{
  "bomFormat": "CycloneDX",
  "specVersion": "1.5",
  "serialNumber": "urn:uuid:cdf27e34-c4e8-4048-a8da-c1ab665d3e02",
  "version": 1,
  "metadata": {
    "tools": {
      "components": [
        {
          "type": "library",
          "author": "OWASP Foundation",
          "group": "org.cyclonedx",
          "name": "cyclonedx-maven-plugin",
          "version": "2.9.1",
          "description": "CycloneDX Maven plugin",
          "hashes": [
            {
              "alg": "MD5",
              "content": "9c7a565cf28cce58557d0c621c5ea4b1"
            },
            {
              "alg": "SHA-1",
              "content": "be882d5a22050bfa9d19090b1420c188617d0e1c"
            },
            {
              "alg": "SHA-256",
              "content": "698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249"
            },
            {
              "alg": "SHA-512",
              "content": "c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0"
            },
            {
              "alg": "SHA-384",
              "content": "d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb"
            },
            {
              "alg": "SHA3-384",
              "content": "80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f"
            },
            {
              "alg": "SHA3-256",
              "content": "142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699"
            },
            {
              "alg": "SHA3-512",
              "content": "af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b"
            }
          ]
        }
      ]
    },
    "component": {
      "type": "application",
      "bom-ref": "pkg:maven/org.dependencytrack/dependency-track@4.13.5?type=war",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "dependency-track",
      "version": "4.13.5",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/dependency-track@4.13.5?type=war",
      "externalReferences": [
        {
          "url": "https://github.com/DependencyTrack/dependency-track/security/advisories",
          "type": "advisories"
        },
        {
          "url": "https://dependencytrack.org/slack",
          "type": "chat"
        },
        {
          "url": "https://docs.dependencytrack.org/",
          "type": "documentation"
        },
        {
          "url": "https://docs.dependencytrack.org/changelog/",
          "type": "release-notes"
        },
        {
          "url": "mailto:security@dependencytrack.org",
          "type": "security-contact"
        },
        {
          "url": "https://www.linkedin.com/company/owasp-dependency-track",
          "type": "social"
        },
        {
          "url": "https://x.com/dependencytrack",
          "type": "social"
        },
        {
          "url": "https://dependencytrack.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git",
          "type": "vcs"
        }
      ]
    }
  },
  "components": [
    {
      "type": "framework",
      "bom-ref": "pkg:maven/us.springett/alpine-common@3.3.0?type=jar",
      "group": "us.springett",
      "name": "alpine-common",
      "version": "3.3.0",
      "description": "An opinionated scaffolding library that jumpstarts Java projects with an API-first design, secure defaults, and minimal dependencies.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c6da840132b6b7f91fb5e0252fd8df1a"
        },
        {
          "alg": "SHA-1",
          "content": "d03bf4e2b13c5ed66a7d01f92b09d97f121d4fd2"
        },
        {
          "alg": "SHA-256",
          "content": "f8f6832bba1f664f2a354ee69655532b05055af3c793662a50a268b34be7e357"
        },
        {
          "alg": "SHA-512",
          "content": "af882638cfb3527e13d98e737865aa62c57113a8be655cf9b707b362e13358d98f333f3bcfcc0f597839ce5476524b7f6f4782ab51ac627011bdfd590b3a2e5f"
        },
        {
          "alg": "SHA-384",
          "content": "90ec1d91cc468fca88722dc56073e78f474846cda78b45ffc461b435026f3695d80a619b6e8ea84cb01454da9ce6ac60"
        },
        {
          "alg": "SHA3-384",
          "content": "9b97f788962b450e0cd30f55cedfc95ed7b7a5f60d4a63d983a528cd03f5c93d7a230c3f1b8e9fe5dec1d628e7c6170e"
        },
        {
          "alg": "SHA3-256",
          "content": "b3f31798415c1087ad5fa64152274394b127a21a7613f0ef17a1701de289dae3"
        },
        {
          "alg": "SHA3-512",
          "content": "a2ee9243b241ab2a776173ae5cbbe4a76e57ca65050071e7adfe98192805e056200d4f14151145993de6c72058b7252ff1c4421de942051bff0e5843082ffcb1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/us.springett/alpine-common@3.3.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/Alpine/alpine-common",
          "type": "website"
        },
        {
          "url": "https://github.com/stevespringett/Alpine/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/stevespringett/Alpine/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/alpine-common",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
      "publisher": "QOS.ch",
      "group": "org.slf4j",
      "name": "slf4j-api",
      "version": "2.0.17",
      "description": "The slf4j API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b6480d114a23683498ac3f746f959d2f"
        },
        {
          "alg": "SHA-1",
          "content": "d9e58ac9c7779ba3bf8142aff6c830617a7fe60f"
        },
        {
          "alg": "SHA-256",
          "content": "7b751d952061954d5abfed7181c1f645d336091b679891591d63329c622eb832"
        },
        {
          "alg": "SHA-512",
          "content": "9a3e79db6666a6096a3021bb2e1d918f30f589d8de51d6b600f8ebd92515a510ae2d8f87919cc2dfa8365d64f10194cac8dfa0fb950160eef0e9da06f6caaeb9"
        },
        {
          "alg": "SHA-384",
          "content": "6ea24f814a9b6ece428cfd0535e2f3b8927005745ef61006b50fdb5a90126ee5ea05650155382b3b755c5bce38ef3944"
        },
        {
          "alg": "SHA3-384",
          "content": "9b1015052f0ec43f9be09764e131834157599611cb52f6fe591c4ac6a8ab4817518f2a4b8871e5e738c8678e93af5557"
        },
        {
          "alg": "SHA3-256",
          "content": "00559b4f4066b4917ba4fe2a6f23111eaeada321112d030910d218ced9084b5e"
        },
        {
          "alg": "SHA3-512",
          "content": "9579c2f7e7516e177c2d493ccc9eb8150978cf19f6f09b28d116f6935239fd56dc6af2b62b3336f79b0b462445550cd1fb5377a07001a6f44aaab6a32fa2fa47"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl": "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
      "externalReferences": [
        {
          "url": "http://www.slf4j.org",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/qos-ch/slf4j/slf4j-parent/slf4j-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.commons",
      "name": "commons-lang3",
      "version": "3.18.0",
      "description": "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang\u0027s hierarchy, or are considered to be so standard as to justify existence in java.lang. The code is tested using the latest revision of the JDK for supported LTS releases: 8, 11, 17 and 21 currently. See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml Please ensure your build environment is up-to-date and kindly report any build issues.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "48b9886957920a4cdb602780ca345087"
        },
        {
          "alg": "SHA-1",
          "content": "fb14946f0e39748a6571de0635acbe44e7885491"
        },
        {
          "alg": "SHA-256",
          "content": "4eeeae8d20c078abb64b015ec158add383ac581571cddc45c68f0c9ae0230720"
        },
        {
          "alg": "SHA-512",
          "content": "c2c9d497fc1be411050f4011b2407764b78aa098eb42925af8a197eabdbc25b507f09fb898805e9bed4815f35236a508ee5b096e36f363df4d407232d50fc832"
        },
        {
          "alg": "SHA-384",
          "content": "4fb3f101106e4ce3666d5c15d276ba86f7683a0ef35f0384edfcd579ea454275edbb7400795d265ec3a38e39997e79b8"
        },
        {
          "alg": "SHA3-384",
          "content": "aada7e3612cf3f6190a19fa7c3db74df1e13ec56b300be9bb4317d261d5877c84ab59ba9a09168becdbd82cd41961395"
        },
        {
          "alg": "SHA3-256",
          "content": "306d286d0bd7549c203cc802fd755d354c4f7926fa023f4e83623ba1a6261250"
        },
        {
          "alg": "SHA3-512",
          "content": "f6f1ecc684e309d7b9fc5c343792508fee935cd2119d962721662c5af88e4864ba6f47a863e083714f315f926c156de1970cd2fb577449bdfdc7bf98a4a451fa"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
      "externalReferences": [
        {
          "url": "https://commons.apache.org/proper/commons-lang/",
          "type": "website"
        },
        {
          "url": "https://github.com/apache/commons-lang/actions",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://issues.apache.org/jira/browse/LANG",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/commons-user/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitbox.apache.org/repos/asf/commons-lang.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.micrometer/micrometer-registry-prometheus@1.15.4?type=jar",
      "group": "io.micrometer",
      "name": "micrometer-registry-prometheus",
      "version": "1.15.4",
      "description": "MeterRegistry implementation for Prometheus using io.prometheus:prometheus-metrics-core. If you have compatibility issues with this module, you can go back to io.micrometer:micrometer-registry-prometheus-simpleclient that uses io.prometheus:simpleclient_common.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5ab718292c457e5396b2ae9a492d83ab"
        },
        {
          "alg": "SHA-1",
          "content": "6cae7f76f15c96fec16e57e0337f45c6aa88f1c6"
        },
        {
          "alg": "SHA-256",
          "content": "07251c91b7ba042773941cb218019fdae8668b0d72d164080e6db33de0a68800"
        },
        {
          "alg": "SHA-512",
          "content": "a3480bca8d8d90a3f895a62f146c0f5843f0f4ea57590bc13ef11eedbe010b689687397d1a062c7bb26e2dd4beb61e6efb75e3a12f31660482daf897d5d41d7f"
        },
        {
          "alg": "SHA-384",
          "content": "f9b20726ffdb4ce19339ba9597bb0ac554edcf6d13404990df5ec8c6affeae31bfb760259222b7f2bf00715f1614e452"
        },
        {
          "alg": "SHA3-384",
          "content": "6158f735b1a747da63ef41b6a97f79c3329100c3a2f53ff80010a1378bda9ade8b152e03f099f46007986f96e8134705"
        },
        {
          "alg": "SHA3-256",
          "content": "9dbd852e898f4523d53212fbf4080c20fae5ae756e70eadfb0539c61ecc48a90"
        },
        {
          "alg": "SHA3-512",
          "content": "ec15167162938d773863381441bec575ce244d43f93e9ffc5c042825516c38faf4d9909af4b5a76e7501f1350f7828c9e7f012159694b2197bbc7d045a325be7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.micrometer/micrometer-registry-prometheus@1.15.4?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/micrometer-metrics/micrometer",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/prometheus-metrics-core@1.3.10?type=jar",
      "group": "io.prometheus",
      "name": "prometheus-metrics-core",
      "version": "1.3.10",
      "description": "Core Prometheus metric types",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1111c9332ac84ec6ea67959369961fc0"
        },
        {
          "alg": "SHA-1",
          "content": "30c645782bc458a4868f59a9218c8395250a9f69"
        },
        {
          "alg": "SHA-256",
          "content": "a856dbad954222a835c9085abc9a136586eb60495f17ef8ac903dfb8be3b4f15"
        },
        {
          "alg": "SHA-512",
          "content": "a82b25b73fc6a774b9b71b1d3949d91d9f5c92567cffad0d57a1a527ee1334b9ade40651c5ff0b7f0e2ee01e5da297b91153b04feec7a2853f4d871225b917c8"
        },
        {
          "alg": "SHA-384",
          "content": "6a386f18f185b9892d88ff9a765ab1a1e4b1badda28b1ebad751f142b421100893941954503e2bd4e9bead629114c637"
        },
        {
          "alg": "SHA3-384",
          "content": "0f86e9afe07cfa18901930c8428b520dedf3b06d9c2e1f670424a75d00b759ae34698283073bc55e7c48994498927fe1"
        },
        {
          "alg": "SHA3-256",
          "content": "6f22bc334bafc8be8a91f87967d6b6e6c276a940a0a0b720d06e98d7bb1b60de"
        },
        {
          "alg": "SHA3-512",
          "content": "9a9a98022e2b295d1c1761b712c4e227cdc88c5c9155cebc4115dfab7eb1e3e6ceb8e44fe86bff648c7af056077d8f9c48bc7ece265176623a945806757a8890"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/prometheus-metrics-core@1.3.10?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/client_java/prometheus-metrics-core",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/prometheus-metrics-model@1.3.10?type=jar",
      "group": "io.prometheus",
      "name": "prometheus-metrics-model",
      "version": "1.3.10",
      "description": "Data model for read-only immutable Prometheus metrics snapshots.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d099f2af51a118e73cdd3eb5e633e061"
        },
        {
          "alg": "SHA-1",
          "content": "e74c144f68e0258cbbdea64d4e387e65ebae6329"
        },
        {
          "alg": "SHA-256",
          "content": "945ace48cc8d9d09f87bac0d8fbbc13e70b29c5c74b103c6fee0b9df09343148"
        },
        {
          "alg": "SHA-512",
          "content": "fe78f34df99b28942f6c8b9124bd728ac5d0616a74c3705d02ef545a09d292ac5ddb2dbab291653ea0c3fa634044fd5c5cf27c36b2ac3379a4d5653e61cda156"
        },
        {
          "alg": "SHA-384",
          "content": "3d0d34ea0f9f72303a124edc3d30c8872b27d68331196db70963688d4716c545eb0a4457b6b87f98e6df87cfd9df2c16"
        },
        {
          "alg": "SHA3-384",
          "content": "4deb1e517f6e73159a66193a5eb0e06bb75e2e2bb9ac39d8f8fab98ef99c38345de0191b7a63dde22905dfc68877598b"
        },
        {
          "alg": "SHA3-256",
          "content": "dffc96cbb8a54ca432634120abd9ee8281f2241708598377a5edd2c2d9e3b9e4"
        },
        {
          "alg": "SHA3-512",
          "content": "c7662bd78cb524eaa7f74b76d09b2298252bfec6fd1820c3598bcee777aa71ef823d1812f3e976421b4e31e9e43d4f6e584910fc5e4703755d7e30042b75d3bb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/prometheus-metrics-model@1.3.10?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/client_java/prometheus-metrics-model",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/prometheus-metrics-config@1.3.10?type=jar",
      "group": "io.prometheus",
      "name": "prometheus-metrics-config",
      "version": "1.3.10",
      "description": "Configuration for Prometheus metrics and exposition formats.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "44a453f8599f67ab45ed6fbb941a450e"
        },
        {
          "alg": "SHA-1",
          "content": "4fe03e3cc60188a32385bbd4559368842815e435"
        },
        {
          "alg": "SHA-256",
          "content": "d20ea739f1af130d67d6a8e67a0fd00169cd4e62dca7fa29c5f2ae656b7587f9"
        },
        {
          "alg": "SHA-512",
          "content": "e9a0988271d57a08920eb7bfc74aba03e8f4d0499e4a108784d0401292fec40150d1c30b0786cda4b515a8ac9709c3cf33deb5a00b0ed8cc20d90b0e615fc33d"
        },
        {
          "alg": "SHA-384",
          "content": "7c35a31960d15780a5099de5ff43904c95bfcefb6db97619ad9bdcbd9701b258049d6c8bf874517770dc8ee73048ddb4"
        },
        {
          "alg": "SHA3-384",
          "content": "095f2d345032fca475cfe4fe0e114dabc146f7ed432bb9bccdcd2f1426372b9543e47be0c120af847c8d4d9878797bdf"
        },
        {
          "alg": "SHA3-256",
          "content": "7a4c9d38359c6a01e5df2c926a4cf9e01fbb2b1086d58f3906e62215a2d4487b"
        },
        {
          "alg": "SHA3-512",
          "content": "d7d96bee8948d9a5f1a88015f43e8d11d0909341ab772eb8a5b2a4400276f22623a35fb6045bc5cfb73f1b0f321b07da7c3eecd4aa274369246a07309dd22d02"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/prometheus-metrics-config@1.3.10?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/client_java/prometheus-metrics-config",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/prometheus-metrics-tracer-common@1.3.10?type=jar",
      "group": "io.prometheus",
      "name": "prometheus-metrics-tracer-common",
      "version": "1.3.10",
      "description": "Common Module for Prometheus integrations with distributed tracing libraries.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d8d9e2bb7ec48e11c877b83eb9a9485e"
        },
        {
          "alg": "SHA-1",
          "content": "abf6e4d1a41d96e37b200606e121697751794a45"
        },
        {
          "alg": "SHA-256",
          "content": "835826a5728d9da8512186b67676d2ba68828713f0c0050753ce2bc718dd9acb"
        },
        {
          "alg": "SHA-512",
          "content": "f4bda2709a4e83b7b2a452fdf59300b1d88511a3c6a53a0f8454c2821b48f3fbeb5ead31a81de86f05ff757c724b7f46a0694f2aeee5118947eb474c3a929d7f"
        },
        {
          "alg": "SHA-384",
          "content": "0341ec66c51b653f457847715a5651e05eb2e0e236c8c83fe4c7e77e11ae81480c324474a220c55547ee5864dd3d4aaf"
        },
        {
          "alg": "SHA3-384",
          "content": "63cccbff36626c00126a4c767a5fb2985c9b6e75d01adcfb04907238e4a6bf7c1ea80676338bb6be4fd9c064bab840a9"
        },
        {
          "alg": "SHA3-256",
          "content": "db439bafa8f0b9ccca8c757797d260c0edd0cb7a11c272127d2700e4f2578207"
        },
        {
          "alg": "SHA3-512",
          "content": "79022fd87dee6dd646400c11c63f718117ff272e8447a6fd6149e1b70f193509af9c71eb64dc3862901b0527a0aa947645b9b23d985573a0684176e02e6e8b56"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/prometheus-metrics-tracer-common@1.3.10?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/client_java/prometheus-metrics-tracer/prometheus-metrics-tracer-common",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/prometheus-metrics-exposition-formats@1.3.10?type=jar",
      "group": "io.prometheus",
      "name": "prometheus-metrics-exposition-formats",
      "version": "1.3.10",
      "description": "Prometheus exposition formats.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e079cfe0e3c7594fd99cd45f600cc54c"
        },
        {
          "alg": "SHA-1",
          "content": "9f8433c962ff720dc2c83f6c2e8af069dd36a898"
        },
        {
          "alg": "SHA-256",
          "content": "a970d6de00a6fa3c9b62ebec1e45f70d42b88d16a19e5ef1621c1f9e89ba3c9f"
        },
        {
          "alg": "SHA-512",
          "content": "2d12569122d464aefe9dfcb74ea63bda7d5038846be98b60c875556648e91721c14090e884136e10d0b952e088843508c8000c141d88c6b6d2a28b4e24cd0e49"
        },
        {
          "alg": "SHA-384",
          "content": "013cf2347a76dec5598eb30bf89a5ac9a437c5189ad6f614d09c12bca2014e35da0944780d12a4a05df6d904d9509546"
        },
        {
          "alg": "SHA3-384",
          "content": "c4005f91e847c7320e3e41c3f501bf5f99f2702b419962d5c79e879ac6a9abcfec9c695dfa448515cae34990f5fa4515"
        },
        {
          "alg": "SHA3-256",
          "content": "f8f6e8ce986c6d72fd1954213654b137857fdc58a9af663f4ebe999e003e92a8"
        },
        {
          "alg": "SHA3-512",
          "content": "ccc12ccc28e7fc0f7d8c0d7853b29d855c61a84562d5d7b298adf33ab46e764cdb41c19f10ea7d4583f5dceb391ffc9dd410eb0169c74806c4a18681503e9d9d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/prometheus-metrics-exposition-formats@1.3.10?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/client_java/prometheus-metrics-exposition-formats",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/prometheus-metrics-exposition-textformats@1.3.10?type=jar",
      "group": "io.prometheus",
      "name": "prometheus-metrics-exposition-textformats",
      "version": "1.3.10",
      "description": "Prometheus exposition text formats.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f2a1e98beffcc218e2ff0f8a8bf3822c"
        },
        {
          "alg": "SHA-1",
          "content": "7475c21ee94b4c46ff0394a2df02b3d2c5443690"
        },
        {
          "alg": "SHA-256",
          "content": "8dd118ac15a4162ac586f42ff69e8ca3efa8b1291d870c89a678f8f72de62e44"
        },
        {
          "alg": "SHA-512",
          "content": "58bc11b2845612d6ab74423a165070ae4568c775fe57b8f21e19483a9df51fdc1b630a7a5083d3359a8249a2a4c8138e76be7974d8b3fe37398cbd7daf775a55"
        },
        {
          "alg": "SHA-384",
          "content": "79e591fd9a36d2ef741d082fbb14bda56a1a5f66df081c51544438422e6c205b396ef3fcdb0acee1f5fa875618b4b725"
        },
        {
          "alg": "SHA3-384",
          "content": "862e92b43ab96d38230d393ad886dcb118a0f9624df4ade294b16b46b2b14741321b3ebd78bbdf85e3a296e56d0a974e"
        },
        {
          "alg": "SHA3-256",
          "content": "98e43cf9c16ad0555c0a150a27ebc3c6335c5a2b5e4b4d59612a4e3afd495653"
        },
        {
          "alg": "SHA3-512",
          "content": "4a064c543077c660e4600d6be0db500a0096edcd92bbcad12e4bd5a4dc651b0dd7d0640717697a97080d5de3e0fb444593f96e938c6902a3fa6b6a43dccc41fa"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/prometheus-metrics-exposition-textformats@1.3.10?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/client_java/prometheus-metrics-exposition-textformats",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.micrometer/micrometer-registry-prometheus-simpleclient@1.15.4?type=jar",
      "group": "io.micrometer",
      "name": "micrometer-registry-prometheus-simpleclient",
      "version": "1.15.4",
      "description": "MeterRegistry implementation for Prometheus using io.prometheus:simpleclient_common. This module is deprecated in favor of io.micrometer:micrometer-registry-prometheus that uses io.prometheus:prometheus-metrics-core.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ca8fccba36a9b38418558756aa537de5"
        },
        {
          "alg": "SHA-1",
          "content": "e40f29168a74d84748b47acf27d292614a087ebf"
        },
        {
          "alg": "SHA-256",
          "content": "78d357d60f6d70ecbae08926e9c88f786858b0bf0494aa2b9d34d55f54c97042"
        },
        {
          "alg": "SHA-512",
          "content": "0f8771409f71c759825754e6fa15312bb032cf87e214d31b628a6b70e34e9d54821af92876b5f90f759ca8314c0bcaf4e709f1f2262e6df4229c5c39eb1f4a50"
        },
        {
          "alg": "SHA-384",
          "content": "506178fe883d54ab446e0594f8470c3408e93037eb4b4871c34b2fd75633744bd6fa46948989e0de53a4b45cda1672d6"
        },
        {
          "alg": "SHA3-384",
          "content": "77c73f28e1486de9ab167a5e1a8245e12e4b97faa4df70e11df9955a76381ff9f7caa52a838a56507c800be30d1241e9"
        },
        {
          "alg": "SHA3-256",
          "content": "4ef99ed869ea816d4d1a44973f4550971fcee443cb1a2c1e8cbd934f51d855b5"
        },
        {
          "alg": "SHA3-512",
          "content": "7ef219602331efc02350967a5ba37ba30d613998f67327bc80fe6d16d297ae75b5127c8f1bf955c02a95d00accc3039dfcf360698962d9ca2d9808f7ca8ce6e2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.micrometer/micrometer-registry-prometheus-simpleclient@1.15.4?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/micrometer-metrics/micrometer",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/simpleclient_common@0.16.0?type=jar",
      "group": "io.prometheus",
      "name": "simpleclient_common",
      "version": "0.16.0",
      "description": "Common code used by various modules of the Simpleclient.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "bef35be6eef09775ffe092c267729478"
        },
        {
          "alg": "SHA-1",
          "content": "a09a8c790a20309b942a9fdbfe77da22407096e6"
        },
        {
          "alg": "SHA-256",
          "content": "eba6ec26ce7e40cbb8725e05fb83247a9f4f44945b9e7522e3375dde67b9f059"
        },
        {
          "alg": "SHA-512",
          "content": "21eb5680598ebb8c1257990d9aae98069c17b38dba4bf8fbed37ec2a287020401380ea7854430978546529f636bd75455eb65f01b1040630b0b12d191a44be22"
        },
        {
          "alg": "SHA-384",
          "content": "011c23fdaaaf4eaa125cae68fe43573167c7cdd82562ea6cbe553270148a75f901e5e73708f16783b915d8872fc0b943"
        },
        {
          "alg": "SHA3-384",
          "content": "201268d47ebee613ec4645a748a3e968ba2cb7fbddce904b2056129351a4d9d5fbe9103727efc31416eb656271c29acf"
        },
        {
          "alg": "SHA3-256",
          "content": "43b3bdf4aecfb55ac802f6001ad90ef6e4706c12cafd8b95d504b331ae8a873a"
        },
        {
          "alg": "SHA3-512",
          "content": "dbb907bbbc68387cdefb1e251c8e319caf227d4e096de33f693f6fecdd844b273e7b549eca10ffafebe29e1ae4d9aee72eed5ead2b32cebec8dcc103680d20ec"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/simpleclient_common@0.16.0?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/simpleclient_common",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        }
      ]
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/us.springett/alpine-model@3.3.0?type=jar",
      "group": "us.springett",
      "name": "alpine-model",
      "version": "3.3.0",
      "description": "An opinionated scaffolding library that jumpstarts Java projects with an API-first design, secure defaults, and minimal dependencies.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "54b4cfb89b904674d5cb985a7d674dfe"
        },
        {
          "alg": "SHA-1",
          "content": "4b0d74751d78cbc8a200bcd74c3a5f0d420f3490"
        },
        {
          "alg": "SHA-256",
          "content": "b2ec8cbd6620e9857aedf255528bfcd8568da590499b8be720ac168f0e8fe29c"
        },
        {
          "alg": "SHA-512",
          "content": "c330f4a290ee00164693ad47647015eae3a94746660f999c2e5d1e5a25a81576d7b2eb327e688ef4d1dc7a4b58be7511ee7796a55efa4aa9e7ce896685d959cd"
        },
        {
          "alg": "SHA-384",
          "content": "8eaa3fdab355bc51d34a81670c2a14ae9ed1c3b39d6ea28f1a9398fa544f2f4908a60437dc574323c760aeef3c82a4de"
        },
        {
          "alg": "SHA3-384",
          "content": "2b8997b62a8e548665b181aa52a8b68d33b1f2f7c1e122a7175c2a2c0e3447e3c3654f8aad5642a38d3f2a2591252b78"
        },
        {
          "alg": "SHA3-256",
          "content": "1a1141bcabee3dc50745170693ec50d366a2e7e04880e7b2028ff20f4a26824d"
        },
        {
          "alg": "SHA3-512",
          "content": "40aa962e0330a0340acc440d9e1f127cc2ce86994ab68f340a73f226851fa2af0704bf5e47faf69fee93c7084d00d353fb2f50d3054a43fc1abef4401dd36f42"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/us.springett/alpine-model@3.3.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/Alpine/alpine-model",
          "type": "website"
        },
        {
          "url": "https://github.com/stevespringett/Alpine/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/stevespringett/Alpine/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/alpine-model",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.datanucleus/datanucleus-api-jdo@6.0.5?type=jar",
      "group": "org.datanucleus",
      "name": "datanucleus-api-jdo",
      "version": "6.0.5",
      "description": "Plugin providing DataNucleus implementation of the JDO API.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9b7448a21838cae99a8b9f3875d93a08"
        },
        {
          "alg": "SHA-1",
          "content": "30f49348795e1d2e9a8e1613e9dbc6c3f851f1ca"
        },
        {
          "alg": "SHA-256",
          "content": "423ea8da36763d6c17d55434477b7ab2339d3cef5acf67dd30198ef1dd0ed477"
        },
        {
          "alg": "SHA-512",
          "content": "5262a518ccc344692af86a30d51e4d1d9ee2b3167dc16657b37e8cfb2affc3fd73db4df9df5463e4a25097d9eff27c9f305407239e19381cd32c0c7f9f01aaab"
        },
        {
          "alg": "SHA-384",
          "content": "96e3ee21e3958259fcbc3bcd8af53d0814415f027a73bb1a1025c9112406564e65eaff74c874f02d994e6239562a7202"
        },
        {
          "alg": "SHA3-384",
          "content": "8c88668e57a4ccf381e6fb3a9859e8fe15376bd9a0fd4d9b9d771c9f7712459e97edc219dcdf008971f0d06363592d09"
        },
        {
          "alg": "SHA3-256",
          "content": "54562d403842a670b5f4cfa2a272bbb05789bd39f278b52732f1df540c7e33b3"
        },
        {
          "alg": "SHA3-512",
          "content": "55accaf6c0e8a6082d09619351596707df28223929dd313bbfe25abd1f8693c2eb195c0dada149f11dd0aecdfca724edfd67de84152e0a2aa8c39383fbc8b8d2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.datanucleus/datanucleus-api-jdo@6.0.5?type=jar",
      "externalReferences": [
        {
          "url": "http://www.datanucleus.org/#/datanucleus-api-jdo",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/datanucleus/datanucleus-api-jdo",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.datanucleus/datanucleus-core@6.0.11?type=jar",
      "group": "org.datanucleus",
      "name": "datanucleus-core",
      "version": "6.0.11",
      "description": "DataNucleus Core provides the primary components of a heterogenous Java persistence solution. It supports persistence API\u0027s being layered on top of the core functionality.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2493fed928c1eade5a38f4016f1ba7c0"
        },
        {
          "alg": "SHA-1",
          "content": "87fae77204b7032165d6cfb468cb5dafacf39200"
        },
        {
          "alg": "SHA-256",
          "content": "2e2a23d21100e82a8bd0822eebe8bb9f39a8e3ea1ba5e2bb068c24cb0515bd08"
        },
        {
          "alg": "SHA-512",
          "content": "969e5e8b3330e1bd675af05d106f0081dbef25bfea99689a6a051eac96e81907dc8d42e574b464b33fe467c5024a282416f114946ed4374510b4abe7897027d3"
        },
        {
          "alg": "SHA-384",
          "content": "286413cbd9c681561bf5c7d83839893879a9476a0a2a9b60e60d6e161a665e92bef6db57cd9e18b4d13a6ed2a75bbe73"
        },
        {
          "alg": "SHA3-384",
          "content": "afcc830fdadc3c4b7130921ad521f4e0a7fe23b57614ac61f4c2a1d9eae47b56e6a0df82d1ebef82c1cbe1d2244c547d"
        },
        {
          "alg": "SHA3-256",
          "content": "02b169414ef4c5a9d7c79e6e98e86e21071054f035ce4a1ca8fde85aa5f726ef"
        },
        {
          "alg": "SHA3-512",
          "content": "1de064ff2de6452618e7a9f3bc83e91228105722697597e4dc0b836349d21c3d71ff6ee4613433f7da795efba9b56be7bfa3c6854a02587271cd7d4a6001bdb5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.datanucleus/datanucleus-core@6.0.11?type=jar",
      "externalReferences": [
        {
          "url": "http://www.datanucleus.org/#/datanucleus-core",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/datanucleus/datanucleus-core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.datanucleus/javax.jdo@3.2.1?type=jar",
      "group": "org.datanucleus",
      "name": "javax.jdo",
      "version": "3.2.1",
      "description": "The Java Data Objects API (JDO) : a standard interface-based Java model abstraction of persistence, developed by the JCP.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "79f1e95e6d7f1eb191edce207ac6ecd8"
        },
        {
          "alg": "SHA-1",
          "content": "e8d1af5779f95d3c85b641184b605725762a36c3"
        },
        {
          "alg": "SHA-256",
          "content": "61646f544baf75fc7a305410443c5f5f7d219fa7a2cabe3b782950a350ca5d3f"
        },
        {
          "alg": "SHA-512",
          "content": "29580963b5478646b0f3b47ae3387d0bdb5bd86da37afceef6841c32b9db3a4407186fc257855c5c47efbbf1f1bfbff0b45b6ad45101b6dfbed7946a9251fe43"
        },
        {
          "alg": "SHA-384",
          "content": "1845d95a87e9fb954ff3e0c80a0dae62eca817abb3f727d65edc9296a0992e60a7fa57db0a72858afaf9e2d872f6435f"
        },
        {
          "alg": "SHA3-384",
          "content": "e4f04e5be64a1a58ef475cf5b155e6169307dd9636cd4fe6661dd394fe28a0a9ee9dee426291bff62d66885ae35ab2c8"
        },
        {
          "alg": "SHA3-256",
          "content": "3703404351c56d4a658de2012266838fea9741cceb09e7304b4c323e33d88ca3"
        },
        {
          "alg": "SHA3-512",
          "content": "da4b8c30667d67651469ed1a750004a3afbaad1ce8c6697ac29889fd2e78dadbcde07d414161e42bc972017afe83e690329d4ede5e94a67553377ee7c2a7929a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.datanucleus/javax.jdo@3.2.1?type=jar",
      "externalReferences": [
        {
          "url": "http://www.datanucleus.org/#/javax.jdo",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/datanucleus/javax.jdo",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/javax.transaction/javax.transaction-api@1.3?type=jar",
      "publisher": "GlassFish Community",
      "group": "javax.transaction",
      "name": "javax.transaction-api",
      "version": "1.3",
      "description": "Project GlassFish Java Transaction API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6e9cb1684621821248b6823143ae26c0"
        },
        {
          "alg": "SHA-1",
          "content": "e006adf5cf3cca2181d16bd640ecb80148ec0fce"
        },
        {
          "alg": "SHA-256",
          "content": "603df5e4fc1eeae8f5e5d363a8be6c1fa47d0df1df8739a05cbcb9fafd6df2da"
        },
        {
          "alg": "SHA-512",
          "content": "3497cf77352aa1317c70ad1d28e8e7da51337d844c8227a35707209c750ba6f5d644a4ffdbdb10e5fbde204003aa43ff80e9e2ff3164584a7a34d8292266b2bc"
        },
        {
          "alg": "SHA-384",
          "content": "7044d8d5829a777d85e1a987c3e346eb535dd321366bdf32a9e8ed4f52facd0610ac2f3f58b4a1b001893f01fddc5eae"
        },
        {
          "alg": "SHA3-384",
          "content": "d0c1807001e02ce47320be657be055b4777b8b5673c22a78b0574955f7a6105dacc42b46b86ab967dc382cf332da59d8"
        },
        {
          "alg": "SHA3-256",
          "content": "c7c48884317a2d0e1596f201763acbca4ef76462af9172fd5e68aca3465303e1"
        },
        {
          "alg": "SHA3-512",
          "content": "bf053d4fe995cb5c1d6c01320fc73530017ee364de6ae21eb98fa0372b2aa6eff2fa4ac2d9cd5f692c930ee573c2f6226441918123fcfc48b5b4a126d350928c"
        }
      ],
      "licenses": [
        {
          "expression": "(CDDL-1.0 OR GPL-2.0-with-classpath-exception)"
        }
      ],
      "purl": "pkg:maven/javax.transaction/javax.transaction-api@1.3?type=jar",
      "externalReferences": [
        {
          "url": "http://jta-spec.java.net",
          "type": "website"
        },
        {
          "url": "https://maven.java.net/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/javaee/javax.transaction/issues",
          "type": "issue-tracker"
        },
        {
          "url": "javaee-spec@javaee.groups.io",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/javaee/javax.transaction",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.corba/glassfish-corba-omgapi@4.2.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.corba",
      "name": "glassfish-corba-omgapi",
      "version": "4.2.2",
      "description": "A CORBA ORB for Glassfish",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b2eb806fc90b71d6d15391a1c887ae1f"
        },
        {
          "alg": "SHA-1",
          "content": "6e0f5735a51bda8f72dda0e58ba766d16678c7b8"
        },
        {
          "alg": "SHA-256",
          "content": "2d964250e13aa77b5e687669ef4981d44c7b92496b28e439e5fbcc5c7882e0f5"
        },
        {
          "alg": "SHA-512",
          "content": "0e99c7e659bf2613d0436805476c5ed265afbd35648f6367bcd8227c0052b024b675f4c9eb3ec590e24c8f0b989d0392a4c53ec3cb1ce666a7ae566489841482"
        },
        {
          "alg": "SHA-384",
          "content": "253cd42b07fd905e5c5651a0d78d1b33cac48abfdfa8fc2592e982c4e385481ccead57d8bcbe32407f498de1e26f3558"
        },
        {
          "alg": "SHA3-384",
          "content": "cf14029429a406ec32481ac73a7580a4e34f1216f7f85ea29cb35dba8b8ca1e20b59b81b66778ac5b16a3975fcf6f2d8"
        },
        {
          "alg": "SHA3-256",
          "content": "76b8b17d5659c5638709d866cb78ee75b78cbaf53beb649f4ec1b15a47c65347"
        },
        {
          "alg": "SHA3-512",
          "content": "2d8b9be6f6a7149663107ade523c8e274b1f24710132ae09d09591632ceb108296f26214f9c9ce4cec40f074bf97f715284d136cb01ce886e8745b38eb5b3f48"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.corba/glassfish-corba-omgapi@4.2.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/proposals/eclipse-orb/glassfish-corba-omgapi",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/eclipse-ee4j/orb/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/orb-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/orb/glassfish-corba-omgapi",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.ext/jersey-bean-validation@3.1.11?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.ext",
      "name": "jersey-bean-validation",
      "version": "3.1.11",
      "description": "Jersey extension module providing support for Bean Validation (JSR-349) API.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4d8d0999370da866d06abecbac055755"
        },
        {
          "alg": "SHA-1",
          "content": "8bfe5f54a6387546aa2a5dedc1695c755a290831"
        },
        {
          "alg": "SHA-256",
          "content": "bd519833ef4363480559d05d23b429cd879e347b2b7b399741e1eb4431a6687c"
        },
        {
          "alg": "SHA-512",
          "content": "16d73f5e0eea9d9c13a654d46ced74ce4d77cc3495995a15eb23c158ef36e45652d0c8db449f49bba5e93398b2c23830644ab1c9dc7ea54f167da7a170277d5e"
        },
        {
          "alg": "SHA-384",
          "content": "a128d913a94320c347040873031cbe8958898b23de21aa75a77f268570aad4897cedaf93856678c153323cdff0475464"
        },
        {
          "alg": "SHA3-384",
          "content": "c4fe09a8d497e2eb8daea46d654888474fde41a66cfa294b66ad6e9e11ef3ee3925c2c36c5430b0341c3a8a9bab5a012"
        },
        {
          "alg": "SHA3-256",
          "content": "a829e407aa33af5c5d19e0ba51dcd578fe4fb0aa91b11c6da016aa0eec24a4b4"
        },
        {
          "alg": "SHA3-512",
          "content": "cba50fc231c52130a432e81984b56b810f17ac72564c697cbd6f3639ae885ccf973e40b05589dc05e0ac1455bc5d2306aec60a7ed5d6739f833dbda5866cca81"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.ext/jersey-bean-validation@3.1.11?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-bean-validation",
          "type": "website"
        },
        {
          "url": "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/",
          "type": "build-system"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/project/jersey-bean-validation",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.inject",
      "name": "jakarta.inject-api",
      "version": "2.0.1",
      "description": "Jakarta Dependency Injection",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "72003bf6efcc8455d414bbd7da86c11c"
        },
        {
          "alg": "SHA-1",
          "content": "4c28afe1991a941d7702fe1362c365f0a8641d1e"
        },
        {
          "alg": "SHA-256",
          "content": "f7dc98062fccf14126abb751b64fab12c312566e8cbdc8483598bffcea93af7c"
        },
        {
          "alg": "SHA-512",
          "content": "f186b2ada470abba1cc3b4f8c4373d940fb7c71a051b2c26f7c204ad4dfb69235fbf3f9c33da36d744cb90f52d921c51d76c0ff263bacb35eafb66cab83dc47d"
        },
        {
          "alg": "SHA-384",
          "content": "405bd297a73901f013d48a0da028d04d400f3e61f4997c0e7297eb08120670a0e242e0002db8f130c33ab16cb02feb2d"
        },
        {
          "alg": "SHA3-384",
          "content": "4db7e54434d0a208c876868f5595b808f2728c0455feaa752ab7b569a2186fc37cb891c9aa0076de3d08f6da6ff06eba"
        },
        {
          "alg": "SHA3-256",
          "content": "3a5aba9f1ff1a130b76af886123eb375fa578498490df3dc60bb7ce7d59e9404"
        },
        {
          "alg": "SHA3-512",
          "content": "00bba8efc2d6e7f0a509b321868d75f1aaf0681a750d089d913bde8424ab7bb88aadf49de6e291e352523e4f8c117b1b48033ff31d4d665dcc43c4c6ea000ba9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/injection-api",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/eclipse-ee4j/ee4j/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/injection-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.core/jersey-server@3.1.11?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.core",
      "name": "jersey-server",
      "version": "3.1.11",
      "description": "Jersey core server implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "dc77c1ecc1eca1253d0ba37a0e3aa9a2"
        },
        {
          "alg": "SHA-1",
          "content": "b65a67a4ce399063cd88107b360d210d434f1e9a"
        },
        {
          "alg": "SHA-256",
          "content": "7dde2adf6600f3e8f723e37a8c96c31838a682f8db854fdcfcf4f00695d6f903"
        },
        {
          "alg": "SHA-512",
          "content": "faad5d41168345e31918d4aacb85fe5e16529ee061d46bdca37cd0f50e22f275ebaa073cee6880d66c9056a662ceb3231979452b5bba1a7cc126e29fad5038e6"
        },
        {
          "alg": "SHA-384",
          "content": "c0f64301fe1865684a5147c16a9845dff9a68b116855e18dba522aefb33f7a9dd237d3c2cfd73218c2b34ee688c6ec6b"
        },
        {
          "alg": "SHA3-384",
          "content": "57f26d9468c51516db50cae11810f49d40ab8b3f67281ec6a330db953ba7faec679767de0ab89b96b9efad16f2361720"
        },
        {
          "alg": "SHA3-256",
          "content": "3ea54a5692bc36604357431eed5701ec5f51be907be5f0bc625e5e74f1fcf327"
        },
        {
          "alg": "SHA3-512",
          "content": "20cddbfdb06e4973ddead9d0dcee3489435cdc4b70511b7cd319b5ee0a689daf010c52eb8b5e2592832c157158e3057c4bc1a5393c3a2c942416da0a52ecfd47"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "name": "The GNU General Public License (GPL), Version 2, With Classpath Exception",
            "url": "https://www.gnu.org/software/classpath/license.html"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.core/jersey-server@3.1.11?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/jersey-server",
          "type": "website"
        },
        {
          "url": "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/",
          "type": "build-system"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/jersey-server",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.hibernate.validator/hibernate-validator@8.0.2.Final?type=jar",
      "group": "org.hibernate.validator",
      "name": "hibernate-validator",
      "version": "8.0.2.Final",
      "description": "Hibernate\u0027s Jakarta Bean Validation reference implementation.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1adda123292ba2627d03a696d8c7e76a"
        },
        {
          "alg": "SHA-1",
          "content": "220e64815dd87535525331de20570017f899eb13"
        },
        {
          "alg": "SHA-256",
          "content": "2f2224a5a19bdcfa73540e9ff5c971b6c425ad80415876f305259fe873a15b2f"
        },
        {
          "alg": "SHA-512",
          "content": "3b4c68e41a245050addba3d5a856fad838e6a27fb0b8c13d34200274e13e0b3aa04c3f3d3cd883ceed880f0683093022625ed4db9522fc557782b8ad9668902d"
        },
        {
          "alg": "SHA-384",
          "content": "4addce04dd4599547dd81a02bb38426087edc11fc929ddc04790536264aa4bd4a62337b0f91604fe47b2b898039828f7"
        },
        {
          "alg": "SHA3-384",
          "content": "bcd829d013c6bb110a5d9dee2b4249678e41d670c9a7beb8b0c7ac52b7fae90be75997ef54a17900e8ef42e7afc171de"
        },
        {
          "alg": "SHA3-256",
          "content": "a1ff9dd13a537d46735504b4b3074277102c31f1b13eef40ba65537c25e1a9e6"
        },
        {
          "alg": "SHA3-512",
          "content": "db82be4ff0ca253beac177cf9fe474e3d448081a439e85e949f8f1d3a857b41c249c1bbebad1219b45a4ed580284b444c0aade591e907457e2d43fdc3f56cb60"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.hibernate.validator/hibernate-validator@8.0.2.Final?type=jar",
      "externalReferences": [
        {
          "url": "http://hibernate.org/validator/hibernate-validator",
          "type": "website"
        },
        {
          "url": "http://ci.hibernate.org/view/Validator/",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://hibernate.atlassian.net/projects/HV/summary",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/hibernate/hibernate-validator/hibernate-validator",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml/classmate@1.5.1?type=jar",
      "publisher": "fasterxml.com",
      "group": "com.fasterxml",
      "name": "classmate",
      "version": "1.5.1",
      "description": "Library for introspecting types with full generic information including resolving of field and method types.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e91fcd30ba329fd1b0b6dc5321fd067c"
        },
        {
          "alg": "SHA-1",
          "content": "3fe0bed568c62df5e89f4f174c101eab25345b6c"
        },
        {
          "alg": "SHA-256",
          "content": "aab4de3006808c09d25dd4ff4a3611cfb63c95463cfd99e73d2e1680d229a33b"
        },
        {
          "alg": "SHA-512",
          "content": "7fc4764eb65227f5ba614698a5cf2f9430133f42ec6e2ae53b4c724ee53f258541a0109fe0659e0b9e45729b46c95c00227e696b8d1addcd772c85f877658c9a"
        },
        {
          "alg": "SHA-384",
          "content": "28b4780b2353ebc08dbc02c9a343527a9062a0455bfb4ab135cb639c03e5dfd9c2250a835c44d5f17d275667c2009694"
        },
        {
          "alg": "SHA3-384",
          "content": "b194ace8f1f49f410286bd859866678b95a1b2c6f73e41f48291eb7438dffea57aaa9b177459038b6997771ce4d1cee1"
        },
        {
          "alg": "SHA3-256",
          "content": "50234c94efed4c816eb77bd2f70b869c9f89ddf8ee73dc25e354f4d0b81b3e1f"
        },
        {
          "alg": "SHA3-512",
          "content": "9886421726066b313a62283a6811b76d904ea1c1e9b7b2d850cb47afa189b03cdef053c8f7f6b79e77f2269c45f8cc2ed75c3389e96594b50987fef311d5a25f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml/classmate@1.5.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/java-classmate",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/FasterXML/classmate/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/java-classmate",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jboss.logging/jboss-logging@3.6.1.Final?type=jar",
      "publisher": "JBoss by Red Hat",
      "group": "org.jboss.logging",
      "name": "jboss-logging",
      "version": "3.6.1.Final",
      "description": "The JBoss Logging Framework",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "acab989faf62db02c092448e95614fab"
        },
        {
          "alg": "SHA-1",
          "content": "886afbb445b4016a37c8960a7aef6ebd769ce7e5"
        },
        {
          "alg": "SHA-256",
          "content": "5e08a4b092dc85b337f0910a740571d8720cfa565fabd880a8caf94a657ca416"
        },
        {
          "alg": "SHA-512",
          "content": "3dee7fadc04407538248def38fd0ae885c2aa454e2a38ecaaf7ef74abc1505f4efcd3e1a4e024c9f28d37fabb663c19cc3f29b7641b3094d5a504e93730c4a22"
        },
        {
          "alg": "SHA-384",
          "content": "26b1ba129bd9cd1777ba90da087d343698b1f7fa48b855ce0a1030afc1c7ae81433f75e7b8293eb42fc063ce35386280"
        },
        {
          "alg": "SHA3-384",
          "content": "7fbed126ae79578a4136d769f31d9d879e14cd0f0b78ec91515be7cfce5fea7f1c1ca10bf752d19edd5511d3d4ef5254"
        },
        {
          "alg": "SHA3-256",
          "content": "0de02a61df5dc9fbb8e9a344a8744356f3e867b4567ca2baa0bbf16a8763de01"
        },
        {
          "alg": "SHA3-512",
          "content": "2c7b522c04afab22900222f287da17c1526b3b3fd6a9376298613112918afb050af3d8ead2239be3e7dc3337ae74a636bf1963a1bc56426996b0f7283681bb3c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jboss.logging/jboss-logging@3.6.1.Final?type=jar",
      "externalReferences": [
        {
          "url": "http://www.jboss.org",
          "type": "website"
        },
        {
          "url": "https://issues.redhat.com/",
          "type": "issue-tracker"
        },
        {
          "url": "http://lists.jboss.org/pipermail/jboss-user/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jboss-logging/jboss-logging/tree/main/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.el/jakarta.el-api@5.0.1?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.el",
      "name": "jakarta.el-api",
      "version": "5.0.1",
      "description": "Jakarta Expression Language defines an expression language for Java applications",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "fcc2c22f90c0d8d80ca73b171d695539"
        },
        {
          "alg": "SHA-1",
          "content": "6f46fb9143b18b7956806a657275fc41376d1a50"
        },
        {
          "alg": "SHA-256",
          "content": "90432d18281717b363b819978c6a172433a2654b77eb87c863c22fc19c20eced"
        },
        {
          "alg": "SHA-512",
          "content": "3246917cd93b5d115a4af7acc815f645670abf70e08d2d1790feb983ed844bae78035168ec578c3cfc1bed463695db8539ed2e8288fff4aef64fb0429624620c"
        },
        {
          "alg": "SHA-384",
          "content": "05c51f4b57bdd4f56a1f0cfa5ce7927a40d960b3f6e0cb588e410a029e47ef23f9bf208441ddccaab7a08e1d68e121e0"
        },
        {
          "alg": "SHA3-384",
          "content": "cfbd7724885c804d11760498ea02c2739d2995cbd9b78743daf5a0abe441952bf022e7f84168cd1065d16cec93912d43"
        },
        {
          "alg": "SHA3-256",
          "content": "deacf23b56f75b78bd7ed36eca74e3ea66008b0d4f6b235bb8bbe980e415624b"
        },
        {
          "alg": "SHA3-512",
          "content": "bfd7d0d080bc261a836e70a8eb53cfdeb24d9d76a8b88470f96ddb30ce90ef2660cff190371049f0d74f9d137d11a99e609956ffc0524a6636fe3f800705ab6b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "name": "GNU General Public License, version 2 with the GNU Classpath Exception",
            "url": "https://www.gnu.org/software/classpath/license.html"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.el/jakarta.el-api@5.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.el",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/eclipse-ee4j/el-ri/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/el-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/el-ri",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.expressly/expressly@5.0.0?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.expressly",
      "name": "expressly",
      "version": "5.0.0",
      "description": "Jakarta Expression Language Implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d4448c69fe69ebca37b2c76e62e385c3"
        },
        {
          "alg": "SHA-1",
          "content": "78637fec7db6414c3ad32f3aa9e5d6610a299e5b"
        },
        {
          "alg": "SHA-256",
          "content": "b0c872737bb8381921b304d0952854666d1ba320b9b3c5bf4d70a09a86b61524"
        },
        {
          "alg": "SHA-512",
          "content": "8abd592d1fd70ef7fac5d0c1debe59dddea59dd82262bae016b44c506ceb68bb0619f464a07e553cc6885d527e1b8b8571e8975ca040c7864baba2349f30b725"
        },
        {
          "alg": "SHA-384",
          "content": "dc233d0838d2912d2473b8b6f5988145f4116dc2b139ea0378e78f260ed4c7609c954875c21fa579c4901f3202b3ca61"
        },
        {
          "alg": "SHA3-384",
          "content": "d946ffea99369b9933d07076f88a605a8b724edbc1d771ec92db145e6a68e447ac261efd9a4cdb74dce38827f75bd7d4"
        },
        {
          "alg": "SHA3-256",
          "content": "a46f1d62e482167ead93bc3f1261852cbd968e8fc7b68b399685d0bf6eb095d7"
        },
        {
          "alg": "SHA3-512",
          "content": "5e23912f838fe9487d5c0ab44d806e05f1754df1d18f1f7231a32975a73d7747edab4166903b5cbdc6ef002efc4a768b10baa4d7dabcb1c29bca61e9ab923347"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "name": "GNU General Public License, version 2 with the GNU Classpath Exception",
            "url": "https://www.gnu.org/software/classpath/license.html"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.expressly/expressly@5.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.expressly",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/eclipse-ee4j/expressly-ri/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/expressly-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/expressly-ri",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.swagger.core.v3/swagger-annotations-jakarta@2.2.37?type=jar",
      "group": "io.swagger.core.v3",
      "name": "swagger-annotations-jakarta",
      "version": "2.2.37",
      "description": "swagger-annotations-jakarta",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4887d4782b779ca6252cd742acd0dae9"
        },
        {
          "alg": "SHA-1",
          "content": "6548d82f75c208c1d702bf4e5e3b9979e20f2b5a"
        },
        {
          "alg": "SHA-256",
          "content": "e2cb925d78b3600eb206f11fe21176fbaef9d0aef3ec90d10800995a5e70a059"
        },
        {
          "alg": "SHA-512",
          "content": "31be5bbcdc047f9768581307369cdc979a8f23df879158f8f152df19c9cb36816f38e53d4dbe471c0ec4dabc5a71d4fddc93bdb7d82e5e799dc8b82370438262"
        },
        {
          "alg": "SHA-384",
          "content": "344cd62fa2df23c661790aa2c3c029b612470aa063072e1466b5e6230663423dc86864b42d6e8633278ab11305972755"
        },
        {
          "alg": "SHA3-384",
          "content": "e5127bacaedd67ae080c9f0eb1964dd4de8735796b4edf31c98e31986c5a9bc3c049bdb7d21baddfad2b4e0c8ced35d5"
        },
        {
          "alg": "SHA3-256",
          "content": "4e748541ed1313daf36ed25a964e175edc4f57c766b664053b7ac7d36529ac93"
        },
        {
          "alg": "SHA3-512",
          "content": "72d7c42b3ac3d31f72cb0f35a62eb4a93b4f5a5f67f2f41a7afb6fbb49bf68320a36641c92c44d9aef014338439371ba1d48fd2b258081f58c980a4d01d7bd7b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.swagger.core.v3/swagger-annotations-jakarta@2.2.37?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/swagger-api/swagger-core/modules/swagger-annotations-jakarta",
