da86f90ad9d8ea0b1aafcaef05167e663dc38e0969ff49a76c1510b43089760189bf0d62689a8b2ca6b2564"
        },
        {
          "alg": "SHA3-384",
          "content": "b77f514a8771c85e7dc3e59e7d2d429d88c45baa1ee3ec09656d9cf26e380fe193ab330e9f7223092bb7d577c7387773"
        },
        {
          "alg": "SHA3-256",
          "content": "cfdc962cf11b311616557b2c52f98944f212eca4b24394344dc8daee493f43c3"
        },
        {
          "alg": "SHA3-512",
          "content": "a84725ad9df4d9d6e5b19fa236827511c975e68cb29b94de096317347539fdaee816eae82ed5ad9bc7d71826dd7412b23cf95efaec8de8edf2bf9df155c3622a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/us.springett/alpine-model@2.2.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/Alpine/actions",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/stevespringett/Alpine/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/stevespringett/Alpine.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.datanucleus/datanucleus-api-jdo@6.0.1?type=jar",
      "group": "org.datanucleus",
      "name": "datanucleus-api-jdo",
      "version": "6.0.1",
      "description": "Plugin providing DataNucleus implementation of the JDO API.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ff5fbfccdd2f5794527877b97c15d6f2"
        },
        {
          "alg": "SHA-1",
          "content": "7183a10244b6804dcbe9a74e1bb47190765c3d9b"
        },
        {
          "alg": "SHA-256",
          "content": "6a7e18d4880b37d0f807051597c1abe555cc17a610d30d6489bc2fa8144f297b"
        },
        {
          "alg": "SHA-512",
          "content": "4f9469c3633d19a5e59a0f3aede4461b0f15d3d010080b382f0ae9682cf20966520cbbb19af3e7fb5e61f078408e548481952901c3b3125d40d5007a19a79fd1"
        },
        {
          "alg": "SHA-384",
          "content": "b1ad46b6cf0555409c6a2cad1103af9ed410f0252de6eb140186f12e30ba3963a8ad865d7de8023dbca1274c807ccae1"
        },
        {
          "alg": "SHA3-384",
          "content": "2135593d62a5cecc978d64827b64bdf1e5f502b8c39d316421bc508abdf628f37b3bcc1c5dff067749ada28ebfe9b8ce"
        },
        {
          "alg": "SHA3-256",
          "content": "673524ffa604f834187f43dcb9cc4b9a1b27ea1f974d61f706bb4c0801629913"
        },
        {
          "alg": "SHA3-512",
          "content": "f9f4bdc0d51fdf3ca52e9395c88f534f2a501e193d5854dca049305ddb4be40ef2c2764fa79cac178f9d976f7536d61991d873dcb599e31f0fa6ad68ccfd7567"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.datanucleus/datanucleus-api-jdo@6.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/datanucleus/",
          "type": "vcs"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.datanucleus/datanucleus-core@6.0.2?type=jar",
      "group": "org.datanucleus",
      "name": "datanucleus-core",
      "version": "6.0.2",
      "description": "DataNucleus Core provides the primary components of a heterogenous Java persistence solution. It supports persistence API\u0027s being layered on top of the core functionality.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0cd21769f5345f50e3c4509f1e78fccd"
        },
        {
          "alg": "SHA-1",
          "content": "c20b37480d15fe5dbf742d0dec0c9909e47d70c6"
        },
        {
          "alg": "SHA-256",
          "content": "0c13bbbd3a2db6513e9868ce3fd50485408b121a26942677cb02598e484427ad"
        },
        {
          "alg": "SHA-512",
          "content": "4a228fd39ae5fefd8ed9c6a3c7f25ac6fe3d4d2b54b7dbd868fe7874e9cee5d3e7e7f3cf6ac0b1c0ee1c9947ac66d00ed45761e11706bf79174cf805667131fc"
        },
        {
          "alg": "SHA-384",
          "content": "4f091d5b46bf646640f7686f8fb2d48919637e6026cfbd5f0ecfc18ee71823f14cd279f2c9aae88a39c1e88d7599fa96"
        },
        {
          "alg": "SHA3-384",
          "content": "dbdbda27cfbe62b0ce1c35a40f1fcf6f7d8f4de09ffa9c642d94ef0e3c794d84f406ca70a3493c8f2f7fac769b224b4b"
        },
        {
          "alg": "SHA3-256",
          "content": "02a084683fd055d7e4c6141d4135499b6579df42cf93b398c3bc81611d799846"
        },
        {
          "alg": "SHA3-512",
          "content": "d706ba8c8b96440af3c546d7c7737c64b0f8b4b11bcb11571c53c738b7b772d9115b9e14a7fa2c5a54f538eb4fa867b2d7e9acefbc2b0e782aec41c6cdf4c6af"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.datanucleus/datanucleus-core@6.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/datanucleus/",
          "type": "vcs"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.datanucleus/javax.jdo@3.2.1?type=jar",
      "group": "org.datanucleus",
      "name": "javax.jdo",
      "version": "3.2.1",
      "description": "The Java Data Objects API (JDO) : a standard interface-based Java model abstraction of persistence, developed by the JCP.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "79f1e95e6d7f1eb191edce207ac6ecd8"
        },
        {
          "alg": "SHA-1",
          "content": "e8d1af5779f95d3c85b641184b605725762a36c3"
        },
        {
          "alg": "SHA-256",
          "content": "61646f544baf75fc7a305410443c5f5f7d219fa7a2cabe3b782950a350ca5d3f"
        },
        {
          "alg": "SHA-512",
          "content": "29580963b5478646b0f3b47ae3387d0bdb5bd86da37afceef6841c32b9db3a4407186fc257855c5c47efbbf1f1bfbff0b45b6ad45101b6dfbed7946a9251fe43"
        },
        {
          "alg": "SHA-384",
          "content": "1845d95a87e9fb954ff3e0c80a0dae62eca817abb3f727d65edc9296a0992e60a7fa57db0a72858afaf9e2d872f6435f"
        },
        {
          "alg": "SHA3-384",
          "content": "e4f04e5be64a1a58ef475cf5b155e6169307dd9636cd4fe6661dd394fe28a0a9ee9dee426291bff62d66885ae35ab2c8"
        },
        {
          "alg": "SHA3-256",
          "content": "3703404351c56d4a658de2012266838fea9741cceb09e7304b4c323e33d88ca3"
        },
        {
          "alg": "SHA3-512",
          "content": "da4b8c30667d67651469ed1a750004a3afbaad1ce8c6697ac29889fd2e78dadbcde07d414161e42bc972017afe83e690329d4ede5e94a67553377ee7c2a7929a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.datanucleus/javax.jdo@3.2.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/datanucleus/",
          "type": "vcs"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/javax.transaction/javax.transaction-api@1.3?type=jar",
      "publisher": "GlassFish Community",
      "group": "javax.transaction",
      "name": "javax.transaction-api",
      "version": "1.3",
      "description": "Project GlassFish Java Transaction API",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6e9cb1684621821248b6823143ae26c0"
        },
        {
          "alg": "SHA-1",
          "content": "e006adf5cf3cca2181d16bd640ecb80148ec0fce"
        },
        {
          "alg": "SHA-256",
          "content": "603df5e4fc1eeae8f5e5d363a8be6c1fa47d0df1df8739a05cbcb9fafd6df2da"
        },
        {
          "alg": "SHA-512",
          "content": "3497cf77352aa1317c70ad1d28e8e7da51337d844c8227a35707209c750ba6f5d644a4ffdbdb10e5fbde204003aa43ff80e9e2ff3164584a7a34d8292266b2bc"
        },
        {
          "alg": "SHA-384",
          "content": "7044d8d5829a777d85e1a987c3e346eb535dd321366bdf32a9e8ed4f52facd0610ac2f3f58b4a1b001893f01fddc5eae"
        },
        {
          "alg": "SHA3-384",
          "content": "d0c1807001e02ce47320be657be055b4777b8b5673c22a78b0574955f7a6105dacc42b46b86ab967dc382cf332da59d8"
        },
        {
          "alg": "SHA3-256",
          "content": "c7c48884317a2d0e1596f201763acbca4ef76462af9172fd5e68aca3465303e1"
        },
        {
          "alg": "SHA3-512",
          "content": "bf053d4fe995cb5c1d6c01320fc73530017ee364de6ae21eb98fa0372b2aa6eff2fa4ac2d9cd5f692c930ee573c2f6226441918123fcfc48b5b4a126d350928c"
        }
      ],
      "licenses": [],
      "purl": "pkg:maven/javax.transaction/javax.transaction-api@1.3?type=jar",
      "externalReferences": [
        {
          "url": "https://glassfish.java.net",
          "type": "website"
        },
        {
          "url": "https://github.com/javaee/javax.transaction/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/javaee/javax.transaction",
          "type": "vcs"
        },
        {
          "url": "https://maven.java.net/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.corba/glassfish-corba-omgapi@4.2.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.corba",
      "name": "glassfish-corba-omgapi",
      "version": "4.2.2",
      "description": "A CORBA ORB for Glassfish",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b2eb806fc90b71d6d15391a1c887ae1f"
        },
        {
          "alg": "SHA-1",
          "content": "6e0f5735a51bda8f72dda0e58ba766d16678c7b8"
        },
        {
          "alg": "SHA-256",
          "content": "2d964250e13aa77b5e687669ef4981d44c7b92496b28e439e5fbcc5c7882e0f5"
        },
        {
          "alg": "SHA-512",
          "content": "0e99c7e659bf2613d0436805476c5ed265afbd35648f6367bcd8227c0052b024b675f4c9eb3ec590e24c8f0b989d0392a4c53ec3cb1ce666a7ae566489841482"
        },
        {
          "alg": "SHA-384",
          "content": "253cd42b07fd905e5c5651a0d78d1b33cac48abfdfa8fc2592e982c4e385481ccead57d8bcbe32407f498de1e26f3558"
        },
        {
          "alg": "SHA3-384",
          "content": "cf14029429a406ec32481ac73a7580a4e34f1216f7f85ea29cb35dba8b8ca1e20b59b81b66778ac5b16a3975fcf6f2d8"
        },
        {
          "alg": "SHA3-256",
          "content": "76b8b17d5659c5638709d866cb78ee75b78cbaf53beb649f4ec1b15a47c65347"
        },
        {
          "alg": "SHA3-512",
          "content": "2d8b9be6f6a7149663107ade523c8e274b1f24710132ae09d09591632ceb108296f26214f9c9ce4cec40f074bf97f715284d136cb01ce886e8745b38eb5b3f48"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.corba/glassfish-corba-omgapi@4.2.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/orb/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/orb-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/orb",
          "type": "vcs"
        },
        {
          "url": "https://www.eclipse.org",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.ext/jersey-bean-validation@2.37?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.ext",
      "name": "jersey-bean-validation",
      "version": "2.37",
      "description": "Jersey extension module providing support for Bean Validation (JSR-349) API.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0717d098f444758c4acb047295678d7a"
        },
        {
          "alg": "SHA-1",
          "content": "b81a89bb65eaedf87037824e6c8369072b374bef"
        },
        {
          "alg": "SHA-256",
          "content": "dd8683d5595d6c8b5cff5fae40d43a031bce9f42549f19f80debaca33c09b06e"
        },
        {
          "alg": "SHA-512",
          "content": "4d155634741c8a7884c3677f414516f271b9a8d0b58170581db4c138b4fe9545d1b6192138d3ac60ca0e7bab5213e34fbb124d58b423801c51a3742e375f6fc1"
        },
        {
          "alg": "SHA-384",
          "content": "ef0f92b54e8b5f7d6b9e5eadf530e0fe43b82e14141fe742e987a69150d3640c31e92b9e7f54d2ebba6a0d7ed554436d"
        },
        {
          "alg": "SHA3-384",
          "content": "2b97f18f4c139f8b209b174f68c521f50c6694e0b3d9f2bec808ede37bdee21c77b5dc4b3a09ffe8c30e870e47ff46d7"
        },
        {
          "alg": "SHA3-256",
          "content": "40bf894a1027592420360b4be6a98330352729b03a4e57e305dda8d20f2efebd"
        },
        {
          "alg": "SHA3-512",
          "content": "cafaba62bf893e17bda8560519023a31a4b64cf91eedc9b4eff71276d0949a953232a92445a2bdcef7996216d3a5e81d4c752409f87505ee84171177b8182d6b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.ext/jersey-bean-validation@2.37?type=jar",
      "externalReferences": [
        {
          "url": "https://www.eclipse.org/org/foundation/",
          "type": "website"
        },
        {
          "url": "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/",
          "type": "build-system"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey",
          "type": "vcs"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar",
      "publisher": "Oracle Corporation",
      "group": "org.glassfish.hk2.external",
      "name": "jakarta.inject",
      "version": "2.6.1",
      "description": "Injection API (JSR 330) version ${javax.inject.version} repackaged as OSGi bundle",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4d7c80a1e3cd54531af03bef4537f7af"
        },
        {
          "alg": "SHA-1",
          "content": "8096ebf722902e75fbd4f532a751e514f02e1eb7"
        },
        {
          "alg": "SHA-256",
          "content": "5e88c123b3e41bca788b2683118867d9b6dec714247ea91c588aed46a36ee24f"
        },
        {
          "alg": "SHA-512",
          "content": "7fc8196ad9ee03a831dfff85c945e416c3906071a7aa8ebf6ab8b7008dfec0adccc1f1dca53ed6768ac5676cd4b3c43471674f97ff73e1f61f5a427aaed68e05"
        },
        {
          "alg": "SHA-384",
          "content": "6b3ea9eeec5cbbc1fb3e6c89160af67b82ffbd68948dd4790e3fe3ce2fc495c063698a7d6a1998d5db51abafe3915e19"
        },
        {
          "alg": "SHA3-384",
          "content": "b551e00861151233789c03cec07e162d90d1f377fb8f26d413f7015152188183d636e2837ceca131096c43511e618efa"
        },
        {
          "alg": "SHA3-256",
          "content": "67f3b5a4b3006d07a33ccdbbb70f312c94d2d8cdd32598d471b079470574ab6d"
        },
        {
          "alg": "SHA3-512",
          "content": "a0b6c00df7f5b53f549193a7e6a26d632847957ad296aef2ee75a23a5ebdec970f793511641e6c63677b481c47ca67f4039a5ee5f4bb532a46093a201782198d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar",
      "externalReferences": [
        {
          "url": "http://www.oracle.com",
          "type": "website"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.core/jersey-server@2.37?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.core",
      "name": "jersey-server",
      "version": "2.37",
      "description": "Jersey core server implementation",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4c7786f532f24ea17f3b9d8edcd2e0e7"
        },
        {
          "alg": "SHA-1",
          "content": "dce0c8505d260ab986d0c69095cc35e3658e0d3d"
        },
        {
          "alg": "SHA-256",
          "content": "4f725c872c9955464e5d60bfd1904a2d99a33d616830040133e75c0ba6e421f6"
        },
        {
          "alg": "SHA-512",
          "content": "8b450a8805f01e0c9b8a25a8d75fe6a33128d8cfe79b92312ce80242d0d537f67ace03f78c32e9c8de0f10dda25cc84a49262908c91b71180d83cc076616d4b3"
        },
        {
          "alg": "SHA-384",
          "content": "185c9f096c5c6c120eba2e260217cd1244ddfd4c75430953e59a802d0f2b75ea5bf68381862794807587d4ceeb655e58"
        },
        {
          "alg": "SHA3-384",
          "content": "a00359fdcf9a0c494056ecfe665fe3768bdee6fb2f1ba747940850339c37fa764d831d7043ff057aeab4c56f77e3b8b8"
        },
        {
          "alg": "SHA3-256",
          "content": "c3bce4c7a940a5017a5dd954d962553feba87e79ed5aaf7e9e22d3dab7ebf07a"
        },
        {
          "alg": "SHA3-512",
          "content": "4609afc9da3c2e857cb2c92ea9fa700dff0e62e0b4d4403dda019a05cce56e16813bb21d8d52bdfe5ccf0bcc5f435cfc65cf0e258059583079fc72debdf3bd64"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "name": "The GNU General Public License (GPL), Version 2, With Classpath Exception",
            "url": "https://www.gnu.org/software/classpath/license.html"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.core/jersey-server@2.37?type=jar",
      "externalReferences": [
        {
          "url": "https://www.eclipse.org/org/foundation/",
          "type": "website"
        },
        {
          "url": "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/",
          "type": "build-system"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey",
          "type": "vcs"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.validation",
      "name": "jakarta.validation-api",
      "version": "2.0.2",
      "description": "Jakarta Bean Validation API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "77501d529c1928c9bac2500cc9f93fb0"
        },
        {
          "alg": "SHA-1",
          "content": "5eacc6522521f7eacb081f95cee1e231648461e7"
        },
        {
          "alg": "SHA-256",
          "content": "b42d42428f3d922c892a909fa043287d577c0c5b165ad9b7d568cebf87fc9ea4"
        },
        {
          "alg": "SHA-512",
          "content": "3ca8556b80ca809b3a43fac31469702bbad62a00e63b11a304dad1e372d9f6c128357463a4c70c423055941c7e2e417f87a9474a204d189c8e4b62f42047c8eb"
        },
        {
          "alg": "SHA-384",
          "content": "6ae3963fd6a5e83b068a8344b88f6bfbd26d29cee64193025bc5e98195678e49826463da27a7a1c15cd83b2149d57a94"
        },
        {
          "alg": "SHA3-384",
          "content": "55a570386718064b422f9ebc0c0c07f0b37259e44a14c9a16c20e945402339b1d01b7d6969ef40d6b5baf5bce3e1161d"
        },
        {
          "alg": "SHA3-256",
          "content": "1ff48fdabab86a398b25e491e6ba4fd9b62d597314202628a3cfedf723c17f21"
        },
        {
          "alg": "SHA3-512",
          "content": "c23bb0b43fb0c39d4c9d2cce0cd38334fa7c253130f0bda3007d9f7d2dd451c0896ff4265ee2cc35024fad282f9ccaa398c19874775d9cabbb786843fae155d7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://hibernate.atlassian.net/projects/BVAL/",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/beanvalidation-api",
          "type": "vcs"
        },
        {
          "url": "https://www.eclipse.org",
          "type": "website"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.hibernate.validator/hibernate-validator@6.2.0.Final?type=jar",
      "group": "org.hibernate.validator",
      "name": "hibernate-validator",
      "version": "6.2.0.Final",
      "description": "Hibernate\u0027s Jakarta Bean Validation reference implementation.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "59abb8e6d7c7590ae3bb9dd0685facd5"
        },
        {
          "alg": "SHA-1",
          "content": "d6b0760dfffbf379cedd02f715ff4c9a2e215921"
        },
        {
          "alg": "SHA-256",
          "content": "7a694d0621e3007465718b95cee7fb3e40b5b77834e812380bbde79659a4d704"
        },
        {
          "alg": "SHA-512",
          "content": "6305c1c0e23180b448385a484eb8d11fad75665cb9c6aaab197b958a7e7c2de26a97c6cc7761f4a632da2f3f2257424872e4bc4f715bc29b0fbaa585e649cfe1"
        },
        {
          "alg": "SHA-384",
          "content": "88ba70892ea1f9618060822ef6e930bff5a8d3c0a9715e4029c9f0f6e3e317dd1d9df975fbf5ecbdaabbab0c56308f4f"
        },
        {
          "alg": "SHA3-384",
          "content": "705ad0ea9b1631c2854e24f7d919ba85999029c78474228ab17c8f6336f33e96afeeb481dd54b2b217342db15318f8f7"
        },
        {
          "alg": "SHA3-256",
          "content": "24468bb51f268f846b8e9c538e4d98f3ea329fff49372efe977b69021f5ddc7b"
        },
        {
          "alg": "SHA3-512",
          "content": "8221758094d6f7406e20fbc00723d75acd60212e49c557f866687db9aaee66f7c3a0592047ff431d952f020168492707282eebffd54f6b424ab345e4b77a5ed0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.hibernate.validator/hibernate-validator@6.2.0.Final?type=jar",
      "externalReferences": [
        {
          "url": "http://ci.hibernate.org/view/Validator/",
          "type": "build-system"
        },
        {
          "url": "https://hibernate.atlassian.net/projects/HV/summary",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/hibernate/hibernate-validator",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jboss.logging/jboss-logging@3.4.1.Final?type=jar",
      "publisher": "JBoss by Red Hat",
      "group": "org.jboss.logging",
      "name": "jboss-logging",
      "version": "3.4.1.Final",
      "description": "The JBoss Logging Framework",
      "hashes": [
        {
          "alg": "MD5",
          "content": "52ee373b84e39570c78c0815006375bc"
        },
        {
          "alg": "SHA-1",
          "content": "40fd4d696c55793e996d1ff3c475833f836c2498"
        },
        {
          "alg": "SHA-256",
          "content": "8efe877d93e5e1057a1388b2950503b88b0c28447364fde08adbec61e524eeb8"
        },
        {
          "alg": "SHA-512",
          "content": "c17b8882481c0cb8fbcdf7ea33d268e2173b1bfe04be71e61d5f07c3040b1c33b58781063f8ebf27325979d02255e62d1df16a633ac22f9d08adeb5c6b83a32a"
        },
        {
          "alg": "SHA-384",
          "content": "1a9a57638b6d9da1f50dc92da88405878885ccfc1cd6e3a66f5cee1fcef5af51a2d63294afd23f2300f550758af58469"
        },
        {
          "alg": "SHA3-384",
          "content": "aabecb31aaa548a5bf9ed6f540ad91e8f3c713a10c351c43aa71e845f6f80d81d673484e1c566ab246c80c8c77acfa74"
        },
        {
          "alg": "SHA3-256",
          "content": "447c31f632013a87e7e9e90a346b2011f2213df22a3844a502e813536f14611c"
        },
        {
          "alg": "SHA3-512",
          "content": "1b34af205a56d3f93d2070e335ef853090fb7dabe630b05beeee13c8596503c2f242fc93aa7a8763418771bc3593e65e8bd93c62288324e29caaf53ffbee27d0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jboss.logging/jboss-logging@3.4.1.Final?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/jboss-logging/jboss-logging",
          "type": "vcs"
        },
        {
          "url": "http://www.jboss.org",
          "type": "website"
        },
        {
          "url": "https://issues.jboss.org/",
          "type": "issue-tracker"
        },
        {
          "url": "http://lists.jboss.org/pipermail/jboss-user/",
          "type": "mailing-list"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml/classmate@1.5.1?type=jar",
      "publisher": "fasterxml.com",
      "group": "com.fasterxml",
      "name": "classmate",
      "version": "1.5.1",
      "description": "Library for introspecting types with full generic information including resolving of field and method types.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e91fcd30ba329fd1b0b6dc5321fd067c"
        },
        {
          "alg": "SHA-1",
          "content": "3fe0bed568c62df5e89f4f174c101eab25345b6c"
        },
        {
          "alg": "SHA-256",
          "content": "aab4de3006808c09d25dd4ff4a3611cfb63c95463cfd99e73d2e1680d229a33b"
        },
        {
          "alg": "SHA-512",
          "content": "7fc4764eb65227f5ba614698a5cf2f9430133f42ec6e2ae53b4c724ee53f258541a0109fe0659e0b9e45729b46c95c00227e696b8d1addcd772c85f877658c9a"
        },
        {
          "alg": "SHA-384",
          "content": "28b4780b2353ebc08dbc02c9a343527a9062a0455bfb4ab135cb639c03e5dfd9c2250a835c44d5f17d275667c2009694"
        },
        {
          "alg": "SHA3-384",
          "content": "b194ace8f1f49f410286bd859866678b95a1b2c6f73e41f48291eb7438dffea57aaa9b177459038b6997771ce4d1cee1"
        },
        {
          "alg": "SHA3-256",
          "content": "50234c94efed4c816eb77bd2f70b869c9f89ddf8ee73dc25e354f4d0b81b3e1f"
        },
        {
          "alg": "SHA3-512",
          "content": "9886421726066b313a62283a6811b76d904ea1c1e9b7b2d850cb47afa189b03cdef053c8f7f6b79e77f2269c45f8cc2ed75c3389e96594b50987fef311d5a25f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml/classmate@1.5.1?type=jar",
      "externalReferences": [
        {
          "url": "https://fasterxml.com",
          "type": "website"
        },
        {
          "url": "https://github.com/FasterXML/java-classmate",
          "type": "vcs"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.el/jakarta.el-api@3.0.3?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.el",
      "name": "jakarta.el-api",
      "version": "3.0.3",
      "description": "Jakarta Expression Language defines an expression language for Java applications",
      "hashes": [
        {
          "alg": "MD5",
          "content": "528ed6138395d22fb54912b2b889e88e"
        },
        {
          "alg": "SHA-1",
          "content": "f311ab94bb1d4380690a53d737226a6b879dd4f1"
        },
        {
          "alg": "SHA-256",
          "content": "47ae0a91fb6dd32fdaa5d9bda63df043ac8148e00c297ccce8ab9c56b95cf261"
        },
        {
          "alg": "SHA-512",
          "content": "f76c94036f0f49d3cf9d1f90697fa96a97d94aba93a0dccad7b907d6c63ff3bceacc6fd40405ff68d6c248b13d056b3543ccb3d2b405917b2ccddaae78ad8900"
        },
        {
          "alg": "SHA-384",
          "content": "5796acb1f22b55e2713763584eaf2b62abbcfcee85530138006fbb55abb19b2c534b2887c28a2f5301168783416fb6c8"
        },
        {
          "alg": "SHA3-384",
          "content": "bdb09cc896874c0a4a3c470e355f2b23f954800510986753cfc2d4da41cb6c4de567b9014d618da3f89f04e36cfe620b"
        },
        {
          "alg": "SHA3-256",
          "content": "4fc4437d2638002741f4217003f3a9de47c037458dbeabee1a1a5bec96547466"
        },
        {
          "alg": "SHA3-512",
          "content": "5857452b1eb5e9ad141717dd9e989763e99a98bf49150ebeb66c423daee8e890ae9b89737abdebedd7ef7e47e6c2fd8cfeaa9276014fb6dc88134ccd2234ab5f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.el/jakarta.el-api@3.0.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/el-ri/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/el-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/el-ri",
          "type": "vcs"
        },
        {
          "url": "https://www.eclipse.org",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish/jakarta.el@3.0.4?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish",
      "name": "jakarta.el",
      "version": "3.0.4",
      "description": "Jakarta Expression Language provides a specification document, API, reference implementation and TCK that describes an expression language for Java applications.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a4ff0d711c405e054f8166c2ea893e0e"
        },
        {
          "alg": "SHA-1",
          "content": "f48473482c0e3e714f87186d9305bcae30b7f5cb"
        },
        {
          "alg": "SHA-256",
          "content": "3b8d4311b47fb47d168ad4338b6649a7cc21d5066b9765bd28ebca93148064be"
        },
        {
          "alg": "SHA-512",
          "content": "45b9142c3ba82abd44decd350257be6f951bfb23e3baa96e6e8a26b269881f96c4e50615fef06c3b27434d7cb346e87da913f90284e11614118699a8a3e883be"
        },
        {
          "alg": "SHA-384",
          "content": "14e457f2bbbabd02bbd6ddf8c9dd0c27ab7c50c4c7908c81a17660bc45de3a800119c00da8e799335fae4241adc2745a"
        },
        {
          "alg": "SHA3-384",
          "content": "eaa1fa45a0f0d152f78dd000518c23edb1e31025cd0dbc86c3cccafab64bd89d6bfbd605c062b6e5aeabc259f0bf9aba"
        },
        {
          "alg": "SHA3-256",
          "content": "86bb8ff8f351449a2ac125c09914eebdd8ee4b8e5616477fd155a481aa98b6a8"
        },
        {
          "alg": "SHA3-512",
          "content": "f40a2b2fb4595a9aadc4e38b4dbd8b958bb303c4d90df4241cd1eaa1181ca0715bbff6e29c3bd5c424542392f351cf09329d772ae66d72608c272dd6f5042ede"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish/jakarta.el@3.0.4?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/el-ri/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/el-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/el-ri",
          "type": "vcs"
        },
        {
          "url": "https://www.eclipse.org",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/us.springett/alpine-infra@2.2.0?type=jar",
      "group": "us.springett",
      "name": "alpine-infra",
      "version": "2.2.0",
      "description": "An opinionated scaffolding library that jumpstarts Java projects with an API-first design, secure defaults, and minimal dependencies.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "18a3f2f190eb850c33ce7a86b14ff07a"
        },
        {
          "alg": "SHA-1",
          "content": "90a4312ea7d0182db762eaf444768115abc2bd86"
        },
        {
          "alg": "SHA-256",
          "content": "f26539f6dcd4d7fe75514b36d9926d371f7c4003d53ad3da69e3aff68a9051bd"
        },
        {
          "alg": "SHA-512",
          "content": "28e10ed6f50ca838fc3b637b9e9d8b149fb406bb1caa73b8749901a5e39bb36b4b99b4c9865947d4c96c9d413e81a7e62b3c14cfff1a14214a5d8157ed77281f"
        },
        {
          "alg": "SHA-384",
          "content": "bbd76308eaa0931054d0f51e0de3754ae94b321d75f02d27e87d5e803a7e9ee3ac535412d2cc91d0acfb5a17b4835526"
        },
        {
          "alg": "SHA3-384",
          "content": "f913c7548ec5ada10d3e067de9fc73ffcce5b975c2a8ff62d71037195a32979c65e52c73ca8182019d2c90a82a562052"
        },
        {
          "alg": "SHA3-256",
          "content": "08cfc6b65af32d23d5f3e361c3c3e20961d83a192acbdc37b285348fa41cb6ae"
        },
        {
          "alg": "SHA3-512",
          "content": "09627085da6f2b8d4dbd5febc7e52d2cd64ed40588ac72b81dcbf0f2a4773e160729efdd856889c6eb0f87863071e71c7cd3113efd32524eed7945a0375a9366"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/us.springett/alpine-infra@2.2.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/Alpine/actions",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/stevespringett/Alpine/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/stevespringett/Alpine.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.commons",
      "name": "commons-collections4",
      "version": "4.4",
      "description": "The Apache Commons Collections package contains types that extend and augment the Java Collections Framework.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4a37023740719b391f10030362c86be6"
        },
        {
          "alg": "SHA-1",
          "content": "62ebe7544cb7164d87e0637a2a6a2bdc981395e8"
        },
        {
          "alg": "SHA-256",
          "content": "1df8b9430b5c8ed143d7815e403e33ef5371b2400aadbe9bda0883762e0846d1"
        },
        {
          "alg": "SHA-512",
          "content": "5939c9931eb9557caee3b45fe1dd9ce54cabdc4e6182ed7faac77e1a866dd0cb602bfa4ece2f3316d769913366106bd2b61bf3bb5faad1fa7d808124c06dec0f"
        },
        {
          "alg": "SHA-384",
          "content": "74059fd8f61c366ed448e102256fdbd1db0d690501c2c296c80f3657a2c0d8ade3dd9533b1431cc29786bbb624195f46"
        },
        {
          "alg": "SHA3-384",
          "content": "15034fb39842620bf3b152cd90bce252644ebc6a29fafd6dcf5e1f3925f09ccea2ae4e195817450f996b25a7081a9a3f"
        },
        {
          "alg": "SHA3-256",
          "content": "1716630a207a8f4a83bf9ef19245f46c87d62bfebbcfa1227101e6dd51da8fa5"
        },
        {
          "alg": "SHA3-512",
          "content": "c290c98c7b5825d024644ec1162804a1f9ad4da3bb5324d147ddffee6cc79e3c0ecc3825d6116502f2ca292ec80c4e7f8d49a03542dda8f4d58b0dc8228923c5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar",
      "externalReferences": [
        {
          "url": "http://issues.apache.org/jira/browse/COLLECTIONS",
          "type": "issue-tracker"
        },
        {
          "url": "https://git-wip-us.apache.org/repos/asf?p=commons-collections.git",
          "type": "vcs"
        },
        {
          "url": "https://builds.apache.org/",
          "type": "build-system"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/commons-user/",
          "type": "mailing-list"
        },
        {
          "url": "https://www.apache.org/",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.datanucleus/datanucleus-rdbms@6.0.2?type=jar",
      "group": "org.datanucleus",
      "name": "datanucleus-rdbms",
      "version": "6.0.2",
      "description": "Plugin for DataNucleus providing persistence to RDBMS datastores.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "cdd933cd3b2573d0264c07371eeb7bb2"
        },
        {
          "alg": "SHA-1",
          "content": "0158f7f6b6cf527c86e3e31d2a490c10a7658eb6"
        },
        {
          "alg": "SHA-256",
          "content": "b8e612246b80cb0f1dfa46cc9ac2d76cdd08a4d8b429f517d4409811b4d90259"
        },
        {
          "alg": "SHA-512",
          "content": "9a6042aa54e50244cf65883fbf4f5dc59b1f46b4a9866313e7f22800b4abbe726b72e3a08e988762ddb43cb30b34f668609182542de631408ebf44949af02484"
        },
        {
          "alg": "SHA-384",
          "content": "9bfc74eabe5a3cb1f05adbb1bb7a6fd26d51c71ca96193081a137b724204b0db5db1f03cd02a6c8af0619595d6729a06"
        },
        {
          "alg": "SHA3-384",
          "content": "e6a4f3d639ce72fd435b1f7420e71fd9c02a3e14f9488d5532fabfe57494c0d8cc42560e924869d340717ff51e274e8d"
        },
        {
          "alg": "SHA3-256",
          "content": "2a50c5dd26491735d4c18fa20782fa48d974273b1d28da7ce8bd363b7026e636"
        },
        {
          "alg": "SHA3-512",
          "content": "ab159898e41dc7f34407218523aa456cf17af8e204013eae344ad31db24f522afe9160f20479bc6f8dde8420728fb5b700960e04125c9dc3ba3df6376d45147d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.datanucleus/datanucleus-rdbms@6.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/datanucleus/",
          "type": "vcs"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.zaxxer/HikariCP@5.0.1?type=jar",
      "publisher": "Zaxxer.com",
      "group": "com.zaxxer",
      "name": "HikariCP",
      "version": "5.0.1",
      "description": "Ultimate JDBC Connection Pool",
      "hashes": [
        {
          "alg": "MD5",
          "content": "3bc96d2ce8285470da11ec41bff6129f"
        },
        {
          "alg": "SHA-1",
          "content": "a74c7f0a37046846e88d54f7cb6ea6d565c65f9c"
        },
        {
          "alg": "SHA-256",
          "content": "26d492397e6775b4296737a8919bf04047afe5827fdd2c08b4557595436b3a2b"
        },
        {
          "alg": "SHA-512",
          "content": "0a932d8c1083d3ba8eb6e004aa1783cc3f6df7424666f1d61ca6606715afbbb3da20bc0b61efd91bb3162f8092100ddad5e90fe019f818c89cc69a8d8d0bd5d5"
        },
        {
          "alg": "SHA-384",
          "content": "7076c4dfe7763b477aa23309d0103290e035c88478bef5bb2189bff5d7a3942fcf6b510318863b8d55a7495586284d7c"
        },
        {
          "alg": "SHA3-384",
          "content": "44ad2bde5beae862db7faba2e6f99b9e49076345f78f94136e5de2e10db972b786a544e009cf162f516953bb159085c6"
        },
        {
          "alg": "SHA3-256",
          "content": "3cd38fb84432c644bd831436b11c9b37be7dc8b2fc72b9517427c0008cc42e46"
        },
        {
          "alg": "SHA3-512",
          "content": "65a38105f390df9a4cfddcf2043206266cf0b2bb31a8797e08338dc4d631da31bae81998eb051e0f2767928783d5af55cc6d4b9bae47ad313cb66195cdc9f7e3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.zaxxer/HikariCP@5.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/brettwooldridge",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "http://svn.sonatype.org/spice/trunk/oss/oss-parent-9",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.javassist/javassist@3.29.2-GA?type=jar",
      "publisher": "Shigeru Chiba, www.javassist.org",
      "group": "org.javassist",
      "name": "javassist",
      "version": "3.29.2-GA",
      "description": "Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation simple. It is a class library for editing bytecodes in Java.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9783c90ffa4d36eddda9526fde06f3ea"
        },
        {
          "alg": "SHA-1",
          "content": "6c32028609e5dd4a1b78e10fbcd122b09b3928b1"
        },
        {
          "alg": "SHA-256",
          "content": "a90ddb25135df9e57ea9bd4e224e219554929758f9bae9965f29f81d60a3293f"
        },
        {
          "alg": "SHA-512",
          "content": "5f9e939a0c094e2c4d4b8509c126fcb9033ea47c2577e172b2326c8aceb86b5bc3168d056b3d986c7bb3d3f46ed6fed3155c77734afcbb8cb75162df0375a657"
        },
        {
          "alg": "SHA-384",
          "content": "8b1f8b7235a7aeab500bcff13b5f88fe95df983502975021ac7d5edd0c73d708f65da48796f5680f2ef710fed9d0e0aa"
        },
        {
          "alg": "SHA3-384",
          "content": "d7944350dfa3808264a93445efedbab2645807d533b8cd9e95540e94ae38c6b7aafa6e29d1cbba669b67dda69881814e"
        },
        {
          "alg": "SHA3-256",
          "content": "a87df212cdfc24f3075ac8d4dec52cc9bd16446ec489706f60939aaf196fef50"
        },
        {
          "alg": "SHA3-512",
          "content": "9fffcb716b656fff4ad299ca4ef1b11166016a4bbe6c97317c894ca3163136ec1dbae62cc46a9f8a945cc6592ab930dccf8e0261f0a89025b0a8380fdc96e8b2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MPL-1.1"
          }
        },
        {
          "license": {
            "id": "LGPL-2.1-only"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.javassist/javassist@3.29.2-GA?type=jar",
      "externalReferences": [
        {
          "url": "https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://jira.jboss.org/jira/browse/JASSIST/",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.jsonwebtoken/jjwt@0.9.1?type=jar",
      "group": "io.jsonwebtoken",
      "name": "jjwt",
      "version": "0.9.1",
      "description": "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "32b17377c70abef64a8b8203d2520932"
        },
        {
          "alg": "SHA-1",
          "content": "54d2abfc3e63a28824d35bf600d6a5d627da681a"
        },
        {
          "alg": "SHA-256",
          "content": "56e254d6a8d2306dc93e9ae2d81bf841481637f98b84847470c06cf71160d143"
        },
        {
          "alg": "SHA-512",
          "content": "ab8e3e49904fd2e852f720af46acce0b550b99ee4be593944a6c00f8781ed141c7f19cad0614cabad7194e0a0d970a3a1605525ce244167d5fdbf961aa6a093b"
        },
        {
          "alg": "SHA-384",
          "content": "254a9822f640ea9aa6f6ea2b48337684b01cf7a14d48acc9fbbb472c090919f7e241f7455d70b90e1ed223df4815cded"
        },
        {
          "alg": "SHA3-384",
          "content": "041a871e7c44449e86fda7fb2fc9df5d262ef64e511be0fd167b4a2a0c0f2e230bb3e09dc8074f2eca9911d519cad4bd"
        },
        {
          "alg": "SHA3-256",
          "content": "696478922c79f183e6e2656bd523fbb2a8830f084f9d278d5cce4d2216bdf702"
        },
        {
          "alg": "SHA3-512",
          "content": "1fe621ebdfdbab8fa8cd59878c171826a6c06de8e2f0416128c47b82bdcdfe9ad2bb9a59e157f96c170df919000fb009cd596b649a6aae4ed0ec6433cf9c2c79"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.jsonwebtoken/jjwt@0.9.1?type=jar",
      "externalReferences": [
        {
          "url": "https://travis-ci.org/jwtk/jjwt",
          "type": "build-system"
        },
        {
          "url": "https://github.com/jwtk/jjwt/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "http://svn.sonatype.org/spice/tags/oss-parent-7",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/us.springett/alpine-server@2.2.0?type=jar",
      "group": "us.springett",
      "name": "alpine-server",
      "version": "2.2.0",
      "description": "An opinionated scaffolding library that jumpstarts Java projects with an API-first design, secure defaults, and minimal dependencies.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "21299658f739fe7e1e4e93430c7051cf"
        },
        {
          "alg": "SHA-1",
          "content": "2e98bc93ef23ca1ede0eb6a8706e6b0c45c5b8ea"
        },
        {
          "alg": "SHA-256",
          "content": "afa644dfa1918fb27069a436691bc23b664a053e0a2d835a42f934174992692a"
        },
        {
          "alg": "SHA-512",
          "content": "49cc2830fb910964807ccd3c48ac622dfe4dde089403ecec25c6c01cdc14e753224ea3a8ebbd11feaf4bb4befa1b7e9ca4643f84e02328b42cd9f69482fba1d5"
        },
        {
          "alg": "SHA-384",
          "content": "f9358304b00ab468a41863f56987c71fda9fbfcd44f7610e42d5d900c67c9b849ebe8e451bb42cbb5a93be7c7bfc924a"
        },
        {
          "alg": "SHA3-384",
          "content": "7e600118dfc48e631382ca0b21a85495f49fdbf92f3485a39c5680b77d347cbee9ea125f9be5d0909f20f40a1d82eaeb"
        },
        {
          "alg": "SHA3-256",
          "content": "bbabf35755da01004145a1bd8904debcf11887ca68b6bb6997cc569ff892e4a5"
        },
        {
          "alg": "SHA3-512",
          "content": "f310ff4c6b02494eaca404d6c916e2e75d5e063725c4d00257786fe5011020e497730e9c21b7501e0bae8250156ce0c2d41b8f1563123d56e75b246ada3529e5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/us.springett/alpine-server@2.2.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/Alpine/actions",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/stevespringett/Alpine/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/stevespringett/Alpine.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/commons-io/commons-io@2.11.0?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "commons-io",
      "name": "commons-io",
      "version": "2.11.0",
      "description": "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "3b4b7ccfaeceeac240b804839ee1a1ca"
        },
        {
          "alg": "SHA-1",
          "content": "a2503f302b11ebde7ebc3df41daebe0e4eea3689"
        },
        {
          "alg": "SHA-256",
          "content": "961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908"
        },
        {
          "alg": "SHA-512",
          "content": "5bd78eed456ede30119319c5bed8e3e4c443b6fd7bdb3a7a5686647bd83094d0c3e2832a7575cfb60e4ef25f08106b93476939d3adcfecf5533cc030b3039e10"
        },
        {
          "alg": "SHA-384",
          "content": "114f1e324d90ad887c177876d410f5787a8e8da6c48d4b2862d365802c0efded3a88cb24046976bf6276cadad3712f0f"