          "type": "website"
        },
        {
          "url": "https://github.com/swagger-api/swagger-core/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://groups.google.com/forum/#!forum/swagger-swaggersocket",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/swagger-api/swagger-core/modules/swagger-annotations-jakarta",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/us.springett/alpine-infra@3.3.0?type=jar",
      "group": "us.springett",
      "name": "alpine-infra",
      "version": "3.3.0",
      "description": "An opinionated scaffolding library that jumpstarts Java projects with an API-first design, secure defaults, and minimal dependencies.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a2f8e59b94f1dc7f5fe17965d5f5f2d2"
        },
        {
          "alg": "SHA-1",
          "content": "d6918416c9ce43e43a8ce4936238a6b0c21c7a0d"
        },
        {
          "alg": "SHA-256",
          "content": "492a5395803b05925766de5c942a195660c0238c0f4f85eed76ada12f818356d"
        },
        {
          "alg": "SHA-512",
          "content": "f2216a33b8809f3fcdf99d2d1c5424a7db2fd3f16d5efce3e90fad250908ac16cfce50c7ba174b716c2d79a93d589d90f395571390dcb81e367625feb6287399"
        },
        {
          "alg": "SHA-384",
          "content": "ee1a50450cab718bb1457fd0fe9b4f481b1d037436a4f2c2c66a0f9b53d2806d44d92e48b59c23120bb857d6a5462441"
        },
        {
          "alg": "SHA3-384",
          "content": "ea562e828fcae515ddb14e34c38bebbeab365a4441564599fd59a841af65fde571227cdd7837699f91f969720f2e43a2"
        },
        {
          "alg": "SHA3-256",
          "content": "94a022fe73c7a2c4f003ce8dc6e22cff494c278cba8bbb57e53a96e3437ab060"
        },
        {
          "alg": "SHA3-512",
          "content": "c9279fb91e28ab597669a554a2c2685c2b59a2f88a69a3065c99c08d5e3877a001c4be801e650ee41227f75b1da43edfa82a7893312944e89a7928cf36951bba"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/us.springett/alpine-infra@3.3.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/Alpine/alpine-infra",
          "type": "website"
        },
        {
          "url": "https://github.com/stevespringett/Alpine/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/stevespringett/Alpine/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/alpine-infra",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.commons",
      "name": "commons-collections4",
      "version": "4.5.0",
      "description": "The Apache Commons Collections package contains types that extend and augment the Java Collections Framework.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d564105594035b363b193d8ce3c18b98"
        },
        {
          "alg": "SHA-1",
          "content": "e5cf89f0c6e132fc970bd9a465fdcb8dbe94f75a"
        },
        {
          "alg": "SHA-256",
          "content": "00f93263c267be201b8ae521b44a7137271b16688435340bf629db1bac0a5845"
        },
        {
          "alg": "SHA-512",
          "content": "ee43c513ac9dcbd7dd23b5cbb4ea5f65a2e10cdfbb403d080b87e778b3b45062315522297c41eca514a9a946228ad7650f0a572d5b78effb8260dd8084131988"
        },
        {
          "alg": "SHA-384",
          "content": "73db8eb3e79569b3fa62aefdce413e6ea250b9853953cb75b9d5ce0f2f35b59b6e86ef708326a608ff20d95bdade8522"
        },
        {
          "alg": "SHA3-384",
          "content": "7a9c035fa846cdcebd4331eb86ed31a67595518299a8bee54597c1eb663aee63214553a561a510b929035266c2a4800b"
        },
        {
          "alg": "SHA3-256",
          "content": "614c41bfd8f9c6c1c1e5667c5be45587c3021b780937ad62f54d17051f425086"
        },
        {
          "alg": "SHA3-512",
          "content": "3cfd12ec2d03ed29b682123cedae422a4c6dc459034a7e0ab5f00ccd422cb9a2ec423a08b953119c426569b888157a6d80aa0e0c63debea50c5c54c481e2eff5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar",
      "externalReferences": [
        {
          "url": "https://commons.apache.org/proper/commons-collections/",
          "type": "website"
        },
        {
          "url": "https://github.com/apache/commons-parent/actions",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://issues.apache.org/jira/browse/COLLECTIONS",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/commons-user/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitbox.apache.org/repos/asf?p=commons-collections.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.datanucleus/datanucleus-rdbms@6.0.10?type=jar",
      "group": "org.datanucleus",
      "name": "datanucleus-rdbms",
      "version": "6.0.10",
      "description": "Plugin for DataNucleus providing persistence to RDBMS datastores.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "00e2a7b9d8b69091a931d7195b4c6b50"
        },
        {
          "alg": "SHA-1",
          "content": "0bf9d3ef17d21993bc75c8fdd6e99b2ce8bdbfc8"
        },
        {
          "alg": "SHA-256",
          "content": "b3970a11dbd48679f47ba781d5e5c7b0a626a8bff469010ed49c533f39dd0ce3"
        },
        {
          "alg": "SHA-512",
          "content": "ce8a40aef9a0c8bf25f0e836a773dc5f3e9170531e41c065357148994afa0eff794e36ab5e0e68ebca588320b68195e77c2171628e1f2d2ba1c888a081bb6709"
        },
        {
          "alg": "SHA-384",
          "content": "4ee5ba2bb88fdff371a6aca813a410b3e2a4f82916fb9cc64cf6ae388df7b328b72f00e2b89ae1487bbb8d69d542d79d"
        },
        {
          "alg": "SHA3-384",
          "content": "691f3864219f2cdfb977de6e92c846c9489f4461396bbd960d023fa63077bff31187f95475c1492cdee10cdf8b80fe31"
        },
        {
          "alg": "SHA3-256",
          "content": "05208a086d05ade5c69dba5127e9b68531db033b01db2c75874c947ae2a09cdc"
        },
        {
          "alg": "SHA3-512",
          "content": "01ee02f06db751705bdb56520527fc92656bf2d43d8ddf329c8b47b9b86d6ac9c1731ae6675240da3c42d9c10cfe16875855da75eecc26b03ea6f8a02ef4655f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.datanucleus/datanucleus-rdbms@6.0.10?type=jar",
      "externalReferences": [
        {
          "url": "http://www.datanucleus.org/#/datanucleus-rdbms",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/datanucleus/datanucleus-rdbms",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.zaxxer/HikariCP@7.0.2?type=jar",
      "publisher": "Zaxxer.com",
      "group": "com.zaxxer",
      "name": "HikariCP",
      "version": "7.0.2",
      "description": "Ultimate JDBC Connection Pool",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c36937c742c20cbdc7bcb47019e33151"
        },
        {
          "alg": "SHA-1",
          "content": "c2b43c946b86a14a96342379e22b004c56c6166d"
        },
        {
          "alg": "SHA-256",
          "content": "f1e612fa27345be3107a85431e8a8aeb205c15364ab2f2d411e40a9d7bb08095"
        },
        {
          "alg": "SHA-512",
          "content": "fab69440ecf96687ac9cd69d19503a824f7bec74d97329ee6f8568981200799a1503df5517b9e0322a8d139fc71d6af193314890716ff8f0fd52163dad6f0c6c"
        },
        {
          "alg": "SHA-384",
          "content": "b14c735ebeeb00e113c159cbc22b579ebe9676949a0c50f478bdc54daad8370d13954fc8df7b751ce6b3ab978fbfc43c"
        },
        {
          "alg": "SHA3-384",
          "content": "ecbcb443c087f455cc0e15f65736f9559a79e6375c4686830ede2e653d9dc79c36bb99b537f242f0f8a8acf3d5f22d56"
        },
        {
          "alg": "SHA3-256",
          "content": "3ff38f8630222d165d6ac18696a780e19d8e70019210a59a1dbff293de0b2db2"
        },
        {
          "alg": "SHA3-512",
          "content": "7ca91f467a107c528c8da8ea75a3503d8aa88fc4ac521e2d5d0359c28c4f8997bf472bc0445089a77f1a0efa0513fd9304de9bfd6ed4b14288b87461046b2e1b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.zaxxer/HikariCP@7.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/brettwooldridge/HikariCP",
          "type": "website"
        },
        {
          "url": "https://github.com/brettwooldridge/HikariCP/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/brettwooldridge/HikariCP",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.javassist/javassist@3.30.2-GA?type=jar",
      "publisher": "Shigeru Chiba, www.javassist.org",
      "group": "org.javassist",
      "name": "javassist",
      "version": "3.30.2-GA",
      "description": "Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation simple. It is a class library for editing bytecodes in Java.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f5b827b8ddec0629cc7a6d7dafc45999"
        },
        {
          "alg": "SHA-1",
          "content": "284580b5e42dfa1b8267058566435d9e93fae7f7"
        },
        {
          "alg": "SHA-256",
          "content": "eba37290994b5e4868f3af98ff113f6244a6b099385d9ad46881307d3cb01aaf"
        },
        {
          "alg": "SHA-512",
          "content": "046c5b87732ef28540c56f88891238e49ac15fcc23e1f13e0b12de816831ba3de54e68a727b6163877a7b19b13f1362c0e6affa2664af1fdac5748632ed7a09e"
        },
        {
          "alg": "SHA-384",
          "content": "d1dfb87ac4d7797ea07098b7814190eed3aa16e86dd792916ff7f86c30ad456dd153f9ae4e77f13cee03e23dd3cfb24b"
        },
        {
          "alg": "SHA3-384",
          "content": "f70abfcb1b0d9e7903171bf52fe34b33ceffa9c53b697fabac9f2d3e02b8621446f7b2471d44e2cb70862e559b4d36b2"
        },
        {
          "alg": "SHA3-256",
          "content": "cf3f1d9150d71a6f23a749c24d355accb133991a9272110c5fa0ccff73220367"
        },
        {
          "alg": "SHA3-512",
          "content": "e294c989c20271f42a4bf0c63cbb691cb2fa284088c8a846983aa0e4948b4325131b8829b210214f539d30eb4e20b14c06f4b164208488719512739d78dfd454"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MPL-1.1"
          }
        },
        {
          "license": {
            "id": "LGPL-2.1-only"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.javassist/javassist@3.30.2-GA?type=jar",
      "externalReferences": [
        {
          "url": "https://www.javassist.org/",
          "type": "website"
        },
        {
          "url": "https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://jira.jboss.org/jira/browse/JASSIST/",
          "type": "issue-tracker"
        },
        {
          "url": "scm:git:git@github.com:jboss-javassist/javassist.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.jsonwebtoken/jjwt@0.13.0?type=jar",
      "publisher": "jsonwebtoken.io",
      "group": "io.jsonwebtoken",
      "name": "jjwt",
      "version": "0.13.0",
      "description": "Legacy dependency. Please update your dependencies as documented here: https://github.com/jwtk/jjwt#installation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ff80a0df149223b573a5b1591ff2154d"
        },
        {
          "alg": "SHA-1",
          "content": "e04acb8858ec802101ad8471add3cb10a00ec966"
        },
        {
          "alg": "SHA-256",
          "content": "d9eed7982516f6ee3072ed8b7f3183d79422d4bcdf0595f4f68260e32b205113"
        },
        {
          "alg": "SHA-512",
          "content": "76572c4b48137ef5ebfe79f445738bf4e64ff37042b4643e14b3ddfa6f28832ca62ed5d992793567da2c288f6bb4f402d3cd861a65759a4df74e032ddfcb0731"
        },
        {
          "alg": "SHA-384",
          "content": "8e7e0d36ad0c2b2de66c16ce9abb897e923e0f1837da361db6724ecfc9865ded7a6efb11776a6bbcf14ac5619783d4f3"
        },
        {
          "alg": "SHA3-384",
          "content": "56bbc9525d82fb243bd200f5fd789710edb6cc6f7b90a7a83870bfe413ef31c35232ed47d466b39e178400794f4e118b"
        },
        {
          "alg": "SHA3-256",
          "content": "edb6e5dceacffadbad39e988e088a495b14d1492e0e16218d2d3101267fbc10d"
        },
        {
          "alg": "SHA3-512",
          "content": "e59654adb704cd1f56bb8052ebbf8b1c3e167f909940ee674e19be9b1ab8d388c64b3194300d7305b2d7fd8afdc3ce314d138b01e78a38f622ef1ba63a23bb77"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.jsonwebtoken/jjwt@0.13.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/jwtk/jjwt/jjwt",
          "type": "website"
        },
        {
          "url": "https://travis-ci.org/jwtk/jjwt",
          "type": "build-system"
        },
        {
          "url": "https://ossrh-staging-api.central.sonatype.com/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/jwtk/jjwt/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/jwtk/jjwt.git/jjwt",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.jsonwebtoken/jjwt-api@0.13.0?type=jar",
      "publisher": "jsonwebtoken.io",
      "group": "io.jsonwebtoken",
      "name": "jjwt-api",
      "version": "0.13.0",
      "description": "JSON Web Token support for the JVM and Android",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a9a60d4e3c640348092beff5b4d88a6a"
        },
        {
          "alg": "SHA-1",
          "content": "ce631a0342b08953355f333b488d2b03445b9f3e"
        },
        {
          "alg": "SHA-256",
          "content": "5af8a971c7215acb6c3708794a3912c56eb7066ca3b1ee73f87988c9e0d6c067"
        },
        {
          "alg": "SHA-512",
          "content": "b76e643bab5da0116484bb636e5f139d53e3c580aa07fa9ff9efb9f552b19f14a0902111ebca65094647f6f2d9ba45805e3185d149f0d9d13b8e84e5f575c84e"
        },
        {
          "alg": "SHA-384",
          "content": "e08e26e44ac341dff5058c57b9d6c1ce25db5b8f06b44d3e65cb53febccbb9ad6a58aaa0af88c84c9a5c541c4b9b2cd4"
        },
        {
          "alg": "SHA3-384",
          "content": "4e208f7f2c8706ea1881741b79057b64df0dc4205130bd9ce2babfb29c72dd3d37f442807e2baa69d1c4ea81a156f443"
        },
        {
          "alg": "SHA3-256",
          "content": "aba4649f871a7b0817d7b347270f2c6bd3e877e4cb62bf9e7ecb19ed73d48c22"
        },
        {
          "alg": "SHA3-512",
          "content": "80a6cac7a45fb7801b46a30bf66112c6c67308789c51bfc148692b736de21505178f1ace84c82747380f8a93b5d581d212ed7b9ea3872a9101ab0c59fcbefbd2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.jsonwebtoken/jjwt-api@0.13.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/jwtk/jjwt/jjwt-api",
          "type": "website"
        },
        {
          "url": "https://travis-ci.org/jwtk/jjwt",
          "type": "build-system"
        },
        {
          "url": "https://ossrh-staging-api.central.sonatype.com/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/jwtk/jjwt/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/jwtk/jjwt.git/jjwt-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.jsonwebtoken/jjwt-impl@0.13.0?type=jar",
      "publisher": "jsonwebtoken.io",
      "group": "io.jsonwebtoken",
      "name": "jjwt-impl",
      "version": "0.13.0",
      "description": "JSON Web Token support for the JVM and Android",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e3ca3f21f21b8a1c78cd3977adadfdf2"
        },
        {
          "alg": "SHA-1",
          "content": "9e7c70dd7014909556755fb01c465dd184b4b1d9"
        },
        {
          "alg": "SHA-256",
          "content": "b351baaa302889a416e83683f110948017cee671303262522d4ba477688ca89f"
        },
        {
          "alg": "SHA-512",
          "content": "70c4e43e41f93a9a9ec47fb74b115bb2a7df7df25ea3413208799802af2b91c9e606042a8b64cf85684914deac9f12b5ef65f4377702668a9562dbecdd65ef4f"
        },
        {
          "alg": "SHA-384",
          "content": "edb3d6c04da1ef6e61d665d08078a249a80b6e6372ed70d0416c6e645af3eae295cfa5d8bc53d4cd7ddc321ab95ca824"
        },
        {
          "alg": "SHA3-384",
          "content": "ff0dd699b2b00f6bda970837d5d284e60a873e178c53a0677a01c2fdcc5d31474b3e2285c9b2dda8c8ece0c08693504e"
        },
        {
          "alg": "SHA3-256",
          "content": "24d1fd3a57b1939be928690dd5899b012f6593825090226ae315c7aac7c52c9e"
        },
        {
          "alg": "SHA3-512",
          "content": "70d93cee82b7b5fb6383335395f4e59a50acd8e7add35543649c2e1c8b680285b5aa8ebcb05f97d1fc0c3b93558e01c3b54ae5608a34944bd7d997280a68fe94"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.jsonwebtoken/jjwt-impl@0.13.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/jwtk/jjwt/jjwt-impl",
          "type": "website"
        },
        {
          "url": "https://travis-ci.org/jwtk/jjwt",
          "type": "build-system"
        },
        {
          "url": "https://ossrh-staging-api.central.sonatype.com/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/jwtk/jjwt/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/jwtk/jjwt.git/jjwt-impl",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.jsonwebtoken/jjwt-jackson@0.13.0?type=jar",
      "publisher": "jsonwebtoken.io",
      "group": "io.jsonwebtoken",
      "name": "jjwt-jackson",
      "version": "0.13.0",
      "description": "JSON Web Token support for the JVM and Android",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "da00e5b45c15207041a11488ce975c97"
        },
        {
          "alg": "SHA-1",
          "content": "cfe37531887657716ec20b5ef22f22b32e8bf4a8"
        },
        {
          "alg": "SHA-256",
          "content": "e5ca43b49deca1ad818b2572f0af4d902370205089bdcd15d5dbb6095d17416b"
        },
        {
          "alg": "SHA-512",
          "content": "e7cb878ab8718edc00cf6faa11342c3719dad5e7e1146d20357cd6d4096ed25efec1f7ba0bdfc8a0d8eb4fda0ad35cc47cf14381b298653ae35a5d83258850b1"
        },
        {
          "alg": "SHA-384",
          "content": "cb393894e5cac96b108aa78470a016887d623a9031a02455618474a280bd04488172fc75e74fe7ffa906bab739540f1f"
        },
        {
          "alg": "SHA3-384",
          "content": "bfccb8d80ce4bb09d38f3c0afccf8a400f7d2a63a60940ab6736fe8e041644cc4216046f9253871ca84bce92147e08fe"
        },
        {
          "alg": "SHA3-256",
          "content": "8565b5e5f12b4da2043a4e9f4d8817c12afb705db35529d0600b21f076893aff"
        },
        {
          "alg": "SHA3-512",
          "content": "c42344232296ee46346639aec5a07816144feba63c72413ca9d5275f7eaf27dcf6aed5d06ae2e8a5a3eb59e16bf35b4fcda0b3b5215dd869ca012586e6cc41d9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.jsonwebtoken/jjwt-jackson@0.13.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/jwtk/jjwt/jjwt-jackson",
          "type": "website"
        },
        {
          "url": "https://travis-ci.org/jwtk/jjwt",
          "type": "build-system"
        },
        {
          "url": "https://ossrh-staging-api.central.sonatype.com/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/jwtk/jjwt/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/jwtk/jjwt.git/jjwt-jackson",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/us.springett/alpine-server@3.3.0?type=jar",
      "group": "us.springett",
      "name": "alpine-server",
      "version": "3.3.0",
      "description": "An opinionated scaffolding library that jumpstarts Java projects with an API-first design, secure defaults, and minimal dependencies.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "cd924cd214bb57bde310c14d9f4040a9"
        },
        {
          "alg": "SHA-1",
          "content": "9fab0ba62dc097fef8239aa9a25186886a342dec"
        },
        {
          "alg": "SHA-256",
          "content": "b4f0868f706a5ff93b0eac2638ecc6c9cc219bc203f7cacf2cc0eb9a46aca143"
        },
        {
          "alg": "SHA-512",
          "content": "c2504d81ca579e5a6beb773b2280391afd364ae863539aa950d7aba473dc647b96a106bd903f3e4d27e9bb5ba44faaf4fc44f5076b051766340013879995cc73"
        },
        {
          "alg": "SHA-384",
          "content": "e7400a6f7d9b69e3f626572d604e5f6fea4a1449dd0c1492f5033ceb6c451a00e1ec318b4f34316b4db383cbd511d44a"
        },
        {
          "alg": "SHA3-384",
          "content": "db296f531f843530248cf651fa5becb844f922c5f9e84064bf7e22606aa21ee682c4043db20b2c200a39870fc1fa6634"
        },
        {
          "alg": "SHA3-256",
          "content": "2e41f0de3e2ed4ed1c1f784105ff7d078d552ff510dfe2a6880955a3da73d0e9"
        },
        {
          "alg": "SHA3-512",
          "content": "ec01751d7398c847c351c203179a618b711201607ffa9befde613d93f89463df4d54b97adac746ce0f6b413e85a4ee0bb45288ca1c4e2f961eab3eb3979bdedc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/us.springett/alpine-server@3.3.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/Alpine",
          "type": "website"
        },
        {
          "url": "https://github.com/stevespringett/Alpine/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/stevespringett/Alpine/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/alpine-server",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/commons-io/commons-io@2.20.0?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "commons-io",
      "name": "commons-io",
      "version": "2.20.0",
      "description": "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "94e7e6b9b5fe82388687b584d3571081"
        },
        {
          "alg": "SHA-1",
          "content": "36f3474daec2849c149e877614e7f979b2082cd2"
        },
        {
          "alg": "SHA-256",
          "content": "df90bba0fe3cb586b7f164e78fe8f8f4da3f2dd5c27fa645f888100ccc25dd72"
        },
        {
          "alg": "SHA-512",
          "content": "fea08e150473673b0608eaee3ae1cb4e73834039db80d3b758710d6baf3a5840a0878a4eb64739ae9bb21ccc7148c8520fe873616a3f6d5cdb4305deabdd015c"
        },
        {
          "alg": "SHA-384",
          "content": "22db5e18e3512ed44474e75a124a052d5a1a6f35ce458f6a201a5ccc9510c57c10c117dba80ac6ce91745cf2b51e63f2"
        },
        {
          "alg": "SHA3-384",
          "content": "a70700d24df3c276ff387c359e0e940b834e413b72a49917de9a82615836eca8cca1bee1ed71790606c795da795e9151"
        },
        {
          "alg": "SHA3-256",
          "content": "a8d044d3a4a069d0f20d24112b6427a3a6f02a925b31b932721d1f545ff32cec"
        },
        {
          "alg": "SHA3-512",
          "content": "3417bf811d7e5fc1e71b8540f3379751434ea8540c421ff2c8bb5f5ce34401cd0ad8a829b65aa55e055c57141181762c4827099352c2bba453e48ad2df67526a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/commons-io/commons-io@2.20.0?type=jar",
      "externalReferences": [
        {
          "url": "https://commons.apache.org/proper/commons-io/",
          "type": "website"
        },
        {
          "url": "https://github.com/apache/commons-io/actions",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://issues.apache.org/jira/browse/IO",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/commons-user/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitbox.apache.org/repos/asf?p=commons-io.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.core/jersey-client@3.1.11?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.core",
      "name": "jersey-client",
      "version": "3.1.11",
      "description": "Jersey core client implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e50f99ed8ed91671bc17a1454a49360e"
        },
        {
          "alg": "SHA-1",
          "content": "d33fa8450c53b5d4c3405e9fecdf68e8d190af64"
        },
        {
          "alg": "SHA-256",
          "content": "9f0f532a6babb530f4c7d6fc4f452b996a97aa7c34248bf249eea8a2ce639758"
        },
        {
          "alg": "SHA-512",
          "content": "a624514b570a3aa200b3ce904c26a29ef6beeb065b826fa4fcf16fc115467876c57078207b9afdeacd5e6fa44dc25dc76685ef90ae1b3632d112ab3d44ba4858"
        },
        {
          "alg": "SHA-384",
          "content": "6f8a2799a1cd169ac532b028230985775b159118e7cdf292876b98db567afc21449cb8980cda71c4a32979f1e582aa9d"
        },
        {
          "alg": "SHA3-384",
          "content": "43401bbac6afc4a329c5cb6cda65dfcf53d3687f214092b344fdf1bb2b793e92fea3c6371a01791e594ab1b10d637732"
        },
        {
          "alg": "SHA3-256",
          "content": "b752672ed716a592eea6049e59f9e8594c6ab41a956da1d4469e723732c037e2"
        },
        {
          "alg": "SHA3-512",
          "content": "2133df0f95da92baff5f2bdcd19aac70506212b19b4fc454f46838dd54ae068f164eb082763842b9921f3d129da60ae0f07b2c295f42646b9e285f2ae8d33765"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.core/jersey-client@3.1.11?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/jersey-client",
          "type": "website"
        },
        {
          "url": "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/",
          "type": "build-system"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/jersey-client",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@3.1.11?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.containers",
      "name": "jersey-container-servlet",
      "version": "3.1.11",
      "description": "Jersey core Servlet 3.x implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "24c4e8ca34668a81948cb69bd260f732"
        },
        {
          "alg": "SHA-1",
          "content": "ce07cde6cbed8e612a605da0a0978417688d4c48"
        },
        {
          "alg": "SHA-256",
          "content": "dfb7bd433c1648ae0dd037b4d21093225333564ed01d751b5eb6e2a099dec160"
        },
        {
          "alg": "SHA-512",
          "content": "38ee1d8102c810cc7787253ae584dfcfc722adf48a9828a02a9d137aa1f1bc56b8ed5f0101fd7304f0fcf0c33b54b5529de7c507f00b8b93ef1cb7367d9921e2"
        },
        {
          "alg": "SHA-384",
          "content": "d90b299aa8be086a5d53e55075fe667a315d17ad3c25013dcda59394fc0714be3d83826a1505b3e3a9e088a083179e0a"
        },
        {
          "alg": "SHA3-384",
          "content": "40f50996e98396a5ba2813e1e4b267511a4723a9c361995ed8aeca982612ec0566c3afeadae916940a23d3d3560c6c5e"
        },
        {
          "alg": "SHA3-256",
          "content": "3ba8be7a368199f258784768535d26562e54bf4d444ab8525b81d25060488c62"
        },
        {
          "alg": "SHA3-512",
          "content": "447034de5a7a7654fa992c9b3deedcb9be9e2a9d0f1fbd6d0bf784ba6f4d8ada71965f180222666913c5364d89f73c13382e0abe37a97f546a66674dcd5c7855"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@3.1.11?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-container-servlet",
          "type": "website"
        },
        {
          "url": "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/",
          "type": "build-system"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/project/jersey-container-servlet",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet-core@3.1.11?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.containers",
      "name": "jersey-container-servlet-core",
      "version": "3.1.11",
      "description": "Jersey core Servlet 3.x implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b00f1766cd2b102572f9f0aa85710106"
        },
        {
          "alg": "SHA-1",
          "content": "1ed90ffac6a6cfd9a496a3a8002dc0b2037470c4"
        },
        {
          "alg": "SHA-256",
          "content": "4c93b928d93037d7250ab1db9b9eb5e2bd12cf9e67cd48d25dcc835249d47e40"
        },
        {
          "alg": "SHA-512",
          "content": "73f2720a82ffefe9738c43994e576d742cf14bbe9e739f9bb0f8c86698b02113e7ce6dcbeef5ff43f40b0280d9ed6b76bbcb72bcfc76fdbe9b5cb568284fdae8"
        },
        {
          "alg": "SHA-384",
          "content": "0bcafdb979cf1b3394c26e30b0a3f62bdd2d8d6718518a164af760add374cf050e3006f55f233966ff7d85381281da7b"
        },
        {
          "alg": "SHA3-384",
          "content": "4438961e7169b56878b86ccf4370493ad6fca43aa4dea27257738adf918412e65df751bb0d0be8f8077bfa251a09aea8"
        },
        {
          "alg": "SHA3-256",
          "content": "66a71f8ef39ddf6666c5d59df0765d14e9fde87fe0265299c225d54ecfd4f48c"
        },
        {
          "alg": "SHA3-512",
          "content": "58a85338428a4543b17e8e81e4bbfa7723291ae4aa0fecd78af8535912ed19361f0f3ba8b7d27038c5a959c6d9566d26ab8954020dc6e21c94f756996890e4fa"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet-core@3.1.11?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-container-servlet-core",
          "type": "website"
        },
        {
          "url": "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/",
          "type": "build-system"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/project/jersey-container-servlet-core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.media/jersey-media-json-jackson@3.1.11?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.media",
      "name": "jersey-media-json-jackson",
      "version": "3.1.11",
      "description": "Jersey JSON Jackson (2.x) entity providers support module.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "7df9f3496472c234a665dbcb4c37c994"
        },
        {
          "alg": "SHA-1",
          "content": "c6f8fcee52cbfdacb2e611c37dc8d4fced320f21"
        },
        {
          "alg": "SHA-256",
          "content": "dbb0212c3ca4e8f9ff4640be37825c6617ea176bdad2c22f3d4e13ba13cc3b1d"
        },
        {
          "alg": "SHA-512",
          "content": "7b17ddb16b687c5e19785b8678155f8f091e741c51a2414c838d19e5b6ceb83657abf276c5e5c8014c7ffa5d19f0f75050856d26b64dc9f91d2ed1ebb4b10068"
        },
        {
          "alg": "SHA-384",
          "content": "289d9d640a50292d609e6cd77803eed1c9d224abb1f34b874a3d02e08eac7f0cb6ad63997527641fdcbbf85d998458f1"
        },
        {
          "alg": "SHA3-384",
          "content": "f50d2c77700a9aee56ed73036d76c07f2b04ff7d35874e448504def3c1ba4e29b43b78db0af2fd2fdc825ff2d3baa96b"
        },
        {
          "alg": "SHA3-256",
          "content": "e7e57a0bdba799a0ebab34a3b1a89b5d1b428c9c85ed8cd2a28083a52027aed1"
        },
        {
          "alg": "SHA3-512",
          "content": "5f12c1cd51e73ad5596fb2836ac83770b42bc4682bd300c85afb89a6a6687f167243bc268145b07b5e657596a8a3daa30086d61144cf57f5d4349089bf051215"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "name": "The GNU General Public License (GPL), Version 2, With Classpath Exception",
            "url": "https://www.gnu.org/software/classpath/license.html"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.media/jersey-media-json-jackson@3.1.11?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-media-json-jackson",
          "type": "website"
        },
        {
          "url": "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/",
          "type": "build-system"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/project/jersey-media-json-jackson",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.ext/jersey-entity-filtering@3.1.11?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.ext",
      "name": "jersey-entity-filtering",
      "version": "3.1.11",
      "description": "Jersey extension module providing support for Entity Data Filtering.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "29fe11fc60cd826b77239d94763f478b"
        },
        {
          "alg": "SHA-1",
          "content": "d4e618838d81c88972989451880e55baa2143ade"
        },
        {
          "alg": "SHA-256",
          "content": "7c75bc830103d6aaed08f80f0f38701c981043f4fccbce93797e63b46c03f3f1"
        },
        {
          "alg": "SHA-512",
          "content": "055e87d0289d27960e7da0569c85c5b7f9622ff150722a12de99789668165eed2bd8b9243b14c78e878accdd3a043273b00bf74908c7668d7c2931f37fe3e644"
        },
        {
          "alg": "SHA-384",
          "content": "e2bc46dcf6ef1a41cbc9b2ec08d16ffd271894d49ab06bf82620e6756ff89da39c2ddd3003a13b090945333b7b1b6705"
        },
        {
          "alg": "SHA3-384",
          "content": "f1e35fc537d0ca88d537896ecaf15292f98dd0d795873ba56b21d8973a93ce63838b7c13aee0a22a3a91812412160b0b"
        },
        {
          "alg": "SHA3-256",
          "content": "2a34d8ec90a8b6ed6a1f73ee7cc134863647be0a106b5b004cfbc091df105b63"
        },
        {
          "alg": "SHA3-512",
          "content": "ef7a36884422980e13c7a0ada6ef63d4881d523a55426aa154d1143c82f6844dd5f3c7fa223ecc6b45cc9115033ad82aa615315b86233bf9b69249ab2b6b6b69"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.ext/jersey-entity-filtering@3.1.11?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-entity-filtering",
          "type": "website"
        },
        {
          "url": "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/",
          "type": "build-system"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/project/jersey-entity-filtering",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.module/jackson-module-jakarta-xmlbind-annotations@2.20.0?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.module",
      "name": "jackson-module-jakarta-xmlbind-annotations",
      "version": "2.20.0",
      "description": "Support for using Jakarta XML Bind (aka JAXB 3.0) annotations as an alternative to \u0022native\u0022 Jackson annotations, for configuring data-binding.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e54f4ad2d6db571945386deeb44c14c7"
        },
        {
          "alg": "SHA-1",
          "content": "ebb6e8e61dc8fabbceafedb6770d52a43440b8b4"
        },
        {
          "alg": "SHA-256",
          "content": "27904cd0d790259286816a4caa613eaac54f21eb0b227a38df0a3230737d8cb3"
        },
        {
          "alg": "SHA-512",
          "content": "ce850e4b1b1f4946e378b27ceee380216c4f46811ab69acf87c26a9785de0e4eacfd6a02548c16cdbf63179f3b9496064a0df6122001d22a3800633e50594ca4"
        },
        {
          "alg": "SHA-384",
          "content": "2bad9f21f9221fb9a3bac9c0ab1d1d06eaf3d05525f5f24fed9a2ad145dc5cc7a792693fb69c9065a33e8d4edacb9858"
        },
        {
          "alg": "SHA3-384",
          "content": "87c98a830633fbc4d51ee1cc8b17f3ef0c6b99c56108d82eb3a8dd4d2b8201450053777ce0f5f119a9dd8b277e1afea8"
        },
        {
          "alg": "SHA3-256",
          "content": "9bb882253eab0351c7bc0da4136c74da9aeae459588ba2399d7ce2376d96af44"
        },
        {
          "alg": "SHA3-512",
          "content": "f69283c989cb14fbe2b31a62983e27b2a0d56d1a0fa5e8500d58b0a797d2e3437660962b4a37fcd1d6f3787fd8fdfa8e2756360164acfccf651b379c6e0ef323"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.module/jackson-module-jakarta-xmlbind-annotations@2.20.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-modules-base",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/FasterXML/jackson-modules-base/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-modules-base/jackson-module-jakarta-xmlbind-annotations",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.media/jersey-media-multipart@3.1.11?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.media",
      "name": "jersey-media-multipart",
      "version": "3.1.11",
      "description": "Jersey Multipart entity providers support module.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "52048bfe5c1f1486b4c51775314f6c34"
        },
        {
          "alg": "SHA-1",
          "content": "bd24fc31c6d70b48b418ea97f0ddb45838e01324"
        },
        {
          "alg": "SHA-256",
          "content": "335d4b92e033f290cb9433d34d000c33ce0016c0be4d15a5297981cc6c5b433e"
        },
        {
          "alg": "SHA-512",
          "content": "9b6d95d211ecadf48f95d2758e206bacf5930056c64c9cf5744ef8a4bd14b19fe1dc88f815b1c88c40c5a0dd2fbb40f8eab2bda2542edb53f5d2d4528c0b2b7b"
        },
        {
          "alg": "SHA-384",
          "content": "df7a819c75e76f40f098e80123c98ea7de37602ca52e345093d7d12766b676dc7587012ea4547b16aa61671a1d43bac3"
        },
        {
          "alg": "SHA3-384",
          "content": "af159879f5ae22b30d5aab3ac03dd7223d70160ac63ab642df21dd604eba208743511915710264ab50f4e9bbb33297e6"
        },
        {
          "alg": "SHA3-256",
          "content": "0aff3e2c71911fc79278e2242bca1c71d7b8b2df5e7961ff63df98f2ac944489"
        },
        {
          "alg": "SHA3-512",
          "content": "b0b576b409b06277172505c6db72dcf8922ee47a39dd8c926275b3530fd31f2e7406c49874110819f20753d5dfe18307d9e5a6a52160150c29b7f6afec16e237"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.media/jersey-media-multipart@3.1.11?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-media-multipart",
          "type": "website"
        },
        {
          "url": "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/",
          "type": "build-system"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/project/jersey-media-multipart",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jvnet.mimepull/mimepull@1.9.15?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.jvnet.mimepull",
      "name": "mimepull",
      "version": "1.9.15",
      "description": "Provides a streaming API to access attachments parts in a MIME message.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "fdc35a1eae84c5a60c95d617551d4a06"
        },
        {
          "alg": "SHA-1",
          "content": "60f9a7991ad9ec1a280db8deea216a91c10aae74"
        },
        {
          "alg": "SHA-256",
          "content": "b9f586bf8844b14a33e75fe7a4b94896dc80d80b732d128777e287af14c836fa"
        },
        {
          "alg": "SHA-512",
          "content": "d80e7f2550272edefe8eebace17c8b836d72602bfff67007c6463d4c7b02a36b97467f23d358601d97882160533ed110da938082994434e2312fb0c4e0f2a19e"
        },
        {
          "alg": "SHA-384",
          "content": "dea380fc137e9784a6c6d114c0a12d4a415baa21e2ce188b952ee1bfa59baaa53e133a0c5fcde9ff1abdbf4dbe93a58b"
        },
        {
          "alg": "SHA3-384",
          "content": "c4d8fc6eff8b9325c07f037484d49e1a52ad580237ba247eec92617e15be03501862b7f64b334919077e124bb94975c5"
        },
        {
          "alg": "SHA3-256",
          "content": "648e6b07265e79912cf8191efdaf316a7f2d317e79d7e4e9b7e323556da74fac"
        },
        {
          "alg": "SHA3-512",
          "content": "14672a4a8dd2a5fe1d437a1204de922eb668ff76c72dae0acc4438fa54eb25a2f6232c75038a391428544b3e77a0a6290d84a99b9c60ea7ce743561ca9b4e1ba"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.jvnet.mimepull/mimepull@1.9.15?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/metro-mimepull",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/eclipse-ee4j/metro-mimepull/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/metro-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/metro-mimepull",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@3.1.11?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.inject",
      "name": "jersey-hk2",
      "version": "3.1.11",
      "description": "HK2 InjectionManager implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "3dc15f546bdf4c45125179ee69a87399"
        },
        {
          "alg": "SHA-1",
          "content": "3f51dfcd27ed8a773eb42f0317c9a4de07328d07"
        },
        {
          "alg": "SHA-256",
          "content": "faeee985d70b8223a9eb22baabf579d9f860141716efcaf74b0a252a63959fc3"
        },
        {
          "alg": "SHA-512",
          "content": "6a49d7561c2074bdb4a947578aa4001505e0baf2aa0df38070cddd183b23f931ba25e377e8b8a61af6d815a28dc88bd701799c780d20fb2cccc15a7375f2faca"
        },
        {
          "alg": "SHA-384",
          "content": "34a010ce8e86264cebd625c4dffc5ef126451f155992dec5c11f4fdc3ac88e77a8ab63b4e9522cfbc809646f79d584ec"
        },
        {
          "alg": "SHA3-384",
          "content": "a5435e6bd5f302a33531c167b706199269840b316c74e060651dd1b613a3299edd7e65156e112a88f81e55d2c1b2f4ce"
        },
        {
          "alg": "SHA3-256",
          "content": "b05a59b861c387f1224aa01f3fb1d4c8a33354bcf075049579a7f1804b2ce23a"
        },
        {
          "alg": "SHA3-512",
          "content": "23b37aac8574e4a5021f9cfb29b220f48fc693112339891581cc8b0854c8a7963a4b96a30b4e4a4588d99446489bb94de53051c33ad51aca5319e23635e6ab80"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@3.1.11?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-hk2",
          "type": "website"
        },
        {
          "url": "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/",
          "type": "build-system"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/project/jersey-hk2",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.hk2/hk2-locator@3.0.6?type=jar",
      "publisher": "Oracle Corporation",
      "group": "org.glassfish.hk2",
      "name": "hk2-locator",
      "version": "3.0.6",
      "description": "ServiceLocator Default Implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e976aff53fb156b02317d2b8bc40660d"
        },
        {
          "alg": "SHA-1",
          "content": "92d5c92c9f23bea4b8681c6f8d6ba3d708619f81"
        },
        {
          "alg": "SHA-256",
          "content": "e2664d21b017c3aa1518b913264602bea604edc54d356103c10afba99abd04fc"
        },
        {
          "alg": "SHA-512",
          "content": "bd5393502a4ec94b0f849ae60d5d83f5e3c29fe257d08a4a34a73524fdc172bbf58714ccfaa37e6ba6eaa8b035558c4bf5d26b61f82fb6f9d741d95e62fdb8d4"
        },
        {
          "alg": "SHA-384",
          "content": "0b6afaedd573654a40fcd628eb987f3fae13f465107e0e57c403751f49fc82bb3c12ce4fc9667fd5c952f1500c80b63b"
        },
        {
          "alg": "SHA3-384",
          "content": "bf558560ac20d535e3e5c199514ddd480cea1019c0ff37b45f4e526d3b76a8938ee58a8ac0efb0aafcd672de1ada46ca"
        },
        {
          "alg": "SHA3-256",
          "content": "0dc5dbb60795f75abdb5b2a78e569f943484f6ed5af9f9b6622382e59e3c4542"
        },
        {
          "alg": "SHA3-512",
          "content": "14e8be65a317c3dad65787f8cdf2d55c09f96a2df577533aa3c062a34e6a811dde8a793380ffd7e5e02597c0e009f91cfe93fe20c6931d856aefc2b4b88a4c3c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.hk2/hk2-locator@3.0.6?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/hk2-locator",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/hk2-locator",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@3.0.6?type=jar",
      "publisher": "Oracle Corporation",
      "group": "org.glassfish.hk2.external",
      "name": "aopalliance-repackaged",
      "version": "3.0.6",
      "description": "Dependency Injection Kernel",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e07024ce0f95aa4a8797257c97fa5774"
        },
        {
          "alg": "SHA-1",
          "content": "e3c3f17b649c97155640616026bd32b1043b3c1d"
        },
        {
          "alg": "SHA-256",
          "content": "a82b6d1a348324ef88dc807c7cd7aaf633985cbff7b30036fb61a1b86981d840"
        },
        {
          "alg": "SHA-512",
          "content": "605075fbfa84d426ace71dc40036dd604d969a657d8990996e0910c654354a06de65b52e9b24e0f863cc9196223be5c816e4b655f13e14386396952e785962b1"
        },
        {
          "alg": "SHA-384",
          "content": "9b9a142c1a9b451a9918b6f70b391821c5bbac24ed0bcd3584e57fed9ab4e2f6cd636b65c762069547703c5bdbb0547f"
        },
        {
          "alg": "SHA3-384",
          "content": "7ea7aeef9d0dbfda36f75fddb4cb8d63d96db4f3a52e085017c055a082360cd1116e1e01de88dadaaf6d35fe7618cc47"
        },
        {
          "alg": "SHA3-256",
          "content": "751c96c0799d0c275276aefbec4ac6e8df507c6941aead48d2f46e7547c3b85b"
        },
        {
          "alg": "SHA3-512",
          "content": "a5b02c7033783d556364e96c8610e3b46cc6bc5b6cf2ed3d929c5008f1caca4f77d3b975f747ea1e1ca3b9a72e54558118ce452f7470f109f0e1a072a693195d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@3.0.6?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/external/aopalliance-repackaged",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/external/aopalliance-repackaged",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.hk2/hk2-api@3.0.6?type=jar",
      "publisher": "Oracle Corporation",
      "group": "org.glassfish.hk2",
      "name": "hk2-api",
      "version": "3.0.6",
      "description": "HK2 API module",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "37d753cad17273560c48b745f024cbaa"
        },
        {
          "alg": "SHA-1",
          "content": "5a5152dea2c43384f5c07985eb27140134074ecb"
        },
        {
          "alg": "SHA-256",
          "content": "c049a21a9fd9316c7e291a2bc28835f70d25affb623dc1599a83b6b84ec83a4f"
        },
        {
          "alg": "SHA-512",
          "content": "2ab96cb843cf7fedb97ca308f0877a391cd6da57885949cb5f4ffaade890e42cde5a037709da3e905735aed67b27186603faa4d9ee83ff05b199299311c080c2"
        },
        {
          "alg": "SHA-384",
          "content": "a0397611dc07fb93b0261281028670ee63f6bf79252ab5d894ce0bba6dd5f0ad255132dae1c5f14bc20c9bdd7397c513"
        },
        {
          "alg": "SHA3-384",
          "content": "025c0326f05cbc1b757dd3a9f8da2aaf51af3cbb7f1120a5cb9f7a6cd4a1cfea5f635abb91574d1faeaf351efe83f8c8"
        },
        {
          "alg": "SHA3-256",
          "content": "766c45f469c66adbf6b3a1fcba0b981659884b53592e44fd9e8723381ce09ab3"
        },
        {
          "alg": "SHA3-512",
          "content": "4e8f754573061d23c56185ab569d307265900dd873a63b30255f1c3c34a1866a2ff49020745e58cafcd19a9b8ba73c4caf00d7377863de59aefe483897db6252"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.hk2/hk2-api@3.0.6?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/hk2-api",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/hk2-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.hk2/hk2-utils@3.0.6?type=jar",
      "publisher": "Oracle Corporation",
      "group": "org.glassfish.hk2",
      "name": "hk2-utils",
      "version": "3.0.6",
      "description": "HK2 Implementation Utilities",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4f0469e8a5957c5912639f92244a9662"
        },
        {
          "alg": "SHA-1",
          "content": "b3187d0673c0fd52de197e52c62545c34d4eda29"
        },
        {
          "alg": "SHA-256",
          "content": "fc84d85a0744b576d9ec7db5845eeb998ed532a9450dd19c8c922c3ee6926206"
        },
        {
          "alg": "SHA-512",
          "content": "2bdf1872f8401bcf39c6ea1a81475940b53aadaae171a513a2c196dafbfe1c5701e7eeb269a4dfabed5cb08f4284f48106f748946f0cab9958e8381893b65921"
        },
        {
          "alg": "SHA-384",
          "content": "5b84718eafebd903a295be59d825bdc9cc2722152ff2969c88db0fddfcc79f66de4f2f5a0ef3ff27875888de98af5668"
        },
        {
          "alg": "SHA3-384",
          "content": "3c487313866fb347fe9b52b90f6df74f830e2c3ed3d43d1dd920c500723cda8287ead009649271a70394ad1aaab958ac"
        },
        {
          "alg": "SHA3-256",
          "content": "ca99f8375cf00f996191b53737647f16214c7f81384ca6ce3097e448ccb5138a"
        },
        {
          "alg": "SHA3-512",
          "content": "4e05d078d7a70017235238abf02f7302914e4e00c96c33b91efed2d2815f298525fab3f1bc28bd9eb03581287cab2cc9e291d952cd949748fef3e381fa38c24f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.hk2/hk2-utils@3.0.6?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/hk2-utils",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/hk2-utils",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.0?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.xml.bind",
      "name": "jakarta.xml.bind-api",
      "version": "4.0.0",
      "description": "Jakarta XML Binding API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b5132a66e2d3a60904f8035a1f8a34a8"
        },
        {
          "alg": "SHA-1",
          "content": "bbb399208d288b15ec101fa4fcfc4bd77cedc97a"
        },
        {
          "alg": "SHA-256",
          "content": "57e3796ad5753640088f5f9d3c53c183f2c250b7dad90529ea3e19a5515aa122"
        },
        {
          "alg": "SHA-512",
          "content": "3628ea2ce89380f3d1c09aba611d5b1cf0b53e2a2f87689112e8153b9409995ebc9c6ab1e0e7cfcee194c8233604473bcd8e7b6c4b2aba4e0ef220332208ce70"
        },
        {
          "alg": "SHA-384",
          "content": "92170801cbeef42dfe5f14f008422fec5e17e4ef172eb2fdfd6d9f70bf269a0609b39187bf0c0f0cd6aae11502d28d37"
        },
        {
          "alg": "SHA3-384",
          "content": "559bc1752bcb888736fd48354363715676bff1f8b541239308d5510a19572430a5ba553cf7b9460149e9460b54486485"
        },
        {
          "alg": "SHA3-256",
          "content": "040475238bcea57cc293d184c25af8f88e058285e66be3e48469561fa820914b"
        },
        {
          "alg": "SHA3-512",
          "content": "49e69f0794ef9d4f37a11a847cb76f196b03ceb02858904bcfabd4832f2d0f51d21b1361325fd75b07f2195f83994e3f3bc519ffb4f9e227618a8a299f942d7a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/jaxb-api/jakarta.xml.bind-api",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jaxb-api/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jaxb-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jaxb-api.git/jakarta.xml.bind-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jaxb/jaxb-runtime@4.0.6?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jaxb",
      "name": "jaxb-runtime",
      "version": "4.0.6",
      "description": "JAXB (JSR 222) Reference Implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0e600d639f3a09ddd6fa91623a12b634"
        },
        {
          "alg": "SHA-1",
          "content": "fb95ebb62564657b2fedfe165b859789ef3a8711"
        },
        {
          "alg": "SHA-256",
          "content": "1c0d57f8c25f9605d5a2f7ad0a87581893776ac85b00b101b2651258edaa9118"
        },
        {
          "alg": "SHA-512",
          "content": "e19db2669e916992ea6acc75174070a4b5f04bb7788df03b1ede3340f5d63cf1c5055568ba1d7738e9e018716d10c3f6b26d1951faf8bba75f6ebb6ac6b16314"
        },
        {
          "alg": "SHA-384",
          "content": "a3f7264bbb6ea1722d21d12efc651c183b30498542258cf0ea096ce5c7eb17440fe5d3650afc8e976b55c3a3d0952d24"
        },
        {
          "alg": "SHA3-384",
          "content": "b6686499e954ca7caca8c1dabdffc33c3741b012f4a73b729899ffff67f4cddd5c22e7bcce87bf5337933626a4bda798"
        },
        {
          "alg": "SHA3-256",
          "content": "068377faca7e7c02a5687b7920f0661026dcd51c8b58faaf4de13db1673978be"
        },
        {
          "alg": "SHA3-512",
          "content": "f3f9a6944a1b547adbcd621fce28aa9ca07d9992e2ce224e4b4b06195205566737676981d9066ad205f8c008a5e8696d4f4895e9725a94c11bc022c525818d8b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jaxb/jaxb-runtime@4.0.6?type=jar",
      "externalReferences": [
        {
          "url": "https://eclipse-ee4j.github.io/jaxb-ri/",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jaxb-ri/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://accounts.eclipse.org/mailing-list/jaxb-impl-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jaxb-ri.git/jaxb-runtime-parent/jaxb-runtime",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jaxb/jaxb-core@4.0.6?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jaxb",
      "name": "jaxb-core",
      "version": "4.0.6",
      "description": "JAXB Core module. Contains sources required by XJC, JXC and Runtime modules.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e36c915cf47342b4fe31ffba3407b928"
        },
        {
          "alg": "SHA-1",
          "content": "8e61282303777fc98a00cc3affd0560d68748a75"
        },
        {
          "alg": "SHA-256",
          "content": "ebbd274207b4860d0dc6e2d44d6dbdb5945cede01222d2e50661d45f5d46c0f7"
        },
        {
          "alg": "SHA-512",
          "content": "f6ed3cc73361794a8e35fc04f09212aa21af9575f36f6440bf33a6d43708ded6142a9be51d9d08d6e5debc262d87c158f0e199ed041a78fb1e0086fd02868a28"
        },
        {
          "alg": "SHA-384",
          "content": "767a28dc25cc9a728576a9a3e6081e24c9018ee664c04782592e14546087e8cadacbc13cdf0b2eff88840b8be10958ca"
        },
        {
          "alg": "SHA3-384",
          "content": "2033beeccf8d5ae1775ffffe41e09a662e03a67d70fdded7fdabaf5f7b14d51de1f17a9a9b65ea96d3178c9a4b0c574d"
        },
        {
          "alg": "SHA3-256",
          "content": "5e456fe8925894b58ef10e9936ddd41cde7bd3476bfb5b0d76aba046ca1c9e5f"
        },
        {
          "alg": "SHA3-512",
          "content": "51d4c57f3e1cd5440d3714cb8fe147c74aa40773c5b2a8a804496d361037e6d8dfa86f02f19f4dbbbc327b2fdac30ec83fe82bf720a9db0f8516cb800a7ec62b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jaxb/jaxb-core@4.0.6?type=jar",
      "externalReferences": [
        {
          "url": "https://eclipse-ee4j.github.io/jaxb-ri/",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jaxb-ri/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://accounts.eclipse.org/mailing-list/jaxb-impl-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jaxb-ri.git/jaxb-core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jaxb/txw2@4.0.6?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jaxb",
      "name": "txw2",
      "version": "4.0.6",
      "description": "TXW is a library that allows you to write XML documents.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0bf7070aee3bb53640d2ea6441e059fb"
        },
        {
          "alg": "SHA-1",
          "content": "4f4cd53b5ff9a2c5aa1211f15ed2569c57dfb044"
        },
        {
          "alg": "SHA-256",
          "content": "fcc749785412ef3806fde1ce70f93ef5a0065dcc47fe449bc871db0795cb11af"
        },
        {
          "alg": "SHA-512",
          "content": "47eb0e4b199bb12804da94cf8a81a1e652e8ca31af68b65d52f1a0cda6e1c9b41276e4bc1e4ea510f83ecccff9978ff8bd05a56c5b16a4181d8e0673d608b2c4"
        },
        {
          "alg": "SHA-384",
          "content": "a28256c538462ea28a37dc01b60cf6d4dcba6d54146bdc762fbf4a0426bbbd3555c20d3164508dc8860ad7e652f80cc1"
        },
        {
          "alg": "SHA3-384",
          "content": "d220fc81c28a004c31e4469e27cb0d5d9b0e358bcbd3c0989e4b0065e7c081464c7091b8553c98cc060934305d468aa5"
        },
        {
          "alg": "SHA3-256",
          "content": "de4b8f8a5fe13b14d7ac56a8e1ae705f2160a6e873a997b72827ba5f124f7907"
        },
        {
          "alg": "SHA3-512",
          "content": "ea807533e719e593d7c3e12bc5eba7c84cebf01c398c1ff92122578a04849cc64b7ce300142261475e8d8a35cfaeb53faddd68b905c0309a21d5f27479b98ed3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jaxb/txw2@4.0.6?type=jar",
      "externalReferences": [
        {
          "url": "https://eclipse-ee4j.github.io/jaxb-ri/",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jaxb-ri/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://accounts.eclipse.org/mailing-list/jaxb-impl-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jaxb-ri.git/jaxb-txw-parent/txw2",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.sun.istack/istack-commons-runtime@4.1.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "com.sun.istack",
      "name": "istack-commons-runtime",
      "version": "4.1.2",
      "description": "istack common utility code",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "535154ef647af2a52478c4debec93659"
        },
        {
          "alg": "SHA-1",
          "content": "18ec117c85f3ba0ac65409136afa8e42bc74e739"
        },
        {
          "alg": "SHA-256",
          "content": "7fd6792361f4dd00f8c56af4a20cecc0066deea4a8f3dec38348af23fc2296ee"
        },
        {
          "alg": "SHA-512",
          "content": "c3b191409b9ace8cccca6be103b684a25f10675977d38f608036ffb687651a74fd4581a66e1c38e588e77165d32614e4b547bff412379f7a84b926ccb93515bb"
        },
        {
          "alg": "SHA-384",
          "content": "9b8e20b08b109c485c654359ede00fcef74d85ac18f9c7978acd47bf630838d21ea193f79d144e66cf0f6992efd82ff8"
        },
        {
          "alg": "SHA3-384",
          "content": "81c4cf19a5d0f078263cc8f9320d4208da28e25b93c1f45885e237148a3a7c7266ba7586a1eb5cd3efc86be6f90082bc"
        },
        {
          "alg": "SHA3-256",
          "content": "218aa7dd7bca7cfdbee752bb1c2737a7066b47058a42b4ee466a14350bcd2741"
        },
        {
          "alg": "SHA3-512",
          "content": "74770476681a130a3057fdfa2df3977b8aa9bbf1a520d9481694d0e9e0635c2e88d74ff73bbb870de34d93d0a4b6eae7f030e4ba12fbcc51debde58897fdcb6c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.sun.istack/istack-commons-runtime@4.1.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j/istack-commons/istack-commons-runtime",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jaxb-istack-commons/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jaxb-impl-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jaxb-istack-commons/istack-commons-runtime",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.json/jakarta.json-api@2.1.0?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.json",
      "name": "jakarta.json-api",
      "version": "2.1.0",
      "description": "Jakarta JSON Processing defines a Java(R) based framework for parsing, generating, transforming, and querying JSON documents.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1279d8783f4a03345baf05cca23a298a"
        },
        {
          "alg": "SHA-1",
          "content": "1e713a9cd9ea9bd4dc6ec263d47e1b7f1cf18082"
        },
        {
          "alg": "SHA-256",
          "content": "01663e555ab3d0a5d082c9763e3ef739ca48dae3a40bc8bf526b0725b7213257"
        },
        {
          "alg": "SHA-512",
          "content": "dce971d9bae9e5a20a4865ceec866ef93742524b48dbd3a0b8d259bb18ceef03ad25f621c9b03a51ee74eca119f4a962d77c475143b7b8a1026973e2d9abbfbe"
        },
        {
          "alg": "SHA-384",
          "content": "17a8512e6c78112c8db8e1817fd787b8f48f4938febca8b3757696e8ab2a7959572ce3e286933bb6ec602b983ad1dce7"
        },
        {
          "alg": "SHA3-384",
          "content": "01137d2b0c3f880d9d77f175f0cca6198ea8ab9549f0b7c50cb275a07ef57514018b6c474e7e2cc12afc486cc7273917"
        },
        {
          "alg": "SHA3-256",
          "content": "2970f253fd2182f2581fa8f09350def7d5ad7bbda5a6b093b0f235c4ae9ba69b"
        },
        {
          "alg": "SHA3-512",
          "content": "b6d0a39a339ff363a0643f48945217945c7eab3b6275e31739cdf4623fc90c9aacf428384e71365031f9d7d10a30da01d2b33466ab067d7b6640b447c72b532b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "name": "GNU General Public License, version 2 with the GNU Classpath Exception",
            "url": "https://projects.eclipse.org/license/secondary-gpl-2.0-cp"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.json/jakarta.json-api@2.1.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/jsonp",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/eclipse-ee4j/ee4j/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jsonp",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.parsson/jakarta.json@1.1.7?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.eclipse.parsson",
      "name": "jakarta.json",
      "version": "1.1.7",
      "description": "Default provider for Jakarta JSON Processing",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "68b696da0b95318047ff3a2403bfd86d"
        },
        {
          "alg": "SHA-1",
          "content": "91a668f91f296fe82c6a25cb0175b733e9e05fe7"
        },
        {
          "alg": "SHA-256",
          "content": "5905f52283a7491e06ba58556103d45c3199a42602abcd36d510ceda65490ff0"
        },
        {
          "alg": "SHA-512",
          "content": "32d57ea7b52edd91967e13f2812ddea03785d3b2b75f1a35e7567ece81b95b015ce9372fe044d8cdfe5a2cfe27df5a124cb653f5750332a7a9f583c9c429e076"
        },
        {
          "alg": "SHA-384",
          "content": "9b41d27f58cd2f3f787a7ff744f366b5cfe2f23892983bee8305a45c75c846da935155e67132b16e510261c6573611ec"
        },
        {
          "alg": "SHA3-384",
          "content": "2fa091c2f4c818e1296eb3652b212a866c86a804e003cfa81f7c2a328e38b4cfeea3601899321ea3a23671bc8dd5c032"
        },
        {
          "alg": "SHA3-256",
          "content": "6c61679b2f56bf5921c12244452f1dd2a555f73888258f66b8af026f71bfcd87"
        },
        {
          "alg": "SHA3-512",
          "content": "a39ffc271743b687342ef32a2b5be3f5cbfe97b6a09b9832ce5262008af6f77e7fd2f249f141a6ffc295f9e02a444f090dc5187db8b8744d0c32ece338e261c7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "name": "GNU General Public License, version 2 with the GNU Classpath Exception",
            "url": "https://projects.eclipse.org/license/secondary-gpl-2.0-cp"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.parsson/jakarta.json@1.1.7?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/parsson/parsson-bundles/jakarta.json",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/eclipse-ee4j/ee4j/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/parsson/parsson-bundles/jakarta.json",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.h2database/h2@2.4.240?type=jar",
      "group": "com.h2database",
      "name": "h2",
      "version": "2.4.240",
      "description": "H2 Database Engine",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "fb14a47b07dfd4381a608d3adb89dc25"
        },
        {
          "alg": "SHA-1",
          "content": "686180ad33981ad943fdc0ab381e619b2c2fdfe5"
        },
        {
          "alg": "SHA-256",
          "content": "29b70e427cc1c40cdc376283adbb0cc62853073797bb5fe5761f81fe73d57ce0"
        },
        {
          "alg": "SHA-512",
          "content": "dfe71fb621ae7e3b737da883325ff557a03db185d0b5e27800911e8512866cf4fc4e555de7be1d93cc5abb5903d9588a10d746812438a8e019bc9729131df218"
        },
        {
          "alg": "SHA-384",
          "content": "89ffc001b299d9aa9017e30c901539042c1bceadfb329073395ba97d59068d6dbfdf50486507d977086eddad7760dfea"
        },
        {
          "alg": "SHA3-384",
          "content": "fe8e25377fa6fd15dbfb2f81673d20a199a7cdbb8c36de512820c6d41d45933044d6e508235ca946dc8fa4c1e83efd66"
        },
        {
          "alg": "SHA3-256",
          "content": "655173946406292168468f9f805f3642c920dcb48cb7a59a2efcd9f0a3738c0e"
        },
        {
          "alg": "SHA3-512",
          "content": "e2de4ce8067df0c23746f6357952afd8b0a73018b2a7eea77bc85a1bc21f1baff2aee69d829a15dcf83670079802d46be71f071c185f431908db974e88958f52"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MPL-2.0"
          }
        },
        {
          "license": {
            "name": "EPL 1.0",
            "url": "https://opensource.org/licenses/eclipse-1.0.php"
          }
        }
      ],
      "purl": "pkg:maven/com.h2database/h2@2.4.240?type=jar",
      "externalReferences": [
        {
          "url": "https://h2database.com",
          "type": "website"
        },
        {
          "url": "https://github.com/h2database/h2database",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.mindrot/jbcrypt@0.4?type=jar",
      "group": "org.mindrot",
      "name": "jbcrypt",
      "version": "0.4",
      "description": "OpenBSD-style Blowfish password hashing for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d2b39d874e0d512f85386a72b0083682"
        },
        {
          "alg": "SHA-1",
          "content": "af7e61017f73abb18ac4e036954f9f28c6366c07"
        },
        {
          "alg": "SHA-256",
          "content": "e183f6f59404fc1e12073cfea4ace7ea103c900463cd21fb609a7c617ecdf624"
        },
        {
          "alg": "SHA-512",
          "content": "95ffe1f6593f83da047ff289a52b5ef73adcaca4a9a990a47744fbd50a52fce39958c17ed393e95d64093b2acbcaba39ba0b5b983a2e0ad98ce5c6e9282a67cd"
        },
        {
          "alg": "SHA-384",
          "content": "66a24af2134e6fcee1f4232c2c4bab43ab97d0c8ffbbc009f9bb0e5ef2a7d8795a6da3c6b47c583675b98036958aa729"
        },
        {
          "alg": "SHA3-384",
          "content": "33cf5e13897f25c525017888e7fcd2faf9a0f25135be03a65dd154feb11455e33c1df31963470b2ecaaba5267f6ad652"
        },
        {
          "alg": "SHA3-256",
          "content": "a347c842385e1d76780f9afe2200a7b9815bcd873b2a9fdd2652d0b0a5e0d324"
        },
        {
          "alg": "SHA3-512",
          "content": "5a71c6f1fde98865302e8c9ee6c99ace9efa220c0193bcdd56423015d1c73e54bd65f19a9a3ba3199b242589eb9ccc96b1d6c0d413387f8e8fbed7c691fc8790"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://www.isc.org/licenses/"
          }
        }
      ],
      "purl": "pkg:maven/org.mindrot/jbcrypt@0.4?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/djmdjm/jBCrypt",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/djmdjm/jBCrypt.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.nimbusds/oauth2-oidc-sdk@11.29.1?type=jar",
      "publisher": "Connect2id Ltd.",
      "group": "com.nimbusds",
      "name": "oauth2-oidc-sdk",
      "version": "11.29.1",
      "description": "OAuth 2.0 SDK with OpenID Connection extensions for developing client and server applications.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6574d7e97982a34d8d279f05ecca5c60"
        },
        {
          "alg": "SHA-1",
          "content": "bdf3e1da2eecd9d0d630e0340359dcd9bbb36498"
        },
        {
          "alg": "SHA-256",
          "content": "861dee3791c28ea0e07f330fb1073a8bff5e50220b756117a13fef062d3e7af4"
        },
        {
          "alg": "SHA-512",
          "content": "0ce7aad00e93b8f84fdee53acbe9fa947fce4f89cfc0eff1518cf470ef73af835d7fe1e9a827d83f63435fee4afd003ae2ec6950e0802bef62e10b773139c826"
        },
        {
          "alg": "SHA-384",
          "content": "f56a2e369fbe447fe9c1f88bdb162095c855ac8774e0ffd406a76498c2200f49c8af040027f322d509f4be8f68b8119c"
        },
        {
          "alg": "SHA3-384",
          "content": "e339ffd35db1d86fbaccee2fc3c25a2c45bf64acc40f67492ad045f8ae8dba1ca08d7a1847ece97aaea79849d86f4285"
        },
        {
          "alg": "SHA3-256",
          "content": "adeccf89d07b7fdc6c88e27bd235c191592ccd0833e48b7fa3711d35d904e3e3"
        },
        {
          "alg": "SHA3-512",
          "content": "3be66cccf7bf5f53c2063248cba97c50fc74b998898b0e26b997333c21d214fa1f7f3ef16cc423bc0de1f52a706770ec1d7ffef94b705a5d9d39bb207d2d1f8b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.nimbusds/oauth2-oidc-sdk@11.29.1?type=jar",
      "externalReferences": [
        {
          "url": "https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar",
      "group": "com.github.stephenc.jcip",
      "name": "jcip-annotations",
      "version": "1.0-1",
      "description": "A clean room implementation of the JCIP Annotations based entirely on the specification provided by the javadocs.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d62dbfa8789378457ada685e2f614846"
        },
        {
          "alg": "SHA-1",
          "content": "ef31541dd28ae2cefdd17c7ebf352d93e9058c63"
        },
        {
          "alg": "SHA-256",
          "content": "4fccff8382aafc589962c4edb262f6aa595e34f1e11e61057d1c6a96e8fc7323"
        },
        {
          "alg": "SHA-512",
          "content": "02fcd16a30d0e68b3e9e4899731181c6abb7117baa15c096ca940e01dde08bb86101cbeae552c497f8a90d923b5fa2f2b6f3850baf8dc94dbd399887924a9069"
        },
        {
          "alg": "SHA-384",
          "content": "88b0ecfde391a3d8468349c70e1539569768dfac3233dfe0b4660904df04e6c6bf26ed9c0784b9b22c122c3448e2a6b6"
        },
        {
          "alg": "SHA3-384",
          "content": "487b53f48b55b98a61ae60abedc43543887944867aa6bcb78d5ed46e2d0d7c19510c5fcadc362d939313feafdcfc55e1"
        },
        {
          "alg": "SHA3-256",
          "content": "3e79c8f58865d2d58a5311a8bb45772007f07e7f3ed2780784d1e4382dc934d0"
        },
        {
          "alg": "SHA3-512",
          "content": "ff32665e1b6d8176ccc7e8c836ca7343c2603dab053e42d79b4258d51a14ff63933c67d24034169ac91e11ebda21cc2c84a2a540072e656d2a8e6fcea7808421"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar",
      "externalReferences": [
        {
          "url": "http://stephenc.github.com/jcip-annotations",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "http://github.com/stephenc/jcip-annotations/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/stephenc/jcip-annotations/tree/master/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.nimbusds/content-type@2.3?type=jar",
      "publisher": "Connect2id Ltd.",
      "group": "com.nimbusds",
      "name": "content-type",
      "version": "2.3",
      "description": "Java library for Content (Media) Type representation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f0fc0d6be73e838863e2197c03a27c3f"
        },
        {
          "alg": "SHA-1",
          "content": "e3aa0be212d7a42839a8f3f506f5b990bcce0222"
        },
        {
          "alg": "SHA-256",
          "content": "60349793e006fba96b532cb0c21e10e969fe0db8d87f91c3b9eaf82ba2998895"
        },
        {
          "alg": "SHA-512",
          "content": "58f7fe3b4303cecd6eac73c3345af71536479ce4bc38c88153bdcf6176a7cf5a0875420ea4a6024b4e734b78de08a8e544014b435cb63416c759b957ad3818e4"
        },
        {
          "alg": "SHA-384",
          "content": "9dbe31f543aaf807093fe1dd18a0ed33346252e2f6fce598e1b193b9d73fcebf79608fce6a620ede8ea7adf45f1a7422"
        },
        {
          "alg": "SHA3-384",
          "content": "67b8b5d051230739ee85678006758450cd6510c5fb9a6b3134d43f644c2d70bc6dc3cff6133b132b5b158a1f346880a9"
        },
        {
          "alg": "SHA3-256",
          "content": "b8046b3dd12321400b4643ff0c47ea5c1e77d6252177bdd8be6f0e0b234c80bf"
        },
        {
          "alg": "SHA3-512",
          "content": "734a6a5a383aac8dcfaca09c8e37637f74334ce2d5c050b519277ad7c20f065fad44b5a6417cdc32d6cd43f80c0e1e0c37d9daa9279651facb6c38cb88376396"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.nimbusds/content-type@2.3?type=jar",
      "externalReferences": [
        {
          "url": "https://bitbucket.org/connect2id/nimbus-content-type",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://bitbucket.org/connect2id/nimbus-content-type",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/net.minidev/json-smart@2.5.2?type=jar",
      "publisher": "Chemouni Uriel",
      "group": "net.minidev",
      "name": "json-smart",
      "version": "2.5.2",
      "description": "JSON (JavaScript Object Notation) is a lightweight data-interchange format. It is easy for humans to read and write. It is easy for machines to parse and generate. It is based on a subset of the JavaScript Programming Language, Standard ECMA-262 3rd Edition - December 1999. JSON is a text format that is completely language independent but uses conventions that are familiar to programmers of the C-family of languages, including C, C\u002B\u002B, C#, Java, JavaScript, Perl, Python, and many others. These properties make JSON an ideal data-interchange language.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e3ad34c55c0d2627255f79f4411c6bdd"
        },
        {
          "alg": "SHA-1",
          "content": "95d166b18f95907be0f46cdb9e1c0695eed03387"
        },
        {
          "alg": "SHA-256",
          "content": "4fbdedb0105cedc7f766b95c297d2e88fb6a560da48f3bbaa0cc538ea8b7bf71"
        },
        {
          "alg": "SHA-512",
          "content": "087931c6f254c7e54ff75b6e94983d062b62b68356a988a5ed276819bcb4fafbad2f0bbc363e16c8daa09ed8189241f08eff6e8e5f5f3ddc770b541d96fc8e2d"
        },
        {
          "alg": "SHA-384",
          "content": "25562d80d717cde53ae3c8049f14fb74a85c86ef14ece2e8136b604edbd3a67df8a46628dc36e6a07dcf5949d9ce1451"
        },
        {
          "alg": "SHA3-384",
          "content": "3aaa1b156a994fa858f7e46c1ebedebe9063e9afbd72c9ca886dd41f3c4ca8dcdd6dd457daa5ed167929d3741aed075c"
        },
        {
          "alg": "SHA3-256",
          "content": "e387c386e5f81247ea4add698626d06e8a2c2fe5768b7440a0fd6fb56ad99d75"
        },
        {
          "alg": "SHA3-512",
          "content": "aa2a4c9daa3bff63615ed483e9faa978b0131758c541a9591e6da8186af73d32f73a38e954272f2f0aa1606b38555f6471ea232eebc146a4fb83151bbae60484"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/net.minidev/json-smart@2.5.2?type=jar",
      "externalReferences": [
        {
          "url": "https://urielch.github.io/",
          "type": "website"
        },
        {
          "url": "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/netplex/json-smart-v2",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/net.minidev/accessors-smart@2.5.2?type=jar",
      "publisher": "Chemouni Uriel",
      "group": "net.minidev",
      "name": "accessors-smart",
      "version": "2.5.2",
      "description": "Java reflect give poor performance on getter setter an constructor calls, accessors-smart use ASM to speed up those calls.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "24191e0bb215c72902e89f46dde839e1"
        },
        {
          "alg": "SHA-1",
          "content": "ce16fd235cfee48e67eda33e684423bba09f7d07"
        },
        {
          "alg": "SHA-256",
          "content": "9b8a7bc43861d6156c021166d941fb7dddbe4463e2fa5ee88077e4b01452a836"
        },
        {
          "alg": "SHA-512",
          "content": "3bbd29761622714ac61dbe02b8351188573f819bdabfb4025196a3f1561bfe52cc308af9208184f7339c66988e7f8ad323c5cd7b0fa8463321b6bb03e4a9181e"
        },
        {
          "alg": "SHA-384",
          "content": "9640df1f3b1bc02ca025e990776727ca3265de08db88e9d08072567e08cb4c1083e8a1644f053caeb4f21fdd2e48ec4b"
        },
        {
          "alg": "SHA3-384",
          "content": "90e220e6dfb5c39a208c3395aa525de2a59ff4525de57a5a496d683be3fc0c58f8ce38411e875434aa3042394dc46e24"
        },
        {
          "alg": "SHA3-256",
          "content": "fa935f2190565214b4fce84be12d4f9b052e9bbf5b1116fa82bcc7f9d7f4c301"
        },
        {
          "alg": "SHA3-512",
          "content": "da0fe2eb9ce26fd44decb2d735fb04597b31225e9c6b76b4678db29ec48292fccc9fcbcc72c5f3b7854aeef9d797da2016b61dd86802c07e1c6f6e4afea872ad"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/net.minidev/accessors-smart@2.5.2?type=jar",
      "externalReferences": [
        {
          "url": "https://urielch.github.io/",
          "type": "website"
        },
        {
          "url": "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/netplex/json-smart-v2",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.ow2.asm/asm@9.7.1?type=jar",
      "publisher": "OW2",
      "group": "org.ow2.asm",
      "name": "asm",
      "version": "9.7.1",
      "description": "ASM, a very small and fast Java bytecode manipulation framework",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e2cdd32d198ad31427d298eee9d39d8d"
        },
        {
          "alg": "SHA-1",
          "content": "f0ed132a49244b042cd0e15702ab9f2ce3cc8436"
        },
        {
          "alg": "SHA-256",
          "content": "8cadd43ac5eb6d09de05faecca38b917a040bb9139c7edeb4cc81c740b713281"
        },
        {
          "alg": "SHA-512",
          "content": "4767b01603dad5c79cc1e2b5f3722f72b1059d928f184f446ba11badeb1b381b3a3a9a801cc43d25d396df950b09d19597c73173c411b1da890de808b94f1f50"
        },
        {
          "alg": "SHA-384",
          "content": "166e2be10a19ca6a6d7cadb542eb1c948562483f02557b467a50a3d19d01318e12e5c3b495c482f3f5369be1b7f20eed"
        },
        {
          "alg": "SHA3-384",
          "content": "e301862376e84df61c3547dbf637252750224fb5b74feb82f20e1527a8e3152c45f620192a9111a2db5e2f0e73ebd7ca"
        },
        {
          "alg": "SHA3-256",
          "content": "7edcc4ff09b3ace15091a8c550f552a324b5cee6c1527944db5823df7eba8d64"
        },
        {
          "alg": "SHA3-512",
          "content": "9d220edc5528e4d788605721490f3d29483dd4bd506765e85d781048419aa89b686a70e316b82ef2a856ead56bb7be6b5d52d77b7ca6f27d5e0e347e9669d731"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.ow2.asm/asm@9.7.1?type=jar",
      "externalReferences": [
        {
          "url": "http://asm.ow2.io/",
          "type": "website"
        },
        {
          "url": "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail.ow2.org/wws/arc/asm/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.nimbusds/lang-tag@1.7?type=jar",
      "publisher": "Connect2id Ltd.",
      "group": "com.nimbusds",
      "name": "lang-tag",
      "version": "1.7",
      "description": "Java implementation of \u0022Tags for Identifying Languages\u0022 (RFC 5646)",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "31b8a4f76fdbf21f1d667f9d6618e0b2"
        },
        {
          "alg": "SHA-1",
          "content": "97c73ecd70bc7e8eefb26c5eea84f251a63f1031"
        },
        {
          "alg": "SHA-256",
          "content": "e8c1c594e2425bdbea2d860de55c69b69fc5d59454452449a0f0913c2a5b8a31"
        },
        {
          "alg": "SHA-512",
          "content": "494267766c974ce16a99cb221953edc91fde8db0c920230758ecea0ea9d3006e95d86ad46f7a9d61b810d85b0fa6da9a3ce2b507cdbe4be320c499eaea93666b"
        },
        {
          "alg": "SHA-384",
          "content": "fdc2cde39a1b07a2542cbc07222afd6292ae19cb1f9ae008476f7ec1b8ebe1e3e84aca08e47e1ef81887a23ac5267d00"
        },
        {
          "alg": "SHA3-384",
          "content": "b0e673087533f60173a11a55b0fde554c0830e7b3b6609e1ea6546de19fc9a97fbfe6eee73580d09b2de66989d0603c7"
        },
        {
          "alg": "SHA3-256",
          "content": "ea208d4eb55212ce9835a9be60396861b0fc33f4161efee3736c3e7159acb9f7"
        },
        {
          "alg": "SHA3-512",
          "content": "450f819981d73711c30d838261ff55a7f1988c8b965c786708dc27fbd10a2018cfde82b8fee5d7d1022eacf085dfdabe22d9de92462eba80e2c15a116c3c73ed"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.nimbusds/lang-tag@1.7?type=jar",
      "externalReferences": [
        {
          "url": "https://bitbucket.org/connect2id/nimbus-language-tags",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://bitbucket.org/connect2id/nimbus-language-tags.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.nimbusds/nimbus-jose-jwt@10.4.2?type=jar",
      "publisher": "Connect2id Ltd.",
      "group": "com.nimbusds",
      "name": "nimbus-jose-jwt",
      "version": "10.4.2",
      "description": "Java library for Javascript Object Signing and Encryption (JOSE) and JSON Web Tokens (JWT)",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0e19826868a03025fac9cb7b5747a167"
        },
        {
          "alg": "SHA-1",
          "content": "3e46a97570e9d09b97d2b756c29620930240088a"
        },
        {
          "alg": "SHA-256",
          "content": "5a1fd41b9d036695abf20138f0849bfb8128e523718b6d0cf1cab4fde9ea446b"
        },
        {
          "alg": "SHA-512",
          "content": "4cfa6206200370e47895e551bac728de9d97c1c60949a6b14149eec9d81ca7567b44392a1cdd144276bfc34a39d491417a855c3e373e4a64e92912a6e76dda81"
        },
        {
          "alg": "SHA-384",
          "content": "956b56c6d7af6e734b4fb8ed0ea2b8581185fab56943df5444b61ebb368e8559b22f492306fd8643bc056dc2e04333e1"
        },
        {
          "alg": "SHA3-384",
          "content": "992dfc9afcdeac1f01e266b9f9827f185b1d136807d08cdb2106ee4b59328661e9a4997e594c79b37e24f99556d49f2e"
        },
        {
          "alg": "SHA3-256",
          "content": "5fa477494383ee3f5230e84e8437437771ce4ad82bf71e2534b8e503eaef7bc0"
        },
        {
          "alg": "SHA3-512",
          "content": "42ea2f74d3797490813eeab6eb3d2edfb0c74530bdfd813122c3b706183c85aa7007efecd2e02baff412f29a9b6767f7553873e233acdb9ccbc576133854f725"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.nimbusds/nimbus-jose-jwt@10.4.2?type=jar",
      "externalReferences": [
        {
          "url": "https://bitbucket.org/connect2id/nimbus-jose-jwt",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://bitbucket.org/connect2id/nimbus-jose-jwt",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-base@2.20.0?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.jakarta.rs",
      "name": "jackson-jakarta-rs-base",
      "version": "2.20.0",
      "description": "Pile of code that is shared by all Jackson-based Jakarta-RS providers.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a2f983c0072ed34eb510df58c817157f"
        },
        {
          "alg": "SHA-1",
          "content": "795df8231c1397b3a6f2afc1c4c1ffe0969feae5"
        },
        {
          "alg": "SHA-256",
          "content": "60e645162189abd2b932b9c341acf41358338a65fb4511875fb91f3a175c1ce1"
        },
        {
          "alg": "SHA-512",
          "content": "aaeb3fe7102f8ff1ac8f63c6571b4e46621bd7341bf132eab0837eba4f4608dd66ff3212191e0aa254bbf2f5ffbc86dfa09c0bf12238535608c20dac1992fd35"
        },
        {
          "alg": "SHA-384",
          "content": "67d7443d32081fc98fee3789b8c6bb61bfeb83021b431a4ce47bec417be3809f5e581d7b3c0376fcf627eabff627c1de"
        },
        {
          "alg": "SHA3-384",
          "content": "edd2132c3e1c4689675e36e93b8613f3d59e3d1dd81c5d48a63f8f2d7f746b35d99cbcb50f03bbc28d691efec058f6b3"
        },
        {
          "alg": "SHA3-256",
          "content": "9aaf00afca87b5098776d0b894d405b1f608b883b6039168e059048ae387256c"
        },
        {
          "alg": "SHA3-512",
          "content": "715761250bce02f4917b09b2dbee1e2c2ecb74d54e492c83d62957a8c67c95ee93abd1ca675d5f775d516dd528ae0a5c9401b39096464fc3133bff4a438d5593"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-base@2.20.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-jakarta-rs-providers/jackson-jakarta-rs-base",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/FasterXML/jackson-jakarta-rs-base/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-jakarta-rs-providers/jackson-jakarta-rs-base",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-json-provider@2.20.0?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.jakarta.rs",
      "name": "jackson-jakarta-rs-json-provider",
      "version": "2.20.0",
      "description": "Functionality to handle JSON input/output for Jakarta-RS implementations (like Jersey and RESTeasy) using standard Jackson data binding.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "659f360d2efbd2cd5cf8b1460071a075"
        },
        {
          "alg": "SHA-1",
          "content": "69aae0e5cbde3ff0d8de936236e4a65813f55a7b"
        },
        {
          "alg": "SHA-256",
          "content": "08bb58d39195737917637aea6df02ed09d3175f2fd0c1fe7ad34d1ab9775f438"
        },
        {
          "alg": "SHA-512",
          "content": "32358fc24a39ffc4b0061f4044f45a6bc07e61062cb1a2ba5286711061906657545ecae4e441c0f319e987b0a6217fd6f7df0973f30d0885a3fc197d2dc03b56"
        },
        {
          "alg": "SHA-384",
          "content": "7c553ad3bfaa80649f6a893b346c51c70f75dcd3f1e800d4b380d4088ee6a5b6915697e528c032f39984294d7fd682fb"
        },
        {
          "alg": "SHA3-384",
          "content": "2e4d12a1c7064e5bc9cb95eac71abc43c2b528dfba4c2c123469e18a891e800f95f85643f4a88605043e7bfcd53cac72"
        },
        {
          "alg": "SHA3-256",
          "content": "8c10b2b64fd415cabaa96496552117da7fb1920e0ab0b5ad8d40ea63036664fb"
        },
        {
          "alg": "SHA3-512",
          "content": "4e32ca8aae86654376c4610df2803bb46bc41d0cf89a069676f05a50a701d63589ea38f793c30ae1ad0d7f18f8771a10f457106442fac807f89db685393d68ba"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-json-provider@2.20.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-jakarta-rs-providers/jackson-jakarta-rs-json-provider",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/FasterXML/jackson-jakarta-rs-json-provider/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-jakarta-rs-providers/jackson-jakarta-rs-json-provider",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.20.0?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.datatype",
      "name": "jackson-datatype-jdk8",
      "version": "2.20.0",
      "description": "Add-on module for Jackson (https://github.com/FasterXML/jackson) to support JDK 8 data types.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "7ce8ed5d1df1bc9886fff006dc043d71"
        },
        {
          "alg": "SHA-1",
          "content": "3c5fdd700b08c2120afd8c899ce0f139b30f21d1"
        },
        {
          "alg": "SHA-256",
          "content": "3eae9db4a4ebb81c33067ab6683a1b12967317957f433c5dcec2a859237c4877"
        },
        {
          "alg": "SHA-512",
          "content": "3428228339f813e7656725ac0adf086fe2b4ac635eb39e5b81e7ca119f467f8e25c835619cd3626c91d93559e62bbec10937a49481a09c2295abb0cd7497de14"
        },
        {
          "alg": "SHA-384",
          "content": "6612d21ca9f9b46554b3446953a551fcfb141b65cb948fd1c79af761f822530ed39eda2355439be1ea2e87a0387a8978"
        },
        {
          "alg": "SHA3-384",
          "content": "22d5a04f26443dbc43128ed0f1abce39bf7c24c457b74b6310780eb0d9706991f726d4cbc746de0b6bdd4de8746fa06c"
        },
        {
          "alg": "SHA3-256",
          "content": "0e1723aee507abfa9524db6ba44c22a240a5d9e465b158f8d35714cc2a75a33d"
        },
        {
          "alg": "SHA3-512",
          "content": "76ee5cdf5e0859c7afd18dfbffcd21b5385ff3bc210b92f8889cdef0f777cc4a342ae334fc0c2fa0f211ed8085173a1a84a69e8277417260420857e2bf4b2dc9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.20.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jdk8",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/FasterXML/jackson-modules-java8/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jdk8",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/ch.qos.logback/logback-classic@1.5.18?type=jar",
      "publisher": "QOS.ch",
      "group": "ch.qos.logback",
      "name": "logback-classic",
      "version": "1.5.18",
      "description": "logback-classic module",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "05bd5f5d61a7efe5d5ae362df43377b5"
        },
        {
          "alg": "SHA-1",
          "content": "fc371f3fc97a639de2d67947cffb7518ec5e3d40"
        },
        {
          "alg": "SHA-256",
          "content": "3e1533d0321f8815eef46750aee0111b41554f9a4644c3c4d2d404744b09f60f"
        },
        {
          "alg": "SHA-512",
          "content": "48edf62d089a13dc3a572aedebf9f881d61690983f03831838c79caecb13cf749786ea215156d9bf39c1b936fcc32ba37dd265f7d191708c5e24ba3ba654ee50"
        },
        {
          "alg": "SHA-384",
          "content": "840863faef2c85de6b54250d9506df083dac8da479480ec8b069e19e68196b469d7e57da3f437f3d984fec61a2e37071"
        },
        {
          "alg": "SHA3-384",
          "content": "91c81faf4b98cd2a3a309dc60cd426b821f23a67ab48405168013a2dc4c53ebfb8826c690bf7dedf15d753f5342205d2"
        },
        {
          "alg": "SHA3-256",
          "content": "3efea23a6f915d59a448fb1b17bb4d0d1505b48131ffc7a092ea0210553b98ad"
        },
        {
          "alg": "SHA3-512",
          "content": "c1f29a1dd22c4de89cd62b929fa8ec75c9b9fc01d293eb0c9a9a55476c9e079a240ca83ef73d732ee79555bc36a6674f2c2ffafd67519cedd82c46b7a666e3d3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-1.0"
          }
        },
        {
          "license": {
            "name": "GNU Lesser General Public License",
            "url": "http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html"
          }
        }
      ],
      "purl": "pkg:maven/ch.qos.logback/logback-classic@1.5.18?type=jar",
      "externalReferences": [
        {
          "url": "http://logback.qos.ch/logback-classic",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/qos-ch/logback/logback-classic",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/ch.qos.logback/logback-core@1.5.18?type=jar",
      "publisher": "QOS.ch",
      "group": "ch.qos.logback",
      "name": "logback-core",
      "version": "1.5.18",
      "description": "logback-core module",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "10bcea83842beead15f072799b9c923d"
        },
        {
          "alg": "SHA-1",
          "content": "6c0375624f6f36b4e089e2488ba21334a11ef13f"
        },
        {
          "alg": "SHA-256",
          "content": "85139e7b57b464f8e5e36326dd81317648bed199ccc4f98cd42585f8d7571027"
        },
        {
          "alg": "SHA-512",
          "content": "fe6e259238f349839b6a30e71e533b5f2fa0a33a462efe9d09152518d3ad7759ce036f7c66744f1edf95eec4f7c2b7261de616aded28def93de85b8c7ab77d8f"
        },
        {
          "alg": "SHA-384",
          "content": "36a6553051967acc565898a7b7678a44d4568bfb81b7238bc12bd13d9c436799a98a49b49d8a34cd9a872a6db206463a"
        },
        {
          "alg": "SHA3-384",
          "content": "6f71dd40416fc84baaba562db7ad10f2c29a516b1b3573b3f4b7301815038679791ec30fb7ec1f3b71dfb880123ce536"
        },
        {
          "alg": "SHA3-256",
          "content": "8809ebf823a7d2b5f525c43717e4075b328edaed164ae497e2f00deb0304f7e5"
        },
        {
          "alg": "SHA3-512",
          "content": "34936208bf9fb09a7bdf4726f3c2c831f1801ea3b2288123f114c945c221d7d01aaadeb545a2f234679facb930ec3d889aa062fd38bc61747c3119a3afa4e66b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-1.0"
          }
        },
        {
          "license": {
            "name": "GNU Lesser General Public License",
            "url": "http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html"
          }
        }
      ],
      "purl": "pkg:maven/ch.qos.logback/logback-core@1.5.18?type=jar",
      "externalReferences": [
        {
          "url": "http://logback.qos.ch/logback-core",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/qos-ch/logback/logback-core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.microprofile.health/microprofile-health-api@4.0.1?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.eclipse.microprofile.health",
      "name": "microprofile-health-api",
      "version": "4.0.1",
      "description": "MicroProfile Health :: API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1d023ee3b9b8545318fdeebe98d66d74"
        },
        {
          "alg": "SHA-1",
          "content": "395ea08f4f636696fb23b84a18ba81430cfebe7c"
        },
        {
          "alg": "SHA-256",
          "content": "b89ca4b6c4f7a044250d31c0673f6bc221e40fd669fc5871dbad5e5a0769ca47"
        },
        {
          "alg": "SHA-512",
          "content": "87ea9c7443bf0dbe0a3d38f3f7fd5287e24440f6285fcafdaade6312380fcce802bfe083646669207d11d36b660f05a6ef6e27ab03f3093905821d44024e5764"
        },
        {
          "alg": "SHA-384",
          "content": "4ddaceabea79f53c70fd17c6140453a19d4a9dfc1c3e8910449ce32ddef4b9023dbccbd6dbfbad49b50316389df25c8c"
        },
        {
          "alg": "SHA3-384",
          "content": "893eef36f7b7edf98be7835597d06c81055887f7a59ea70550274032a5b7ebb1822600a185d626db36d38160d0632e6f"
        },
        {
          "alg": "SHA3-256",
          "content": "94ea43765310e56d62888eafd32d4595c1e8d91a4183ad3455f51f1b52a6d2eb"
        },
        {
          "alg": "SHA3-512",
          "content": "79ba68099a777dbd5e596d9697358bc122c53cd52cb5ba5ce3a2be1086abb1f45c2f7289540f1693c1950efe6189ff8f57a91f1d53915be3fa5abbb22597d15a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.microprofile.health/microprofile-health-api@4.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://microprofile.io/project/eclipse/microprofile-health/microprofile-health-api",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/eclipse/microprofile-health/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse/microprofile-health/microprofile-health-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.owasp.encoder/encoder@1.3.1?type=jar",
      "publisher": "OWASP (Open Web-Application Security Project)",
      "group": "org.owasp.encoder",
      "name": "encoder",
      "version": "1.3.1",
      "description": "The OWASP Encoders package is a collection of high-performance low-overhead contextual encoders, that when utilized correctly, is an effective tool in preventing Web Application security vulnerabilities such as Cross-Site Scripting.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c826f7776c4d03adcbf1a2bceef84627"
        },
        {
          "alg": "SHA-1",
          "content": "1ebf20e19ddc3fa952f4e2af220a20b085ce87ba"
        },
        {
          "alg": "SHA-256",
          "content": "c9c56c8970c7cb11b231913ba5190ce930f8fd4fac2bd918810642dc3848e757"
        },
        {
          "alg": "SHA-512",
          "content": "98ef238bbdd93e0dc18928e5d876cb3f264f2d1808cd6dc5eda3fca2f3a20b2dd53d5872b413a261ca9e0ff2726cd5b067ea14921eddc3e5c8e9d73b570b3133"
        },
        {
          "alg": "SHA-384",
          "content": "c482fe5793c29646104f72b52838f8fd674d1a0b5428f07e7f4204d05a8ea373946a014e172c0f56e44e36800ac633be"
        },
        {
          "alg": "SHA3-384",
          "content": "64f0325baa1a8e16729f6b98722904a3ae9c066e6393cf38eeb01138e8594253aa819798c5dd2f484c7344cc57d16a11"
        },
        {
          "alg": "SHA3-256",
          "content": "fb3692482e597d06305b67fc60ca0d1f5eafce6e74b4bdfebba0acd06108d897"
        },
        {
          "alg": "SHA3-512",
          "content": "2a118e5d9129545fcf17675704ec3429f88beb015ca7d161d2488d81d3b29c5000ce41d4997204dd915ff5ea41dc5dfa013df636e1197d9c3b0cc6835089e9c7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.owasp.encoder/encoder@1.3.1?type=jar",
      "externalReferences": [
        {
          "url": "https://www.owasp.org/index.php/OWASP_Java_Encoder_Project/encoder",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/owasp/owasp-java-encoder/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/OWASP/owasp-java-encoder/issues",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/owasp/owasp-java-encoder/encoder",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.owasp.encoder/encoder-jsp@1.3.1?type=jar",
      "publisher": "OWASP (Open Web-Application Security Project)",
      "group": "org.owasp.encoder",
      "name": "encoder-jsp",
      "version": "1.3.1",
      "description": "The OWASP Encoder JSP package contains JSP tag definitions and TLDs to allow easy use of the OWASP Encoder Project\u0027s core API. The TLDs contain both tag definitions and JSP EL functions.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6b2f4f8b2c5d78ca7e17d82af15b9693"
        },
        {
          "alg": "SHA-1",
          "content": "74aa129860864c70f4bbcc64185bdcb41563736f"
        },
        {
          "alg": "SHA-256",
          "content": "ffadeeeb3072aa5d7888ca01416e58a0c800ed208c1df0e9d65bd802ce389103"
        },
        {
          "alg": "SHA-512",
          "content": "b12587c12ec7202172d54f71a23a381210eb88be59b4d309bc1bbab2293008a9067ab0dded034642453e6143a3744f7cca2839f8f992e330ca0fb2e80babd9d5"
        },
        {
          "alg": "SHA-384",
          "content": "3c5d14220a2b6258910821539d895b50f40f176fb7040131424312f1239cfff11e22b969486c30da8fc63e4d7a4d247b"
        },
        {
          "alg": "SHA3-384",
          "content": "fe83a1e008aa2bd9f59811991f3da02a23f788493bd1aa2a97539fbaabfc158068800dd5463cbb86d994d8c32fda0b02"
        },
        {
          "alg": "SHA3-256",
          "content": "63756ace33eda3effd20849404fe546cf352ad8b0f9e441a8a0a4536df3d249c"
        },
        {
          "alg": "SHA3-512",
          "content": "a34ff82ca4b238bcf804ff4015aaadbd50be0fe999b730a558d27b52d729eb5b7644c0a2a4407d505d122cd273da4fc81d1c6fafd172efb37e6b4eb0fee47b9c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.owasp.encoder/encoder-jsp@1.3.1?type=jar",
      "externalReferences": [
        {
          "url": "https://www.owasp.org/index.php/OWASP_Java_Encoder_Project/encoder-jsp",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/owasp/owasp-java-encoder/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/OWASP/owasp-java-encoder/issues",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/owasp/owasp-java-encoder/encoder-jsp",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.mail/jakarta.mail-api@2.1.0?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.mail",
      "name": "jakarta.mail-api",
      "version": "2.1.0",
      "description": "Jakarta Mail API 2.1 Specification API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "7b1e4b1191fe7eab4039ccf0ce949e46"
        },
        {
          "alg": "SHA-1",
          "content": "62da0425eb4f2c0146d153e64a9f4f0447985c69"
        },
        {
          "alg": "SHA-256",
          "content": "5ad231b09f7e3fddd37f96044b342373fd70ef28d81753bc91a082d270834269"
        },
        {
          "alg": "SHA-512",
          "content": "2a02a32f9db8b22e3291af6844c55364b958eb51bfea2243b75715ef38420273ed50f41e61fd06a2087c4cbc4bcd0b53b6c423b78d1d3e31c1c22b01d461385b"
        },
        {
          "alg": "SHA-384",
          "content": "d43e3c93a2f49b9b8348b0116921b89e90b436d0479d950d99c27cc1531875e8d07e910e0ff3b1959316ba491914d8e3"
        },
        {
          "alg": "SHA3-384",
          "content": "d3b2fb63ebeec764eedb1d36948b2ac5eb6ee1af379fdb59214fb91ee04b7f4cca43c56d7d5d4e8c122bdd8da93ab6a2"
        },
        {
          "alg": "SHA3-256",
          "content": "0d550e6cf5ecadbd7cc3510a2899064c6902b0054f040a2c218d605311869dd2"
        },
        {
          "alg": "SHA3-512",
          "content": "78b9ad6e4837f1c0708a2068ead786379bc7876e00f06bde0680c1a707841e40276ca4c047cf4deb40c78b7b2fb6016ab73c291f4bd6937bda86e59ca56d3e7a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.mail/jakarta.mail-api@2.1.0?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j/jakarta.mail-api",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/eclipse-ee4j/mail/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/mail",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.angus/angus-mail@2.0.4?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.eclipse.angus",
      "name": "angus-mail",
      "version": "2.0.4",
      "description": "Angus Mail Provider",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5e39c666abac5e0c7837894606af28b8"
        },
        {
          "alg": "SHA-1",
          "content": "80a49d6e187788d17a23b05e375bad75f56a4a92"
        },
        {
          "alg": "SHA-256",
          "content": "87301865584bad9170662b3eeef0350aaafea4522483e38e54ae87dc3df3e958"
        },
        {
          "alg": "SHA-512",
          "content": "54cb7da6564c740b22fb12692c90bbe6bb23a37def18b085b15b816792d36b1da9fe0f7cd288ef577b6e175efa1c4b29f1ed0e067472c822dc739a7dc2cdf992"
        },
        {
          "alg": "SHA-384",
          "content": "7e39699e7bc721d7348c5ea67e5edc93380595a04ca79cb9e01f2e09dd345c06bb0f0cb61cc9cd872f0e8f7cb84a42e2"
        },
        {
          "alg": "SHA3-384",
          "content": "b244618c93a064133325cbc3c4b3642bd0443988ec3ec37dc7524aae8c821c666f4f4c3708f9fc236c52b5314b25471e"
        },
        {
          "alg": "SHA3-256",
          "content": "192dbad45af5deac54c9fc8b8891d4de37195ac74e3a22e43f39e620d17ad5b0"
        },
        {
          "alg": "SHA3-512",
          "content": "733545be3d40031a527ab4567ac02e3f07c5dfc62fd308daaefa754a4ce07bd029b9b4b8ab910a10fc698344d10c6619033c975c254c9e94ddbf57703d934c9f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.angus/angus-mail@2.0.4?type=jar",
      "externalReferences": [
        {
          "url": "http://eclipse-ee4j.github.io/angus-mail/angus-mail",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/eclipse-ee4j/angus-mail/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/angus-mail/angus-mail",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.0?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.activation",
      "name": "jakarta.activation-api",
      "version": "2.1.0",
      "description": "Jakarta Activation API 2.1 Specification",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "7c79641566f97305e17c5f7b9bb33fc3"
        },
        {
          "alg": "SHA-1",
          "content": "a58861b5deac5e151140511cf57d6b80a83f2d20"
        },
        {
          "alg": "SHA-256",
          "content": "56e8d994095fe49c28138c60291482f66f18d12ac2b720e938697dce6a3135c7"
        },
        {
          "alg": "SHA-512",
          "content": "53026e23571e77b9696cf02d1eeb20295b7199a169c12db9807f2ef2512eff859b37108b96bfdbcd2c9f4a66728d12ad8182b5548146897cdc2ad49e7b2b2ebc"
        },
        {
          "alg": "SHA-384",
          "content": "2e835f36fa8c90490cd4f543062f3ce548175fc97b3dfa2ab3c63f2dcd59c57060a196ace53933639399657f6aec9e5c"
        },
        {
          "alg": "SHA3-384",
          "content": "bde529fca53e87d22908b4794730a03a2fa29b62ba8cce07edd4e10e34d98cd43a7b0e449241010ce55e962ee4140837"
        },
        {
          "alg": "SHA3-256",
          "content": "be51f4c74f02fb8c98fca209dc5d33ed89dfb240c882e790974c06bef563a6ee"
        },
        {
          "alg": "SHA3-512",
          "content": "835e222a4ed4e31f570afd5b10b1935ff8fe4453ce79e340cb021229cc186586e9461411ce7749798a97122794bc3a1965ab770f9682bfb68f6b740e41c50943"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/jaf",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jaf/issues/",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jaf",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.angus/angus-activation@2.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.eclipse.angus",
      "name": "angus-activation",
      "version": "2.0.2",
      "description": "Angus Activation Registries Implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "42bba74155dc773eca277ee7a16f74be"
        },
        {
          "alg": "SHA-1",
          "content": "41f1e0ddd157c856926ed149ab837d110955a9fc"
        },
        {
          "alg": "SHA-256",
          "content": "6dd3bcffc22bce83b07376a0e2e094e4964a3195d4118fb43e380ef35436cc1e"
        },
        {
          "alg": "SHA-512",
          "content": "1482c759843c23e0343ca554194862d53ac18a04ab4691b3bf05145abb77283617022a895c5ba2e33f62b77c2cfb906b90d0cb690623621b11f35194b54b1180"
        },
        {
          "alg": "SHA-384",
          "content": "0263b0f42e56f9cbf4a2446c26a29d6397477561c2149f7b7d0e62fb28ab4315d50faf4e96aff088d3ac204b16f90892"
        },
        {
          "alg": "SHA3-384",
          "content": "e77e5bf8be9f98ed06a652e2317253bb29e8f79b26910075332823987b2e1bd3dfbb2d7aeb5a57a454c8632241abcc0a"
        },
        {
          "alg": "SHA3-256",
          "content": "41d7d300d1399e4706a0ead464e13702d85023598a0a81899e40ee8eed847826"
        },
        {
          "alg": "SHA3-512",
          "content": "dbdcb824069f0dcf9f9d362b8db7c2efa77f28d77e07c204a28e56b79ebfc478d9c5f9e5f01c7269d3afc0db0e6126d74237cc5a51b5e9ec6b6664580a06de8c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.angus/angus-activation@2.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/angus-activation/angus-activation",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/eclipse-ee4j/angus-activation/issues/",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/angus-activation/angus-activation",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "group": "com.google.code.findbugs",
      "name": "jsr305",
      "version": "3.0.2",
      "description": "JSR305 Annotations for Findbugs",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "dd83accb899363c32b07d7a1b2e4ce40"
        },
        {
          "alg": "SHA-1",
          "content": "25ea2e8b0c338a877313bd4672d3fe056ea78f0d"
        },
        {
          "alg": "SHA-256",
          "content": "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7"
        },
        {
          "alg": "SHA-512",
          "content": "bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804"
        },
        {
          "alg": "SHA-384",
          "content": "ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4"
        },
        {
          "alg": "SHA3-384",
          "content": "9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1"
        },
        {
          "alg": "SHA3-256",
          "content": "223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff"
        },
        {
          "alg": "SHA3-512",
          "content": "3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "externalReferences": [
        {
          "url": "http://findbugs.sourceforge.net/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://code.google.com/p/jsr-305/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.2.2?type=jar",
      "group": "com.github.ben-manes.caffeine",
      "name": "caffeine",
      "version": "3.2.2",
      "description": "A high performance caching library",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "202a61e2492ad488df931367241a110c"
        },
        {
          "alg": "SHA-1",
          "content": "8b0a31cb57ac00e18161d5586759912bd2637398"
        },
        {
          "alg": "SHA-256",
          "content": "c74a6c72221dfb76eb92f2bb40108ea561a7da2f315dc3b1e64afa8f077f210c"
        },
        {
          "alg": "SHA-512",
          "content": "94179e3a03e58e292632d58036149438be2d9fd6156187650828868f05964f4ecd39bb6e788d9fb71a76cab9421a324aa62b2909aef850d9c48042ff497ee0d1"
        },
        {
          "alg": "SHA-384",
          "content": "d7efd8d2ffc45d5342bf87213a70a5c06dbabb19a4d75e6da6240ae468746a83a7ddb68db416a1d4c3ecd96cd6ecab08"
        },
        {
          "alg": "SHA3-384",
          "content": "08b0d9f875300ed08e14a2c96f8176d65570b854283fcc1ae3346300cc447ad0f3378235877c04bbf82fbf215e326c5d"
        },
        {
          "alg": "SHA3-256",
          "content": "6d471055eae75f0eb3282a76ace6e41089701c365446a25f9f436a0dd1b0572d"
        },
        {
          "alg": "SHA3-512",
          "content": "c9504d397ad0e47b012ed04f014939a649e4f949739003d340a7f7929bae7e00ad17a29b112fa8c24536d2fc3f11aa69c541f47f550064cb8cc48c71ca1e53b6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.2.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/ben-manes/caffeine",
          "type": "website"
        },
        {
          "url": "https://github.com/ben-manes/caffeine",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/us.springett/cvss-calculator@1.4.2?type=jar",
      "group": "us.springett",
      "name": "cvss-calculator",
      "version": "1.4.2",
      "description": "A Java library for calculating CVSSv2, CVSSv3, and CVSSv3.1 scores and vectors",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5e0a81f65c07015da3a81f2b7d3de2e9"
        },
        {
          "alg": "SHA-1",
          "content": "8ec6dc684f94e42510ea736afdca64559b0ce5de"
        },
        {
          "alg": "SHA-256",
          "content": "6893343fa32d335b33e162cead736fcbb290b3f9e360506d634ef3c3fe11fd61"
        },
        {
          "alg": "SHA-512",
          "content": "b4feb83e0e96fb8b2822fbbc6408cbaf5e978cafac47f7d2d63949448c3ce2ed4bd36030af9dd1f59fa3abc4918b5db1ac41902cd9a6839a9fae7a8ba0c1b44d"
        },
        {
          "alg": "SHA-384",
          "content": "a228036ae53011f74f976c76f311e8ba380345792bfcd90347c089fce0fd21ddad5fb0cb5aa46de401426cbf3000279e"
        },
        {
          "alg": "SHA3-384",
          "content": "f560206e0333a0c1d3bef49c601253175639acf0157394afee5dde3da925228ff7e930362ca7d8764d94f486eac4a243"
        },
        {
          "alg": "SHA3-256",
          "content": "82fc4477a32c947122d04efb9e63c2b3141e56b661c7c8aabe3702b365ec2109"
        },
        {
          "alg": "SHA3-512",
          "content": "b018a95124430ad9d365b3e4ec790e41191a46f0712078c4d4b084378f3a236803ce5768b555b66765d0f883bbb6cd3f7b7ed81ea19ba7220ea0ab75245aad83"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/us.springett/cvss-calculator@1.4.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/cvss-calculator",
          "type": "website"
        },
        {
          "url": "https://github.com/stevespringett/cvss-calculator/actions",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/stevespringett/cvss-calculator/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/stevespringett/cvss-calculator.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/us.springett/owasp-risk-rating-calculator@1.0.1?type=jar",
      "group": "us.springett",
      "name": "owasp-risk-rating-calculator",