        },
        {
          "alg": "SHA3-384",
          "content": "80288c03ad4d80d69f91d056ffc5570d49a9c76bf54ad2dff0121ecde26a560df76d05156f281f5c6db2a38ff07a873d"
        },
        {
          "alg": "SHA3-256",
          "content": "5adfb5ccaf5f21a549422f426118a9542673926fcd18c68390cf813e791dcf6c"
        },
        {
          "alg": "SHA3-512",
          "content": "7573f47f0babb53cefdc7c2309a0b982d800139064537b0797da442853d081010ad7c3c74a500598a0f800639a5d540eca21963ea652c68613907059bd4278c2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/commons-io/commons-io@2.11.0?type=jar",
      "externalReferences": [
        {
          "url": "https://issues.apache.org/jira/browse/IO",
          "type": "issue-tracker"
        },
        {
          "url": "https://gitbox.apache.org/repos/asf?p=commons-io.git",
          "type": "vcs"
        },
        {
          "url": "https://builds.apache.org/",
          "type": "build-system"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/commons-user/",
          "type": "mailing-list"
        },
        {
          "url": "https://www.apache.org/",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.core/jersey-client@2.37?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.core",
      "name": "jersey-client",
      "version": "2.37",
      "description": "Jersey core client implementation",
      "hashes": [
        {
          "alg": "MD5",
          "content": "943853c857aba9229eca9c6dc8530b15"
        },
        {
          "alg": "SHA-1",
          "content": "4b6e60e10c57e72c8315196047d7193d7e1fd934"
        },
        {
          "alg": "SHA-256",
          "content": "cf184708d0193389d10c978539b2ff9f1a72ce3e49ad315b905416160b81f251"
        },
        {
          "alg": "SHA-512",
          "content": "99abc75803098319db7938b9f61e9475ee367f11a0d08a816d4ae40d7ebcf52aa655c2f5dc065bbc6d3684ca8cd7b24522250bc5c0b77126ccf217962b7920fe"
        },
        {
          "alg": "SHA-384",
          "content": "b04bc645cec07a84a3bae0b0c727774982d493355adb487978d2295ec78882f11a58662a9ef658387c5d7d22467d2533"
        },
        {
          "alg": "SHA3-384",
          "content": "7ecaca4ab3174ada14201262e829ba2205242505b5c5d0f388b3756ffdfaa16f9991b2ec154ecf777aec1df0b75d6534"
        },
        {
          "alg": "SHA3-256",
          "content": "6ec3c24a77694652859b4b697f64f8dbd1d9e0a9063e2996265b6dd921598b37"
        },
        {
          "alg": "SHA3-512",
          "content": "ecad7dfed92edc07259c93e0deacc1157dcfd32b6f4a17b75038042169a5b86eb6da45bdaf0e0e2116c46af33ad12393ad168bc6c352c7f684325e085ca09e42"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.core/jersey-client@2.37?type=jar",
      "externalReferences": [
        {
          "url": "https://www.eclipse.org/org/foundation/",
          "type": "website"
        },
        {
          "url": "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/",
          "type": "build-system"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey",
          "type": "vcs"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@2.37?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.containers",
      "name": "jersey-container-servlet",
      "version": "2.37",
      "description": "Jersey core Servlet 3.x implementation",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8e81a42bc0826aa6c88d3d6570c8df41"
        },
        {
          "alg": "SHA-1",
          "content": "b0df703c850f1410d1c1d2db162f9ac9b297655d"
        },
        {
          "alg": "SHA-256",
          "content": "37fadb8e6e5acfd23716d63eccaf38351bd601036ec7f3207481667f77e89d71"
        },
        {
          "alg": "SHA-512",
          "content": "8a33be71b029ca2062502919f358380ca8aae0856413ddd1f6f56513847ab60eb4849e6e8906bf5bbb918b75a10124953352917601c4b49ad0522f0bab27653b"
        },
        {
          "alg": "SHA-384",
          "content": "832ec315095b5dab1f8dd0581e5c4250ee0f46df4998b33c7c9a7639687d6667ece11deb171326ee86575f3e078be6d0"
        },
        {
          "alg": "SHA3-384",
          "content": "ded9f27b0ca4ba11a8b3f77849cb80b0f2827bcc5d311253d2481b74924a6fc16875196b60195e9023c7d8b6d31400d5"
        },
        {
          "alg": "SHA3-256",
          "content": "2206828d0af0f63423394629a3701c1218aee3fafda10436f3f6bbae945c9d51"
        },
        {
          "alg": "SHA3-512",
          "content": "fe4915f412a8e97e7b4f55bf72574effde6e505e1c5ae94b251a947b2e4b622080b4e3ebde4d4823ef889841af233b7e4d5e33a98f4cda4d36f8e17f07d18453"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@2.37?type=jar",
      "externalReferences": [
        {
          "url": "https://www.eclipse.org/org/foundation/",
          "type": "website"
        },
        {
          "url": "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/",
          "type": "build-system"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey",
          "type": "vcs"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet-core@2.37?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.containers",
      "name": "jersey-container-servlet-core",
      "version": "2.37",
      "description": "Jersey core Servlet 2.x implementation",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9683574443dc7dc35398938cfce15b66"
        },
        {
          "alg": "SHA-1",
          "content": "99ab8f431406a5115cb11684ec81ee2b472d4ec9"
        },
        {
          "alg": "SHA-256",
          "content": "40233b885c46401041539832ad5ae7fd69f6d330ff4f0622d282f7fa9fc2d023"
        },
        {
          "alg": "SHA-512",
          "content": "c824befe3af01a1086a221bd19d71352b4ea056b3d4290719e709eea809cfd56af407704c4b07e66242655bc39cf49760153568c50ba72a66c569821141b30bd"
        },
        {
          "alg": "SHA-384",
          "content": "4d68a8c4f5507cc3cc12fb4eafdf87aeed96b7ed2463af962a5f30387e058fdf9f666b628efb4131eef2b6c39c80ec8c"
        },
        {
          "alg": "SHA3-384",
          "content": "2377f8fe455d5c3ec49d8c1206b4b4f78ae5e7434226a6e19d916f5d9b7da383236a00b9ad1e01b4c120f5ec2edd569c"
        },
        {
          "alg": "SHA3-256",
          "content": "28b35e18fe4642366865c5fd46631fbc29e97ba7b46b7f4bbbd69c4ce8a5a71f"
        },
        {
          "alg": "SHA3-512",
          "content": "d4c057a21e97df8937e011072ee88013c8d04e643144250c460f44fed91a33bb536469b013b30bcddefd2ed250cf6f71213e78e61c28a9028f5758de8f057e30"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet-core@2.37?type=jar",
      "externalReferences": [
        {
          "url": "https://www.eclipse.org/org/foundation/",
          "type": "website"
        },
        {
          "url": "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/",
          "type": "build-system"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey",
          "type": "vcs"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.media/jersey-media-json-jackson@2.37?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.media",
      "name": "jersey-media-json-jackson",
      "version": "2.37",
      "description": "Jersey JSON Jackson (2.x) entity providers support module.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "af664a3302580640e9f917b2f1baee55"
        },
        {
          "alg": "SHA-1",
          "content": "e795ead3dc432e94ba2471ab7ca1580b6f792435"
        },
        {
          "alg": "SHA-256",
          "content": "698276d9e3eeb30110d0bf2937d5c984aa2e7591b2b5cd248ab85e417c2dd289"
        },
        {
          "alg": "SHA-512",
          "content": "dcae22c89a150f8d23ab2b63ace40186aeecf20dc40699bc9b0f81badceff4a0f2ed1fbfbad0ab2a5256adeee085d8117f46edc516a5a0f9a13a70df27ffb5c5"
        },
        {
          "alg": "SHA-384",
          "content": "a6474116acb04f376dd2421188eed512fab81188eee99b1eae46da0b9da166ac8a703b808d067db44678f1dcd35988e4"
        },
        {
          "alg": "SHA3-384",
          "content": "5a1a788e931b448fa60d0f0265fb7fc9eb2c8451ffedbfe8e558a53151f09e4bab03a3f22517948d41be48cd845a9857"
        },
        {
          "alg": "SHA3-256",
          "content": "a782db2450231b3c1f7a91399c6dfe41d2571384781a208cc2437ccb2a80b5f5"
        },
        {
          "alg": "SHA3-512",
          "content": "6376ac8620fe771f80ee96ac63b80d87a02d870f1441a8b35dbe667e575f25d630bcebca7147d20b744b7eb3dd483cb817f5029330316c94cb92d4a68e43df64"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "name": "The GNU General Public License (GPL), Version 2, With Classpath Exception",
            "url": "https://www.gnu.org/software/classpath/license.html"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.media/jersey-media-json-jackson@2.37?type=jar",
      "externalReferences": [
        {
          "url": "https://www.eclipse.org/org/foundation/",
          "type": "website"
        },
        {
          "url": "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/",
          "type": "build-system"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey",
          "type": "vcs"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.ext/jersey-entity-filtering@2.37?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.ext",
      "name": "jersey-entity-filtering",
      "version": "2.37",
      "description": "Jersey extension module providing support for Entity Data Filtering.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "95726fc66aadc90a0df30c372f9803a9"
        },
        {
          "alg": "SHA-1",
          "content": "f6c5ff69a39c2b75011e06c6bab151b128a50254"
        },
        {
          "alg": "SHA-256",
          "content": "8331b39dd307059798212f59e7110781da4849f63dad36d00ff84f601366a79a"
        },
        {
          "alg": "SHA-512",
          "content": "cae4413928463067e91654af5872258200def796c55c324d22e0334f8411cf7ff81f39b8a401215f243c7fa01c55e0f6789f0469caa4164fdedbe286bf549b89"
        },
        {
          "alg": "SHA-384",
          "content": "33a7fdb8e12a6a07d3feabac2ebeddcb3b1e51a05001b02dbb59ba6bbbf25e9914ca74a3ecfc20310de8bd18198c9ed2"
        },
        {
          "alg": "SHA3-384",
          "content": "a0f7e2ea50ff15c1d1fa1cd6b8550ea03a3b97857ccda08501c43a95c170794f44570c0780d232d5786f6275517eef01"
        },
        {
          "alg": "SHA3-256",
          "content": "a76d3261bae7ee6bca8b414f5b16456e3f664a4ec6756a7399f0b0e15d8249a7"
        },
        {
          "alg": "SHA3-512",
          "content": "c4bceaff2c8ab1ab0325f6512564ba8400c76b4e4f1fd0b0f7a63aeb81acfaa240ac20af0f0eac32f331584e085006e31a6924a59fac8659d141185fe1fe28b4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.ext/jersey-entity-filtering@2.37?type=jar",
      "externalReferences": [
        {
          "url": "https://www.eclipse.org/org/foundation/",
          "type": "website"
        },
        {
          "url": "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/",
          "type": "build-system"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey",
          "type": "vcs"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations@2.13.3?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.module",
      "name": "jackson-module-jaxb-annotations",
      "version": "2.13.3",
      "description": "Support for using JAXB annotations as an alternative to \u0022native\u0022 Jackson annotations, for configuring data-binding.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "094751331b23fbd1cbd8a1bcece192ff"
        },
        {
          "alg": "SHA-1",
          "content": "1dba7b89605c64026f60ccf1116d3766039fcab0"
        },
        {
          "alg": "SHA-256",
          "content": "fdf14156e6ea561f8ae8e23a896bf79ad8a8fcf1aa52190b2acc565418848898"
        },
        {
          "alg": "SHA-512",
          "content": "a8debb5e83fa52d59cccd5958cf57e35bbc05beafc8a26bc2d204a4963db8c805dbff3a47c081159c3a959bbbaf6522785e327b27f268a4983af2d485871bfbd"
        },
        {
          "alg": "SHA-384",
          "content": "55f3858140f83bf9be335b95d2dd240c100992d93247ea77fca8183e6cf8e77a5fc05919d1f6e2c80115d0af08609712"
        },
        {
          "alg": "SHA3-384",
          "content": "a4be3faa0e2394dc6aaa5a608e59dab08a778ea59ea93665adf209128e1168e539fd23873d055c2e481111e7d9abdc9a"
        },
        {
          "alg": "SHA3-256",
          "content": "b7514030593e4f776d80e6a2ce728e66bd3118601e56e9195bf3edfd020f8e88"
        },
        {
          "alg": "SHA3-512",
          "content": "6eb87f65dc1ab1aded8d35d7b5c77ad7709c9f731d84d9b9eb99716167202e47d32e1f0ff2336566e51a5e2ebd5b92930853832856b94621055448217ffee282"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations@2.13.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-modules-base/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/FasterXML/jackson-modules-base",
          "type": "vcs"
        },
        {
          "url": "http://fasterxml.com/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.activation/jakarta.activation-api@1.2.1?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.activation",
      "name": "jakarta.activation-api",
      "version": "1.2.1",
      "description": "${project.name}",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9b647398add993324d3d9e5effa6005a"
        },
        {
          "alg": "SHA-1",
          "content": "562a587face36ec7eff2db7f2fc95425c6602bc1"
        },
        {
          "alg": "SHA-256",
          "content": "8b0a0f52fa8b05c5431921a063ed866efaa41dadf2e3a7ee3e1961f2b0d9645b"
        },
        {
          "alg": "SHA-512",
          "content": "c60edc99f119b9e0df0cf527e2512f2b7ab9db0e17c54e83850695f80f652c981eaae90a296db671cf7ed88a044c150224e030df333feb30f346e8a31fb794c6"
        },
        {
          "alg": "SHA-384",
          "content": "07422d64a103aacb8956c2067175f2cc257494d2cc8dbde29ddf8d93778a2d4b3903565b17173a0b5230b59d535bd474"
        },
        {
          "alg": "SHA3-384",
          "content": "fe6be5e1fb1c0ee5236b2866c1e5058c84043fb4dc3dd5ad8f04e61c01c019c96e92ffdf1de0eaf7e657b2c02c6d898e"
        },
        {
          "alg": "SHA3-256",
          "content": "880a91ff9e978ac9208c84babd820dc2ded42e601d8a17688eb30883b598dec0"
        },
        {
          "alg": "SHA3-512",
          "content": "91c0b8cb956bdb06e79738a9db624022887b3d83838b708dd3c654f231ab6f9b4a27be2556fd14683cd6158bf8534b96acd2481054e0c946d6e9f641cc5af55b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.activation/jakarta.activation-api@1.2.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/jaf/issues/",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jaf",
          "type": "vcs"
        },
        {
          "url": "https://www.eclipse.org",
          "type": "website"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.media/jersey-media-multipart@2.37?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.media",
      "name": "jersey-media-multipart",
      "version": "2.37",
      "description": "Jersey Multipart entity providers support module.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "da2fcac3b2a20413b70b01e596346916"
        },
        {
          "alg": "SHA-1",
          "content": "bdf05a488c39655d4137f53a8c11118da7604dbb"
        },
        {
          "alg": "SHA-256",
          "content": "b94001e790976897c9b915a31f79167ef8bac3ed00977e208a5990f769711c32"
        },
        {
          "alg": "SHA-512",
          "content": "e59376490f0669c418a9389a16a900393b765c1a14cef8b8854100254c9afec9af41d77241aaaba62a272a7004dbd2d0f21376d02a80b39c5551dbc7a7436d9b"
        },
        {
          "alg": "SHA-384",
          "content": "5032f1099f61c952088d593594e20e3252b454d7c31322b13169efaf6eeda60cfa79098c0d9745ac6606fc53bffcce52"
        },
        {
          "alg": "SHA3-384",
          "content": "4dc92b71875ce172cd4bc49858b1db1410e1b8afb4e9791ecc5e7224e8d71e2afb58e64434b47cce8c6b2c64079394f9"
        },
        {
          "alg": "SHA3-256",
          "content": "c180e6cfa9d3d452193f8d21294556780f68fc5583089568a54ee9c61d92a9b0"
        },
        {
          "alg": "SHA3-512",
          "content": "1210c8c6c4c5f3ed910af33f4c51d120d20a0fd3568179cc62cb5bb694a28366b03834f28fbff3d248ae0c1608921fd9604620a5edde1395cb8fb7a0f31aaeaf"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.media/jersey-media-multipart@2.37?type=jar",
      "externalReferences": [
        {
          "url": "https://www.eclipse.org/org/foundation/",
          "type": "website"
        },
        {
          "url": "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/",
          "type": "build-system"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey",
          "type": "vcs"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jvnet.mimepull/mimepull@1.9.13?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.jvnet.mimepull",
      "name": "mimepull",
      "version": "1.9.13",
      "description": "Provides a streaming API to access attachments parts in a MIME message.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8f213b6360a3efd030cf48ad45edaade"
        },
        {
          "alg": "SHA-1",
          "content": "a4f12d0da986cae55dd5c4a735b4fefc700eb266"
        },
        {
          "alg": "SHA-256",
          "content": "5518bd3c5d88bea3b303952b22618313d6bf0ca7f131f78368108a04ebba3f17"
        },
        {
          "alg": "SHA-512",
          "content": "7a9e6946db77a24c6c78afa2cf1173006742fb7caaec94bc27510b60d731eb6f8fe1395eb31ab52854aa3479ba9258656986e4cc7009f1e0c56533fa9e22244f"
        },
        {
          "alg": "SHA-384",
          "content": "8c6516e08603a372e89b32c826a710ecb2333b40718ec99aac4cf0b7ad049769e62cff4c1336fa1d53be930c04b3f162"
        },
        {
          "alg": "SHA3-384",
          "content": "53a7f9d0fcf0fec25fac06c1413933d8a4d279d445e355a2de9b0566aa30ced0559d89d99e5452fee7d96b1aa0556bb6"
        },
        {
          "alg": "SHA3-256",
          "content": "c2563c0d7228868b88a699fc2460ac1c48bb9fad01adace21d8d9a47f95c0688"
        },
        {
          "alg": "SHA3-512",
          "content": "cba11d011018bf1259c401a5a87bf4461934f2f0531f0ba240d86a1a8672c70815cec79924e686b596d87673527bdefda9a555e89e53ac1da072b3e8eb07d28b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.jvnet.mimepull/mimepull@1.9.13?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/metro-mimepull/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/metro-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/metro-mimepull",
          "type": "vcs"
        },
        {
          "url": "https://www.eclipse.org",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@2.37?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.inject",
      "name": "jersey-hk2",
      "version": "2.37",
      "description": "HK2 InjectionManager implementation",
      "hashes": [
        {
          "alg": "MD5",
          "content": "dd81e5e7229382b9c71677e5956c48f0"
        },
        {
          "alg": "SHA-1",
          "content": "7d6ab3a7f325acb6432e9e7b12d1b4a2f037614b"
        },
        {
          "alg": "SHA-256",
          "content": "cb6714951397af17f2795e119ee8a5e954b9e3e4feeb140ece5b80137fb8e204"
        },
        {
          "alg": "SHA-512",
          "content": "51bc58185227b3dd8bd34c9e0fe3df641607bc4d776ea1680f348ae48ea904fe09f87588bdae0ed671e7b885fc84ae5e2d9701c7413b64d1865995d42a4e7903"
        },
        {
          "alg": "SHA-384",
          "content": "7bc74c3e4fafedfea973b316d1bc4ea4290dd8ed5c916c11931931ad963e4032c903981f850335f43ca3fea100c18ee6"
        },
        {
          "alg": "SHA3-384",
          "content": "45ed3ba874a44343c82f47b5a3fb9d235e9990126c6622903e9d4ac8bc746748ca61a6e33112b7f96ccdeca9beee762d"
        },
        {
          "alg": "SHA3-256",
          "content": "80bd7791cec813c560b9d4e8d2e78a8205a11dbf2e627905826761c3fe52adf4"
        },
        {
          "alg": "SHA3-512",
          "content": "93023eb4755579c13ac67816059a3cff3f4649e73e2981c8b1cb48c84a55e2286869d394616ac44f97b0c0a7e658c2ed4954783a343f25ba4ebef67e053e100a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@2.37?type=jar",
      "externalReferences": [
        {
          "url": "https://www.eclipse.org/org/foundation/",
          "type": "website"
        },
        {
          "url": "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/",
          "type": "build-system"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey",
          "type": "vcs"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.hk2/hk2-locator@2.6.1?type=jar",
      "publisher": "Oracle Corporation",
      "group": "org.glassfish.hk2",
      "name": "hk2-locator",
      "version": "2.6.1",
      "description": "${project.name}",
      "hashes": [
        {
          "alg": "MD5",
          "content": "dfd358720393d83b01747928db6e3912"
        },
        {
          "alg": "SHA-1",
          "content": "9dedf9d2022e38ec0743ed44c1ac94ad6149acdd"
        },
        {
          "alg": "SHA-256",
          "content": "febc668deb9f2000c76bd4918d8086c0a4c74d07bd0c60486b72c6bd38b62874"
        },
        {
          "alg": "SHA-512",
          "content": "e2c87a265f114042f4c04397db4adca7291fd68e08e97129576ceb603287b57ccf5b03d0c285727ebb8cd7f88009280bdeab4254475d59da1ac41ba57b7cdecb"
        },
        {
          "alg": "SHA-384",
          "content": "05afff9ebfdbdaed71770a58fe334751b9ac7476eb4114e08fc376bf4e16226b5016784c99c3dd8cb04c79d954068402"
        },
        {
          "alg": "SHA3-384",
          "content": "6d7b53bb3939b45c75ef11a899bde1b7acf6ef1e3f3285687060c830505e540f1843d4f631b949fc8727c2a58cf0cfda"
        },
        {
          "alg": "SHA3-256",
          "content": "20def735fc2d01276b1c9e0961c68aac17722eff6e224ca43fb062ba592a2131"
        },
        {
          "alg": "SHA3-512",
          "content": "07822cb6669f8387a4b56cc28709347197b1d4c3ac36e2cd8f2e5dc36d50937aeabdc1dea47b8028d0e91a700aeed6d18066280b66101a43bb4ca00f6ca2181f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.hk2/hk2-locator@2.6.1?type=jar",
      "externalReferences": [
        {
          "url": "http://www.oracle.com",
          "type": "website"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@2.6.1?type=jar",
      "publisher": "Oracle Corporation",
      "group": "org.glassfish.hk2.external",
      "name": "aopalliance-repackaged",
      "version": "2.6.1",
      "description": "Dependency Injection Kernel",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0237846ebdaa7db36b356044a373ffba"
        },
        {
          "alg": "SHA-1",
          "content": "b2eb0a83bcbb44cc5d25f8b18f23be116313a638"
        },
        {
          "alg": "SHA-256",
          "content": "bad77f9278d753406360af9e4747bd9b3161554ea9cd3d62411a0ae1f2c141fd"
        },
        {
          "alg": "SHA-512",
          "content": "2d9e5395ba887fa5bb6a8209b731292d440f5c1db2fccaf56c41b1f1d9f774733da28aa8b9b769e765fe62f3640d7bcb2cf6140f0044a8b576e9e45144038c46"
        },
        {
          "alg": "SHA-384",
          "content": "f481e2a4e18308a1a0bd85e79f95711434436fa69a504fe98a3d7ea899eaed505a5cb2bfe08f41d1b2af56e150ec0741"
        },
        {
          "alg": "SHA3-384",
          "content": "df0d777477b068b3a3a6d368b8a647401f1531fd4bdce623c22b06b5fb6153cbeccaec9afcafb1c65efbdc49b73399ea"
        },
        {
          "alg": "SHA3-256",
          "content": "7c15e6095397160fe1c26a56964a42b85e23062644866a9ca93f6c24ccfe5212"
        },
        {
          "alg": "SHA3-512",
          "content": "da354a243056157b800aae44d0a6b9697399a37f3ea805ec192debd47f9ea493e224794a392786d54608324a01b6e1745210ffe4d8ef1e956b941adfe820fe52"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@2.6.1?type=jar",
      "externalReferences": [
        {
          "url": "http://www.oracle.com",
          "type": "website"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.hk2/hk2-api@2.6.1?type=jar",
      "publisher": "Oracle Corporation",
      "group": "org.glassfish.hk2",
      "name": "hk2-api",
      "version": "2.6.1",
      "description": "${project.name}",
      "hashes": [
        {
          "alg": "MD5",
          "content": "23e8c18dae0c7b776bed756763d5153f"
        },
        {
          "alg": "SHA-1",
          "content": "114bd7afb4a1bd9993527f52a08a252b5d2acac5"
        },
        {
          "alg": "SHA-256",
          "content": "c2cb80a01e58440ae57d5ee59af4d4d94e5180e04aff112b0cb611c07d61e773"
        },
        {
          "alg": "SHA-512",
          "content": "9abe9f78d7f6c805b6c7b515579230e5fa573abbcd818bed56068080d6458608e2e99d5937eb959cf1e4f4cfdc4f790059dfc1231313cd8f30aaefbf518eb1c7"
        },
        {
          "alg": "SHA-384",
          "content": "2236ca10af39c4f4f6f1ac63c3652eaa4124bce8f557f8ebaa78576e00c25b986ee9d7e417db6edb9a06aa46b36f4d24"
        },
        {
          "alg": "SHA3-384",
          "content": "a836a3bdd7e94c1c69fe3aa7692989b404f3e249224e70382f4ab88d3ef64c51b57a539a7fc9253f93d43665d7de70c3"
        },
        {
          "alg": "SHA3-256",
          "content": "422eb417b817a7e9af62e36c6657fc9e10b461df59985f436970d75e9db4ca04"
        },
        {
          "alg": "SHA3-512",
          "content": "489625c546c34b7c6e395522843be55419706c3a951bc4e494002853dc913e175fbf3a6b7acb4ba581fd6995b56c2cc1431055e5b5416f71ea5519a0b8d5ce56"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.hk2/hk2-api@2.6.1?type=jar",
      "externalReferences": [
        {
          "url": "http://www.oracle.com",
          "type": "website"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.hk2/hk2-utils@2.6.1?type=jar",
      "publisher": "Oracle Corporation",
      "group": "org.glassfish.hk2",
      "name": "hk2-utils",
      "version": "2.6.1",
      "description": "${project.name}",
      "hashes": [
        {
          "alg": "MD5",
          "content": "75ccb55538a77bf878996497ffeb86f3"
        },
        {
          "alg": "SHA-1",
          "content": "396513aa96c1d5a10aa4f75c4dcbf259a698d62d"
        },
        {
          "alg": "SHA-256",
          "content": "30727f79086452fdefdab08451d982c2082aa239d9f75cdeb1ba271e3c887036"
        },
        {
          "alg": "SHA-512",
          "content": "8da7cd88de45270b1fcfd2c471ae092b3972af78a6e0ecc76ed4ac10b6bd6712d2a538bd163a457f21cea4e7e5c52f547108f44aaa791ed0fd069f697f1282c1"
        },
        {
          "alg": "SHA-384",
          "content": "94fb55c1f57b96fd84e717fbf3c254f16e2308bc33976addb71d26bf367b7c2ec63e657a953f30f55d7046dd07510e50"
        },
        {
          "alg": "SHA3-384",
          "content": "b2d1842c0e31c8a83179b3a4d8aa08953747a868d8e1d599201feb8cc3f6e694adcd355581dc58bcad7cec515898eb7e"
        },
        {
          "alg": "SHA3-256",
          "content": "4169734272046ce681790cbbb553652c3ada2af1a5201a2ab9ab6210451e3e70"
        },
        {
          "alg": "SHA3-512",
          "content": "f2bea2fee534c92fc6ae2322696ac97d7e62654cb7ce635342c7f0234d0562f1f8537677a0263d9a76bdaeb57248d37bce537f9b36506db75d0e31024d6e8789"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.hk2/hk2-utils@2.6.1?type=jar",
      "externalReferences": [
        {
          "url": "http://www.oracle.com",
          "type": "website"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar",
      "publisher": "Oracle Corporation",
      "group": "javax.xml.bind",
      "name": "jaxb-api",
      "version": "2.3.1",
      "description": "JAXB (JSR 222) API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "bcf270d320f645ad19f5edb60091e87f"
        },
        {
          "alg": "SHA-1",
          "content": "8531ad5ac454cc2deb9d4d32c40c4d7451939b5d"
        },
        {
          "alg": "SHA-256",
          "content": "88b955a0df57880a26a74708bc34f74dcaf8ebf4e78843a28b50eae945732b06"
        },
        {
          "alg": "SHA-512",
          "content": "93a47b245ab830d664a48c9d14e86198a38809ce94f72ca66b3d68746ae1d7b902f6fef2d1ac1a92c01701549ae80a07db69bd822ffd831a95d8dbffad435790"
        },
        {
          "alg": "SHA-384",
          "content": "1eb2d7f307bda8cbf6a4ab5b2b97d830d33ca48ad94eb4bb1cbce860c54fca96285dbcb1ce9b164dbf37d4475f9a198f"
        },
        {
          "alg": "SHA3-384",
          "content": "8df7409d3f60888f3a80f4d49af66c2cab6dc9f00e79c87c17703faad19d8ba6c8fc96ad897434170ce2686952921cdd"
        },
        {
          "alg": "SHA3-256",
          "content": "41338683257d5ecead579ccc137bdef7bc4fea685d039a3d894e1d6730425e1d"
        },
        {
          "alg": "SHA3-512",
          "content": "3371a96171f69876b0e6b8354674d252680e6d52c509a2645b1a0b0d7f9e176274bde6c89edb40986264733ffb6794cb7b2cba417666b1e82075bd4fd51197b6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "CDDL-1.1"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar",
      "externalReferences": [
        {
          "url": "http://www.oracle.com/",
          "type": "website"
        },
        {
          "url": "https://github.com/javaee/jaxb-spec/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/javaee/jaxb-spec.git",
          "type": "vcs"
        },
        {
          "url": "https://maven.java.net/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.sun.xml.bind/jaxb-core@2.3.0.1?type=jar",
      "publisher": "Oracle Corporation",
      "group": "com.sun.xml.bind",
      "name": "jaxb-core",
      "version": "2.3.0.1",
      "description": "Old JAXB Core module. Contains sources required by XJC, JXC and Runtime modules with dependencies.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1025d4fdc74ea30f15f06203ed9cdf2d"
        },
        {
          "alg": "SHA-1",
          "content": "23574ca124d0a694721ce3ef13cd720095f18fdd"
        },
        {
          "alg": "SHA-256",
          "content": "d2ecba63615f317a11fb55c6468f6a9480f6411c10951d9881bafd9a9a8d0467"
        },
        {
          "alg": "SHA-512",
          "content": "fda51767b175ab5b12c7438b9a11873fe570fa4b5ffa2c3d10eebca9d1dcada6a8ff2d287ac76017c6a546e1f5cb02988fb7e2fac32a4a95ad443e1a1b4ade35"
        },
        {
          "alg": "SHA-384",
          "content": "4e48d9695a5e946aae21f3399a8d9e87ef25154a0bc11744a3cc88ce3287c2b495053001a555b06b6969ecf1445b0d92"
        },
        {
          "alg": "SHA3-384",
          "content": "1ecf6333c5c9dea54c8118d1b4706d1e904bdfbd8759e893e804880ad8285002a5a373840b0f0531032f59a2110520d3"
        },
        {
          "alg": "SHA3-256",
          "content": "b7b2fa99dc3329bb950015c81fe1d2d1abb458e9e60b12b212ad1c9069342407"
        },
        {
          "alg": "SHA3-512",
          "content": "c589a58840423bd22319bf45719559a3928ed8243fea454f6f20d5a2c67746dd40df310ca7c34bfd08da25f9e1ffcbb3385aa6c90b3678faec6bf6a22b257ece"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "CDDL-1.1",
            "url": "http://glassfish.java.net/public/CDDL\u002BGPL_1_1.html"
          }
        }
      ],
      "purl": "pkg:maven/com.sun.xml.bind/jaxb-core@2.3.0.1?type=jar",
      "externalReferences": [
        {
          "url": "http://www.oracle.com/",
          "type": "website"
        },
        {
          "url": "http://java.net/jira/browse/JAXB",
          "type": "issue-tracker"
        },
        {
          "url": "http://java.net/projects/jaxb/lists/users/archive",
          "type": "mailing-list"
        },
        {
          "url": "http://java.net/projects/jaxb/sources/v2/show",
          "type": "vcs"
        },
        {
          "url": "https://maven.java.net/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.sun.xml.bind/jaxb-impl@2.3.6?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "com.sun.xml.bind",
      "name": "jaxb-impl",
      "version": "2.3.6",
      "description": "Old JAXB Runtime module. Contains sources required for runtime processing.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "dd03551237ce80b1f8359a7657a70453"
        },
        {
          "alg": "SHA-1",
          "content": "9614f6c0cfad418a2e91a2b2b5cb98b0a1fcbd03"
        },
        {
          "alg": "SHA-256",
          "content": "5f02b1c45f8193ffa3798f5575ab6244c9ac2a7db4638040939680e994438422"
        },
        {
          "alg": "SHA-512",
          "content": "e05d90890d67fec1ebcb1f5dfbc1ce673d4e4fc0f11eac3dcf189c298816b36c110fb1184ec2816a7daf790ecfc15c03fca7ffc1fdd237efc2cd4f821a1f83e7"
        },
        {
          "alg": "SHA-384",
          "content": "4404633909e05b240a4956048086760666838bea6118af621790619db3c62797a089bc58f57c8db080e1d0d413604e5d"
        },
        {
          "alg": "SHA3-384",
          "content": "1e9e814a7effe1b866a06fd15625b338374cf558e097801978b0a93b108f302edda077aa58ff3fc13f9def545fec86d5"
        },
        {
          "alg": "SHA3-256",
          "content": "e8d9b277aa83d9ad8b2b7ecde16932cb31613cff495833e51f9a89803f38c7c8"
        },
        {
          "alg": "SHA3-512",
          "content": "f74bda346cbf257bb38ec96a40b8d190ea82a9f4ff933dfc88b1acf66d7160febc06ef620cc221749d607345f5ecb8d8596c775bb5c7f13c5640dae8e1320c94"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.sun.xml.bind/jaxb-impl@2.3.6?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/jaxb-ri/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://accounts.eclipse.org/mailing-list/jaxb-impl-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jaxb-ri.git",
          "type": "vcs"
        },
        {
          "url": "https://www.eclipse.org",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/javax.json/javax.json-api@1.1.4?type=jar",
      "publisher": "Oracle",
      "group": "javax.json",
      "name": "javax.json-api",
      "version": "1.1.4",
      "description": "API module of JSR 374:Java API for Processing JSON",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6128da383f9a4a45593650fc263a0998"
        },
        {
          "alg": "SHA-1",
          "content": "c8efa3cfaeee2b05c2dfd54cba21548a081b1746"
        },
        {
          "alg": "SHA-256",
          "content": "0bdb79a0a5e0cce2d8d2d339ad53453cdf90045fe34c5e4b19b064bb1aee5876"
        },
        {
          "alg": "SHA-512",
          "content": "5daa6155f1a9cf34657ed3b0163109dd550a3a8f1ab6b92cdbbe6473dcd6ba77a353272c17546d4f788b87abd5fd3a332a725a6f1b5f99c311dc05f851de2e3e"
        },
        {
          "alg": "SHA-384",
          "content": "67ebbd3a88e00f9723520fa70a63868e0b30f8cc63305a8c5777cea4b4a52b26818dcde9b8e8408b35a98d61b7bd8089"
        },
        {
          "alg": "SHA3-384",
          "content": "cc2797949bde1069ccaad3fc4a15c628dfce02393823bb25ccaae6ffa0d0222b193ccd1e9ff8fc71c98606d173d326bb"
        },
        {
          "alg": "SHA3-256",
          "content": "e4163d03ba00d439137c448baa853ca32543e5ab9873580d6dd3a96cabc0c0db"
        },
        {
          "alg": "SHA3-512",
          "content": "af54fa4e5fb9146097f18a9bc5acd492d118fa8b8ab292a864dcb8d1e37370d68b21f746ede20be060abe7cef6b02b575337445f858fc638485ef81795e7acb9"
        }
      ],
      "licenses": [],
      "purl": "pkg:maven/javax.json/javax.json-api@1.1.4?type=jar",
      "externalReferences": [
        {
          "url": "http://www.oracle.com",
          "type": "website"
        },
        {
          "url": "https://github.com/javaee/jsonp",
          "type": "vcs"
        },
        {
          "url": "https://maven.java.net/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish/javax.json@1.1.4?type=jar",
      "publisher": "Oracle",
      "group": "org.glassfish",
      "name": "javax.json",
      "version": "1.1.4",
      "description": "Default provider for JSR 374:Java API for Processing JSON",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ac67218fb9716fec512be8d0d877bde2"
        },
        {
          "alg": "SHA-1",
          "content": "943f240a509d3c70b448a55c6735591ecbd37c88"
        },
        {
          "alg": "SHA-256",
          "content": "17fdeb7e22375a7fb40bb0551306f6dcf2b5743078668adcdf6c642c9a9ec955"
        },
        {
          "alg": "SHA-512",
          "content": "63f45ca81a86cce050a3096ed6d7eb7e6db7a9251095abfc7badc956e5d0d8f59ffb880b6ade8f461e655cbeac324c7a3c5a01af6e30639a9f0cb8c807552f9d"
        },
        {
          "alg": "SHA-384",
          "content": "afdfb09bce2bf863e68774ed5a66ca36927cb2e8da04c9f1946999528c9e253af3ee2d32c887660fd7a1076b906cd23e"
        },
        {
          "alg": "SHA3-384",
          "content": "d174b22190bb75a23dfce71ef70d692ea00a662aa49b96feb3fb4a7b41241f13fea8f3f3581442b35bfdf9645cac8f99"
        },
        {
          "alg": "SHA3-256",
          "content": "755a7153b6feb575dd105166d615f81064e2d78d43aa497950852f6dcb282bac"
        },
        {
          "alg": "SHA3-512",
          "content": "4a37342f7d9a787f46e4b891b24d3c4162f3d6f1f0985a65a2096355ef87831d608a5e2efac8c321581cbf626255b0e307fb2fcc13d39af9ee1922cf1acec357"
        }
      ],
      "licenses": [],
      "purl": "pkg:maven/org.glassfish/javax.json@1.1.4?type=jar",
      "externalReferences": [
        {
          "url": "http://www.oracle.com",
          "type": "website"
        },
        {
          "url": "https://github.com/javaee/jsonp",
          "type": "vcs"
        },
        {
          "url": "https://maven.java.net/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.swagger/swagger-jersey2-jaxrs@1.6.9?type=jar",
      "group": "io.swagger",
      "name": "swagger-jersey2-jaxrs",
      "version": "1.6.9",
      "description": "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b1057e8dfcfb3ccc1bcc0fcb517fd09d"
        },
        {
          "alg": "SHA-1",
          "content": "9486ba787a93bb2163e44768196a8806ef241544"
        },
        {
          "alg": "SHA-256",
          "content": "9262ae1dce02edffe1cfc14111caa4d89abba3f5c63d21efb778cdbb193b1baa"
        },
        {
          "alg": "SHA-512",
          "content": "febfc0b0fb9d51bfe419addeafb15925971bf22d0bd0720c00972a5d758f14d384c94ae54e0140410da761a0579ff9ac5a806e244a94ede9f530a4fffbb52192"
        },
        {
          "alg": "SHA-384",
          "content": "d85f1d81a029b31b3819df68d7fb9d5e203a36860acef6fbea15b3185fbf7d1337100e3606b47611e27c9326f1406ba6"
        },
        {
          "alg": "SHA3-384",
          "content": "7f6709708a25930693ad1a96fc4be6c9a3921e45dc9a1ebbdb8f331786845c88bc02aa3c4ab017446db6f3b97c1a3d0a"
        },
        {
          "alg": "SHA3-256",
          "content": "322b2dcfed971968c35ce03efd4670670c9be932d245cc0e522d74d90178873d"
        },
        {
          "alg": "SHA3-512",
          "content": "2bd8f633b237d361f066a352ce79223a430d3e0c011df0c51b076005f75109e8d2c80c1b07d851fa34a2d0b227aa2f1da2028b57b282c943852d47979d30f7bb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.swagger/swagger-jersey2-jaxrs@1.6.9?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/swagger-api/swagger-core/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://groups.google.com/forum/#!forum/swagger-swaggersocket",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/swagger-api/swagger-core",
          "type": "vcs"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.swagger/swagger-jaxrs@1.6.9?type=jar",
      "group": "io.swagger",
      "name": "swagger-jaxrs",
      "version": "1.6.9",
      "description": "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/",
      "hashes": [
        {
          "alg": "MD5",
          "content": "505ed756a827ddf0980c19a3405571c1"
        },
        {
          "alg": "SHA-1",
          "content": "07a075e7dd80504de197a61bc7125026a063aef1"
        },
        {
          "alg": "SHA-256",
          "content": "248a050a37fe9d3e6a9b387bf163770cd657aab34bbeafacd84e905a6a7c93e4"
        },
        {
          "alg": "SHA-512",
          "content": "8140db31ab17a06c46755cd4c844fac0846e0b669cd31e7a6898c566467a238e2ffc781598ee959f189f47ea21cfc5dee0cb4950dea5ebcde34b37725197bdc3"
        },
        {
          "alg": "SHA-384",
          "content": "9783418c884b7949bfa166ce408402aebe90c5b242ab4ee3f6c6955180bddbe4a6ac780e6447ba9b8b72b482fb08331e"
        },
        {
          "alg": "SHA3-384",
          "content": "bc8b9d7d56bcd99a7a77c2bb40c5bbbd46bf27fd58248d48cbaafef1bdc9d0b4f68a086d7dea499c102230bde0aea0ff"
        },
        {
          "alg": "SHA3-256",
          "content": "358b7f9e3e66d075b36c08369e70be0a2ca65dd4ca45dd0b24343c08d12a5bd3"
        },
        {
          "alg": "SHA3-512",
          "content": "0ce647fcff06951c29778c1d52f11614eef87c329a9b5bda206de1d5b10b9e66094c903910484ba72198e1eea54c0e4256c5ba92e5c8898ccc684440404f911e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.swagger/swagger-jaxrs@1.6.9?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/swagger-api/swagger-core/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://groups.google.com/forum/#!forum/swagger-swaggersocket",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/swagger-api/swagger-core",
          "type": "vcs"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.swagger/swagger-core@1.6.9?type=jar",
      "group": "io.swagger",
      "name": "swagger-core",
      "version": "1.6.9",