      "version": "1.0.1",
      "description": "A Java library for calculating OWASP Risk Rating scores",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f387d7ce91df7f1b56224b972b916ebe"
        },
        {
          "alg": "SHA-1",
          "content": "f4ae15b14d7a4c3686f6a8a8a93e30560472b1f8"
        },
        {
          "alg": "SHA-256",
          "content": "9b66d91d1ff61f99e320466ff451555696f139147260528591ff1718c5605d1c"
        },
        {
          "alg": "SHA-512",
          "content": "449331aaabc401a7c7ac42c6bba06d17a2c2dc8def07961b93de7bde8fb9f54aa2541cbab7e541b6fa1552977d46e5367a78277cffbafc60873bb7042facff65"
        },
        {
          "alg": "SHA-384",
          "content": "e83afc9976cfcb5419768fdba983815bf755101fef34df693b6033094e12a29d23127148edef4ba6db3573e0b2bb3871"
        },
        {
          "alg": "SHA3-384",
          "content": "07bed3d3cc524090d01da7711e684d7c645e9225e38225ca92da6f58f3ae86c9d9f2e1a45ad923f9345abecb609c0be1"
        },
        {
          "alg": "SHA3-256",
          "content": "153dbb661c502fd174cdbb735a0a89f69555365e165dd6a91d7c765226b9947a"
        },
        {
          "alg": "SHA3-512",
          "content": "6c6bb8298f8f3337395693f4963d08d21d7f76e6ef8802773e37efc64b1b25a6f8ec77169f730591f429cfa5ac5f6a1b2ef0948af67fa49f19cf7ba8a0223f25"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/us.springett/owasp-risk-rating-calculator@1.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/owasp-risk-rating-calculator",
          "type": "website"
        },
        {
          "url": "https://travis-ci.org/stevespringett/owasp-risk-rating-calculator",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/stevespringett/owasp-risk-rating-calculator/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/stevespringett/owasp-risk-rating-calculator.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/us.springett/cpe-parser@3.0.0?type=jar",
      "group": "us.springett",
      "name": "cpe-parser",
      "version": "3.0.0",
      "description": "A utility for validating and parsing Common Platform Enumeration (CPE) v2.2 and v2.3 as originally defined by MITRE and maintained by NIST.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ce83051ae8062a32d6b73e96e3ffdf3f"
        },
        {
          "alg": "SHA-1",
          "content": "9d4c2243626a8430b9399fef288f73e2f369c04e"
        },
        {
          "alg": "SHA-256",
          "content": "372ff2e96d586c310ddfbf896fcf6814b44b3e5d53a0e00fe4108b8dfab8e413"
        },
        {
          "alg": "SHA-512",
          "content": "dd193f56d6c076fb3ddef55ca2f0aa83b61ebc08f854fc051ec2a9512df7ca833c40c523a1669be33fd193da75972c4a63dd33547214d7932930f7fb734db0b7"
        },
        {
          "alg": "SHA-384",
          "content": "7fe8d16bd442d1c02284a7920c7b6c887155af900fa907641f7fd28bd0b43182b844a2763a2bbcfec2e55a6f1a59584d"
        },
        {
          "alg": "SHA3-384",
          "content": "7be713c30ba2b93a79e15f08cc8a19f9a71c8266526f07b2a44ad03f0dedf25903ab85a309f8fe228a5f9add2304ab3e"
        },
        {
          "alg": "SHA3-256",
          "content": "c42ff66a11f8a30196f8daf05e79997420a61367c557da461757087171f0421a"
        },
        {
          "alg": "SHA3-512",
          "content": "24398e9835f8a26b3685f61485aaaa6b85faf0df1f6e9228e24cb8f2803e8e9ff11b2dd89919e49d6a51f5f630c33aac70cda56ffcd990844de044a193dcf657"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/us.springett/cpe-parser@3.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/CPE-Parser",
          "type": "website"
        },
        {
          "url": "https://travis-ci.org/stevespringett/CPE-Parser",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/stevespringett/CPE-Parser/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/stevespringett/CPE-Parser.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.cyclonedx/cyclonedx-core-java@11.0.0?type=jar",
      "publisher": "OWASP Foundation",
      "group": "org.cyclonedx",
      "name": "cyclonedx-core-java",
      "version": "11.0.0",
      "description": "The CycloneDX core module provides a model representation of the BOM along with utilities to assist in creating, parsing, and validating BOMs.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4893bba737102851eb1b84b0f5f9210d"
        },
        {
          "alg": "SHA-1",
          "content": "eff1c70798921768cc5a4fe3468b31bfe51e4e71"
        },
        {
          "alg": "SHA-256",
          "content": "de841ace84a6e864d5d0568d817ec1e4d119732587286af5e1a2fd5665b94b86"
        },
        {
          "alg": "SHA-512",
          "content": "20d3c3b839fd2a5597665ee6e48f0f6bbd32168f275b851551230437aa25d80e22d6e7da760f05ebd17ddc92cec5a4c2c45e3280631da67478d77e16b612f00e"
        },
        {
          "alg": "SHA-384",
          "content": "975cbeba81d323cd79c57b64ae0012b39b0d03cf94c7f044a082a16db08ede445f90b1c5dfa88bb759de623ba02b4e1c"
        },
        {
          "alg": "SHA3-384",
          "content": "f7044c7ba1cc7f87a678d779502bf0507230a5d0ebd8ec1ad47eec764dadab64b233c978978b0d9d64577bcf13c01e5c"
        },
        {
          "alg": "SHA3-256",
          "content": "7c692d5f27e2c486c2c1116560b4a7e173485b1f8bf8094495c840aaba3c2f39"
        },
        {
          "alg": "SHA3-512",
          "content": "5c9e20106c5dd4f2ca7de41d05e864158fe5c91da89db8d170c1e49826f763b375939f5dd75007d3078e2ab358caa6ca608b968f4a3a21c6c301e76031d552c6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.cyclonedx/cyclonedx-core-java@11.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/CycloneDX/cyclonedx-core-java",
          "type": "website"
        },
        {
          "url": "https://github.com/CycloneDX/cyclonedx-core-java/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/CycloneDX/cyclonedx-core-java/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/commons-codec/commons-codec@1.19.0?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "commons-codec",
      "name": "commons-codec",
      "version": "1.19.0",
      "description": "The Apache Commons Codec component contains encoders and decoders for formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e46fa78c69544eb6239c4e8447e72544"
        },
        {
          "alg": "SHA-1",
          "content": "8c0dbe3ae883fceda9b50a6c76e745e548073388"
        },
        {
          "alg": "SHA-256",
          "content": "5c3881e4f556855e9c532927ee0c9dfde94cc66760d5805c031a59887070af5f"
        },
        {
          "alg": "SHA-512",
          "content": "d98a7a1cfcc08aa9cce4f7778e3f37ecb99da7b1da01944e5fa8faf06fbf9f969f2efb0b416832f419d53085250f711c071f1dac9fa0968483c37034198367fb"
        },
        {
          "alg": "SHA-384",
          "content": "f0edec3cd84b2320e6930380d3fe13335d33f041470d27fb93789db0c696ec01dda21b471f0015bf70bffffcbfdb67c0"
        },
        {
          "alg": "SHA3-384",
          "content": "ce771ef9f0df326a34ab37e70f710801bb18d545aca0ee492db62770db323ab8a0b5082123ca4826f3d3182748537cfc"
        },
        {
          "alg": "SHA3-256",
          "content": "8296db95bb2fac86a0eb68e61e9730084f4272ad6a4a4327a5259c631840e98e"
        },
        {
          "alg": "SHA3-512",
          "content": "05da2f8674a257c5d8a1137cadbda71d2635f22237450bf2cbc980380a56905247bea38049c8cd80e60077be2be73b1eae6b466c228e4277763a54979cf856fb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/commons-codec/commons-codec@1.19.0?type=jar",
      "externalReferences": [
        {
          "url": "https://commons.apache.org/proper/commons-codec/",
          "type": "website"
        },
        {
          "url": "https://github.com/apache/commons-cli/actions",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://issues.apache.org/jira/browse/CODEC",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/commons-user/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/commons-codec",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.20.0?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.dataformat",
      "name": "jackson-dataformat-xml",
      "version": "2.20.0",
      "description": "Data format extension for Jackson to offer alternative support for serializing POJOs as XML and deserializing XML as POJOs.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "362a73fc5dda3670bdaf5e9bd89f9b08"
        },
        {
          "alg": "SHA-1",
          "content": "18a57479c8fa39bb136ee595b9e6351e9ba3ded8"
        },
        {
          "alg": "SHA-256",
          "content": "0d4ebb4d583dda91801d37c7565d462a25fe929f0d76c34767ec4b80413110c0"
        },
        {
          "alg": "SHA-512",
          "content": "ea82090e98a65e24c5198b456a545d4e69e556850a3ecf02af0fa2ecc304828048a22e403b020d1a78df8c8cba0a4ffd224a06ba92bc68b7d52519d9ae155372"
        },
        {
          "alg": "SHA-384",
          "content": "3a936cdd5e973418dc47adf10330a9092a51bc9a7f3518c775697ee048418b9a9918632ba9c464f1880bb840389955d4"
        },
        {
          "alg": "SHA3-384",
          "content": "147c9fcd3ed03cc827b19f1fcee79e38d796cf63aa26b19dc87a56d7203d12b766fd368cec026f698a790833937c40f7"
        },
        {
          "alg": "SHA3-256",
          "content": "c4d3df241de3c74a46a85a9f27e3423ebec1f96afea6be58674a8caefcd584b8"
        },
        {
          "alg": "SHA3-512",
          "content": "ffe6eaca22396181536fd540cb45d878e57f7d71dd9b9ccbae788135b312abd6b8a8e5145431670297ce6e47e00ecaea7003fe9e12afdce0ab949823091967f7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.20.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-dataformat-xml",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/FasterXML/jackson-dataformat-xml/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/FasterXML/jackson-dataformat-xml",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.networknt/json-schema-validator@1.5.9?type=jar",
      "group": "com.networknt",
      "name": "json-schema-validator",
      "version": "1.5.9",
      "description": "A json schema validator that supports draft v4, v6, v7, v2019-09 and v2020-12",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "84622292ac5001bac8f16dc5002a8b94"
        },
        {
          "alg": "SHA-1",
          "content": "6a2f9fe324b9dc8d8e0c3d7b435f7ae99595a556"
        },
        {
          "alg": "SHA-256",
          "content": "e0b8baeb78fd1ba027454ee3974d8a02f54447eaa510d3052820a7d2160d9ae4"
        },
        {
          "alg": "SHA-512",
          "content": "5ba210c135717a6ed043e0889d96f6381b3668f9e2a011bd0def8138ad327813f792259858ae5ed192cb8ec0645308113769aa8ebee903db1ccd82e98cb3009d"
        },
        {
          "alg": "SHA-384",
          "content": "21a4f4fb586959241ce92ad788cb4326d62232aafcddf6953ef7769efa5c6936487ffea51693ff44206f4d66c83ee753"
        },
        {
          "alg": "SHA3-384",
          "content": "36bb0b96a34254780e991440e879c1f44a0a62362e115a5c761df0ec1c8f2a9f64a7421ea3cb50a589ae501619fd3942"
        },
        {
          "alg": "SHA3-256",
          "content": "c97a2638d46c235056bacfe90d8e0b88a823a5622e88b608a31f481f3adb9ccf"
        },
        {
          "alg": "SHA3-512",
          "content": "08b256bb3ac49102d87c0e635d025699154bfa7785916d591173af6ec14dfde885e34500a7bd13159a00a7fe78dc859aefa9dc930d0719a64ea08209ccffb20a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.networknt/json-schema-validator@1.5.9?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/networknt/json-schema-validator",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/networknt/json-schema-validator/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/networknt/json-schema-validator.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.ethlo.time/itu@1.14.0?type=jar",
      "group": "com.ethlo.time",
      "name": "itu",
      "version": "1.14.0",
      "description": "Extremely fast date-time parser and formatter - RFC 3339 (ISO 8601 profile) and W3C format",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e537d0a2bc8066726f7e4654c253cf84"
        },
        {
          "alg": "SHA-1",
          "content": "c0f9f9d4f4404787e992ab3af5ae95f2fad79e47"
        },
        {
          "alg": "SHA-256",
          "content": "5cf40ab0cc77828ab2b875b1f3ecd71c8295d7721933476abc2e08fddcea164a"
        },
        {
          "alg": "SHA-512",
          "content": "aa69a6af3a7123eb41425bbaf6834e16dc3323172709e2338b8a21b970fd21333d996515f42da4aa0225251e30542ad7d9c8332bdf7d62ed96b42fadc8a1520d"
        },
        {
          "alg": "SHA-384",
          "content": "8d201334c39b68d13d66fc9df2440fa848b055a9b901e1c630ff66a47e70c8816484d106ae18c642d4257034f33e55f2"
        },
        {
          "alg": "SHA3-384",
          "content": "033715e1422cb3f22c1073bc7b058fd16d1436c6314f49f13480d81c86b656cb77a4d852cbba35542bc8f2ce49244ba6"
        },
        {
          "alg": "SHA3-256",
          "content": "f18d275dd2a0038a82432e06bb9f396151310136e3a316a869ef54d7fae834c5"
        },
        {
          "alg": "SHA3-512",
          "content": "8a51b3c6144eb2e363f8804da316d9e3dc246be07af4c0bb55e9540c2a0deb5eb9beb825120d3d203e3a561fd8a605ad64f3af5d233725e1b9c7e06232deaea9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.ethlo.time/itu@1.14.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/ethlo/itu",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/ethlo/itu",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.20.0?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.dataformat",
      "name": "jackson-dataformat-yaml",
      "version": "2.20.0",
      "description": "Support for reading and writing YAML-encoded data via Jackson abstractions.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "652025f2a21ade51cc34e75a75e1468b"
        },
        {
          "alg": "SHA-1",
          "content": "58502643d75dede7fbcfc6e60b58397045da976e"
        },
        {
          "alg": "SHA-256",
          "content": "cc3dec9fb8b56574797bfef62641325508f0e5bc968bd268568402818d55baae"
        },
        {
          "alg": "SHA-512",
          "content": "7db8a2b20c4e4c73962ae499e9b970bcba2e83ebf997d15c543fdb9eb5f96b5fccc84d3918c3019362fc5f0aec643e88a0ad2fb062b913a92dc5348fd85ba905"
        },
        {
          "alg": "SHA-384",
          "content": "c63c318ca1f59fb8cce8de6f211f9d2ceb907b4902d1192f8710309a6b466fc421e6d26fea37d36c5f86ce77a78372a5"
        },
        {
          "alg": "SHA3-384",
          "content": "557413ca21c00f5b06a25cbfa8698d2e51f6569fbb951d697b9c0819318b9f17ccdb1c2eec08a14b17d5cf400e4de1bb"
        },
        {
          "alg": "SHA3-256",
          "content": "92f7e937aa68e8e03e38ba61a04ba737661f736765e09b914f9066b8fc646ca6"
        },
        {
          "alg": "SHA3-512",
          "content": "7920a718444f7e304b8da25015a53a4cf9fd824984330ad54fbfc0bc4eab382e2d8f0fb32ffd25871820908172b1a299cf73f1a23df6dc9280c2ecd78e5825b3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.20.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-dataformats-text",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/FasterXML/jackson-dataformats-text/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-dataformats-text/jackson-dataformat-yaml",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.json/json@20250107?type=jar",
      "group": "org.json",
      "name": "json",
      "version": "20250107",
      "description": "JSON is a light-weight, language independent, data interchange format. See http://www.JSON.org/ The files in this package implement JSON encoders/decoders in Java. It also includes the capability to convert between JSON and XML, HTTP headers, Cookies, and CDL. This is a reference implementation. There are a large number of JSON packages in Java. Perhaps someday the Java community will standardize on one. Until then, choose carefully.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "08f35c88f0313d32aadf58bf98a2cdf6"
        },
        {
          "alg": "SHA-1",
          "content": "a1b5f0b5a1ce018b93a691c57ffc7d141b3a10f1"
        },
        {
          "alg": "SHA-256",
          "content": "85d4c1ab192d3117fd02c7fff1ec0fe63ade45cf56def7fe950ef060cf06e99f"
        },
        {
          "alg": "SHA-512",
          "content": "82142df039c74b74abec385d1be43211d662c39daec7ecdbbf82d86fa2fadeeb3fd3e0f93b2bad269d21e206815ceaeb32c9c3e6fde374124086ba3d62b8760e"
        },
        {
          "alg": "SHA-384",
          "content": "5ddbc38b0fdaf7ae2ab5453a0b5e5575daa16b766882f2bb33c178f6000332a589af333390ff35c9f3f71c2bcede9190"
        },
        {
          "alg": "SHA3-384",
          "content": "0ec2e196eb2e4984e30cc546c94170f3f38ee7884756caa80c14f3896597b01230abdfd2cd1902cf47ca66dfc6b6cb02"
        },
        {
          "alg": "SHA3-256",
          "content": "9c2977c9cefce5aa4fa5309b772ab606faa5c3cf18c559f8981e99d45a7dc733"
        },
        {
          "alg": "SHA3-512",
          "content": "fbaaf598c52d83ca1234466413bbd2bed202335c1268ee624134fc72083f3dd8c114704a26a881fb8b941baa910f80017ccc7580a37c831a131780dc7215f157"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "Public Domain",
            "url": "https://github.com/stleary/JSON-java/blob/master/LICENSE"
          }
        }
      ],
      "purl": "pkg:maven/org.json/json@20250107?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/douglascrockford/JSON-java",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/douglascrockford/JSON-java.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.0.0?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.servlet",
      "name": "jakarta.servlet-api",
      "version": "6.0.0",
      "description": "Eclipse Enterprise for Java (EE4J) is an open source initiative to create standard APIs, implementations of those APIs, and technology compatibility kits for Java runtimes that enable development, deployment, and management of server-side and cloud-native applications.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4bcb3175ed9b7aa3f038d082879ec2a8"
        },
        {
          "alg": "SHA-1",
          "content": "abecc699286e65035ebba9844c03931357a6a963"
        },
        {
          "alg": "SHA-256",
          "content": "c034eb1afb158987dbb53a5fea0cadf611c8dae8daadd59c44d9d5ab70129cef"
        },
        {
          "alg": "SHA-512",
          "content": "b810ce040ed0671a3161fb197845f3ae750cd38c474ef54c351b7b127ff3b4d624a26c33450c62474f42c1cde21c65324cda63b1b3ea0515a286e0bcb0c0c9d5"
        },
        {
          "alg": "SHA-384",
          "content": "2f02e56f5b0a3a7191b6cea6e3b872d8d29503299751c6dabfdf4d61b1ae2b431be9c13801083cd6e516b8f52ab38a95"
        },
        {
          "alg": "SHA3-384",
          "content": "373855d3aef3be1d54046c33d76daa0a3db62b04e0bfa5957670f17ede4f74426b9d858159e67eb6abc723278f272c23"
        },
        {
          "alg": "SHA3-256",
          "content": "cb8c3221eb78148915a75489df9d25665cd41b8949ede82c5ee7a792b1b32fe0"
        },
        {
          "alg": "SHA3-512",
          "content": "689137c5de2c0972392e181a4f03e5a1b3f839238839a28442da9aa91f4e5c2980eb48a0107c0fbcd2d35a44ab8a4d698fa197e0dadf264f3e547043fc15dba3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.servlet",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/eclipse-ee4j/servlet-api/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/servlet-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/servlet-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.validation/jakarta.validation-api@3.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.validation",
      "name": "jakarta.validation-api",
      "version": "3.0.2",
      "description": "Jakarta Bean Validation API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "3a1ee6efca3e41e3320599790f54c5eb"
        },
        {
          "alg": "SHA-1",
          "content": "92b6631659ba35ca09e44874d3eb936edfeee532"
        },
        {
          "alg": "SHA-256",
          "content": "291c25e6910cc6a7ebd96d4c6baebf6d7c37676c5482c2d96146e901b62c1fc9"
        },
        {
          "alg": "SHA-512",
          "content": "8ff9a450e13dad49ac8268ab8c591e045e5056f9459efa09fbb3561b5c879526b344e2648602bf65d387620064cf0c3a00e1243c6422c85a21b53dbab8749a40"
        },
        {
          "alg": "SHA-384",
          "content": "ab594665f5416edc8b42687e4ca17583fdcf886725ed98a88beb42bb5980d3672a5a5b7dd93b73c2282393ef1814d21d"
        },
        {
          "alg": "SHA3-384",
          "content": "bd43bd51ad4b56fe5bed62d478554a0e2a183b8ce38ed8606adb52d219eefe2efedafdd3d530b1f680824f54a680ab4b"
        },
        {
          "alg": "SHA3-256",
          "content": "48b53a0b142c3b314427ea2133e54151ed8263c1627527b8bc824784596840d7"
        },
        {
          "alg": "SHA3-512",
          "content": "3b6ec58f766f0958be2529b66d12bf492dfb78c49bfd41be87d9102e0885144156a693828f201a2a7019774c02824dfcaf717394a8858779fc9b2cd44b74b453"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.validation/jakarta.validation-api@3.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://beanvalidation.org",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://hibernate.atlassian.net/projects/BVAL/",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/beanvalidation-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
      "group": "com.github.package-url",
      "name": "packageurl-java",
      "version": "1.5.0",
      "description": "The official Java implementation of the PackageURL specification. PackageURL (purl) is a minimal specification for describing a package via a \u0022mostly universal\u0022 URL.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "90856d8bb5b17e08fdf03b6a2f93b81c"
        },
        {
          "alg": "SHA-1",
          "content": "e6bf530f52feab911f4032604ca0b8216f7ff337"
        },
        {
          "alg": "SHA-256",
          "content": "e45551727707acc0c56ac62d56964332ea0f138d6cc3656d988b9369150f5247"
        },
        {
          "alg": "SHA-512",
          "content": "8064df400154caa110b8845bd17e6cea2683307e575ce88e40d7c0c8965ea0af6c150a376d8b9ba7354676c41b52c94535f30c6e830447613299ccf5fc7aa959"
        },
        {
          "alg": "SHA-384",
          "content": "0597100022f72e020c9d929bf57ecef91af7574610fb03b4019feba4b25f491a076f03577be2009e66d9001c4c0f8ab0"
        },
        {
          "alg": "SHA3-384",
          "content": "bbdd55a31a4755ef589bcb176283fe03e3c9089d315eab577fef3a9c2d02e632c6ac3fdebbc90a2f0f8ed7974b9f397c"
        },
        {
          "alg": "SHA3-256",
          "content": "c9881b69bde35ea6ff4006877b9fbf91462f911b5b142aa699a45a00867d413a"
        },
        {
          "alg": "SHA3-512",
          "content": "2b9caf58deef687a9bf01abd61a7af4abdb61247a8a966683a18157ee948f1ea424602598dc8f665bf24f7e1e516866298ef0507e9d697cb20dcf60eff2095ca"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl": "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/package-url/packageurl-java",
          "type": "website"
        },
        {
          "url": "https://travis-ci.com/package-url/packageurl-java",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/package-url/packageurl-java/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/package-url/packageurl-java.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.lucene/lucene-core@8.11.4?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.lucene",
      "name": "lucene-core",
      "version": "8.11.4",
      "description": "Apache Lucene Java Core",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "93aa10ea2d06de0b4351dc35247bc301"
        },
        {
          "alg": "SHA-1",
          "content": "9b3465369c19260050c74270e908796882f8e468"
        },
        {
          "alg": "SHA-256",
          "content": "1a2aae423e3749578524dfdd94377dd8f24d94fa2685b41a34db0ebc1d04f00d"
        },
        {
          "alg": "SHA-512",
          "content": "759ae54ece3336e73b938bddbf921973ee9d1e98b05414f79c0a8838df5bed771e4e2d6aaf7b7895b0b0da453f42d717def8b4038d1173fa1c78ef96d58b18e7"
        },
        {
          "alg": "SHA-384",
          "content": "6b786bbd86677dc77c169fb0b6f34d49aba3d539b08beddef73228d14e532197a7f9072fceba80e81bdfa65feab5cd14"
        },
        {
          "alg": "SHA3-384",
          "content": "af1b5ea3a269dfb95dc2c8f7e1dd7e6af883bbb22b049035596dffc0986c6986e827a00dbe64f088c9d7a5fed03e7880"
        },
        {
          "alg": "SHA3-256",
          "content": "f6ad3714a5a5211cd5f697d38457d8aededfe253c10019489eb8b119786b86fc"
        },
        {
          "alg": "SHA3-512",
          "content": "3ce80736723207ca4ae8f35d409d03f2c96cb1dbe59d54a396cec5f623757f027343bc8e194a2dca69e7124485083f24765726ebecad9f95e8f76d5c80f59008"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.lucene/lucene-core@8.11.4?type=jar",
      "externalReferences": [
        {
          "url": "https://lucene.apache.org/lucene-parent/lucene-core",
          "type": "website"
        },
        {
          "url": "https://builds.apache.org/computer/lucene/",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://issues.apache.org/jira/browse/LUCENE",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/lucene-general/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitbox.apache.org/repos/asf?p=lucene-solr.git;f=lucene/core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.lucene/lucene-analyzers-common@8.11.4?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.lucene",
      "name": "lucene-analyzers-common",
      "version": "8.11.4",
      "description": "Additional Analyzers",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0897479eb80d2edeedd6b9add69d1c3f"
        },
        {
          "alg": "SHA-1",
          "content": "a74683594f32cb4d947b12fb6afc0a326b293952"
        },
        {
          "alg": "SHA-256",
          "content": "cdd75140d0033c8451d46b42ade5e7f2619a16dfc2cdc9cfc8d68adb752dd8f6"
        },
        {
          "alg": "SHA-512",
          "content": "643b4a518b52f53a09c616ff91e36a9427dbdae83914fc1d339b60ceb4df1c0dc3a273722c5719f5d12bb3383591ac24f3750a93758eb0040f3c05e41d794f77"
        },
        {
          "alg": "SHA-384",
          "content": "4dfda98deeb81a4de59eb08b84c8f220b42fd27c4d94e6d666e0720fea16b5dad60977ad75ae91a248613eb08d73f112"
        },
        {
          "alg": "SHA3-384",
          "content": "5edd4d32092349eec9383c665f7ef06a2bb1ae6b2aff0f93fcf19a44ad897388b5894dd4d94fb7afc95467d04275d973"
        },
        {
          "alg": "SHA3-256",
          "content": "9bbe9dae4383b8c5b167a27dc6c4de1d46648da5d71829ae9f5ff0d42d56e0cf"
        },
        {
          "alg": "SHA3-512",
          "content": "cc3af5e19ec696e49f39a92484f4ade91f1bd16ee4b245048d0bf293821b461c1859c976e6954e5c6848ec20d4b1497b0f8891aa7875b09bfc49fe07f0d9413e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.lucene/lucene-analyzers-common@8.11.4?type=jar",
      "externalReferences": [
        {
          "url": "https://lucene.apache.org/lucene-parent/lucene-analyzers-common",
          "type": "website"
        },
        {
          "url": "https://builds.apache.org/computer/lucene/",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://issues.apache.org/jira/browse/LUCENE",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/lucene-general/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitbox.apache.org/repos/asf?p=lucene-solr.git;f=lucene/analysis/common",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.lucene/lucene-queryparser@8.11.4?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.lucene",
      "name": "lucene-queryparser",
      "version": "8.11.4",
      "description": "Lucene QueryParsers module",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "98e49a1bdc4c7405d4da226d9be1f2c9"
        },
        {
          "alg": "SHA-1",
          "content": "6bb86c810e23fffb52c964d9c376b784db9c58d7"
        },
        {
          "alg": "SHA-256",
          "content": "08ef0c517f5ef756981ce954129e9c9ca764b1e3e6be57c723c665249f28e38d"
        },
        {
          "alg": "SHA-512",
          "content": "c969cf738c8b3638a99b87a57d4d1f85430fd0df2391634628ea7b93ca21a7d27a84610c49e76dce20ed11cb5eba50220070da79141967f162db9522fc2aa6c8"
        },
        {
          "alg": "SHA-384",
          "content": "8d8ac7ee5b268d7519ac10c8a3809d9fd9ffeed3b4b1f51ba8dd07a112d3c7a477fd013d815089112ec2780d1a3f1410"
        },
        {
          "alg": "SHA3-384",
          "content": "6294aac4a7706dfd4b5065c5e88f59b9c401b39f1e31130e8051e653c95c86047a188395cab7dfbaf5799f45aeb8ae8d"
        },
        {
          "alg": "SHA3-256",
          "content": "af19903c070e1ee0a4a16a5ecf4af22afe4e322a99a9f6c826793492c569b437"
        },
        {
          "alg": "SHA3-512",
          "content": "15aa9156895c11ab75890b4202d204073fe031b0020b0038cf5a61a9c2ba668838e0cbec600f7c17b2d699b477d00564bf69c6ea5add8b73832416627e6f89e0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.lucene/lucene-queryparser@8.11.4?type=jar",
      "externalReferences": [
        {
          "url": "https://lucene.apache.org/lucene-parent/lucene-queryparser",
          "type": "website"
        },
        {
          "url": "https://builds.apache.org/computer/lucene/",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://issues.apache.org/jira/browse/LUCENE",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/lucene-general/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitbox.apache.org/repos/asf?p=lucene-solr.git;f=lucene/queryparser",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.lucene/lucene-queries@8.11.4?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.lucene",
      "name": "lucene-queries",
      "version": "8.11.4",
      "description": "Lucene Queries Module",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "81e28127c4da716f096bf3aaebb668a6"
        },
        {
          "alg": "SHA-1",
          "content": "0d4e4dfe70df1c8979444c4614774a67513de1a2"
        },
        {
          "alg": "SHA-256",
          "content": "895870673ecbe05aec0fea72c0c686f272bdf90344b9f050d9fa1e814ce1577b"
        },
        {
          "alg": "SHA-512",
          "content": "274f9535c10c01db101a18194aace9b2b083938495821b76ebd3d0e8c5b6637399a329a406a61251b61bef472ab1ad5fa2c177b95963df8593e210250b5a2e96"
        },
        {
          "alg": "SHA-384",
          "content": "b716d24d31d7fab92ebb02eaad2ae5c933ebbc4a5cf45dd066208134c1965c795976058ac1fe98370782de4710d905d1"
        },
        {
          "alg": "SHA3-384",
          "content": "9ff47d3db01dbbc7abe2a6319bd9011f8c1b4194cda9c3ac9aac745c30364862f1232117044d0ce9f85cfb0e088ab5b1"
        },
        {
          "alg": "SHA3-256",
          "content": "4cfccdde163c86c336d3fa3554f7cda1c2ea91c0cecff2070f76ed67a4e09cf5"
        },
        {
          "alg": "SHA3-512",
          "content": "648cd0a56489b6628e626b411ddb09ef712699c056f097497fd6591b6e3c05135afd30d5cb68c02d0f3d1836ae9f86c8920af6c4e93dc18c2042196275ddd638"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.lucene/lucene-queries@8.11.4?type=jar",
      "externalReferences": [
        {
          "url": "https://lucene.apache.org/lucene-parent/lucene-queries",
          "type": "website"
        },
        {
          "url": "https://builds.apache.org/computer/lucene/",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://issues.apache.org/jira/browse/LUCENE",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/lucene-general/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitbox.apache.org/repos/asf?p=lucene-solr.git;f=lucene/queries",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.lucene/lucene-sandbox@8.11.4?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.lucene",
      "name": "lucene-sandbox",
      "version": "8.11.4",
      "description": "Lucene Sandbox",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "3c7e64e99b1fd1f755d1f1b1b2d48c07"
        },
        {
          "alg": "SHA-1",
          "content": "74a54dd996b9a00ec6d90aff1b6de105bee95c8b"
        },
        {
          "alg": "SHA-256",
          "content": "d925fd0275df1d8b0aba987c958024644a5670d468806098ef65bf6e054da665"
        },
        {
          "alg": "SHA-512",
          "content": "db44f2313408ff1bbe1c0259e3419c48a65d9355b5a37b85f7a28ac4d2c655d0e8d6b5e97349f42692bfa412d73b9f643cae5a942f579281d2c2a1ee4e63a6a4"
        },
        {
          "alg": "SHA-384",
          "content": "e3d152cda33468b34a564a300e2de172e7c07befc55af53fb27e6e3e86e4f3fe5a33beaaf305b8ef2301aa87f7e1e206"
        },
        {
          "alg": "SHA3-384",
          "content": "1f30eb20521792700e866f38154dd598a2bd61518aa2330aa47a0a42c98f666ce150e8ec36a8375c81e8b264594c594b"
        },
        {
          "alg": "SHA3-256",
          "content": "67e9737a98f7c470ae3033546e57a6f0d8b1a810dec0d28afb9ac1226b36d836"
        },
        {
          "alg": "SHA3-512",
          "content": "e3901bad37131a80c990bbed25175cd091b58ae8d08d2b518a91031b32d77e89905f1320d8e73a8838f24e50558ed20e6d96c4b22b9e3e8bd53cbf7d34f126c0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.lucene/lucene-sandbox@8.11.4?type=jar",
      "externalReferences": [
        {
          "url": "https://lucene.apache.org/lucene-parent/lucene-sandbox",
          "type": "website"
        },
        {
          "url": "https://builds.apache.org/computer/lucene/",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://issues.apache.org/jira/browse/LUCENE",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/lucene-general/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitbox.apache.org/repos/asf?p=lucene-solr.git;f=lucene/sandbox",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.jeremylong/open-vulnerability-clients@9.0.1?type=jar",
      "group": "io.github.jeremylong",
      "name": "open-vulnerability-clients",
      "version": "9.0.1",
      "description": "Clients for vulnerability sources",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "47b6597bcd51696eac4651d84d61d6bb"
        },
        {
          "alg": "SHA-1",
          "content": "234a71f9c7e74df3cb0bb77e8625d6074850058c"
        },
        {
          "alg": "SHA-256",
          "content": "9601b8a4bdc5663d12d49c13985a61ea3c2ac1ce8c78780f97db42f3e8fe3ca9"
        },
        {
          "alg": "SHA-512",
          "content": "4761dfa0bc44553c16d9a1cccce3a3ee0132249d04ee9292858ca5c6cbb11cb9e677f7ecbae2dc392c3f5018d9734e9855a18e0bf31fe2ecc571082cabbf387e"
        },
        {
          "alg": "SHA-384",
          "content": "d0d8195a34cc1d97c09b50fd766fc1565c0b4d0544645f9089c0b89fb54c0aee1595a1af519356eff96888ed879f907e"
        },
        {
          "alg": "SHA3-384",
          "content": "98e80ceb0d1f9f0b68e11b6cf62f7938696bc93b914effafdd60213bf466d0c7502aa1c3a7f7ecaac8df16b878cd2e54"
        },
        {
          "alg": "SHA3-256",
          "content": "e87f4b6488611aadff43d2040e1220739ccbd46e884baa1d2ccf6d47b6308aa9"
        },
        {
          "alg": "SHA3-512",
          "content": "72194e29bb9cb81ccf016a42d9795be6a0af93e0123cfa4445b491541612e7660846af7590d93244bb66549da7809683579401fb0afe061319d6eebd622e5ae7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.jeremylong/open-vulnerability-clients@9.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/jeremylong/open-vulnerability-clients/",
          "type": "website"
        },
        {
          "url": "https://github.com/jeremylong/open-vulnerability-clients",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
      "group": "org.jspecify",
      "name": "jspecify",
      "version": "1.0.0",
      "description": "An artifact of well-named and well-specified annotations to power static analysis checks",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9133aba420d0ca3b001dbb6ae9992cf6"
        },
        {
          "alg": "SHA-1",
          "content": "7425a601c1c7ec76645a78d22b8c6a627edee507"
        },
        {
          "alg": "SHA-256",
          "content": "1fad6e6be7557781e4d33729d49ae1cdc8fdda6fe477bb0cc68ce351eafdfbab"
        },
        {
          "alg": "SHA-512",
          "content": "efded31ef5b342f09422935076e599789076431e93a746685c0607e7de5592719ba6aacde0be670b3f064d1e85630d58d5bce6b34aed2a288fdb34f745efb7bc"
        },
        {
          "alg": "SHA-384",
          "content": "814f860e5a44ead6c457676841eef471a8b87be31b84c60a8a4477a18a9cbcb6e3c2ae700969d5c5e52309d961e0537a"
        },
        {
          "alg": "SHA3-384",
          "content": "c8844e5b71e5ecfbb7366097ce34af2f5863d86d5ccc3f9ec384d8ade4b60ccc8124c7fc88664f1afd2b0962fc8775bf"
        },
        {
          "alg": "SHA3-256",
          "content": "4b4f08ad7606a3ac62997779484919a302267b26d26ee19125f8a7eea60e8a71"
        },
        {
          "alg": "SHA3-512",
          "content": "65c6845ebae981cb81b61107707ced39f5b377dae970b47606ef482aaf10e3729def0da40d9377c43abbfb483a5ceae039b0d51c129c50a6d36ad351a5d6b01e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
      "externalReferences": [
        {
          "url": "http://jspecify.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/jspecify/jspecify/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.httpcomponents.client5/httpclient5-cache@5.5?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents.client5",
      "name": "httpclient5-cache",
      "version": "5.5",
      "description": "Apache HttpComponents HttpClient Cache",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "3bdccb327624ff6121d2776003ec851f"
        },
        {
          "alg": "SHA-1",
          "content": "7e3ffb961169e6b8bc05066e15d2448130868b95"
        },
        {
          "alg": "SHA-256",
          "content": "4f725cb65941221c17aee8a1cb7db2257db0be0f98441b351bfd5eea8d0bc04c"
        },
        {
          "alg": "SHA-512",
          "content": "94592c48eb99cfc9679f863f83f6ed039f0ab0c60ef74aa72c98febcd7660892613c6d111c5eaaddcc6f260de63f1e8c5c7f7812c7f929ac82e85eed518d2c7a"
        },
        {
          "alg": "SHA-384",
          "content": "bd97b601efc85bf847a48d183c77a147931a14762948f2e79ab7b118bffdfe0b1885b14b9a45a83ee57206ebc44d19d9"
        },
        {
          "alg": "SHA3-384",
          "content": "1d90d73dbd6b5000d53f2182a950bd1a052b590144a4263da6fa861c0bcde440abd819f5a238593b48a40bd94ade58f0"
        },
        {
          "alg": "SHA3-256",
          "content": "f1b5bd256a07e3cb2c00126aa81d29041fc788eb38caa8fd9f5c9e349b7872c9"
        },
        {
          "alg": "SHA3-512",
          "content": "5d063902f2da9d1988684394d412f302ed59fc3e85a84e2eae16bb9b27e675a5a24f6d567258875ee1fc0b80bc633558363ed976ee6b4b1b9c0be979f5066403"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents.client5/httpclient5-cache@5.5?type=jar",
      "externalReferences": [
        {
          "url": "https://hc.apache.org/httpcomponents-client-5.5.x/5.5/httpclient5-cache/",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://issues.apache.org/jira/browse/HTTPCLIENT",
          "type": "issue-tracker"
        },
        {
          "url": "https://lists.apache.org/list.html?httpclient-users@hc.apache.org",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/httpcomponents-client/tree/5.5/httpclient5-cache",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.20.0?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.datatype",
      "name": "jackson-datatype-jsr310",
      "version": "2.20.0",
      "description": "Add-on module to support JSR-310 (Java 8 Date \u0026 Time API) data types.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "bb2e488ac4d1db81f4e47299e4dcb8bf"
        },
        {
          "alg": "SHA-1",
          "content": "1af763a5ad4efa536235fafe6b3e690a1d8f071c"
        },
        {
          "alg": "SHA-256",
          "content": "8c32155975a935b1f7bfd677647bd5c8cdee12b144b84e4492a447b5ea2e94d5"
        },
        {
          "alg": "SHA-512",
          "content": "4662a9bf5ce6bfb604ed7713edccf473afe3461a912b9216e09c56476d651ac0f4254820f200a15afa1c4650513a08b08e491f4364af6286b7461f90ead62803"
        },
        {
          "alg": "SHA-384",
          "content": "275c33c849a04dc6af2e82b43ca494520403a93924f1d6cf6991a385fc67466dcf10e2e38fa8142062c7a027a45c2352"
        },
        {
          "alg": "SHA3-384",
          "content": "36efe38252160b23c89c70362e522c2c5323452e08c2af4a39ec5526043bf2032dcf8a32a909a37a1b67fae261cac10b"
        },
        {
          "alg": "SHA3-256",
          "content": "ea7e86468aa9314dc19dbf5506339ff4c3211e766d680d89ed69f86bf9182b91"
        },
        {
          "alg": "SHA3-512",
          "content": "a1b885119e1a4dd37e03a8e95d6fa7c97f168ad1aa73c3c6720ca063de7d17f9f3a4ec507e698e25a2b363feb379616f9501aa613257e5ea9bde575afb7f47e5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.20.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jsr310",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/FasterXML/jackson-modules-java8/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jsr310",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.samskivert/jmustache@1.16?type=jar",
      "group": "com.samskivert",
      "name": "jmustache",
      "version": "1.16",
      "description": "A Java implementation of the Mustache templating language.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "7eff40c29c2fdf3faac3db921f07dc80"
        },
        {
          "alg": "SHA-1",
          "content": "979c7145a406b83bf28da32531f88a34c2d2919c"
        },
        {
          "alg": "SHA-256",
          "content": "3d4b984abd66908f05b38c9c892325cd4785d01ff33922569ff9b90c9ebfc475"
        },
        {
          "alg": "SHA-512",
          "content": "f245f8b979cf63fb4ad762e586a27468fa91b751aecf94f9f1dce32f551dec30c4b2dd881ea8b9b6a7eea3e9dfb34ceb96204d358bbb62120233416a4df382e1"
        },
        {
          "alg": "SHA-384",
          "content": "f53c07c96c4a4e8f9b424b17bbb152cc540dea8174db43b9bf5a12357d5207e5b8c0de506d83703fb46cfab13051c142"
        },
        {
          "alg": "SHA3-384",
          "content": "ac74164c34a0b40bf8e2d2c9f737bbae1b5c9c2c3a342487ca8271888379be51c5a0e3f45d1db57538eaed470bd7722f"
        },
        {
          "alg": "SHA3-256",
          "content": "2fdfe84999fe4930c399d5f78b678907881eea246fa30fd97f42f31ec90a2a8d"
        },
        {
          "alg": "SHA3-512",
          "content": "e213ee1cc34d3fde03785ac05a5df09c4b462fb1b1d0f02dff41e7b53522005df2e38b303bc193cff9203ab7f8a50764e1dea967035a454cf1988c056a615d57"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "The (New) BSD License",
            "url": "http://www.opensource.org/licenses/bsd-license.php"
          }
        }
      ],
      "purl": "pkg:maven/com.samskivert/jmustache@1.16?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/samskivert/jmustache",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "http://github.com/samskivert/jmustache/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/samskivert/jmustache",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.pebbletemplates/pebble@3.2.4?type=jar",
      "group": "io.pebbletemplates",
      "name": "pebble",
      "version": "3.2.4",
      "description": "Templating engine for Java.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "053bd6ae2e9718c56f2b8ac6b5fafa63"
        },
        {
          "alg": "SHA-1",
          "content": "87ec0d52f0836b526f2482897e7f9886d98f6901"
        },
        {
          "alg": "SHA-256",
          "content": "2070dc71dc31f4bff37cf92d18df5f68e73073c65cfb623cdd06d725ce9b7a8b"
        },
        {
          "alg": "SHA-512",
          "content": "d233b3e21a749930c75053993e309eec64c78c453e95bccc99622ed34dbdbef13a7311997597c765bdd7091b27acaddb6b046eb2f50c6fc7d2f87e82a08cb6dc"
        },
        {
          "alg": "SHA-384",
          "content": "28181dc7e628b23cc89926115c6eedfce97cc73de09c8198c772374ec3e3a9960b787b0bd428195e5627ee887c535ee6"
        },
        {
          "alg": "SHA3-384",
          "content": "8d2e0c13868912d9f5ba3c2265a78de97db4a9609f648b62a9c16813bd42007cd796a38b32e798eb1084529ea0ef3438"
        },
        {
          "alg": "SHA3-256",
          "content": "3b35dbeb49b94c9f27cb322fe7a1263570a6ceb44ef392d0090f24f9bc36e1a4"
        },
        {
          "alg": "SHA3-512",
          "content": "2725b806fee130f56ff5584ccb65371fd70d1ae96c1237ff1adf961ec14a90bff56c545dfa7781a5bda281a91b99588a511ef3f306565e55bd2847c8f2df6a71"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/io.pebbletemplates/pebble@3.2.4?type=jar",
      "externalReferences": [
        {
          "url": "http://pebbletemplates.io",
          "type": "website"
        },
        {
          "url": "https://github.com/PebbleTemplates/pebble.git/pebble",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.unbescape/unbescape@1.1.6.RELEASE?type=jar",
      "publisher": "The UNBESCAPE team",
      "group": "org.unbescape",
      "name": "unbescape",
      "version": "1.1.6.RELEASE",
      "description": "Advanced yet easy-to-use escape/unescape library for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d95ed94e1624e307a1958ee105ccbf39"
        },
        {
          "alg": "SHA-1",
          "content": "7b90360afb2b860e09e8347112800d12c12b2a13"
        },
        {
          "alg": "SHA-256",
          "content": "597cf87d5b1a4f385b9d1cec974b7b483abb3ee85fc5b3f8b62af8e4bec95c2c"
        },
        {
          "alg": "SHA-512",
          "content": "6918e9579b06721942fdcd91e401f5b996fb4eac13056dbafdf594661f355a34874eb5266784bc2c4f82df9fdd9e219d71a96f52945a354f01665f85f8166bb3"
        },
        {
          "alg": "SHA-384",
          "content": "1b808b67c784b69afea64364ba4c0d433c7f042c512f5c18f07d5388fe7ac4741913f696424bd8fbde147383cfb3d8f9"
        },
        {
          "alg": "SHA3-384",
          "content": "6525bd20a12ff43a0089c0d59369574ae6c01e2b4b1aacf466847d4433ae403db08404a9b59be397c3034f972bcd6b06"
        },
        {
          "alg": "SHA3-256",
          "content": "a190c9bedccff959d08db12fe7080437fb4e98f05516b39d6540be718e151cc6"
        },
        {
          "alg": "SHA3-512",
          "content": "5d7b5edc0c2a0d47c9625936c14b4122330b96cdf54260fe2a6468289c2f4cbc4ee19770c1144acfa702f2f058a81544b4aea9258fe0e15166a1a331736d7b77"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.unbescape/unbescape@1.1.6.RELEASE?type=jar",
      "externalReferences": [
        {
          "url": "http://www.unbescape.org",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "scm:git:git@github.com:unbescape/unbescape.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.protobuf/protobuf-java@4.30.2?type=jar",
      "group": "com.google.protobuf",
      "name": "protobuf-java",
      "version": "4.30.2",
      "description": "Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an efficient yet extensible format.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "7d7c758a027495c9c318b7d1fd57c7e9"
        },
        {
          "alg": "SHA-1",
          "content": "e4d6256d911424343d05b3c0b853446b16e908a4"
        },
        {
          "alg": "SHA-256",
          "content": "0f3a4e9264db07cec429f2a68a66030e9b7487277b76863cdd0e9238cece249b"
        },
        {
          "alg": "SHA-512",
          "content": "4afb11c3342bd3c1ceddad3b1260d55e7331d4621513f4ae8865b8b177b47534340e75237154e7d019d165263bd01182f9282c3c6971fc5547d945f6cd8679a8"
        },
        {
          "alg": "SHA-384",
          "content": "537445bc1e4c4d21996001b24c7b285cad2b257facd0564d0fc19979919d91e84d63af65831f19de17c0cd505241215e"
        },
        {
          "alg": "SHA3-384",
          "content": "4b4035996e89ed352fd05827fe71b4546d3c2f16ee09a88710e14e5e39415af818c8bf8268c5853c68d321f354c36c82"
        },
        {
          "alg": "SHA3-256",
          "content": "661a1016b18bdfa14e2bda539ed939d4c3fe26842b05286f7daee152be67bbb6"
        },
        {
          "alg": "SHA3-512",
          "content": "5c1f48a7a6b015bc10400ccc7d323ee0643a214424fc31face958f0ae15568f8270bf6bdfc3866719c991bf6d9d7c3e878510bdb5a2a7244eef3a443504d23ed"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.google.protobuf/protobuf-java@4.30.2?type=jar",
      "externalReferences": [
        {
          "url": "https://developers.google.com/protocol-buffers/protobuf-java/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/protocolbuffers/protobuf/protobuf-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.protobuf/protobuf-java-util@4.30.2?type=jar",
      "group": "com.google.protobuf",
      "name": "protobuf-java-util",
      "version": "4.30.2",
      "description": "Utilities for Protocol Buffers",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b9da357ef5d10ac10236939f31ecb0f7"
        },
        {
          "alg": "SHA-1",
          "content": "3826fa560563b05e03f9fe00fce31143e1e93dd8"
        },
        {
          "alg": "SHA-256",
          "content": "35a2c968a94f85d443c2bbed3770e2dc4d0a5b571b7d8d4debbade18d405dbc5"
        },
        {
          "alg": "SHA-512",
          "content": "0410b5c64f628b9be476df2ea86e6e26ea880561bf442921960962230b5bcb840191cfba1d409e5b2e715fae1c870e070bead1b36a93bb98b8b4dc1b6123c2bb"
        },
        {
          "alg": "SHA-384",
          "content": "8585a1ba36d8c8ff97c6ad1e2e3a8ccc9d443019006b3e3598aa52807605b1b5bcbc55964145de7fc1a72a0009de1e71"
        },
        {
          "alg": "SHA3-384",
          "content": "aa46ed52fed1446d50221a694616d9ec9d491ba16e5a53043d8541e5f3f15975fd26e1763577e80f17412bee6bfae775"
        },
        {
          "alg": "SHA3-256",
          "content": "81ffa7a55ca4adc1569a78304cc4e933b4e6d0b369ceb8fcffc31e9a11dd9821"
        },
        {
          "alg": "SHA3-512",
          "content": "37bd41845b4d11e3b106dae1f41aea38b158d4f04f4e6bb5fff8b699af801faf95c05f7d5bb51a716d0b19362c09e0a6a938062ac75fcd00a8b906f2b1fd6742"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.google.protobuf/protobuf-java-util@4.30.2?type=jar",
      "externalReferences": [
        {
          "url": "https://developers.google.com/protocol-buffers/protobuf-java-util/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/protocolbuffers/protobuf/protobuf-java-util",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.code.gson/gson@2.8.9?type=jar",
      "group": "com.google.code.gson",
      "name": "gson",
      "version": "2.8.9",
      "description": "Gson JSON library",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e67627f67e03301092dc7de0a2d7cef8"
        },
        {
          "alg": "SHA-1",
          "content": "8a432c1d6825781e21a02db2e2c33c5fde2833b9"
        },
        {
          "alg": "SHA-256",
          "content": "d3999291855de495c94c743761b8ab5176cfeabe281a5ab0d8e8d45326fd703e"
        },
        {
          "alg": "SHA-512",
          "content": "46501e4dd34c9a6f33ff63aeeec45b049579365c5273490e5dfd5ea4effaeced907d0fc728204c619aa136e867ad826204582ff9ba3080d06693c1c675c8473f"
        },
        {
          "alg": "SHA-384",
          "content": "2f2897912784595e52d3f8e57741aed7dd866f16a69562d57e0604d85e2fef08b2a32e58afd00d264f66cc6ec775dc79"
        },
        {
          "alg": "SHA3-384",
          "content": "3ce084f79191afdbdb0a9aa83073b128f620cf585b65c2e81ba98080fd91e9f327db3f0952903094b7dd387bc802b5ba"
        },
        {
          "alg": "SHA3-256",
          "content": "e82ae9fa3a783ee683880d219ab529bb3d0b45ea721d002ee948fad99a67b4f0"
        },
        {
          "alg": "SHA3-512",
          "content": "25cfe43039c6d41344434f89e9a8ad6f93a341512baf93e894a14a9dfd3af1cb0f0afaed4ade6db3c719f910fd9dfbeb7bec8bcfd7f49ac572ab217bce9e595e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.code.gson/gson@2.8.9?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/gson/gson",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/google/gson/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/google/gson/gson/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.errorprone",
      "name": "error_prone_annotations",
      "version": "2.18.0",
      "description": "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "64145d0e7fee5a69ed7b84cf402de998"
        },
        {
          "alg": "SHA-1",
          "content": "89b684257096f548fa39a7df9fdaa409d4d4df91"
        },
        {
          "alg": "SHA-256",
          "content": "9e6814cb71816988a4fd1b07a993a8f21bb7058d522c162b1de849e19bea54ae"
        },
        {
          "alg": "SHA-512",
          "content": "3cea86be94bb8ae40d21ad4bf7d7f6b2233e89593b7b741ad84c78840cd3837bb5136f52e62fe9ae0953d7b190c46ad3edc102dfa97b4c7ea472a80206bf5db7"
        },
        {
          "alg": "SHA-384",
          "content": "7622eb33f83f03ab32b710b36c2fe836e24c5318f65fb8c0631a99507ca3ae65c2df8e33b63a5ce853b9cab6d9cb32e5"
        },
        {
          "alg": "SHA3-384",
          "content": "1ea52a5ce2a9ee1a960dc2a1bbe4b009d4d6a4448498e4cd76401605fa877662911e8c93b2b8bfda57bedc56c83f10a0"
        },
        {
          "alg": "SHA3-256",
          "content": "ed53f4295da75753267f241315352c4a39e60796f04e1c0c12d29c3a38be48ed"
        },
        {
          "alg": "SHA3-512",
          "content": "8266b313bd4e1170daf60642e838841370d99bc24b2a1f91825ca22037a6a30ff15cc76069f8e8770f1dc12772c277ee1320de67e815041697d93d6d7ba884fb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
      "externalReferences": [
        {
          "url": "https://errorprone.info/error_prone_annotations",
          "type": "website"
        },
        {
          "url": "https://github.com/google/error-prone/error_prone_annotations",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar",