      "description": "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/",
      "hashes": [
        {
          "alg": "MD5",
          "content": "3c6f6c111f64f4228b402898de67845d"
        },
        {
          "alg": "SHA-1",
          "content": "553f8fc8a0ce6a0f5e250791baa832b2a48e24fc"
        },
        {
          "alg": "SHA-256",
          "content": "40fb4c71904947ae47f9ffcfebedefde630d8947e1c1bb66743bbc40f07b9e01"
        },
        {
          "alg": "SHA-512",
          "content": "1bd78079f7f3c3b35f38f583be8a90b59032dab61a058d85c07d0740e596f094eacecadc1984ea119da0726b2b3fe4e76be7895c1ce7c0b090e1c09e0bc228e2"
        },
        {
          "alg": "SHA-384",
          "content": "a26f1d14421308d41cb1111014b2ea2d1d50de4a25d5c4218cba34a01bbbbe686702a52bd411326990cc8d2ee9616087"
        },
        {
          "alg": "SHA3-384",
          "content": "b05279bd89a454998ecdfd16a22db28708109f0ef60ef6b01d5ee05672c8c2ce6b9a31f84acd619274345d5b2d9831a3"
        },
        {
          "alg": "SHA3-256",
          "content": "8343c6bb315c5b10b612a990c9d9e2af3b116c7d4e16752bdeb5c7282dfa0188"
        },
        {
          "alg": "SHA3-512",
          "content": "d6266b071dcfce11dda603af061c1fb9d4d12b7cd01f1abb5643dfcbc0a46c7239e7fcb57ac97d1b8b1e03995fae31d8e6a710c1ed0d74fde2361827773cff86"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.swagger/swagger-core@1.6.9?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/swagger-api/swagger-core/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://groups.google.com/forum/#!forum/swagger-swaggersocket",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/swagger-api/swagger-core",
          "type": "vcs"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.14.0?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.dataformat",
      "name": "jackson-dataformat-yaml",
      "version": "2.14.0",
      "description": "Support for reading and writing YAML-encoded data via Jackson abstractions.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "7c7b82bb5c2332d9df899689bbcb93ef"
        },
        {
          "alg": "SHA-1",
          "content": "06c635ef06d3e4e72a7e9868da41ffa1a0f98d28"
        },
        {
          "alg": "SHA-256",
          "content": "76e8a33ef1f5f8cce9668ebaf8999626846ccacb36dea81bcdaf79e32443de33"
        },
        {
          "alg": "SHA-512",
          "content": "0683b8856249d0b2386116ff011d5b6fadc633ff8c8e081a67a675dc8418bdecac08e1bed40b858bca83fb616e9d3a20b29570b3e827a5b4b8f4f2c51537dfea"
        },
        {
          "alg": "SHA-384",
          "content": "5e60bab63a4400a4082bde06ff2a198de05e8568ac4f4980dc2a89bff8984b31dbbb71d949d5da16ce1c0e9dc3bcc19a"
        },
        {
          "alg": "SHA3-384",
          "content": "b9cbe17158fb25cc1ae7f152e3309f22c7508833126a557d6f835fff7aa0c0dc681608e8249260dcb955f07597167de7"
        },
        {
          "alg": "SHA3-256",
          "content": "cef1405223d82637c14f4362ad0ee77de5d5b2beda66d27b78c2d7abfb6c9fe8"
        },
        {
          "alg": "SHA3-512",
          "content": "ffa4c67983e5d6e441b3068171d26ebe3dec29150f6cd63ea29982ddc2e57260d7f300092be02a09b1b753b8cba0e90068f9d9c332fe215cf07e5f767a3044fd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.14.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-dataformats-text/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-dataformats-text",
          "type": "vcs"
        },
        {
          "url": "http://fasterxml.com/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.swagger/swagger-models@1.6.9?type=jar",
      "group": "io.swagger",
      "name": "swagger-models",
      "version": "1.6.9",
      "description": "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/",
      "hashes": [
        {
          "alg": "MD5",
          "content": "dd4f892aca8bd1c644e387af7f50b6e1"
        },
        {
          "alg": "SHA-1",
          "content": "0c088411568dc0edcb3b3c2248b404e2adc797aa"
        },
        {
          "alg": "SHA-256",
          "content": "cf0b531111ccc02a801379d743c8e33f02fbc790698aa20e62c62f476da8c95a"
        },
        {
          "alg": "SHA-512",
          "content": "b91579db478f822e2860a6e735ea91c42e7621c6b4a9edf311e114c95814ba7c38fd75afcecae0b69dd60dbf4f804f4aa53e602106339128234cef2853e74bc5"
        },
        {
          "alg": "SHA-384",
          "content": "e5ca9a2b4ec3a10a7352dd94bb3b7124a1110fcf9b2467f496a0f9d299dc2fb4d265e84337764ab3e0e5dbe9d6ccea1e"
        },
        {
          "alg": "SHA3-384",
          "content": "0cf2fafab99a677c1de885ab3c2ced387e2cef02171ffdaa4d3390b13249df5a953ae6760df1993438aeb855b6db8d33"
        },
        {
          "alg": "SHA3-256",
          "content": "12f3a02991c0f2854352f44d881b4d9a5d1113a63c5e4ba0efbb68d3a4462b70"
        },
        {
          "alg": "SHA3-512",
          "content": "b3058fc392ecbeeb56a2d8acb62915e288228056a0ed5471fbce50849f69bcb7621f9f597b21afc645c86a59a998a151586e338b1d540e5d5ba276cc4938cf77"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.swagger/swagger-models@1.6.9?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/swagger-api/swagger-core/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://groups.google.com/forum/#!forum/swagger-swaggersocket",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/swagger-api/swagger-core",
          "type": "vcs"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.swagger/swagger-annotations@1.6.9?type=jar",
      "group": "io.swagger",
      "name": "swagger-annotations",
      "version": "1.6.9",
      "description": "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5bd181dbfa4c64eb557a1904f85d7862"
        },
        {
          "alg": "SHA-1",
          "content": "087bcf5951ca8acefa30a2caffc965f2e850eaa9"
        },
        {
          "alg": "SHA-256",
          "content": "7ef85974e5d82fcabd0dabd2c455cd80378b36d774de017ceac842a3a4fa64f8"
        },
        {
          "alg": "SHA-512",
          "content": "aa1ad46ddabb6c37f2b6cde0d3899fd7b067c9482437197c37d29538cba70be167be262e4b532403e64b263b5c9cc5c4346f2357e8c98fe86bf3e4ce6915b0e3"
        },
        {
          "alg": "SHA-384",
          "content": "b03d99e8f891716d15605a13354b0f7453e4bf9d6731db1b15bcae876d4670dd1f57f12fb4b857f2d541ef0605f8a5d6"
        },
        {
          "alg": "SHA3-384",
          "content": "de4b8f982f800ccbd519cd89045de860d071419a7b95fa20776559dfa59923fcc7d6b93cac65e5b3af31862eb54df484"
        },
        {
          "alg": "SHA3-256",
          "content": "3fe57b29810b6d5f2c9edf926857cc88e3919f0a590975d4bde95864b8260fb0"
        },
        {
          "alg": "SHA3-512",
          "content": "558a15217cab67270d765e9e7ca24fe0ccb75aa84e410002427a6432562f8c9ffad6829283245f65be07ba4ce82f2786808d3bd12811bf04bd8f055d703156de"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.swagger/swagger-annotations@1.6.9?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/swagger-api/swagger-core/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://groups.google.com/forum/#!forum/swagger-swaggersocket",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/swagger-api/swagger-core",
          "type": "vcs"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.reflections/reflections@0.10.2?type=jar",
      "group": "org.reflections",
      "name": "reflections",
      "version": "0.10.2",
      "description": "Reflections - Java runtime metadata analysis",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1d0070839d825f57fe6f4d8e2a82989b"
        },
        {
          "alg": "SHA-1",
          "content": "b638d7ca0e0fe0146b60a0e7ba232ad852a73b31"
        },
        {
          "alg": "SHA-256",
          "content": "938a2d08fe54050d7610b944d8ddc3a09355710d9e6be0aac838dbc04e9a2825"
        },
        {
          "alg": "SHA-512",
          "content": "d04700d4b6d3f28faa611e10ce863df1d6c82dfc6dd1b27cb910e44c19089ca08bef939e2bca7bc79274836f8e9d8801c4326232d24a38dba0a4893a20c7c42c"
        },
        {
          "alg": "SHA-384",
          "content": "2604ea7e2330b2c60dbc4177076b50b28a056083fe34cca9005b63f7efbba4d8513d1f21b56c296a73292b2003ce1722"
        },
        {
          "alg": "SHA3-384",
          "content": "7b5b12126cc3efb23335cdf73e01b19d714c17072038dc03534f1f596f2cdbe4b8d224e806326b1e7bd82a1eaf221a54"
        },
        {
          "alg": "SHA3-256",
          "content": "b1c978e8eb1bc3826d310deba7adfd02f0a90978dcd67867aa3f373a196e4caf"
        },
        {
          "alg": "SHA3-512",
          "content": "023c9a40f84b7f822f6d62f6a6ea3fc09ebcd489916085cb501818cd2c6af69e2561b2217c6d5d2cb8d99d87399343df2f863aa919e80d0a49502a5362f8744c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "WTFPL",
            "url": "http://www.wtfpl.net/about/"
          }
        },
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.reflections/reflections@0.10.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/ronmamo/reflections/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/ronmamo/reflections/issues",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.yaml/snakeyaml@1.33?type=jar",
      "group": "org.yaml",
      "name": "snakeyaml",
      "version": "1.33",
      "description": "YAML 1.1 parser and emitter for Java",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e0164a637c691c8cf01d29f90a709c02"
        },
        {
          "alg": "SHA-1",
          "content": "2cd0a87ff7df953f810c344bdf2fe3340b954c69"
        },
        {
          "alg": "SHA-256",
          "content": "11ff459788f0a2d781f56a4a86d7e69202cebacd0273d5269c4ae9f02f3fd8f0"
        },
        {
          "alg": "SHA-512",
          "content": "787b72aebb685689ab379ed8f238fc2f4175bb82d285909e39e7ff1ee1b9e64ad8878f4685dadde274f950b0dc77dca3082a52921c11094aa2a535672ae4f33c"
        },
        {
          "alg": "SHA-384",
          "content": "9f0a0a35df2b339830b9e78294634ea894e7096e01709c82d965e24a9fa9ac6ee15edbbbf23368dcd57741de5bf23086"
        },
        {
          "alg": "SHA3-384",
          "content": "91d8fd581d60be4090d3b522d8c119c12449cff2ce6c436d0e53977e1c9fea8686b2b360fb15f4c3507e4f243d7d6170"
        },
        {
          "alg": "SHA3-256",
          "content": "7dcf0429ecb923a66e00ec633bafeb297e3b90e1cc2be0f85443fd61367f355a"
        },
        {
          "alg": "SHA3-512",
          "content": "59b32910dddf63475893f7c830d58ca320cd6183704d80b8111cee7bb1674f97f5699c8ac52f905a5b9a20128b9e2b6a26a07490f217033c858d9c358bedcafc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.yaml/snakeyaml@1.33?type=jar",
      "externalReferences": [
        {
          "url": "https://bitbucket.org/snakeyaml/snakeyaml/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://bitbucket.org/snakeyaml/snakeyaml/src",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.h2database/h2@2.1.214?type=jar",
      "group": "com.h2database",
      "name": "h2",
      "version": "2.1.214",
      "description": "H2 Database Engine",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "93628fb706e682dd989f697394039025"
        },
        {
          "alg": "SHA-1",
          "content": "d5c2005c9e3279201e12d4776c948578b16bf8b2"
        },
        {
          "alg": "SHA-256",
          "content": "d623cdc0f61d218cf549a8d09f1c391ff91096116b22e2475475fce4fbe72bd0"
        },
        {
          "alg": "SHA-512",
          "content": "fedc464dee11077ea3e95149b3c1a1420d6e432c940ccb8c368633821b29c0e401b711d45f819d1cc3755a54ad05fdd0e8bb6b17853dd15539613f5e2765f359"
        },
        {
          "alg": "SHA-384",
          "content": "a53154e9f52e73228c27602b05f3cc24939dad90cd769f3ba9d3c498b21d53dde054f85f56286a043a941b68ea3ca7fe"
        },
        {
          "alg": "SHA3-384",
          "content": "ac9b13665daa9b745ac1f2584f97623f8323b9966d272c515e51e502f063f0ef2103b2d98bf37e8c35c728a0a597c6c2"
        },
        {
          "alg": "SHA3-256",
          "content": "58e3dd539432b47c8555edf19ef12d78537b9c2f2d775594297ae7a57c97557f"
        },
        {
          "alg": "SHA3-512",
          "content": "30cb7b5fd7bebebfb258a96a6ad5e5d59f68fe16ecf6e5e985dc5b3e7a7319bd5d675e03f7d69a548be07351ba3b25946facbdc3955b8f0bc30edc5c7cc5fd84"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MPL-2.0"
          }
        },
        {
          "license": {
            "name": "EPL 1.0",
            "url": "https://opensource.org/licenses/eclipse-1.0.php"
          }
        }
      ],
      "purl": "pkg:maven/com.h2database/h2@2.1.214?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/h2database/h2database",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.mindrot/jbcrypt@0.4?type=jar",
      "group": "org.mindrot",
      "name": "jbcrypt",
      "version": "0.4",
      "description": "OpenBSD-style Blowfish password hashing for Java",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d2b39d874e0d512f85386a72b0083682"
        },
        {
          "alg": "SHA-1",
          "content": "af7e61017f73abb18ac4e036954f9f28c6366c07"
        },
        {
          "alg": "SHA-256",
          "content": "e183f6f59404fc1e12073cfea4ace7ea103c900463cd21fb609a7c617ecdf624"
        },
        {
          "alg": "SHA-512",
          "content": "95ffe1f6593f83da047ff289a52b5ef73adcaca4a9a990a47744fbd50a52fce39958c17ed393e95d64093b2acbcaba39ba0b5b983a2e0ad98ce5c6e9282a67cd"
        },
        {
          "alg": "SHA-384",
          "content": "66a24af2134e6fcee1f4232c2c4bab43ab97d0c8ffbbc009f9bb0e5ef2a7d8795a6da3c6b47c583675b98036958aa729"
        },
        {
          "alg": "SHA3-384",
          "content": "33cf5e13897f25c525017888e7fcd2faf9a0f25135be03a65dd154feb11455e33c1df31963470b2ecaaba5267f6ad652"
        },
        {
          "alg": "SHA3-256",
          "content": "a347c842385e1d76780f9afe2200a7b9815bcd873b2a9fdd2652d0b0a5e0d324"
        },
        {
          "alg": "SHA3-512",
          "content": "5a71c6f1fde98865302e8c9ee6c99ace9efa220c0193bcdd56423015d1c73e54bd65f19a9a3ba3199b242589eb9ccc96b1d6c0d413387f8e8fbed7c691fc8790"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://www.isc.org/licenses/"
          }
        }
      ],
      "purl": "pkg:maven/org.mindrot/jbcrypt@0.4?type=jar",
      "externalReferences": [
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/djmdjm/jBCrypt.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.nimbusds/oauth2-oidc-sdk@9.43.1?type=jar",
      "publisher": "Connect2id Ltd.",
      "group": "com.nimbusds",
      "name": "oauth2-oidc-sdk",
      "version": "9.43.1",
      "description": "OAuth 2.0 SDK with OpenID Connection extensions for developing client and server applications.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "564a5b104ad66dce737a0e281dac4293"
        },
        {
          "alg": "SHA-1",
          "content": "a25abc8ea0a91296063d55dbb57b698f81a4649c"
        },
        {
          "alg": "SHA-256",
          "content": "65d360ca0d7bb89302a8153c7acb30214d5c027b177c714d72dc05d41f993204"
        },
        {
          "alg": "SHA-512",
          "content": "276fe66a039a84cf8bfd933c617ed871d514fbd8f536477325dceb043e0d42368bad79bb79166ab67c2c8b7abd814572ab5f31d3379fd99a37a039c8acc97062"
        },
        {
          "alg": "SHA-384",
          "content": "619fab2d2c88a7563fdc6d3c1d4af40c54c2aba6bc207cc4941fe02aab8192520900492b3f66aa856f18ac28f19338ba"
        },
        {
          "alg": "SHA3-384",
          "content": "972d1d63142686cde707f10ad672cc4ac771464b3294bef60999d772ce55e7db1cddb13775e7d0fa05ce8e271b046857"
        },
        {
          "alg": "SHA3-256",
          "content": "4ff33dc5ab1b7b6abb40555fe50450b3f871cba3f04f320d520913679e51aa72"
        },
        {
          "alg": "SHA3-512",
          "content": "7d9129c7988a6dab04f82167d90e7d3612e02bd9d1f06a1ac8449d2536eef2a7fd4a744d6a64a4ee85cc7e4e8e92ce981de685d99b40ec168c37cb507d44ebf0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.nimbusds/oauth2-oidc-sdk@9.43.1?type=jar",
      "externalReferences": [
        {
          "url": "https://connect2id.com",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar",
      "group": "com.github.stephenc.jcip",
      "name": "jcip-annotations",
      "version": "1.0-1",
      "description": "A clean room implementation of the JCIP Annotations based entirely on the specification provided by the javadocs.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d62dbfa8789378457ada685e2f614846"
        },
        {
          "alg": "SHA-1",
          "content": "ef31541dd28ae2cefdd17c7ebf352d93e9058c63"
        },
        {
          "alg": "SHA-256",
          "content": "4fccff8382aafc589962c4edb262f6aa595e34f1e11e61057d1c6a96e8fc7323"
        },
        {
          "alg": "SHA-512",
          "content": "02fcd16a30d0e68b3e9e4899731181c6abb7117baa15c096ca940e01dde08bb86101cbeae552c497f8a90d923b5fa2f2b6f3850baf8dc94dbd399887924a9069"
        },
        {
          "alg": "SHA-384",
          "content": "88b0ecfde391a3d8468349c70e1539569768dfac3233dfe0b4660904df04e6c6bf26ed9c0784b9b22c122c3448e2a6b6"
        },
        {
          "alg": "SHA3-384",
          "content": "487b53f48b55b98a61ae60abedc43543887944867aa6bcb78d5ed46e2d0d7c19510c5fcadc362d939313feafdcfc55e1"
        },
        {
          "alg": "SHA3-256",
          "content": "3e79c8f58865d2d58a5311a8bb45772007f07e7f3ed2780784d1e4382dc934d0"
        },
        {
          "alg": "SHA3-512",
          "content": "ff32665e1b6d8176ccc7e8c836ca7343c2603dab053e42d79b4258d51a14ff63933c67d24034169ac91e11ebda21cc2c84a2a540072e656d2a8e6fcea7808421"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/stephenc/jcip-annotations/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/stephenc/jcip-annotations/tree/master/",
          "type": "vcs"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.nimbusds/content-type@2.2?type=jar",
      "publisher": "Connect2id Ltd.",
      "group": "com.nimbusds",
      "name": "content-type",
      "version": "2.2",
      "description": "Java library for Content (Media) Type representation",
      "hashes": [
        {
          "alg": "MD5",
          "content": "135aaa5ebcc12a45f4b3ff08cb6fa46a"
        },
        {
          "alg": "SHA-1",
          "content": "9a894bce7646dd4086652d85b88013229f23724b"
        },
        {
          "alg": "SHA-256",
          "content": "730f1816196145e88275093c147f2e6da3c3e541207acd3503a1b06129b9bea9"
        },
        {
          "alg": "SHA-512",
          "content": "2b3d7dbf102645b1b6c11de967a877eddb95e8d38e4418cf0c4f7112720cab72f8af8a02c1e6a290ac737186bfb57d5c6db907ac6e7580c16c626f02bd7eeae9"
        },
        {
          "alg": "SHA-384",
          "content": "c1cd98d963a191cd18cd3b7352d91e48ce5de7982a77f0cc4660b7281d309673815f41f9b2be397a816b61af87d7661a"
        },
        {
          "alg": "SHA3-384",
          "content": "b171815441fa1c9d8961a4e5de615f8888c23a5bc6c19380b3647ad3676e1aa1ebf7a3b63c3db9225d19249293ec5864"
        },
        {
          "alg": "SHA3-256",
          "content": "10a5860f4da5c00e83300378e3e65f92d70df4b18d2bbc2c3a97c75b7f9c922b"
        },
        {
          "alg": "SHA3-512",
          "content": "bba6d712566f3e63ebcb998ee40b556004c50ac5e2cc818b01e45fd1d23929234ddb57097cc8897835810bba2d7332e0e429d5cb0fc54d5ab9d7e4715f88af17"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.nimbusds/content-type@2.2?type=jar",
      "externalReferences": [
        {
          "url": "https://connect2id.com",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://bitbucket.org/connect2id/nimbus-content-type",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/net.minidev/json-smart@2.4.8?type=jar",
      "publisher": "Chemouni Uriel",
      "group": "net.minidev",
      "name": "json-smart",
      "version": "2.4.8",
      "description": "JSON (JavaScript Object Notation) is a lightweight data-interchange format. It is easy for humans to read and write. It is easy for machines to parse and generate. It is based on a subset of the JavaScript Programming Language, Standard ECMA-262 3rd Edition - December 1999. JSON is a text format that is completely language independent but uses conventions that are familiar to programmers of the C-family of languages, including C, C\u002B\u002B, C#, Java, JavaScript, Perl, Python, and many others. These properties make JSON an ideal data-interchange language.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "20a8427206313ed3aa85cdc47f730415"
        },
        {
          "alg": "SHA-1",
          "content": "7c62f5f72ab05eb54d40e2abf0360a2fe9ea477f"
        },
        {
          "alg": "SHA-256",
          "content": "174a9ad578b56644e62b3965d8bf94ac3a76e707c6343b8abac9d3671438b4b2"
        },
        {
          "alg": "SHA-512",
          "content": "13f4609fe72df98c81f86d25616e5b0ce1426688aa5a9dd953733fa98a8deadb87b3e69a77741dc9d31dd4485265d3b9e4ec71d99346e4a7558f2500f3677714"
        },
        {
          "alg": "SHA-384",
          "content": "1426a97474b44c58d1f30c70afec9dd658207d89ce5067932bb4dbe2ddb31970d31d2b682631e208d4b7f435b97b14aa"
        },
        {
          "alg": "SHA3-384",
          "content": "f80d75137a6ed01e53a7a168a39d33b15c26de832268d61a80affa7f9472639f2b19165fb4fdd1b6cbcc2601cf1b413c"
        },
        {
          "alg": "SHA3-256",
          "content": "60607471f4e886f0959dae77ac61ffd1b5662f9d39bd7efc552290e90e965c38"
        },
        {
          "alg": "SHA3-512",
          "content": "84f2e3c1840bbec18ad0fade94791a759f9a2e0de4dfe3a52fc9a54d2a7cffa94e8645273c7417db7ebd9e3a35884eaa6381ca6a6d5d48eae5bb0563b741247a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/net.minidev/json-smart@2.4.8?type=jar",
      "externalReferences": [
        {
          "url": "https://urielch.github.io/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/netplex/json-smart-v2",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/net.minidev/accessors-smart@2.4.8?type=jar",
      "publisher": "Chemouni Uriel",
      "group": "net.minidev",
      "name": "accessors-smart",
      "version": "2.4.8",
      "description": "Java reflect give poor performance on getter setter an constructor calls, accessors-smart use ASM to speed up those calls.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e5761631acc11ded0255af1249937e85"
        },
        {
          "alg": "SHA-1",
          "content": "6e1bee5a530caba91893604d6ab41d0edcecca9a"
        },
        {
          "alg": "SHA-256",
          "content": "7dd705aa1ac0e030f8ee2624e8e77239ae1eef6ccc2621c0b8c189866ee1c42c"
        },
        {
          "alg": "SHA-512",
          "content": "45405c083334b05efa07572497b9d510ca771af32ce93d960be802216a9714ffff8418384ea48e197d3dfb6ebec4ec3e610155841e8a257a7fb9a4bd6a1b668f"
        },
        {
          "alg": "SHA-384",
          "content": "9f3a75bcd9a9c00dc7437d0dfcf075d411c4bcc125ab6761f0bec3f00eec4d0e5c7d0e7f304f69d3491a12f542ee0823"
        },
        {
          "alg": "SHA3-384",
          "content": "764e26adb705500f3e1a81b8360ce2c9d2c23ec09e3fcc9b673378d5e10fb8846843547ec0c5383e2bed1a20c48aaa43"
        },
        {
          "alg": "SHA3-256",
          "content": "7017996397067155374396bea86ac9871f6c672da91c91faf2ff8aa8b154624d"
        },
        {
          "alg": "SHA3-512",
          "content": "a1050d7f9e728546989c62e1a9ca7b583070012d766e7e77ed0d958a2271cf21326b8ed8d2d4690277e8da5b7ac3599a617ff68418fb5be903f6b59ad21dae8b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/net.minidev/accessors-smart@2.4.8?type=jar",
      "externalReferences": [
        {
          "url": "https://urielch.github.io/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/netplex/json-smart-v2",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.ow2.asm/asm@9.1?type=jar",
      "publisher": "OW2",
      "group": "org.ow2.asm",
      "name": "asm",
      "version": "9.1",
      "description": "ASM, a very small and fast Java bytecode manipulation framework",
      "hashes": [
        {
          "alg": "MD5",
          "content": "54b9f5d15e4877a4ea4cf9ec48e07afa"
        },
        {
          "alg": "SHA-1",
          "content": "a99500cf6eea30535eeac6be73899d048f8d12a8"
        },
        {
          "alg": "SHA-256",
          "content": "cda4de455fab48ff0bcb7c48b4639447d4de859a7afc30a094a986f0936beba2"
        },
        {
          "alg": "SHA-512",
          "content": "0a586544f3053ec8425d252b6f7e3e6772f010eb81d75020b4fd4759a561a4534dab4f805ffd18130594d1abbeb1ad7116b9d3a1e2e643d427e12bb866655954"
        },
        {
          "alg": "SHA-384",
          "content": "9f936b2ffa1f1fccfea3c53b5206a6d94fa193aa12a0cdec2f0baf98f0cb2a0b699e99291c60be44fab6b39a1f6f2e10"
        },
        {
          "alg": "SHA3-384",
          "content": "142b7dc3b521f681f41e8467cf292ba87ed6bfb88d57372bf6d9cc3e3042cc49fd735b367d2336ff43a3ccb64b5bc87e"
        },
        {
          "alg": "SHA3-256",
          "content": "be955c19490cbd305f4168b6ead4116659ef6fbdf96954d2c124ae8d3f4c4739"
        },
        {
          "alg": "SHA3-512",
          "content": "fa07cc8156842f8c18e286517fd751b3e2d51be13e2e8181f1b75a6c1f98715eb3ef583cbda01ca95ca0806ffc9817d4d9ab327dca6a16152c367a319e128fed"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.ow2.asm/asm@9.1?type=jar",
      "externalReferences": [
        {
          "url": "http://www.ow2.org/",
          "type": "website"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail.ow2.org/wws/arc/asm/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.nimbusds/lang-tag@1.7?type=jar",
      "publisher": "Connect2id Ltd.",
      "group": "com.nimbusds",
      "name": "lang-tag",
      "version": "1.7",
      "description": "Java implementation of \u0022Tags for Identifying Languages\u0022 (RFC 5646)",
      "hashes": [
        {
          "alg": "MD5",
          "content": "31b8a4f76fdbf21f1d667f9d6618e0b2"
        },
        {
          "alg": "SHA-1",
          "content": "97c73ecd70bc7e8eefb26c5eea84f251a63f1031"
        },
        {
          "alg": "SHA-256",
          "content": "e8c1c594e2425bdbea2d860de55c69b69fc5d59454452449a0f0913c2a5b8a31"
        },
        {
          "alg": "SHA-512",
          "content": "494267766c974ce16a99cb221953edc91fde8db0c920230758ecea0ea9d3006e95d86ad46f7a9d61b810d85b0fa6da9a3ce2b507cdbe4be320c499eaea93666b"
        },
        {
          "alg": "SHA-384",
          "content": "fdc2cde39a1b07a2542cbc07222afd6292ae19cb1f9ae008476f7ec1b8ebe1e3e84aca08e47e1ef81887a23ac5267d00"
        },
        {
          "alg": "SHA3-384",
          "content": "b0e673087533f60173a11a55b0fde554c0830e7b3b6609e1ea6546de19fc9a97fbfe6eee73580d09b2de66989d0603c7"
        },
        {
          "alg": "SHA3-256",
          "content": "ea208d4eb55212ce9835a9be60396861b0fc33f4161efee3736c3e7159acb9f7"
        },
        {
          "alg": "SHA3-512",
          "content": "450f819981d73711c30d838261ff55a7f1988c8b965c786708dc27fbd10a2018cfde82b8fee5d7d1022eacf085dfdabe22d9de92462eba80e2c15a116c3c73ed"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.nimbusds/lang-tag@1.7?type=jar",
      "externalReferences": [
        {
          "url": "https://connect2id.com/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://bitbucket.org/connect2id/nimbus-language-tags.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.nimbusds/nimbus-jose-jwt@9.24.4?type=jar",
      "publisher": "Connect2id Ltd.",
      "group": "com.nimbusds",
      "name": "nimbus-jose-jwt",
      "version": "9.24.4",
      "description": "Java library for Javascript Object Signing and Encryption (JOSE) and JSON Web Tokens (JWT)",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f00923fe2eb333891619668391ac4d14"
        },
        {
          "alg": "SHA-1",
          "content": "29a1f6a00a4daa3e1873f6bf4f16ddf4d6fd6d37"
        },
        {
          "alg": "SHA-256",
          "content": "8d589630722a4c56349248652477fdaa4e30df9c732c4d6eac2f271437246304"
        },
        {
          "alg": "SHA-512",
          "content": "eec376ec74e8e2d2622c992639261753079019abb988ff5fa42b8edba79e50d324721a38c8242e0e7032604a58846ad5fda6b16747ace040c92c953fed913003"
        },
        {
          "alg": "SHA-384",
          "content": "7c74148b32a8051d094303833e491faa695215452c6e307be3c2ce9ae1deb151ecd7115ca731f1258e61baf13718a557"
        },
        {
          "alg": "SHA3-384",
          "content": "b9367cde773063d33c2217890994598d07501a6e93e709a2b35926389d6ff5b050a496efc14a5246da3ab2139998705f"
        },
        {
          "alg": "SHA3-256",
          "content": "a7d75051f18f63e7b5a9bf8ce60d3a1a81cb1dc312f77e355e64dc2778388f71"
        },
        {
          "alg": "SHA3-512",
          "content": "6c3229ed5d6372958d1216841af513fe7e9d4fdfd66a88b9c43e1943bd0dfd4fa06dd8001d3300e513decaf0f3e60c78f476803d36513a5ed75a609b51095408"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.nimbusds/nimbus-jose-jwt@9.24.4?type=jar",
      "externalReferences": [
        {
          "url": "https://connect2id.com",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://bitbucket.org/connect2id/nimbus-jose-jwt",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.1?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-databind",
      "version": "2.14.1",
      "description": "General data-binding functionality for Jackson: works on core streaming API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "3e3e7aab8799ccc169b10f244e6fb5b4"
        },
        {
          "alg": "SHA-1",
          "content": "268524b9056cae1211b9f1f52560ef19347f4d17"
        },
        {
          "alg": "SHA-256",
          "content": "423a0c806de4b3fa5eb4a28698305e3a3777c731e1bcfa1b2f3a3760c7b6e773"
        },
        {
          "alg": "SHA-512",
          "content": "e23798189c4178603d6df8d27f5a0595f278d8df7584425fe225cf48a1e89d46e50ac0841a8c1f371a4ac4c45680ef207f2e496258f9d3ecf53d5734f6892f54"
        },
        {
          "alg": "SHA-384",
          "content": "14ddb27647d784645b9d66a75cdad0e88256752994df50b366c35b70e38d32712abb74a7e58089cd7d5048dbcffd076a"
        },
        {
          "alg": "SHA3-384",
          "content": "4349a433aa87807ef2af5f214dcb154e3bbd5a884c226d5cdefba54feaf2170aee7e169a2e381fa377a6a33f53c0f44c"
        },
        {
          "alg": "SHA3-256",
          "content": "3f32d8ce6fb9ef44408817f1416c8dd445d25e871a63cc4b598a7ddb2d3138ff"
        },
        {
          "alg": "SHA3-512",
          "content": "c00ab62eebc416880851bd5276ef238b3afa8deb6ed0553fbfd6670a44071f362f794cba69c950f53e17a77dcc471a2a1519436910439e08a359e82e58054d43"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-databind",
          "type": "vcs"
        },
        {
          "url": "http://fasterxml.com/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.1?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-core",
      "version": "2.14.1",
      "description": "Core Jackson processing abstractions (aka Streaming API), implementation for JSON",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f9604a5f31129cdb7db4bdec90111850"
        },
        {
          "alg": "SHA-1",
          "content": "7a07bc535ccf0b7f6929c4d0f2ab9b294ef7c4a3"
        },
        {
          "alg": "SHA-256",
          "content": "0114187e296b34c931c1bf9e5a84152b62bfab7d182f5623f3982dc2da35e526"
        },
        {
          "alg": "SHA-512",
          "content": "7a3cd2e4af749e800151efbcf0a18c6429bf5f8abb2dc2bd4f71ffeaba365574a0adb2ae204b6aba1f3a19f6fe6985d4ddf1169747235e85c5bedcdad2f4d58c"
        },
        {
          "alg": "SHA-384",
          "content": "fcd9164ae7dd26b1562f89e9ff741a9c34611b022db52e387e7a9bc3d8f084b3f5390e9516b049a8542ccb1f1630a665"
        },
        {
          "alg": "SHA3-384",
          "content": "761066454385f5892b0bf1fadfcebd9b8a13d61677df0294ca68dfa4317b3c61e21c429027c7ac6d8272ba80e12a166d"
        },
        {
          "alg": "SHA3-256",
          "content": "5302084471ac0959b67c640165eb595007371ebebd4646b81d9a76b26d9f6920"
        },
        {
          "alg": "SHA3-512",
          "content": "0733c8d5b752ceabd35bd396470289d3773b804bdcd8b292c3a834394d810e095542a077edb5c7014bb70a8f9ebd7df18553df2cb7947436fbdad8ed7ede0851"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-core",
          "type": "vcs"
        },
        {
          "url": "http://fasterxml.com/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-base@2.14.1?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.jaxrs",
      "name": "jackson-jaxrs-base",
      "version": "2.14.1",
      "description": "Pile of code that is shared by all Jackson-based JAX-RS providers.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "557e6122e6a2624074cfb0d52a0408fb"
        },
        {
          "alg": "SHA-1",
          "content": "f13ad4c50e319115641ba215b52ded6878bdb231"
        },
        {
          "alg": "SHA-256",
          "content": "4301b7f9a27b97528dc24b863ad3745a52c86a1e3b6fe91a248718f2bb8e23f6"
        },
        {
          "alg": "SHA-512",
          "content": "b35bc0b7f46f8e2e513853259eeec6af4f346579fe15cc1de451e60407986b6588ebda861e283ab0b7cdda1516b6996c658faa64f14de71433a9c04122a968bd"
        },
        {
          "alg": "SHA-384",
          "content": "4fd0c9f0b13cd52667da20cd123bb4edfeee3c0f1b8f30aecef99b071cd812e985a4fb01f317ee84d693dbd2aae896b9"
        },
        {
          "alg": "SHA3-384",
          "content": "6c9351b5c0bfc65afe75bbefdd7105452afdf46ed271f4c24bb1f6ebaa40fbf0852ebfffde9566c3da5bf7f9780ca71b"
        },
        {
          "alg": "SHA3-256",
          "content": "35e64048f8d754de6c34569c0f66cbbc8cbca8032d8107b16a5caaa8cdc48546"
        },
        {
          "alg": "SHA3-512",
          "content": "110e3625534db8028966edd5e6d4e38e59070b617389d49604c628d70ef698fc7e7f717080754d2f088a5fe5312fc621a180e37310fe4af40da1bc39279cd404"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-base@2.14.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-jaxrs-providers",
          "type": "vcs"
        },
        {
          "url": "http://fasterxml.com/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-json-provider@2.14.1?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.jaxrs",
      "name": "jackson-jaxrs-json-provider",
      "version": "2.14.1",
      "description": "Functionality to handle JSON input/output for JAX-RS implementations (like Jersey and RESTeasy) using standard Jackson data binding.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "49f223c7fabb1de69c5024b4ab59f231"
        },
        {
          "alg": "SHA-1",
          "content": "74d2d251c454c92c8e58fb46dcf93ac7074318f8"
        },
        {
          "alg": "SHA-256",
          "content": "233b2bfb1234dbe2bcf21759e14baf2de7327f1b7af4178cea1a2acd77b4389f"
        },
        {
          "alg": "SHA-512",
          "content": "afb9b3c52f55e4e1b1b6732c9b8a5188afc158263f55ee7a2439e906ff3a5bc12a0d8f503b3d0e318817db17e70ab4e146d3539653e0a6e3241b5946e58efd51"
        },
        {
          "alg": "SHA-384",
          "content": "c77acb6f8d716c6b894ea26e7ef39887a36237874c6093aca05a075942e8c763983f47adc9790dad98f7fd072d54e28d"
        },
        {
          "alg": "SHA3-384",
          "content": "92072710a8ac3351b0b269c154f3e5447aa6dab1270545bf7f8c9bb7f84a06d2cadc093b19d20020180253058d257182"
        },
        {
          "alg": "SHA3-256",
          "content": "aeac485d819e88dcff6b8f6327cff073f739f7795834b65f07b1d0a2badbdb20"
        },
        {
          "alg": "SHA3-512",
          "content": "911eb5ce97e63643c29411c2522bdcd64ee155bd1367d0a6734118beebc35aa88598226f396012ca3170793a08786aaa833bed158c7ede997e32dcc7970fe677"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-json-provider@2.14.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-jaxrs-providers",
          "type": "vcs"
        },
        {
          "url": "http://fasterxml.com/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/ch.qos.logback/logback-classic@1.2.11?type=jar",
      "publisher": "QOS.ch",
      "group": "ch.qos.logback",
      "name": "logback-classic",
      "version": "1.2.11",
      "description": "logback-classic module",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e13679004cc76ad5792f275f04884fab"
        },
        {
          "alg": "SHA-1",
          "content": "4741689214e9d1e8408b206506cbe76d1c6a7d60"
        },
        {
          "alg": "SHA-256",
          "content": "4d8e899621a3006c2f66e19feab002b11e6cfc5cb1854fc41f01532c00deb2aa"
        },
        {
          "alg": "SHA-512",
          "content": "6df8b42396c5d3257f11fb19c280533aa28d66e647115816d4ebfd6a58c9b5adf0e098504772261b29435df75b86cb2b9a47f846ed45d770179c9d10f39941de"
        },
        {
          "alg": "SHA-384",
          "content": "d480881d1a0d58c94aba0b719d56cd492147bc6481b67370dc7426ea7a81326af5b19f32d6a95fee714f37b90a5eed76"
        },
        {
          "alg": "SHA3-384",
          "content": "070647c93da744f04cc13ab3f1958c61a8b1e219fe221ed0bf251e4cc97563c64be323bfb3a9e2fd4839e33ded424b21"
        },
        {
          "alg": "SHA3-256",
          "content": "60c1dbe51066ffb3885673255a279e8894c89fe26f079180fa992478c1d9b03e"
        },
        {
          "alg": "SHA3-512",
          "content": "ce16fae69767bca975bec0d7dd0ceeb40c15cf034a4a949721c828a0f2c25cb9d619c4db3f986f6d9805d5b76d27b8926c55be5579522cd5ab3fa5e69bb68aeb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-1.0"
          }
        },
        {
          "license": {
            "name": "GNU Lesser General Public License",
            "url": "http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html"
          }
        }
      ],
      "purl": "pkg:maven/ch.qos.logback/logback-classic@1.2.11?type=jar",
      "externalReferences": [
        {
          "url": "http://www.qos.ch",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/ceki/logback",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/ch.qos.logback/logback-core@1.2.11?type=jar",
      "publisher": "QOS.ch",
      "group": "ch.qos.logback",
      "name": "logback-core",
      "version": "1.2.11",
      "description": "logback-core module",
      "hashes": [
        {
          "alg": "MD5",
          "content": "115da115b5e66ef64e774ec35af1fb1a"
        },
        {
          "alg": "SHA-1",
          "content": "a01230df5ca5c34540cdaa3ad5efb012f1f1f792"
        },
        {
          "alg": "SHA-256",
          "content": "6ce1e9397be8298a2e99029f55f955c6fa3cef255171c554d0b9c201cffd0159"
        },
        {
          "alg": "SHA-512",
          "content": "86b12a74c2a822a12ba2e9a7b0db5013803f18784a3cb1201c95d5f7872a6aa8cf06d5861a5c35777a7decc7ea26df7b4388fab3b3b71aab7274527d9b339318"
        },
        {
          "alg": "SHA-384",
          "content": "2afd896ebe6333d99e5baa553d80b7851d8ff51c06c725267e061df81bc9a878b74a65394699ae853f9738a08963aa0a"
        },
        {
          "alg": "SHA3-384",
          "content": "43d39acc5608b60d671c000bf6114f4623d3057399142abca01b0fc2381f2191479a2f0dd74f812223b66f57fa48fd9c"
        },
        {
          "alg": "SHA3-256",
          "content": "c23af1733b972e958369a2e14372fd2b306d4f552d7ae5ff6b9dfad3c14611c6"
        },
        {
          "alg": "SHA3-512",
          "content": "c7f6357d32a3b9fd82dfbd162c3a6cbe4b4909ef530e956bcd18649b2d3624eb51c5a71fee54533a9786e87cf1ccdc693f563ef6e3c6fbff7beedbd1d670f9bb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-1.0"
          }
        },
        {
          "license": {
            "name": "GNU Lesser General Public License",
            "url": "http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html"
          }
        }
      ],
      "purl": "pkg:maven/ch.qos.logback/logback-core@1.2.11?type=jar",
      "externalReferences": [
        {
          "url": "http://www.qos.ch",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/ceki/logback",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.owasp.encoder/encoder@1.2.3?type=jar",
      "publisher": "OWASP (Open Web-Application Security Project)",
      "group": "org.owasp.encoder",
      "name": "encoder",
      "version": "1.2.3",
      "description": "The OWASP Encoders package is a collection of high-performance low-overhead contextual encoders, that when utilized correctly, is an effective tool in preventing Web Application security vulnerabilities such as Cross-Site Scripting.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "541c66032b50af0c60c1723bdb900d11"
        },
        {
          "alg": "SHA-1",
          "content": "35ae93be1524b161525da2c9a110019616f67548"
        },
        {
          "alg": "SHA-256",
          "content": "b09e2cd5c36a7127e091df9be628278b1166b40bc08b9de8196ccddb0cccd67f"
        },
        {
          "alg": "SHA-512",
          "content": "ba7887259007272c533228cec1e2c5caebd639ef05b7b8925be6a0b5a7da5859e82489af4d462153e64bf2ce1234a8d6caa606fc6e42675a41cf7a067cfc5f6b"
        },
        {
          "alg": "SHA-384",