      "group": "com.google.guava",
      "name": "guava",
      "version": "32.0.1-jre",
      "description": "Guava is a suite of core and expanded libraries that include utility classes, Google\u0027s collections, I/O classes, and much more.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6951895e804b36322214c95917e598d4"
        },
        {
          "alg": "SHA-1",
          "content": "6e5d51a72d142f2d40a57dfb897188b36a95b489"
        },
        {
          "alg": "SHA-256",
          "content": "bd7fa227591fb8509677d0d1122cf95158f3b8a9f45653f58281d879f6dc48c5"
        },
        {
          "alg": "SHA-512",
          "content": "5dbe7a697511cfbe44f3ffb954e32e997677ecc61f03bb7bb374f1b8fa4a931a95cd9d1f5288eb5d42e2aa380e3241b35059786c07edc48e5aa67c30cddad8a5"
        },
        {
          "alg": "SHA-384",
          "content": "abad4556e073fb38062c636b6599ceed992302c7d98150e3842d32ce92f6aac7d630633c56efa581523d591361fcf898"
        },
        {
          "alg": "SHA3-384",
          "content": "c7b02d77e04c567e8870674f71a60141e83ca9e5e9180138450ede78ad7f2be8b6636c514096e15ba2921c2889427852"
        },
        {
          "alg": "SHA3-256",
          "content": "17f18d8631c9bff9234c214522ce89eb1feef27a4dfe990760d4943ad3de710d"
        },
        {
          "alg": "SHA3-512",
          "content": "7cf7847812b47cc232ef3c27719457dd19610b3e3bb25c1be640821a3a2be67781047f41e34491b5c8ed68010bbb1d53c5f7706633f3a3f44f3f3133bb7635ec"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/guava",
          "type": "website"
        },
        {
          "url": "https://github.com/google/guava/actions",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/google/guava/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/google/guava/guava",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
      "group": "com.google.guava",
      "name": "failureaccess",
      "version": "1.0.1",
      "description": "Contains com.google.common.util.concurrent.internal.InternalFutureFailureAccess and InternalFutures. Most users will never need to use this artifact. Its classes is conceptually a part of Guava, but they\u0027re in this separate artifact so that Android libraries can use them without pulling in all of Guava (just as they can use ListenableFuture by depending on the listenablefuture artifact).",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "091883993ef5bfa91da01dcc8fc52236"
        },
        {
          "alg": "SHA-1",
          "content": "1dcf1de382a0bf95a3d8b0849546c88bac1292c9"
        },
        {
          "alg": "SHA-256",
          "content": "a171ee4c734dd2da837e4b16be9df4661afab72a41adaf31eb84dfdaf936ca26"
        },
        {
          "alg": "SHA-512",
          "content": "f8d59b808d6ba617252305b66d5590937da9b2b843d492d06b8d0b1b1f397e39f360d5817707797b979a5bf20bf21987b35333e7a15c44ed7401fea2d2119cae"
        },
        {
          "alg": "SHA-384",
          "content": "67659dbd9647ec303d7f15128dc9dba19b98fd8d74758ee3b602451e32c855e236ccaafe08edf4bbfa245f981268440f"
        },
        {
          "alg": "SHA3-384",
          "content": "1460875f0331c5fa3791772a6a322a7db180261bc2adacf7271df1fbf3b088a587a755a604c039982cb593c5cfc1f101"
        },
        {
          "alg": "SHA3-256",
          "content": "ea86406e75fcd93eafe3cde1b3135ba485f1bb9b75fed98894a0bf1f0aee04f0"
        },
        {
          "alg": "SHA3-512",
          "content": "52ac0f487ab5dd27c9f2e54fd1d84c7a620cae9d49be4072aa2b11501787bf4391ddaa13d02eccdf19e8eea46aecbea5f6064b26777c1b836108a280652e04ac"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/guava/failureaccess",
          "type": "website"
        },
        {
          "url": "https://travis-ci.org/google/guava",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/google/guava/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/google/guava/failureaccess",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "group": "com.google.guava",
      "name": "listenablefuture",
      "version": "9999.0-empty-to-avoid-conflict-with-guava",
      "description": "An empty artifact that Guava depends on to signal that it is providing ListenableFuture -- but is also available in a second \u0022version\u0022 that contains com.google.common.util.concurrent.ListenableFuture class, without any other Guava classes. The idea is: - If users want only ListenableFuture, they depend on listenablefuture-1.0. - If users want all of Guava, they depend on guava, which, as of Guava 27.0, depends on listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-... version number is enough for some build systems (notably, Gradle) to select that empty artifact over the \u0022real\u0022 listenablefuture-1.0 -- avoiding a conflict with the copy of ListenableFuture in guava itself. If users are using an older version of Guava or a build system other than Gradle, they may see class conflicts. If so, they can solve them by manually excluding the listenablefuture artifact or manually forcing their build systems to use 9999.0-....",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d094c22570d65e132c19cea5d352e381"
        },
        {
          "alg": "SHA-1",
          "content": "b421526c5f297295adef1c886e5246c39d4ac629"
        },
        {
          "alg": "SHA-256",
          "content": "b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99"
        },
        {
          "alg": "SHA-512",
          "content": "c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f"
        },
        {
          "alg": "SHA-384",
          "content": "caff9b74079f95832ca7f6029346b34b606051cc8c5a4389fac263511d277ada0c55f28b0d43011055b268c6eb7184d5"
        },
        {
          "alg": "SHA3-384",
          "content": "e939f08df0545847ea0d3e4b04a114b08499ad069ba8ec9461d1779f87a56e0c37273630a0f4c14e78c348d3ac7eb97f"
        },
        {
          "alg": "SHA3-256",
          "content": "1f0a8b1177773b3a8ace839df5eed63cbf56b24a38714898a6e4ed065c42559f"
        },
        {
          "alg": "SHA3-512",
          "content": "6b495ecc2a18b17365cb08d124a0da47f04bcdde81927b5245edf3edd8e498c3c3fb92ce6a4127f660bac851bb1d3e4510e5c20d03be47ce99dc296d360db285"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/guava/listenablefuture",
          "type": "website"
        },
        {
          "url": "https://travis-ci.org/google/guava",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/google/guava/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/google/guava/listenablefuture",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar",
      "group": "com.google.j2objc",
      "name": "j2objc-annotations",
      "version": "2.8",
      "description": "A set of annotations that provide additional information to the J2ObjC translator to modify the result of translation.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c50af69b704dc91050efb98e0dff66d1"
        },
        {
          "alg": "SHA-1",
          "content": "c85270e307e7b822f1086b93689124b89768e273"
        },
        {
          "alg": "SHA-256",
          "content": "f02a95fa1a5e95edb3ed859fd0fb7df709d121a35290eff8b74dce2ab7f4d6ed"
        },
        {
          "alg": "SHA-512",
          "content": "f8263868a792b41707c9e7fe6fa5650a14cd93fbeafad20efe3772a3058fc933eb59782ec59e6eb9b9c569aa96da80134ae9fdf7547b69c44a97087efddceeff"
        },
        {
          "alg": "SHA-384",
          "content": "e6087ec31fec8289158496ad2ed6ce8472d5d513808a312e0782cedac3b86c37a62a63c0b5ea3839491d109fe9e148a1"
        },
        {
          "alg": "SHA3-384",
          "content": "10add34bfeb8612283eef89ac96747a3c9b755acd80ad526e1addaeb7efd6323c52b9bfa1a3d34adb40e1ccb963ee65d"
        },
        {
          "alg": "SHA3-256",
          "content": "b3336f8abd6b1f73b9f06d306974557000a000073bfbae6b54fda26d17dbb072"
        },
        {
          "alg": "SHA3-512",
          "content": "d376c184a6df071c4e93b913d175b5c2e63deac37105dc20342c19bdda62e4e9598ca1e8bfb4f4fd5cdee6dd5ac3b8af49e2c5193e324d59a59ce1f7adeab627"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/j2objc/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "http://svn.sonatype.org/spice/trunk/oss/oss-parent-9/j2objc-annotations",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.swagger.core.v3/swagger-jaxrs2-jakarta@2.2.37?type=jar",
      "group": "io.swagger.core.v3",
      "name": "swagger-jaxrs2-jakarta",
      "version": "2.2.37",
      "description": "swagger-jaxrs2-jakarta",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f6a1a3b32e26828c88e065364bedba45"
        },
        {
          "alg": "SHA-1",
          "content": "ea335898fb1c3c06137a36434dc22c74856be72c"
        },
        {
          "alg": "SHA-256",
          "content": "e96d9cbef90768b9c19959da623dd5b27fa371289c006cf71d294dce796492f7"
        },
        {
          "alg": "SHA-512",
          "content": "a1cda2d658ea12b09c363b86e47d0e93c32ccba8a0801a33143539c56380b9055fbc41347bd8aa08dad24d63726a7018b7d01ca99d997e0838de3f2426adaa21"
        },
        {
          "alg": "SHA-384",
          "content": "2b4a38aeae6a1bc78352cd27208457b11884a1ea00743af23c56b91bd25c4496675b1dd410fa3c586c14683b5828e012"
        },
        {
          "alg": "SHA3-384",
          "content": "a97d02462ce6b70b22d920fdcbf7f9dd227436079a5454f5d0e69369260c1abcb07f43b709b2dea8f97c599aaf18382a"
        },
        {
          "alg": "SHA3-256",
          "content": "70959d420162850093e657b821d9c00fe6d42d0b9547222a7b8f9320882d75ed"
        },
        {
          "alg": "SHA3-512",
          "content": "157960926b881148ea27d66957bbf4797cd8d944c5c0dfa1f6721c5c8cc18272a352531bf998f3ad93f8e02e27b27e76900796d46cf984c4877b836d37425a20"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.swagger.core.v3/swagger-jaxrs2-jakarta@2.2.37?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/swagger-api/swagger-core/modules/swagger-jaxrs2-jakarta",
          "type": "website"
        },
        {
          "url": "https://github.com/swagger-api/swagger-core/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://groups.google.com/forum/#!forum/swagger-swaggersocket",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/swagger-api/swagger-core/modules/swagger-jaxrs2-jakarta",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.classgraph/classgraph@4.8.181?type=jar",
      "group": "io.github.classgraph",
      "name": "classgraph",
      "version": "4.8.181",
      "description": "The uber-fast, ultra-lightweight classpath and module scanner for JVM languages.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5f64d57d0103d252c0ac30fd3f3d6e7a"
        },
        {
          "alg": "SHA-1",
          "content": "b9d104d7bab46d70ee8839acc1a91c41bb9454de"
        },
        {
          "alg": "SHA-256",
          "content": "62a6436d69710ef5fab6ec243781ce4c5b299047ed1841b5f92746ae852ce545"
        },
        {
          "alg": "SHA-512",
          "content": "56ddba7508c2e56f710af1d4c619ccdfda3acc378cfde71d7e5a13b62c1388b424fa91133e528edc16e9619093fb888b2ec7aaa9721d8e14e101ee2a4a00877a"
        },
        {
          "alg": "SHA-384",
          "content": "b1e927735dad28b880c5f2abdbac6096368c39f71abd5fa9511798eae589fd12f0396c6364df3cb7f4d7d5d34a498bfe"
        },
        {
          "alg": "SHA3-384",
          "content": "830d1dc50a8b5b11b40c899b1265c21fe0c0542af603540373d4ba564dc51ad47447534821c302b6f7c6e1a9ea4c2de1"
        },
        {
          "alg": "SHA3-256",
          "content": "755d6f391915d3adc95c3cb0ff3ab4071bc04950e770556d4114b79bd1eae74e"
        },
        {
          "alg": "SHA3-512",
          "content": "5e4bf07f66f9ef7d226e141746f040a5345c13d2612f1492ab19a6bcd2c2613c22ea807f324a9e143d81d6b1b182c06a8974383d388873dea98dfd54d486f358"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:maven/io.github.classgraph/classgraph@4.8.181?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/classgraph/classgraph",
          "type": "website"
        },
        {
          "url": "https://github.com/classgraph/classgraph/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/classgraph/classgraph",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.swagger.core.v3/swagger-models-jakarta@2.2.37?type=jar",
      "group": "io.swagger.core.v3",
      "name": "swagger-models-jakarta",
      "version": "2.2.37",
      "description": "swagger-models-jakarta",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e004fea721ad3ba70e0273993c1f3dff"
        },
        {
          "alg": "SHA-1",
          "content": "e7c565a8528d8ca60fe97436059c946bc85f842f"
        },
        {
          "alg": "SHA-256",
          "content": "bfbc9bc77baa460ccd801e7893c108f0354ba68957a633f89b0e927d7b7985cc"
        },
        {
          "alg": "SHA-512",
          "content": "24bb1654ac38d5d8470cee71dafb8cf70a1b003a061311e567b805e027342e2bf3902cf8ff92bf7e4f270a3cf0f55725d80d74369a37b714e2657d5311de6b3b"
        },
        {
          "alg": "SHA-384",
          "content": "0f546fa6fd9b3a1e3a767e43dd44dd8a3cfdece76414ae47a7d1315f98baa66354df92c7487ce286396a5ab48c238824"
        },
        {
          "alg": "SHA3-384",
          "content": "1012be70ef4672e9a93f712c9bca92b7a07fceebeca427f0099843c73f5d9a9e88db1b28e12f3c135214bc741c5748e0"
        },
        {
          "alg": "SHA3-256",
          "content": "648715ae9f2f50bbc4daad024905a968b7121ea4503759d6cd4f6b9b4f3827ea"
        },
        {
          "alg": "SHA3-512",
          "content": "b28a5e7ff17ba0b8703916d6f7e6de6259cfb1adffdafd15711c5f5a56f14dad3a33214548ea1bc1bbb586b6d3cedf7828c9ba5132a36e0623032e255a3f90ad"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.swagger.core.v3/swagger-models-jakarta@2.2.37?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/swagger-api/swagger-core/modules/swagger-models-jakarta",
          "type": "website"
        },
        {
          "url": "https://github.com/swagger-api/swagger-core/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://groups.google.com/forum/#!forum/swagger-swaggersocket",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/swagger-api/swagger-core/modules/swagger-models-jakarta",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.swagger.core.v3/swagger-integration-jakarta@2.2.37?type=jar",
      "group": "io.swagger.core.v3",
      "name": "swagger-integration-jakarta",
      "version": "2.2.37",
      "description": "swagger-integration-jakarta",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "de76eda7177173ef1a93f54b1e585a57"
        },
        {
          "alg": "SHA-1",
          "content": "7ee631e5b28717c9d6100a37ba21bdfdde0280ab"
        },
        {
          "alg": "SHA-256",
          "content": "356d23131819232999ec232f031e05223fecc2d3f754679f29e74dce50e8758d"
        },
        {
          "alg": "SHA-512",
          "content": "1e908aed0a88a687054fd50c5374e194dc1bf28d66d56df939b6115ed9d99bac64cba6453c1c53766dc5ac3c4a7737e7bb89e1a8608099bd12b1bf0e7f3d09fc"
        },
        {
          "alg": "SHA-384",
          "content": "e1d865878f9bfdf9beb362de25aea6ea45aa07ff4ac4848b01bc60231a920e27f67556976f54a7e19ec297ec201a70fa"
        },
        {
          "alg": "SHA3-384",
          "content": "cafd2403f7a68fe663744c15768885a8b04f4f7fc5b9a39b5c3ec0ec302d21022d7d2d24fa8d229019ce0cc352ebc40d"
        },
        {
          "alg": "SHA3-256",
          "content": "30013fd8245146e7633842e71929e33127ffdfa7475e15110dbe986a715b10e7"
        },
        {
          "alg": "SHA3-512",
          "content": "8f8f11e03110df510fcaa3450208ad9e90cd34a8b4a303efd53268e2e4faf24d6d3ca9979643c8cb59252deaa10540fa329019f65df687dc46ab0fd5f3f44a09"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.swagger.core.v3/swagger-integration-jakarta@2.2.37?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/swagger-api/swagger-core/modules/swagger-integration-jakarta",
          "type": "website"
        },
        {
          "url": "https://github.com/swagger-api/swagger-core/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://groups.google.com/forum/#!forum/swagger-swaggersocket",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/swagger-api/swagger-core/modules/swagger-integration-jakarta",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.swagger.core.v3/swagger-core-jakarta@2.2.37?type=jar",
      "group": "io.swagger.core.v3",
      "name": "swagger-core-jakarta",
      "version": "2.2.37",
      "description": "swagger-core-jakarta",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9123fc16b0788de3225b31cfa52146cb"
        },
        {
          "alg": "SHA-1",
          "content": "4bea7f4640f7890fa7d5ea127e679c18452a0cf1"
        },
        {
          "alg": "SHA-256",
          "content": "fc558b6ed64fc01490dbe1dbd887643f2688c6fcd4be85d66ba6f016c5b3ac53"
        },
        {
          "alg": "SHA-512",
          "content": "eac7ffc45d5f0efa203a0b5a99ddc4f5534272ecf9cffaa1b98e649bc813a77e31b773d0285de94f3b27b1f66f604bcda9ff8605196b932adb393212f77c1409"
        },
        {
          "alg": "SHA-384",
          "content": "185a8e3297689ed1d8c837f4f56bbef3087916d29cd345c5634ae0e29651b94d987dcca8edb86f22f842eaca288e36bb"
        },
        {
          "alg": "SHA3-384",
          "content": "ce3c2f8d664bdfd38a68635eb0c874d0ba36a3cc85811b80d4b59facf397a476d0fb754729a7fff918d617ce718d4299"
        },
        {
          "alg": "SHA3-256",
          "content": "c5eda3a0afb2f3afad9f264bfec7e2c705ab2644e583eec1b502aa0729f8083b"
        },
        {
          "alg": "SHA3-512",
          "content": "39906afeb10cfca7cdb4964450487f001341d646cce63c39c6e43791eed5ba694502a64502b7b10589f456f225a5fa3900b6f518f46f80707f3364801cc61906"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.swagger.core.v3/swagger-core-jakarta@2.2.37?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/swagger-api/swagger-core/modules/swagger-core-jakarta",
          "type": "website"
        },
        {
          "url": "https://github.com/swagger-api/swagger-core/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://groups.google.com/forum/#!forum/swagger-swaggersocket",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/swagger-api/swagger-core/modules/swagger-core-jakarta",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.yaml/snakeyaml@2.3?type=jar",
      "group": "org.yaml",
      "name": "snakeyaml",
      "version": "2.3",
      "description": "YAML 1.1 parser and emitter for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2a1c2ee8923dcd6bd6d025751af5df37"
        },
        {
          "alg": "SHA-1",
          "content": "936b36210e27320f920536f695cf1af210c44586"
        },
        {
          "alg": "SHA-256",
          "content": "63a76fe66b652360bd4c2c107e6f0258daa7d4bb492008ba8c26fcd230ff9146"
        },
        {
          "alg": "SHA-512",
          "content": "1c9c78f0d102ae49a7c06f9e20c6a79a4fb9a2af962230ee6e136bda0caf10dcbb9deadc1c3ab15f74a4982ec8f8266217115e357329fde5b3f4f1858882de0c"
        },
        {
          "alg": "SHA-384",
          "content": "77b1d06e83fd51b83b13372d5ef2eb43c5a66f193db857cee947ae4e900e4a4a0c66a8074435984b9a0b007a69cc2b4f"
        },
        {
          "alg": "SHA3-384",
          "content": "550c4e7a119fd690f750317dc0e20ad7bfc7fa28fa0409fc572bc745d51340a60e9e2ce2af97f458daa561155130bb97"
        },
        {
          "alg": "SHA3-256",
          "content": "d1b540ee39c34ab1484be27d2dd56a14aa48f88668905f9ad176932f4b2cd5d6"
        },
        {
          "alg": "SHA3-512",
          "content": "879ccb34343ebd4ac4888091d97f393c5f75cbb066cf8cf1b9b3eb03a3442cb17326c60bd0db1403aa66ed1f0a5a0d548c96dbce74ebc5c3d6d93950f24b417f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.yaml/snakeyaml@2.3?type=jar",
      "externalReferences": [
        {
          "url": "https://bitbucket.org/snakeyaml/snakeyaml",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://bitbucket.org/snakeyaml/snakeyaml/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://bitbucket.org/snakeyaml/snakeyaml/src",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents",
      "name": "httpclient",
      "version": "4.5.14",
      "description": "Apache HttpComponents Client",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2cb357c4b763f47e58af6cad47df6ba3"
        },
        {
          "alg": "SHA-1",
          "content": "1194890e6f56ec29177673f2f12d0b8e627dec98"
        },
        {
          "alg": "SHA-256",
          "content": "c8bc7e1c51a6d4ce72f40d2ebbabf1c4b68bfe76e732104b04381b493478e9d6"
        },
        {
          "alg": "SHA-512",
          "content": "a084ef30fb0a2a25397d8fab439fe68f67e294bf53153e2e1355b8df92886d40fe6abe35dc84f014245f7158e92641bcbd98019b4fbbd9e5a0db495b160b4ced"
        },
        {
          "alg": "SHA-384",
          "content": "c8ccaa1fa8ba7c421413e3c30375bd9c31284e837c476fd831e18043ad4187e92166f49554123108891241bed674b95d"
        },
        {
          "alg": "SHA3-384",
          "content": "9a17dfcf12b2af3a9b006ec369f9bc78ba322348bf1a01146e0d4f3fec2bed6cbe8b2193fac5b4d5a0c3036c06477510"
        },
        {
          "alg": "SHA3-256",
          "content": "48f0a61b691e22dec9d6db8e0b58be4ca17a42a2846c82f0875de21f72bb0faa"
        },
        {
          "alg": "SHA3-512",
          "content": "4ad2c9adc761b7e813330f0dcad3f9978702896c7d0cbf81f60a472d550e320b1527be425ba597c8c9352d587e32e1d46ceb4c73e99c70a6190df4c699a7c2a9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
      "externalReferences": [
        {
          "url": "http://hc.apache.org/httpcomponents-client-ga",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "http://issues.apache.org/jira/browse/HTTPCLIENT",
          "type": "issue-tracker"
        },
        {
          "url": "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/httpcomponents-client/tree/4.5.14/httpclient",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents",
      "name": "httpcore",
      "version": "4.4.16",
      "description": "Apache HttpComponents Core (blocking I/O)",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "28d2cd9bf8789fd2ec774fb88436ebd1"
        },
        {
          "alg": "SHA-1",
          "content": "51cf043c87253c9f58b539c9f7e44c8894223850"
        },
        {
          "alg": "SHA-256",
          "content": "6c9b3dd142a09dc468e23ad39aad6f75a0f2b85125104469f026e52a474e464f"
        },
        {
          "alg": "SHA-512",
          "content": "168026436a6bcf5e96c0c59606638abbdc30de4b405ae55afde70fdf2895e267a3d48bba6bdadc5a89f38e31da3d9a9dc91e1cab7ea76f5e04322cf1ec63b838"
        },
        {
          "alg": "SHA-384",
          "content": "ba9ceaee1a37ca3201d6a1315ecb0327b495489efd0baa155c219c475df8d3eb69fe77ab0026563db406497626da6562"
        },
        {
          "alg": "SHA3-384",
          "content": "b9dc44dcc7cc86d5036f26d54c4003a2d72808ae7b07a0808bb53505c6d4281b5ad213eb1f3d0fef1113dec57cb0dfe1"
        },
        {
          "alg": "SHA3-256",
          "content": "fd8ab51846476c6c18822151c9ec07b39a9633010b5d20ea937fc6910407bc64"
        },
        {
          "alg": "SHA3-512",
          "content": "b42fa528242981a9d70e4f68ab75a24292df5112c44c21b6f18cb9201ce747885ba1d4dc69bc3d14d0da46a6c2638f937c11bc45749abeb55dc89ddada90cdda"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
      "externalReferences": [
        {
          "url": "http://hc.apache.org/httpcomponents-core-ga",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "http://issues.apache.org/jira/browse/HTTPCORE",
          "type": "issue-tracker"
        },
        {
          "url": "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/httpcomponents-core/tree/4.4.16/httpcore",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "commons-logging",
      "name": "commons-logging",
      "version": "1.2",
      "description": "Apache Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "040b4b4d8eac886f6b4a2a3bd2f31b00"
        },
        {
          "alg": "SHA-1",
          "content": "4bfc12adfe4842bf07b657f0369c4cb522955686"
        },
        {
          "alg": "SHA-256",
          "content": "daddea1ea0be0f56978ab3006b8ac92834afeefbd9b7e4e6316fca57df0fa636"
        },
        {
          "alg": "SHA-512",
          "content": "ed00dbfabd9ae00efa26dd400983601d076fe36408b7d6520084b447e5d1fa527ce65bd6afdcb58506c3a808323d28e88f26cb99c6f5db9ff64f6525ecdfa557"
        },
        {
          "alg": "SHA-384",
          "content": "ac20720d7156131478205f1b454395abf84cfc8da2f163301af32f63bd3c4764bd26cb54ed53800f33193ae591f3ce9c"
        },
        {
          "alg": "SHA3-384",
          "content": "628eb4407e95dca84da1a06b08a6d9b832a49de8472b1b217e8607f08efeeed18b996232d64dd07f03e78e0e3bb4b078"
        },
        {
          "alg": "SHA3-256",
          "content": "9aab62deccf156ee6e324c925dfc30ecb53e8465802863a551901a461424e807"
        },
        {
          "alg": "SHA3-512",
          "content": "3fd76857f6d20c03799537cc961c1c4ddf1c375c6c192fb982363e3b9397ba138b77f24ef38b4202f44e37586789c0320e4de18fdadd2772304fd14a9b26d552"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
      "externalReferences": [
        {
          "url": "http://commons.apache.org/proper/commons-logging/",
          "type": "website"
        },
        {
          "url": "https://continuum-ci.apache.org/",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "http://issues.apache.org/jira/browse/LOGGING",
          "type": "issue-tracker"
        },
        {
          "url": "http://mail-archives.apache.org/mod_mbox/commons-user/",
          "type": "mailing-list"
        },
        {
          "url": "http://svn.apache.org/repos/asf/commons/proper/logging/trunk",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.4.3?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents.client5",
      "name": "httpclient5",
      "version": "5.4.3",
      "description": "Apache HttpComponents Client",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1c4d8427607d7660e49759028e200566"
        },
        {
          "alg": "SHA-1",
          "content": "2f3fc0687c6fa39b0aad7cf7c3cf171ec8ad009b"
        },
        {
          "alg": "SHA-256",
          "content": "739e035679c68e15efa93b44c808a453bc98eaac1722e5a80cab15c026223022"
        },
        {
          "alg": "SHA-512",
          "content": "e56109f0ca17470631bf6962b59ad810eb1dfb7184888f207457510c8f0232b9374cd06cd18fdd2556733c9734288ae9c7569087b569f5bc2ec13a110d47c8c6"
        },
        {
          "alg": "SHA-384",
          "content": "f3be7c666a1ac83b21312205e72480a714d9291dd5bb36f528393ca2ae373f51e0883248daf67c6388ae465b0922b358"
        },
        {
          "alg": "SHA3-384",
          "content": "2ab5c06cad61af7d139a2becd942f4f711588a021712ca992c1045a987c1cc2446844a0b3d361bb0713f939ea14f3dc8"
        },
        {
          "alg": "SHA3-256",
          "content": "27b63a3e26d66bfcd341dc7a3dbefad30a077c0c4cd2dfcfd0fe120c869d7051"
        },
        {
          "alg": "SHA3-512",
          "content": "5ff6461115b3248c5b852f3f4c26146dd69647cb7d38de01819c4d0bb9e131e14e7dc72bfb5c863c8739990c51bfa57b1cb28e382ce2ca607ef0e815d609cd2a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.4.3?type=jar",
      "externalReferences": [
        {
          "url": "https://hc.apache.org/httpcomponents-client-5.4.x/5.4.3/httpclient5/",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://issues.apache.org/jira/browse/HTTPCLIENT",
          "type": "issue-tracker"
        },
        {
          "url": "https://lists.apache.org/list.html?httpclient-users@hc.apache.org",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/httpcomponents-client/tree/5.4.3/httpclient5",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.3.4?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents.core5",
      "name": "httpcore5",
      "version": "5.3.4",
      "description": "Apache HttpComponents HTTP/1.1 core components",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "7b20d8a28f51b648fb3e8e4303885609"
        },
        {
          "alg": "SHA-1",
          "content": "ea47f0fe6e00ffb07cec3a0cb1bb801b1a9cc353"
        },
        {
          "alg": "SHA-256",
          "content": "f2b2fd7a0164e8c3120cd8437bc9fea439239e165c17262b3e907daa7e979f80"
        },
        {
          "alg": "SHA-512",
          "content": "a892b3458b9f7a9ee0e8b22121680994a78f70498ce22b3c26462538856b7f000e5807afa853c4c0fee638bca9148ba5b19a495bd9049da2023f077a11d567ac"
        },
        {
          "alg": "SHA-384",
          "content": "581af0dff3b2b2916dbef5cbfd92b11d92b5134efcc347433994c8423885001a016eddc55857173e4e07b4f35eb2ed06"
        },
        {
          "alg": "SHA3-384",
          "content": "ed24c76060d9ad575e2da80176c97a06c7266ed6e3ebc933f791c7a9d6bad3cfc487d36ae4d733ee7e4a1c9468350643"
        },
        {
          "alg": "SHA3-256",
          "content": "9874cae80a78848318fb1ac9e0fb21b516ccc049a9abc267f6fd160c013d3641"
        },
        {
          "alg": "SHA3-512",
          "content": "eb10d4e176d450202d5abcec5d0f754182ad94c4322373997836842790aef756de6b625a49c7d70fea3d432c8dfe892677b0965f70cd10d5ff66ba6be59e449c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.3.4?type=jar",
      "externalReferences": [
        {
          "url": "https://hc.apache.org/httpcomponents-core-5.3.x/5.3.4/httpcore5/",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://issues.apache.org/jira/browse/HTTPCORE",
          "type": "issue-tracker"
        },
        {
          "url": "https://lists.apache.org/list.html?httpclient-users@hc.apache.org",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/httpcomponents-core/tree/5.3.4/httpcore5",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.3.4?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents.core5",
      "name": "httpcore5-h2",
      "version": "5.3.4",
      "description": "Apache HttpComponents HTTP/2 Core Components",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "45cddb0e4be800806019ef8d9bfa7931"
        },
        {
          "alg": "SHA-1",
          "content": "3742a9a9ba3a5a0d45be230093b52a1302a561e2"
        },
        {
          "alg": "SHA-256",
          "content": "1fb4f34e4b612e7c127ad693335583587850b17ce9b1c366f9de1ca49fe2c781"
        },
        {
          "alg": "SHA-512",
          "content": "ff6a6ffa1f6e4974011778ea8ffb6771c52c8b1ec161f7f411f7d6e0ec2988a36cf3c9636da956222a91a81f2718a215bc176b678cb6ef98ff44bc6cfe4b80e7"
        },
        {
          "alg": "SHA-384",
          "content": "0e5a679b26abd8b170f7f5afded5a3923908dfd0fc92e90ab4757e561fa92a0e36cf2129313c355245810db9061fb309"
        },
        {
          "alg": "SHA3-384",
          "content": "a203c70cd9e2d7f378b4745886ac8a25c2bcee599dc9f66f4be295deed81a70d68ba7b69d8a658a3a6fe9f14fda9dada"
        },
        {
          "alg": "SHA3-256",
          "content": "cd90c09e8b92780fc77a197bea9f7a056ca79e80359d5f356727e1a132ac57fc"
        },
        {
          "alg": "SHA3-512",
          "content": "e792b5a49e3b5dfd71de0130122cf5b52dac056bbc27aa67863d3b4877e721a0774a0483f41bae89016ddb1f8444e3a4cc2fda25213f38d008788ced76f14c18"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.3.4?type=jar",
      "externalReferences": [
        {
          "url": "https://hc.apache.org/httpcomponents-core-5.3.x/5.3.4/httpcore5-h2/",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://issues.apache.org/jira/browse/HTTPCORE",
          "type": "issue-tracker"
        },
        {
          "url": "https://lists.apache.org/list.html?httpclient-users@hc.apache.org",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/httpcomponents-core/tree/5.3.4/httpcore5-h2",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/oauth.signpost/signpost-core@2.1.1?type=jar",
      "group": "oauth.signpost",
      "name": "signpost-core",
      "version": "2.1.1",
      "description": "A simple, light-weight, and modular OAuth client library for the Java platform.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ef778c731f9b6cbb8311a780b1f4094f"
        },
        {
          "alg": "SHA-1",
          "content": "e307e72ff918b775f797f364b1fd442f23b5408a"
        },
        {
          "alg": "SHA-256",
          "content": "2628d8c1928e512cea34001c1108bfe251049b1ef747ba284aa7c781c24b2e79"
        },
        {
          "alg": "SHA-512",
          "content": "9c3a0934458de2d79c00d53422b838e17369cece5e325b11709af1c74e368c58de1c175eed689a247f6ab622f2a67c2ccd06283864e64d95abdbc26629d0226d"
        },
        {
          "alg": "SHA-384",
          "content": "c4051510406394dd52cbb6170f20869e5cef2b026e88c672908bb2ceaeeb43cd88df2811dd75fbe6ad37f2c523f562cd"
        },
        {
          "alg": "SHA3-384",
          "content": "1a09cf0e64cd9366f19197b6a66b3a94bb4851efa596f94538890d01e3261a611a7ceb6768512e5e3c2fd8fc5d3d01c4"
        },
        {
          "alg": "SHA3-256",
          "content": "190333f0f7c94e3db5f4d49392d454f43c710e43266fbb6049b58f8e22dc1548"
        },
        {
          "alg": "SHA3-512",
          "content": "9f0c3184b752c9ed73ab4f34805e62cafde30dc4b94f2dc55aa9645c15921ebaeba3f2bf3202ed98e60f3bb66e47945b1449e07fd559e0654afbe92f2a6a94c5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/oauth.signpost/signpost-core@2.1.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/mttkay/signpost/releases/signpost-core",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/mttkay/signpost/pulls",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/mttkay/signpost/signpost-core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.brotli/dec@0.1.2?type=jar",
      "group": "org.brotli",
      "name": "dec",
      "version": "0.1.2",
      "description": "Brotli is a generic-purpose lossless compression algorithm.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4b1cd14cf29733941cc536b27e6aedfa"
        },
        {
          "alg": "SHA-1",
          "content": "0c26a897ae0d524809eef1c786cc6183b4ddcc3b"
        },
        {
          "alg": "SHA-256",
          "content": "615c0c3efef990d77831104475fba6a1f7971388691d4bad1471ad84101f6d52"
        },
        {
          "alg": "SHA-512",
          "content": "d4cd2b33f7c358012ff01db6a13ebfe1e8051a580698bffcd942c47451012cf53ce49a400b1c8bf7502b01e631d79d7c6417202a145622572d79fd145ccde61a"
        },
        {
          "alg": "SHA-384",
          "content": "d6b8ad9d0ee6baf8c3a29c1dc2911eaf207352e2c7de893a0185e987e7eae87827890c1d4dbf31c46f25846fbcdc08bb"
        },
        {
          "alg": "SHA3-384",
          "content": "d16c32130bf6b168ff4c8a3dedf1b17787f8d6f0eab9de21e51ed3ab1e7d85925dd02315972f6ca3a4493357aad545cb"
        },
        {
          "alg": "SHA3-256",
          "content": "962dc76a5c487de8d34308860ab65927bf91f50ccb12f37bffb036a7a05145a4"
        },
        {
          "alg": "SHA3-512",
          "content": "a82a3f79b57d30613606ca51dc432b097fa75aab5c87fb45eabec6d80ddeff1b329100b325bb07005aebaec166952c4599a863d4bfd5a684bad21103a2046311"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl": "pkg:maven/org.brotli/dec@0.1.2?type=jar",
      "externalReferences": [
        {
          "url": "http://brotli.org/dec",
          "type": "website"
        },
        {
          "url": "https://github.com/google/brotli/dec",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.httpcomponents/httpmime@4.5.14?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents",
      "name": "httpmime",
      "version": "4.5.14",
      "description": "Apache HttpComponents HttpClient - MIME coded entities",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "714c4ae31c40e6633c0bcaa4e6264153"
        },
        {
          "alg": "SHA-1",
          "content": "6662758a1f1cb1149cf916bdac28332e0902ec44"
        },
        {
          "alg": "SHA-256",
          "content": "d401243d5c6eae928a37121b6e819158c8c32ea0584793e7285bb489ab2a3d17"
        },
        {
          "alg": "SHA-512",
          "content": "884b062028f68278389b74ccfbc35142caae489ceda5df01d2c60df884b9604cd4055bf4e1524e0358661fa0e88e93e614fb6be590cb940510b07a37c0b0a20c"
        },
        {
          "alg": "SHA-384",
          "content": "88ec9117630f714abcebae122c9e10852706f88917ac12c610b975538c14a10fd5b1ec9213163b0cb950e9c9b7a74fe6"
        },
        {
          "alg": "SHA3-384",
          "content": "8f1d2b58f6a74585833611b1219c78cb37737fc75e3e2cb58804d87df93a28107da6c49a86b139dff46a7973260fdf11"
        },
        {
          "alg": "SHA3-256",
          "content": "7fdd67408fb7beacf7c00415476e9b61903c90ad06a50a7d500aa045d5747bbd"
        },
        {
          "alg": "SHA3-512",
          "content": "5075045ce4e6faa77907d762ceb24660d13b225505bb81a1b0f101a736d4ad2f4c914ce7d04137d1506495eaa437aa64bb1ac08130f4b6a76e0025f8463f7353"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents/httpmime@4.5.14?type=jar",
      "externalReferences": [
        {
          "url": "http://hc.apache.org/httpcomponents-client-ga",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "http://issues.apache.org/jira/browse/HTTPCLIENT",
          "type": "issue-tracker"
        },
        {
          "url": "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/httpcomponents-client/tree/4.5.14/httpmime",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.0.0?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.woodstox",
      "name": "woodstox-core",
      "version": "7.0.0",
      "description": "Woodstox is a high-performance XML processor that implements Stax (JSR-173), SAX2 and Stax2 APIs",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "497e4f32ca6f31e5c1bb8e9405831e74"
        },
        {
          "alg": "SHA-1",
          "content": "beb19c02e7e28a8a4acf4a9cc8c3280ec3b94722"
        },
        {
          "alg": "SHA-256",
          "content": "eeb3853282c24964a93a6eb4c1bbcb60c8d09fd8e0ffc75ab64ad21045a1fa78"
        },
        {
          "alg": "SHA-512",
          "content": "f7a687d2778fbc7081ef5f0bcc1c780d52783446d52e3598662513608647096e487d628aa998345c03fb9691bdf3768341bb8126f132c2721de33aa5bd802ec1"
        },
        {
          "alg": "SHA-384",
          "content": "7b1fb07b52ce2307ca0cb15921fa37d8d41e80ef63e5d36813933a1fe7a2b00d456c364d91f26ed030df9c7b76a29d4d"
        },
        {
          "alg": "SHA3-384",
          "content": "7cbfa405777e00b798d2d2379688ebd8b3f4a5e483e9a9797ca38cb747480a2edffb33c2532fe87c91d1afb2f32e9f11"
        },
        {
          "alg": "SHA3-256",
          "content": "62a20ee9764b9d19aed1b0df6dc850496409f638ed152dea65e2a5ed73d6cb3b"
        },
        {
          "alg": "SHA3-512",
          "content": "07d1b8b84aeeae98020fcb439b6ff69c34868741a739d7aaf7cdbe7fc76af1d204b114422441a7db856f3aff3691399e7e1ea1f67ce48e1b42267352767ba11a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/woodstox",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/FasterXML/woodstox/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/woodstox",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar",
      "publisher": "fasterxml.com",
      "group": "org.codehaus.woodstox",
      "name": "stax2-api",
      "version": "4.2.2",
      "description": "Stax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6949cace015c0f408f0b846e3735d301"
        },
        {
          "alg": "SHA-1",
          "content": "b0d746cadea928e5264f2ea294ea9a1bf815bbde"
        },
        {
          "alg": "SHA-256",
          "content": "a61c48d553efad78bc01fffc4ac528bebbae64cbaec170b2a5e39cf61eb51abe"
        },
        {
          "alg": "SHA-512",
          "content": "1c0587ecb4c5a659ce2ae1fe36ffc12636a8ecba549a29f2cf91cb4d1d36a335c05f35776f480488d40d894230389f76aeeb363887026c6ef5c565995c17b7c6"
        },
        {
          "alg": "SHA-384",
          "content": "3b617db8307a081df858a4110f5b8fec51c06355762506cbc4be5557fb06959f0499f7e672103d46f71c66bae472a7bd"
        },
        {
          "alg": "SHA3-384",
          "content": "22a3150713f7072962e26c286a1ef97d849b10d7f1251c56ae34252f247127b56dd189daa758c64776b4196ee0060517"
        },
        {
          "alg": "SHA3-256",
          "content": "174868c81672068b42ccde35310d4dad60f457b795101e99588c28b0eebdefc2"
        },
        {
          "alg": "SHA3-512",
          "content": "c88de5a2137e3b63b632ef24799a677c998b76e736407f1e8c6af85d1b6a94c76bc20d26e6cac847d8383ab6760f1b5c2ae7574fba21e1e6a96de7cdd38f0e39"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/FasterXML/stax2-api",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/FasterXML/stax2-api/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/FasterXML/stax2-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.maven/maven-artifact@3.9.9?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.maven",
      "name": "maven-artifact",
      "version": "3.9.9",
      "description": "Maven is a software build management and comprehension tool. Based on the concept of a project object model: builds, dependency management, documentation creation, site publication, and distribution publication are all controlled from the declarative file. Maven can be extended by plugins to utilise a number of other development tools for reporting or the build process.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "fcb27c2b8225edec3f2356973fa39e98"
        },
        {
          "alg": "SHA-1",
          "content": "a130ec431ef32e12a4424f9b074735bb58e15d2d"
        },
        {
          "alg": "SHA-256",
          "content": "30f015d1c1a393e19c18cd4f43532089c36d4ca328608ce3dda78b74d3d31515"
        },
        {
          "alg": "SHA-512",
          "content": "d9ef181d2d7284c3c4bd1537171cfd1d6e1fd2f365293b71515f039d6951ab1bf40af5240e3b47229c54aaf967078da0d8dfaf79c5f2406ed4966b9a4ac0db92"
        },
        {
          "alg": "SHA-384",
          "content": "40186026f8d4b7fecbb7ac283128efb3667aa12ef39d12ecb3c4c9a1c424b90693ff16412b891ac0109432ad1482418e"
        },
        {
          "alg": "SHA3-384",
          "content": "aa018d441ce753b0b8091622e734d84a45114022a5bb806880e5016ecd4afcbb5e1c4b3054d56a8b1dca131c70c72a0e"
        },
        {
          "alg": "SHA3-256",
          "content": "6c4faabeae8bbba3746f11b27ba1222b35c3de5ce434e04b8aa1df6b4572a4dc"
        },
        {
          "alg": "SHA3-512",
          "content": "02c324849c45463d233dfee4dc36e0f41d1983cd24fb13f92890b764f12b84d76d4e36fc7e51c07dc9db533fa08c0119486fe22cb384b009dd1313dcd70ade7a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.maven/maven-artifact@3.9.9?type=jar",
      "externalReferences": [
        {
          "url": "https://maven.apache.org/ref/3.9.9/maven-artifact/",
          "type": "website"
        },
        {
          "url": "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/",
          "type": "build-system"
        },
        {
          "url": "https://maven.apache.org/download.html",
          "type": "distribution"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://issues.apache.org/jira/browse/MNG",
          "type": "issue-tracker"
        },
        {
          "url": "https://lists.apache.org/list.html?users@maven.apache.org",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/maven/tree/maven-3.9.9/maven-artifact",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar",
      "publisher": "Codehaus Plexus",
      "group": "org.codehaus.plexus",
      "name": "plexus-utils",
      "version": "3.5.1",
      "description": "A collection of various utility classes to ease working with strings, files, command lines, XML and more.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "cdec471a77f52e687d0df4c43f392a71"
        },
        {
          "alg": "SHA-1",
          "content": "c6bfb17c97ecc8863e88778ea301be742c62b06d"
        },
        {
          "alg": "SHA-256",
          "content": "86e0255d4c879c61b4833ed7f13124e8bb679df47debb127326e7db7dd49a07b"
        },
        {
          "alg": "SHA-512",
          "content": "e2d4e7bc919deb022d0fcc428da066d62c34a02d248b184ffc3edcea08ffbdc354cd018240b21a0495eafcd01723a692e583803ccb10d99fbfa97f58a49f967f"
        },
        {
          "alg": "SHA-384",
          "content": "ace26d0a31c11f312f1f6c1300d35fa6d9ed173d1f2718639e7f0b68d987d0d8fb57ec95eb187c250a8656cac3252711"
        },
        {
          "alg": "SHA3-384",
          "content": "01fba8224fd90332e30c8633fc6cb3d4190af08d39f117f0b4c65d440fb8c174aa777fa52275db918dc941c3e5339518"
        },
        {
          "alg": "SHA3-256",
          "content": "79a135751f0df24eb9dd9d1d0c9c8907158234cddb1b710ebf43cc7a344a533b"
        },
        {
          "alg": "SHA3-512",
          "content": "f1f21811c5c5125479290ed3b5b2b07c11ee4b9671bcbd24e7e8b8a4123a2686673ee064ba38c1e195acbe2b533ca738289be3064ec77062a32a756ed851fba1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar",
      "externalReferences": [
        {
          "url": "https://codehaus-plexus.github.io/plexus-utils/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "http://github.com/codehaus-plexus/plexus-utils/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://archive.plexus.codehaus.org/user",
          "type": "mailing-list"
        },
        {
          "url": "http://github.com/codehaus-plexus/plexus-utils",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.microsoft.sqlserver/mssql-jdbc@12.10.0.jre11?type=jar",
      "publisher": "Microsoft Corporation",
      "group": "com.microsoft.sqlserver",
      "name": "mssql-jdbc",
      "version": "12.10.0.jre11",
      "description": "Microsoft JDBC Driver for SQL Server.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a45ca6099ee6f390bfdaf8814c900653"
        },
        {
          "alg": "SHA-1",
          "content": "5f1b09d67cd03170d87d5e288638c851632488e1"
        },
        {
          "alg": "SHA-256",
          "content": "8b80e2a3d254c26f66d479bc51d2d235f054eeb6e8394260c129bbd7fc7394a7"
        },
        {
          "alg": "SHA-512",
          "content": "a17280692c5aa31e5a546bc59867f38ab20dcb7ff2d972fcf434aadbd61496b446698000235342ace130c3f44a23d2583b5d64df02528c11345a37cf72ac7015"
        },
        {
          "alg": "SHA-384",
          "content": "1f3c43b967c0f870fc53d8ee45cf85f5ec879017a46bdda96fc3b6f46c5162d600be0b3ee966dea3e07920a5b4e67d92"
        },
        {
          "alg": "SHA3-384",
          "content": "b5dc09bae8ab107ca86cb0a71343e278c0d56312d468b45b760d5dbeef273f7a9366e81ed5fd7d35f37a29331f00f9e5"
        },
        {
          "alg": "SHA3-256",
          "content": "99f1779c74e659b36714b8efed9847fea7d5ce0bad4541cf967e70de77ed1413"
        },
        {
          "alg": "SHA3-512",
          "content": "4bbd88f46a1a26d43421f4b93d3908b77846d264e101609545ff4cf76b3aaa84ef70c6901e227f17240735a22cecd88fa8defa99ea22cdbc6471e7d867a28909"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl": "pkg:maven/com.microsoft.sqlserver/mssql-jdbc@12.10.0.jre11?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/Microsoft/mssql-jdbc",
          "type": "website"
        },
        {
          "url": "https://github.com/Microsoft/mssql-jdbc",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.mysql/mysql-connector-j@8.2.0?type=jar",
      "publisher": "Oracle Corporation",
      "group": "com.mysql",
      "name": "mysql-connector-j",
      "version": "8.2.0",
      "description": "JDBC Type 4 driver for MySQL.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a331817ab5c572777e25539a70b51bb6"
        },
        {
          "alg": "SHA-1",
          "content": "56d34aea30915904b1c883f1cfae731dd2df6029"
        },
        {
          "alg": "SHA-256",
          "content": "06f14fbd664d0e382347489e66495ca27ab7e6c2e1d9969a496931736197465f"
        },
        {
          "alg": "SHA-512",
          "content": "d1a8d3c171f5295f4b695bb33417bd2cb0d2b48570e7c260fc90c646d7c1154ca87b947be2e1f47f5ea082bc3c885029f726e2f1d68023740498986d660d09d1"
        },
        {
          "alg": "SHA-384",
          "content": "db0e7020e9a5d395ec5d7df385f19f9260850fc6d426818fceebbcdb7eeaf5500f6a5caa2971e0c4490a0f244fd3cd24"
        },
        {
          "alg": "SHA3-384",
          "content": "4913d19adaae72c80f5bcc2068cbb0fcc19a4386073b487cba583f742ff8760ad77fa99ff91595e215cb4c588dc7f994"
        },
        {
          "alg": "SHA3-256",
          "content": "10bf2a9734315830f3ee4435bdc24cfd13b225c8ff2a35813c44f2fa2b0d5880"
        },
        {
          "alg": "SHA3-512",
          "content": "5d69c169c0cc43e9f9cf163c64594e342a8c53e7a428fa3a97f18c1739eae7538a33b2591ad71c8dea38f07b75317c533965a782c8dec5b5fbbfce4b35c56de9"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "The GNU General Public License, v2 with Universal FOSS Exception, v1.0"
          }
        }
      ],
      "purl": "pkg:maven/com.mysql/mysql-connector-j@8.2.0?type=jar",
      "externalReferences": [
        {
          "url": "http://dev.mysql.com/doc/connector-j/en/",
          "type": "website"
        },
        {
          "url": "https://github.com/mysql/mysql-connector-j",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.postgresql/postgresql@42.7.7?type=jar",
      "publisher": "PostgreSQL Global Development Group",
      "group": "org.postgresql",
      "name": "postgresql",
      "version": "42.7.7",
      "description": "PostgreSQL JDBC Driver Postgresql",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "7faa176ab9883b32d5f6ae8daa724f7b"
        },
        {
          "alg": "SHA-1",
          "content": "67f8093e8d8104c74bbf588392ac3229803f5d17"
        },
        {
          "alg": "SHA-256",
          "content": "157963d60ae66d607e09466e8c0cdf8087e9cb20d0159899ffca96bca2528460"
        },
        {
          "alg": "SHA-512",
          "content": "3383843ca60f29c796056421211b81752177bc89f85b7c513f6289895d33614bbf4908db4c6c9236ff31236a95a1120e91038666c59b6929a08f2d26ec6d1dc4"
        },
        {
          "alg": "SHA-384",
          "content": "046819363e59e35c5be89224ada6d0475f89f3a6c2694aec1babe5caf753f7731a0105efd64276290243191640b80e99"
        },
        {
          "alg": "SHA3-384",
          "content": "be2fff9aba0c33f85068c00741a444b5794e912f7781e1a1af89d1e61a002058e479cc579238054bd5626103eb358112"
        },
        {
          "alg": "SHA3-256",
          "content": "d32f87256f05769883e9267e8451c2d966532b0a52fc77225556a373545ddb65"
        },
        {
          "alg": "SHA3-512",
          "content": "81e618038abd23daa1fc991d696d3365e395c4481160a2cfcf05f097371aea1f50d247394377f1ad455f60470a6b737ee674cc25a55209f3e89a1e5d3b73dbb0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.postgresql/postgresql@42.7.7?type=jar",
      "externalReferences": [
        {
          "url": "https://jdbc.postgresql.org",
          "type": "website"
        },
        {
          "url": "https://github.com/pgjdbc/pgjdbc/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.postgresql.org/list/pgsql-jdbc/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/pgjdbc/pgjdbc",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.checkerframework/checker-qual@3.49.3?type=jar",
      "group": "org.checkerframework",
      "name": "checker-qual",
      "version": "3.49.3",
      "description": "checker-qual contains annotations (type qualifiers) that a programmerwrites to specify Java code for type-checking by the Checker Framework.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5881721126d6f442ba085fcd81145a4d"
        },
        {
          "alg": "SHA-1",
          "content": "119a4df4ba2e6a432b23989a785f81be38a56849"
        },
        {
          "alg": "SHA-256",
          "content": "367edbf2fe9f606c1fdb5a8ba6e1c9c27625993e1ff954e3868de70bcc6416b7"
        },
        {
          "alg": "SHA-512",
          "content": "ac7086d64d28b9b39f8c95ec07c0f2531c30d51e24dc531210ca6b266a99f8bc59da4132e7e386a8ddf321652609611ad62dd1aa5ee3bc7db6948cbb72259ff5"
        },
        {
          "alg": "SHA-384",
          "content": "08b5076a8ba525ff20631908da99632b7755e977894dae4f7f6b1fa2bdfd6eca6cf0760aad7188cc242618700407bfc9"
        },
        {
          "alg": "SHA3-384",
          "content": "efa2a0a28871c2131877c15a2300d8942fb76ca85ef12ace80d704807cd4dd1dfd5a3b4b5faef2ff4d7150af64d8dfcf"
        },
        {
          "alg": "SHA3-256",
          "content": "ade16f420610d75fba10a9a8bc6197214fd6cb90b9d3434b6c8bfe8a8f13fd91"
        },
        {
          "alg": "SHA3-512",
          "content": "721649c4ec14031dc0805488666d1672df365f4d404b2fd195b388a1f09aeee2cac76f9b68dddf8a79ba6d74984179a49ee83f7a1521c79544abac12216bf2e2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:maven/org.checkerframework/checker-qual@3.49.3?type=jar",
      "externalReferences": [
        {
          "url": "https://checkerframework.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/typetools/checker-framework.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.cloud.sql/mysql-socket-factory-connector-j-8@1.24.1?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.cloud.sql",
      "name": "mysql-socket-factory-connector-j-8",
      "version": "1.24.1",
      "description": "Socket factory for the MySQL JDBC driver (version 8.x) that allows a user with the appropriate permissions to connect to a Cloud SQL database without having to deal with IP allowlisting or SSL certificates manually.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "cdd3df0b2dd96ad91236ad7fb449884a"
        },
        {
          "alg": "SHA-1",