          "content": "f076cc6675cd055ddb58a5356b28de7268fd96d34393767a8b33c055b7836bdf302c6828e7a9ae61ff19930fc7015fb2"
        },
        {
          "alg": "SHA3-384",
          "content": "47bf29919d6cc83b4010de59b1403e3f9d795c1487bc77da58e2f1607ae652a48c1d2e6479f63b19e28345e53340654c"
        },
        {
          "alg": "SHA3-256",
          "content": "e909463a15ecf0cd8b1354a89357d5efbf3f8277d5acff4922f38b46b05c0be8"
        },
        {
          "alg": "SHA3-512",
          "content": "269c329b2d1c308418239281b1df9c10885e1c49ff9ad54067e2b8bcc0e18bcd8494ad82d7ac28c354053b00df8b3f6906f9c78ef32ccf313ae454f4c2463891"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.owasp.encoder/encoder@1.2.3?type=jar",
      "externalReferences": [
        {
          "url": "https://www.owasp.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/owasp/owasp-java-encoder/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://lists.owasp.org/pipermail/owasp-java-encoder-project/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/owasp/owasp-java-encoder",
          "type": "vcs"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.owasp.encoder/encoder-jsp@1.2.3?type=jar",
      "publisher": "OWASP (Open Web-Application Security Project)",
      "group": "org.owasp.encoder",
      "name": "encoder-jsp",
      "version": "1.2.3",
      "description": "The OWASP Encoder JSP package contains JSP tag definitions and TLDs to allow easy use of the OWASP Encoder Project\u0027s core API. The TLDs contain both tag definitions and JSP EL functions.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2aa0db8eb0a3c2294ce81e5c525c5b0d"
        },
        {
          "alg": "SHA-1",
          "content": "c0ff3cfc6ef21c8b43b045268203147029f23505"
        },
        {
          "alg": "SHA-256",
          "content": "cca9152d68581eacfa86c0518590b1f153d1daf505f1318f3711f66049217b3c"
        },
        {
          "alg": "SHA-512",
          "content": "99566f092be000f84c30ea5f495995824aba91dc5d377c8b4bbc3164f1fd921d2f3c54fa956f03701dab23afdd06d35f713a46f4d0e4e47ca1a41365281254f8"
        },
        {
          "alg": "SHA-384",
          "content": "0207fefe84778df49ea316cec19981237f0a6e05c6463c6a0954a144acfc46d968397900891cbc4b94a1ea105633314d"
        },
        {
          "alg": "SHA3-384",
          "content": "c285915fa4ffd67ce5d268fb98e14be84082e656143007f3beaa169914674d25f8a22f9c67b28dd7d4adc767ef825f98"
        },
        {
          "alg": "SHA3-256",
          "content": "21edeb5020107f2f3558b1d6aa6e7bce7bb50d1977cd11201ee59a67a21fd5b5"
        },
        {
          "alg": "SHA3-512",
          "content": "7a4681e587ffb9f6c28d659d2f8f3d55ee4e9d51c640ba0c57e45362ddf2a44edeec7d5d7fef4ad6d31fadbbeea1ffa69c93485a04439afb542bbc6536ed30c3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.owasp.encoder/encoder-jsp@1.2.3?type=jar",
      "externalReferences": [
        {
          "url": "https://www.owasp.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/owasp/owasp-java-encoder/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://lists.owasp.org/pipermail/owasp-java-encoder-project/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/owasp/owasp-java-encoder",
          "type": "vcs"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.sun.mail/jakarta.mail@1.6.7?type=jar",
      "publisher": "Oracle",
      "group": "com.sun.mail",
      "name": "jakarta.mail",
      "version": "1.6.7",
      "description": "${project.name}",
      "hashes": [
        {
          "alg": "MD5",
          "content": "17eb378c9dd574be23e71014ce9d5d30"
        },
        {
          "alg": "SHA-1",
          "content": "319df0e9d536c1a01acdfe49b6e82b97d2393073"
        },
        {
          "alg": "SHA-256",
          "content": "1b258ef45fae93059b65d0a0dd109e59ab93e8cd8a735ff66b2ba85f870d5150"
        },
        {
          "alg": "SHA-512",
          "content": "3f392a6ae3eada47c37b67d92f3cf39c609a5309fcc97eb271bcf079d0d01f5973c0d32458a875ac1186092a113bb452439f7b7b0edd58a5b3aba5f775e9a001"
        },
        {
          "alg": "SHA-384",
          "content": "868a5f77973668eb2af92c8a32fca8b0d80860be3489249b4e93246eda5711aad64eefe0f97ec436c57e2cb0cc89f9e8"
        },
        {
          "alg": "SHA3-384",
          "content": "83395046d0ad4d01c7ca16fb35a0591bb26367583e65dcbf4f11b9be80241c117ab61859e4e4f4c31883caf6539613af"
        },
        {
          "alg": "SHA3-256",
          "content": "1c64d48a7aadd0b7a75fd93d642da723921763ddb215bd78cdbe05d01e80541b"
        },
        {
          "alg": "SHA3-512",
          "content": "dc6c43c485a5b8eefc8211862b44195bfa1d830ba4f4029b7fc68eaf08dccb8909a9cb93772fd81a3b7c785cbc873c046c10d1c391040282cb58595bdd0ed3d2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.sun.mail/jakarta.mail@1.6.7?type=jar",
      "externalReferences": [
        {
          "url": "http://www.oracle.com",
          "type": "website"
        },
        {
          "url": "https://github.com/eclipse-ee4j/mail/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/mail",
          "type": "vcs"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "group": "com.google.code.findbugs",
      "name": "jsr305",
      "version": "3.0.2",
      "description": "JSR305 Annotations for Findbugs",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "dd83accb899363c32b07d7a1b2e4ce40"
        },
        {
          "alg": "SHA-1",
          "content": "25ea2e8b0c338a877313bd4672d3fe056ea78f0d"
        },
        {
          "alg": "SHA-256",
          "content": "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7"
        },
        {
          "alg": "SHA-512",
          "content": "bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804"
        },
        {
          "alg": "SHA-384",
          "content": "ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4"
        },
        {
          "alg": "SHA3-384",
          "content": "9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1"
        },
        {
          "alg": "SHA3-256",
          "content": "223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff"
        },
        {
          "alg": "SHA3-512",
          "content": "3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://code.google.com/p/jsr-305/",
          "type": "vcs"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.1.1?type=jar",
      "group": "com.github.ben-manes.caffeine",
      "name": "caffeine",
      "version": "3.1.1",
      "description": "A high performance caching library",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ed69f5e6ab0adb9bdf51a42c8345454a"
        },
        {
          "alg": "SHA-1",
          "content": "b08f9f234ae51adf8b7a3dcdfcf115aa258fafcb"
        },
        {
          "alg": "SHA-256",
          "content": "abc0622a6f3ffc60e34a06bccd334b70cfa96b7be7824e73423944464df8ccf6"
        },
        {
          "alg": "SHA-512",
          "content": "b6df967d6ee99ae7e165769ade4d5859a5d99ac5a61186e874dfa1a583ee398f1d81791fef14f37848aceee040f972831b9721db38a058379c1d61bcca9d89d4"
        },
        {
          "alg": "SHA-384",
          "content": "87c56557f64badd61fe66906288440bfc32178e294e776bf56eccabc280eb3131be08c90cc7e73eb6883ab0d727ee44a"
        },
        {
          "alg": "SHA3-384",
          "content": "7a0d5aeb32308dbed5b958df34b865d36ccec3de8f95d2849f9f20d61261faacc4f0fd00ca327636210399d93956ea68"
        },
        {
          "alg": "SHA3-256",
          "content": "163f91cce7a6e40380075bd5e4d413a031ff7e73cf3ed177619e84e45ae1d728"
        },
        {
          "alg": "SHA3-512",
          "content": "48d9e05978d980ac3c868d8744d14eae2b2a51e94cb889854f7c518dab1677479093aba6cd763cae04201c96306da19dc8a967baa48e4bc765b3964c39371757"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.1.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/ben-manes/caffeine",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.14.0?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.errorprone",
      "name": "error_prone_annotations",
      "version": "2.14.0",
      "description": "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "739aa4441ca0b3a25795af53c9698b64"
        },
        {
          "alg": "SHA-1",
          "content": "9f01b3654d3c536859705f09f8d267ee977b4004"
        },
        {
          "alg": "SHA-256",
          "content": "1494e24e7bd5496e7d6f705169dddd46081cefb882ea4fc60b4a58ca50767f34"
        },
        {
          "alg": "SHA-512",
          "content": "f9624ae638bc4168af769bcbe471ce3d138ffea59c15bab85febe7d4568cb4d944a9a6a0ab77cb2aa3840c38a5d0c855d575da975fd7f2600b8598f975d594ea"
        },
        {
          "alg": "SHA-384",
          "content": "d2f19d788ee90e2a8408897465fa3d1ce057dd4296a4db3872675d589b354f9c0e0fb36f989bf88bc6064ce5a36d810b"
        },
        {
          "alg": "SHA3-384",
          "content": "9ff5a3755028acbcbf60b43f9a85bb3b1cb9ded4f1cd081a81ebf55aefffccad3d6382092af78e1d0f89fe918b62bd06"
        },
        {
          "alg": "SHA3-256",
          "content": "772f1921093a7bb54c7542715ef6bb961ae2919ba73032e1bdaaa85e439c86c9"
        },
        {
          "alg": "SHA3-512",
          "content": "a18facd4552f10ccdc0fc31bb99cb19c334f1f946a48d7cf24f54f3faa692f52fb321675bf16a19a6c8bf134221e7529876618bc48aad9ec6b283c4a5c3b9a07"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.errorprone/error_prone_annotations@2.14.0?type=jar",
      "externalReferences": [
        {
          "url": "http://www.google.com",
          "type": "website"
        },
        {
          "url": "https://github.com/google/error-prone",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/us.springett/cvss-calculator@1.4.1?type=jar",
      "group": "us.springett",
      "name": "cvss-calculator",
      "version": "1.4.1",
      "description": "A Java library for calculating CVSSv2, CVSSv3, and CVSSv3.1 scores and vectors",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4e02c31221121da4920f7e419b058ee2"
        },
        {
          "alg": "SHA-1",
          "content": "8db4648d457df0aa955d34270f416647cbddba36"
        },
        {
          "alg": "SHA-256",
          "content": "fa47029010c209762cad63cd3ea4dfb95cb83a6dedc6d148be579991cf7cc682"
        },
        {
          "alg": "SHA-512",
          "content": "8f6813108e648c7a5988f73c2ea7c555626f7c6f4c73e7b37e5a5138dc1436378dbf7ac4ffde453cacbae5079cfd9691cd2101d39b1359afffa759b9f523129c"
        },
        {
          "alg": "SHA-384",
          "content": "2f49681f515b1dd5338f026f42b951ac0237d293fd824f917b077f9e58d33eef601d1de6c9cd1eb6ff0d6cdcd78ed9c7"
        },
        {
          "alg": "SHA3-384",
          "content": "5b164d8a49c78480d7fcf74be67463d881a4604a8b69c933fc2395a1ebf497a8fd9fd8ee3a6b756f777200a5f7310f19"
        },
        {
          "alg": "SHA3-256",
          "content": "c230ea81db59948d037caf9ea09b50227a3c5ffb31ee40f06d9d96a5d1259dd7"
        },
        {
          "alg": "SHA3-512",
          "content": "19a8092b01599aad845b0af0c48123c50f0ff0812171798b8bdeada4285117643643cb5248248d7123e4be37aec84673dd349fb4345d2e5014537543cb474bbb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/us.springett/cvss-calculator@1.4.1?type=jar",
      "externalReferences": [
        {
          "url": "https://travis-ci.org/stevespringett/cvss-calculator",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/stevespringett/cvss-calculator/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/stevespringett/cvss-calculator.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/us.springett/owasp-risk-rating-calculator@1.0.1?type=jar",
      "group": "us.springett",
      "name": "owasp-risk-rating-calculator",
      "version": "1.0.1",
      "description": "A Java library for calculating OWASP Risk Rating scores",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f387d7ce91df7f1b56224b972b916ebe"
        },
        {
          "alg": "SHA-1",
          "content": "f4ae15b14d7a4c3686f6a8a8a93e30560472b1f8"
        },
        {
          "alg": "SHA-256",
          "content": "9b66d91d1ff61f99e320466ff451555696f139147260528591ff1718c5605d1c"
        },
        {
          "alg": "SHA-512",
          "content": "449331aaabc401a7c7ac42c6bba06d17a2c2dc8def07961b93de7bde8fb9f54aa2541cbab7e541b6fa1552977d46e5367a78277cffbafc60873bb7042facff65"
        },
        {
          "alg": "SHA-384",
          "content": "e83afc9976cfcb5419768fdba983815bf755101fef34df693b6033094e12a29d23127148edef4ba6db3573e0b2bb3871"
        },
        {
          "alg": "SHA3-384",
          "content": "07bed3d3cc524090d01da7711e684d7c645e9225e38225ca92da6f58f3ae86c9d9f2e1a45ad923f9345abecb609c0be1"
        },
        {
          "alg": "SHA3-256",
          "content": "153dbb661c502fd174cdbb735a0a89f69555365e165dd6a91d7c765226b9947a"
        },
        {
          "alg": "SHA3-512",
          "content": "6c6bb8298f8f3337395693f4963d08d21d7f76e6ef8802773e37efc64b1b25a6f8ec77169f730591f429cfa5ac5f6a1b2ef0948af67fa49f19cf7ba8a0223f25"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/us.springett/owasp-risk-rating-calculator@1.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://travis-ci.org/stevespringett/owasp-risk-rating-calculator",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/stevespringett/owasp-risk-rating-calculator/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/stevespringett/owasp-risk-rating-calculator.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/us.springett/cpe-parser@2.0.2?type=jar",
      "group": "us.springett",
      "name": "cpe-parser",
      "version": "2.0.2",
      "description": "A utility for validating and parsing Common Platform Enumeration (CPE) v2.2 and v2.3 as originally defined by MITRE and maintained by NIST.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f07de5ae8549a93b912a223a83c30655"
        },
        {
          "alg": "SHA-1",
          "content": "677cff319cdc8bd9578a3d04c1fd9c366cc9ff6e"
        },
        {
          "alg": "SHA-256",
          "content": "8fddc10cf23ad8d3329dd8343ea1e291e1eb39344dd6e61b676a0cde88cf6375"
        },
        {
          "alg": "SHA-512",
          "content": "2b546382f2747b2628a3f0169289ddee8639d8aeb26da119fc439db42b4518281509139126a6e6972ee5079ad34dc164c9d15e44cda1597900dc4b7429736889"
        },
        {
          "alg": "SHA-384",
          "content": "99b53a6ebfe82a6e0b7e5b6b9648d6e871a4b015b26c503a921d0713ede738930c352aae77448202ccfe74d84008c88e"
        },
        {
          "alg": "SHA3-384",
          "content": "1f4e7d87d281a484edd8cd06a27ec58b664ac3f0ea747e622a32ddacd6728ff512cbf89c2003af76e4532c73ab13f4e3"
        },
        {
          "alg": "SHA3-256",
          "content": "e72269d096adf457cd78b931cd2a2902a5bee446f5c79e25fc4bb30e64d1d2cd"
        },
        {
          "alg": "SHA3-512",
          "content": "8cc7471a8af3d0eaf226cc37317f40b9303b055a338a26efad89e7586eee6cb06f149c70eead9500b982f5b1318d1e5d806e7648823da69d0031fe4463d8c58e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/us.springett/cpe-parser@2.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://travis-ci.org/stevespringett/CPE-Parser",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/stevespringett/CPE-Parser/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/stevespringett/CPE-Parser.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.cyclonedx/cyclonedx-core-java@7.3.0?type=jar",
      "publisher": "OWASP Foundation",
      "group": "org.cyclonedx",
      "name": "cyclonedx-core-java",
      "version": "7.3.0",
      "description": "The CycloneDX core module provides a model representation of the BOM along with utilities to assist in creating, parsing, and validating BOMs.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d31205dd03a88c7388ac650b4e31efef"
        },
        {
          "alg": "SHA-1",
          "content": "dcbd8fc2bd27920e6e081c2ac39f9c6e1a39a458"
        },
        {
          "alg": "SHA-256",
          "content": "7adf67629159e782b8265151dc20237543f6555b616545560c408eee840c350a"
        },
        {
          "alg": "SHA-512",
          "content": "5f00ad38f8b2c126a200e876259a6b14632859149b204628f098ebcb9f6ad78de70ea270913ac5ab4cd42377fa66256e7283f75590743e7fd6e41be33ea3557a"
        },
        {
          "alg": "SHA-384",
          "content": "8d6eeed500ab62b3eddac680e2536d6659e8a8be76f3fb8f26efe4fe28d17e2f7bf1e0f13702cee891f12aa0dc8be295"
        },
        {
          "alg": "SHA3-384",
          "content": "eafb01af7c8b90b74b9d7e691c4a76fb55bf6e0c620ec80752dbd9348a23ef1cb2836bd6540c61146b8bb68f400b2d5a"
        },
        {
          "alg": "SHA3-256",
          "content": "a34fe089db5493a2d68cf16f770adf5760288213fc27da0c390773849ecf3953"
        },
        {
          "alg": "SHA3-512",
          "content": "54adb6079fe93648f47ddb0b81012f48ce88a5c6505a7e074eb681eb44dd4ae148ad6aa27b9a5580d597ce2501c86c5e19d1c4220455a2b96c0b423996026221"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.cyclonedx/cyclonedx-core-java@7.3.0?type=jar",
      "externalReferences": [
        {
          "url": "https://owasp.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/CycloneDX/cyclonedx-core-java/actions",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/CycloneDX/cyclonedx-core-java/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/CycloneDX/cyclonedx-core-java.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "commons-codec",
      "name": "commons-codec",
      "version": "1.15",
      "description": "The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "303baf002ce6d382198090aedd9d79a2"
        },
        {
          "alg": "SHA-1",
          "content": "49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d"
        },
        {
          "alg": "SHA-256",
          "content": "b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63"
        },
        {
          "alg": "SHA-512",
          "content": "da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787"
        },
        {
          "alg": "SHA-384",
          "content": "05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0"
        },
        {
          "alg": "SHA3-384",
          "content": "12fad4ef78274b06f97b1243cea6f970088abde082d2de9377d915a34b44f7d7d67807c03e59c849b69f1544e2a9a1be"
        },
        {
          "alg": "SHA3-256",
          "content": "87be248f33f241121f54aad61a9a460a79eabefbf1b5b0dd22aeb95b581f727e"
        },
        {
          "alg": "SHA3-512",
          "content": "8c992c9c569ebaa0bf956a4c5b34fbf5e1ed1c212c2dd896fa216183ee0bcd341e96698af4b9cec7e8880762faa081a3d3a27f51349aa457cb8e373e4f57c788"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
      "externalReferences": [
        {
          "url": "https://issues.apache.org/jira/browse/CODEC",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/apache/commons-codec",
          "type": "vcs"
        },
        {
          "url": "https://builds.apache.org/",
          "type": "build-system"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/commons-user/",
          "type": "mailing-list"
        },
        {
          "url": "https://www.apache.org/",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.14.0?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.dataformat",
      "name": "jackson-dataformat-xml",
      "version": "2.14.0",
      "description": "Data format extension for Jackson to offer alternative support for serializing POJOs as XML and deserializing XML as pojos.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "97ebbc98a00f22ec9aa3be0f9ca5e3d6"
        },
        {
          "alg": "SHA-1",
          "content": "0e05c71419a2f88b7b27fc90cdd7fef272348719"
        },
        {
          "alg": "SHA-256",
          "content": "2bb81f3cf2e10e10190e7ed55471b58249efe580941f907c0bce8443c6164334"
        },
        {
          "alg": "SHA-512",
          "content": "17e95a446fb4bed27fb4f826b92ea2594800cbffa4719eccd592496f0685c2eb5a6f59ee91b26b3e8ae7a542c56a85d63de1bc72b1bdd9141574c9271b4b3b85"
        },
        {
          "alg": "SHA-384",
          "content": "76d39712488925137b28edc9f373814f9df52a093fa2bf498d0d202844d595e864578c8e1a45d3227235ab97da9bf073"
        },
        {
          "alg": "SHA3-384",
          "content": "947867fd94dd6cec109a1146d01883116aff763bd2401cd1a51ed8273d3577c1d77f6ba6c5f5e1122daddb22307e9f09"
        },
        {
          "alg": "SHA3-256",
          "content": "be97ad237e39c7b4319e053a5ea238a01c2b05c534f437fc17a1a44e86757550"
        },
        {
          "alg": "SHA3-512",
          "content": "fbea8197d87d3a6431dcfc2b6be3e9f230bfdf897dd289f129c549a11024c5c0118df40e1286942a3096fb76e4cc9ee7968c327611c447aafa747eef8fc417ee"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.14.0?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/FasterXML/jackson-dataformat-xml",
          "type": "vcs"
        },
        {
          "url": "http://fasterxml.com/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.networknt/json-schema-validator@1.0.73?type=jar",
      "group": "com.networknt",
      "name": "json-schema-validator",
      "version": "1.0.73",
      "description": "A json schema validator that supports draft v4, v6, v7 and v2019-09",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ada6c11f5ae6124ec083e57a1df02501"
        },
        {
          "alg": "SHA-1",
          "content": "75d0f20547a9d95326002731921f7a43584bf102"
        },
        {
          "alg": "SHA-256",
          "content": "48f7b20dbaff92dcd46d3c8e7f67bba7bb784ef1226afa9a1087851e6b61766b"
        },
        {
          "alg": "SHA-512",
          "content": "d4bf05f55f65780df4fbc1d7ee906af7863add58350e19392645785c10b7be21e874402fd267786c0a1828226f309070653e90b1f7080a4a2286dc944f1f01b3"
        },
        {
          "alg": "SHA-384",
          "content": "7d94d3c34bb9a5d4d938062f00756d855e620df1150c954d514b9aa0291e19cc722ef7da57970b1b5b4790cd13f4bef6"
        },
        {
          "alg": "SHA3-384",
          "content": "e897d1cabd8b13c0a92f8b978cdb94163df06802e0399e2172aa62691ac04c86239aa4adefaf336f620b9d6376781bc3"
        },
        {
          "alg": "SHA3-256",
          "content": "fdc745242eb8ae93616bba2eb7baf964f19f6b04192fcbfb82d66affbe586da4"
        },
        {
          "alg": "SHA3-512",
          "content": "b3011ae95b29b1e3e1c44fcccbc882e8482df2caf7c14d3a2b1096a38a129943df6ec9fdd334fbdf222fdd61b5514fd87e77d99c56164f79da89f74b01b8d2d3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.networknt/json-schema-validator@1.0.73?type=jar",
      "externalReferences": [
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/networknt/json-schema-validator/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.ethlo.time/itu@1.7.0?type=jar",
      "group": "com.ethlo.time",
      "name": "itu",
      "version": "1.7.0",
      "description": "Extremely fast date/time parser and formatter - RFC 3339 (ISO 8601 profile) and W3C format",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4f9277e3108caa3314836d8f20f9cf94"
        },
        {
          "alg": "SHA-1",
          "content": "00c6977b9d42efa3f8c95c31db5313a96ffc1724"
        },
        {
          "alg": "SHA-256",
          "content": "55ceb418c9e8138c4fcf62e213c4c814d89e8a84c827d395407cbecba5d791e7"
        },
        {
          "alg": "SHA-512",
          "content": "b29808a998e120d6fa97a19ea92402e57d06b92ddb98b892ae7c9de044b9e1d805dca2f7c0fe7faaa1fced7eecbda927d709113727a050972f24a75aa29525b8"
        },
        {
          "alg": "SHA-384",
          "content": "f63cbcc14966028fc81feec87bb5f948e0acc0a1683e9147eafe71c98cf3bb38d871bdccfdf70d94c985e1727b00ae7a"
        },
        {
          "alg": "SHA3-384",
          "content": "f95deb0a7c863dfc3e595a1398beecfd4baa7c3b5c8f43c3324e374de58d8e13891b32cb62d67d0e44df384fa320246e"
        },
        {
          "alg": "SHA3-256",
          "content": "37b170afbaa74ad33e4dfb402aae14a2a026fbde83cbad0e61aee65b5a01f55d"
        },
        {
          "alg": "SHA3-512",
          "content": "f87bbab20f0ffd19ad27225b623b44cfa693fc83b27eb828acf0beeda846a13a9139a11e32d59cf81aa93da08af02335dddf59b2afc5a36900478a04c09c6218"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.ethlo.time/itu@1.7.0?type=jar",
      "externalReferences": [
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.6?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jaxb",
      "name": "jaxb-runtime",
      "version": "2.3.6",
      "description": "JAXB (JSR 222) Reference Implementation",
      "scope": "optional",
      "hashes": [
        {
          "alg": "MD5",
          "content": "29acad12b7cdd22b2a5ab66cd7439d48"
        },
        {
          "alg": "SHA-1",
          "content": "1e6cd0e5d9f9919c8c8824fb4d310b09a978a60e"
        },
        {
          "alg": "SHA-256",
          "content": "cd87d4b98a8bec1d237aed61472ef4adb6a8bb0515cbde1fd62fdd9781c16770"
        },
        {
          "alg": "SHA-512",
          "content": "8e8042f4a2a45f3520ce6376d826c0445a54509a728f9f61b274c2e2d92d242bfabfba112994d0df56f59f58c48e4069fb2dabf0fcc67208e651597de5eeaa98"
        },
        {
          "alg": "SHA-384",
          "content": "6c3cfac49412ee125c0183e39ef751b8a7db04f02133ca6e039259708d2bd36df88bca3163672c8ab809cca9824e8d7e"
        },
        {
          "alg": "SHA3-384",
          "content": "3a0e2fbe2231fb39ae58afc52ad6dabf3cb932d4b56116f5ed3697b57bd0970c915e1f2b14df48576277c50ebb055a3b"
        },
        {
          "alg": "SHA3-256",
          "content": "00c4b10fb5581894c010618d4af73b821fbc262d883e5e1089438efa72243668"
        },
        {
          "alg": "SHA3-512",
          "content": "f5657b09370ecd381e76148b52fd8aa8e904f09424f2c7df5307b11ac0403db885d8a82e50002047c5be4c532c8f5778bd11833beebef3ddfe02fbf2fd35b464"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.6?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/jaxb-ri/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://accounts.eclipse.org/mailing-list/jaxb-impl-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jaxb-ri.git",
          "type": "vcs"
        },
        {
          "url": "https://www.eclipse.org",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.xml.bind",
      "name": "jakarta.xml.bind-api",
      "version": "2.3.3",
      "description": "Jakarta XML Binding API",
      "hashes": [
        {
          "alg": "MD5",
          "content": "61286918ca0192e9f87d1358aef718dd"
        },
        {
          "alg": "SHA-1",
          "content": "48e3b9cfc10752fba3521d6511f4165bea951801"
        },
        {
          "alg": "SHA-256",
          "content": "c04539f472e9a6dd0c7685ea82d677282269ab8e7baca2e14500e381e0c6cec5"
        },
        {
          "alg": "SHA-512",
          "content": "adf6436a7a9dc6f64b97127861d7a89b78e82bea67f72bda800ef285163adcd84dbf006f679108a2a8c2eed013e0b771da2354087e0845479ff2b6318b881442"
        },
        {
          "alg": "SHA-384",
          "content": "bad8b9f52bf7a7e1d3974cb305a69c093fb32d2131539c18d34e471e3ec32bdd9dd136bb4b38bb14d84e99c562f208c7"
        },
        {
          "alg": "SHA3-384",
          "content": "8131aaf65f996cfa2c3f7d406caab3acf3e6650bcbbcd5595f8a457a211810ff110c1923876e068831a07388ddc26f33"
        },
        {
          "alg": "SHA3-256",
          "content": "a9e4179a6bfa8b363b9fd4f32f8892c4a7954ed1695d3f33ccef73ceffcaa1d4"
        },
        {
          "alg": "SHA3-512",
          "content": "9ecbc0f4aa9cff28d519cbf74c8234b5180ae6ff0d6de4efe2de126b3251d466a5ddb878e70b9968095a843c82721c93a4dec53bfe09e3700f4cfe2e38bcac0a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/jaxb-api/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jaxb-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jaxb-api.git",
          "type": "vcs"
        },
        {
          "url": "https://www.eclipse.org",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jaxb/txw2@2.3.6?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jaxb",
      "name": "txw2",
      "version": "2.3.6",
      "description": "TXW is a library that allows you to write XML documents.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "dd02e61e4662e6461f0c21b08e721021"
        },
        {
          "alg": "SHA-1",
          "content": "45db7b69a8f1ec2c21eb7d4fc0ee729f53c1addc"
        },
        {
          "alg": "SHA-256",
          "content": "f8bc249d22ad950257c373aea80c2f16f18f5eb4d557bdb2660bf5e1f1e84776"
        },
        {
          "alg": "SHA-512",
          "content": "468cd89821480364a49f73f1774383fd483fd8273d373601a4867b37267f125c3fdf3ffd8a73a114408699137c469c02e47f94b80c7d21df236b4a187d12680d"
        },
        {
          "alg": "SHA-384",
          "content": "02c99a070c038081922bdae47cd9e739045342b223c55204716bba9f81eca971ed1313eab8bb103dc596bfd7b84a6b72"
        },
        {
          "alg": "SHA3-384",
          "content": "e63ebe6d86a51506c45b430c8a71d80ac0fa95f99692a30697468b242ccd5c818f5d4aaf967e049797fee704a92307db"
        },
        {
          "alg": "SHA3-256",
          "content": "585be97a69d2a94b6647330ac36b3d5b2389eadfb92138f2b80a3e8c3bcc4b63"
        },
        {
          "alg": "SHA3-512",
          "content": "2e7ed6f7267f7e4eb0c0b0e89f845fcd253eec4ab1fa66fd915b7a4bd738e881c9e8f801af17dbbbfbc4311409f0fad9737780693a1018582e307a3293d27405"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jaxb/txw2@2.3.6?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/jaxb-ri/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://accounts.eclipse.org/mailing-list/jaxb-impl-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jaxb-ri.git",
          "type": "vcs"
        },
        {
          "url": "https://www.eclipse.org",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "com.sun.istack",
      "name": "istack-commons-runtime",
      "version": "3.0.12",
      "description": "istack common utility code",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1952bd76321f8580cfaa57e332a68287"
        },
        {
          "alg": "SHA-1",
          "content": "cbbe1a62b0cc6c85972e99d52aaee350153dc530"
        },
        {
          "alg": "SHA-256",
          "content": "27d85fc134c9271d5c79d3300fc4669668f017e72409727c428f54f2417f04cd"
        },
        {
          "alg": "SHA-512",
          "content": "af36b11cc0d82b7f62c64941f4e7d441d25cb9f3c4b3e08753d038c388e5a09364b5dac9127f29a9b8df6d96034133caadab6d74371077478d2f301605913460"
        },
        {
          "alg": "SHA-384",
          "content": "ad8ba1f6538e087915b1e7fbf4a7a60b006ebecc4ab52986c10dfe88ae11ae7eb6e1f302bee06f70b16ec316f001375b"
        },
        {
          "alg": "SHA3-384",
          "content": "2207c7e1570860d6300ef3157905498efaf26ba85566b053495f583b20c755cc07d6855b2d79136ab4d6544635e39f4d"
        },
        {
          "alg": "SHA3-256",
          "content": "50a425e524a6ee81110ecd86190d039a84d46aa3c45855310fe4f95abba3c21e"
        },
        {
          "alg": "SHA3-512",
          "content": "286997280ee0885c456686cf91c601e600106138f39eb81fc27381868f7ede0d1521cdf22c420331b1a961ed2f1ba1887a9ae05073f4364e3ffc297f40f0de53"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/jaxb-istack-commons/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jaxb-impl-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jaxb-istack-commons",
          "type": "vcs"
        },
        {
          "url": "https://www.eclipse.org",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "com.sun.activation",
      "name": "jakarta.activation",
      "version": "1.2.2",
      "description": "${project.name}",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0b8bee3bf29b9a015f8b992035581a7c"
        },
        {
          "alg": "SHA-1",
          "content": "74548703f9851017ce2f556066659438019e7eb5"
        },
        {
          "alg": "SHA-256",
          "content": "02156773e4ae9d048d14a56ad35d644bee9f1052a791d072df3ded3c656e6e1a"
        },
        {
          "alg": "SHA-512",
          "content": "8bd94a4370b827e3904f31253b022e5c1851896d3b616ca7daebfef259238cedc56d4ced32c74f24a13c3e2295b0ea012af5d04656b7f713cc53a2f18d5e2cf7"
        },
        {
          "alg": "SHA-384",
          "content": "1cb0aff8b73ba52a9931b2cf13c75a1ce6665fb826bf97ede66db75c532136aa189fb53a1925e62b6eef572309ef3b9a"
        },
        {
          "alg": "SHA3-384",
          "content": "83801332576d931f4091ba65ea240d49c23e3b93dae939ce2eed63de943f80f251a4347638b99900de5b831796b12590"
        },
        {
          "alg": "SHA3-256",
          "content": "5363211b59dfaff6e1973e93548e5e4062189c6d0f43d7802627ebeb7b7ff37d"
        },
        {
          "alg": "SHA3-512",
          "content": "0c7b62a3432b19ffad02eafffc7e598391cd32b1313d075f94cda09913402770b4ba2314716625571f266431067229c93cec36e17c3ea598623542988634ca0a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/jaf/issues/",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jaf",
          "type": "vcs"
        },
        {
          "url": "https://www.eclipse.org",
          "type": "website"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar",
      "publisher": "Oracle",
      "group": "javax.activation",
      "name": "javax.activation-api",
      "version": "1.2.0",
      "description": "${project.name}",
      "scope": "optional",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5e50e56bcf4a3ef3bc758f69f7643c3b"
        },
        {
          "alg": "SHA-1",
          "content": "85262acf3ca9816f9537ca47d5adeabaead7cb16"
        },
        {
          "alg": "SHA-256",
          "content": "43fdef0b5b6ceb31b0424b208b930c74ab58fac2ceeb7b3f6fd3aeb8b5ca4393"
        },
        {
          "alg": "SHA-512",
          "content": "8ee0db43ae402f0079a836ef2bff5d15160e3ff9d585c3283f4cf474be4edd2fcc8714d8f032efd72cae77ec5f6d304fc24fa094d9cdba5cf72966cc964af6c9"
        },
        {
          "alg": "SHA-384",
          "content": "d38a6af7ed00f13de8b46d49b9592af9b67adf3df47ddae5e4672f989f3f39101d446a77d1c11319acf8ff0a5b4feedf"
        },
        {
          "alg": "SHA3-384",
          "content": "cfee76de5976d5994758a06113368092f09b0729d753b99969d6a5ec32919428bd7c270c98cbbc682ff8ebcf2b93fd8d"
        },
        {
          "alg": "SHA3-256",
          "content": "aff48d0f28d8a99690c5a84c3fffdb3775452d5387e5698f4c9028c92a3b4888"
        },
        {
          "alg": "SHA3-512",
          "content": "0507ece74b3147de60a830071bd434569c82e03f414a2b7f0d8a225dda36720d2e2194799cdc04def1909fdec21059b67c518bb9162f7f605764d542194e721d"
        }
      ],
      "licenses": [],
      "purl": "pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar",
      "externalReferences": [
        {
          "url": "http://www.oracle.com",
          "type": "website"
        },
        {
          "url": "https://github.com/javaee/activation/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/javaee/activation",
          "type": "vcs"
        },
        {
          "url": "https://maven.java.net/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.json/json@20220924?type=jar",
      "group": "org.json",
      "name": "json",
      "version": "20220924",
      "description": "JSON is a light-weight, language independent, data interchange format. See http://www.JSON.org/ The files in this package implement JSON encoders/decoders in Java. It also includes the capability to convert between JSON and XML, HTTP headers, Cookies, and CDL. This is a reference implementation. There is a large number of JSON packages in Java. Perhaps someday the Java community will standardize on one. Until then, choose carefully.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f36abf03cfd6f354bbc956755c957c64"
        },
        {
          "alg": "SHA-1",
          "content": "5aa95e7688f76c664af205c5937620f02688dfbc"
        },
        {
          "alg": "SHA-256",
          "content": "57d65f5883bd65fa41e6d06cb7dcaceb73a49338bb8a4611c9e22d2a3f674a97"
        },
        {
          "alg": "SHA-512",
          "content": "7fc8ba4864443f381474f69cba04ffdbd957b0cc65a80df545110db6388371893c157a34e96aefea7dc6a6dcc4cb07dd098e3667a50719023c46524587c07d02"
        },
        {
          "alg": "SHA-384",
          "content": "b7247f53b66648007a9fe6c129d09685d3dc8717a0318de01826a4ef67d4f6bb4babaaf63ceb2f6173f2f0b69b084c72"
        },
        {
          "alg": "SHA3-384",
          "content": "b92f452b37f519e5265d3a8a53d4b541dde7a204ef87dc06bb0ba222718555d52ab365f9cb8bc26642d301b8cab95e79"
        },
        {
          "alg": "SHA3-256",
          "content": "5f65efffa28183247083cbac7730e8762c20c40f8987391ddf06ddc4cef5ead1"
        },
        {
          "alg": "SHA3-512",
          "content": "975ea2150b5634c1e794888e18aacbbef85ddfe8e54e3a9171b1d16a7a31c7dbebdf4ae2db09d2faae4e6cec749f14437a78679fee0d56c4c39dea16a82ff417"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "Public Domain",
            "url": "https://github.com/stleary/JSON-java/blob/master/LICENSE"
          }
        }
      ],
      "purl": "pkg:maven/org.json/json@20220924?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/douglascrockford/JSON-java.git",
          "type": "vcs"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.package-url/packageurl-java@1.4.1?type=jar",
      "group": "com.github.package-url",
      "name": "packageurl-java",
      "version": "1.4.1",
      "description": "The official Java implementation of the PackageURL specification. PackageURL (purl) is a minimal specification for describing a package via a \u0022mostly universal\u0022 URL.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f8b3a23e6402d317b612251c83d292e7"
        },
        {
          "alg": "SHA-1",
          "content": "0a0d1009191c1cf6b04f40d26e4717596f3a90e0"
        },
        {
          "alg": "SHA-256",
          "content": "8e23280221afd1e6561d433dfb133252cd287167acb0eca5a991667118ff10a2"
        },
        {
          "alg": "SHA-512",
          "content": "ea5ed91a395e3c8ef18d575d363dc30302986dc5cc8423e97950708cd48dd87e97176619a246d72e8f5b4ff1a7fbb2afb5e9b3c7a11aa7340b540655ba4d4e9b"
        },
        {
          "alg": "SHA-384",
          "content": "791d86830598ccce6ea59faaa7ece317b84ce1b245194e39cf576f65250b32c8a62c0660478a4d4038040b8650e520b3"
        },
        {
          "alg": "SHA3-384",
          "content": "c2354f6e79b3feefa44b289a53b9ee05a4db20d75a6a367a4880a2028ec8306fd45c5495962381709b15134136bd3ed6"
        },
        {
          "alg": "SHA3-256",
          "content": "29888a1b55158593ef90003638a7ea204b0cff1d255f48780caa37e1c52bcfe3"
        },
        {
          "alg": "SHA3-512",
          "content": "3bb0b2ef76d2dc0cff23f70541091bd30744d1fb0e240aca4c930f01f70314f1f7cf80552d0116b77333a2c3a3025b217fc3aceca2755469f6871983d5e9740a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:maven/com.github.package-url/packageurl-java@1.4.1?type=jar",
      "externalReferences": [
        {
          "url": "https://travis-ci.com/package-url/packageurl-java",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/package-url/packageurl-java/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/package-url/packageurl-java.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.lucene/lucene-core@8.11.2?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.lucene",
      "name": "lucene-core",
      "version": "8.11.2",
      "description": "Apache Lucene Java Core",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b8c6764eccdc3d734c8b5e57dd37c94d"
        },
        {
          "alg": "SHA-1",
          "content": "57438c3f31e0e440de149294890eee88e030ea6d"
        },
        {
          "alg": "SHA-256",
          "content": "8970925f43d789a70247e36c1ba5a2607baf4195c35afd0cd878642c95c37409"
        },
        {
          "alg": "SHA-512",
          "content": "f28f9e234db16ca4046982a34de88c10f74b19bb750fcb7c42b7af68d7feda1f14e54083ef3a5cfded5a5b6c3d6d84d65b0a661933c23f1b6714833287924aed"
        },
        {
          "alg": "SHA-384",
          "content": "49fe4d90193fb126c44a2b2bb825017ce34dfaa5a481be386afb8744659abb1f192960a8b1481527e19143f35189c3a0"
        },
        {
          "alg": "SHA3-384",
          "content": "6011e034bcdbc953d77b4e55e2b5d0bce776e9e7922d42fb765417cb1bdaa6255e2a5fa0c338721f6bd572b10a6cfb0d"
        },
        {
          "alg": "SHA3-256",
          "content": "1e4bbc4d7efa5fb00852ea345d80ed272c9e7ced21236d17e3821b33a54d89ec"
        },
        {
          "alg": "SHA3-512",
          "content": "714f471872859653f35ee0995537dc105ef4874747c4d5ee5b3c085b67d4746c903e0be95bbfc5271d7fd6a46c9124e2c4150ae52220357790c2bb67dfd723f6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.lucene/lucene-core@8.11.2?type=jar",
      "externalReferences": [
        {
          "url": "https://builds.apache.org/computer/lucene/",
          "type": "build-system"
        },
        {
          "url": "https://issues.apache.org/jira/browse/LUCENE",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/lucene-general/",
          "type": "mailing-list"
        },
        {
          "url": "https://www.apache.org/",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.lucene/lucene-analyzers-common@8.11.2?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.lucene",
      "name": "lucene-analyzers-common",
      "version": "8.11.2",
      "description": "Additional Analyzers",
      "scope": "optional",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5f1ccb6914773cf321fb26ec2159a9c3"
        },
        {
          "alg": "SHA-1",
          "content": "07a74c5c2dd082b08c644a9016bc6ff66c8f27cc"
        },
        {
          "alg": "SHA-256",
          "content": "d3def04f7d0d2c891cf2c7e3dfc14c3b53545bec1cb8732ae033f25164e5c931"
        },
        {
          "alg": "SHA-512",
          "content": "d745b159350fdd52a7bd58ff341ff58ecd7bc34c1c8762f32cab7a42f4eca14d7691592611701d2522cd16ea8a97d6d71536d203caff379a6de44ef7ac518d50"
        },
        {
          "alg": "SHA-384",
          "content": "a9816835fed0db0e31c10b610bfd42394b8110d4e4077025527be3c3367236071bb669d921607f9ab6a881ad1142c585"
        },
        {
          "alg": "SHA3-384",
          "content": "0d944c8b518a22188c2216b7b38b2c8d5740e09646af4f2196da9097f6ea2edb647e66298f07636ac4c423f400b00cf1"
        },
        {
          "alg": "SHA3-256",
          "content": "b551f6f08ae2e150f0306bf50bd9c6d7f14b86f9fd4c73daee638f448765449d"
        },
        {
          "alg": "SHA3-512",
          "content": "afa274a413500a4ce8781f36da65bd1767c91c3406f81f13caa5f545cad7ce1d6e7d49b5bbf54dba122b2136e3e68674d6684ac7ae2d80358282088ad94f5288"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.lucene/lucene-analyzers-common@8.11.2?type=jar",
      "externalReferences": [
        {
          "url": "https://builds.apache.org/computer/lucene/",
          "type": "build-system"
        },
        {
          "url": "https://issues.apache.org/jira/browse/LUCENE",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/lucene-general/",
          "type": "mailing-list"
        },
        {
          "url": "https://www.apache.org/",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.lucene/lucene-queryparser@8.11.2?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.lucene",
      "name": "lucene-queryparser",
      "version": "8.11.2",
      "description": "Lucene QueryParsers module",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5640c1f4ee0b1f2798c11ad2bd558173"
        },
        {
          "alg": "SHA-1",
          "content": "1886e3a27a8d4a73eb8fad54ea93a160b099bc60"
        },
        {
          "alg": "SHA-256",
          "content": "d2cf511bad3bda7b91587cba4c227f8964a4e8da0433d05a740439ea21bb1ae4"
        },
        {
          "alg": "SHA-512",
          "content": "95ac945685ba071d52f8c593f4f4b1d90ab9b930ca7a834bb3e193a644cb212e51232d50ad8330678a543bbde6142e794e8a1fa69e28f50331216443dd329d9a"
        },
        {
          "alg": "SHA-384",
          "content": "26581b3465343dcca8952aca125958791c88f725ef9ab9ad62a93bb500836b242f6b270c3cf6aa591c1e6132499ae1d6"
        },
        {
          "alg": "SHA3-384",
          "content": "82e6acfbc011ab33007881467b13df18347ecbe9a9fed03a08e1506c4ad77371e2eb649629d27ff2c8f2a9f9490b7d98"
        },
        {
          "alg": "SHA3-256",
          "content": "c9d009269f90fa4a5c523242ea8b8fa0e742df49af6cc41e6e0c579a153b9455"
        },
        {
          "alg": "SHA3-512",
          "content": "2c40f9413fd888c796a02dcf0fbb49eb0944d75d7d2f0ca8350379cc6ffd0314f59fb5595a86b06c5baf4e76f0b37f22112fc64ab45d3220aa5b046297fbfa25"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.lucene/lucene-queryparser@8.11.2?type=jar",
      "externalReferences": [
        {
          "url": "https://builds.apache.org/computer/lucene/",
          "type": "build-system"
        },
        {
          "url": "https://issues.apache.org/jira/browse/LUCENE",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/lucene-general/",
          "type": "mailing-list"
        },
        {
          "url": "https://www.apache.org/",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.lucene/lucene-queries@8.11.2?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.lucene",
      "name": "lucene-queries",
      "version": "8.11.2",
      "description": "Lucene Queries Module",
      "scope": "optional",
      "hashes": [
        {
          "alg": "MD5",
          "content": "58ed6bbc77bc9a3063d2bbe3b631821a"
        },
        {
          "alg": "SHA-1",
          "content": "c86c8bbd6dddfb6870fc2f59989cb89d50290d5a"
        },
        {
          "alg": "SHA-256",
          "content": "0f93119d7d316cef13fdebaa668e716b197eb86cbe8e7b345c0ead26320e63c8"
        },
        {
          "alg": "SHA-512",
          "content": "378fcb346f8471130bb203800dc574c3f1724aa277e3c3922f13803b352e6697189ff673b9748655da5354aa628c352c634b186020ec31bb998e5e8fab64a12c"
        },
        {
          "alg": "SHA-384",
          "content": "de0492cb11f760bad7ae111f49a0199cc04365d30506d135e0f7df97ded4741e1c1933c8cb198611d3b999864e1d5dbb"
        },
        {
          "alg": "SHA3-384",
          "content": "6227770ee3f11b43044b1c59058f62ca56df272ff83b9d703c35ced1784dfc7a049d6f7b7f6f0c795c24ac811f4fa001"
        },
        {
          "alg": "SHA3-256",
          "content": "928e02a55d353dd48a9c766049652946148dfa6d2b8dbb71bca311a7192a3c5c"
        },
        {
          "alg": "SHA3-512",
          "content": "24f9841bebac1ff7b5f3d602c6960813bafa8a880f6a1d3604171ab6b30203591a2bc3e2450f761d34254adc1ff7e0889381fa5b149c65ddfa7683a13c87b6af"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.lucene/lucene-queries@8.11.2?type=jar",
      "externalReferences": [
        {
          "url": "https://builds.apache.org/computer/lucene/",
          "type": "build-system"
        },
        {
          "url": "https://issues.apache.org/jira/browse/LUCENE",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/lucene-general/",
          "type": "mailing-list"
        },
        {
          "url": "https://www.apache.org/",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.lucene/lucene-sandbox@8.11.2?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.lucene",
      "name": "lucene-sandbox",
      "version": "8.11.2",
      "description": "Lucene Sandbox",
      "scope": "optional",
      "hashes": [
        {
          "alg": "MD5",
          "content": "3e7d4b2ca392627e868741d4fafe0a5e"
        },
        {
          "alg": "SHA-1",
          "content": "5ff823b4a429ccf842386a008b08bddfa88d9f87"
        },
        {
          "alg": "SHA-256",
          "content": "fea64c3102e21a1c233a95ebed8e7021e65f82e517da8d8b1446776356705bb7"
        },
        {
          "alg": "SHA-512",
          "content": "a4a044cd93d1476c16b85117116f57bf57647af120c09c71a97b1b1c76d19ad975ef316b42696ace16983a7dc2d3955cf50d5cd0ae83154da119fcfc1bcef672"
        },
        {
          "alg": "SHA-384",
          "content": "6bfc3de1c9ebf3b21e639183fab0382681e7334307cd47d68cfff5f39aacca30948172a0b3ab8695a3ac40488c157d5a"
        },
        {
          "alg": "SHA3-384",
          "content": "56488b54e092c6f3333e9dd6b33e44b6e391c329b2ae65232d61313d8e1c8db07553012ffd3bb2081134832de0c646b0"
        },
        {
          "alg": "SHA3-256",
          "content": "13f154e51f4a876ffe132d252bcbb24a816c817b12522309fc30c7ac2ae97fce"
        },
        {
          "alg": "SHA3-512",
          "content": "b6c1d21ee119ed5810279fc3b208292116efbbf3b5c0766d982be85346f98db0e39df7db0630633ecff6fc746f568783063cf7cf28096077ee09cbc92639a069"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.lucene/lucene-sandbox@8.11.2?type=jar",
      "externalReferences": [
        {
          "url": "https://builds.apache.org/computer/lucene/",
          "type": "build-system"
        },
        {
          "url": "https://issues.apache.org/jira/browse/LUCENE",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/lucene-general/",
          "type": "mailing-list"
        },
        {
          "url": "https://www.apache.org/",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.pebbletemplates/pebble@3.2.0?type=jar",
      "group": "io.pebbletemplates",
      "name": "pebble",
      "version": "3.2.0",
      "description": "Templating engine for Java.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "30e37f975dc67ebf4367d113150b81ac"
        },
        {
          "alg": "SHA-1",
          "content": "ea9f717264313534a5732ae23bf17a2779213cb3"
        },
        {
          "alg": "SHA-256",
          "content": "893c703eb9bc5bc3a98cb38b74eef67c2200b20afcb8cca977e0043375cb9d7f"
        },
        {
          "alg": "SHA-512",
          "content": "3fdf7d6638c017b9cd6700a7815e71343e904fd800b0c4a18f1467e9b2651a350a15869c7f64a5991c32990ebc2c3ff56b2e9b81516ccc24693d6647b1612bbd"
        },
        {
          "alg": "SHA-384",
          "content": "eeb7729a923b1c3cfd124b4412b1cd5f5875857e139b7191d1a65459e5e1a8212896d678162962631c6d2f3474a2f48e"
        },
        {
          "alg": "SHA3-384",
          "content": "e48baf646cb4530f890f02c72c8aab51d82ba56e1549465cda2b322a46e4c9585c013c26a22a6074d194c2d2ec04d1ef"
        },
        {
          "alg": "SHA3-256",
          "content": "1aa8da60613e0da053166fb5f1645d18b12d76ba37f92f47e32c8e84c27d9513"
        },
        {
          "alg": "SHA3-512",
          "content": "59429a68b4182c2bfdf97060658cd13c8d78daf87dadc0b1823c0e81aa8c1cc5e7fc2355c1652c393e5c4450aa16dba030bffdfa9a24997924dda24cbd030797"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/io.pebbletemplates/pebble@3.2.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/PebbleTemplates/pebble.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.unbescape/unbescape@1.1.6.RELEASE?type=jar",
      "publisher": "The UNBESCAPE team",
      "group": "org.unbescape",
      "name": "unbescape",
      "version": "1.1.6.RELEASE",
      "description": "Advanced yet easy-to-use escape/unescape library for Java",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d95ed94e1624e307a1958ee105ccbf39"
        },
        {
          "alg": "SHA-1",
          "content": "7b90360afb2b860e09e8347112800d12c12b2a13"
        },
        {
          "alg": "SHA-256",
          "content": "597cf87d5b1a4f385b9d1cec974b7b483abb3ee85fc5b3f8b62af8e4bec95c2c"
        },
        {
          "alg": "SHA-512",
          "content": "6918e9579b06721942fdcd91e401f5b996fb4eac13056dbafdf594661f355a34874eb5266784bc2c4f82df9fdd9e219d71a96f52945a354f01665f85f8166bb3"
        },
        {
          "alg": "SHA-384",
          "content": "1b808b67c784b69afea64364ba4c0d433c7f042c512f5c18f07d5388fe7ac4741913f696424bd8fbde147383cfb3d8f9"
        },
        {
          "alg": "SHA3-384",
          "content": "6525bd20a12ff43a0089c0d59369574ae6c01e2b4b1aacf466847d4433ae403db08404a9b59be397c3034f972bcd6b06"
        },
        {
          "alg": "SHA3-256",
          "content": "a190c9bedccff959d08db12fe7080437fb4e98f05516b39d6540be718e151cc6"
        },
        {
          "alg": "SHA3-512",
          "content": "5d7b5edc0c2a0d47c9625936c14b4122330b96cdf54260fe2a6468289c2f4cbc4ee19770c1144acfa702f2f058a81544b4aea9258fe0e15166a1a331736d7b77"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.unbescape/unbescape@1.1.6.RELEASE?type=jar",
      "externalReferences": [
        {
          "url": "http://www.unbescape.org",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/us.springett/vulndb-data-mirror@1.0.1?type=jar",
      "group": "us.springett",
      "name": "vulndb-data-mirror",
      "version": "1.0.1",
      "description": "VulnDB Data Mirror is a Java command-line utility that mirrors the entire contents of the VulnDB service. The intended purpose of vulndb-data-mirror is to be able to replicate the VulnDB vulnerabiity data inside a company firewall so that local (faster) access to data can be achieved and reused by the Dependency-Check and Dependency-Track ecosystem.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "eb9ee5b2bf1d4a49df87f5e753bf84b4"
        },
        {
          "alg": "SHA-1",
          "content": "a9c60b680f508f70a763815ef2558db2a0edecfc"
        },
        {
          "alg": "SHA-256",
          "content": "33f7e8af3b859b6881fd0eb1b99f7ad707321dcc632deb48b924a7c627090721"
        },
        {
          "alg": "SHA-512",
          "content": "aef0872ad9875d54013d60bdd32daa98070aa6fe2dc042153899a002eadefaddef87450a73cc5de6d66358beca6906e76a12d24a92cec49b161d779d1ed6c232"
        },
        {
          "alg": "SHA-384",
          "content": "0e0547665131899d0c51b3c17e08898cb78c7a39ed1562492a9499c55abf7ee070eff02a930228befe231ee3cbb2fb8d"
        },
        {
          "alg": "SHA3-384",
          "content": "83220f391c12952afa45c5c913c1387439cbc08300c6e75265322724adfed2a706f918a85b984a547f7d4c7203d68e8b"
        },
        {
          "alg": "SHA3-256",
          "content": "f360f3ec2f9c324e321cfbd789b930f17e078dc2640e34cdd3acb7a409495d4e"
        },
        {
          "alg": "SHA3-512",
          "content": "94e24bf96cc1d51d984834b44577df80cee79409f550187d941429c9eb3b060514bfb76f2a39a5594fd467f63b6295815daba4df4d93a87449e9d797c6ba7959"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/us.springett/vulndb-data-mirror@1.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://travis-ci.org/stevespringett/vulndb-data-mirror",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/stevespringett/vulndb-data-mirror/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/stevespringett/vulndb-data-mirror.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "commons-cli",
      "name": "commons-cli",
      "version": "1.5.0",
      "description": "Apache Commons CLI provides a simple API for presenting, processing and validating a Command Line Interface.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6c3b2052160144196118b1f019504388"
        },
        {
          "alg": "SHA-1",
          "content": "dc98be5d5390230684a092589d70ea76a147925c"
        },
        {
          "alg": "SHA-256",
          "content": "bc8bb01fc0fad250385706e20f927ddcff6173f6339b387dc879237752567ac6"
        },
        {
          "alg": "SHA-512",
          "content": "b78ac2b418e9e9e7d0bc866664577199d320408a6f03151b3789bac365c986dd526df853599e633d7e50fe136cbf3eb9ce50c9cfa0ad38c3cc8d8ee416f61c40"
        },
        {
          "alg": "SHA-384",
          "content": "a7a2daa807c4007c506b5100f0a9b526c0052c4e1f6b699904ef9d2aba8195b6003dc4d47ca133b15e2f3e830bdbe6c4"
        },
        {
          "alg": "SHA3-384",
          "content": "44ca97514a2e34b5bf3de9b5d45c8e871f6eee517db7f3c4b4476eb3e8dfe9a9d8760f3181114708288c373727b42475"
        },
        {
          "alg": "SHA3-256",
          "content": "a0a47001d3a293f129ffc21f17f575a9d23ce5b88b440e651e4cd01edd0cc421"
        },
        {
          "alg": "SHA3-512",
          "content": "483dae23d6827a105d17847c8c813527f19042b65c4d09635dfc4bfd25990fe3ba2a997540460fd5b1d72ca3add9a38ca8b32004680764db972a9bb62f7f68d8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
      "externalReferences": [
        {
          "url": "https://issues.apache.org/jira/browse/CLI",
          "type": "issue-tracker"
        },
        {
          "url": "https://gitbox.apache.org/repos/asf?p=commons-cli.git",
          "type": "vcs"
        },
        {
          "url": "https://builds.apache.org/",
          "type": "build-system"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/commons-user/",
          "type": "mailing-list"
        },
        {
          "url": "https://www.apache.org/",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/oauth.signpost/signpost-core@2.1.1?type=jar",
      "group": "oauth.signpost",
      "name": "signpost-core",
      "version": "2.1.1",
      "description": "A simple, light-weight, and modular OAuth client library for the Java platform.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ef778c731f9b6cbb8311a780b1f4094f"
        },
        {
          "alg": "SHA-1",
          "content": "e307e72ff918b775f797f364b1fd442f23b5408a"
        },
        {
          "alg": "SHA-256",
          "content": "2628d8c1928e512cea34001c1108bfe251049b1ef747ba284aa7c781c24b2e79"
        },
        {
          "alg": "SHA-512",
          "content": "9c3a0934458de2d79c00d53422b838e17369cece5e325b11709af1c74e368c58de1c175eed689a247f6ab622f2a67c2ccd06283864e64d95abdbc26629d0226d"
        },
        {
          "alg": "SHA-384",
          "content": "c4051510406394dd52cbb6170f20869e5cef2b026e88c672908bb2ceaeeb43cd88df2811dd75fbe6ad37f2c523f562cd"
        },
        {
          "alg": "SHA3-384",
          "content": "1a09cf0e64cd9366f19197b6a66b3a94bb4851efa596f94538890d01e3261a611a7ceb6768512e5e3c2fd8fc5d3d01c4"
        },
        {
          "alg": "SHA3-256",
          "content": "190333f0f7c94e3db5f4d49392d454f43c710e43266fbb6049b58f8e22dc1548"
        },
        {
          "alg": "SHA3-512",
          "content": "9f0c3184b752c9ed73ab4f34805e62cafde30dc4b94f2dc55aa9645c15921ebaeba3f2bf3202ed98e60f3bb66e47945b1449e07fd559e0654afbe92f2a6a94c5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/oauth.signpost/signpost-core@2.1.1?type=jar",
      "externalReferences": [
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/mttkay/signpost/pulls",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/mttkay/signpost",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.konghq/unirest-java@3.14.1?type=jar",
      "group": "com.konghq",
      "name": "unirest-java",
      "version": "3.14.1",
      "description": "Simplified, lightweight HTTP client library.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "096978cd640572fd1aa458b3c4aa0ee9"
        },
        {
          "alg": "SHA-1",
          "content": "4da1048fc6b95187baf912a5e0f3f1dab457024f"
        },
        {
          "alg": "SHA-256",
          "content": "aa33f46716d5660a34ac354094d53e742ee6d8b87106caf0a05310146fd3d33a"
        },
        {
          "alg": "SHA-512",
          "content": "6a63c163b383173091e16c57f9d33e32a9abc4748cff18e74e95fd4acdf94c91b83db302eb8563c208fd75d2dc2f215cf5e90f7ef9e966b49d6acbc06b769c7e"
        },
        {
          "alg": "SHA-384",
          "content": "3b8fb1c87da57854ab450a1a57e71178c5886681182fccbad63930dd66a353723bb18c7400a99e3f5e5294e9f8e17ff4"
        },
        {
          "alg": "SHA3-384",
          "content": "da10a0f9b7f075e8ab396a26c5e3520b9e290c189dc6c8990668bfe6cdb267fc65ef7f70a617bd78b362272b38ff037b"
        },
        {
          "alg": "SHA3-256",
          "content": "6eda3db154011557a8e39e70fa37aafa6f1674b888a6f9dd35071d84a0669483"
        },
        {
          "alg": "SHA3-512",
          "content": "bba6f545d01b590c7d3a1d9b5c8783b8a0631a50135c33317766cb1192c730add220b5c59591d8d509ad7050bee97025fb5d44d3c9e9025c39a28a526d7e8071"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:maven/com.konghq/unirest-java@3.14.1?type=jar",
      "externalReferences": [
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/Kong/unirest-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents",
      "name": "httpclient",
      "version": "4.5.13",
      "description": "Apache HttpComponents Client",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "40d6b9075fbd28fa10292a45a0db9457"
        },
        {
          "alg": "SHA-1",
          "content": "e5f6cae5ca7ecaac1ec2827a9e2d65ae2869cada"
        },
        {
          "alg": "SHA-256",
          "content": "6fe9026a566c6a5001608cf3fc32196641f6c1e5e1986d1037ccdbd5f31ef743"
        },
        {
          "alg": "SHA-512",
          "content": "3567739186e551f84cad3e4b6b270c5b8b19aba297675a96bcdff3663ff7d20d188611d21f675fe5ff1bfd7d8ca31362070910d7b92ab1b699872a120aa6f089"
        },
        {
          "alg": "SHA-384",
          "content": "093ac3e2dde58e34aa70309c7305eb3c9b5be2509a9293f1672494da55479a86bd112e83326746dc7a32855472952b99"
        },
        {
          "alg": "SHA3-384",
          "content": "cd6882e7868624164e460f2f3ea01466f863c0dcb902b031c656b57356f563be83b29530df41d88d634ed3d01fc9964d"
        },
        {
          "alg": "SHA3-256",
          "content": "710b1d8d7dae0b8e4270756694ca9c83d64965f42d3b4170c609b14d47c2762c"
        },
        {
          "alg": "SHA3-512",
          "content": "276fa6a6599dc89382d658115695cf4da6b0d39b34e9c349c17a5dbd64122eaee553bb9ed75c0378ec4a83be157c8aa39370662de3c9b8fd55ebc1dd608383e6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar",
      "externalReferences": [
        {
          "url": "http://www.apache.org/",
          "type": "website"
        },
        {
          "url": "http://issues.apache.org/jira/browse/HTTPCLIENT",
          "type": "issue-tracker"
        },
        {
          "url": "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/",
          "type": "mailing-list"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.13?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents",
      "name": "httpcore",
      "version": "4.4.13",
      "description": "Apache HttpComponents Core (blocking I/O)",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e07a248f61c52776a2366c075dcd4963"
        },
        {
          "alg": "SHA-1",
          "content": "853b96d3afbb7bf8cc303fe27ee96836a10c1834"
        },
        {
          "alg": "SHA-256",
          "content": "e06e89d40943245fcfa39ec537cdbfce3762aecde8f9c597780d2b00c2b43424"
        },
        {
          "alg": "SHA-512",
          "content": "23430cde8b9bed33c91474ba49f1143284135df1b25fdcbc37bc3bb7e9549e77b3918eb40250093db652ae200367e87316129b23b4f6987e94939d60f467498d"
        },
        {
          "alg": "SHA-384",
          "content": "b776d57492478c162d428bdd3139be0fa6c3cf4503355c3a04710ca7bc3ee74d66627f49eb42814fd8f8364dbd17aa91"
        },
        {
          "alg": "SHA3-384",
          "content": "f6f9e70b76717b705d040f0b33857f0dde89736f2e6d55ea56585235eb1b6d0ce4d5aa18c82050391ac968dcb5ec29e2"
        },
        {
          "alg": "SHA3-256",
          "content": "721a9fc1bb353ddf3e438bed4306a3fa5b55ffafb474be5dc8715bd23d7a5afa"
        },
        {
          "alg": "SHA3-512",
          "content": "c78f9d464e4b840e28266658512b1cab0ece1470bef2764deb2dc20ba69b73d526d92a19494ccb87b4408f9235c4294417f2e10ba709469f4bd62d017b9e3cbe"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.13?type=jar",
      "externalReferences": [
        {
          "url": "http://www.apache.org/",
          "type": "website"
        },
        {
          "url": "http://issues.apache.org/jira/browse/HTTPCORE",
          "type": "issue-tracker"
        },
        {
          "url": "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/",
          "type": "mailing-list"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "commons-logging",
      "name": "commons-logging",
      "version": "1.2",
      "description": "Apache Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "040b4b4d8eac886f6b4a2a3bd2f31b00"
        },
        {
          "alg": "SHA-1",
          "content": "4bfc12adfe4842bf07b657f0369c4cb522955686"
        },
        {
          "alg": "SHA-256",
          "content": "daddea1ea0be0f56978ab3006b8ac92834afeefbd9b7e4e6316fca57df0fa636"
        },
        {
          "alg": "SHA-512",
          "content": "ed00dbfabd9ae00efa26dd400983601d076fe36408b7d6520084b447e5d1fa527ce65bd6afdcb58506c3a808323d28e88f26cb99c6f5db9ff64f6525ecdfa557"
        },
        {
          "alg": "SHA-384",
          "content": "ac20720d7156131478205f1b454395abf84cfc8da2f163301af32f63bd3c4764bd26cb54ed53800f33193ae591f3ce9c"
        },
        {
          "alg": "SHA3-384",
          "content": "628eb4407e95dca84da1a06b08a6d9b832a49de8472b1b217e8607f08efeeed18b996232d64dd07f03e78e0e3bb4b078"
        },
        {
          "alg": "SHA3-256",
          "content": "9aab62deccf156ee6e324c925dfc30ecb53e8465802863a551901a461424e807"
        },
        {
          "alg": "SHA3-512",
          "content": "3fd76857f6d20c03799537cc961c1c4ddf1c375c6c192fb982363e3b9397ba138b77f24ef38b4202f44e37586789c0320e4de18fdadd2772304fd14a9b26d552"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
      "externalReferences": [
        {
          "url": "http://issues.apache.org/jira/browse/LOGGING",
          "type": "issue-tracker"
        },
        {
          "url": "http://svn.apache.org/repos/asf/commons/proper/logging/trunk",
          "type": "vcs"
        },
        {
          "url": "https://continuum-ci.apache.org/",
          "type": "build-system"
        },
        {
          "url": "http://mail-archives.apache.org/mod_mbox/commons-user/",
          "type": "mailing-list"
        },
        {
          "url": "http://www.apache.org/",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.httpcomponents/httpmime@4.5.13?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents",
      "name": "httpmime",
      "version": "4.5.13",
      "description": "Apache HttpComponents HttpClient - MIME coded entities",
      "hashes": [
        {
          "alg": "MD5",
          "content": "3f0c1ef2c9dc47b62b780192f54b0c18"
        },
        {
          "alg": "SHA-1",
          "content": "efc110bad4a0d45cda7858e6beee1d8a8313da5a"
        },
        {
          "alg": "SHA-256",
          "content": "06e754d99245b98dcc2860dcb43d20e737d650da2bf2077a105f68accbd5c5cc"
        },
        {
          "alg": "SHA-512",
          "content": "e1b0ee84bce78576074dc1b6836a69d8f5518eade38562e6890e3ddaa72b7f54bf735c8e2286142c58cddf45f745da31261e5d73b7d8092eb6ecfb20946eb36c"
        },
        {
          "alg": "SHA-384",
          "content": "bfb59447493ea1dd69a0b5a49de8adfc9813d45aae7e005cfe8e6fe282d6caadf7aea520ec6df3f1bdeb99f129701827"
        },
        {
          "alg": "SHA3-384",
          "content": "0c728ad29e80bb4d262d4adf901880518627ab78ef39e194bfce87f91555fc62bf9423f3c15ab7f5c1b6b895865a263c"
        },
        {
          "alg": "SHA3-256",
          "content": "8bbe5a758db8c840cc2d72dc4070c2e264d01fb0d3ed3dd92489e0eb25d030c7"
        },
        {
          "alg": "SHA3-512",
          "content": "76c5f955afbbb00ff00ea39ad2179727c2d7be2a75bd3f654db01e06bb611803bd1258b7527ac30c9d81987b32d1347fbcb23ce967638188672d5ed0151cc791"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents/httpmime@4.5.13?type=jar",
      "externalReferences": [
        {
          "url": "http://www.apache.org/",
          "type": "website"
        },
        {
          "url": "http://issues.apache.org/jira/browse/HTTPCLIENT",
          "type": "issue-tracker"
        },
        {
          "url": "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/",
          "type": "mailing-list"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.httpcomponents/httpcore-nio@4.4.13?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents",
      "name": "httpcore-nio",
      "version": "4.4.13",
      "description": "Apache HttpComponents Core (non-blocking I/O)",
      "hashes": [
        {
          "alg": "MD5",
          "content": "acf9cdf59217b169c3f68582ed0be0a8"
        },
        {
          "alg": "SHA-1",
          "content": "3f897ace4d7f10f0ea6a58f524a3b105dd483653"
        },
        {
          "alg": "SHA-256",
          "content": "71fcfbe869002c48563cc5979fc734571c8d0d167ccce42970c932f337981f19"
        },
        {
          "alg": "SHA-512",
          "content": "ac0f7c8691c9797fd72a26c003c594e7ade382d9454d5e6151ff38c99fa5a37cd5305f15d7643cb75054e1e67d672444e358c2fe1f625818aed2ebbbd5157590"
        },
        {
          "alg": "SHA-384",
          "content": "63c8517be7bee321af4876f4bc4bf6ddd2493b0044d51279171f0c8caaa2e55d16a62f672676a029f0027a7506d8c264"
        },
        {
          "alg": "SHA3-384",
          "content": "655ab06d67536754f62b490503a6a358df59c493019de8008809a6d2a6b647fbc4015c603495ce2d6f764e310685e7f3"
        },
        {
          "alg": "SHA3-256",
          "content": "7e4266a4c17e87d98c425993f6efcff1f9ae12fad15bbf549d980665ceff690f"
        },
        {
          "alg": "SHA3-512",
          "content": "d50bd619d9af2f8aecbe361fa2234d3b9e3ad2dec4762881b9f07255df99a18a0971f036b3e2646680a6d798b0e19b718cf16aca0992c9fb701c2b0b6cdd06c2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents/httpcore-nio@4.4.13?type=jar",
      "externalReferences": [
        {
          "url": "http://www.apache.org/",
          "type": "website"
        },
        {
          "url": "http://issues.apache.org/jira/browse/HTTPCORE",
          "type": "issue-tracker"
        },
        {
          "url": "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/",
          "type": "mailing-list"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.httpcomponents/httpasyncclient@4.1.5?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents",
      "name": "httpasyncclient",
      "version": "4.1.5",
      "description": "Apache HttpComponents AsyncClient",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5346c547bfd0da64eb3dc54be9380d65"
        },
        {
          "alg": "SHA-1",
          "content": "cd18227f1eb8e9a263286c1d7362ceb24f6f9b32"
        },
        {
          "alg": "SHA-256",
          "content": "0c1877489a9d1ba4fa50f6cfcab11d1123618858cb31d56afaab5afdd5064d99"
        },
        {
          "alg": "SHA-512",
          "content": "1e33c7fdfa63f377ec4844b7744d2f8ec30dc7867136905ff5a5a6e5f94efa5b8159ba20e81f0048f48430cf63ada7411a3974a418aefa497d2b4fab3501f5ba"
        },
        {
          "alg": "SHA-384",
          "content": "9c4cf09ffeb61bccc3b67375f401c8a96c46bdee7c77f84e3227271a635e109a550526185407869e93ede8f081786977"
        },
        {
          "alg": "SHA3-384",
          "content": "25bcc09200af70f5624baf5ddb95ac6bf46daaffb938d141f72f63ef76df8b740ba3b50104da997cfe67c34bd520fa5e"
        },
        {
          "alg": "SHA3-256",
          "content": "ddb21eeb3e1c3f00ebcf397b58d8d972cc7ab7b140e8939654bf24b8b89382a7"
        },
        {
          "alg": "SHA3-512",
          "content": "f753a8b9607f42417912c3bddeda3f189ab9f469416dafdbcd29b1df7a358aa57deba8a79a5663fdd1a4acbe35b39a48fd24f889a50e05a4726132db85699ebd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents/httpasyncclient@4.1.5?type=jar",
      "externalReferences": [
        {
          "url": "http://www.apache.org/",
          "type": "website"
        },
        {
          "url": "http://issues.apache.org/jira/browse/HTTPASYNC",
          "type": "issue-tracker"
        },
        {
          "url": "https://svn.apache.org/repos/asf/httpcomponents/httpasyncclient/branches/4.1.x",
          "type": "vcs"
        },
        {
          "url": "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/",
          "type": "mailing-list"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.code.gson/gson@2.9.0?type=jar",
      "group": "com.google.code.gson",
      "name": "gson",
      "version": "2.9.0",
      "description": "Gson JSON library",
      "hashes": [
        {
          "alg": "MD5",
          "content": "53fa3e6753e90d931d62cb89580fde2f"
        },
        {
          "alg": "SHA-1",
          "content": "8a1167e089096758b49f9b34066ef98b2f4b37aa"
        },
        {
          "alg": "SHA-256",
          "content": "c96d60551331a196dac54b745aa642cd078ef89b6f267146b705f2c2cbef052d"
        },
        {
          "alg": "SHA-512",
          "content": "13ff22a60ee6a72ba0c4e8fe3702b8f3f6be6b67ed4279079a9843f57ad0ca125d4ecc1564ac4e736eab10fb6254d2c011b2c08c514d708be7f8091332ed2c2c"
        },
        {
          "alg": "SHA-384",
          "content": "fde5b61066a8cdd711874ed42f20cb914e4193f1477456c431fb0ca32d86324414e92b0b2c5696f56d0b9d69521d8dee"
        },
        {
          "alg": "SHA3-384",
          "content": "314156bb766c2f792317763322a819ef968e5ecc7f1a236ab0bb383426d1bf396e18099edb16f85e572b42c85a6c89ba"
        },
        {
          "alg": "SHA3-256",
          "content": "5e550f5f719c5f5c4ad04fbe6cd0d7868d6bf0e4184f386e4896e72c4839de3e"
        },
        {
          "alg": "SHA3-512",
          "content": "a3db5a0129c42598b5ded96cdf75d69c75d4a6b317746c9b7fbf238b2ca78cfb48fb0023ae1a4178bc8da3727ceb0bad6930f8f24624e0be6dbbde00adbb0624"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.code.gson/gson@2.9.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/gson/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/google/gson/",
          "type": "vcs"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.woodstox",
      "name": "woodstox-core",
      "version": "6.4.0",
      "description": "Woodstox is a high-performance XML processor that implements Stax (JSR-173), SAX2 and Stax2 APIs",
      "scope": "optional",
      "hashes": [
        {
          "alg": "MD5",
          "content": "afcba1114fca8199ef26346dd6011e90"
        },
        {
          "alg": "SHA-1",
          "content": "c47579857bbf12c85499f431d4ecf27d77976b7c"
        },
        {
          "alg": "SHA-256",
          "content": "d6eb9f2f40049a7a808baf11ffba0737648e62ff52fde9271d808e5d57a27279"
        },
        {
          "alg": "SHA-512",
          "content": "7da4cd51f7082e59b3cb78988cda78bf162e2b02457caf17242cb9cea9b8002ada15d4dfe774ca0355acdea95c88b67c4d06a27a61653cb84c9a46d27b2726c6"
        },
        {
          "alg": "SHA-384",
          "content": "6e25d32eb4c127f7129ccd912ff882625d3fa43e8eba9bc55013a27a61806d1b865ec809bd21d58d3dbfa3d9e2a3d516"
        },
        {
          "alg": "SHA3-384",
          "content": "d384bf82404b7642340eb1a3f88e2d1e366bf3282534943f98c5f4946656f7e6ea86ba6c7bfeed7c4fda1678afdd282e"
        },
        {
          "alg": "SHA3-256",
          "content": "7d1e5fbd3f4197fcf6f4d097bc742a0b3f02fe9ae36ef4385362afab6cc85bee"
        },
        {
          "alg": "SHA3-512",
          "content": "6020db3580dac2d5c0b7656a062b982d234952fc3feac5dfbb12f91bc019b6af430123ad46e5b5de28d7cb9562aec582febdbbfae8ce35ebc2ce0b837a335af6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar",
      "externalReferences": [
        {
          "url": "http://fasterxml.com",
          "type": "website"
        },
        {
          "url": "https://github.com/FasterXML/woodstox/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/woodstox",
          "type": "vcs"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar",
      "publisher": "fasterxml.com",
      "group": "org.codehaus.woodstox",
      "name": "stax2-api",
      "version": "4.2.1",
      "description": "tax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "af8377bc7882332e22456616a9f164f6"
        },
        {
          "alg": "SHA-1",
          "content": "a3f7325c52240418c2ba257b103c3c550e140c83"
        },
        {
          "alg": "SHA-256",
          "content": "678567e48b51a42c65c699f266539ad3d676d4b1a5b0ad7d89ece8b9d5772579"
        },
        {
          "alg": "SHA-512",
          "content": "00efc5d4d17540fb180c5b20d456630a8b3262dff46676689ae916ba16f0fbd9b1a71c7badfb254faad6597f94fed1edb96f77c15f40178eaf4d8cd35cea5e8d"
        },
        {
          "alg": "SHA-384",
          "content": "97a6a9f0cc666776e4a4f08729c303d2a602ce5c25ee633cd6c54c72f12d11e9d43634ca6ca4ef7da5973a52030384da"
        },
        {
          "alg": "SHA3-384",
          "content": "683a1f110ab84333e7517dabe175b91d7ea2fbead2f9d02acf798c588a7508bc67580642afa8d57441bc56ce610d5b0f"
        },
        {
          "alg": "SHA3-256",
          "content": "5e8e54209fb6b580e928e703ef11645aff1a21dfd47cca2dc0e53d0befaef09c"
        },
        {
          "alg": "SHA3-512",
          "content": "d79338a481605c94e144c967cb7adbc6cfd06ee6a1182b5ebc8cd8ad3deedd707931e404aa197bc94d3b5a5d82a2e6dd6a2f6cc9dafc42ce3ad5061076b05199"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-4-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar",
      "externalReferences": [
        {
          "url": "http://fasterxml.com",
          "type": "website"
        },
        {
          "url": "http://github.com/FasterXML/stax2-api",
          "type": "vcs"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.maven/maven-artifact@3.8.6?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.maven",
      "name": "maven-artifact",
      "version": "3.8.6",
      "description": "Maven is a software build management and comprehension tool. Based on the concept of a project object model: builds, dependency management, documentation creation, site publication, and distribution publication are all controlled from the declarative file. Maven can be extended by plugins to utilise a number of other development tools for reporting or the build process.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e58778f4d2041b0df8b301303aa4c6d8"
        },
        {
          "alg": "SHA-1",
          "content": "1637b7e8fc392e389752e79b827b883629285626"
        },
        {
          "alg": "SHA-256",
          "content": "de22a4c6f54fe31276a823b1bbd3adfd6823529e732f431b5eff0852c2b9252b"
        },
        {
          "alg": "SHA-512",
          "content": "eb850b594d19553bb46946ef8f9d53acf84fe414c6f7529780a119d0321dbbce4736de6cac66ea2e8d077a6b19bea616d49dc857e41715bd30453064bfa1ca9b"
        },
        {
          "alg": "SHA-384",
          "content": "b07d343c71622cdc618b1752e1240ea24266a9a5c6b2ede7297d276e14ba3b00735fb2349f6affd1dd20f740308365ab"
        },
        {
          "alg": "SHA3-384",
          "content": "7145c067431aa4ed59181ffdd308f5791a836a7f4de0a01a2762adc07856c07e1363d2cdc1fa6921eb764168e34b72ea"
        },
        {
          "alg": "SHA3-256",
          "content": "82bd99f4699fff03cc87351450c6349fc6da1e641adf011d84edfe9dede67fbd"
        },
        {
          "alg": "SHA3-512",
          "content": "582e08a9102143eb9c07e1057b98e701da1a7c071096bae77d50e3ebce226bb26af10835bf669ae9ad2c38aaaa30b7e48ccd955d0517a4a32b5c2185f149a3bc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.maven/maven-artifact@3.8.6?type=jar",
      "externalReferences": [
        {
          "url": "https://builds.apache.org/job/maven-box/job/maven/",
          "type": "build-system"
        },
        {
          "url": "https://maven.apache.org/download.html",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/MNG",
          "type": "issue-tracker"
        },
        {
          "url": "https://lists.apache.org/list.html?users@maven.apache.org",
          "type": "mailing-list"
        },
        {
          "url": "https://www.apache.org/",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.codehaus.plexus/plexus-utils@3.3.1?type=jar",
      "publisher": "Codehaus Plexus",
      "group": "org.codehaus.plexus",
      "name": "plexus-utils",
      "version": "3.3.1",
      "description": "A collection of various utility classes to ease working with strings, files, command lines, XML and more.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "89d7dce81b0f90f469c7eec197ce299c"
        },
        {
          "alg": "SHA-1",
          "content": "9b41b2b76b1bfe3774411fe22f5868058a9fc822"
        },
        {
          "alg": "SHA-256",
          "content": "4b570fcdbe5a894f249d2eb9b929358a9c88c3e548d227a80010461930222f2a"
        },
        {
          "alg": "SHA-512",
          "content": "eb63a68de5f48cb33f9ad7dd2a94969db2341ba05d385656a301c7c2de392cabb960ee442bd1a4b19cbc3ebde5b7b00a95b7ee4d7766309053e9e937b007eb0d"
        },
        {
          "alg": "SHA-384",
          "content": "9b309b0ec1ef0ac3804cb674942294cde9d9bbde8cd2b509694b4bbc4522baaf9a8e7ec889277e1006179b0bde3bd63e"
        },
        {
          "alg": "SHA3-384",
          "content": "944b1e4dd6285146a0d967caeb6db6f09b77d2730098be02c1ac6e2e3cdbba51c94e0076ed51f731abec53a06d437c1c"
        },
        {
          "alg": "SHA3-256",
          "content": "a1e550db832875a7c9f1380b8ef82b52c03042da70212b35c58d650f96ff440a"
        },
        {
          "alg": "SHA3-512",
          "content": "d3b59642f89bd923b1112a0cbbe0ad97393b36f40c15e9d77d71be0f2fd63f145797cb82169969839e61fbcf4b1dbaaf4a6c2e03b4933f91e99c6e642af8e0ad"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.codehaus.plexus/plexus-utils@3.3.1?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/codehaus-plexus/plexus-utils/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/codehaus-plexus/plexus-utils",
          "type": "vcs"
        },
        {
          "url": "http://codehaus-plexus.github.io/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "http://archive.plexus.codehaus.org/user",
          "type": "mailing-list"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.microsoft.sqlserver/mssql-jdbc@11.2.2.jre17?type=jar",
      "publisher": "Microsoft Corporation",
      "group": "com.microsoft.sqlserver",
      "name": "mssql-jdbc",
      "version": "11.2.2.jre17",
      "description": "Microsoft JDBC Driver for SQL Server.",
      "scope": "optional",
      "hashes": [
        {
          "alg": "MD5",