          "content": "cf60732ac2d4aaffd4355d05c387b2d999ed6d8b"
        },
        {
          "alg": "SHA-256",
          "content": "9d729f51bf1d6056ff8fbe328b1d2ce22eaf66f97558d76dc6476c06e8693521"
        },
        {
          "alg": "SHA-512",
          "content": "912aba1489c4f1817df613f859a0fba14fb59236532c067782f9162d08eda399f4aece3239616a4595b028d9c60e0beec857944296663f99943147ddc6777e06"
        },
        {
          "alg": "SHA-384",
          "content": "e2542a809c9beaf98195693cad0672ee8fd5e6549745a85442d7c157ce26504308757d66b4fa05c292dc88e37877df01"
        },
        {
          "alg": "SHA3-384",
          "content": "0434daf3ac488c2b7d59327e2f75cc863b9a90d2d8cea82c9f632db11d2bf0792e739841f1d56d4290331b544d485da0"
        },
        {
          "alg": "SHA3-256",
          "content": "d6e705c20ae44309fba3b96a21584b18baa90fe71dc7e574a7770fb96cdf6ebd"
        },
        {
          "alg": "SHA3-512",
          "content": "4fb4bb2c23fd4f0c5e7a101dae4e5f2112ced7ecf9eff45a26cfc94a8b923b569f1271236087d059bf8bdcea176b895e16ea7f3ee83bc24db817cca107a6b063"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.cloud.sql/mysql-socket-factory-connector-j-8@1.24.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/GoogleCloudPlatform/cloud-sql-mysql-socket-factory/mysql-socket-factory-connector-j-8",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/googleapis/java-shared-config/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/GoogleCloudPlatform/cloud-sql-mysql-socket-factory.git/mysql-socket-factory-connector-j-8",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.cloud.sql/jdbc-socket-factory-core@1.24.1?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.cloud.sql",
      "name": "jdbc-socket-factory-core",
      "version": "1.24.1",
      "description": "Core library for establishing secure connections. End users should depend on the driver-specific socket factory artifacts.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "09a2fc47d237e6d8512ebb040f3218f9"
        },
        {
          "alg": "SHA-1",
          "content": "a64aa286c9ae0cfe55e571e4f0bc7b15ae5a4683"
        },
        {
          "alg": "SHA-256",
          "content": "88adbd1543130e04b818d00fd09d6bd2ab4a1ef0b90448a8d4f25f84fbbd470d"
        },
        {
          "alg": "SHA-512",
          "content": "5a717cbaf8dfeaeee19ded595779a9d4d2e974fd914f12a7d0a03fb729b0281a9e8b02fe0018f880bd73e0a5d9105520bcfa687c827e873f529e51b3d94a14ea"
        },
        {
          "alg": "SHA-384",
          "content": "00badcc2a1dbb5637f595fa67415035a05b270def8dad081569cba208ed6c2bcb6872af819653006353908febab6db7e"
        },
        {
          "alg": "SHA3-384",
          "content": "f3bfc3f41c152ab8895a9b069847700e8b14bd8d11e286e1acd78f25adef41230b25dd9202bb4d3d6a68697588c1d7fc"
        },
        {
          "alg": "SHA3-256",
          "content": "410afb046200241a57024f5533c82d6904d9c836c38812e5769c07ea78b08021"
        },
        {
          "alg": "SHA3-512",
          "content": "52c59bcddbfad96bb88264ed6e2bf2302b0ebd505d3e2a380424ea98d26db7002160afc657ffc5920f812b7c675dca2d3fd778242586f8d010c3109f4365b420"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.cloud.sql/jdbc-socket-factory-core@1.24.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/GoogleCloudPlatform/cloud-sql-mysql-socket-factory/jdbc-socket-factory-core",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/googleapis/java-shared-config/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/GoogleCloudPlatform/cloud-sql-mysql-socket-factory.git/jdbc-socket-factory-core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jnr-enxio@0.32.18?type=jar",
      "group": "com.github.jnr",
      "name": "jnr-enxio",
      "version": "0.32.18",
      "description": "Native I/O access for java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "73a723c7879eab23df2bd2dd0cda45fe"
        },
        {
          "alg": "SHA-1",
          "content": "51a69259b24185ec6cde0d30035e93ae0c504aea"
        },
        {
          "alg": "SHA-256",
          "content": "0dfde0b64e92429b1a20e54ee77fca606c4f458a5efe54b461884dd0a1e823a3"
        },
        {
          "alg": "SHA-512",
          "content": "9dcc59ff72b1f9f397feda7690ae648fe7bdf64eb608aa4a8bf5f48354285652e70617dab72973e84dd0a8b9f8c2bb64625ff8299ee277478272dfebb97ef1f6"
        },
        {
          "alg": "SHA-384",
          "content": "9fff8133900d1ae6bc1b905d8e28f097134f89a53dfe284d9cc22f9b860efe5d144a2a4620d3ca3d6453150a29bdaf63"
        },
        {
          "alg": "SHA3-384",
          "content": "95f61b41fe20f6ad54055ffc09ee972ceb03aafe4430f5c6a7d5886462261cdf531e2f719b3c9b3baab319ed4639dd12"
        },
        {
          "alg": "SHA3-256",
          "content": "b17d3cfbff5064f394546b014e6a95b8a7adb3ff2cd23925f19f9a3f11dd2056"
        },
        {
          "alg": "SHA3-512",
          "content": "0232c284ea9ccd171ef223d479108f28e5853aa9b0921f6c4fed857a22ff1f189435288e59755d5526440390d746c943e4f1c0000a90d2f00a2d64034a9cf353"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jnr-enxio@0.32.18?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/jnr/jnr-enxio",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jnr-constants@0.10.4?type=jar",
      "group": "com.github.jnr",
      "name": "jnr-constants",
      "version": "0.10.4",
      "description": "A set of platform constants (e.g. errno values)",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a5a4036fd334522540041b062b304abc"
        },
        {
          "alg": "SHA-1",
          "content": "09f6f23763bf40ea7b56391791f574174914430a"
        },
        {
          "alg": "SHA-256",
          "content": "9a5b8cf9798d9d0331b8d8966c5235a22c4307676e35803a24659e6d76096f78"
        },
        {
          "alg": "SHA-512",
          "content": "608b2c53914aeb3fb36e2fb81a948e5dbec835a9d220d50a4bb9693d4a534414d1bc4c5e5582b196793317fb64fe7617d78d5ec974e6413732940e141201fdba"
        },
        {
          "alg": "SHA-384",
          "content": "dfe87e3b585304854d0dd23d2d5b3a4f00ca47fc52e8e28c6c75f976cc12bbe627cdfcca5fccaf6cb3b2591cf70dee89"
        },
        {
          "alg": "SHA3-384",
          "content": "8d1bf7084c5f34d13fab9b9b77dd095f43f105a7722a0d95fcc4e050e41f608f426914c3ff63573da053a9188e7f30bc"
        },
        {
          "alg": "SHA3-256",
          "content": "842f986856d42bf3703b2b9b8a5db9c8cbd166fafb94d81739dc3ff9469b8ae0"
        },
        {
          "alg": "SHA3-512",
          "content": "b87d2ffb045ed6bcf0d1976933e8ec258132f43b705388c905805e27e6f3b547d212c4eed37dec53541eebf17669365fa88519e8436f22545e56f8fc4215eda6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jnr-constants@0.10.4?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/jnr/jnr-constants",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jnr-ffi@2.2.17?type=jar",
      "group": "com.github.jnr",
      "name": "jnr-ffi",
      "version": "2.2.17",
      "description": "A library for invoking native functions from java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "157a70eeb4219d6ffa0267753bc42406"
        },
        {
          "alg": "SHA-1",
          "content": "3b3a375fb3509a2d2014687d5e8d6b3881a3614e"
        },
        {
          "alg": "SHA-256",
          "content": "37b494600b956a7932e799d4a7284bbf1ad0b0b23b4df62d0c01f55f1d3ee681"
        },
        {
          "alg": "SHA-512",
          "content": "43aeb2c08f92045d44d852f4cfc31f9094134e856f5bd27e8d1625704395e338371a889061ea0aef8a4303dad4320987904eb9c3f313fe97aef65fe3ac97fc3e"
        },
        {
          "alg": "SHA-384",
          "content": "6dea2ce7e5a8a44a96e7b8b3c0b3e790ebb1648cc0cdb5e01da5ef90b70032c51f790353b8c1558378adabac9e71826e"
        },
        {
          "alg": "SHA3-384",
          "content": "69054757abde36faebcbdfa8d339064789ca92256a4738355d7504c6e45a7949c55208bdf11544ff8583e4f35ecfd427"
        },
        {
          "alg": "SHA3-256",
          "content": "142dd34fe6ff6acfce5745f67d43cae6b8aa133a045269acdb23a418974328f6"
        },
        {
          "alg": "SHA3-512",
          "content": "ebb023c3d9e93e47b9519cab9a4bf15caa87e365e0efa74f0145763689c7e0a18570e2470125c4cb1bd0ba2d88be3d2e422a1622d878001fcb589eb1b0d0ba23"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jnr-ffi@2.2.17?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/jnr/jnr-ffi",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jffi@1.3.13?type=jar",
      "group": "com.github.jnr",
      "name": "jffi",
      "version": "1.3.13",
      "description": "Java Foreign Function Interface",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "89e94b6e57ed65264f8c31309cf3de58"
        },
        {
          "alg": "SHA-1",
          "content": "861b79314b8cef27f506c007edb78bf1ad0df77c"
        },
        {
          "alg": "SHA-256",
          "content": "78df5fb05d7e2541b867bedc538b18840245a601bb2160fa26824bb67ed93878"
        },
        {
          "alg": "SHA-512",
          "content": "1af68694bcead74cedce28c1ffd6efd3c96b733830433450605e251d01150d41e7396a6d3b85cfee1d616aeb433425c8c0c64493318908fc252b63159a14ee76"
        },
        {
          "alg": "SHA-384",
          "content": "0fdeb403e4afdb0f12b098d54e7aa7599f104b81471ffaeb4720adec4108d72c2c2fc4373889da1c2697cc63c26df8d1"
        },
        {
          "alg": "SHA3-384",
          "content": "10938e6cf91142b73e7b3f06e1f3672b3b725e7c8702192a6a1d855e16a9411842fd53b7293fb063c8e46e29978b7877"
        },
        {
          "alg": "SHA3-256",
          "content": "de87caf98ed2a4c36f3d9983abf83595699c7f58b2af6035e8fe4911b3c4a52b"
        },
        {
          "alg": "SHA3-512",
          "content": "7ff2b21cf9bffe8945b378e1298a04acd5a176ef5daccc1177624d7defc8ec1af643b82bf502d4854b9a64138f7100d01ce8e1fa9fd5f11d67b84ce5a4350095"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "name": "GNU Lesser General Public License version 3",
            "url": "https://www.gnu.org/licenses/lgpl-3.0.txt"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jffi@1.3.13?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/jnr/jffi",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jffi@1.3.13?classifier=native\u0026type=jar",
      "group": "com.github.jnr",
      "name": "jffi",
      "version": "1.3.13",
      "description": "Java Foreign Function Interface",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b1b6c3c2c1b0e704b5d1ca1fa0f37a9c"
        },
        {
          "alg": "SHA-1",
          "content": "15e41e9c8f02b384bf138ab7f2778b441bfa5df3"
        },
        {
          "alg": "SHA-256",
          "content": "a38dd049951a27f7a423389fecf0195a5bd414f418e90f5ac9992652c22a5b8e"
        },
        {
          "alg": "SHA-512",
          "content": "8de5157c314d99bac10c9b1d9ea15762ec49a38e25af765d43c42d50c78e34d1238bdce137832a49e735e5a20a07fda4a5d488049b15445c60b6bdd417115cc6"
        },
        {
          "alg": "SHA-384",
          "content": "cce859b83af60761f59428ec07032cd5a16913459533dd3fcc41b125ba1d6b56d328f39f188ac5f97f9bc07e19218555"
        },
        {
          "alg": "SHA3-384",
          "content": "45cc7c3723c748f3e2dcdb98399ea1df2b2911328e4147c9459c0ffdf106afde0fc499e75c3ca00316844bdac28264e5"
        },
        {
          "alg": "SHA3-256",
          "content": "6f0af05a8b7053e4f96148727d8bf1ff5eaa14ddbd2a5547229023fcb96b7c0e"
        },
        {
          "alg": "SHA3-512",
          "content": "8d654937fd21a22215a1759ac76ae317909f2a726b4a1a29980c8dfe2bff0cee05eadc7f6dcc67c2bcf1672c12f74b74c8ff349b6575380df8c4e97ec6328b31"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "name": "GNU Lesser General Public License version 3",
            "url": "https://www.gnu.org/licenses/lgpl-3.0.txt"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jffi@1.3.13?classifier=native\u0026type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/jnr/jffi",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.ow2.asm/asm-commons@9.7.1?type=jar",
      "publisher": "OW2",
      "group": "org.ow2.asm",
      "name": "asm-commons",
      "version": "9.7.1",
      "description": "Usefull class adapters based on ASM, a very small and fast Java bytecode manipulation framework",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8344aea3c8b7d707e9d35a62710e77c9"
        },
        {
          "alg": "SHA-1",
          "content": "406c6a2225cfe1819f102a161e54cc16a5c24f75"
        },
        {
          "alg": "SHA-256",
          "content": "9a579b54d292ad9be171d4313fd4739c635592c2b5ac3a459bbd1049cddec6a0"
        },
        {
          "alg": "SHA-512",
          "content": "81daf5765e387e6aeec5d45c4b9e4e1b471fb4f350931e5a214845c7c657a2142768f6902765e49c0ce2c595962e5d008883cba2e4a40c4bdce8f2e92518d2db"
        },
        {
          "alg": "SHA-384",
          "content": "473ba9b72bd47d2000d127dababdd649fd7738d658cd5b818266cd978e8d3bb2589e431a52bfaa7fb8a03d2345a529f2"
        },
        {
          "alg": "SHA3-384",
          "content": "1a792b9567115e97b81242325de41d3757e8b11dc5c38b4f6b8c9aa34ef8a33b5ef9a7401c725574ee4c36ebb5c0f46a"
        },
        {
          "alg": "SHA3-256",
          "content": "2974918408bf8791d133c96cee74e86f4fa9659faa1faaf886eed3c586b7c717"
        },
        {
          "alg": "SHA3-512",
          "content": "21c2635f5cdee961ea6aedee78589603b0ff1d56ee295d4548e882abe4485a5818a82848a99851592de5a8d09e4c74e406fc0bea9f23e250e58e0e31986845af"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.ow2.asm/asm-commons@9.7.1?type=jar",
      "externalReferences": [
        {
          "url": "http://asm.ow2.io/",
          "type": "website"
        },
        {
          "url": "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail.ow2.org/wws/arc/asm/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.ow2.asm/asm-analysis@9.7.1?type=jar",
      "publisher": "OW2",
      "group": "org.ow2.asm",
      "name": "asm-analysis",
      "version": "9.7.1",
      "description": "Static code analysis API of ASM, a very small and fast Java bytecode manipulation framework",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4cd9e7178dfb85371bba3077e40cd514"
        },
        {
          "alg": "SHA-1",
          "content": "f97a3b319f0ed6a8cd944dc79060d3912a28985f"
        },
        {
          "alg": "SHA-256",
          "content": "85b29371884ba31bb76edf22323c2c24e172c3267a67152eba3d1ccc2e041ef2"
        },
        {
          "alg": "SHA-512",
          "content": "a8bd265c81d9bb4371cafd3f5d18f96ad79aec65031457d518c54599144d199d9feddf13b8dc822b2598b8b504a88edbd81d1f2c52991a70a6b343d8f5bb6fe5"
        },
        {
          "alg": "SHA-384",
          "content": "31620bb948127b811684769f966990170ced469f4b15f30bf22a7a0d28c7da644027cf7c9ffd10f80fcc4cdf377909d8"
        },
        {
          "alg": "SHA3-384",
          "content": "fe5920760dfcbe5dda26d7839ba9ad621a8d2b139994e0d2107873512651cfffdb73e85e635dbad0f9db7cfee55420d3"
        },
        {
          "alg": "SHA3-256",
          "content": "3fe7b153bea627308dbfb2ce682a3c10646a06eee5d34a13acd76e60a7cda240"
        },
        {
          "alg": "SHA3-512",
          "content": "1acd097141b321e440561a9ef759b5b5ab125b42ae02e5806fd026978727740124a483f608db230563fde701161e51f8548a662e29ba12d97ba3d24949b4c821"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.ow2.asm/asm-analysis@9.7.1?type=jar",
      "externalReferences": [
        {
          "url": "http://asm.ow2.io/",
          "type": "website"
        },
        {
          "url": "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail.ow2.org/wws/arc/asm/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.ow2.asm/asm-tree@9.7.1?type=jar",
      "publisher": "OW2",
      "group": "org.ow2.asm",
      "name": "asm-tree",
      "version": "9.7.1",
      "description": "Tree API of ASM, a very small and fast Java bytecode manipulation framework",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e85029f613b6469989cc7cf53fe06b74"
        },
        {
          "alg": "SHA-1",
          "content": "3a53139787663b139de76b627fca0084ab60d32c"
        },
        {
          "alg": "SHA-256",
          "content": "9929881f59eb6b840e86d54570c77b59ce721d104e6dfd7a40978991c2d3b41f"
        },
        {
          "alg": "SHA-512",
          "content": "e55008c392fdd35e95d3404766b12dd4b46e13d5c362fcd0ab42a65751a82737eaf0ebc857691d1916190d34407adfde4437615d69c278785416fd911e00978d"
        },
        {
          "alg": "SHA-384",
          "content": "4363d7d075700cbe6161bf86a0ff1b0e732fe96963010f1fc66f7701e8139673cc4fba81ae2937d25e0a5032368b0d5a"
        },
        {
          "alg": "SHA3-384",
          "content": "d22a3eeb20ee739bfbf3535655e7d25e3b3910f13ac86d9e4c29b4e0b19efd53ab65c1d843bbc0e289a8744d27e09453"
        },
        {
          "alg": "SHA3-256",
          "content": "9d57ddbdd10cda7f9bc45bc0bcb54143f7ea1b802540cf3029ab7e31dfc59df7"
        },
        {
          "alg": "SHA3-512",
          "content": "1352a6d8caca6649bc7e1c8e209a1e3864ac8eac8d6af2f11e2701eab5304a4cff41355828ed0c69adc8fc3b8d639d607bec574834e8e3185a3e3f81199e756a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.ow2.asm/asm-tree@9.7.1?type=jar",
      "externalReferences": [
        {
          "url": "http://asm.ow2.io/",
          "type": "website"
        },
        {
          "url": "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail.ow2.org/wws/arc/asm/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.ow2.asm/asm-util@9.7.1?type=jar",
      "publisher": "OW2",
      "group": "org.ow2.asm",
      "name": "asm-util",
      "version": "9.7.1",
      "description": "Utilities for ASM, a very small and fast Java bytecode manipulation framework",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "36d373a9cd6cad9b35db9f984c6b4bbb"
        },
        {
          "alg": "SHA-1",
          "content": "9e23359b598ec6b74b23e53110dd5c577adf2243"
        },
        {
          "alg": "SHA-256",
          "content": "f885be71b5c90556f5f1ad1c4f9276b29b96057c497d46666fe4ddbec3cb43c6"
        },
        {
          "alg": "SHA-512",
          "content": "522d793d15a2c5ea6504a50222cf0750f1eab7b881cf289675042539b1aba8b3868197b1bebe729de728dd10020eb028ae16252dcd5d84fdcbf7f925832bc269"
        },
        {
          "alg": "SHA-384",
          "content": "c073e7d64d5891d024860f638c3ee901aca60637b820ad05f9be7d33b4f4ad99fc448173dd9cb0b1cd0032485e813b24"
        },
        {
          "alg": "SHA3-384",
          "content": "2300d5572d929e6f20a7569dceb05bd9930b6ca18bcf11f648e37f28d00e78883f632ff60f4c4f9997aaa3d560a9450b"
        },
        {
          "alg": "SHA3-256",
          "content": "f5b3d45b832550fc3d1a675fdc4531a32eb8688db37b7102f0d544635f967ed2"
        },
        {
          "alg": "SHA3-512",
          "content": "ae097429b38febbc39a91d9697b6f709a49aad2fbc032ae2222e8f11c2907ef1a526afc4ee38d4dee46c09a7196f4f676f5704461dd3a0fe1e606bc9e3ef970a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.ow2.asm/asm-util@9.7.1?type=jar",
      "externalReferences": [
        {
          "url": "http://asm.ow2.io/",
          "type": "website"
        },
        {
          "url": "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail.ow2.org/wws/arc/asm/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jnr-a64asm@1.0.0?type=jar",
      "group": "com.github.jnr",
      "name": "jnr-a64asm",
      "version": "1.0.0",
      "description": "A pure-java A64 assembler",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6cb469cbbcf9eca78d50f7da595a8337"
        },
        {
          "alg": "SHA-1",
          "content": "0a1cb8dbe71b5a6a0288043c3ba3ca64545be165"
        },
        {
          "alg": "SHA-256",
          "content": "53ae5ea7fa5c284e8279aa348e7b9de4548b0cae10bfd058fa217c791875e4cf"
        },
        {
          "alg": "SHA-512",
          "content": "922bdf2883c6a9cd6491289020d404ab151fd9ffa78d2ec884a2ac3af739d397016f1f4596c3e6c58744ea600fdbc2d330c8f520a1a9ab0eef6af6b667b35b89"
        },
        {
          "alg": "SHA-384",
          "content": "933298b61960f09eccb672a0622a93a721d06cf85cdb29500ff6efdf874bad7b08aede29b6cf3b51141c16b38b250be2"
        },
        {
          "alg": "SHA3-384",
          "content": "2a7231c649f4805d34eb19c7e6b6dbb5ecdb663e29ef69a4523e2f7d2ae70740ca3aa03eba3476960d0fe344ea45df2d"
        },
        {
          "alg": "SHA3-256",
          "content": "fc270fd94a4e2b4fb1a9e4dd42ff4600c94e226ef3431aee998a915b62eb19ae"
        },
        {
          "alg": "SHA3-512",
          "content": "8ee64fec1b5e93ff9c2b596c0345ef120479217bea95d669c6e17f338a45945545b546813af2f58920a6bb2d607bd004870d10c8660a516261288d9f555fc850"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jnr-a64asm@1.0.0?type=jar",
      "externalReferences": [
        {
          "url": "http://nexus.sonatype.org/oss-repository-hosting.html/jnr-a64asm",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jnr-x86asm@1.0.2?type=jar",
      "group": "com.github.jnr",
      "name": "jnr-x86asm",
      "version": "1.0.2",
      "description": "A pure-java X86 and X86_64 assembler",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "00670735acb2a9d1421b506dc7d338bc"
        },
        {
          "alg": "SHA-1",
          "content": "006936bbd6c5b235665d87bd450f5e13b52d4b48"
        },
        {
          "alg": "SHA-256",
          "content": "39f3675b910e6e9b93825f8284bec9f4ad3044cd20a6f7c8ff9e2f8695ebf21e"
        },
        {
          "alg": "SHA-512",
          "content": "e928926b01ce545144c1bbf160edee9b923773e32f9a399a71c2ab5e8325d9cbcfb41f41c8f008b80d1beab8da1c4b74845996479c07ed73bc131959911d4762"
        },
        {
          "alg": "SHA-384",
          "content": "91839815885716f1202a824b195a475d4d7561690192b42cf05b8c6432556a3e7e2dab13b6e970986a97711fb7060844"
        },
        {
          "alg": "SHA3-384",
          "content": "ed27f9b39907e92805c2d6ae6a045e00e24f51544501df3b98b593177df4fe55fee2347c668df66c2ea6fae64c66ee0c"
        },
        {
          "alg": "SHA3-256",
          "content": "f2e4e4807f6674a5b428cebdbdd01e8cadbeee71b785a046bec2bec1de63a41b"
        },
        {
          "alg": "SHA3-512",
          "content": "0dfffcf0daac9513b347ab8bf22887360feea890428e12857d7d3400400ba498fdc61307d9fd9c6a5e1baa9a96279afc07bba08c6229ed4ede71569d710fd0f6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jnr-x86asm@1.0.2?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/jnr/jnr-x86asm",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jnr-unixsocket@0.38.23?type=jar",
      "group": "com.github.jnr",
      "name": "jnr-unixsocket",
      "version": "0.38.23",
      "description": "UNIX socket channels for java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "af0b5ffe337da78e9069e80e03b10eac"
        },
        {
          "alg": "SHA-1",
          "content": "c0ba598b0e26e5f9093df8f765d0742a7a0cc9a3"
        },
        {
          "alg": "SHA-256",
          "content": "50d273039f9920f567c17a5881fde6a6f7d4b637fb9961b3b7c96dd542e6adc2"
        },
        {
          "alg": "SHA-512",
          "content": "d2dfbe0e5a5d86d102903af1d55ce1211d2f602d73262f080d3917723a18a673890b0ec8786ee7ae9ac378595cf2ad260ac28495ef6f971f542f4ffe4dc76b43"
        },
        {
          "alg": "SHA-384",
          "content": "c5f1117e8dfadad415bd104e8201f965703308a403ca670e3b1e548858e8f2b32174674d18f55ace098b0ce74fcfa680"
        },
        {
          "alg": "SHA3-384",
          "content": "ed14a700c93bfb118c53f87d92037a9e06eb90b121b2a873f976a37c103c38cae0709f13aa2cb962e8387bc22f77e655"
        },
        {
          "alg": "SHA3-256",
          "content": "88a90009c17ac55e68d6296607be539cf032cca0f195dcd7cbd4baa2c12e73e5"
        },
        {
          "alg": "SHA3-512",
          "content": "b6bd127e86d4c7743303c222794ffac47b68d2b1ad0ca5f3870c4e43d208cad4e19fe9555e8676154ddd66892bb1c3f5ea423250b660afd8c131c4ec92c0c74c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jnr-unixsocket@0.38.23?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/jnr/jnr-unixsocket",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jnr-posix@3.1.20?type=jar",
      "group": "com.github.jnr",
      "name": "jnr-posix",
      "version": "3.1.20",
      "description": "Common cross-project/cross-platform POSIX APIs",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4ce8264ee8262088629acbe6b42f1207"
        },
        {
          "alg": "SHA-1",
          "content": "07f9f3a34bec049bc8e1c4899fee18a85010d608"
        },
        {
          "alg": "SHA-256",
          "content": "e4f28d47be66a8710950425c037318442af2b8021708de0b7871ff65fab8cd86"
        },
        {
          "alg": "SHA-512",
          "content": "1bcb26600291a8684825d092d318447fbb56f069adbf8765d3fba208fc90e394e2d792dea0e9ce319bcc09a9a3f35f99678f8c8a3cd03365ddbb23e2545911b0"
        },
        {
          "alg": "SHA-384",
          "content": "1a6b2b060aeaa69d24d7494d612de057f63af6ecc25ce60f25fbe826c24c92ffa8f885f2e281bf5ebd20d402f723a710"
        },
        {
          "alg": "SHA3-384",
          "content": "1db56b2a21ac0d19883777bc6c3f3f9e34169d99aeee56af68e773ad2bd9f7443fb1f58c1b872036cea00912b89b28f8"
        },
        {
          "alg": "SHA3-256",
          "content": "6fd620fadd415bb1669054a5e6d3ec878d6caa0210698c80793d7237804b0852"
        },
        {
          "alg": "SHA3-512",
          "content": "99080653d6d41a8b72a6ea92d05bc884411c92687b2c8eb06a1427d051a29a142a12d46fe69a7b9fc8c63ddf80e46065388d4434f141715e61427700fae2b685"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "name": "GNU General Public License Version 2",
            "url": "http://www.gnu.org/copyleft/gpl.html"
          }
        },
        {
          "license": {
            "name": "GNU Lesser General Public License Version 2.1",
            "url": "http://www.gnu.org/licenses/lgpl.html"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jnr-posix@3.1.20?type=jar",
      "externalReferences": [
        {
          "url": "http://nexus.sonatype.org/oss-repository-hosting.html/jnr-posix",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "http://jira.codehaus.org/browse/JRUBY",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.http-client/google-http-client@1.46.3?type=jar",
      "publisher": "Google",
      "group": "com.google.http-client",
      "name": "google-http-client",
      "version": "1.46.3",
      "description": "Google HTTP Client Library for Java. Functionality that works on all supported Java platforms, including Java 7 (or higher) desktop (SE) and web (EE), Android, and Google App Engine.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4a4b2db23cfe0a077bcb62479dfe9c8b"
        },
        {
          "alg": "SHA-1",
          "content": "486ca37492048ddd230f5fef65c9411d7b65fb67"
        },
        {
          "alg": "SHA-256",
          "content": "2490a06e44b7f2adbcfe27e4099a576c0ee8d269437188d5391acd48c6d34310"
        },
        {
          "alg": "SHA-512",
          "content": "1cbca5662941ee409dfe2ebc39107905d41c4f4611ae5badb00d1df415913747f8bec529769496af615bd6ab7cd3eed8407b8825bf260494308fe7ed32ade56e"
        },
        {
          "alg": "SHA-384",
          "content": "1faa2583f052bc7db97b195aa709d5c95fbbbb1369154d45fc09fa1924071ebc5c07e4c3b7bf357349a06fbec80d2d67"
        },
        {
          "alg": "SHA3-384",
          "content": "9625fa721b3f01231ec3254a63b45974bd3b1fb2ff21d933cf9bfab6c556846d453387381909084541fcbdb1125fbfd0"
        },
        {
          "alg": "SHA3-256",
          "content": "b1ec6527ce5952230898782de019c059bc0183a04097dd851672fae16aa8827f"
        },
        {
          "alg": "SHA3-512",
          "content": "a41829b4c61921cf5b9c8f04d6a6a55cd1702a5eeeb0164614c431f9711cf5332972c2801ccf3763c1c4f203d856d5a616e31b6ba1537a47a348d696c562342a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.http-client/google-http-client@1.46.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-http-java-client/google-http-client",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/googleapis/google-http-java-client/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/google-http-java-client/google-http-client",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.grpc/grpc-context@1.70.0?type=jar",
      "group": "io.grpc",
      "name": "grpc-context",
      "version": "1.70.0",
      "description": "gRPC: Context",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b7e575dcff9de5208d81a29566a3d76a"
        },
        {
          "alg": "SHA-1",
          "content": "375570c198b9ff46f2202731d11271bb5cb396fa"
        },
        {
          "alg": "SHA-256",
          "content": "eb2824831c0ac03e741efda86b141aa863a481ebc4aaf5a5c1f13a481dbb40ff"
        },
        {
          "alg": "SHA-512",
          "content": "430cd53a07173fcfe8ac65d0b6f682a30eb7a50df9c33850a39dd2d48a159e63afec1e430471aeeb00c9c88e2354d4d5c456e451309ef5640c91a73def197fb7"
        },
        {
          "alg": "SHA-384",
          "content": "abf8b56a9d9848ec73c2567f1fca13bbb77e5c106b216a8112347b057caa2d9793804d6f1e1f235c9433fb7edd1c27a2"
        },
        {
          "alg": "SHA3-384",
          "content": "5c4c6b820f489296a340822b6891773e5d801d7e266f5ecde111b85c53be9e965094e80b98a396858c6fe2672688caf0"
        },
        {
          "alg": "SHA3-256",
          "content": "fa505119427ecd73239a401444f43654b5e7d2ed7c78a6bd7407b1d9f5cc3a58"
        },
        {
          "alg": "SHA3-512",
          "content": "56d7389a20562d264b1b759a7f0ff7057b3f832eee5a57eba65d4f2ba878fe7d1569b44ea22e42c9ae0abf5a79506a8dccffe5f51ce56563812d53442395e115"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.grpc/grpc-context@1.70.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/grpc/grpc-java",
          "type": "website"
        },
        {
          "url": "https://github.com/grpc/grpc-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.grpc/grpc-api@1.70.0?type=jar",
      "group": "io.grpc",
      "name": "grpc-api",
      "version": "1.70.0",
      "description": "gRPC: API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f4b23b6be4f2936c097e780cf6e8ef50"
        },
        {
          "alg": "SHA-1",
          "content": "c0d185f8435e2dbc9b0f430d1e89600858ee24ee"
        },
        {
          "alg": "SHA-256",
          "content": "45faf2ac1bf2791e8fdabce53684a86b62c99b84cba26fb13a5ba3f4abf80d6c"
        },
        {
          "alg": "SHA-512",
          "content": "011e0ce3870ade374954e5818f3a03ab22bd19fbbf171d2873bdf1ecdbdefae183a512043f9155aa120dce3e1c902680372b18c3dcf1bb64ae508ecfa7631677"
        },
        {
          "alg": "SHA-384",
          "content": "fd1b5f17eeeb4992c80f468e99d54d614ef0de8981d40d5a6e0e6801ce6d74844fb3e0769ba43b4e7507ae330e0c6312"
        },
        {
          "alg": "SHA3-384",
          "content": "6a74a79bef71b22bd1eb217c26ffa4a91fc571819f24af2b2fc6e2372b9289779c60ec98464c429c6bd91d50a8ff65b9"
        },
        {
          "alg": "SHA3-256",
          "content": "0a726d7583e90d3076f1d805850366c6bd2dc2bbe4d836d209247c50c062eedf"
        },
        {
          "alg": "SHA3-512",
          "content": "c47e25067c30a0a01dc0e92e0b5bf3c6c8fe0ed4738b85af6e261ccf62cecb66e7b537ba1493434dfd479633e6a3d72bb51b15868e96bdce3da5696d8b294878"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.grpc/grpc-api@1.70.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/grpc/grpc-java",
          "type": "website"
        },
        {
          "url": "https://github.com/grpc/grpc-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.opencensus/opencensus-api@0.31.1?type=jar",
      "group": "io.opencensus",
      "name": "opencensus-api",
      "version": "0.31.1",
      "description": "null",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a5e7092bb89baaaee424f5a7b20d1bad"
        },
        {
          "alg": "SHA-1",
          "content": "66a60c7201c2b8b20ce495f0295b32bb0ccbbc57"
        },
        {
          "alg": "SHA-256",
          "content": "f1474d47f4b6b001558ad27b952e35eda5cc7146788877fc52938c6eba24b382"
        },
        {
          "alg": "SHA-512",
          "content": "aac98ed2de298609bac9cb5a69ac16df0ca9c9fc82f429720ddcfdd769fdae96b707ed81c8d8c37380de846b302aacaac80156ef75567061aed3f77cc3c3b725"
        },
        {
          "alg": "SHA-384",
          "content": "d8dfdbc7d584809f00b5a4239cbaf575e8924a176e92a44230e8ac1e9dc85e458b63fad69b0b445d8d2e8c1a70e7633a"
        },
        {
          "alg": "SHA3-384",
          "content": "5cb3db9b30adb23c2b33ce0ded61a69e5347a4531d0563fc9185aba11aab7a639bf40286fc8d0f52a73c50add15775c7"
        },
        {
          "alg": "SHA3-256",
          "content": "733221e8a1dc4476c53fee92837757bfd468afe25f57bbce79d25c60f2e240f6"
        },
        {
          "alg": "SHA3-512",
          "content": "cdb61cef7324e1173f297867ec9274c6439779cdd674a442d26724de047258a64f3f76ad4e496f7afde785b5dbdf5d03f0b0f1d4424868cf14ebc1fd3b63dc76"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.opencensus/opencensus-api@0.31.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/census-instrumentation/opencensus-java",
          "type": "website"
        },
        {
          "url": "https://github.com/census-instrumentation/opencensus-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.opencensus/opencensus-contrib-http-util@0.31.1?type=jar",
      "group": "io.opencensus",
      "name": "opencensus-contrib-http-util",
      "version": "0.31.1",
      "description": "null",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9ecc9c428eb87dc734ae8d07b820ce26"
        },
        {
          "alg": "SHA-1",
          "content": "3c13fc5715231fadb16a9b74a44d9d59c460cfa8"
        },
        {
          "alg": "SHA-256",
          "content": "3ea995b55a4068be22989b70cc29a4d788c2d328d1d50613a7a9afd13fdd2d0a"
        },
        {
          "alg": "SHA-512",
          "content": "3192532e4989a26d9a69f4246ef994b35058d155e199b500196d14427d1b46b1515f872a36500cb84768524870297388c90272ffa61dc8448f6f7571c4f86b27"
        },
        {
          "alg": "SHA-384",
          "content": "46f9dcc71f71f33be99a00fdd9a2ba602eb547b56b6e8177660d3a44d3dd974609bf16d2a1b58359a0f39797cb3ee683"
        },
        {
          "alg": "SHA3-384",
          "content": "21d66f5efa2511de4e4b4f3ea18d37aeb954ea1b4315f1e11cd84a11a95e9bb9841addee4d1230c3813f06144a675a1c"
        },
        {
          "alg": "SHA3-256",
          "content": "8352c7dcd73fced7e49425d70f6955579f5c24fafd4529e5f5e54ef5a88a3c83"
        },
        {
          "alg": "SHA3-512",
          "content": "f8ec86e5728b9acbdaa684cbf385ab3834006e44363de43f9af4b50dca71d4e0d77d0d8b2e7bb97435581dda6572691b1d263835e4e97256999df550b9efc13b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.opencensus/opencensus-contrib-http-util@0.31.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/census-instrumentation/opencensus-java",
          "type": "website"
        },
        {
          "url": "https://github.com/census-instrumentation/opencensus-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.http-client/google-http-client-gson@1.46.3?type=jar",
      "publisher": "Google",
      "group": "com.google.http-client",
      "name": "google-http-client-gson",
      "version": "1.46.3",
      "description": "Google HTTP Client Library for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c6b2babb866f84fb1cf387faaa5fcbd9"
        },
        {
          "alg": "SHA-1",
          "content": "ca996d6b803d1eecb5d24f60c63687ced9b28088"
        },
        {
          "alg": "SHA-256",
          "content": "74eee65c563871659469eb85d703e5a7223427010ad545982fdc53d7db573266"
        },
        {
          "alg": "SHA-512",
          "content": "febf6138ca953ff0c7a74c02f6122f530b704fc0faadd5a4e5b5149494f3a4876a0b54e298dbb1c3f362ee0ad9795de635e0d4e366a724a12210bbc95388a047"
        },
        {
          "alg": "SHA-384",
          "content": "7f93f1fa58adfbfa768e400cb8c928e8684cda77f8d6bfcac68aac0aea28af8e58992a6c06d0a154f80ad5ed976be614"
        },
        {
          "alg": "SHA3-384",
          "content": "ef285138140f844ba2dbec25287afa61d56beb2e5114910915b6a8c816e2f33f9b31de5e85c924f8c9afac1eaf590d49"
        },
        {
          "alg": "SHA3-256",
          "content": "f60c82c6a0972bb7523f5312499a895d84bd236b01be70bb340f7ee325107e50"
        },
        {
          "alg": "SHA3-512",
          "content": "b09ce20f4684692b47215ce8a5c5fd2561f45530aaf19065309b14b85005f423cef3df85ae8e5c377cd8c2350efd08e9ec3390542429028e6c5f11c42d440b0c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.http-client/google-http-client-gson@1.46.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-http-java-client/google-http-client-gson",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/googleapis/google-http-java-client/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/google-http-java-client/google-http-client-gson",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.api-client/google-api-client@2.7.2?type=jar",
      "publisher": "Google",
      "group": "com.google.api-client",
      "name": "google-api-client",
      "version": "2.7.2",
      "description": "The Google APIs Client Library for Java is a Java client library for accessing any HTTP-based API on the web",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "61aecfcdcacb154df31beaa7552774fe"
        },
        {
          "alg": "SHA-1",
          "content": "495d58d6e31c2c5e24a707a50d6355ba92dd3d0c"
        },
        {
          "alg": "SHA-256",
          "content": "63b754b7c4a92347c4992c42d295812f8d2ed6b9e8743edba4a8c98b92e9ca9b"
        },
        {
          "alg": "SHA-512",
          "content": "8e7238c9f5b7833aeef9ae9f2349a9a537e36689549047a0724d42810abca443b7bd3e3f3de8ddd4bc6eae32763fefcdc38feb613f178f605c290ee668cb30af"
        },
        {
          "alg": "SHA-384",
          "content": "7cd2e7a85fef4d7a5b24006b882c988ae74180bd307e39a2d1c5b95b462bf0c2d6de76c51e945d6c915af0f5d4fa6701"
        },
        {
          "alg": "SHA3-384",
          "content": "1d7ad049665395eb8d8eaca8fac043405626ebd3a6718360aa4348bf4c9f4b6a973404d679c838026767f9cfd3ab4c48"
        },
        {
          "alg": "SHA3-256",
          "content": "fc6ac354f19fea96444e34c504d8e617fb08a90f64b53e096c394091443ab8c6"
        },
        {
          "alg": "SHA3-512",
          "content": "05b8189195a57c68bfda7481a515226da0702e2f5d57a7be5ffe5142d808840a18be478c36e6b212de52f44e122b249bdae9adedc7e93f9c6039559cc507c5b8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.api-client/google-api-client@2.7.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-api-java-client/google-api-client",
          "type": "website"
        },
        {
          "url": "https://github.com/googleapis/google-api-java-client/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/google-api-java-client/google-api-client",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.http-client/google-http-client-apache-v2@1.45.2?type=jar",
      "publisher": "Google",
      "group": "com.google.http-client",
      "name": "google-http-client-apache-v2",
      "version": "1.45.2",
      "description": "Google HTTP Client Library for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "7bdd7d5b16cbe1f6e3625ee32caff77a"
        },
        {
          "alg": "SHA-1",
          "content": "0709e720ca21bf6e201dd244137d38281548172e"
        },
        {
          "alg": "SHA-256",
          "content": "b2b1b242e162c8f9e41b3ab89ddfb72d14299f96e831fcbd68ba42212a0930cd"
        },
        {
          "alg": "SHA-512",
          "content": "134e8c56d7acff28f9f789e6e9bbccef52395d1b85bc79221619e7e3e8ded12df4fb20b875c2550b694362dc669ce0585230fae7bf64219f0b8494a213911a18"
        },
        {
          "alg": "SHA-384",
          "content": "99d5178995b91b510d674897053b264b7f9fb7621d401b94d86167bad2cc1c5d764ba1d2cdf85fb928463da7b8157ada"
        },
        {
          "alg": "SHA3-384",
          "content": "22088dbc8eb90712b27eaea98c17886dec2458b9995f0c2febe01760cb49e56114e0451e3d1c41f21a9aa73af5c5ce41"
        },
        {
          "alg": "SHA3-256",
          "content": "a4ec48c64e2b9fe631bd897b8534e863cd82a26cadb0ae197ca4f81f76a29d21"
        },
        {
          "alg": "SHA3-512",
          "content": "2f89c2f6d154c8bf50a20164e0dfe72c1d5982064288a331a1416a5b6fc5261bbe0239471ea6b1885f51b907dd59e8f1d756c87cbc0797a2ab3f3e4e13baea89"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.http-client/google-http-client-apache-v2@1.45.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-http-java-client/google-http-client-apache-v2",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/googleapis/google-http-java-client/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/google-http-java-client/google-http-client-apache-v2",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.apis/google-api-services-sqladmin@v1beta4-rev20250310-2.0.0?type=jar",
      "publisher": "Google",
      "group": "com.google.apis",
      "name": "google-api-services-sqladmin",
      "version": "v1beta4-rev20250310-2.0.0",
      "description": "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "66c6e6fe6a4336d4bec618871f7518c0"
        },
        {
          "alg": "SHA-1",
          "content": "cdf6aaf22292e79713ce4ed4758d665916c76223"
        },
        {
          "alg": "SHA-256",
          "content": "77b5d4dcbff0e4efba9e5d40c56ddb0691207cb075b89e0c0bd4620dfba6a85a"
        },
        {
          "alg": "SHA-512",
          "content": "394486466179e9c7cd6143f0a9d6936c0419bde9e8a9e17147bec4086ed5a5512587007d35115be962795290283d9a9b9feb006cabdc8aca2c22e529577e501b"
        },
        {
          "alg": "SHA-384",
          "content": "26c850c4b857946ee36ba86d9d0665a585d3bd8a6aed644a31684bdf25d1c39a4facf0700fd9aad2f704bbbf2c2eda2a"
        },
        {
          "alg": "SHA3-384",
          "content": "9451b170cec433d13ed664e38ac421d2c272f440c2be9d0f7fbb844afc46c18e736e41e06f189478b3d9e37c53a1cabc"
        },
        {
          "alg": "SHA3-256",
          "content": "0e86ff1270e4357720024c1bfcc14ad2f6bf9a8f20007fa1359e78635329bcf5"
        },
        {
          "alg": "SHA3-512",
          "content": "209bf3e19ca3194b2e21ed01a460577598b53634d9d43d1e48b068d9e9ac00063df115ad8fca9d6efde332f3171cbf0e79d83f5e0b6e6bc9a726c6eb75c9fcf5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.apis/google-api-services-sqladmin@v1beta4-rev20250310-2.0.0?type=jar",
      "externalReferences": [
        {
          "url": "http://nexus.sonatype.org/oss-repository-hosting.html/google-api-services-sqladmin",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "http://svn.sonatype.org/spice/tags/oss-parent-7/google-api-services-sqladmin",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.auth/google-auth-library-credentials@1.33.1?type=jar",
      "publisher": "Google",
      "group": "com.google.auth",
      "name": "google-auth-library-credentials",
      "version": "1.33.1",
      "description": "Client libraries providing authentication and authorization to enable calling Google APIs.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d161f888396fd77c7c5ff4d8f2c74d30"
        },
        {
          "alg": "SHA-1",
          "content": "e3d0772d9a99ddbf137c5098ab17c2c3012162c2"
        },
        {
          "alg": "SHA-256",
          "content": "3367d627c5f4d1fa307a3c6ff95db56ad7b611ae4483fe21d72877fa037ff125"
        },
        {
          "alg": "SHA-512",
          "content": "d1bb74ccf0b1b1e98633908a5b5c595fb7b120c49bb91d02daf507c242d39ab9b75fcc576340266080ba18636f8c7371790fab636c96aeda24622467c98d45d5"
        },
        {
          "alg": "SHA-384",
          "content": "e366467b330f0e78139c2c5c2cee4b7f3e509013d2dc491e49133b0796ead77000b568a2f97a18a712aa05a52c9bb55a"
        },
        {
          "alg": "SHA3-384",
          "content": "88787976f52ece2cf6c82331c50e0d70d78d258f5358ef500c83fc7534e81f0328c71eba6bc9b8a24efe98d443a55856"
        },
        {
          "alg": "SHA3-256",
          "content": "693c23f339a67b0462b0b92a46a00dc152b9bed8b6e433d3ad0136278d421f42"
        },
        {
          "alg": "SHA3-512",
          "content": "dc085e3d6038e8e39252abdf7c88dce6429f4ba4c363b6545d90f150a916aab6a7988e9a408f61446b48de8e4b0a43f2f4132d540d5518561878c1b0a2b4150b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.google.auth/google-auth-library-credentials@1.33.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-auth-library-java/google-auth-library-credentials",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/googleapis/java-shared-config/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/google-auth-library-java/google-auth-library-credentials",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.auth/google-auth-library-oauth2-http@1.33.1?type=jar",
      "publisher": "Google",
      "group": "com.google.auth",
      "name": "google-auth-library-oauth2-http",
      "version": "1.33.1",
      "description": "Client libraries providing authentication and authorization to enable calling Google APIs.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2a3b04d2872cc74625a9fe2d4f522e98"
        },
        {
          "alg": "SHA-1",
          "content": "dacefb5c52f35713b3c1ae42fb2f85fb15e6fcfe"
        },
        {
          "alg": "SHA-256",
          "content": "6a72ec2bb2350ca1970019e388d00808136e4da2e30296e9d8c346e3850b0eaa"
        },
        {
          "alg": "SHA-512",
          "content": "3595dbe975515b164075b1f2d6c81bf6a45eea132656f2ef305a3fef58515341793a0d0d93d43097a01270e8b26a5e6258c3ad3832629abdd677ef46365baaa2"
        },
        {
          "alg": "SHA-384",
          "content": "f53c7d94c0931f1680551e441e9749e08458c6a132ea78d96370c7c5b0a633f1af937305b12427bccd21cd160e8fd6af"
        },
        {
          "alg": "SHA3-384",
          "content": "535846da0d3b63fa1c0c02718eaa95dc2a936df3cc5837ae4d549387fe864d6a6ae3e6d435b8d83002d78a6bd51cab7f"
        },
        {
          "alg": "SHA3-256",
          "content": "5c458c31890d0276094d550a85c17ad5daa2d9b98483018776010172e2e79daa"
        },
        {
          "alg": "SHA3-512",
          "content": "7d1614c4d6658b899ae5fda5c6709f0dba719cb82fc6c74ed7ebe1596f9cf10371c3ebf498a0251ebda3d772179f457d76c8c4a25729a910a878947be4b9061f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.google.auth/google-auth-library-oauth2-http@1.33.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-auth-library-java/google-auth-library-oauth2-http",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/googleapis/java-shared-config/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/google-auth-library-java/google-auth-library-oauth2-http",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.0?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.auto.value",
      "name": "auto-value-annotations",
      "version": "1.11.0",
      "description": "Immutable value-type code generation for Java 8\u002B.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8fc3c2d0bbdef8927f08a5c7c829a768"
        },
        {
          "alg": "SHA-1",
          "content": "f0d047931d07cfbc6fa4079854f181ff62891d6f"
        },
        {
          "alg": "SHA-256",
          "content": "5a055ce4255333b3346e1a8703da5bf8ff049532286fdcd31712d624abe111dd"
        },
        {
          "alg": "SHA-512",
          "content": "339742a85491c0fe529e97668cd86d9c3a7a80061d226e1a51eae45fb9c466e10ee2a4d4fc3b502b96aa473ac4e03850aef8a3b744d3972a934b279ceb80816e"
        },
        {
          "alg": "SHA-384",
          "content": "626c76525b939a087be13919b760b447ef6b8668004634650e9c98105c7b31412c205e022a8ba15ea7bc1c7061a6367c"
        },
        {
          "alg": "SHA3-384",
          "content": "f5c85d8934f52d108217ce20c0641c7692023c657049e40b4916185cd3f9d4386f4404dbc13a0694c9bb13fdf9b687e5"
        },
        {
          "alg": "SHA3-256",
          "content": "549eac3adc58ec5271c45ff9390bbfc0b30c3af27a8d74392ca0a46c19062ed7"
        },
        {
          "alg": "SHA3-512",
          "content": "9f65f28e7b022ea782b45939fd1170d6d0a175f639ca8cf66363f87390b642046da5d5bb0c8adc679b6b9533c9d8cd4b4dfefb7f09d6fb5028219c96fb37d508"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/auto/tree/main/value",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "http://github.com/google/auto/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/google/auto",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.oauth-client/google-oauth-client@1.39.0?type=jar",
      "publisher": "Google",
      "group": "com.google.oauth-client",
      "name": "google-oauth-client",
      "version": "1.39.0",
      "description": "Google OAuth Client Library for Java. Functionality that works on all supported Java platforms, including Java 7 (or higher) desktop (SE) and web (EE), Android, and Google App Engine.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "cf4992aee304401b66f6d03e654ab981"
        },
        {
          "alg": "SHA-1",
          "content": "99f02f3c46c68c01dfc95878456b009a13229c88"
        },
        {
          "alg": "SHA-256",
          "content": "27fc61ee2d526e33d31350b5ea383091c0879345e261f9b2e6fcc97a20c86f88"
        },
        {
          "alg": "SHA-512",
          "content": "f8973ab9ddda79746cc4e5d6c156e571604304627db7ebc2a570f56679cdeeddad86ce8e36a8acb7593a215c9a55cd8b8f86d85d9bec67b71c15b27eb1af45fd"
        },
        {
          "alg": "SHA-384",
          "content": "a3ef0821a2964960487e39747c2a69ec2030ac04e0fd1bae025c5c71036ffa6dc8a1c99effb7c5a63fe9ce81b742e9d0"
        },
        {
          "alg": "SHA3-384",
          "content": "c3c37f7e6c0f7d107c8e52546c8ec9e4f726308dfb065e9cdd8265904ca1a06d401b29fa6b84d3df67c420b8604b6330"
        },
        {
          "alg": "SHA3-256",
          "content": "44c05e415db8bdfef87fb2207b5d4d02c115aa661b334cf26ef9b97be29d019e"
        },
        {
          "alg": "SHA3-512",
          "content": "abd5c4d3fe3a17103f09c70f6adaf130b59690d8639fd771ed03588451bd061c3d38782dd178ff1999806942a950b584d016b77a4bab0fa28e66b64052e08d60"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.oauth-client/google-oauth-client@1.39.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-oauth-java-client/google-oauth-client",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/googleapis/google-oauth-java-client/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/google-oauth-java-client/google-oauth-client",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.api/gax@2.63.1?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.api",
      "name": "gax",
      "version": "2.63.1",
      "description": "Google Api eXtensions for Java (Core)",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "090c7161572775d21ed2fcd307b93df9"
        },
        {
          "alg": "SHA-1",
          "content": "6c9a340608a63e24dc8acd8da84afd8ffecca4b7"
        },
        {
          "alg": "SHA-256",
          "content": "26752413f76b8391dacefff40db867c1d33d0bf63d32954de3e9bb74cdcb8568"
        },
        {
          "alg": "SHA-512",
          "content": "75c2f4d4e249e0a724e75cf05a97dabc229fa3a48f7827a38f8dc39dadc677f210f512218105f05be5f17662a91edadd8b1acb28d844744af999d9e0f78fe55b"
        },
        {
          "alg": "SHA-384",
          "content": "f9a370cabac0e3bd6f68353de7c89cfb7090e0d6f7dd0ff491c17401fcbff649b5dee2765c0bd44e649f1cc77bdd521e"
        },
        {
          "alg": "SHA3-384",
          "content": "806e1a2e409d90fc1c4766e4de43fa3ae31a5c55a8c25ff3331fcfce132df5dd60ee25e11167c0b3e97a2782233b0b69"
        },
        {
          "alg": "SHA3-256",
          "content": "db3697d73417f2006a33dc0ca34fc096f3e00100ee5ce5feb4c861b2472b1d24"
        },
        {
          "alg": "SHA3-512",
          "content": "48d8fc6675a6ab9841d15e35cc5f9f2b3b77e5f096f0deb724ef71b1dbce9a9688e9a965cb8b167853b39336d4f1fb203217b1d5f50b375cbe0c4af5ad42fc8c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.google.api/gax@2.63.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/sdk-platform-java",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/googleapis/sdk-platform-java/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/sdk-platform-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.cloud.sql/postgres-socket-factory@1.24.1?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.cloud.sql",
      "name": "postgres-socket-factory",
      "version": "1.24.1",
      "description": "Socket factory for the Postgres JDBC driver that allows a user with the appropriate permissions to connect to a Cloud SQL database without having to deal with IP allowlisting or SSL certificates manually.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c8f0c120c4e73ab54ed77ea591321545"
        },
        {
          "alg": "SHA-1",
          "content": "2869b69090521235ac9cb6fd85d8f63ac4366ca9"
        },
        {
          "alg": "SHA-256",
          "content": "2fa6d1b5a83f11fa271728e595b5f0941f24b3d0503022e94d466fed5dbb343b"
        },
        {
          "alg": "SHA-512",
          "content": "3dd6ff7beed87f0c195e390fb1eb7490148b098237bc35dcda5c1e4313fb4f3bf88cbc57fc11e2de75e150e87eb6b2d273d92adc563f9294bd70972ec79f2659"
        },
        {
          "alg": "SHA-384",
          "content": "8a47345f37b90c32498201846aea21ba955d598eba7ba6cdf4c90d32c1a80969e821edee8ffa41d785c41ac6acedc26f"
        },
        {
          "alg": "SHA3-384",