          "content": "45dc30c7858d9bac561ae97cc8758e20"
        },
        {
          "alg": "SHA-1",
          "content": "ae6f502916d94ba97c046f698a6e5cb9038fde52"
        },
        {
          "alg": "SHA-256",
          "content": "eb03d8a97f28520c04cd4c95cea2dec66bc0a82d7787061b80e976156a7ea5a3"
        },
        {
          "alg": "SHA-512",
          "content": "d1ffb2a0ff5b551cf748218abc1e3f5dda57aa85ce983e39f8b39241805692f0f953e60a160377a6f3c64c9231d7d08f98d888498f67ced74e2ccd5ff8eb8a91"
        },
        {
          "alg": "SHA-384",
          "content": "3777b4b652c32b67b63a84895c505dccc86420b39bb8d518ffdcaa8889bad6d02931f196d5acb5545b9c5a28b96d58e1"
        },
        {
          "alg": "SHA3-384",
          "content": "325cb4b7b51f114e75660cb99e08ebcc084fd2fe7bf8240a4f958befefe0670eebb304a1d99c47ea308d3df6a028f8e6"
        },
        {
          "alg": "SHA3-256",
          "content": "5bcf6cf6e22a19fd54e4a683b831e21f9aa68e84b0750814c3083be439cf39f2"
        },
        {
          "alg": "SHA3-512",
          "content": "98a43f7a8d5c36f72e3b33eaaa6f610fd77290d629e38cbfaccbb2adc060844b159a9abaa5df62fca293d6f3fc31de747d7a6b9287c801a10b85f72bb5a15a6d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:maven/com.microsoft.sqlserver/mssql-jdbc@11.2.2.jre17?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/Microsoft/mssql-jdbc",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/mysql/mysql-connector-java@8.0.29?type=jar",
      "publisher": "Oracle Corporation",
      "group": "mysql",
      "name": "mysql-connector-java",
      "version": "8.0.29",
      "description": "JDBC Type 4 driver for MySQL",
      "scope": "optional",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d2c24e4b4ae8957cd7edff37ae833d37"
        },
        {
          "alg": "SHA-1",
          "content": "016bfffda393ac4fe56f0985f1f035b37d3fc48f"
        },
        {
          "alg": "SHA-256",
          "content": "d4e32d2a6026b5acc00300b73a86c28fb92681ae9629b21048ee67014c911db6"
        },
        {
          "alg": "SHA-512",
          "content": "3eabd70f9a947918f434a44923a8e3ff4c3fbc93e6c90f4992c94d804860ef3d09f09fb4fbf905d53a39b51aab965ecfd65f2ff2aa105387b3c8f49c18d7713c"
        },
        {
          "alg": "SHA-384",
          "content": "a6c435df9739869acbccf55d306ccd1eea4d5ccb6a62df68dd254262a6e0fb722d7d57a5965709bf6462f7002f54ad7a"
        },
        {
          "alg": "SHA3-384",
          "content": "9a4a7139b2489f8ba8111dd839f908f2ed4f1fe0215b433fd6d5aad3bc2c4ebe51e27b9415c66d1283daca1a1c97e887"
        },
        {
          "alg": "SHA3-256",
          "content": "67023a34ea604f023be0470f805bf3ba9a0875e206691d1aba846ffe472370b6"
        },
        {
          "alg": "SHA3-512",
          "content": "9db6e98bb35abcbb80abe4e64b9e9831c5535b23bb68c488c5ca5339e9de2f0debbe832b5d4d4f5c77d5a77c6d6d6026ba9c78a3f9493d849f1e35ced343b4f4"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "The GNU General Public License, v2 with FOSS exception"
          }
        }
      ],
      "purl": "pkg:maven/mysql/mysql-connector-java@8.0.29?type=jar",
      "externalReferences": [
        {
          "url": "http://www.oracle.com",
          "type": "website"
        },
        {
          "url": "https://github.com/mysql/mysql-connector-j",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.postgresql/postgresql@42.5.1?type=jar",
      "publisher": "PostgreSQL Global Development Group",
      "group": "org.postgresql",
      "name": "postgresql",
      "version": "42.5.1",
      "description": "PostgreSQL JDBC Driver Postgresql",
      "scope": "optional",
      "hashes": [
        {
          "alg": "MD5",
          "content": "378f8a2ddab2564a281e5f852800e2e9"
        },
        {
          "alg": "SHA-1",
          "content": "ac2f61eb3b1b4e47ea45de47e73d2e92f49e3ce1"
        },
        {
          "alg": "SHA-256",
          "content": "89e8bffa8b37b9487946012c690cf04f3103953051c1c193d88ee36b68d365ae"
        },
        {
          "alg": "SHA-512",
          "content": "6d787b9c286229dff9f6bfd88ef99222fc76826ffc311cc47cfd311af0489e737119d94a85086e07c8146737eb3e87140eae21a79d3391829c20d13f27284d15"
        },
        {
          "alg": "SHA-384",
          "content": "3c6dd401b15c9a9157d80901a88288f37c403de39dec10f8421a78fb02e8db7c548f19dbe866bdff2b1348631f1832bb"
        },
        {
          "alg": "SHA3-384",
          "content": "b7d278976264d819394bc4fbd3cac3c29122e8356bf49eb991ba10e8e484f473132e5085e5703606556abdd6cd454cc3"
        },
        {
          "alg": "SHA3-256",
          "content": "cba4cf504ebafb440d134458ad6263d7c9f480cedc7c6a5eb4706654f4bc65a4"
        },
        {
          "alg": "SHA3-512",
          "content": "9a062f239201e28035ec54e791e001855532c26fb21a15f79af424861d6311ed947020f7f4503ea56084228a357658a068abaad85b4348ecfa22adf5ff73d9eb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.postgresql/postgresql@42.5.1?type=jar",
      "externalReferences": [
        {
          "url": "https://jdbc.postgresql.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/pgjdbc/pgjdbc/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.postgresql.org/list/pgsql-jdbc/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/pgjdbc/pgjdbc",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.checkerframework/checker-qual@3.5.0?type=jar",
      "group": "org.checkerframework",
      "name": "checker-qual",
      "version": "3.5.0",
      "description": "Checker Qual is the set of annotations (qualifiers) and supporting classes used by the Checker Framework to type check Java source code. Please see artifact: org.checkerframework:checker",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4464def1ed5c10f248ebfe1bccbedf1a"
        },
        {
          "alg": "SHA-1",
          "content": "2f50520c8abea66fbd8d26e481d3aef5c673b510"
        },
        {
          "alg": "SHA-256",
          "content": "729990b3f18a95606fc2573836b6958bcdb44cb52bfbd1b7aa9c339cff35a5a4"
        },
        {
          "alg": "SHA-512",
          "content": "407d0ac59b02cbef7d93f25c8b287cd587232aa5ddfee6d2c7ba34d712565b0a5adfe52b5daa20d3e6c3ab1e7a5f8b08698078d9179185a1b35ada1eb92213bf"
        },
        {
          "alg": "SHA-384",
          "content": "01fb1d7a7440f807b2bdb697c709dfa5897edc0755152c0fef465cf77dd820623fccb410ad033e3d52d4b0bc57409ecf"
        },
        {
          "alg": "SHA3-384",
          "content": "626beff2173578c3a2ad732c81c48a9b091c9ffdea7d50f4b812fd14cd8299ab7a726b052808490b1022faca69aa6e91"
        },
        {
          "alg": "SHA3-256",
          "content": "4fbe95b196e75e549f66831e9b1f8f46cfe1793f4fda350857f5f24349d74af1"
        },
        {
          "alg": "SHA3-512",
          "content": "2c84365b1fcd16a765e49c5d8f30f28c3fe7cfe868ac32be726d8b9351c9053ffea23cfa1db9fb5c59c9928d22ad01c3c894d798e115bc446447228c7c4b24c6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:maven/org.checkerframework/checker-qual@3.5.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/typetools/checker-framework.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/xerces/xercesImpl@2.12.2?type=jar",
      "group": "xerces",
      "name": "xercesImpl",
      "version": "2.12.2",
      "description": "Xerces2 provides high performance, fully compliant XML parsers in the Apache Xerces family. This new version of Xerces continues to build upon the Xerces Native Interface (XNI), a complete framework for building parser components and configurations that is extremely modular and easy to program. The Apache Xerces2 parser is the reference implementation of XNI but other parser components, configurations, and parsers can be written using the Xerces Native Interface. For complete design and implementation documents, refer to the XNI Manual. Xerces2 provides fully conforming XML Schema 1.0 and 1.1 processors. An experimental implementation of the \u0022XML Schema Definition Language (XSD): Component Designators (SCD) Candidate Recommendation (January 2010)\u0022 is also provided for evaluation. For more information, refer to the XML Schema page. Xerces2 also provides a complete implementation of the Document Object Model Level 3 Core and Load/Save W3C Recommendations and provides a complete implementation of the XML Inclusions (XInclude) W3C Recommendation. It also provides support for OASIS XML Catalogs v1.1. Xerces2 is able to parse documents written according to the XML 1.1 Recommendation, except that it does not yet provide an option to enable normalization checking as described in section 2.13 of this specification. It also handles namespaces according to the XML Namespaces 1.1 Recommendation, and will correctly serialize XML 1.1 documents if the DOM level 3 load/save APIs are in use.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "40e4f2d5aacfbf51a9a1572d77a0e5e9"
        },
        {
          "alg": "SHA-1",
          "content": "f051f988aa2c9b4d25d05f95742ab0cc3ed789e2"
        },
        {
          "alg": "SHA-256",
          "content": "6fc991829af1708d15aea50c66f0beadcd2cfeb6968e0b2f55c1b0909883fe16"
        },
        {
          "alg": "SHA-512",
          "content": "bfd21f2350bf0bb546a68d3303f28c6a15cee1e630138c169344c3f65fe39a15e61c6ff4e5239f38f2f1f9e488eff4d5565a4a0774263064ab6a30aa9fcaaed3"
        },
        {
          "alg": "SHA-384",
          "content": "0a35ae0744f05973997b0710cc8d1d774867bc1c1b63ef5bf5f554d1b4c4ab42033f7819430e05ac623e7c8630aa7c52"
        },
        {
          "alg": "SHA3-384",
          "content": "b016ed02d907b21c90b4a2560aa4c778e8aad1b5ecb0ba62777f668166c6e7b8a0c0deef7d1e63b7a9b1092c64c8a4a6"
        },
        {
          "alg": "SHA3-256",
          "content": "875856aafff433840ee9933c01018cd18c0a13b46bd4472853698ef1dff83168"
        },
        {
          "alg": "SHA3-512",
          "content": "1587332fb01515a72b7856b1f566070dcd26fef33c5070039c28684215466a9b9d3a4625cf7181443e3c3a67a313a938cf0775f39b96daf43f5edd4772143c23"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/xerces/xercesImpl@2.12.2?type=jar",
      "externalReferences": [
        {
          "url": "https://svn.apache.org/repos/asf/xerces/java/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar",
      "group": "xml-apis",
      "name": "xml-apis",
      "version": "1.4.01",
      "description": "xml-commons provides an Apache-hosted set of DOM, SAX, and JAXP interfaces for use in other xml-based projects. Our hope is that we can standardize on both a common version and packaging scheme for these critical XML standards interfaces to make the lives of both our developers and users easier. The External Components portion of xml-commons contains interfaces that are defined by external standards organizations. For DOM, that\u0027s the W3C; for SAX it\u0027s David Megginson and sax.sourceforge.net; for JAXP it\u0027s Sun.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "7eaad6fea5925cca6c36ee8b3e02ac9d"
        },
        {
          "alg": "SHA-1",
          "content": "3789d9fada2d3d458c4ba2de349d48780f381ee3"
        },
        {
          "alg": "SHA-256",
          "content": "a840968176645684bb01aed376e067ab39614885f9eee44abe35a5f20ebe7fad"
        },
        {
          "alg": "SHA-512",
          "content": "8db0283b6840cd6407957d296b802e3edf90653e2722f8e29f86c1c0b60996c4b43e9e065e6864dab89b2138ddb0174d9b4fdda4a93f94eeb884783db82f3268"
        },
        {
          "alg": "SHA-384",
          "content": "bce0ec0f0f692213a1110197c4a11c333673ae0630481255d12b441a8cba70aecfaf104c3d8d9b500ed2a0a19a2bfcce"
        },
        {
          "alg": "SHA3-384",
          "content": "c1d8154ef6eee57dfe6ae9a1c1a2525e9ec2aab3631911a53c064ea6480c0b3b1ce8dd079db7b3693d7ef81daba28ace"
        },
        {
          "alg": "SHA3-256",
          "content": "09eb76497eac5012ce1000c52f4e597c4941a44b9d960b1ac58a19beb2dd63fc"
        },
        {
          "alg": "SHA3-512",
          "content": "1e4eb902e50b3388da4d161ee49f4d47b61dddd2ad10e6ef6cbb67c4ebc9043e0b65ae59a4a0c8eb03dd28814ce4aedd7e0d4962a0aedc3bdcf7de37cde38f66"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "id": "SAX-PD",
            "url": "http://www.saxproject.org/copying.html"
          }
        },
        {
          "license": {
            "name": "The W3C License",
            "url": "http://www.w3.org/TR/2004/REC-DOM-Level-3-Core-20040407/java-binding.zip"
          }
        }
      ],
      "purl": "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar",
      "externalReferences": [
        {
          "url": "http://issues.apache.org/bugzilla/",
          "type": "issue-tracker"
        },
        {
          "url": "http://mail-archives.apache.org/mod_mbox/xml-commons-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://svn.apache.org/viewvc/xml/commons/tags/xml-commons-external-1_4_01/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.commons/commons-compress@1.22?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.commons",
      "name": "commons-compress",
      "version": "1.22",
      "description": "Apache Commons Compress software defines an API for working with compression and archive formats. These include: bzip2, gzip, pack200, lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f1e4db16fee4291212d91409313a8086"
        },
        {
          "alg": "SHA-1",
          "content": "691a8b4e6cf4248c3bc72c8b719337d5cb7359fa"
        },
        {
          "alg": "SHA-256",
          "content": "53d04a0efc7223baecaa303bd5d298eb0600e6b82b4076f9cecd558b97ba760b"
        },
        {
          "alg": "SHA-512",
          "content": "2d64fa6cd081fff5d73ee662a82f6186991fc13b4bdaee18b5f1bdcab06d9acb70e3713d18b296337791448251fbd6768bd84afaa817a10547652d0cfa885563"
        },
        {
          "alg": "SHA-384",
          "content": "295d7f69d151abbd784e1c4d021c77ce43e129bb5bda0c55762b32d77c8607863383297674ec8a212ea3dfe4007b0044"
        },
        {
          "alg": "SHA3-384",
          "content": "af04eb1b4647b1a041c5ee994c2c7a32556b5410b916fedb69905f166938baa43ba54fdc67084205794c02680d3c6349"
        },
        {
          "alg": "SHA3-256",
          "content": "40f2960e82adfb171b0c5430271fdb0c0dae243aaf9b08021df54fd4d4a3a0b0"
        },
        {
          "alg": "SHA3-512",
          "content": "f2c445f77bda3ef230a2b78ea88d86e48a7d6db36805f841d5cffe1f178842a161b2fda0b0d60162af210f18ed9c5bb9579c963291c26f715c1aa389d9a6785c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-compress@1.22?type=jar",
      "externalReferences": [
        {
          "url": "https://issues.apache.org/jira/browse/COMPRESS",
          "type": "issue-tracker"
        },
        {
          "url": "https://gitbox.apache.org/repos/asf?p=commons-compress.git",
          "type": "vcs"
        },
        {
          "url": "https://github.com/apache/commons-parent/actions",
          "type": "build-system"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/commons-user/",
          "type": "mailing-list"
        },
        {
          "url": "https://www.apache.org/",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-retry@2.0.1?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-retry",
      "version": "2.0.1",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f9d0dd4d3127f4a8cfcc44984cdbb5a8"
        },
        {
          "alg": "SHA-1",
          "content": "e9c588af705be804e97d18c5286de82d2a273611"
        },
        {
          "alg": "SHA-256",
          "content": "13ca31a52785cba2b03ec3a3edd6c5c00731cfd582d351b794fea56464f58d95"
        },
        {
          "alg": "SHA-512",
          "content": "f8233a01cbada89ef1ec81fb02a6563b49691fb7b7fb451e466feab330c42f867d8c36dd12c48ef589ba6a604a3a6ecee854cf1bf9eef56b5bf05cf713597d75"
        },
        {
          "alg": "SHA-384",
          "content": "ed9058388929e0e1b51fae36877d7b1ca05445618db1a221fd035cb455960ad2a165663104f9f08d6b4fc29c55f37ac3"
        },
        {
          "alg": "SHA3-384",
          "content": "0bad3a017344ed07ed5072ba139ca5f28a5202a35650fda5e88039dec281472f62b298ee7d6bf3667a2bfd570ab59461"
        },
        {
          "alg": "SHA3-256",
          "content": "45a19f7abce48502457548a325eb4ae90c0822424a1ea370bdb90a2df52b0472"
        },
        {
          "alg": "SHA3-512",
          "content": "5c88656a9f43f9e001cf1058bad856fc1e15ae281027162146767320fef60c9535802a67009bd50f65810cd87b98f6e27e92f1e9f7060fa7cc09aced7bc87d11"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-retry@2.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-core@2.0.1?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-core",
      "version": "2.0.1",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "151bf3ce77208f79facb50976665aebe"
        },
        {
          "alg": "SHA-1",
          "content": "49c08ce6fad809f8030036f4329c04ca9a635795"
        },
        {
          "alg": "SHA-256",
          "content": "52a8895ef08d21ea098060889e9ee0a819eac7e8e0a19c9b4628ecece1ad2cc5"
        },
        {
          "alg": "SHA-512",
          "content": "99e96e4af689ac239d82bcd2d00198970754857c607f8c2e9dfe7f5e4527f1dd16d48a3e8f013b26d19079469f1477812e49fa0b30395455283dd2fe3da63516"
        },
        {
          "alg": "SHA-384",
          "content": "baca710961117047938237fe14226bee090b04d05344c071a312999e5e71607e5f631a36fd48992602d97e7bbb481dbe"
        },
        {
          "alg": "SHA3-384",
          "content": "c5c3df90bf32766fa28acb2dca578494c9609377b2689eb58bee7eda118c6a95eedbac00f016cb25f92ff21154246d19"
        },
        {
          "alg": "SHA3-256",
          "content": "287aa2722e72b4d94f78b5b9b71c5c011e0f6b9f63be4292f5e27c4537a989b9"
        },
        {
          "alg": "SHA3-512",
          "content": "bbbfeec7829c90d32433f3ce5e1100581f6cad7d7a64847d11d7dc27786cd4c9fbb175d37a7f3c7dcb3dac06015f3a76626c83667a49c1d97ad154547ebd4824"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-core@2.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-ratelimiter@2.0.1?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-ratelimiter",
      "version": "2.0.1",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "optional",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4f7af665bbf7d5a5a01d535aa62b24a3"
        },
        {
          "alg": "SHA-1",
          "content": "8c43975607c301332aae2569652b12960d594962"
        },
        {
          "alg": "SHA-256",
          "content": "e2554a248b06b51f98735908b741b5ce47b78324a307d33d744b2a62a281309d"
        },
        {
          "alg": "SHA-512",
          "content": "a5c3c7d25705e010513373c09e568070a3edc9c573c0c9b9aec8420a8b9a6f1e72a5772d7bd862dda3ff0dc565aa0228232f7b87464042b731f65e32bcf13365"
        },
        {
          "alg": "SHA-384",
          "content": "7c267df7739ebd51747fd9be48a2d72837a216586eb12d2052ad479dcc7c1ba8e82a0b32ccd9ffcdd801792f0e3f25b5"
        },
        {
          "alg": "SHA3-384",
          "content": "bc120a968d99000ec98a1fb4a30e9d57371cc4bad5c888ae4e393105c8a0ee7392bb754d57aa4c2fbc5f42bb6ab4d3f8"
        },
        {
          "alg": "SHA3-256",
          "content": "876b4c550306fa35572d9d5091385d9aaba4393a0d536524124c3028fee8a6e6"
        },
        {
          "alg": "SHA3-512",
          "content": "50087d551980e1223325cc5e15398d2766794b4c098c80291dacd893bfc81375ca070680c20321b9dbe3347d6d5fe15d0082ed094414de3c9ffda6fce9dba644"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-ratelimiter@2.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-micrometer@2.0.1?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-micrometer",
      "version": "2.0.1",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "543c9ea246d8e3a319cc14bcde877cb6"
        },
        {
          "alg": "SHA-1",
          "content": "0527ec6059a1dfa93774e4e63a420eb8f5dd62c4"
        },
        {
          "alg": "SHA-256",
          "content": "0f83b1d2323dc650fe0d51d8ca136fb127e4cd685250adce441cf8f4a717ffa9"
        },
        {
          "alg": "SHA-512",
          "content": "fa4376fa18ce14fc1e19e7bf9ae24797b1e38661e8c941e34c46f37d9294b45980958fb33fb3efca390c73664ff1b2d593146f6ec9d6eab49638d53b2b6d0fc9"
        },
        {
          "alg": "SHA-384",
          "content": "9cdecf8448cbe34408510456c1cd25fb337fd79cbb126c38e9096407fb2868c4891db429e7de191e6bea4db53c445314"
        },
        {
          "alg": "SHA3-384",
          "content": "14782603fde07b6f1dd1062bc9e04cdf0f717bd99569e0429ec13566f4145608a771c3cfe689285dd27157f831cbbc15"
        },
        {
          "alg": "SHA3-256",
          "content": "6d1d85adf45621f1f5f2e45f82ec5925b626d48cf1168a688587dfc399ba381a"
        },
        {
          "alg": "SHA3-512",
          "content": "66366ccf11abd953f69a511f0bd4b9520bdeb5815aa12c61b0135fe2f5cc8b497125843f4642dffdc953ffcc0f7ef92b4d74866b021acba739c7b121e553edf1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-micrometer@2.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.micrometer/micrometer-core@1.10.0?type=jar",
      "group": "io.micrometer",
      "name": "micrometer-core",
      "version": "1.10.0",
      "description": "Core module of Micrometer containing instrumentation API and implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "13bbcc080729d2a0de553b78323b486f"
        },
        {
          "alg": "SHA-1",
          "content": "f6aec5087695596cdc81d5f597c46124c44ada23"
        },
        {
          "alg": "SHA-256",
          "content": "ece52bd972f554ffa023df61d4571728e719135573f594d69810d0b6886e82ce"
        },
        {
          "alg": "SHA-512",
          "content": "28278179694bd20878680a917da2cb440163d9f09effa1313b9119ac9a449c87349958dbbd06034fdb3f2b7809fdcf00868e5a55629cc1fb9adb5b2ede087a12"
        },
        {
          "alg": "SHA-384",
          "content": "1e737d372ff55f96d2468d3be298fc22c5380fb0cc8c5d996b486cc977309e00c55b07695209cdfbf29597a86857b239"
        },
        {
          "alg": "SHA3-384",
          "content": "b5bdb2e08374cb125c93328a91b49161460f9b51c0af0a8955d74c87017682d70a98ca520c20a6372f2a0f4d3a1c43c6"
        },
        {
          "alg": "SHA3-256",
          "content": "30a9e359b0675144ced4281313d395e625a09ae2e92e8140edb89eb1991c5f54"
        },
        {
          "alg": "SHA3-512",
          "content": "bd0742f31ba2ade4e17bf811bb7c8e4365cccb80c6b8a8e6fb712f69c0b69a0705c9b5a1a2de535c561784af66f63022074492b7057edbe19f0de49937e79596"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.micrometer/micrometer-core@1.10.0?type=jar"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.micrometer/micrometer-commons@1.10.0?type=jar",
      "group": "io.micrometer",
      "name": "micrometer-commons",
      "version": "1.10.0",
      "description": "Module containing common code",
      "hashes": [
        {
          "alg": "MD5",
          "content": "80ed9439b29a2adfaccd8d3afc3b9188"
        },
        {
          "alg": "SHA-1",
          "content": "e2181e59ebc1ccaaae567f231322ac9414359d43"
        },
        {
          "alg": "SHA-256",
          "content": "1da4fb8218c832fb443f99114d62d36997e3ecdbdd2d1b19c42adbd00de7db8e"
        },
        {
          "alg": "SHA-512",
          "content": "0557ab1739ef663be168f97c208c3e31dc41575e9ef03e2acc97d83d28441a09bd28c9e2d8653b20dce3c9bfabd0ec1d0e1eb2551b8db82624b27301b36d9c49"
        },
        {
          "alg": "SHA-384",
          "content": "5cbdfb4966870fbb2c4bce961feacf19862c2166567a67d9e5da5e8e32341361faf5525bf5d3c4e6f5048295009b2d16"
        },
        {
          "alg": "SHA3-384",
          "content": "ac79f709238173c5473ad55a2a4e0984d59c740aef3362e580eb414bfbb15e39889d9e9de10458bcd2c0201e58e11b3e"
        },
        {
          "alg": "SHA3-256",
          "content": "c69062fff7515170791d06fe094aebf1535a4555511095c7d0514adbe39cf439"
        },
        {
          "alg": "SHA3-512",
          "content": "b479736a0894849017090328255b8daf3f46e47136702b54e6f5c4f5d9ba346a009843a0040848587fccc803cbc1bb4bd62e5312b0ffe679704f7981a1693705"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.micrometer/micrometer-commons@1.10.0?type=jar"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.hdrhistogram/HdrHistogram@2.1.12?type=jar",
      "group": "org.hdrhistogram",
      "name": "HdrHistogram",
      "version": "2.1.12",
      "description": "HdrHistogram supports the recording and analyzing sampled data value counts across a configurable integer value range with configurable value precision within the range. Value precision is expressed as the number of significant digits in the value recording, and provides control over value quantization behavior across the value range and the subsequent value resolution at any given level.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4b1acf3448b750cb485da7e37384fcd8"
        },
        {
          "alg": "SHA-1",
          "content": "6eb7552156e0d517ae80cc2247be1427c8d90452"
        },
        {
          "alg": "SHA-256",
          "content": "9b47fbae444feaac4b7e04f0ea294569e4bc282bc69d8c2ce2ac3f23577281e2"
        },
        {
          "alg": "SHA-512",
          "content": "b03b7270eb7962c88324858f94313adb3a53876f1e11568a78a5b7e00a9419e4d7ab8774747427bff6974b971b6dfc47a127fca11cb30eaf7d83b716e09b1a0d"
        },
        {
          "alg": "SHA-384",
          "content": "06977d680dafd803d32441994474e598384a584411a67c95ab4a64698c9e4cbd613e0119b54685cea275b507a0a6f362"
        },
        {
          "alg": "SHA3-384",
          "content": "b5ccb4d39bf7cc8ccc33f0f8fcbab0a63c99a94feda840b5d80fc3ae061127f1475cfb869b060933783a1f2eafb103a1"
        },
        {
          "alg": "SHA3-256",
          "content": "ef2113f27862af1d24d90c2028fc566902720248468d3c0f2f1807cc86918882"
        },
        {
          "alg": "SHA3-512",
          "content": "4fca2f75bdfd3f2ac40dc227ae2ef0272142802b1546d4f5edf9155eaeed84eff07b0c3a978291a1df096ec94724b0defb045365e6a51acfdd5da68d72c5a8eb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "CC0-1.0"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.hdrhistogram/HdrHistogram@2.1.12?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/HdrHistogram/HdrHistogram/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.latencyutils/LatencyUtils@2.0.3?type=jar",
      "group": "org.latencyutils",
      "name": "LatencyUtils",
      "version": "2.0.3",
      "description": "LatencyUtils is a package that provides latency recording and reporting utilities.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2ad12e1ef7614cecfb0483fa9ac6da73"
        },
        {
          "alg": "SHA-1",
          "content": "769c0b82cb2421c8256300e907298a9410a2a3d3"
        },
        {
          "alg": "SHA-256",
          "content": "a32a9ffa06b2f4e01c5360f8f9df7bc5d9454a5d373cd8f361347fa5a57165ec"
        },
        {
          "alg": "SHA-512",
          "content": "bb81a42498c65389366205f4e07cee336920e2f05cc0daae213f2784b1d0ce9a908b038daec20478f23eb00b2bf704f96c5b00f63c99615193ab2a3cc4a9f890"
        },
        {
          "alg": "SHA-384",
          "content": "16ca4640dc9d848e6c6d15441897e1b5a9f27f34207b0bb456dd54d8f267b73b348092e548e78634144de44ba3515205"
        },
        {
          "alg": "SHA3-384",
          "content": "406c2b5c6f64b0c090568e479b5e6136a04a4e77f8eea65d32b4e2b01deebcdf6a0a851240cdb740c25b5a5e61e6c179"
        },
        {
          "alg": "SHA3-256",
          "content": "50ae828358301033542fd7c412e86ee318d5451f89a182e2a679aaf18099d26d"
        },
        {
          "alg": "SHA3-512",
          "content": "456c337b9fb385579aae707409ed6a04d08e5fc87b1a46733dca617c22c625bf253dc4747e0cdbf5e7d8b48102d2938cb482b6b688a79aab645a7459c592258f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "CC0-1.0"
          }
        }
      ],
      "purl": "pkg:maven/org.latencyutils/LatencyUtils@2.0.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/LatencyUtils/LatencyUtils/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.micrometer/micrometer-observation@1.10.0?type=jar",
      "group": "io.micrometer",
      "name": "micrometer-observation",
      "version": "1.10.0",
      "description": "Module containing Observation related code",
      "hashes": [
        {
          "alg": "MD5",
          "content": "85a101a9e6a8a761a4ced843d5aa268d"
        },
        {
          "alg": "SHA-1",
          "content": "6d49a0c2ed681291f011e8d07583c0cc741dd4c6"
        },
        {
          "alg": "SHA-256",
          "content": "af6ff881c71ec62027b91dd1658459c211d261d9867a4552db8c7ffdf899455d"
        },
        {
          "alg": "SHA-512",
          "content": "33c3c6d6bd694521f54254d343e4fed97a402efe60032dc7e98bebb4ebd9eab23c6c53447cf5c05933617d4d32d678cb6a01c76877de98e3e02659fb837df46e"
        },
        {
          "alg": "SHA-384",
          "content": "ac0bc89d91612fc777b8bf0c1fb8b395075404a09ff46325deef900a2015228f98a57c038c66519dafa3c0dd6f72ee04"
        },
        {
          "alg": "SHA3-384",
          "content": "5601c7ddef6f1e4898c983b02d47e4e396c22378b83e2878d20bea319c6d70fe38ed16ad5f4be5ed8938f22554781271"
        },
        {
          "alg": "SHA3-256",
          "content": "b6dfd4f004ebe446e2eb358d2279e480f1ffe944261ed21acfe59f03856faec9"
        },
        {
          "alg": "SHA3-512",
          "content": "ac9674372e016f60a0f951b6b922dcea1038446867e1071c366cc9298cc3e00bb12870fd59f38dc32b5cb3780ec5cc31148abc2c5dedff779d32c091d412b937"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.micrometer/micrometer-observation@1.10.0?type=jar"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-bulkhead@2.0.1?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-bulkhead",
      "version": "2.0.1",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ba6bf91d840c6139d0a9a44d8dd809d9"
        },
        {
          "alg": "SHA-1",
          "content": "64063e0bde52c1efa953e89d7394edf9a43f0ea1"
        },
        {
          "alg": "SHA-256",
          "content": "f58836fa357908d3626c6f2a964d2163bcc0053fdcc2b25c0215fbe56350a748"
        },
        {
          "alg": "SHA-512",
          "content": "f37b96d99535adeae74b9bcd0c961fadebc339d8d46a32a4e3ac91ffa59fd50c8816c679dc24b47063983e7c627c5a9e878bba6ae6505340dab6c973b4961993"
        },
        {
          "alg": "SHA-384",
          "content": "a6f6e2d5684da126661eb02b32b6ebeb66619df880d78d4f2333eb7035301bc7e8733c50163242dc9d8def106048720d"
        },
        {
          "alg": "SHA3-384",
          "content": "2e70a11652db5b4ffee1b70278e0db4d1b5593d7f1b46539f1139b7de833b4088a8e5bf559ef3f5af9c59acdd4c47064"
        },
        {
          "alg": "SHA3-256",
          "content": "7241acdfc8e8a785e1fa84ddaa6c0cca82ef39c6acdbc5b2e06a43e23bd8bab7"
        },
        {
          "alg": "SHA3-512",
          "content": "e18e476063298d4836b40cb667af96a1a9aec830f4341fcb556018051283c33147d8d295a8df5e3496c9bb9317730ccd76327d4d04325b28b900e6f6bb294ad1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-bulkhead@2.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-circuitbreaker@2.0.1?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-circuitbreaker",
      "version": "2.0.1",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "hashes": [
        {
          "alg": "MD5",
          "content": "fecf85ade5c13e21b5a6a3ea5e283251"
        },
        {
          "alg": "SHA-1",
          "content": "bc1de1f1b879dacc5343a37d8eb2ba8b153a8629"
        },
        {
          "alg": "SHA-256",
          "content": "1eb3f71c4b1c8a651726974fa62faf974b93872700da2cd92e8af64f7622fc7b"
        },
        {
          "alg": "SHA-512",
          "content": "37f54bda17b388573d0a54839151d587ba9721799d6f28466b946dc83b1d00d52e97ed1315fba638d15661f4dff0323293f8eefb30b870d3efdff07d70441c29"
        },
        {
          "alg": "SHA-384",
          "content": "c370a61e3f0a13f4b6df010183c4a2655ad9ff0617dfdc6ac4045d10e495ddef918a846fdf9e4e6f23d2cd24a2798b9c"
        },
        {
          "alg": "SHA3-384",
          "content": "49be6a4fc532ac7339cf9c1b830315659cbf72299bf221648863e97d1c14f8439430a887ffa0ccdcb41c30a3a8e8f179"
        },
        {
          "alg": "SHA3-256",
          "content": "9052af6672d31cb3e93fadab35f8950c18b130a371eca8dc8d2e516cf6ccfc75"
        },
        {
          "alg": "SHA3-512",
          "content": "e5d08d3bfc9d37bf9813f13436a9b61060d9d11375baa9fb8fe3ebb4004713a32cee1077c424e615165eea0a080a08600d41acf41ce82005c9b20325ea7c3696"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-circuitbreaker@2.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-timelimiter@2.0.1?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-timelimiter",
      "version": "2.0.1",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "hashes": [
        {
          "alg": "MD5",
          "content": "fa161067309beff10eb61d98ededf77d"
        },
        {
          "alg": "SHA-1",
          "content": "1beb4c81233bd70ceac378eba5f2da7c22b2470c"
        },
        {
          "alg": "SHA-256",
          "content": "76663e34c47d0f5ee807865a194c692308cd607c8bdce676254e3c12447541ae"
        },
        {
          "alg": "SHA-512",
          "content": "beb8bf2ca0dd4128f59c1980db5946b00ecce143c794706f32f599e45870b6becc723a6e6dab3b4e7aea8a343f47fb2011ba945236f36f2dfe692f238492da11"
        },
        {
          "alg": "SHA-384",
          "content": "90a175f5caa2e7ab0af1f74c9f69c7ba2b62c51ebd1b33466b3afd01de381ef9dd6c85d27fc8f138ca7e7584b1d857b7"
        },
        {
          "alg": "SHA3-384",
          "content": "248c8dae8bd29842274a8241c4f5840d596d1a7824ce57a83a2c4b18ed3ff93527db0b49a5194548180da8027bd418ab"
        },
        {
          "alg": "SHA3-256",
          "content": "b00bd7e686718be7b588036e4c4aa68adca4c9deb7e4cbebd673a572b06d9601"
        },
        {
          "alg": "SHA3-512",
          "content": "880c185921320bda735a0317a93add892fbd20f735ebcb935f53334f447ca3c7b8ec99729b54e1b9e5721a38bda7d9cb46bc043a022dcf4cf7a4730b5f619d14"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-timelimiter@2.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/pl.pragmatists/JUnitParams@1.1.1?type=jar",
      "publisher": "Pragmatists",
      "group": "pl.pragmatists",
      "name": "JUnitParams",
      "version": "1.1.1",
      "description": "Better parameterised tests for JUnit",
      "scope": "optional",
      "hashes": [
        {
          "alg": "MD5",
          "content": "954d9f5c8d8b97ecf3bdfb5b11fd706b"
        },
        {
          "alg": "SHA-1",
          "content": "20981e022b8d21deb374c2888bb0be5f6d371a8f"
        },
        {
          "alg": "SHA-256",
          "content": "1be1aac16d424ce940d5407bef86656dc4ed5803c93e563cb1682ae07b591ecb"
        },
        {
          "alg": "SHA-512",
          "content": "98cdc696d5f8d19ae20b723eb9e12fd93b94387723329f1a67d92a4f53deeb2105073a61194461d371754aac8b164b5bd8cd813b04a9e87d64a5e666b12e272e"
        },
        {
          "alg": "SHA-384",
          "content": "40fc031e6cd9dc82808cb08cfef194bef5d0c0fa5692b1d0f660a9f18b9e44f46a19f499b2d0911ce2b66444dfad8af3"
        },
        {
          "alg": "SHA3-384",
          "content": "9e477a10744665ba7b1e233e03b96c841fe63fa3be1d643847e6fa12b37f48ae1cec1ac020337d8c8b8b004e52883f06"
        },
        {
          "alg": "SHA3-256",
          "content": "b57f6069f89a8a985b0ab87a13d882a90fe3f8ae079f7ea9789684159413bcb3"
        },
        {
          "alg": "SHA3-512",
          "content": "5d772549251ae1beeff1af8bafb5c60826dd71c8a09ecd7694dd798ba38b597f26fd6bb182f52fe54d7b078149e11f2c6977e01340e2c3b6600773188a0eb285"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/pl.pragmatists/JUnitParams@1.1.1?type=jar",
      "externalReferences": [
        {
          "url": "http://pragmatists.pl",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/Pragmatists/JUnitParams/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/Pragmatists/JUnitParams",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.core/jersey-common@2.37?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.core",
      "name": "jersey-common",
      "version": "2.37",
      "description": "Jersey core common packages",
      "hashes": [
        {
          "alg": "MD5",
          "content": "bf2ee105a96049261644582bf4753aa0"
        },
        {
          "alg": "SHA-1",
          "content": "5baab27481e90dd8ea30c763b9db4b6896cea718"
        },
        {
          "alg": "SHA-256",
          "content": "3ef62394f5d3556966bce5474ef3795604508d7b6236d395277f8db5e8a2818a"
        },
        {
          "alg": "SHA-512",
          "content": "d9d3435b055bae49eb6efb3756dd42933df34d791f83b7431e35eda49fdfcf5ca38e34422626010576329bafea155da58ffae2f6fbb57c662efd0219bc01d939"
        },
        {
          "alg": "SHA-384",
          "content": "de01d86fc4a77d108aa095d7d5866f372b20459173fa69e4eee39afa73e8d84b78bf93aee24602ef6e2127fdc17118a6"
        },
        {
          "alg": "SHA3-384",
          "content": "0f642374a2849bbe7ecfb4bf036bdd2592ab3ab8a4a7dc5c063c40142d2d78a2dfbfcbc66e74855ceab7fac08e4dbe85"
        },
        {
          "alg": "SHA3-256",
          "content": "eaabde7ac72ce96baf8fe21a276c70fc11502389a0e1a6c559745c7e48d0438e"
        },
        {
          "alg": "SHA3-512",
          "content": "0b9b9e78a4637c919b909cddf98261ff96986adbd88c92943b52aa31a8682284f0b3f229ccd4d0e426490c34e7db290620a6552f5a1557c0a3eeb64148a846fe"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "name": "The GNU General Public License (GPL), Version 2, With Classpath Exception",
            "url": "https://www.gnu.org/software/classpath/license.html"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.core/jersey-common@2.37?type=jar",
      "externalReferences": [
        {
          "url": "https://www.eclipse.org/org/foundation/",
          "type": "website"
        },
        {
          "url": "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/",
          "type": "build-system"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey",
          "type": "vcs"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.annotation",
      "name": "jakarta.annotation-api",
      "version": "1.3.5",
      "description": "Jakarta Annotations API",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8b165cf58df5f8c2a222f637c0a07c97"
        },
        {
          "alg": "SHA-1",
          "content": "59eb84ee0d616332ff44aba065f3888cf002cd2d"
        },
        {
          "alg": "SHA-256",
          "content": "85fb03fc054cdf4efca8efd9b6712bbb418e1ab98241c4539c8585bbc23e1b8a"
        },
        {
          "alg": "SHA-512",
          "content": "d1acff146c0f9ea923a9325ad4c22ba2052ec474341ab8392abab7e8abd3ca010db2400ff9b5849fc4f1fa5c0a18830eb104da07a13bd26b4f0a43d167935878"
        },
        {
          "alg": "SHA-384",
          "content": "004a4bde333c0575f72df1cb9cf95ee0c6c7f738a6f0f723a5ec545aaa1664abeb82f01627708a1377e3136754fb7859"
        },
        {
          "alg": "SHA3-384",
          "content": "abcc5b1fbad59b3e9b6d2d6195ec11d6254f689116c534a964724b61f815cca60ba3a2c1489933403f3f78dc54fd20a6"
        },
        {
          "alg": "SHA3-256",
          "content": "3d3ef16365e7a0357d82f874fa26b2b0a146cf7bf98a351c65ef1586444fa009"
        },
        {
          "alg": "SHA3-512",
          "content": "88625a8811be514851209291344df32478b527bc7838ddee58752269bf2457ae8f4e6b6a0d0b5c18522e287ba6df1def0cb19dee2b85e01ee21f0b48ac2630d3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/common-annotations-api/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/ca-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/common-annotations-api",
          "type": "vcs"
        },
        {
          "url": "https://www.eclipse.org",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.hk2/osgi-resource-locator@1.0.3?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.hk2",
      "name": "osgi-resource-locator",
      "version": "1.0.3",
      "description": "Used by various API providers that rely on META-INF/services mechanism to locate providers.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e7e82b82118c5387ae45f7bf3892909b"
        },
        {
          "alg": "SHA-1",
          "content": "de3b21279df7e755e38275137539be5e2c80dd58"
        },
        {
          "alg": "SHA-256",
          "content": "aab5d7849f7cfcda2cc7c541ba1bd365151d42276f151c825387245dfde3dd74"
        },
        {
          "alg": "SHA-512",
          "content": "4d84983a9b1c72f58661b576c78ca456a2106602c2ad211cd7e72d94464c8774173b34a35629c507c7c84c982f1de0c9bf48352458e8480be5f874d20d6e69a3"
        },
        {
          "alg": "SHA-384",
          "content": "9f92002296c66cc8996d459b95a9c531ec71b98a8b819121abbc7d636a6c4ace04c88878ba6917f71650280a880d1ce2"
        },
        {
          "alg": "SHA3-384",
          "content": "b27581d003ce715fba7e2958dbe73b64330b8586d94dd2f4b80b3d4861fd36415af6c2fe1005a798a7bd4f706d77e3d1"
        },
        {
          "alg": "SHA3-256",
          "content": "cf90e96adac2f1167ff71267db4a91c75d824f8a4b0359d2ab7d50b1c87c3952"
        },
        {
          "alg": "SHA3-512",
          "content": "75f9ff6c3ab03f4471ac04789c181b75edf4c5dbf985a5616b2c979de59aa478b02593036f740a6c7bb71afcb145c131a3ff3e5a6a53336abab22f2cc9825772"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.hk2/osgi-resource-locator@1.0.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2-extra",
          "type": "vcs"
        },
        {
          "url": "https://www.eclipse.org",
          "type": "website"
        },
        {
          "url": "https://github.com/eclipse-ee4j/ee4j/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.ws.rs",
      "name": "jakarta.ws.rs-api",
      "version": "2.1.6",
      "description": "Jakarta RESTful Web Services API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c3892382aeb5c54085b22b1890511d29"
        },
        {
          "alg": "SHA-1",
          "content": "1dcb770bce80a490dff49729b99c7a60e9ecb122"
        },
        {
          "alg": "SHA-256",
          "content": "4cea299c846c8a6e6470cbfc2f7c391bc29b9caa2f9264ac1064ba91691f4adf"
        },
        {
          "alg": "SHA-512",
          "content": "c1e2655269b9a32f9c0aec9edf12bf6d8b397d8cbcf60e28dd21ab13ecc2738800ebe5c2d49ed3c50d4dac6617671f0fae873daf8ec116a16ef7f7f0a3bef7fa"
        },
        {
          "alg": "SHA-384",
          "content": "3fd05e2b167d927216d3b2fc9d1c5a70aa3911d075c2159f958ce755c6a41d93bd76f0ce79ccd22e5a60182aa91fdb07"
        },
        {
          "alg": "SHA3-384",
          "content": "3a110ff82d6a0dba4adf024a6425e68689416dd8f0e841f2bade574dfaebcbcfede410116530714b68ef9d32a318c286"
        },
        {
          "alg": "SHA3-256",
          "content": "794fe21a9e2634744c65b299a232756391316c0b71e440973575bcde78907c17"
        },
        {
          "alg": "SHA3-512",
          "content": "fe482041b54c5f7a40d670af73c0c0c0a562bf74f4bfd684f8aef56decfbc5230901768814f7d0b0ec600828fea39bb8621cd121f616778278a03f67fd497310"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar",
      "externalReferences": [
        {
          "url": "https://www.eclipse.org/org/foundation/",
          "type": "website"
        },
        {
          "url": "https://repo.eclipse.org/content/repositories/jax-rs-api-releases/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jaxrs-api/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jaxrs-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/javax.servlet/javax.servlet-api@4.0.1?type=jar",
      "publisher": "GlassFish Community",
      "group": "javax.servlet",
      "name": "javax.servlet-api",
      "version": "4.0.1",
      "description": "Java.net - The Source for Java Technology Collaboration",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b80414033bf3397de334b95e892a2f44"
        },
        {
          "alg": "SHA-1",
          "content": "a27082684a2ff0bf397666c3943496c44541d1ca"
        },
        {
          "alg": "SHA-256",
          "content": "83a03dd877d3674576f0da7b90755c8524af099ccf0607fc61aa971535ad7c60"
        },
        {
          "alg": "SHA-512",
          "content": "763dec9801f647b1a45e492eb2a67f6a60fc608bef4738eb7b1a92d93f1f6db02b32f4c6553d4557c320dfc25c0ea0b9854c59e793262b6ca453c71caf05ef38"
        },
        {
          "alg": "SHA-384",
          "content": "9f4522458bdb1c7cbc0e88271d1e4326193c8e4d422ef8b75c3dcadf0bf86a91389890ab2d25a8cc6cf276f625475cd3"
        },
        {
          "alg": "SHA3-384",
          "content": "be8a209d1912492e86e611fc42e59512a89c464aa78cea3c5badd3290a6564d8bde55933a7c5d8113d9acc848a382751"
        },
        {
          "alg": "SHA3-256",
          "content": "f94dd8bf0908ca77e5213d166035a427e658ff4a59d35daa7e281c5fb2fc390a"
        },
        {
          "alg": "SHA3-512",
          "content": "3abbd3cad570557be24b69f700c217c7c8e1736d4db74f3ac28dd96b80822ac1c7631b3a9a15b9738754a3d68e4e7f13b732820eb8b8e8e329690ec2a23c621c"
        }
      ],
      "licenses": [],
      "purl": "pkg:maven/javax.servlet/javax.servlet-api@4.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://javaee.github.io",
          "type": "website"
        },
        {
          "url": "https://maven.java.net/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/javaee/servlet-spec/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/javaee/servlet-spec",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.guava/guava@31.1-jre?type=jar",
      "group": "com.google.guava",
      "name": "guava",
      "version": "31.1-jre",
      "description": "Guava is a suite of core and expanded libraries that include utility classes, Google\u0027s collections, I/O classes, and much more.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e37782d974104aa3b0a7bee9927c8042"
        },
        {
          "alg": "SHA-1",
          "content": "60458f877d055d0c9114d9e1a2efb737b4bc282c"
        },
        {
          "alg": "SHA-256",
          "content": "a42edc9cab792e39fe39bb94f3fca655ed157ff87a8af78e1d6ba5b07c4a00ab"
        },
        {
          "alg": "SHA-512",
          "content": "532664e3dd33699bdfb296e355bc58fde77edc019c10f464ae49fe2494a68fd25d1623a9c86bc72830ca9f1354226366ac6f3c09d77be952641e971386a4ebbb"
        },
        {
          "alg": "SHA-384",
          "content": "829ba1c473782158d43a0e56c932b45139f121a504613b27eacf6b0774354e52c5eccaab5c2da3753b5686b93f0169b4"
        },
        {
          "alg": "SHA3-384",
          "content": "55f70ee4afad92540faa9d260109c00190e6d1bbacf10b22e52f599103284c1a8b2a2043d8fafbe1309245290b5fe614"
        },
        {
          "alg": "SHA3-256",
          "content": "dd534fb7df6b380d8701290b0b0c4e388cf42f8179a436c509c0899afde91e5c"
        },
        {
          "alg": "SHA3-512",
          "content": "617288cc45858588e0626edd21382d38b87cd0e6c78221e3a1626f579d5b4acd4adff37b72e3e51c73e91132f43951d12369624dd515f87bcc0c54213db43ede"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.guava/guava@31.1-jre?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/guava/actions",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/google/guava/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/google/guava",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
      "group": "com.google.guava",
      "name": "failureaccess",
      "version": "1.0.1",
      "description": "Contains com.google.common.util.concurrent.internal.InternalFutureFailureAccess and InternalFutures. Most users will never need to use this artifact. Its classes is conceptually a part of Guava, but they\u0027re in this separate artifact so that Android libraries can use them without pulling in all of Guava (just as they can use ListenableFuture by depending on the listenablefuture artifact).",
      "hashes": [
        {
          "alg": "MD5",
          "content": "091883993ef5bfa91da01dcc8fc52236"
        },
        {
          "alg": "SHA-1",
          "content": "1dcf1de382a0bf95a3d8b0849546c88bac1292c9"
        },
        {
          "alg": "SHA-256",
          "content": "a171ee4c734dd2da837e4b16be9df4661afab72a41adaf31eb84dfdaf936ca26"
        },
        {
          "alg": "SHA-512",
          "content": "f8d59b808d6ba617252305b66d5590937da9b2b843d492d06b8d0b1b1f397e39f360d5817707797b979a5bf20bf21987b35333e7a15c44ed7401fea2d2119cae"
        },
        {
          "alg": "SHA-384",
          "content": "67659dbd9647ec303d7f15128dc9dba19b98fd8d74758ee3b602451e32c855e236ccaafe08edf4bbfa245f981268440f"
        },
        {
          "alg": "SHA3-384",
          "content": "1460875f0331c5fa3791772a6a322a7db180261bc2adacf7271df1fbf3b088a587a755a604c039982cb593c5cfc1f101"
        },
        {
          "alg": "SHA3-256",
          "content": "ea86406e75fcd93eafe3cde1b3135ba485f1bb9b75fed98894a0bf1f0aee04f0"
        },
        {
          "alg": "SHA3-512",
          "content": "52ac0f487ab5dd27c9f2e54fd1d84c7a620cae9d49be4072aa2b11501787bf4391ddaa13d02eccdf19e8eea46aecbea5f6064b26777c1b836108a280652e04ac"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://travis-ci.org/google/guava",
          "type": "build-system"
        },
        {
          "url": "https://github.com/google/guava/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/google/guava",
          "type": "vcs"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "group": "com.google.guava",
      "name": "listenablefuture",
      "version": "9999.0-empty-to-avoid-conflict-with-guava",
      "description": "An empty artifact that Guava depends on to signal that it is providing ListenableFuture -- but is also available in a second \u0022version\u0022 that contains com.google.common.util.concurrent.ListenableFuture class, without any other Guava classes. The idea is: - If users want only ListenableFuture, they depend on listenablefuture-1.0. - If users want all of Guava, they depend on guava, which, as of Guava 27.0, depends on listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-... version number is enough for some build systems (notably, Gradle) to select that empty artifact over the \u0022real\u0022 listenablefuture-1.0 -- avoiding a conflict with the copy of ListenableFuture in guava itself. If users are using an older version of Guava or a build system other than Gradle, they may see class conflicts. If so, they can solve them by manually excluding the listenablefuture artifact or manually forcing their build systems to use 9999.0-....",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d094c22570d65e132c19cea5d352e381"
        },
        {
          "alg": "SHA-1",
          "content": "b421526c5f297295adef1c886e5246c39d4ac629"
        },
        {
          "alg": "SHA-256",
          "content": "b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99"
        },
        {
          "alg": "SHA-512",
          "content": "c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f"
        },
        {
          "alg": "SHA-384",
          "content": "caff9b74079f95832ca7f6029346b34b606051cc8c5a4389fac263511d277ada0c55f28b0d43011055b268c6eb7184d5"
        },
        {
          "alg": "SHA3-384",
          "content": "e939f08df0545847ea0d3e4b04a114b08499ad069ba8ec9461d1779f87a56e0c37273630a0f4c14e78c348d3ac7eb97f"
        },
        {
          "alg": "SHA3-256",
          "content": "1f0a8b1177773b3a8ace839df5eed63cbf56b24a38714898a6e4ed065c42559f"
        },
        {
          "alg": "SHA3-512",
          "content": "6b495ecc2a18b17365cb08d124a0da47f04bcdde81927b5245edf3edd8e498c3c3fb92ce6a4127f660bac851bb1d3e4510e5c20d03be47ce99dc296d360db285"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "externalReferences": [
        {
          "url": "https://travis-ci.org/google/guava",
          "type": "build-system"
        },
        {
          "url": "https://github.com/google/guava/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/google/guava",
          "type": "vcs"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.j2objc/j2objc-annotations@1.3?type=jar",
      "group": "com.google.j2objc",
      "name": "j2objc-annotations",
      "version": "1.3",
      "description": "A set of annotations that provide additional information to the J2ObjC translator to modify the result of translation.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5fa4ec4ec0c5aa70af8a7d4922df1931"
        },
        {
          "alg": "SHA-1",
          "content": "ba035118bc8bac37d7eff77700720999acd9986d"
        },
        {
          "alg": "SHA-256",
          "content": "21af30c92267bd6122c0e0b4d20cccb6641a37eaf956c6540ec471d584e64a7b"
        },
        {
          "alg": "SHA-512",
          "content": "51ea975179f809cb260751d11a513881b643bf016d15949bcb63b57d3c8868a2197e0620ccbaa5739e032797ec6faa3aa6d64606e999fce32930314780ca4115"
        },
        {
          "alg": "SHA-384",
          "content": "d2a54e4bb17793a98f85fb8f91138cd3b3d311385b7fb2c09d05c3112d42218a6da29154ba184f00031919548022aa71"
        },
        {
          "alg": "SHA3-384",
          "content": "8ba512ee47d36d5712335849e8f0fae21498c983c48fc2b4749ac7dfb4eeddf75dd51d21366667f90d6414db032a7b5b"
        },
        {
          "alg": "SHA3-256",
          "content": "e97bbe4e1ac9f9785ad0b81fd29fc9c6b0d9e37acc6da6d0b31ce9e6da072664"
        },
        {
          "alg": "SHA3-512",
          "content": "864bc6181c8ad8372e0a05ec3b0bdebc876571692331d3519e19df54a21ef333e992fe5c4e84759f010cf0657f9ea1c435bea8f103735ec3dc9dd31493e7d4a6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.j2objc/j2objc-annotations@1.3?type=jar",
      "externalReferences": [
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "http://svn.sonatype.org/spice/tags/oss-parent-7",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/us.springett/alpine-executable-war@2.2.0?type=jar",
      "group": "us.springett",
      "name": "alpine-executable-war",
      "version": "2.2.0",
      "description": "An opinionated scaffolding library that jumpstarts Java projects with an API-first design, secure defaults, and minimal dependencies.",
      "scope": "optional",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f755cd95cc1aab6a651a11786b7878af"
        },
        {
          "alg": "SHA-1",
          "content": "51bb289854226d11d650694e50ab60a87a74cfa0"
        },
        {
          "alg": "SHA-256",
          "content": "e392e8d3d4b3c3a77ed412824e5ceb9c7597d100f606ab186f32dccaf3aeb054"
        },
        {
          "alg": "SHA-512",
          "content": "173196354b04ce1a0401e6655c0de38b0fee77c9d51930e4744ee0189f6bc8e7ca82fbdb1192562237e480f9ab76bb04a9ec02a1fd3a69769335751b238dff19"
        },
        {
          "alg": "SHA-384",
          "content": "0ff9e4c1c4894215396c5bb0e4d4518071456cdc485b13eed9dec94c4a884aeed98a9149cff5234b20f3d844215b2057"
        },
        {
          "alg": "SHA3-384",
          "content": "c4886c60162c9463c4bec74f9d1f8e0c8642b28c64010759c1b491e39905cff685174c873988c30285db256788e0b3cd"
        },
        {
          "alg": "SHA3-256",
          "content": "535a74583029b25c8f05a310fea53db7acbdf542872c931d4b1002186d3bd16c"
        },
        {
          "alg": "SHA3-512",
          "content": "85f1cb865c189211ae0bb4ab374ed7e745d46ce555a569f1251ebe87f3625ddb84d85f37c9870b25ab664339c48f2faf7fbd61b3f149476ae245ee566a7e299a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/us.springett/alpine-executable-war@2.2.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/Alpine/actions",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/stevespringett/Alpine/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/stevespringett/Alpine.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-server@10.0.12?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-server",
      "version": "10.0.12",
      "description": "The core jetty server artifact.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2bd6a4e1b6f0bbba01cc29aac7981758"
        },
        {
          "alg": "SHA-1",
          "content": "941e18d6db785a32f857eabc29cea51e5ca38310"
        },
        {
          "alg": "SHA-256",
          "content": "bb75ea1c4babd6c4d5744534e5a0178df99250ad89fc64c22f4bb770dac11fb8"
        },
        {
          "alg": "SHA-512",
          "content": "095a79111171b9682070a6140a3eeb5c0a6eddceb286af8cd6cf61bb4e0078ecf3edfdc44cc31e25ad1362a894e8d6f15fdf14b2bcf58732042128983cf874ef"
        },
        {
          "alg": "SHA-384",
          "content": "64fb57c2e37495336c7a967349c4508ad6d182bf2dd9d39dcde53948ae9b49e01deb24be72daac91d32048a0e3fdac05"
        },
        {
          "alg": "SHA3-384",
          "content": "b43a993633712f12bb009ea0e7bf3d769d32d01ceb964871d8b7cdb76e087ccb9bd7f1a79e229f35d5c2559792373f5d"
        },
        {
          "alg": "SHA3-256",
          "content": "d358e9b7f5a531cec2dd67a20e5346a5fbb417fba19806989be6925a0480ba12"
        },
        {
          "alg": "SHA3-512",
          "content": "d6771b7497451d6304a8402c0cf3604c7174d21bce65b06f93f9f550f7010bf21cbbcfeece40e5f8fa4f65c9ba534390bb90e2bb22be04ce2e40e3ba1a7b9cef"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-server@10.0.12?type=jar",
      "externalReferences": [
        {
          "url": "https://webtide.com",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse/jetty.project",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty.toolchain/jetty-servlet-api@4.0.6?type=jar",
      "publisher": "Mort Bay Consulting",
      "group": "org.eclipse.jetty.toolchain",
      "name": "jetty-servlet-api",
      "version": "4.0.6",
      "description": "The Eclipse Jetty Toolchain Parent",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d63413e02885c25d0129e3d2936606f6"
        },
        {
          "alg": "SHA-1",
          "content": "959c5d83d08f5cddf56caff749e48b735193191b"
        },
        {
          "alg": "SHA-256",
          "content": "d90bf1f8a9d2ba89f4510bb51e1516dcf94ef6dc034e00f233654abdd78f2210"
        },
        {
          "alg": "SHA-512",
          "content": "758454d41cd0c08ec5b25c1e8ba7249fb11f753ea04c337614db9b99f2da9c1dd9a26bd0048aa6d1b95906d8aa67d0a9c719901b611d3017547adda9f7d4a289"
        },
        {
          "alg": "SHA-384",
          "content": "6f5cdcc8b31399438db38ef510c30399f4c2e3058ed8c7d9a6d9a425303c31c3f6d41a16e5d9416ddc6e5ca95164b7e4"
        },
        {
          "alg": "SHA3-384",
          "content": "f6c797c7ffe1fa8b7c68786718ae4f6e96a3a904cfb9ba3fe17c36cd2967796f6e1bc1ed09bc9dc2e74d1ade975526e9"
        },
        {
          "alg": "SHA3-256",
          "content": "1a2f5f3b79a4881afac16b2cecca63f9a18bee4d7b2f0509001e265da8df353c"
        },
        {
          "alg": "SHA3-512",
          "content": "443b85f02330d60eda46607dccd92e7f92bc5a3ebf85298ed0dcc28dea468acef800e854918c50300a4fe0fe42a111fb8ffb1be081e817a7a55dd353192f181a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "id": "EPL-1.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty.toolchain/jetty-servlet-api@4.0.6?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse/jetty.toolchain/tree/master/jetty-servlet-api",
          "type": "vcs"
        },
        {
          "url": "http://www.mortbay.com",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse/jetty.toolchain",
          "type": "issue-tracker"
        },
        {
          "url": "http://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html",
          "type": "mailing-list"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-http@10.0.12?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-http",
      "version": "10.0.12",
      "description": "The Eclipse Jetty Project",
      "hashes": [
        {
          "alg": "MD5",
          "content": "bd16c5f504d869142ad8b5d8fe56c04d"
        },
        {
          "alg": "SHA-1",
          "content": "e8f5483971a0ddb6d44934b888c0fcc2584874ce"
        },
        {
          "alg": "SHA-256",
          "content": "36543bc532477757a5c6b40ddd09e4506dd4b771e33d7d249a0bedb65f508d5a"
        },
        {
          "alg": "SHA-512",
          "content": "914a4351c7fc58975722ce903c020d33b17bdec7f9fbac59b05fa07eb894108d507d17e187bea2cf7550c6a275d4becd91c223c08d5604c1cfb57911c4b36f6a"
        },
        {
          "alg": "SHA-384",
          "content": "b40db766e5ab4e9949c8218543ed3d6f1380e5a327d121a29fec6613bdfb0b69b358a59fe48719fb2e4099b507df1e81"
        },
        {
          "alg": "SHA3-384",
          "content": "683d018a6c7523db2c1724e7ad56b04c460fb6bb0d12ccf7c776a3179a9596ba1c943568776555399cef396b5660a199"
        },
        {
          "alg": "SHA3-256",
          "content": "415f2e62c3a50eb2513fa6ae9c634b2f34e1ed102f762e988acda21014bafed1"
        },
        {
          "alg": "SHA3-512",
          "content": "b85c36a36a2c9aee7fe5019a7a394c20cd6dcc3cced822d2108550f18c34d225b46e9a028151eff8f5988169c16259bfee09d034d931f299f903c6a3fb950204"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-http@10.0.12?type=jar",
      "externalReferences": [
        {
          "url": "https://webtide.com",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse/jetty.project",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-util@10.0.12?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-util",
      "version": "10.0.12",
      "description": "Utility classes for Jetty",
      "hashes": [
        {
          "alg": "MD5",
          "content": "71332138d6c0c08bf520fe5247df9318"
        },
        {
          "alg": "SHA-1",
          "content": "77ebff975f7c206aba60b91bc8650cc306d1439d"
        },
        {
          "alg": "SHA-256",
          "content": "9f61c41fd2f685e29d64a3472cb98334cb97824215f98d321deaa46bbb0ec545"
        },
        {
          "alg": "SHA-512",
          "content": "c489f4599b4e9e1a3d6eed304d85db68a81d4bdc515e20c73cc02cda308189cf29a35acbbcbcf19a95b7d3bfa0a3a5bb480ee13712eb5b73636d817c8afece32"
        },
        {
          "alg": "SHA-384",
          "content": "0bffcdff28c02a8f4c22514cfa5583aeaeafbf203db8af119bd6a7439d06ac55020118561712ec65cf5eb8a8cc030bac"
        },
        {
          "alg": "SHA3-384",
          "content": "150be69348cc7c9931212b31982aac5bbe7a85d9189d0bbe5a521e79bb87da107bb00ae213624b9d95ea0d0d1b5e4da5"
        },
        {
          "alg": "SHA3-256",
          "content": "e8b30a898fd17cb18b9ac6607753e2ce6327941500892d7c97a614adb114a46b"
        },
        {
          "alg": "SHA3-512",
          "content": "6e5693aa1248190b82c56965cd8a51e8dfba671051bacacb1e3e358855ddcb2af3040970fe4bc0056c1e34a67e7f6b125f61763493b35380a6b37416f07b5eb4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-util@10.0.12?type=jar",
      "externalReferences": [
        {
          "url": "https://webtide.com",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse/jetty.project",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-io@10.0.12?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-io",
      "version": "10.0.12",
      "description": "The Eclipse Jetty Project",
      "hashes": [
        {
          "alg": "MD5",
          "content": "859e7e9e4ee6afc9855cb1377f5af4a6"
        },
        {
          "alg": "SHA-1",
          "content": "183c90feb4c9cbbf4962ae9566144a35dc1a38c0"
        },
        {
          "alg": "SHA-256",
          "content": "f5d9edc138b95a46522ccae3195ee82213f26c557fadbd7128294aeb4bff703a"
        },
        {
          "alg": "SHA-512",
          "content": "74b0997e7b415831b7eebd09a32ea04718b96eac9216598a9eeb6984b7174b5e42aaaf34da81f6ca83fad982cc002c10a6205c2da3d6dc01c6ea38325d813d65"
        },
        {
          "alg": "SHA-384",
          "content": "2519b384345e072415525aff06b580f1719e6b715e1365633fddcfc59105045351d02181d4f777618363edef7abf4bca"
        },
        {
          "alg": "SHA3-384",
          "content": "ad133ddbfb35efe6e9de4bd8a2f39c12d5bdfcc678d345fb0b4aed4fd414366f5a61397aabea7852756b3581aae654ae"
        },
        {
          "alg": "SHA3-256",
          "content": "08054b58a83178603914b95332029ab0f87e34b4bdea3b6ad083e8c14534bfe1"
        },
        {
          "alg": "SHA3-512",
          "content": "c46c642e42afa244f47a718b9cd5a3e1ac7954036384d3a69e0b526b3c62cee7bef4f803aade8a834ad3f33b6c84f5454ff8f15a76f1ccd1c1bde80921ea73c5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-io@10.0.12?type=jar",
      "externalReferences": [
        {
          "url": "https://webtide.com",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse/jetty.project",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-webapp@10.0.12?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-webapp",
      "version": "10.0.12",
      "description": "Jetty web application support",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9c4ee10c26893c770d75f707e9f35e23"
        },
        {
          "alg": "SHA-1",
          "content": "27057710ade0db130e7790dbcd3911d6b66e1543"
        },
        {
          "alg": "SHA-256",
          "content": "74a41d76e135b0a8a7e81af9661a8dfccbe48c0f7ed8ba062c93d070f4665dc8"
        },
        {
          "alg": "SHA-512",
          "content": "d1ea34346dc0d33ea3743b51c1fbd85416e253e61fb83e5ade6dce6df733e4072f7ab34aafc0c0026e847897ff474f6e8e6edae0de44eabe8bd81d989b9a59ae"
        },
        {
          "alg": "SHA-384",
          "content": "37e8d003d06e0d6be2af07897b25e52a664b987a93e467ee1b071f19908a82d41f722a81b00e74ea0d492025c82c849b"
        },
        {
          "alg": "SHA3-384",
          "content": "9e6898efdf9dc89d44cdad291a4c274765761b0957a6132d9a4b6e5a09b09deb5d1b16c93b785e53b7b7a142f5132977"
        },
        {
          "alg": "SHA3-256",
          "content": "14d54a7b1ab271a79187879e4e03ba1a3e41912dca8dc70c1e336e8a90d51ff7"
        },
        {
          "alg": "SHA3-512",
          "content": "aa8b261caf4bec8c9c2fe98551df413508335dd5e822f16c82e699f8bd7d64a87f557281761a64aa1212f968e7a12ef7b3081b1f7217e8dfce98b3c441e972b4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-webapp@10.0.12?type=jar",
      "externalReferences": [
        {
          "url": "https://webtide.com",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse/jetty.project",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-servlet@10.0.12?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-servlet",
      "version": "10.0.12",
      "description": "Jetty Servlet Container",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6d268a112243152982197b24c2805aa0"
        },
        {
          "alg": "SHA-1",
          "content": "642743b2074b1c40ee14e634cee436275b84e3cf"
        },
        {
          "alg": "SHA-256",
          "content": "21bded0be194e334032de39510433c38c56547ccdf321f036954b6e25c56b4b6"
        },
        {
          "alg": "SHA-512",
          "content": "0d563de8542609d6a1c96741618a447a531c49588cad3193b2c8f928c50b13bfecb22a29690581ae273ec539c08e03a601d968a417a6f3c3c959a7685da29755"
        },
        {
          "alg": "SHA-384",
          "content": "b3677f016d28e8866d9bdd7333f78073cd506f818b9357c86aea3f49ec59317ab775c78b38ed3cd5f2f92d0b7581298b"
        },
        {
          "alg": "SHA3-384",
          "content": "67e89d10d6482467eb009ff104c36842f1414d443aae24741922971c22a462548003566cf5195e74adf747765e82153f"
        },
        {
          "alg": "SHA3-256",
          "content": "4d07e863cf611269203be38c69b0fcceed828b77592b97802f4c7322978148f2"
        },
        {
          "alg": "SHA3-512",
          "content": "a08d0d93f383eabae8f7175f9681f8be502725800614457e6d5ef489df74095006f56ebce4d460bd0e2ce8d73f1f85e29c9c332243aee726832bf14df397a382"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-servlet@10.0.12?type=jar",
      "externalReferences": [
        {
          "url": "https://webtide.com",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse/jetty.project",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-security@10.0.12?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-security",
      "version": "10.0.12",
      "description": "Jetty security infrastructure",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a3c8a8ac9f924c6ec1a344c1438f0c04"
        },
        {
          "alg": "SHA-1",
          "content": "878c018df33aea5f185403e6881da29624207395"
        },
        {
          "alg": "SHA-256",
          "content": "9825ef2e8c25d7035473f112d3874c958a626f4df026e14aad5b4ae3adb8f121"
        },
        {
          "alg": "SHA-512",
          "content": "36ff4afd7ab4324d23dd40de68a7ea130783d130558531e5008ae05edbc5a0bbf1f4543fb48c15e49dca47f8c48e63f22ac3143a647c2495ab7f32e09527027c"
        },
        {
          "alg": "SHA-384",
          "content": "aaf78a86a5e87460a44a0ee30000f448f5380a6d374a46f08afd7e0d1bbc0901371bc57082f31026ce0f8b96c2c60604"
        },
        {
          "alg": "SHA3-384",
          "content": "7985e94ab1e10e9496de90ecbe0b9d77b79dde5031ab828f5ac0f464975161de9695e025c27ad260591f7fbc78f24650"
        },
        {
          "alg": "SHA3-256",
          "content": "49832e42f0527ebb6bc98076b5329ec184b891f068f4fc76b39d8f9c9ca0e7b4"
        },
        {
          "alg": "SHA3-512",
          "content": "6777faf3e23b0de0bee88f2ed1fc565a40327c8d3d0aeaaabe8485b26bfdb8502eb6eb1d35c39e52676a06cdf4f18e9a24cda4fb6e3f734a9eaeb7d4f496f903"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-security@10.0.12?type=jar",
      "externalReferences": [
        {
          "url": "https://webtide.com",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse/jetty.project",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-xml@10.0.12?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-xml",
      "version": "10.0.12",
      "description": "The jetty xml utilities.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "95ddfa4edc70a1c01c18b38856df5c96"
        },
        {
          "alg": "SHA-1",
          "content": "fa06a9eeeb9b577bb262e5cfd4c39f6eaa013060"
        },
        {
          "alg": "SHA-256",
          "content": "204e0b7aa27b71af5d4635bf92737ff410be7285836972654449b0b2d2807594"
        },
        {
          "alg": "SHA-512",
          "content": "564abb1f3505a43fdb80671369170d22bd9f27c3d61a6f1a01dee34d5f44fcc104c2f3de42a4904b3d28d4a1949a7c583c02c59be0c3a8522eafa9c42e76c937"
        },
        {
          "alg": "SHA-384",
          "content": "896be8809e58a70d67918ada17f45d4746ad5e8a8bb270b7ba6892e0be50ec0c4e5026521b95dd17904450b9141bbc05"
        },
        {
          "alg": "SHA3-384",
          "content": "1d1edadeb2a4e5c4fa88367b350ff154735c54b17719f72ae269adf34cdf00ebb9fbe7605b034a4cf54ccd64581dbafd"
        },
        {
          "alg": "SHA3-256",
          "content": "015ce6761e118848b9a0eb78c6865c62a09675c709a66fb58228bcc2b9ee9fcb"
        },
        {
          "alg": "SHA3-512",
          "content": "e6e5c93633b70a4733dd859231c40b4433b1590cfa9afa26dba80e364901256d278046db180c6ffd62270ec808e38def94a8fb72bf6dec4996fcc77dcd41ee03"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-xml@10.0.12?type=jar",
      "externalReferences": [
        {
          "url": "https://webtide.com",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse/jetty.project",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-webapp-logging@9.4.27?type=jar",
      "publisher": "Mort Bay Consulting",
      "group": "org.eclipse.jetty",
      "name": "jetty-webapp-logging",
      "version": "9.4.27",
      "description": "Jetty :: Centralized WebApp Logging",
      "hashes": [
        {
          "alg": "MD5",
          "content": "deeedf6a4952a8a95135b00f312701be"
        },
        {
          "alg": "SHA-1",
          "content": "a55f18e1533ea42e9c2645d9cef531c05cbc3d42"
        },
        {
          "alg": "SHA-256",
          "content": "4097217c42e94fcd06efda649707aac172a72a89745e526408e421fb6a75056c"
        },
        {
          "alg": "SHA-512",
          "content": "3eeda78db52469b2d95ac2b5ba3c0ebf37bd7675d92b9a47e7e7379e060db5301a4888012e75943b56c87231f8db2a50b601cf57a367f1f75e27ec78d782d0ac"
        },
        {
          "alg": "SHA-384",
          "content": "ea7f2e2629c732c926f79c8977bb04eac0d8a6d3cd64f9d744c58c908a9aac88580f29491e750ac59165870fc627dd60"
        },
        {
          "alg": "SHA3-384",
          "content": "a5e9165b67c727f9ae1fe90866542366591a370d23f65cbd01c9087f34fa77ef8b5ada9ffa64dc303cf4f53fdbf6b2f0"
        },
        {
          "alg": "SHA3-256",
          "content": "c6d2b9354534af0166539b71e9f2ec997fa3200fd277989a998405aac940da5f"
        },
        {
          "alg": "SHA3-512",
          "content": "44a5eab5c470d629a0e4efdaad8968fa5e7fab40f4937222837ac750f9d95d456e3da58da88abd2d4851c593b8ef185ffcec2bcd22310c67eb2c87ca71d7a542"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        },
        {
          "license": {
            "id": "EPL-1.0",
            "url": "http://www.eclipse.org/legal/epl-v10.html"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-webapp-logging@9.4.27?type=jar",
      "externalReferences": [
        {
          "url": "http://www.mortbay.com",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty-project/jetty-webapp-logging/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/jetty-project/jetty-webapp-logging",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-deploy@10.0.12?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-deploy",
      "version": "10.0.12",
      "description": "Jetty deployers",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a38ff91bedad336fa83963cfc0b68c22"
        },
        {
          "alg": "SHA-1",
          "content": "3ccc1e6e492032c9bfd9f8f271cd2a6eca579bf5"
        },
        {
          "alg": "SHA-256",
          "content": "e8a7d88bd76ea1415aafd25a2f2711c029647471fbff42b08038ed43def7220a"
        },
        {
          "alg": "SHA-512",
          "content": "eeb41ff8642ef172449f4864ab6fb837c6408bcf64a9159fce5d4d849201b19155462a40e39d00fefd52b1886cc9c9e1dee968a96b477cd897009e97c6463e2f"
        },
        {
          "alg": "SHA-384",
          "content": "3055b902aad04ca66d5accec5e595280cc3c8d0600fe329956d47878f5270547d19e8734150a388f2fbb2523f51a3df4"
        },
        {
          "alg": "SHA3-384",
          "content": "c8177b00f574d8d72eda27f8184ae703a485ea33d6d3f2ba5a1e74c80b9f0f5d94da42df1dd30b1f522be61b2baa5fac"
        },
        {
          "alg": "SHA3-256",
          "content": "11dea5ab13b215820829de840a5fd4c9e531f72118b10fb5492401e2cb177a57"
        },
        {
          "alg": "SHA3-512",
          "content": "04fd937c1f16360ee4299b0324b26644d1607a1351ecc2a7931cb9705606723462e2b550a6dce5e0c1ddebdbe3d44377627aafe7dad1f1cf9138201ac6b0330e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-deploy@10.0.12?type=jar",
      "externalReferences": [
        {
          "url": "https://webtide.com",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse/jetty.project",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.slf4j/log4j-over-slf4j@1.7.36?type=jar",
      "publisher": "QOS.ch",
      "group": "org.slf4j",
      "name": "log4j-over-slf4j",
      "version": "1.7.36",
      "description": "Log4j implemented over SLF4J",
      "hashes": [
        {
          "alg": "MD5",
          "content": "84f330e9fc7173791d253773b3575a63"
        },
        {
          "alg": "SHA-1",
          "content": "2a753acda077203a4794f106871bb237501c9a53"
        },
        {
          "alg": "SHA-256",
          "content": "0a7e032bf5bcdd5b2bf8bf2e5cf02c5646f2aa6fee66933b8150dbe84e651e8a"
        },
        {
          "alg": "SHA-512",
          "content": "c86ec5598cb37bb2926e1bdb96a2cd259054ffed6543af95cbc3fa688e1c589fee022067bcb0a3c91174de453809e058b982e1a85f4aa837ccf9336e6f1f7608"
        },
        {
          "alg": "SHA-384",
          "content": "4bb08fd39c999bf843165c677cacf8ebc9983e5ef77ff0929b087980a1c24f1522618cb4d86224e9d26472744c7b3cd8"
        },
        {
          "alg": "SHA3-384",
          "content": "66e2544de1948788f9f4cc07e114bc7162a782718253a9ec4c19fe214c17c4e9f1b45420752402fdd2bfa429b4b88510"
        },
        {
          "alg": "SHA3-256",
          "content": "0542eb2d39095abee2f6845ca81d8daedf1cb2af9c353f33feea303e50603789"
        },
        {
          "alg": "SHA3-512",
          "content": "50294730493a6931f4d06f0dfed4a7a99f1ca0181f2de363a5a4eb5aee97759c083d4223b8f88406773f7eeee05a5311330e0f771e0c048f1bcbb3664450ba8f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-1.0"
          }
        }
      ],
      "purl": "pkg:maven/org.slf4j/log4j-over-slf4j@1.7.36?type=jar",
      "externalReferences": [
        {
          "url": "http://www.qos.ch",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/qos-ch/slf4j",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar",
      "publisher": "QOS.ch",
      "group": "org.slf4j",
      "name": "jul-to-slf4j",
      "version": "1.7.36",
      "description": "JUL to SLF4J bridge",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2a3fe73e6cafe8f102facaf2dd65353f"
        },
        {
          "alg": "SHA-1",
          "content": "ed46d81cef9c412a88caef405b58f93a678ff2ca"
        },
        {
          "alg": "SHA-256",
          "content": "9e641fb142c5f0b0623d6222c09ea87523a41bf6bed48ac79940724010b989de"
        },
        {
          "alg": "SHA-512",
          "content": "0bb1e7343d07d41bcfb0c1ffeb2db28cbb35e7a80a409b80042f463b082a292976f09d719e319471e31c7bab716121728a16509fd385fc6e3b400b1b214cffea"
        },
        {
          "alg": "SHA-384",
          "content": "50e2f326fc00537a5fb3726c7c55556851b3be8b4346f522f27ddecf2fdb44adabae3197b30ccfd854c37d6734adbd8f"
        },
        {
          "alg": "SHA3-384",
          "content": "4ad0c3870852ac44530a9dcb992d947cd8708ee6f422559da41aaaa8b22d1610fb116b32d2c54df83b110b85487083bf"
        },
        {
          "alg": "SHA3-256",
          "content": "8e3f5aaaa27f618b52e610376d2a16c6f9dc8dce5e6c2bbe42131a590626aae6"
        },
        {
          "alg": "SHA3-512",
          "content": "e3da265406b5e69f02235ed7272a48f71cb8b6f0a696820e28e90fb5eafeeb311abf2a4e779b402f384c6a80470fd41116ee52a526f57040fae3b24cb3b19c01"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar",
      "externalReferences": [
        {
          "url": "http://www.qos.ch",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/qos-ch/slf4j",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.slf4j/jcl-over-slf4j@1.7.36?type=jar",
      "publisher": "QOS.ch",
      "group": "org.slf4j",
      "name": "jcl-over-slf4j",
      "version": "1.7.36",
      "description": "JCL 1.2 implemented over SLF4J",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8065610cde33ed9fd5d34367912c1938"
        },
        {
          "alg": "SHA-1",
          "content": "d877e195a05aca4a2f1ad2ff14bfec1393af4b5e"
        },
        {
          "alg": "SHA-256",
          "content": "ab57ca8fd223772c17365d121f59e94ecbf0ae59d08c03a3cb5b81071c019195"
        },
        {
          "alg": "SHA-512",
          "content": "ac231ab44521bb5478742af13624db5c14aea809c3a2c13b989fba30186ba6db840f2d1b4aea54f9c1f779547b975fd042dd353f54025592774d40192bd71148"
        },
        {
          "alg": "SHA-384",
          "content": "618704032ab3f8f87091ac797e2c9319a4b7f36a53e060695d56173b67ce9bc9e16c74cba228e758ac90e279df75428a"
        },
        {
          "alg": "SHA3-384",
          "content": "95a189173932d8080d91de8b71b9d1bca49a330db7cad9c41d51fe9514a9f6299b24e31441f06681b3dcc188807dcf40"
        },
        {
          "alg": "SHA3-256",
          "content": "7aef3380fdeae9b7a4adfa6ad69c2c92f246fcdbd4fcd3d1056ee846d8ef92fb"
        },
        {
          "alg": "SHA3-512",
          "content": "da7d1b8e5a150300e1051dda5755df64275e5822256ef624fd8a37c582cc2774aadce97f8732de52e54b1c74e28ba601d3bfc3482abb4a24f7e9f779e7e8dd64"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.slf4j/jcl-over-slf4j@1.7.36?type=jar",
      "externalReferences": [
        {
          "url": "http://www.qos.ch",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/qos-ch/slf4j",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.owasp/security-logging-common@1.1.7?type=jar",
      "group": "org.owasp",
      "name": "security-logging-common",
      "version": "1.1.7",
      "description": "The OWASP Security Logging project provides developers and ops personnel with APIs for logging security-related events.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9f11b84aefd2f2dcf48f8443a6213619"
        },
        {
          "alg": "SHA-1",
          "content": "4717c0c2225a2aad898b2fbdf717ec6e034d48f8"
        },
        {
          "alg": "SHA-256",
          "content": "ef9c6e4fefcf8ffcee7590239a8e8c56b192fc71c183fd8a943cf177e01b07eb"
        },
        {
          "alg": "SHA-512",
          "content": "d30fa0cce5b75758289a255946f165418786d96c5de3dbb12084d6da6bb75e556e43e002050ea114e3adb0ca15dc16e28b6218f5b2fcf993eadcb37076fb522a"
        },
        {
          "alg": "SHA-384",
          "content": "f10fbb5250849634a79477a536eb7f4a07aa66d5d1234e18caf5dbd2ab9473a4e26baa4fe381af9240eb6f9471cbb937"
        },
        {
          "alg": "SHA3-384",
          "content": "fee72e5c1e41740264f6d0f1fcfd72731c92df25af3d529509a006ce8330430390ab1139b8798c8cd6b78bcc0656d4e4"
        },
        {
          "alg": "SHA3-256",
          "content": "2c7bf9e688071240437f106b05955c298c9ee42f6c119cd918460af5a3a82a48"
        },
        {
          "alg": "SHA3-512",
          "content": "0ff1a2d6da110ca1a1713b052bab481bf052033e9cef7362a69a30e485d4a8ae8ba78ecd02278f4f81558d9cd2f12402108f82668754eade77fde3670433740c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.owasp/security-logging-common@1.1.7?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/javabeanz/owasp-security-logging",
          "type": "vcs"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.owasp/security-logging-logback@1.1.7?type=jar",
      "group": "org.owasp",
      "name": "security-logging-logback",
      "version": "1.1.7",
      "description": "The OWASP Security Logging project provides developers and ops personnel with APIs for logging security-related events.",