          "content": "e7d94d294c04179f00f70ecc7477c06dcf3cc19de44288dcc04a4d72fef770afa50d82a4718178436df7835dbeaca512"
        },
        {
          "alg": "SHA3-256",
          "content": "efec8890c1d880367c0aacd7cfc456ee6333e5f2e93c514a4a9047e5d17a17ef"
        },
        {
          "alg": "SHA3-512",
          "content": "11274ed6c34c55c337735ee9a93cd4a923a8fe67bbaea1d8bb327e2ae8fa80bb7d6f9013e663bb5824da0153ff857a15c185c0d561e216c406d49bbf24377571"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.cloud.sql/postgres-socket-factory@1.24.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/GoogleCloudPlatform/cloud-sql-mysql-socket-factory/postgres-socket-factory",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/googleapis/java-shared-config/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/GoogleCloudPlatform/cloud-sql-mysql-socket-factory.git/postgres-socket-factory",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.cloud.sql/cloud-sql-connector-jdbc-sqlserver@1.24.1?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.cloud.sql",
      "name": "cloud-sql-connector-jdbc-sqlserver",
      "version": "1.24.1",
      "description": "Socket factory for the Microsoft JDBC Driver for SQL Server that allows a user with the appropriate permissions to connect to a Cloud SQL database without having to deal with IP allowlisting or SSL certificates manually.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9431b6f5938f44ddb604c48d5248f635"
        },
        {
          "alg": "SHA-1",
          "content": "a6bc6d2c31b32a4b52eb158cc6ca7cfe0f3410d8"
        },
        {
          "alg": "SHA-256",
          "content": "3138c78eda412fe470f75ffded1de6369261c38603b24ad7c0186c0f0cb5a2ef"
        },
        {
          "alg": "SHA-512",
          "content": "650f0e3e9cd4be9c3b2e709f5049eac1b948dab0ffc1d6aaca7bc8189bf799269c451efd14a67f4ab4d41e676e950f6bcab5e47ff814a5727f018885058d4003"
        },
        {
          "alg": "SHA-384",
          "content": "06f982773e0940cc820a39d4cd4f955e0323bb0043a8e87b54131239d07fbd65058a02321975525d70785adcbef4487a"
        },
        {
          "alg": "SHA3-384",
          "content": "754b46b0da963b438d2f36092a372b34cac19a9c85b792496a49063c54281242c37c89dcb7b6c8fe28f34367b51e334d"
        },
        {
          "alg": "SHA3-256",
          "content": "661f2dbed26dba62ebcb5d9fe3ed4981de36af4348e802eb946e27146db72b35"
        },
        {
          "alg": "SHA3-512",
          "content": "f94a09d96077b4b6f4fea1281ae39be8c46a8b129b7c5df2170048aef9055c8e71cc1f477de8ffc006bd785559e1aea7d15b215bad23044899ac141126fc8105"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.cloud.sql/cloud-sql-connector-jdbc-sqlserver@1.24.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/GoogleCloudPlatform/cloud-sql-mysql-socket-factory/cloud-sql-connector-jdbc-sqlserver",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/googleapis/java-shared-config/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/GoogleCloudPlatform/cloud-sql-mysql-socket-factory.git/cloud-sql-connector-jdbc-sqlserver",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.commons",
      "name": "commons-compress",
      "version": "1.28.0",
      "description": "Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f33efe616d561f8281ef7bf9f2576ad0"
        },
        {
          "alg": "SHA-1",
          "content": "e482f2c7a88dac3c497e96aa420b6a769f59c8d7"
        },
        {
          "alg": "SHA-256",
          "content": "e1522945218456f3649a39bc4afd70ce4bd466221519dba7d378f2141a4642ca"
        },
        {
          "alg": "SHA-512",
          "content": "f1f140f4f40ab3cf3265919db9dbb95a631a29aa784e305f291de4e68876bb711d9217d62d7937cddddd393982decdf71a608b4b3ab7f4e6375cf28af2893d7f"
        },
        {
          "alg": "SHA-384",
          "content": "afe6a8fc8e7486c4ecce95276bb1467763d7ff7d941c7bcff8661bbbd4bff442fd0899ff7a11bc540cda86818ee4a8f0"
        },
        {
          "alg": "SHA3-384",
          "content": "6afb636ad0805e522913cfd91c8293c485b7f4eff5e45dd3a17a716c3f4b8ab8969e9c00927559a5fb762cba1fdb3d3f"
        },
        {
          "alg": "SHA3-256",
          "content": "4420e0b462b5dcc45077e95e012a82a5ae17659e5abe8a685fa086dab6995298"
        },
        {
          "alg": "SHA3-512",
          "content": "23e37d13c8ee6c7369e407c29d1f9ee1bb44eca9f09a6f9742f6b4cf3d38dd7a0509fe0142536cd8087b68a76e71d819105af2c23f2aeed08acc58eb93cf7e61"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar",
      "externalReferences": [
        {
          "url": "https://commons.apache.org/proper/commons-compress/",
          "type": "website"
        },
        {
          "url": "https://github.com/apache/commons-compress/actions",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://issues.apache.org/jira/browse/COMPRESS",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/commons-user/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitbox.apache.org/repos/asf?p=commons-compress.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.commons/commons-text@1.13.0?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.commons",
      "name": "commons-text",
      "version": "1.13.0",
      "description": "Apache Commons Text is a set of utility functions and reusable components for the purpose of processing and manipulating text that should be of use in a Java environment.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4b4766452c04316e3ef6ffe3490d6b10"
        },
        {
          "alg": "SHA-1",
          "content": "ba2ed5521c491cabf7ecdb57f77922561c2e8958"
        },
        {
          "alg": "SHA-256",
          "content": "1e323a501127df78ed0987f345d69d65d0ea7fa3d4fb5b3f84aaeba3a8b20f38"
        },
        {
          "alg": "SHA-512",
          "content": "d4fdc5b2f1d3cbe1ed4bec867fad4430a38ae7ce7a3a9815c9839c9b16a2af3b67d92bb663854282e71042e3f391fe35a5de0fc9f0fcfb6ae7becaf725f8bfeb"
        },
        {
          "alg": "SHA-384",
          "content": "8c598624f9b44f23f08a92635bf7e275c1c2b4b007a9738c42c268c977725a003b50c04ca1058d23e541c58bd17cd782"
        },
        {
          "alg": "SHA3-384",
          "content": "b2d3c238f6e50356d3b9f9647caf15dd43276ed84a3eee2134f9f5f9e26488278bb1634b7a826a29892a7ce88ec97611"
        },
        {
          "alg": "SHA3-256",
          "content": "d44ae9baca87e428ae1d14e3418d0963086031ac23020312e4a6206b34bbd219"
        },
        {
          "alg": "SHA3-512",
          "content": "5077ff2b3d167c6f40284e99d6fbf54dd1f7150c49619ab5e3a1da1bdb0f6ee2481d5e3851489ff37be6589a9c8fdc0823f5422f1c78ad38d8a539a9d7d7f82e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-text@1.13.0?type=jar",
      "externalReferences": [
        {
          "url": "https://commons.apache.org/proper/commons-text",
          "type": "website"
        },
        {
          "url": "https://github.com/apache/commons-parent/actions",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://issues.apache.org/jira/browse/TEXT",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/commons-user/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitbox.apache.org/repos/asf?p=commons-text.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-retry@2.2.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-retry",
      "version": "2.2.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "919ae7605c46401d47fd30c8d11adbc6"
        },
        {
          "alg": "SHA-1",
          "content": "949e85e5501f75a54641276947143282ac13e102"
        },
        {
          "alg": "SHA-256",
          "content": "5256badd000a3dfd74914241e7095adf96ccde955dabb9d204f1e7b60fe6bcba"
        },
        {
          "alg": "SHA-512",
          "content": "ff934b9cfe4b719b705e3602c3870fe078ce03de960370da6b135a30e67601d9b3b510f661dc3ed5fc139d97beba68487f5ef7486fdcf736a8c69b486262a1b4"
        },
        {
          "alg": "SHA-384",
          "content": "19559f377bc78e310148ef09aec659fb7f137c4d97f27ae3a062bef2cc5eb1abb1df3531b358b3ad628d8e448241556a"
        },
        {
          "alg": "SHA3-384",
          "content": "0aea0eb2be1a54890f02a2cd41d5d16614bcda4a8f3a7ae758a2a1f7aad35cb44854ee3b2b5a1997b7a0284f71781408"
        },
        {
          "alg": "SHA3-256",
          "content": "7771156db6e01df67807586fb90600b6bea54204b2f9b3dd1e2cc1a11abfd799"
        },
        {
          "alg": "SHA3-512",
          "content": "0496a3cfc0033ba0b24d68b3a867d868d9b5c3397a2b68e35d8a4a50b83a3cc352055a3221358c0c41ae5f590d70b9adf8e3460b85d3491ce7df5339b7addb75"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-retry@2.2.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-core@2.2.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-core",
      "version": "2.2.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b611481f2f07e337aa9a3ea0fe30fa35"
        },
        {
          "alg": "SHA-1",
          "content": "61b780cfbfbc41d7b8b26278ca3b81c034330457"
        },
        {
          "alg": "SHA-256",
          "content": "6200917bb21c30134c27e3de8bc8c6e4a7760d87579a0dc4e2dc54888beab5ce"
        },
        {
          "alg": "SHA-512",
          "content": "e28246320120a2e62a154c3873fe5368fa8ef956f56b922a536c35bf85377feee19b43129d6fbf9a7ad126faad612a45f984cc4821737e3db62770f5f26ae6e1"
        },
        {
          "alg": "SHA-384",
          "content": "eee38efdaf756510161d0cf01ee1d4e6c44a65ec1c7239280ccee76d52c912dec8568ac850683a5d11c3140c016bf9f4"
        },
        {
          "alg": "SHA3-384",
          "content": "84bec94c321c3ceb5fda51739a655ccc024ad8c52f42ce0ba56e3bc5fed9700ad18976c39d52b849da37cbc75b13528a"
        },
        {
          "alg": "SHA3-256",
          "content": "280755e8d38762b75955cbaf989ee542ef498ab0042d7cd3b22ab043afd60f9e"
        },
        {
          "alg": "SHA3-512",
          "content": "84e9d5190267b8a0dd7a91378a274360dcbb8ba7779e10ff5fa3f8ebb6ad21206c612f3a90c2237485a6d4956d43b135e1390d603caaa846f0b504d46d5f5295"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-core@2.2.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-ratelimiter@2.2.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-ratelimiter",
      "version": "2.2.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e79bb83e2a95809c02a077c6c001b0f3"
        },
        {
          "alg": "SHA-1",
          "content": "1f8d4e451685e031ef181974c93748f6e378f73c"
        },
        {
          "alg": "SHA-256",
          "content": "b285699e8f45e83bd1dec985ee7646086fcd0234871f4cf4fa5d2487a585601d"
        },
        {
          "alg": "SHA-512",
          "content": "24b0817b86e46fa8c6ac6589f1dbd22f30f43d563ac1a41cb21a7f2769be10340ae01626be7183e79efeb2eead2b95719955d1941ca24f64536cc94a426775c9"
        },
        {
          "alg": "SHA-384",
          "content": "a6a47641357a8b6854304f98d24261ffb394effad8ffdbbc0d4a351d5a8288b2a6edc802de8721ed48d54e62ba8d6500"
        },
        {
          "alg": "SHA3-384",
          "content": "aa5f2435a36a72e5f0b5259b66f8dc25a5c846d72549400cefc173a1f893ecdaec37f56c32a17aa3562b362fe34b6244"
        },
        {
          "alg": "SHA3-256",
          "content": "140766126ad41e4f7e08dcc7b04df6ba461640e35d026e6e978ef046f770f61a"
        },
        {
          "alg": "SHA3-512",
          "content": "76889f9e5d602c1cbe5c5d803d78ff13273ba4f6a6d835694359bad0afcebda71d943b0102c80041b9d65429c9623635197dce7fe1f5b24f0649256f41364d01"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-ratelimiter@2.2.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-micrometer@2.2.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-micrometer",
      "version": "2.2.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8e7a5e842604d726374f318070eebb80"
        },
        {
          "alg": "SHA-1",
          "content": "67470bfe3a59e74bc5198aef9b2c6fabab67c35d"
        },
        {
          "alg": "SHA-256",
          "content": "f94fd45a5f69d8f5de4b4841314838aee04aada6163e2a038cf28b4f42f5f651"
        },
        {
          "alg": "SHA-512",
          "content": "0e00621e7d8d7b3d964a79687816b9b14647c2e9e58cd85872a5d7a45061211504ee4224232cd95b2d15e5b12f40102eb415b58322682ba36e0f9a420c2acebc"
        },
        {
          "alg": "SHA-384",
          "content": "ca61f52fcd6224b1cd985ec7dd1b088f6bf974e4bd8ffa7dc57600ad62ccb02590388b4ec8279230cef4bead685e3707"
        },
        {
          "alg": "SHA3-384",
          "content": "1a6fd0fde8bba1a4fb6663cdcdf58217ba1f76aa45620a7460821fe6319942a7a68629499b5854af8184416aa4385b40"
        },
        {
          "alg": "SHA3-256",
          "content": "06a7fc3dad22d6ba858fe1d54aaaed0808b8b38504ce681f1e2a4f990fef91a6"
        },
        {
          "alg": "SHA3-512",
          "content": "39214bfbb9692db49ba36a3da1adc98a4ef4022a82e2d1ebd48330ecdc73f4fc46f4114463a3d04dbd86b26554cd963501cde9acecb877c782c03af8fb39187f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-micrometer@2.2.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.micrometer/micrometer-core@1.10.0?type=jar",
      "group": "io.micrometer",
      "name": "micrometer-core",
      "version": "1.10.0",
      "description": "Core module of Micrometer containing instrumentation API and implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "13bbcc080729d2a0de553b78323b486f"
        },
        {
          "alg": "SHA-1",
          "content": "f6aec5087695596cdc81d5f597c46124c44ada23"
        },
        {
          "alg": "SHA-256",
          "content": "ece52bd972f554ffa023df61d4571728e719135573f594d69810d0b6886e82ce"
        },
        {
          "alg": "SHA-512",
          "content": "28278179694bd20878680a917da2cb440163d9f09effa1313b9119ac9a449c87349958dbbd06034fdb3f2b7809fdcf00868e5a55629cc1fb9adb5b2ede087a12"
        },
        {
          "alg": "SHA-384",
          "content": "1e737d372ff55f96d2468d3be298fc22c5380fb0cc8c5d996b486cc977309e00c55b07695209cdfbf29597a86857b239"
        },
        {
          "alg": "SHA3-384",
          "content": "b5bdb2e08374cb125c93328a91b49161460f9b51c0af0a8955d74c87017682d70a98ca520c20a6372f2a0f4d3a1c43c6"
        },
        {
          "alg": "SHA3-256",
          "content": "30a9e359b0675144ced4281313d395e625a09ae2e92e8140edb89eb1991c5f54"
        },
        {
          "alg": "SHA3-512",
          "content": "bd0742f31ba2ade4e17bf811bb7c8e4365cccb80c6b8a8e6fb712f69c0b69a0705c9b5a1a2de535c561784af66f63022074492b7057edbe19f0de49937e79596"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.micrometer/micrometer-core@1.10.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/micrometer-metrics/micrometer",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.micrometer/micrometer-commons@1.10.0?type=jar",
      "group": "io.micrometer",
      "name": "micrometer-commons",
      "version": "1.10.0",
      "description": "Module containing common code",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "80ed9439b29a2adfaccd8d3afc3b9188"
        },
        {
          "alg": "SHA-1",
          "content": "e2181e59ebc1ccaaae567f231322ac9414359d43"
        },
        {
          "alg": "SHA-256",
          "content": "1da4fb8218c832fb443f99114d62d36997e3ecdbdd2d1b19c42adbd00de7db8e"
        },
        {
          "alg": "SHA-512",
          "content": "0557ab1739ef663be168f97c208c3e31dc41575e9ef03e2acc97d83d28441a09bd28c9e2d8653b20dce3c9bfabd0ec1d0e1eb2551b8db82624b27301b36d9c49"
        },
        {
          "alg": "SHA-384",
          "content": "5cbdfb4966870fbb2c4bce961feacf19862c2166567a67d9e5da5e8e32341361faf5525bf5d3c4e6f5048295009b2d16"
        },
        {
          "alg": "SHA3-384",
          "content": "ac79f709238173c5473ad55a2a4e0984d59c740aef3362e580eb414bfbb15e39889d9e9de10458bcd2c0201e58e11b3e"
        },
        {
          "alg": "SHA3-256",
          "content": "c69062fff7515170791d06fe094aebf1535a4555511095c7d0514adbe39cf439"
        },
        {
          "alg": "SHA3-512",
          "content": "b479736a0894849017090328255b8daf3f46e47136702b54e6f5c4f5d9ba346a009843a0040848587fccc803cbc1bb4bd62e5312b0ffe679704f7981a1693705"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.micrometer/micrometer-commons@1.10.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/micrometer-metrics/micrometer",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.hdrhistogram/HdrHistogram@2.1.12?type=jar",
      "group": "org.hdrhistogram",
      "name": "HdrHistogram",
      "version": "2.1.12",
      "description": "HdrHistogram supports the recording and analyzing sampled data value counts across a configurable integer value range with configurable value precision within the range. Value precision is expressed as the number of significant digits in the value recording, and provides control over value quantization behavior across the value range and the subsequent value resolution at any given level.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4b1acf3448b750cb485da7e37384fcd8"
        },
        {
          "alg": "SHA-1",
          "content": "6eb7552156e0d517ae80cc2247be1427c8d90452"
        },
        {
          "alg": "SHA-256",
          "content": "9b47fbae444feaac4b7e04f0ea294569e4bc282bc69d8c2ce2ac3f23577281e2"
        },
        {
          "alg": "SHA-512",
          "content": "b03b7270eb7962c88324858f94313adb3a53876f1e11568a78a5b7e00a9419e4d7ab8774747427bff6974b971b6dfc47a127fca11cb30eaf7d83b716e09b1a0d"
        },
        {
          "alg": "SHA-384",
          "content": "06977d680dafd803d32441994474e598384a584411a67c95ab4a64698c9e4cbd613e0119b54685cea275b507a0a6f362"
        },
        {
          "alg": "SHA3-384",
          "content": "b5ccb4d39bf7cc8ccc33f0f8fcbab0a63c99a94feda840b5d80fc3ae061127f1475cfb869b060933783a1f2eafb103a1"
        },
        {
          "alg": "SHA3-256",
          "content": "ef2113f27862af1d24d90c2028fc566902720248468d3c0f2f1807cc86918882"
        },
        {
          "alg": "SHA3-512",
          "content": "4fca2f75bdfd3f2ac40dc227ae2ef0272142802b1546d4f5edf9155eaeed84eff07b0c3a978291a1df096ec94724b0defb045365e6a51acfdd5da68d72c5a8eb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "CC0-1.0"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.hdrhistogram/HdrHistogram@2.1.12?type=jar",
      "externalReferences": [
        {
          "url": "http://hdrhistogram.github.io/HdrHistogram/",
          "type": "website"
        },
        {
          "url": "https://github.com/HdrHistogram/HdrHistogram/issues",
          "type": "issue-tracker"
        },
        {
          "url": "scm:git:git://github.com/HdrHistogram/HdrHistogram.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.latencyutils/LatencyUtils@2.0.3?type=jar",
      "group": "org.latencyutils",
      "name": "LatencyUtils",
      "version": "2.0.3",
      "description": "LatencyUtils is a package that provides latency recording and reporting utilities.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2ad12e1ef7614cecfb0483fa9ac6da73"
        },
        {
          "alg": "SHA-1",
          "content": "769c0b82cb2421c8256300e907298a9410a2a3d3"
        },
        {
          "alg": "SHA-256",
          "content": "a32a9ffa06b2f4e01c5360f8f9df7bc5d9454a5d373cd8f361347fa5a57165ec"
        },
        {
          "alg": "SHA-512",
          "content": "bb81a42498c65389366205f4e07cee336920e2f05cc0daae213f2784b1d0ce9a908b038daec20478f23eb00b2bf704f96c5b00f63c99615193ab2a3cc4a9f890"
        },
        {
          "alg": "SHA-384",
          "content": "16ca4640dc9d848e6c6d15441897e1b5a9f27f34207b0bb456dd54d8f267b73b348092e548e78634144de44ba3515205"
        },
        {
          "alg": "SHA3-384",
          "content": "406c2b5c6f64b0c090568e479b5e6136a04a4e77f8eea65d32b4e2b01deebcdf6a0a851240cdb740c25b5a5e61e6c179"
        },
        {
          "alg": "SHA3-256",
          "content": "50ae828358301033542fd7c412e86ee318d5451f89a182e2a679aaf18099d26d"
        },
        {
          "alg": "SHA3-512",
          "content": "456c337b9fb385579aae707409ed6a04d08e5fc87b1a46733dca617c22c625bf253dc4747e0cdbf5e7d8b48102d2938cb482b6b688a79aab645a7459c592258f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "CC0-1.0"
          }
        }
      ],
      "purl": "pkg:maven/org.latencyutils/LatencyUtils@2.0.3?type=jar",
      "externalReferences": [
        {
          "url": "http://latencyutils.github.io/LatencyUtils/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/LatencyUtils/LatencyUtils/issues",
          "type": "issue-tracker"
        },
        {
          "url": "scm:git:git://github.com/LatencyUtils/LatencyUtils.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.micrometer/micrometer-observation@1.10.0?type=jar",
      "group": "io.micrometer",
      "name": "micrometer-observation",
      "version": "1.10.0",
      "description": "Module containing Observation related code",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "85a101a9e6a8a761a4ced843d5aa268d"
        },
        {
          "alg": "SHA-1",
          "content": "6d49a0c2ed681291f011e8d07583c0cc741dd4c6"
        },
        {
          "alg": "SHA-256",
          "content": "af6ff881c71ec62027b91dd1658459c211d261d9867a4552db8c7ffdf899455d"
        },
        {
          "alg": "SHA-512",
          "content": "33c3c6d6bd694521f54254d343e4fed97a402efe60032dc7e98bebb4ebd9eab23c6c53447cf5c05933617d4d32d678cb6a01c76877de98e3e02659fb837df46e"
        },
        {
          "alg": "SHA-384",
          "content": "ac0bc89d91612fc777b8bf0c1fb8b395075404a09ff46325deef900a2015228f98a57c038c66519dafa3c0dd6f72ee04"
        },
        {
          "alg": "SHA3-384",
          "content": "5601c7ddef6f1e4898c983b02d47e4e396c22378b83e2878d20bea319c6d70fe38ed16ad5f4be5ed8938f22554781271"
        },
        {
          "alg": "SHA3-256",
          "content": "b6dfd4f004ebe446e2eb358d2279e480f1ffe944261ed21acfe59f03856faec9"
        },
        {
          "alg": "SHA3-512",
          "content": "ac9674372e016f60a0f951b6b922dcea1038446867e1071c366cc9298cc3e00bb12870fd59f38dc32b5cb3780ec5cc31148abc2c5dedff779d32c091d412b937"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.micrometer/micrometer-observation@1.10.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/micrometer-metrics/micrometer",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-bulkhead@2.2.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-bulkhead",
      "version": "2.2.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4650e71b221170461f8ad85c97afa15e"
        },
        {
          "alg": "SHA-1",
          "content": "3f0b483516bcd171e6c0b9e913c5def0ca3b89fe"
        },
        {
          "alg": "SHA-256",
          "content": "5211f86fdeff5aff8ef9f3f6491e101a992f215671c80404e9900b4242061394"
        },
        {
          "alg": "SHA-512",
          "content": "fc66bc3fa0365a3bef4ca0c7061ca16750b9015d867d66e4a7d6d08eb37d6861cc32ef2c857c53aef1d2e48664eaed1c6ca488741081fc6de9662531fca26253"
        },
        {
          "alg": "SHA-384",
          "content": "7c5bf38a12ec871b2b337640837f753f0af30e090530f6ce83fae87d594f0ee5233ae263823ef250a949984a0180491c"
        },
        {
          "alg": "SHA3-384",
          "content": "34453c4d791e08ba54d737bd1f7139c217f342713cd1179238aefec82de6c3d9aaaefac62838940016f0c7a0fa98fa6f"
        },
        {
          "alg": "SHA3-256",
          "content": "8d423b4f936955f400a5206fb5e6c6d574d8cf591c6904ea737a3ba4b18e7519"
        },
        {
          "alg": "SHA3-512",
          "content": "810b2f2529966cf5978a79b080c0c153f01be18691cb4585bda201e51b1ce6a7ef9d1a528793641f4cad98d38d81a805ec06ffdde338e589b564dc14074592d1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-bulkhead@2.2.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-circuitbreaker@2.2.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-circuitbreaker",
      "version": "2.2.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "cd68419d2a18356559957b0c0b0e27d2"
        },
        {
          "alg": "SHA-1",
          "content": "dd296acf884f278c33d262e757ccedbe402926af"
        },
        {
          "alg": "SHA-256",
          "content": "b87b0de1051e466190a2ea35f53e5c67d9268fb4000400e07bd1cbf9f006fbf4"
        },
        {
          "alg": "SHA-512",
          "content": "171eb0106c54ab6d6b5344378c6a2c48e065bb695db0e978212fdab8074c20f7d119b33e6b27a4567f904f57fe255e7f225befd672a1a65df569f1f2a58eb444"
        },
        {
          "alg": "SHA-384",
          "content": "ceeba877484468fac067a0d78e841fbf244bc0054b4c49ea4fc16e83e17aa8381d59e134c9afc78d792f3182320b81bd"
        },
        {
          "alg": "SHA3-384",
          "content": "337a2f8c99362f1fec93147f73222dacebf2eac2b7a9805f7809a0b5c5bf2d787a58cc553c8b718bea1de49fa835c26d"
        },
        {
          "alg": "SHA3-256",
          "content": "20d5432216a9a59119bc7ce00953bd21aa0facd1432b058b776871eaf82e4ede"
        },
        {
          "alg": "SHA3-512",
          "content": "c41f9ba369c45f2c9ea9ea73425a99a17125aa734852dcdfa813b23358530bfa45a505116a5a83b50d9dd33330ceec6323f89e25a1381d7efee1a2e7efc1479e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-circuitbreaker@2.2.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-timelimiter@2.2.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-timelimiter",
      "version": "2.2.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "7ca7854a975f02695bd2d0c0dae070a8"
        },
        {
          "alg": "SHA-1",
          "content": "0de12f126a9795eb6d28c304d41e2141506c037b"
        },
        {
          "alg": "SHA-256",
          "content": "75118bc6e470277fadabaf1e56fdde3d9ad04b51bdd8afe819ced9fb791001f3"
        },
        {
          "alg": "SHA-512",
          "content": "8a5e1866f2a79bad101103d1d3f4468bbcc781329da585d530a3ed1a8308bd32499761c03316c1b30c92d3b9d94bd6d12e3cfdaf66bd13e95ac67235b5b88ac3"
        },
        {
          "alg": "SHA-384",
          "content": "48c765fe7ccf078f94905c9c359661500afe78fa85b1657e285814aff75847428f4424950cc6e4dc8b7e84e441370565"
        },
        {
          "alg": "SHA3-384",
          "content": "a1e915d22ac1e2559b8bed2e2fd1830cce844d662e520da42dc41bb4db5b954bca4ed3019937f9ba88b4cfca907021e3"
        },
        {
          "alg": "SHA3-256",
          "content": "f5d59095e01e644c5b23a377f89d256f2d46f383da6ace1c3155f7b85b91fb9a"
        },
        {
          "alg": "SHA3-512",
          "content": "a3f8222a13bf34c48af4c4dbc0d2957df5d6c0d52d34dc3d8b4367c656e15300e0ee17c9fcfb3a5cc7fd3aa4f7700c83f2fbf41c9821c9df5d6355019281f98a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-timelimiter@2.2.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.slf4j/log4j-over-slf4j@2.0.17?type=jar",
      "publisher": "QOS.ch",
      "group": "org.slf4j",
      "name": "log4j-over-slf4j",
      "version": "2.0.17",
      "description": "Log4j implemented over SLF4J",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ec3cf11fe022ffd852ab84e9b8b69a96"
        },
        {
          "alg": "SHA-1",
          "content": "55e55c79a0b89ccc9e411049005c02b7514e0cf9"
        },
        {
          "alg": "SHA-256",
          "content": "cbf30eaf95357ab7babf9be123da9cc702f0fe83b23392b7a62589d60b5862d1"
        },
        {
          "alg": "SHA-512",
          "content": "b30293841a75c89a31cde5f756eba6b4aeb97774be9475691b2d4a7a412ff9a98f5ada1c60649a8404efb36c0091f70ced8f6389fd58fd876122f94be9169407"
        },
        {
          "alg": "SHA-384",
          "content": "38745d5c8a475079f925bda9edfe7e4d4e5cf2f916d7db025f0f9fb55390c746171975cf40decdefd1c19f34db4c794a"
        },
        {
          "alg": "SHA3-384",
          "content": "9a1274543c477f273a9cee53b5b53851588513b4975b641c8fe0cdc3f0a410e99e3d1a8ac13d5aeaf0652cc12893a819"
        },
        {
          "alg": "SHA3-256",
          "content": "4c2a8896f96b0dca903d8f1ec33b146ce2ca592f3dac0d1278bfc63430c0faa1"
        },
        {
          "alg": "SHA3-512",
          "content": "6d9d9a4f3f915a4712401d4c9b9739b4681f7804912204a7ca5ba84686decd3e9290c1db0753d7d207a1644ce8fee39cdd7539ef0929ec14c09683423010488a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.slf4j/log4j-over-slf4j@2.0.17?type=jar",
      "externalReferences": [
        {
          "url": "http://www.slf4j.org",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/qos-ch/slf4j/slf4j-parent/log4j-over-slf4j",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.kohsuke/github-api@1.330?type=jar",
      "group": "org.kohsuke",
      "name": "github-api",
      "version": "1.330",
      "description": "GitHub API for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f8ebe6ff87d378d300b5625c98bd5ca1"
        },
        {
          "alg": "SHA-1",
          "content": "945f6083d42b9a848e4d4470da74a370955b4c36"
        },
        {
          "alg": "SHA-256",
          "content": "740cbe21fddcd88b3baa9e006e50e5759db160822b12e93154f79013cf6d1e31"
        },
        {
          "alg": "SHA-512",
          "content": "4d9141f2935d71a618ff07e6d9b36cfd051b12d1900ab240bdbfd141e305a8112b5dd9e86c2d6f89f5df8dd95d670748037dd12f2fd050825c48d6aa75a5e4f6"
        },
        {
          "alg": "SHA-384",
          "content": "0144429d8f982986be3a0fa5dc5f626ba12b93341ba6bba60f02a6c5a8bedfa17ea760a60bd169d40a5f4ace58e5d9e5"
        },
        {
          "alg": "SHA3-384",
          "content": "01c272c916c55e9ae0295eb82ee412c1c65a0097c1649d23c77cbffe0d14e31c765c86138fdbe5b31a628bef0607c23c"
        },
        {
          "alg": "SHA3-256",
          "content": "681b6de0e1528919f4868101adc1a49659a472e08628b1ea8cee747862d162e9"
        },
        {
          "alg": "SHA3-512",
          "content": "b12f3e128cf0a6879d5d92c1218c2cd452c4e6ab57b4c93aef1439bf85d0d15d0aa9ada0213d609c658e8a531d25fa02d260762c7d31a170798db38ec888bd71"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:maven/org.kohsuke/github-api@1.330?type=jar",
      "externalReferences": [
        {
          "url": "https://github-api.kohsuke.org/",
          "type": "website"
        },
        {
          "url": "https://ossrh-staging-api.central.sonatype.com/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://groups.google.com/forum/#!forum/github-api",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/hub4j/github-api/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.asahaf.javacron/javacron@1.4.0?type=jar",
      "group": "com.asahaf.javacron",
      "name": "javacron",
      "version": "1.4.0",
      "description": "A java library for parsing crontab expressions and calculating the next run time",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5129700c6b2af8e972d52829faae173c"
        },
        {
          "alg": "SHA-1",
          "content": "2291bf1f0996c6ba0dbe6783aa8a473f09cec3d9"
        },
        {
          "alg": "SHA-256",
          "content": "c1866f1c6dc28cec113c3388101d4d0a3816cb3a9025c07d2e71f668a2845538"
        },
        {
          "alg": "SHA-512",
          "content": "b64c450770445f349f2e76f696ed5599ea87c32d5006818122e59b412792a4d71b19a7c13ecbee3b5dbf86dfb0b7350cb1e32615bd5d910e2839e165dcd9b5ca"
        },
        {
          "alg": "SHA-384",
          "content": "0f66c5ddf22ebc720cd2b765c45c639843a00a882e2d19c89e562c564878a5d40a374d491cdff275187156c2dd464724"
        },
        {
          "alg": "SHA3-384",
          "content": "a854ed19a5cf790abd511f309a1674d1050c94567fce257da250de541a63215f78aa7629d6fe53ec1291c59011f3922e"
        },
        {
          "alg": "SHA3-256",
          "content": "a9b1643fdf1d81eab85d8cdc51d02f77dd36860c04f2d0ff717ebddb9cee5b3e"
        },
        {
          "alg": "SHA3-512",
          "content": "8f860b34f901cb5b3feb74037cbe852f5723256c8f5c44c25bb34cda5148fc511a240b9c0f34cd934d3843d55960a3600dd95ba7b0ae0fde5af569ce232ae645"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl": "pkg:maven/com.asahaf.javacron/javacron@1.4.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/asahaf/javacron",
          "type": "website"
        },
        {
          "url": "https://github.com/asahaf/javacron",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.core/jersey-common@3.1.11?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.core",
      "name": "jersey-common",
      "version": "3.1.11",
      "description": "Jersey core common packages",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "24d74457850f006727590b0e32106205"
        },
        {
          "alg": "SHA-1",
          "content": "058cea05a20223bc23ffd96ade81536d61a26ac3"
        },
        {
          "alg": "SHA-256",
          "content": "ec516d7c2fdcfcd7eb7739eacf3cd6914e17a1595fd45826b33c8765965981b2"
        },
        {
          "alg": "SHA-512",
          "content": "654674e5e8f37ba8a57978c122febeccbef247ad438ae1adb78f56d676bfd77483cc7dae19e2aed224310c65c43cc74c877f95528c75acc5dac8014d1cad4b21"
        },
        {
          "alg": "SHA-384",
          "content": "3238976be6513838c310af41f2cd20f36a92056e30b0ec69f8294d3ac00a6ada6712ad6dca0f3157e605c0e91b103097"
        },
        {
          "alg": "SHA3-384",
          "content": "8e14180755e74b8130a260aecb85c1297a1dc4776db7c56aa38cdb73ec231e78c8ac4f3ee12edf6cb959c84c2a373094"
        },
        {
          "alg": "SHA3-256",
          "content": "4f1c8f6d00304cec33055cc2ff886df0482d47c5461c77dbe3b9f067c3b7bd41"
        },
        {
          "alg": "SHA3-512",
          "content": "bd9139d0eee23c6e4370b4d25734e46ae9a8272411fabe8e72d3377b0ff5d500fc964b08df7911a1df52750c8224b8d82e104fc6ef76f5a6d631fae922c81a80"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "name": "The GNU General Public License (GPL), Version 2, With Classpath Exception",
            "url": "https://www.gnu.org/software/classpath/license.html"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.core/jersey-common@3.1.11?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/jersey-common",
          "type": "website"
        },
        {
          "url": "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/",
          "type": "build-system"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/jersey-common",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.annotation",
      "name": "jakarta.annotation-api",
      "version": "2.1.1",
      "description": "Jakarta Annotations API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5dac2f68e8288d0add4dc92cb161711d"
        },
        {
          "alg": "SHA-1",
          "content": "48b9bda22b091b1f48b13af03fe36db3be6e1ae3"
        },
        {
          "alg": "SHA-256",
          "content": "5f65fdaf424eee2b55e1d882ba9bb376be93fb09b37b808be6e22e8851c909fe"
        },
        {
          "alg": "SHA-512",
          "content": "eabe8b855b735663684052ec4cc357cc737936fa57cebf144eb09f70b3b6c600db7fa6f1c93a4f36c5994b1b37dad2dfcec87a41448872e69552accfd7f52af6"
        },
        {
          "alg": "SHA-384",
          "content": "798597a6b80b423844d70609c54b00d725a357031888da7e5c3efd3914d1770be69aa7135de13ddb89a4420a5550e35b"
        },
        {
          "alg": "SHA3-384",
          "content": "9629b8ca82f61674f5573723bbb3c137060e1442062eb52fa9c90fc8f57ea7d836eb2fb765d160ec8bf300bcb6b820be"
        },
        {
          "alg": "SHA3-256",
          "content": "f71ffc2a2c2bd1a00dfc00c4be67dbe5f374078bd50d5b24c0b29fbcc6634ecb"
        },
        {
          "alg": "SHA3-512",
          "content": "aa4e29025a55878db6edb0d984bd3a0633f3af03fa69e1d26c97c87c6d29339714003c96e29ff0a977132ce9c2729d0e27e36e9e245a7488266138239bdba15e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.ca",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/eclipse-ee4j/common-annotations-api/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/ca-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/common-annotations-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.hk2/osgi-resource-locator@1.0.3?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.hk2",
      "name": "osgi-resource-locator",
      "version": "1.0.3",
      "description": "Used by various API providers that rely on META-INF/services mechanism to locate providers.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e7e82b82118c5387ae45f7bf3892909b"
        },
        {
          "alg": "SHA-1",
          "content": "de3b21279df7e755e38275137539be5e2c80dd58"
        },
        {
          "alg": "SHA-256",
          "content": "aab5d7849f7cfcda2cc7c541ba1bd365151d42276f151c825387245dfde3dd74"
        },
        {
          "alg": "SHA-512",
          "content": "4d84983a9b1c72f58661b576c78ca456a2106602c2ad211cd7e72d94464c8774173b34a35629c507c7c84c982f1de0c9bf48352458e8480be5f874d20d6e69a3"
        },
        {
          "alg": "SHA-384",
          "content": "9f92002296c66cc8996d459b95a9c531ec71b98a8b819121abbc7d636a6c4ace04c88878ba6917f71650280a880d1ce2"
        },
        {
          "alg": "SHA3-384",
          "content": "b27581d003ce715fba7e2958dbe73b64330b8586d94dd2f4b80b3d4861fd36415af6c2fe1005a798a7bd4f706d77e3d1"
        },
        {
          "alg": "SHA3-256",
          "content": "cf90e96adac2f1167ff71267db4a91c75d824f8a4b0359d2ab7d50b1c87c3952"
        },
        {
          "alg": "SHA3-512",
          "content": "75f9ff6c3ab03f4471ac04789c181b75edf4c5dbf985a5616b2c979de59aa478b02593036f740a6c7bb71afcb145c131a3ff3e5a6a53336abab22f2cc9825772"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.hk2/osgi-resource-locator@1.0.3?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j/osgi-resource-locator",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/eclipse-ee4j/ee4j/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2-extra",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.1.0?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.ws.rs",
      "name": "jakarta.ws.rs-api",
      "version": "3.1.0",
      "description": "Jakarta RESTful Web Services",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6ce4c6749e048456b2c452c1091689ca"
        },
        {
          "alg": "SHA-1",
          "content": "15ce10d249a38865b58fc39521f10f29ab0e3363"
        },
        {
          "alg": "SHA-256",
          "content": "6b3b3628b8b4aedda0d24c3354335e985497d8ef3c510b8f3028e920d5b8663d"
        },
        {
          "alg": "SHA-512",
          "content": "55c245378d7529503c934d2132cfc3bcc638f6297eae6687ae419a5b57aa4646f771cf054295fb6cda1f6d89134942c2a2c39f47380be839e26b44884e4bb75c"
        },
        {
          "alg": "SHA-384",
          "content": "aa6baaa80978a53fdb4af8e07559a955c9828266ec9b41562b7a2583a1d8d760726d66c13d61f0ec0282220d65d4c1b9"
        },
        {
          "alg": "SHA3-384",
          "content": "76ae6e43291bef5f40196d2063886d4d73b71401918c002cd2e54d260a9171287d12a61a19ab950a512aebfc53a42b31"
        },
        {
          "alg": "SHA3-256",
          "content": "2594beb0318ed800cf3e6de629ac40d2900b2fe25cdbc4982de00ade189b6100"
        },
        {
          "alg": "SHA3-512",
          "content": "40e976ea3f3d1b9a568231cf156f388be585d6afcf30ade6abb9841969cb86a2e537db87678a03e3ea04049114879db8f897fe0a6f9f815df31a1cc3d0c9e089"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception",
            "url": "https://www.gnu.org/software/classpath/license.html"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.1.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/jaxrs-api",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jaxrs-api/issues",
          "type": "issue-tracker"
        },
        {
          "url": "jaxrs-dev@eclipse.org",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jaxrs-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/simpleclient@0.16.0?type=jar",
      "group": "io.prometheus",
      "name": "simpleclient",
      "version": "0.16.0",
      "description": "Core instrumentation library for the simpleclient.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0d7e4aec0a8ba8ba66c87f06e3d439da"
        },
        {
          "alg": "SHA-1",
          "content": "28b0eaf7c500c506976da8d0fc9cad6c278e8d87"
        },
        {
          "alg": "SHA-256",
          "content": "22c374f237f7bc4fdb1f0ec2da379c0ba00e69ad2ffe8b6ade543d73062d377f"
        },
        {
          "alg": "SHA-512",
          "content": "2ce92dde047afc954d25326a7f573959be5be48209c687a4739b078c4083b4f1c31739d8d5bfc050844520fe8c41fdddaaf7aced8f9e6d18d3399a9101a410a7"
        },
        {
          "alg": "SHA-384",
          "content": "7f13ada603732139efb752367586be3941422f4caa3982e74e3c0aeb994113dd9a5e60d733c66101ad866cb3bbad3b73"
        },
        {
          "alg": "SHA3-384",
          "content": "2f192df969841ac644700e33e1c574277985887dc0c65bd9c66413c2b227eb4c4a1cc8777a82035af99179b46f022bc2"
        },
        {
          "alg": "SHA3-256",
          "content": "65403743a2a54a2f0c3dc5373c73b78e44732ad9e15cd4ee8a79d3e5ad5e2cf0"
        },
        {
          "alg": "SHA3-512",
          "content": "67a4bc85bb4fab76fbbe77b305e36eb3042b8aa74906ad6637e64d03a577a29305ba21d6dcb7f99e8bc96dc6344256a3fbff05f6826e08f036f91c258363a00d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/simpleclient@0.16.0?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/simpleclient",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/simpleclient_tracer_otel@0.16.0?type=jar",
      "group": "io.prometheus",
      "name": "simpleclient_tracer_otel",
      "version": "0.16.0",
      "description": "The Prometheus Java Suite: Client Metrics, Exposition, and Examples",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "55959da7c8ad68257c11d23f0de6a52f"
        },
        {
          "alg": "SHA-1",
          "content": "cc3d2b7b7cb6f077e3b1ee1d3e99eb54fddfa151"
        },
        {
          "alg": "SHA-256",
          "content": "a2a84c59bef3796bb7f9c6f2ae8b7de8b905313ef28180ac3de7ff61dd68df3f"
        },
        {
          "alg": "SHA-512",
          "content": "48aed68de446dc550346b6746b1378d570aa0d1cdef04d49e1f1de55f3b625bbf5873f7caff6e55a0eee3d7fad1bec6046a9fdf6d2c65f61d1a82df9bb2b0342"
        },
        {
          "alg": "SHA-384",
          "content": "50e97cdd886a166f6a12eda030b11044492582307f3b37bd5f5ea97f6c4de1c01f3c2d535fb52dea7c325595e303c297"
        },
        {
          "alg": "SHA3-384",
          "content": "0ef419b322cd233172c94716b75d514c02ca990f708b7a4d9e08662aa6220071561788e5c3c2b09ed9b98442f380c272"
        },
        {
          "alg": "SHA3-256",
          "content": "39cc794427fe6fa645bcb7127d6dfa264ddbbfe6c5154458b415f6eb1a07d8e6"
        },
        {
          "alg": "SHA3-512",
          "content": "5a5e4626d06ea30c6f56382759688def90e95c595c9011f158d16b2d033896b1fb1123f79268b62c0c99f9bd387b24400a20185e540139cb9ba3caaf29e51370"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/simpleclient_tracer_otel@0.16.0?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/simpleclient_tracer/simpleclient_tracer_otel",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/simpleclient_tracer_common@0.16.0?type=jar",
      "group": "io.prometheus",
      "name": "simpleclient_tracer_common",
      "version": "0.16.0",
      "description": "The Prometheus Java Suite: Client Metrics, Exposition, and Examples",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "80ee58e0fd6a13feacded45d0fc52f53"
        },
        {
          "alg": "SHA-1",
          "content": "dec00ef7c6155c4ca1109ec8248f7ff58d8f6cd3"
        },
        {
          "alg": "SHA-256",
          "content": "e84a784ac8e24f182ee62da80b6b5c8140774b75bfa4bf9cc3d3b8390db625f6"
        },
        {
          "alg": "SHA-512",
          "content": "506b8bb090bcccf020ba8dcbfec047d71927b400a06a0f2e669ee8c2b3746a3b2cd9abeb2b5562308367e93b643c4f239324943523d7b713b767137bd227baba"
        },
        {
          "alg": "SHA-384",
          "content": "917fbba98756ae774218480a9d1a028b97d185b52781c3d1d3006849a48e6a6bfbfab9ba6b524e97ed6efd1371dab51e"
        },
        {
          "alg": "SHA3-384",
          "content": "93a993bb7058582832f81656e1c8fe5ded242ced8f791225089d861801fc6be62f74de9b7ddc164f95fac267bb0aeccb"
        },
        {
          "alg": "SHA3-256",
          "content": "9fd8671d77d01cfdcc3bfa65dacebefbed8e72e63f13a524f40f4945fcf156f3"
        },
        {
          "alg": "SHA3-512",
          "content": "47c56b4f03f023c38e1af61591f7081a9dbe657f93c7b067089362e88054a03fadae12ed410e6c554e4faaca577f480f53e387f6e8488208b33fd8e779cb766f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/simpleclient_tracer_common@0.16.0?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/simpleclient_tracer/simpleclient_tracer_common",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/simpleclient_tracer_otel_agent@0.16.0?type=jar",
      "group": "io.prometheus",
      "name": "simpleclient_tracer_otel_agent",
      "version": "0.16.0",
      "description": "The Prometheus Java Suite: Client Metrics, Exposition, and Examples",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c655a6b67747cebfc80375560a549059"
        },
        {
          "alg": "SHA-1",
          "content": "009d724771e339ff7ec6cd7c0cc170d3470904c5"
        },
        {
          "alg": "SHA-256",
          "content": "7ad2bb40df74a772d9f5445a3d03579b49d6b37a47d5e90f6cf3f59ecf41ad06"
        },
        {
          "alg": "SHA-512",
          "content": "e4b6a97354c32675069cf644e97a21c797875d5c855940ec169baf552f2858b413b2dae5da7ba43c75eda7c021c6695a21fda8fe7441a87bb9a07773cd63def8"
        },
        {
          "alg": "SHA-384",
          "content": "7f8632749d3b2b5a1197e5ca5fd73be9f8a3843a3c0d9eef38fac0203a41d168f77762413594cd63155743197300a8d9"
        },
        {
          "alg": "SHA3-384",
          "content": "743de884471ef70418bb93f876ac6b6bca294ae9eae6fd7f4be93fb5ebc93512f1ab45fe54fc54f281747821a0b54384"
        },
        {
          "alg": "SHA3-256",
          "content": "50834225cefc4d290ead0d5d9660bac8c28d78cc3cf6fd230cab92896aba9e51"
        },
        {
          "alg": "SHA3-512",
          "content": "922397ce19decd78caba0a17b0a8b87365108cb66a2b3768df2f235bc3868eb46cdd90f09d7e8b59cf18e008d48c1d8963a2c28dafad2f26f048c38569f46baf"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/simpleclient_tracer_otel_agent@0.16.0?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/simpleclient_tracer/simpleclient_tracer_otel_agent",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        }
      ]
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/us.springett/alpine-executable-war@3.3.0?type=jar",
      "group": "us.springett",
      "name": "alpine-executable-war",
      "version": "3.3.0",
      "description": "An opinionated scaffolding library that jumpstarts Java projects with an API-first design, secure defaults, and minimal dependencies.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "dc6301b8355e6a02148c44f13667ae42"
        },
        {
          "alg": "SHA-1",
          "content": "f638d9c31db1c8fcf61f9f43d2c481f802e55bd9"
        },
        {
          "alg": "SHA-256",
          "content": "6516c9fe6f90d93a2c698502c7812f03f7ea4be61954ce4bdfb3d6f45cc7a2a6"
        },
        {
          "alg": "SHA-512",
          "content": "eadcc69a9d59c09a54e4e7fe75b34a343763ecee743065833ef9baf840a1a38e807c7b30c1f76377281c79b1cf0db820ef25c9d54ccd96936444e8d39a3c8396"
        },
        {
          "alg": "SHA-384",
          "content": "419bfac3d50346b5ca4c21cfbc301a5a0853a264f3f5c6ae730c7d2c04bf8d0a38a40a934199c019c76e87423b69089a"
        },
        {
          "alg": "SHA3-384",
          "content": "5fbf15c3ed662b6098485b968c41b66f6b9ae6690e0dca8fa34aa549e05d28414de3f99c9b807c0bb8ebfb3410e2bd1e"
        },
        {
          "alg": "SHA3-256",
          "content": "0e32adf9ea3e9b020cfc3496ce060da7172e8976b1dd53f789cbda4f96c5b08f"
        },
        {
          "alg": "SHA3-512",
          "content": "ee9708734874a22955a20f28b156675b859c19b840385f6f71750105c3b0194346ccd2ee30937e8daf5865cfcf92d9e515617c54a6e3c3c7aafa5165a8dc7893"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/us.springett/alpine-executable-war@3.3.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/Alpine/alpine-executable-war",
          "type": "website"
        },
        {
          "url": "https://github.com/stevespringett/Alpine/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/stevespringett/Alpine/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/alpine-executable-war",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-server@12.1.1?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-server",
      "version": "12.1.1",
      "description": "The legacy jetty server artifact.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "bd113dba304192f1cfabfa1a844e0c0f"
        },
        {
          "alg": "SHA-1",
          "content": "4a34529a4737bcc4868186914a72a097edee1a52"
        },
        {
          "alg": "SHA-256",
          "content": "965f94a66b1258955d7f32663d4d42d8d922387132516eeda2e199d41d872bd2"
        },
        {
          "alg": "SHA-512",
          "content": "14c023e6722774a6b9d325c5a41ab50060cb7a4e47c93cca280d5cbe4d1624c0e3b9f35a5dc097dc2de6e3577b777ddcf0e51e042bdd95342f0787f69ab6418e"
        },
        {
          "alg": "SHA-384",
          "content": "f36d251634dbf10d2a5ebb0445fc3f948657d329184bb9b579785a8ced36ff5def3e01fa7b036d1fa4a51c80b8fe9ea8"
        },
        {
          "alg": "SHA3-384",
          "content": "3bf6bdff474ea78197c38ce5c6e3521bdf9f6d9015ba374ba0c026ac5e6577d30b104fb0763435047d932f0a8a5f0883"
        },
        {
          "alg": "SHA3-256",
          "content": "c9a8d67147c037455cabf9f73d21951e9359daa8cd1a7a2beced5e2e4f59f722"
        },
        {
          "alg": "SHA3-512",
          "content": "1613e837313075cf2334662dab1294a1e832f874801b8374d1de56e1c7f495d165070460f5f2723cd33af6600a9395bd8cf9f5bd44480321bf6fd58016866651"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-server@12.1.1?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-server",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-server",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-http@12.1.1?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-http",
      "version": "12.1.1",
      "description": "The Eclipse Jetty Project",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "82130b042a086fe7aa870adca9d4fef0"
        },
        {
          "alg": "SHA-1",
          "content": "4c087942e5cdaf4b716146312f9ff4c5a1e289d9"
        },
        {
          "alg": "SHA-256",
          "content": "8f99ae73ffb40e1c0a0d8448fac41116551a9d49e0c1e1931bd4b0e8f8825d98"
        },
        {
          "alg": "SHA-512",
          "content": "189b7a4e240f438875b19d21094063c7205e1f06ab888bb39482ebc41c0f4dcce05b7447b07a7c70fa977f01c03316f5da33efc70362e72519a4d08e625ed912"
        },
        {
          "alg": "SHA-384",
          "content": "707b87f35b09b09eb8793faf5a9c05f9c5761f29903ada68be2dad2ba596fd09b6b13bb1643baacc4bd2ca70b6dc8bbb"
        },
        {
          "alg": "SHA3-384",
          "content": "b98d2c3e83b265021601e618195a327c7e472a7969b7f487a2fe7e1a02790d2f9da9e407f8f01e0d7c3a79742b46c694"
        },
        {
          "alg": "SHA3-256",
          "content": "0e44b6bf7e8e5fb836e7af11fc374b92ccd60529b90c8da5ddac539897666c28"
        },
        {
          "alg": "SHA3-512",
          "content": "8aa4e9eba8686f46fe48df8d3e1ca92acfee9087d6d9d186a34ebfd97c935bb33996570a79e7c5ead86f11e7892f2f126f902156033e281e842592867c36003c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-http@12.1.1?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-http",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-http",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-util@12.1.1?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-util",
      "version": "12.1.1",
      "description": "Utility classes for Jetty",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "39dbb670c35410b3dee208ff5642927d"
        },
        {
          "alg": "SHA-1",
          "content": "582a66cbad2b577ad11b7945e434bd5732c1e45d"
        },
        {
          "alg": "SHA-256",
          "content": "154dad60f8c442bfc314fb5df573e172b9c2dadd85ea7d66968a8d7b2b32a120"
        },
        {
          "alg": "SHA-512",
          "content": "49250cbec2ec53be949692fc44d09dacc06a14095c8b329c0560660e94001d14b9ad021123ff702c1887f5eca3c1fc149b779dda26dfa8e138c7e055342eadd0"
        },
        {
          "alg": "SHA-384",
          "content": "3e06284e7ee6442cad8da3bac817b60f93fc275918062f63a79066fb2e2c1ab027948dc59bc3dffdd3a436008124a785"
        },
        {
          "alg": "SHA3-384",
          "content": "44e8907c9c46a6fdce61e2bbfacf75da7b53ff47306eec3eba5e6383629606e92108b4baf1efc9a2a0e94f938f05cbee"
        },
        {
          "alg": "SHA3-256",
          "content": "9c75ec7c081ff46a09a2ace26343ce678622594b5add571126a56211cb8d641a"
        },
        {
          "alg": "SHA3-512",
          "content": "94c7e7d9de7abfb59b58e3b8cad137de96cda0aa92ac3700615eb7c59faa69d740b877d98169cf642e0fbefd0db69ab60fe578a396c80e309906f82a86b00222"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-util@12.1.1?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-util",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-util",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-io@12.1.1?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-io",
      "version": "12.1.1",
      "description": "The Eclipse Jetty Project",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6973a71a508473027261696ad26139c3"
        },
        {
          "alg": "SHA-1",