      "scope": "optional",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c1148e1a96d53351f39b407185a59e06"
        },
        {
          "alg": "SHA-1",
          "content": "e609fe8531b96fcd559c9e146342aa3a56d16231"
        },
        {
          "alg": "SHA-256",
          "content": "100f5e85cbf9cf395983d85355cc17ed1d19d77176d93c58a14f339e62382168"
        },
        {
          "alg": "SHA-512",
          "content": "9bdb7df787ae5264e509082aa3b6f865ec543801587270eb582c3cb430a15f019c24a25e5a1d4df462a2dec0e6e82ce636807b055d5e72b73d67d90805e9e5d1"
        },
        {
          "alg": "SHA-384",
          "content": "8502c6a84746dfd8b9960d599cd476dd3b2c0017b2e8eba169411f7adbfea4236323ada03cb7e005812456976e673a7b"
        },
        {
          "alg": "SHA3-384",
          "content": "283c28b7760973dc0195fcd2127294c4c77a2a8c95bcc597401f00ffbd8c5367788ae9c9b6874deac178526fe93c1265"
        },
        {
          "alg": "SHA3-256",
          "content": "5a2f21e6fe6fe4bc45c439d7dbb5a16d07cc56ecf15b10a60125ee777bac1122"
        },
        {
          "alg": "SHA3-512",
          "content": "f2fa575c8838d7dcb5d11678cff9afaeb65d3bb227f501cf86541e4131c7a3cb72921d8ff8d28f91f7a6d5d3ac08d579f1fba73e8a7627c7a46371ed0a62fad9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.owasp/security-logging-logback@1.1.7?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/javabeanz/owasp-security-logging",
          "type": "vcs"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    }
  ],
  "services": [
    {
      "bom-ref": "service:gov.nist.nvd",
      "provider": {
        "name": "National Institute of Standards and Technology (NIST)",
        "url": [
          "https://nist.gov"
        ],
        "contact": [
          {
            "email": "nvd@nist.gov"
          }
        ]
      },
      "group": "gov.nist.nvd",
      "name": "National Vulnerability Database (NVD)",
      "description": "The NVD is the U.S. government repository of standards based vulnerability management data represented using the Security Content Automation Protocol (SCAP). This data enables automation of vulnerability management, security measurement, and compliance. The NVD includes databases of security checklist references, security-related software flaws, misconfigurations, product names, and impact metrics.",
      "endpoints": [
        "https://nvd.nist.gov/feeds"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "Public domain"
          }
        }
      ]
    },
    {
      "bom-ref": "service:org.sonatype.ossindex",
      "provider": {
        "name": "Sonatype",
        "url": [
          "https://sonatype.com"
        ],
        "contact": [
          {
            "email": "ossindex@sonatype.org"
          }
        ]
      },
      "group": "org.sonatype.ossindex",
      "name": "OSS Index",
      "description": "The NVD is the U.S. government repository of standards based vulnerability management data represented using the Security Content Automation Protocol (SCAP). This data enables automation of vulnerability management, security measurement, and compliance. The NVD includes databases of security checklist references, security-related software flaws, misconfigurations, product names, and impact metrics.",
      "endpoints": [
        "https://ossindex.sonatype.org/api/v3/component-report",
        "https://ossindex.sonatype.org/api/v3/version"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:com.cyberriskanalytics.vulndb",
      "provider": {
        "name": "Risk Based Security",
        "url": [
          "https://riskbasedsecurity.com/"
        ],
        "contact": [
          {
            "email": "support@riskbasedsecurity.com"
          },
          {
            "email": "sales@riskbasedsecurity.com",
            "phone": "1-855-RBS-RISK"
          }
        ]
      },
      "group": "com.cyberriskanalytics.vulndb",
      "name": "VulnDB",
      "description": "VulnDB is the most comprehensive and timely vulnerability intelligence available and provides actionable information about the latest in security vulnerabilities via an easy-to-use SaaS Portal, or a RESTful API that allows easy integration into GRC tools and ticketing systems. VulnDB allows organizations to search and be alerted on the latest vulnerabilities, both in end-user software and the 3rd Party Libraries or dependencies. A subscription to VulnDB provides organizations with simple to understand ratings and metrics on their vendors and products, and how each contributes to the organization\u2019s risk-profile and cost of ownership.",
      "endpoints": [
        "https://vulndb.cyberriskanalytics.com/api/v1/account_status",
        "https://vulndb.cyberriskanalytics.com/api/v1/vendors/",
        "https://vulndb.cyberriskanalytics.com/api/v1/products/",
        "https://vulndb.cyberriskanalytics.com/api/v1/versions/by_product_id",
        "https://vulndb.cyberriskanalytics.com/api/v1/vulnerabilities/",
        "https://vulndb.cyberriskanalytics.com/api/v1/vulnerabilities/find_by_cpe"
      ],
      "authenticated": true,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:com.github.api",
      "provider": {
        "name": "GitHub",
        "url": [
          "https://github.com/"
        ]
      },
      "group": "com.github.api",
      "name": "GitHub Advisories",
      "description": "Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.",
      "endpoints": [
        "https://api.github.com/graphql"
      ],
      "authenticated": true,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:io.crates",
      "provider": {
        "name": "Crates.io",
        "url": [
          "https://crates.io"
        ]
      },
      "group": "io.crates",
      "name": "Crates.io",
      "description": "The Rust community\u2019s crate registry",
      "endpoints": [
        "https://crates.io/api/v1/crates"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.packagist.repo",
      "provider": {
        "name": "Packagist",
        "url": [
          "https://packagist.org"
        ]
      },
      "group": "org.packagist.repo",
      "name": "Crates.io",
      "description": "The PHP Package Repository",
      "endpoints": [
        "https://repo.packagist.org/p/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.rubygems",
      "provider": {
        "name": "RubyGems",
        "url": [
          "https://rubygems.org"
        ]
      },
      "group": "org.rubygems",
      "name": "RubyGems",
      "description": "RubyGems.org is the Ruby community\u2019s gem hosting service.",
      "endpoints": [
        "https://rubygems.org/api/v1/versions"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.golang.proxy",
      "provider": {
        "name": "Google",
        "url": [
          "https://go.dev/"
        ]
      },
      "group": "org.golang.proxy",
      "name": "Go Module Mirror, Index, and Checksum Database",
      "description": "The Go team is providing the following services run by Google: a module mirror for accelerating Go module downloads, an index for discovering new modules, and a global go.sum database for authenticating module content.",
      "endpoints": [
        "https://proxy.golang.org/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:pm.hex",
      "provider": {
        "name": "Six Colors AB.",
        "url": [
          "https://hex.pm"
        ],
        "contact": [
          {
            "name": "Eric Meadows-J\u00F6nsson",
            "phone": "\u002B46 070-893 94 01"
          }
        ]
      },
      "group": "pm.hex",
      "name": "hex",
      "description": "The package manager for the Erlang ecosystem.",
      "endpoints": [
        "https://hex.pm/api/packages"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.maven.repo1",
      "provider": {
        "name": "Sonatype",
        "url": [
          "https://sonatype.com"
        ]
      },
      "group": "org.maven.repo1",
      "name": "Maven Central",
      "description": "Package repository for the Java ecosystem.",
      "endpoints": [
        "https://repo1.maven.org/maven2"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:com.atlassian.maven",
      "provider": {
        "name": "Atlassian",
        "url": [
          "https://atlassian.com"
        ]
      },
      "group": "com.atlassian.maven",
      "name": "Atlassian Public",
      "description": "Package repository for the Java ecosystem.",
      "endpoints": [
        "https://packages.atlassian.com/content/repositories/atlassian-public/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.jboss.repository",
      "provider": {
        "name": "RedHat",
        "url": [
          "https://redhat.com"
        ]
      },
      "group": "org.jboss.repository",
      "name": "JBoss Releases",
      "description": "Package repository for the Java ecosystem.",
      "endpoints": [
        "https://repository.jboss.org/nexus/content/repositories/releases/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.clojars.repo",
      "provider": {
        "name": "Clojars",
        "url": [
          "https://clojars.org/"
        ]
      },
      "group": "org.clojars.repo",
      "name": "Clojars",
      "description": "Clojars is an easy to use community repository for open source Clojure libraries",
      "endpoints": [
        "https://repo.clojars.org/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:com.google.maven",
      "provider": {
        "name": "Google",
        "url": [
          "https://google.com"
        ]
      },
      "group": "com.google.maven",
      "name": "Google\u0027s Maven Repository",
      "endpoints": [
        "https://maven.google.com/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.npmjs.registry",
      "provider": {
        "name": "npm",
        "url": [
          "https://www.npmjs.com/"
        ]
      },
      "group": "org.npmjs.registry",
      "name": "NPM Registry",
      "description": "Package repository for the Node.js and JavaScript ecosystems.",
      "endpoints": [
        "https://registry.npmjs.org/-/package/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.nuget.api",
      "provider": {
        "name": "Microsoft",
        "url": [
          "https://www.microsoft.com/"
        ],
        "contact": [
          {
            "email": "support@nuget.org"
          }
        ]
      },
      "group": "org.nuget.api",
      "name": "NuGet Registry",
      "description": "Package repository for the .NET ecosystem.",
      "endpoints": [
        "https://api.nuget.org/v3-flatcontainer/",
        "https://api.nuget.org/v3/registration3/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:dev.osv",
      "provider": {
        "name": "Google",
        "url": [
          "https://google.com"
        ]
      },
      "group": "dev.osv",
      "name": "OSV",
      "description": "OSV is a distributed vulnerability database for Open Source",
      "endpoints": [
        "https://osv-vulnerabilities.storage.googleapis.com"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.pypi",
      "provider": {
        "name": "Python Software Foundation",
        "url": [
          "https://www.python.org/psf/"
        ],
        "contact": [
          {
            "email": "psf@python.org"
          }
        ]
      },
      "group": "org.pypi",
      "name": "PyPI",
      "description": "The Python Package Index (PyPI) is a repository of software for the Python programming language.",
      "endpoints": [
        "https://pypi.org/pypi/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:io.snyk",
      "provider": {
        "name": "Snyk",
        "url": [
          "https://snyk.io"
        ]
      },
      "group": "io.snyk",
      "name": "Snyk",
      "description": "Snyk is a developer security platform. Integrating directly into development tools, workflows, and automation pipelines, Snyk makes it easy for teams to find, prioritize, and fix security vulnerabilities in code, dependencies, containers, and infrastructure as code. Supported by industry-leading application and security intelligence, Snyk puts security expertise in any developer\u0027s toolkit.",
      "endpoints": [
        "https://api.snyk.io"
      ],
      "authenticated": true,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.dependencytrack/dependency-track@4.7.1?type=war",
      "dependsOn": [
        "pkg:maven/us.springett/alpine-common@2.2.0?type=jar",
        "pkg:maven/us.springett/alpine-model@2.2.0?type=jar",
        "pkg:maven/us.springett/alpine-infra@2.2.0?type=jar",
        "pkg:maven/us.springett/alpine-server@2.2.0?type=jar",
        "pkg:maven/us.springett/cvss-calculator@1.4.1?type=jar",
        "pkg:maven/us.springett/owasp-risk-rating-calculator@1.0.1?type=jar",
        "pkg:maven/us.springett/cpe-parser@2.0.2?type=jar",
        "pkg:maven/org.cyclonedx/cyclonedx-core-java@7.3.0?type=jar",
        "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.6?type=jar",
        "pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar",
        "pkg:maven/org.json/json@20220924?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.4.1?type=jar",
        "pkg:maven/org.apache.lucene/lucene-core@8.11.2?type=jar",
        "pkg:maven/org.apache.lucene/lucene-analyzers-common@8.11.2?type=jar",
        "pkg:maven/org.apache.lucene/lucene-queryparser@8.11.2?type=jar",
        "pkg:maven/org.apache.lucene/lucene-queries@8.11.2?type=jar",
        "pkg:maven/org.apache.lucene/lucene-sandbox@8.11.2?type=jar",
        "pkg:maven/io.pebbletemplates/pebble@3.2.0?type=jar",
        "pkg:maven/us.springett/vulndb-data-mirror@1.0.1?type=jar",
        "pkg:maven/com.konghq/unirest-java@3.14.1?type=jar",
        "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar",
        "pkg:maven/org.apache.maven/maven-artifact@3.8.6?type=jar",
        "pkg:maven/com.microsoft.sqlserver/mssql-jdbc@11.2.2.jre17?type=jar",
        "pkg:maven/mysql/mysql-connector-java@8.0.29?type=jar",
        "pkg:maven/org.postgresql/postgresql@42.5.1?type=jar",
        "pkg:maven/xerces/xercesImpl@2.12.2?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.22?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-retry@2.0.1?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-ratelimiter@2.0.1?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-micrometer@2.0.1?type=jar",
        "pkg:maven/pl.pragmatists/JUnitParams@1.1.1?type=jar",
        "pkg:maven/us.springett/alpine-executable-war@2.2.0?type=jar",
        "pkg:maven/org.owasp/security-logging-common@1.1.7?type=jar",
        "pkg:maven/org.owasp/security-logging-logback@1.1.7?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/us.springett/alpine-common@2.2.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.1?type=jar",
        "pkg:maven/io.micrometer/micrometer-registry-prometheus@1.9.4?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.micrometer/micrometer-registry-prometheus@1.9.4?type=jar",
      "dependsOn": [
        "pkg:maven/io.prometheus/simpleclient_common@0.15.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.prometheus/simpleclient_common@0.15.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.prometheus/simpleclient@0.15.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.prometheus/simpleclient@0.15.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.prometheus/simpleclient_tracer_otel@0.15.0?type=jar",
        "pkg:maven/io.prometheus/simpleclient_tracer_otel_agent@0.15.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.prometheus/simpleclient_tracer_otel@0.15.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.prometheus/simpleclient_tracer_common@0.15.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.prometheus/simpleclient_tracer_common@0.15.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.prometheus/simpleclient_tracer_otel_agent@0.15.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.prometheus/simpleclient_tracer_common@0.15.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/us.springett/alpine-model@2.2.0?type=jar",
      "dependsOn": [
        "pkg:maven/us.springett/alpine-common@2.2.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-api-jdo@6.0.1?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-core@6.0.2?type=jar",
        "pkg:maven/org.datanucleus/javax.jdo@3.2.1?type=jar",
        "pkg:maven/org.glassfish.jersey.ext/jersey-bean-validation@2.37?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.datanucleus/datanucleus-api-jdo@6.0.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.datanucleus/javax.jdo@3.2.1?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-core@6.0.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.datanucleus/javax.jdo@3.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/javax.transaction/javax.transaction-api@1.3?type=jar",
        "pkg:maven/org.glassfish.corba/glassfish-corba-omgapi@4.2.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.datanucleus/datanucleus-core@6.0.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/javax.transaction/javax.transaction-api@1.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.corba/glassfish-corba-omgapi@4.2.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.ext/jersey-bean-validation@2.37?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-common@2.37?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-server@2.37?type=jar",
        "pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2?type=jar",
        "pkg:maven/org.hibernate.validator/hibernate-validator@6.2.0.Final?type=jar",
        "pkg:maven/jakarta.el/jakarta.el-api@3.0.3?type=jar",
        "pkg:maven/org.glassfish/jakarta.el@3.0.4?type=jar",
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.core/jersey-common@2.37?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.core/jersey-server@2.37?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.jersey.core/jersey-common@2.37?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-client@2.37?type=jar",
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar",
        "pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar",
        "pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar",
        "pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.core/jersey-client@2.37?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-common@2.37?type=jar",
        "pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.hibernate.validator/hibernate-validator@6.2.0.Final?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2?type=jar",
        "pkg:maven/org.jboss.logging/jboss-logging@3.4.1.Final?type=jar",
        "pkg:maven/com.fasterxml/classmate@1.5.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jboss.logging/jboss-logging@3.4.1.Final?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml/classmate@1.5.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/jakarta.el/jakarta.el-api@3.0.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish/jakarta.el@3.0.4?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/us.springett/alpine-infra@2.2.0?type=jar",
      "dependsOn": [
        "pkg:maven/us.springett/alpine-common@2.2.0?type=jar",
        "pkg:maven/us.springett/alpine-model@2.2.0?type=jar",
        "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar",
        "pkg:maven/org.datanucleus/javax.jdo@3.2.1?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-api-jdo@6.0.1?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-core@6.0.2?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-rdbms@6.0.2?type=jar",
        "pkg:maven/com.zaxxer/HikariCP@5.0.1?type=jar",
        "pkg:maven/org.javassist/javassist@3.29.2-GA?type=jar",
        "pkg:maven/io.jsonwebtoken/jjwt@0.9.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.datanucleus/datanucleus-rdbms@6.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.datanucleus/datanucleus-core@6.0.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.zaxxer/HikariCP@5.0.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.javassist/javassist@3.29.2-GA?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.jsonwebtoken/jjwt@0.9.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/us.springett/alpine-server@2.2.0?type=jar",
      "dependsOn": [
        "pkg:maven/us.springett/alpine-common@2.2.0?type=jar",
        "pkg:maven/us.springett/alpine-infra@2.2.0?type=jar",
        "pkg:maven/us.springett/alpine-model@2.2.0?type=jar",
        "pkg:maven/commons-io/commons-io@2.11.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
        "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-client@2.37?type=jar",
        "pkg:maven/javax.servlet/javax.servlet-api@4.0.1?type=jar",
        "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@2.37?type=jar",
        "pkg:maven/org.glassfish.jersey.media/jersey-media-json-jackson@2.37?type=jar",
        "pkg:maven/org.glassfish.jersey.media/jersey-media-multipart@2.37?type=jar",
        "pkg:maven/org.glassfish.jersey.ext/jersey-bean-validation@2.37?type=jar",
        "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@2.37?type=jar",
        "pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar",
        "pkg:maven/com.sun.xml.bind/jaxb-core@2.3.0.1?type=jar",
        "pkg:maven/com.sun.xml.bind/jaxb-impl@2.3.6?type=jar",
        "pkg:maven/javax.json/javax.json-api@1.1.4?type=jar",
        "pkg:maven/org.glassfish/javax.json@1.1.4?type=jar",
        "pkg:maven/io.swagger/swagger-jersey2-jaxrs@1.6.9?type=jar",
        "pkg:maven/org.datanucleus/javax.jdo@3.2.1?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-api-jdo@6.0.1?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-core@6.0.2?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-rdbms@6.0.2?type=jar",
        "pkg:maven/com.zaxxer/HikariCP@5.0.1?type=jar",
        "pkg:maven/org.javassist/javassist@3.29.2-GA?type=jar",
        "pkg:maven/com.h2database/h2@2.1.214?type=jar",
        "pkg:maven/io.jsonwebtoken/jjwt@0.9.1?type=jar",
        "pkg:maven/org.mindrot/jbcrypt@0.4?type=jar",
        "pkg:maven/com.nimbusds/oauth2-oidc-sdk@9.43.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-base@2.14.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-json-provider@2.14.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/ch.qos.logback/logback-classic@1.2.11?type=jar",
        "pkg:maven/ch.qos.logback/logback-core@1.2.11?type=jar",
        "pkg:maven/org.owasp/security-logging-common@1.1.7?type=jar",
        "pkg:maven/org.owasp/security-logging-logback@1.1.7?type=jar",
        "pkg:maven/org.owasp.encoder/encoder@1.2.3?type=jar",
        "pkg:maven/org.owasp.encoder/encoder-jsp@1.2.3?type=jar",
        "pkg:maven/com.sun.mail/jakarta.mail@1.6.7?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.1.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/commons-io/commons-io@2.11.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/javax.servlet/javax.servlet-api@4.0.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@2.37?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet-core@2.37?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-common@2.37?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-server@2.37?type=jar",
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet-core@2.37?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-common@2.37?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-server@2.37?type=jar",
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.media/jersey-media-json-jackson@2.37?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.jersey.core/jersey-common@2.37?type=jar",
        "pkg:maven/org.glassfish.jersey.ext/jersey-entity-filtering@2.37?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations@2.13.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.ext/jersey-entity-filtering@2.37?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-client@2.37?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-server@2.37?type=jar",
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations@2.13.3?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.1?type=jar",
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar",
        "pkg:maven/jakarta.activation/jakarta.activation-api@1.2.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.activation/jakarta.activation-api@1.2.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.media/jersey-media-multipart@2.37?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.jersey.core/jersey-common@2.37?type=jar",
        "pkg:maven/org.jvnet.mimepull/mimepull@1.9.13?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jvnet.mimepull/mimepull@1.9.13?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@2.37?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.jersey.core/jersey-common@2.37?type=jar",
        "pkg:maven/org.glassfish.hk2/hk2-locator@2.6.1?type=jar",
        "pkg:maven/org.javassist/javassist@3.29.2-GA?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.hk2/hk2-locator@2.6.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar",
        "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@2.6.1?type=jar",
        "pkg:maven/org.glassfish.hk2/hk2-api@2.6.1?type=jar",
        "pkg:maven/org.glassfish.hk2/hk2-utils@2.6.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@2.6.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.hk2/hk2-api@2.6.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar",
        "pkg:maven/org.glassfish.hk2/hk2-utils@2.6.1?type=jar",
        "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@2.6.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.hk2/hk2-utils@2.6.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar",
      "dependsOn": [
        "pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.sun.xml.bind/jaxb-core@2.3.0.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.sun.xml.bind/jaxb-impl@2.3.6?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar",
        "pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar",
        "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.6?type=jar",
        "pkg:maven/org.glassfish.jaxb/txw2@2.3.6?type=jar",
        "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.6?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar",
        "pkg:maven/org.glassfish.jaxb/txw2@2.3.6?type=jar",
        "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar",
        "pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.jaxb/txw2@2.3.6?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/javax.json/javax.json-api@1.1.4?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish/javax.json@1.1.4?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.swagger/swagger-jersey2-jaxrs@1.6.9?type=jar",
      "dependsOn": [
        "pkg:maven/io.swagger/swagger-jaxrs@1.6.9?type=jar",
        "pkg:maven/org.yaml/snakeyaml@1.33?type=jar",
        "pkg:maven/org.glassfish.jersey.media/jersey-media-multipart@2.37?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.swagger/swagger-jaxrs@1.6.9?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.1?type=jar",
        "pkg:maven/io.swagger/swagger-core@1.6.9?type=jar",
        "pkg:maven/org.yaml/snakeyaml@1.33?type=jar",
        "pkg:maven/org.reflections/reflections@0.10.2?type=jar",
        "pkg:maven/ch.qos.logback/logback-classic@1.2.11?type=jar",
        "pkg:maven/ch.qos.logback/logback-core@1.2.11?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.swagger/swagger-core@1.6.9?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.14.0?type=jar",
        "pkg:maven/io.swagger/swagger-models@1.6.9?type=jar",
        "pkg:maven/org.yaml/snakeyaml@1.33?type=jar",
        "pkg:maven/ch.qos.logback/logback-classic@1.2.11?type=jar",
        "pkg:maven/ch.qos.logback/logback-core@1.2.11?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.14.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.swagger/swagger-models@1.6.9?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/io.swagger/swagger-annotations@1.6.9?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.swagger/swagger-annotations@1.6.9?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.yaml/snakeyaml@1.33?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/ch.qos.logback/logback-classic@1.2.11?type=jar",
      "dependsOn": [
        "pkg:maven/ch.qos.logback/logback-core@1.2.11?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/ch.qos.logback/logback-core@1.2.11?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.reflections/reflections@0.10.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.javassist/javassist@3.29.2-GA?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.h2database/h2@2.1.214?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.mindrot/jbcrypt@0.4?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.nimbusds/oauth2-oidc-sdk@9.43.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar",
        "pkg:maven/com.nimbusds/content-type@2.2?type=jar",
        "pkg:maven/net.minidev/json-smart@2.4.8?type=jar",
        "pkg:maven/com.nimbusds/lang-tag@1.7?type=jar",
        "pkg:maven/com.nimbusds/nimbus-jose-jwt@9.24.4?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.nimbusds/content-type@2.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/net.minidev/json-smart@2.4.8?type=jar",
      "dependsOn": [
        "pkg:maven/net.minidev/accessors-smart@2.4.8?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/net.minidev/accessors-smart@2.4.8?type=jar",
      "dependsOn": [
        "pkg:maven/org.ow2.asm/asm@9.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.ow2.asm/asm@9.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.nimbusds/lang-tag@1.7?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.nimbusds/nimbus-jose-jwt@9.24.4?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-base@2.14.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-json-provider@2.14.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-base@2.14.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.owasp/security-logging-common@1.1.7?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/javax.servlet/javax.servlet-api@4.0.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.owasp/security-logging-logback@1.1.7?type=jar",
      "dependsOn": [
        "pkg:maven/org.owasp/security-logging-common@1.1.7?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/ch.qos.logback/logback-classic@1.2.11?type=jar",
        "pkg:maven/ch.qos.logback/logback-core@1.2.11?type=jar",
        "pkg:maven/javax.servlet/javax.servlet-api@4.0.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.owasp.encoder/encoder@1.2.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.owasp.encoder/encoder-jsp@1.2.3?type=jar",
      "dependsOn": [
        "pkg:maven/org.owasp.encoder/encoder@1.2.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.sun.mail/jakarta.mail@1.6.7?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.1.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.14.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.14.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/us.springett/cvss-calculator@1.4.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/us.springett/owasp-risk-rating-calculator@1.0.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/us.springett/cpe-parser@2.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.cyclonedx/cyclonedx-core-java@7.3.0?type=jar",
      "dependsOn": [
        "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
        "pkg:maven/commons-io/commons-io@2.11.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.4.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.14.0?type=jar",
        "pkg:maven/com.networknt/json-schema-validator@1.0.73?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.github.package-url/packageurl-java@1.4.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.14.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.1?type=jar",
        "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar",
        "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.networknt/json-schema-validator@1.0.73?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
        "pkg:maven/com.ethlo.time/itu@1.7.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.ethlo.time/itu@1.7.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.json/json@20220924?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.apache.lucene/lucene-core@8.11.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.apache.lucene/lucene-analyzers-common@8.11.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.lucene/lucene-core@8.11.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.lucene/lucene-queryparser@8.11.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.lucene/lucene-core@8.11.2?type=jar",
        "pkg:maven/org.apache.lucene/lucene-queries@8.11.2?type=jar",
        "pkg:maven/org.apache.lucene/lucene-sandbox@8.11.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.lucene/lucene-queries@8.11.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.lucene/lucene-core@8.11.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.lucene/lucene-sandbox@8.11.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.lucene/lucene-core@8.11.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.pebbletemplates/pebble@3.2.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.unbescape/unbescape@1.1.6.RELEASE?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.unbescape/unbescape@1.1.6.RELEASE?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/us.springett/vulndb-data-mirror@1.0.1?type=jar",
      "dependsOn": [
        "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
        "pkg:maven/commons-io/commons-io@2.11.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/us.springett/cvss-calculator@1.4.1?type=jar",
        "pkg:maven/oauth.signpost/signpost-core@2.1.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/oauth.signpost/signpost-core@2.1.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.konghq/unirest-java@3.14.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpmime@4.5.13?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpcore-nio@4.4.13?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpasyncclient@4.1.5?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.9.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.13?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.13?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents/httpmime@4.5.13?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents/httpcore-nio@4.4.13?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.13?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents/httpasyncclient@4.1.5?type=jar",
      "dependsOn": [
        "pkg:maven/commons-logging/commons-logging@1.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.code.gson/gson@2.9.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.apache.maven/maven-artifact@3.8.6?type=jar",
      "dependsOn": [
        "pkg:maven/org.codehaus.plexus/plexus-utils@3.3.1?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.codehaus.plexus/plexus-utils@3.3.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.microsoft.sqlserver/mssql-jdbc@11.2.2.jre17?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/mysql/mysql-connector-java@8.0.29?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.postgresql/postgresql@42.5.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.checkerframework/checker-qual@3.5.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.checkerframework/checker-qual@3.5.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/xerces/xercesImpl@2.12.2?type=jar",
      "dependsOn": [
        "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.apache.commons/commons-compress@1.22?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-retry@2.0.1?type=jar",
      "dependsOn": [
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.0.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-core@2.0.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-ratelimiter@2.0.1?type=jar",
      "dependsOn": [
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.0.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-micrometer@2.0.1?type=jar",
      "dependsOn": [
        "pkg:maven/io.micrometer/micrometer-core@1.10.0?type=jar",
        "pkg:maven/io.micrometer/micrometer-observation@1.10.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-bulkhead@2.0.1?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-circuitbreaker@2.0.1?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-retry@2.0.1?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-ratelimiter@2.0.1?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-timelimiter@2.0.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.micrometer/micrometer-core@1.10.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.micrometer/micrometer-commons@1.10.0?type=jar",
        "pkg:maven/io.micrometer/micrometer-observation@1.10.0?type=jar",
        "pkg:maven/org.hdrhistogram/HdrHistogram@2.1.12?type=jar",
        "pkg:maven/org.latencyutils/LatencyUtils@2.0.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.micrometer/micrometer-commons@1.10.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.micrometer/micrometer-observation@1.10.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.micrometer/micrometer-commons@1.10.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.hdrhistogram/HdrHistogram@2.1.12?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.latencyutils/LatencyUtils@2.0.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-bulkhead@2.0.1?type=jar",
      "dependsOn": [
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.0.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-circuitbreaker@2.0.1?type=jar",
      "dependsOn": [
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.0.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-timelimiter@2.0.1?type=jar",
      "dependsOn": [
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.0.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/pl.pragmatists/JUnitParams@1.1.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/us.springett/alpine-executable-war@2.2.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-server@10.0.12?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-webapp@10.0.12?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-webapp-logging@9.4.27?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-deploy@10.0.12?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/ch.qos.logback/logback-classic@1.2.11?type=jar",
        "pkg:maven/org.slf4j/log4j-over-slf4j@1.7.36?type=jar",
        "pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar",
        "pkg:maven/org.slf4j/jcl-over-slf4j@1.7.36?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-server@10.0.12?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty.toolchain/jetty-servlet-api@4.0.6?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-http@10.0.12?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-io@10.0.12?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty.toolchain/jetty-servlet-api@4.0.6?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-http@10.0.12?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-util@10.0.12?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-io@10.0.12?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-util@10.0.12?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-io@10.0.12?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-util@10.0.12?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-webapp@10.0.12?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-servlet@10.0.12?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-xml@10.0.12?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-servlet@10.0.12?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-security@10.0.12?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-security@10.0.12?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-server@10.0.12?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-xml@10.0.12?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-util@10.0.12?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-webapp-logging@9.4.27?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/ch.qos.logback/logback-classic@1.2.11?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-deploy@10.0.12?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-webapp@10.0.12?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-xml@10.0.12?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.slf4j/log4j-over-slf4j@1.7.36?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.slf4j/jcl-over-slf4j@1.7.36?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    }
  ]
}