          "content": "f9efcb4d69ee757721c5f0f3bf4cd55b48a44b48"
        },
        {
          "alg": "SHA-256",
          "content": "c69bd0dee2e804a22d622935951837091c538b1590777a5cb9648041d7f56ac8"
        },
        {
          "alg": "SHA-512",
          "content": "fdde6cc5057c95b744e2980a0dfe1bdcc3c94c4cfe69c5221823c9fbcad9fdb32c50926b4577dc0d8f05c5345b92a165e341c33e9eacb07eb31e13c0f3ac8057"
        },
        {
          "alg": "SHA-384",
          "content": "17f8b80f99f44c64cf6c588855c202ec09d79973faf8b3b941900d7358a54f3aa32781a5c7453fc58579eef970f96ab8"
        },
        {
          "alg": "SHA3-384",
          "content": "ead6939a1fe734e8a9e6ca60dd26af5849308dceef6d6fc4892f3a59a4f5eb2af2edd2c9a9f977cdaf46dbf28889c0df"
        },
        {
          "alg": "SHA3-256",
          "content": "ca9737d337663e67eea461df6247208db1319087064745c52747605f1cb3e88f"
        },
        {
          "alg": "SHA3-512",
          "content": "ef73d235faf9e09fe0784108e90809769a5f1a9a6a381ee90390c8534703b2d43858807bdccd4e4dd6d49b720a48e432b81a4db9704123a1d8a9eada33d2f5bc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-io@12.1.1?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-io",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-io",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-webapp@12.1.1?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty.ee10",
      "name": "jetty-ee10-webapp",
      "version": "12.1.1",
      "description": "Jetty web application support",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "12206fe08e8ee69752dbd0857e673c37"
        },
        {
          "alg": "SHA-1",
          "content": "ff9f1cbbcfd1d0de2c257d868becc55d51971876"
        },
        {
          "alg": "SHA-256",
          "content": "8817180c4ba17ccc4505b80013faac07023f3970dbfb34696d07d67fdadee5d2"
        },
        {
          "alg": "SHA-512",
          "content": "c1b6b5d31b0d86005687fd24c7be1647878f97a544627c2f7afcc9eac6d2d96e06df17cf8d5d0d401c2fddb78737b41899ef15083e1267494eaf77e7d0c74234"
        },
        {
          "alg": "SHA-384",
          "content": "4076d83e8fd96050c7f874b80c811cec247e40a5e92726db26b9951208ff7ffdb24b4d2ae23d40fe446644afa7964c3c"
        },
        {
          "alg": "SHA3-384",
          "content": "00be186f2e5b68b4e9db6e2524ecae05b1e3b8e833e41ed18d3a38b52a5b2591731025fd2d452bb893211515d2e4b9e3"
        },
        {
          "alg": "SHA3-256",
          "content": "1a645067fd67949626ce5454f035c126117a21933355f7b8b429a34516536d88"
        },
        {
          "alg": "SHA3-512",
          "content": "584937c88c5f3be9a14b3bee1443f27e96dcdd1d54baf116438dc8e6d5699bed600a7942ccba86a838320f3be5c18767b32e161a26c921cb31a9b99bb0e561f3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-webapp@12.1.1?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-ee10/jetty-ee10-webapp",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-ee10/jetty-ee10-webapp",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-session@12.1.1?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-session",
      "version": "12.1.1",
      "description": "The common jetty session implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8fe4506dbb8cace96181bbbbac4becac"
        },
        {
          "alg": "SHA-1",
          "content": "7db390e7856c75e001b1ade978e27397dcbc97eb"
        },
        {
          "alg": "SHA-256",
          "content": "f9351eaa7b1a7fc4c3dd6fd952c85933c7509c40115c492c7b1d6a31e8c8912d"
        },
        {
          "alg": "SHA-512",
          "content": "83167e6e375535c756e8afd7f080411189a041d7d85e01ea469e1418ff4fd1b4a6e718611f3012d3c8955432a893739bac46f4e75572385d93cef0fd76b64ada"
        },
        {
          "alg": "SHA-384",
          "content": "2e263b5780478811e1e972832588d56ebd071f7263f76119936d04c02d2be2044e1a571fb820ae0c950a82f93d8f003c"
        },
        {
          "alg": "SHA3-384",
          "content": "d06606fb7583e6faa5aa614e9e8c820615b7fe93276976716abf16f573d1a5399dd79c9ad302f4b16992a2c947089483"
        },
        {
          "alg": "SHA3-256",
          "content": "28d04aa29ae95b671af1e94564aaedcdfe38e202d1d13dce2c89f5791abf1e48"
        },
        {
          "alg": "SHA3-512",
          "content": "6040f39253216ebe791824e1add0c0cbb27811edb60494b93181f01233bcd5ede7a55240bc8dd04bde56cc452b4017641d307d6bac6a1b989a01f637947de392"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-session@12.1.1?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-session",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-session",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-xml@12.1.1?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-xml",
      "version": "12.1.1",
      "description": "The jetty xml utilities.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4c6855b98ae3ae9982065917acaa5545"
        },
        {
          "alg": "SHA-1",
          "content": "0d79615b99eaf51dc027789853ee0e094afc40db"
        },
        {
          "alg": "SHA-256",
          "content": "ed50c77fc51879079cd02c7159760610c877845e78669de124cd24226a1b8283"
        },
        {
          "alg": "SHA-512",
          "content": "0b78ce6a542a103bee286c7ea67546aa96d53a79cdc27f060a99d116e29d5bb14cb964dab568d1586aa42caf9e35b787c7b04588b96cef941b3a06728e9ffa2e"
        },
        {
          "alg": "SHA-384",
          "content": "a93d2e2bfcc085d9499314e752cf01eaf524914e473f60be8b18c5eaf92bf43d5a278fc73c829c5364f16794538c4e3f"
        },
        {
          "alg": "SHA3-384",
          "content": "31844fe3292a8ac212fc397832fb5c817a9908c6bf15d25b870a7eb3257c1ba041a984197ecccb1d68e904c17aede68d"
        },
        {
          "alg": "SHA3-256",
          "content": "295e0583328f0595487ca281ddf146554a9a0691527f59a43f88c30b460c99b7"
        },
        {
          "alg": "SHA3-512",
          "content": "11873c0a65afe7d4cd9315ac9e9b025dd97feb5e962f9759e034155991809d039c4a3789ab8e311270e8c0218001bf7db25665c7f3f92fd5261b1cb98e217734"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-xml@12.1.1?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-xml",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-xml",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty.ee/jetty-ee-webapp@12.1.1?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty.ee",
      "name": "jetty-ee-webapp",
      "version": "12.1.1",
      "description": "The Eclipse Jetty Project",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "99f88f883c17cea1816abfdbd153c1af"
        },
        {
          "alg": "SHA-1",
          "content": "cbc33336ba58076a4ffa01a495f1b5d911b83884"
        },
        {
          "alg": "SHA-256",
          "content": "4deefa52e60c70c3f47bf6f6369adffd8b97bcc48715bc51c10927026293bcde"
        },
        {
          "alg": "SHA-512",
          "content": "3ff51baf5fbd5971f0ed5d0c42af887d157206b338a0b2f37b42bdb4913efd61bed602692f9d91c6a24364c2245236bcfea1d567a2a58ee7864e4382847adec7"
        },
        {
          "alg": "SHA-384",
          "content": "f5e6b0dc2af2bb7cde5ce7edcc0ac692d38fa37128bc3195a9eee4d738571d21cbb84ed356283b3b9c5a05ec829e29ee"
        },
        {
          "alg": "SHA3-384",
          "content": "979a02ab8ca7e0605172ad52e4aff30fc76895015f278c5e266b06cd4de164d677170e6ad2a048cef9dd15c9eb1b996f"
        },
        {
          "alg": "SHA3-256",
          "content": "76931b048fbfc0e2622e8adff1da6424b3cef5b974fe5539ada08ed91ec17bd0"
        },
        {
          "alg": "SHA3-512",
          "content": "ef880d4138abcdfdf17832b6cca59787d48af39f2378e8b770c693faa7ea724a33ac42f4fecfbd666a7a0c44d4d00e99bfa1204f3179b9e37674351fa8e865d5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty.ee/jetty-ee-webapp@12.1.1?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-ee/jetty-ee-webapp",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-ee/jetty-ee-webapp",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-servlet@12.1.1?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty.ee10",
      "name": "jetty-ee10-servlet",
      "version": "12.1.1",
      "description": "Jetty Servlet Container",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c7587bb36f7f4feff40c8c1067244c21"
        },
        {
          "alg": "SHA-1",
          "content": "28e6e238d77f94d71714945a7d064fedcefa6918"
        },
        {
          "alg": "SHA-256",
          "content": "b3b5ad399050ead8e9f685f03c2f3200a180fb29d385d8b3c8418d70a9491b88"
        },
        {
          "alg": "SHA-512",
          "content": "4661d4206ee99693bf8be3ba5955da60ede3e433e3db608899b3045200ab474d20bdf827d7b00936db83111d927b0c5d32ae3bdf86e8b50c88f78c2a97948b2b"
        },
        {
          "alg": "SHA-384",
          "content": "92bf15df2e273eecb81d42be9b857d26437342926e297090718b597f67fbc87a33834a4de4cc028e9c4ee4ad03d26080"
        },
        {
          "alg": "SHA3-384",
          "content": "1b3b15ed6850a1a3eddc12ce85c4c4f84f9d348db7205edaa32c27034b08e69adf92d395067709c6a2999d2c8265eca4"
        },
        {
          "alg": "SHA3-256",
          "content": "c34610abb38c2d0a3a0f7025a27d6f0b6f2e5e55067b6232f3e6490ba766424f"
        },
        {
          "alg": "SHA3-512",
          "content": "204aa6c775da342fb1fc79a6d103e8da7709e5817fd2fc4c93a2eacfb3bfbc1dbda24bfe30305d12306f0fa021a7acc1f373d0e396b072bdba278a88a923f2aa"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-servlet@12.1.1?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-ee10/jetty-ee10-servlet",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-ee10/jetty-ee10-servlet",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-security@12.1.1?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-security",
      "version": "12.1.1",
      "description": "The common Jetty security implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "204762a773012338465913d0f65d802d"
        },
        {
          "alg": "SHA-1",
          "content": "089c47852a9ac216e66b2d3d2e12b8721b9b8ca2"
        },
        {
          "alg": "SHA-256",
          "content": "5b2cebf0bcfa8af1398b9210ab941af52d2e6ae94d29f47457aaaea458d1bffe"
        },
        {
          "alg": "SHA-512",
          "content": "e867f2145c157497efb6b75c7c91c826ac81f873076e2e821ffa6653e5e92b98b723ceec62d28e7786e228d2b4ef7419066b9118da51d9e7307d91682184f0e0"
        },
        {
          "alg": "SHA-384",
          "content": "0acbd3c2105a50964f9c80e46a11869e1fad0092b7c6369df35598a72c1674b03a98fe60d597703bcdff3e0e91125049"
        },
        {
          "alg": "SHA3-384",
          "content": "e589dd57dfaeb84489d83c8e0931bcb49de008f9b2102f81d7a19f9d3b6aa8967cfd56e9603bc72d8ed4f43d91b06304"
        },
        {
          "alg": "SHA3-256",
          "content": "71011efd317dc62e98c3faed8aec172a1941e4c891d40246f3cfa29ddeda96ae"
        },
        {
          "alg": "SHA3-512",
          "content": "486d6c5d0fa272f492a7c624f84f3d02a3f89273981206d946548afa75b9a0c71d83c8e9eddf1336634195a6172a5a10f1353d3097f1229beab6cf57bc8b54b7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-security@12.1.1?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-security",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-security",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-deploy@12.1.1?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-deploy",
      "version": "12.1.1",
      "description": "Jetty deployers",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "fd7b94b423e4e604f5cbced5ad395fa8"
        },
        {
          "alg": "SHA-1",
          "content": "919f3e69975262c4462850531b1c030bd13571c8"
        },
        {
          "alg": "SHA-256",
          "content": "d38a6cf008c40dcb90e661b6f38e1e55106f2a40b2a1890e6d5043d75a6ca50b"
        },
        {
          "alg": "SHA-512",
          "content": "a583ca5aaa3c567f7dafd429d63f68a428fac1b5490ac5677a0b4c7850b69f9815c06c5726e322ec4a181668553f7228e7d43a2f0f44c4e2611d2f1be63d34fd"
        },
        {
          "alg": "SHA-384",
          "content": "9af6b9bb35fe595d76048d401d803b7f6c0f0492bd3add176610b63c031055bd659ff9ea45a6ef01e61d0eb05569d72d"
        },
        {
          "alg": "SHA3-384",
          "content": "36cc5c0313697a2e7370bb356c3c9b4311ed5880f74bedeef985d03264e0a1ab904271c41e34ef9e92936f39de752f8e"
        },
        {
          "alg": "SHA3-256",
          "content": "67d13479ae9126f42a9a55ed573f84714b559d6a93fa063d6d8671edb3913cde"
        },
        {
          "alg": "SHA3-512",
          "content": "0d3ab3c065e310e39640060ba084ce212558043ab3a633f2a8a652b70f3bc27ed10b3a7d2dd96ec80f032c3894b6fed20b3d54a0dab55cce5571e697467f3303"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-deploy@12.1.1?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-deploy",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-deploy",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.slf4j/jul-to-slf4j@2.0.17?type=jar",
      "publisher": "QOS.ch",
      "group": "org.slf4j",
      "name": "jul-to-slf4j",
      "version": "2.0.17",
      "description": "JUL to SLF4J bridge",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a42936c56611e4794c42908fb3d3a647"
        },
        {
          "alg": "SHA-1",
          "content": "524cb6ccc2b68a57604750e1ab8b13b5a786a6aa"
        },
        {
          "alg": "SHA-256",
          "content": "a7afcd23b9cfd1475e55c94f943b808c5922035e7e2c2a5c65a487a4106bc538"
        },
        {
          "alg": "SHA-512",
          "content": "623426fb3a0a34c88b1fce686cbfaa8d17bf013f3583886dc94273bf2f767492044b48db6557988d764f0450129c9d496dd3c10ad548099879d80e3945f2f636"
        },
        {
          "alg": "SHA-384",
          "content": "fe66fb82c6f9dca6f8fb1d61e1fc6f4d8bc9b616cf89aa5b54fab933e1a55506a2400e8e9b1c92cb2787ac69731103f4"
        },
        {
          "alg": "SHA3-384",
          "content": "6f537049a039795f0f4c0653d2ab959fe0bfeae53f629148773db1a819b2308e16ef6e3f9d49a5741e9adf0ce5c34eda"
        },
        {
          "alg": "SHA3-256",
          "content": "f25e1333214a362f95ef31c8465f6d89b4bb7399638f4c4ad53a6d9f0ecbd649"
        },
        {
          "alg": "SHA3-512",
          "content": "a831c814c1064b39ead500e542de1decfe302688936b93c9aa781938bb0ae884907137ea34f18f99436f24fb9ddbbcecaf32df543c691d6311671f7e8b81dbc7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl": "pkg:maven/org.slf4j/jul-to-slf4j@2.0.17?type=jar",
      "externalReferences": [
        {
          "url": "http://www.slf4j.org",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/qos-ch/slf4j/slf4j-parent/jul-to-slf4j",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.17?type=jar",
      "publisher": "QOS.ch",
      "group": "org.slf4j",
      "name": "jcl-over-slf4j",
      "version": "2.0.17",
      "description": "JCL 1.2 implemented over SLF4J",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4fcd46ca51e55b9fd9b0db34474927e0"
        },
        {
          "alg": "SHA-1",
          "content": "76ea503eb688f06556a9ba69995d7eab63e34531"
        },
        {
          "alg": "SHA-256",
          "content": "affd06771589ebfe454bb11315a4f466ecaa135b95f3e7939534cf1d2fd7064c"
        },
        {
          "alg": "SHA-512",
          "content": "7efb2771bad2e643b0e814cd78ab4f9af3ea166643700776618c397e9755ca11f4b7c00030562a619932c9d2ec5114fd253ece3abbc3db2f1a064431d8990733"
        },
        {
          "alg": "SHA-384",
          "content": "96fd8b2732de79c40e5e6613e324d2845dc6e19bf31bc7f3e9fa6730fa527cd16579ba9eb7915481faae1e9a32dc82fd"
        },
        {
          "alg": "SHA3-384",
          "content": "252a3e6847dafd84955a71724d71641b5c6508bcbbc1f2457fdb18994b61f6d78b08cbd40d5c430743950e351ec79835"
        },
        {
          "alg": "SHA3-256",
          "content": "4c066cec2c40de9b5743f43d99b629d60de937718f69ffd837bbe5902682ee92"
        },
        {
          "alg": "SHA3-512",
          "content": "3334a1fff0751378abe8e010ca9716a85a15a90450265699c32886d2e8f9ff63df89237667a262350d860dbfb2f20fffff14e9a094f0bd2acf990dd543c2b86f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.17?type=jar",
      "externalReferences": [
        {
          "url": "http://www.slf4j.org",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/qos-ch/slf4j/slf4j-parent/jcl-over-slf4j",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.owasp/security-logging-common@1.1.7?type=jar",
      "group": "org.owasp",
      "name": "security-logging-common",
      "version": "1.1.7",
      "description": "The OWASP Security Logging project provides developers and ops personnel with APIs for logging security-related events.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9f11b84aefd2f2dcf48f8443a6213619"
        },
        {
          "alg": "SHA-1",
          "content": "4717c0c2225a2aad898b2fbdf717ec6e034d48f8"
        },
        {
          "alg": "SHA-256",
          "content": "ef9c6e4fefcf8ffcee7590239a8e8c56b192fc71c183fd8a943cf177e01b07eb"
        },
        {
          "alg": "SHA-512",
          "content": "d30fa0cce5b75758289a255946f165418786d96c5de3dbb12084d6da6bb75e556e43e002050ea114e3adb0ca15dc16e28b6218f5b2fcf993eadcb37076fb522a"
        },
        {
          "alg": "SHA-384",
          "content": "f10fbb5250849634a79477a536eb7f4a07aa66d5d1234e18caf5dbd2ab9473a4e26baa4fe381af9240eb6f9471cbb937"
        },
        {
          "alg": "SHA3-384",
          "content": "fee72e5c1e41740264f6d0f1fcfd72731c92df25af3d529509a006ce8330430390ab1139b8798c8cd6b78bcc0656d4e4"
        },
        {
          "alg": "SHA3-256",
          "content": "2c7bf9e688071240437f106b05955c298c9ee42f6c119cd918460af5a3a82a48"
        },
        {
          "alg": "SHA3-512",
          "content": "0ff1a2d6da110ca1a1713b052bab481bf052033e9cef7362a69a30e485d4a8ae8ba78ecd02278f4f81558d9cd2f12402108f82668754eade77fde3670433740c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.owasp/security-logging-common@1.1.7?type=jar",
      "externalReferences": [
        {
          "url": "https://www.owasp.org/index.php/OWASP_Security_Logging_Project",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/javabeanz/owasp-security-logging",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.owasp/security-logging-logback@1.1.7?type=jar",
      "group": "org.owasp",
      "name": "security-logging-logback",
      "version": "1.1.7",
      "description": "The OWASP Security Logging project provides developers and ops personnel with APIs for logging security-related events.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c1148e1a96d53351f39b407185a59e06"
        },
        {
          "alg": "SHA-1",
          "content": "e609fe8531b96fcd559c9e146342aa3a56d16231"
        },
        {
          "alg": "SHA-256",
          "content": "100f5e85cbf9cf395983d85355cc17ed1d19d77176d93c58a14f339e62382168"
        },
        {
          "alg": "SHA-512",
          "content": "9bdb7df787ae5264e509082aa3b6f865ec543801587270eb582c3cb430a15f019c24a25e5a1d4df462a2dec0e6e82ce636807b055d5e72b73d67d90805e9e5d1"
        },
        {
          "alg": "SHA-384",
          "content": "8502c6a84746dfd8b9960d599cd476dd3b2c0017b2e8eba169411f7adbfea4236323ada03cb7e005812456976e673a7b"
        },
        {
          "alg": "SHA3-384",
          "content": "283c28b7760973dc0195fcd2127294c4c77a2a8c95bcc597401f00ffbd8c5367788ae9c9b6874deac178526fe93c1265"
        },
        {
          "alg": "SHA3-256",
          "content": "5a2f21e6fe6fe4bc45c439d7dbb5a16d07cc56ecf15b10a60125ee777bac1122"
        },
        {
          "alg": "SHA3-512",
          "content": "f2fa575c8838d7dcb5d11678cff9afaeb65d3bb227f501cf86541e4131c7a3cb72921d8ff8d28f91f7a6d5d3ac08d579f1fba73e8a7627c7a46371ed0a62fad9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.owasp/security-logging-logback@1.1.7?type=jar",
      "externalReferences": [
        {
          "url": "https://www.owasp.org/index.php/OWASP_Security_Logging_Project",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/javabeanz/owasp-security-logging",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/net.logstash.logback/logstash-logback-encoder@8.1?type=jar",
      "group": "net.logstash.logback",
      "name": "logstash-logback-encoder",
      "version": "8.1",
      "description": "Provides logback encoders, layouts, and appenders to log in JSON and other formats supported by Jackson",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "08a18cd6a4737221773acc1d2a5c9e3a"
        },
        {
          "alg": "SHA-1",
          "content": "aca81cdb03c48f4e0213d3e351ab1befafa9991e"
        },
        {
          "alg": "SHA-256",
          "content": "2716cb6a3e83ec2f296395b8752063f502d10a90de1a88f711f06ae5b6ecefb7"
        },
        {
          "alg": "SHA-512",
          "content": "71c73ef76d1f1562a54ba2f0fe8335f5e5a4938dc7896bcb58abd8a2b466e8c46640361d63ea475a5d37b12334335fd3e2827eda54fd17b0384027d955cdec7b"
        },
        {
          "alg": "SHA-384",
          "content": "5c332ad34b65c15869217e79c5e505502df624b0e76f47a7a9eba4d323a1ca4ea34dabb1ef75de489b329e2f94deba1d"
        },
        {
          "alg": "SHA3-384",
          "content": "cd44829a3e71f245a300f9b5a6d9b1e7838835b5f16dcb3d5c01c3cdcf23f76693abe517014bb5318d528e74a0ea150e"
        },
        {
          "alg": "SHA3-256",
          "content": "a5fd0008198d89b57aff757173ea60f1aa0e3cc2ea4ff043b2a73c5bf200244e"
        },
        {
          "alg": "SHA3-512",
          "content": "e3769fe9dbdc066f346b3f38cd3738d6d19bc5a0551164bb7593bf3dfa2deeb338d24ae664fda0b7f20510127fddb9875b4621b8f63cf76c851369711ea4e79a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl": "pkg:maven/net.logstash.logback/logstash-logback-encoder@8.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/logfellow/logstash-logback-encoder",
          "type": "website"
        },
        {
          "url": "https://github.com/logfellow/logstash-logback-encoder",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.0?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-core",
      "version": "2.20.0",
      "description": "Core Jackson processing abstractions (aka Streaming API), implementation for JSON",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "3536b524a7106dae1b4feb71e6f5ff74"
        },
        {
          "alg": "SHA-1",
          "content": "3c97f7fad069f7cfae639d790bd93d6a0b2dff31"
        },
        {
          "alg": "SHA-256",
          "content": "bc0cf46075877201f8406ee7de2741ae7df6c066f5f0457bd80632a718c06e72"
        },
        {
          "alg": "SHA-512",
          "content": "6fde805019901b0e6f6af56c48b60a08ead48e962e167308a3d8ed861470594a80e5c6aec340e7ce8dd12a32d8c0cbb46bc39bc381f027f5977953950e60b083"
        },
        {
          "alg": "SHA-384",
          "content": "5f294aa2b3561b2dc5f6bd9958758783294ae31396b8af9cca1495f87d4b8fa470e41b62f6078a407cb6d7f5e8efecee"
        },
        {
          "alg": "SHA3-384",
          "content": "ef6efea299577b599d290fd0b48f44e239c0c051b0849b163b2f667641a6ff682bd68745ab3ecad1fb7939de0dd11e4e"
        },
        {
          "alg": "SHA3-256",
          "content": "3879cf4a3f6bfcea4181ec464142c7798f979d6cc0a561cd87dea8054f5abb50"
        },
        {
          "alg": "SHA3-512",
          "content": "fc84b0702c51b31e4a6eaa0e6eff8914166a51dad8adbb768887ea580106d953e86bfc2fe8c5b99d03e64ef06bf6d33a4ef33e8f045d743b00cb0e05452ec082"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-core",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/FasterXML/jackson-core/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-annotations",
      "version": "2.20",
      "description": "Core annotations used for value types, used by Jackson data binding package.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b901def3c20752817f27130e4b8d6640"
        },
        {
          "alg": "SHA-1",
          "content": "6a5e7291ea3f2b590a7ce400adb7b3aea4d7e12c"
        },
        {
          "alg": "SHA-256",
          "content": "959a2ffb2d591436f51f183c6a521fc89347912f711bf0cae008cdf045d95319"
        },
        {
          "alg": "SHA-512",
          "content": "8926d89bfe7f427c7793f6af619249540f23f82eae055dd03d4cb163ff603a43dd6a3ebe43528d00789aed3df0dd2f10e08552fdec53e2691849b9769f57f0c9"
        },
        {
          "alg": "SHA-384",
          "content": "40ee4c1438a5a190624dff9deca83377f7e60690b4535359b2a79924f736bff7c8d077e5b01c6c8972735dc152f2ccf4"
        },
        {
          "alg": "SHA3-384",
          "content": "0fc0f697d03692b63c2b11fcabac51c630278ed6df15420975263ea4ad19418b3b71b7889497ed20a150035f9bcba79d"
        },
        {
          "alg": "SHA3-256",
          "content": "6bf49e384735969af020f758b255ceed26af92d4cf456f6e7b83e8de53289f93"
        },
        {
          "alg": "SHA3-512",
          "content": "3372f6c456a7f6a33ebc3ecc65daaf36288be2a14b1f2cb9fcd7387c07acab1c69ae803a366e5d12adf4934970ffd2e34017917c5f16a6d563bc94810f228ab3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/FasterXML/jackson-annotations/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-annotations",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.0?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-databind",
      "version": "2.20.0",
      "description": "General data-binding functionality for Jackson: works on core streaming API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "7e33b9e657f74f0f95fe2c881e2f8f76"
        },
        {
          "alg": "SHA-1",
          "content": "f0a5e62fbd21285e9a5498a60dccb097e1ef793b"
        },
        {
          "alg": "SHA-256",
          "content": "a70e146a6bf2cba4f9cd367169787f50adcfbb57122bc2e9c8390cd0b397ac30"
        },
        {
          "alg": "SHA-512",
          "content": "a26054199811282897116632dc5175a05c1cdc30ab15cfc13325cb6074568de7b8fec08cb28f28835d31c522296b2460ce144972a2c952cfb8fc7467e1fa4a44"
        },
        {
          "alg": "SHA-384",
          "content": "e2ed967535db39c3da8a9842da1a1276522a171aaddf6d0f1861e642037e2951cacb1266535d1b08a3d451b19ec297d6"
        },
        {
          "alg": "SHA3-384",
          "content": "42d74c09c4bdc3d68429ae72b5a2c5131f1515e3360f7a73446611fcd3b6e4002fedf70bc8da119c4d0138168ea0f521"
        },
        {
          "alg": "SHA3-256",
          "content": "e5eff40214ecb55b9883b337ff84e69fbe69d318a87f120eb3fc79b82d55f9f7"
        },
        {
          "alg": "SHA3-512",
          "content": "eb39a4f74c29f43ce442df9d5ed3bdd56013cc9adb33839dc9f36b8d58a8f581d53b3949527fdbdf2bc6851374d01a4c325ce572f1933a6b001aef17e21071ec"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/FasterXML/jackson-databind/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-databind",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "application",
      "bom-ref": "pkg:maven/org.dependencytrack/dependency-track@4.13.5?type=war",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "dependency-track",
      "version": "4.13.5",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/dependency-track@4.13.5?type=war",
      "externalReferences": [
        {
          "url": "https://github.com/DependencyTrack/dependency-track/security/advisories",
          "type": "advisories"
        },
        {
          "url": "https://dependencytrack.org/slack",
          "type": "chat"
        },
        {
          "url": "https://docs.dependencytrack.org/",
          "type": "documentation"
        },
        {
          "url": "https://docs.dependencytrack.org/changelog/",
          "type": "release-notes"
        },
        {
          "url": "mailto:security@dependencytrack.org",
          "type": "security-contact"
        },
        {
          "url": "https://www.linkedin.com/company/owasp-dependency-track",
          "type": "social"
        },
        {
          "url": "https://x.com/dependencytrack",
          "type": "social"
        },
        {
          "url": "https://dependencytrack.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git",
          "type": "vcs"
        }
      ]
    }
  ],
  "services": [
    {
      "bom-ref": "service:gov.nist.nvd",
      "provider": {
        "name": "National Institute of Standards and Technology (NIST)",
        "url": [
          "https://nist.gov"
        ],
        "contact": [
          {
            "email": "nvd@nist.gov"
          }
        ]
      },
      "group": "gov.nist.nvd",
      "name": "National Vulnerability Database (NVD)",
      "description": "The NVD is the U.S. government repository of standards based vulnerability management data represented using the Security Content Automation Protocol (SCAP). This data enables automation of vulnerability management, security measurement, and compliance. The NVD includes databases of security checklist references, security-related software flaws, misconfigurations, product names, and impact metrics.",
      "endpoints": [
        "https://nvd.nist.gov/feeds"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "Public domain"
          }
        }
      ]
    },
    {
      "bom-ref": "service:org.sonatype.ossindex",
      "provider": {
        "name": "Sonatype",
        "url": [
          "https://sonatype.com"
        ],
        "contact": [
          {
            "email": "ossindex@sonatype.org"
          }
        ]
      },
      "group": "org.sonatype.ossindex",
      "name": "OSS Index",
      "description": "The NVD is the U.S. government repository of standards based vulnerability management data represented using the Security Content Automation Protocol (SCAP). This data enables automation of vulnerability management, security measurement, and compliance. The NVD includes databases of security checklist references, security-related software flaws, misconfigurations, product names, and impact metrics.",
      "endpoints": [
        "https://ossindex.sonatype.org/api/v3/component-report",
        "https://ossindex.sonatype.org/api/v3/version"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:com.cyberriskanalytics.vulndb",
      "provider": {
        "name": "Risk Based Security",
        "url": [
          "https://riskbasedsecurity.com/"
        ],
        "contact": [
          {
            "email": "support@riskbasedsecurity.com"
          },
          {
            "email": "sales@riskbasedsecurity.com",
            "phone": "1-855-RBS-RISK"
          }
        ]
      },
      "group": "com.cyberriskanalytics.vulndb",
      "name": "VulnDB",
      "description": "VulnDB is the most comprehensive and timely vulnerability intelligence available and provides actionable information about the latest in security vulnerabilities via an easy-to-use SaaS Portal, or a RESTful API that allows easy integration into GRC tools and ticketing systems. VulnDB allows organizations to search and be alerted on the latest vulnerabilities, both in end-user software and the 3rd Party Libraries or dependencies. A subscription to VulnDB provides organizations with simple to understand ratings and metrics on their vendors and products, and how each contributes to the organization\u2019s risk-profile and cost of ownership.",
      "endpoints": [
        "https://vulndb.cyberriskanalytics.com/api/v1/account_status",
        "https://vulndb.cyberriskanalytics.com/api/v1/vendors/",
        "https://vulndb.cyberriskanalytics.com/api/v1/products/",
        "https://vulndb.cyberriskanalytics.com/api/v1/versions/by_product_id",
        "https://vulndb.cyberriskanalytics.com/api/v1/vulnerabilities/",
        "https://vulndb.cyberriskanalytics.com/api/v1/vulnerabilities/find_by_cpe"
      ],
      "authenticated": true,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:com.github.api",
      "provider": {
        "name": "GitHub",
        "url": [
          "https://github.com/"
        ]
      },
      "group": "com.github.api",
      "name": "GitHub Advisories",
      "description": "Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.",
      "endpoints": [
        "https://api.github.com/graphql"
      ],
      "authenticated": true,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:io.crates",
      "provider": {
        "name": "Crates.io",
        "url": [
          "https://crates.io"
        ]
      },
      "group": "io.crates",
      "name": "Crates.io",
      "description": "The Rust community\u2019s crate registry",
      "endpoints": [
        "https://crates.io/api/v1/crates"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.packagist.repo",
      "provider": {
        "name": "Packagist",
        "url": [
          "https://packagist.org"
        ]
      },
      "group": "org.packagist.repo",
      "name": "Crates.io",
      "description": "The PHP Package Repository",
      "endpoints": [
        "https://repo.packagist.org/p/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.rubygems",
      "provider": {
        "name": "RubyGems",
        "url": [
          "https://rubygems.org"
        ]
      },
      "group": "org.rubygems",
      "name": "RubyGems",
      "description": "RubyGems.org is the Ruby community\u2019s gem hosting service.",
      "endpoints": [
        "https://rubygems.org/api/v1/versions"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.golang.proxy",
      "provider": {
        "name": "Google",
        "url": [
          "https://go.dev/"
        ]
      },
      "group": "org.golang.proxy",
      "name": "Go Module Mirror, Index, and Checksum Database",
      "description": "The Go team is providing the following services run by Google: a module mirror for accelerating Go module downloads, an index for discovering new modules, and a global go.sum database for authenticating module content.",
      "endpoints": [
        "https://proxy.golang.org/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:pm.hex",
      "provider": {
        "name": "Six Colors AB.",
        "url": [
          "https://hex.pm"
        ],
        "contact": [
          {
            "name": "Eric Meadows-J\u00F6nsson",
            "phone": "\u002B46 070-893 94 01"
          }
        ]
      },
      "group": "pm.hex",
      "name": "hex",
      "description": "The package manager for the Erlang ecosystem.",
      "endpoints": [
        "https://hex.pm/api/packages"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.maven.repo1",
      "provider": {
        "name": "Sonatype",
        "url": [
          "https://sonatype.com"
        ]
      },
      "group": "org.maven.repo1",
      "name": "Maven Central",
      "description": "Package repository for the Java ecosystem.",
      "endpoints": [
        "https://repo1.maven.org/maven2"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:com.atlassian.maven",
      "provider": {
        "name": "Atlassian",
        "url": [
          "https://atlassian.com"
        ]
      },
      "group": "com.atlassian.maven",
      "name": "Atlassian Public",
      "description": "Package repository for the Java ecosystem.",
      "endpoints": [
        "https://packages.atlassian.com/content/repositories/atlassian-public/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.jboss.repository",
      "provider": {
        "name": "RedHat",
        "url": [
          "https://redhat.com"
        ]
      },
      "group": "org.jboss.repository",
      "name": "JBoss Releases",
      "description": "Package repository for the Java ecosystem.",
      "endpoints": [
        "https://repository.jboss.org/nexus/content/repositories/releases/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.clojars.repo",
      "provider": {
        "name": "Clojars",
        "url": [
          "https://clojars.org/"
        ]
      },
      "group": "org.clojars.repo",
      "name": "Clojars",
      "description": "Clojars is an easy to use community repository for open source Clojure libraries",
      "endpoints": [
        "https://repo.clojars.org/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:com.google.maven",
      "provider": {
        "name": "Google",
        "url": [
          "https://google.com"
        ]
      },
      "group": "com.google.maven",
      "name": "Google\u0027s Maven Repository",
      "endpoints": [
        "https://maven.google.com/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.npmjs.registry",
      "provider": {
        "name": "npm",
        "url": [
          "https://www.npmjs.com/"
        ]
      },
      "group": "org.npmjs.registry",
      "name": "NPM Registry",
      "description": "Package repository for the Node.js and JavaScript ecosystems.",
      "endpoints": [
        "https://registry.npmjs.org/-/package/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.nuget.api",
      "provider": {
        "name": "Microsoft",
        "url": [
          "https://www.microsoft.com/"
        ],
        "contact": [
          {
            "email": "support@nuget.org"
          }
        ]
      },
      "group": "org.nuget.api",
      "name": "NuGet Registry",
      "description": "Package repository for the .NET ecosystem.",
      "endpoints": [
        "https://api.nuget.org/v3-flatcontainer/",
        "https://api.nuget.org/v3/registration3/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:dev.osv",
      "provider": {
        "name": "Google",
        "url": [
          "https://google.com"
        ]
      },
      "group": "dev.osv",
      "name": "OSV",
      "description": "OSV is a distributed vulnerability database for Open Source",
      "endpoints": [
        "https://osv-vulnerabilities.storage.googleapis.com"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.pypi",
      "provider": {
        "name": "Python Software Foundation",
        "url": [
          "https://www.python.org/psf/"
        ],
        "contact": [
          {
            "email": "psf@python.org"
          }
        ]
      },
      "group": "org.pypi",
      "name": "PyPI",
      "description": "The Python Package Index (PyPI) is a repository of software for the Python programming language.",
      "endpoints": [
        "https://pypi.org/pypi/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:io.snyk",
      "provider": {
        "name": "Snyk",
        "url": [
          "https://snyk.io"
        ]
      },
      "group": "io.snyk",
      "name": "Snyk",
      "description": "Snyk is a developer security platform. Integrating directly into development tools, workflows, and automation pipelines, Snyk makes it easy for teams to find, prioritize, and fix security vulnerabilities in code, dependencies, containers, and infrastructure as code. Supported by industry-leading application and security intelligence, Snyk puts security expertise in any developer\u0027s toolkit.",
      "endpoints": [
        "https://api.snyk.io"
      ],
      "authenticated": true,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:com.aquasec",
      "provider": {
        "name": "Trivy"
      },
      "group": "com.aquasec",
      "name": "Trivy",
      "description": "Trivy is a comprehensive and versatile security scanner. Trivy has scanners that look for security issues, and targets where it can find those issues.",
      "authenticated": true,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.dependencytrack.metrics",
      "provider": {
        "name": "OWASP"
      },
      "group": "org.dependencytrack",
      "name": "metrics",
      "description": "Dependency-Track telemetry service.",
      "endpoints": [
        "https://metrics.dependencytrack.org"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ],
      "externalReferences": [
        {
          "url": "https://docs.dependencytrack.org/getting-started/telemetry/",
          "type": "documentation"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.dependencytrack/dependency-track@4.13.5?type=war",
      "dependsOn": [
        "pkg:maven/us.springett/alpine-common@3.3.0?type=jar",
        "pkg:maven/us.springett/alpine-model@3.3.0?type=jar",
        "pkg:maven/us.springett/alpine-infra@3.3.0?type=jar",
        "pkg:maven/us.springett/alpine-server@3.3.0?type=jar",
        "pkg:maven/us.springett/cvss-calculator@1.4.2?type=jar",
        "pkg:maven/us.springett/owasp-risk-rating-calculator@1.0.1?type=jar",
        "pkg:maven/us.springett/cpe-parser@3.0.0?type=jar",
        "pkg:maven/org.cyclonedx/cyclonedx-core-java@11.0.0?type=jar",
        "pkg:maven/org.json/json@20250107?type=jar",
        "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.0.0?type=jar",
        "pkg:maven/jakarta.validation/jakarta.validation-api@3.0.2?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
        "pkg:maven/org.apache.lucene/lucene-core@8.11.4?type=jar",
        "pkg:maven/org.apache.lucene/lucene-analyzers-common@8.11.4?type=jar",
        "pkg:maven/org.apache.lucene/lucene-queryparser@8.11.4?type=jar",
        "pkg:maven/org.apache.lucene/lucene-queries@8.11.4?type=jar",
        "pkg:maven/org.apache.lucene/lucene-sandbox@8.11.4?type=jar",
        "pkg:maven/io.github.jeremylong/open-vulnerability-clients@9.0.1?type=jar",
        "pkg:maven/io.pebbletemplates/pebble@3.2.4?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.30.2?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.30.2?type=jar",
        "pkg:maven/io.swagger.core.v3/swagger-jaxrs2-jakarta@2.2.37?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
        "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.4.3?type=jar",
        "pkg:maven/oauth.signpost/signpost-core@2.1.1?type=jar",
        "pkg:maven/org.brotli/dec@0.1.2?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpmime@4.5.14?type=jar",
        "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.0.0?type=jar",
        "pkg:maven/org.apache.maven/maven-artifact@3.9.9?type=jar",
        "pkg:maven/com.microsoft.sqlserver/mssql-jdbc@12.10.0.jre11?type=jar",
        "pkg:maven/com.mysql/mysql-connector-j@8.2.0?type=jar",
        "pkg:maven/org.postgresql/postgresql@42.7.7?type=jar",
        "pkg:maven/com.google.cloud.sql/mysql-socket-factory-connector-j-8@1.24.1?type=jar",
        "pkg:maven/com.google.cloud.sql/postgres-socket-factory@1.24.1?type=jar",
        "pkg:maven/com.google.cloud.sql/cloud-sql-connector-jdbc-sqlserver@1.24.1?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar",
        "pkg:maven/org.apache.commons/commons-text@1.13.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-retry@2.2.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-ratelimiter@2.2.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-micrometer@2.2.0?type=jar",
        "pkg:maven/org.slf4j/log4j-over-slf4j@2.0.17?type=jar",
        "pkg:maven/org.kohsuke/github-api@1.330?type=jar",
        "pkg:maven/com.asahaf.javacron/javacron@1.4.0?type=jar",
        "pkg:maven/us.springett/alpine-executable-war@3.3.0?type=jar",
        "pkg:maven/org.owasp/security-logging-common@1.1.7?type=jar",
        "pkg:maven/org.owasp/security-logging-logback@1.1.7?type=jar",
        "pkg:maven/net.logstash.logback/logstash-logback-encoder@8.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/us.springett/alpine-common@3.3.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar",
        "pkg:maven/io.micrometer/micrometer-registry-prometheus@1.15.4?type=jar",
        "pkg:maven/io.micrometer/micrometer-registry-prometheus-simpleclient@1.15.4?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.micrometer/micrometer-registry-prometheus@1.15.4?type=jar",
      "dependsOn": [
        "pkg:maven/io.micrometer/micrometer-core@1.10.0?type=jar",
        "pkg:maven/io.prometheus/prometheus-metrics-core@1.3.10?type=jar",
        "pkg:maven/io.prometheus/prometheus-metrics-tracer-common@1.3.10?type=jar",
        "pkg:maven/io.prometheus/prometheus-metrics-exposition-formats@1.3.10?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.micrometer/micrometer-core@1.10.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.micrometer/micrometer-commons@1.10.0?type=jar",
        "pkg:maven/io.micrometer/micrometer-observation@1.10.0?type=jar",
        "pkg:maven/org.hdrhistogram/HdrHistogram@2.1.12?type=jar",
        "pkg:maven/org.latencyutils/LatencyUtils@2.0.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.micrometer/micrometer-commons@1.10.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.micrometer/micrometer-observation@1.10.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.micrometer/micrometer-commons@1.10.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.hdrhistogram/HdrHistogram@2.1.12?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.latencyutils/LatencyUtils@2.0.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.prometheus/prometheus-metrics-core@1.3.10?type=jar",
      "dependsOn": [
        "pkg:maven/io.prometheus/prometheus-metrics-model@1.3.10?type=jar",
        "pkg:maven/io.prometheus/prometheus-metrics-config@1.3.10?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.prometheus/prometheus-metrics-model@1.3.10?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.prometheus/prometheus-metrics-config@1.3.10?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.prometheus/prometheus-metrics-tracer-common@1.3.10?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.prometheus/prometheus-metrics-exposition-formats@1.3.10?type=jar",
      "dependsOn": [
        "pkg:maven/io.prometheus/prometheus-metrics-exposition-textformats@1.3.10?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.prometheus/prometheus-metrics-exposition-textformats@1.3.10?type=jar",
      "dependsOn": [
        "pkg:maven/io.prometheus/prometheus-metrics-model@1.3.10?type=jar",
        "pkg:maven/io.prometheus/prometheus-metrics-config@1.3.10?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.micrometer/micrometer-registry-prometheus-simpleclient@1.15.4?type=jar",
      "dependsOn": [
        "pkg:maven/io.micrometer/micrometer-core@1.10.0?type=jar",
        "pkg:maven/io.prometheus/simpleclient_common@0.16.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.prometheus/simpleclient_common@0.16.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.prometheus/simpleclient@0.16.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.prometheus/simpleclient@0.16.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.prometheus/simpleclient_tracer_otel@0.16.0?type=jar",
        "pkg:maven/io.prometheus/simpleclient_tracer_otel_agent@0.16.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.prometheus/simpleclient_tracer_otel@0.16.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.prometheus/simpleclient_tracer_common@0.16.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.prometheus/simpleclient_tracer_common@0.16.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.prometheus/simpleclient_tracer_otel_agent@0.16.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.prometheus/simpleclient_tracer_common@0.16.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/us.springett/alpine-model@3.3.0?type=jar",
      "dependsOn": [
        "pkg:maven/us.springett/alpine-common@3.3.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-api-jdo@6.0.5?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-core@6.0.11?type=jar",
        "pkg:maven/org.datanucleus/javax.jdo@3.2.1?type=jar",
        "pkg:maven/org.glassfish.jersey.ext/jersey-bean-validation@3.1.11?type=jar",
        "pkg:maven/io.swagger.core.v3/swagger-annotations-jakarta@2.2.37?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.datanucleus/datanucleus-api-jdo@6.0.5?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.datanucleus/datanucleus-core@6.0.11?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.datanucleus/javax.jdo@3.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/javax.transaction/javax.transaction-api@1.3?type=jar",
        "pkg:maven/org.glassfish.corba/glassfish-corba-omgapi@4.2.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/javax.transaction/javax.transaction-api@1.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.corba/glassfish-corba-omgapi@4.2.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.ext/jersey-bean-validation@3.1.11?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-common@3.1.11?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-server@3.1.11?type=jar",
        "pkg:maven/jakarta.validation/jakarta.validation-api@3.0.2?type=jar",
        "pkg:maven/org.hibernate.validator/hibernate-validator@8.0.2.Final?type=jar",
        "pkg:maven/org.jboss.logging/jboss-logging@3.6.1.Final?type=jar",
        "pkg:maven/jakarta.el/jakarta.el-api@5.0.1?type=jar",
        "pkg:maven/org.glassfish.expressly/expressly@5.0.0?type=jar",
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.1.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.core/jersey-common@3.1.11?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.1.0?type=jar",
        "pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1?type=jar",
        "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
        "pkg:maven/org.glassfish.hk2/osgi-resource-locator@1.0.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.1.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.hk2/osgi-resource-locator@1.0.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.core/jersey-server@3.1.11?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.jersey.core/jersey-common@3.1.11?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-client@3.1.11?type=jar",
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.1.0?type=jar",
        "pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1?type=jar",
        "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
        "pkg:maven/jakarta.validation/jakarta.validation-api@3.0.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.core/jersey-client@3.1.11?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.1.0?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-common@3.1.11?type=jar",
        "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.validation/jakarta.validation-api@3.0.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.hibernate.validator/hibernate-validator@8.0.2.Final?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml/classmate@1.5.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml/classmate@1.5.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.jboss.logging/jboss-logging@3.6.1.Final?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/jakarta.el/jakarta.el-api@5.0.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.expressly/expressly@5.0.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.swagger.core.v3/swagger-annotations-jakarta@2.2.37?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/us.springett/alpine-infra@3.3.0?type=jar",
      "dependsOn": [
        "pkg:maven/us.springett/alpine-common@3.3.0?type=jar",
        "pkg:maven/us.springett/alpine-model@3.3.0?type=jar",
        "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar",
        "pkg:maven/org.datanucleus/javax.jdo@3.2.1?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-api-jdo@6.0.5?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-core@6.0.11?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-rdbms@6.0.10?type=jar",
        "pkg:maven/com.zaxxer/HikariCP@7.0.2?type=jar",
        "pkg:maven/org.javassist/javassist@3.30.2-GA?type=jar",
        "pkg:maven/io.jsonwebtoken/jjwt@0.13.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.datanucleus/datanucleus-rdbms@6.0.10?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.zaxxer/HikariCP@7.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.javassist/javassist@3.30.2-GA?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.jsonwebtoken/jjwt@0.13.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.jsonwebtoken/jjwt-api@0.13.0?type=jar",
        "pkg:maven/io.jsonwebtoken/jjwt-impl@0.13.0?type=jar",
        "pkg:maven/io.jsonwebtoken/jjwt-jackson@0.13.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.jsonwebtoken/jjwt-api@0.13.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.jsonwebtoken/jjwt-impl@0.13.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.jsonwebtoken/jjwt-api@0.13.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.jsonwebtoken/jjwt-jackson@0.13.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.jsonwebtoken/jjwt-api@0.13.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/us.springett/alpine-server@3.3.0?type=jar",
      "dependsOn": [
        "pkg:maven/us.springett/alpine-common@3.3.0?type=jar",
        "pkg:maven/us.springett/alpine-infra@3.3.0?type=jar",
        "pkg:maven/us.springett/alpine-model@3.3.0?type=jar",
        "pkg:maven/commons-io/commons-io@2.20.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
        "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-client@3.1.11?type=jar",
        "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@3.1.11?type=jar",
        "pkg:maven/org.glassfish.jersey.media/jersey-media-json-jackson@3.1.11?type=jar",
        "pkg:maven/org.glassfish.jersey.media/jersey-media-multipart@3.1.11?type=jar",
        "pkg:maven/org.glassfish.jersey.ext/jersey-bean-validation@3.1.11?type=jar",
        "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@3.1.11?type=jar",
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.0?type=jar",
        "pkg:maven/org.glassfish.jaxb/jaxb-runtime@4.0.6?type=jar",
        "pkg:maven/jakarta.json/jakarta.json-api@2.1.0?type=jar",
        "pkg:maven/org.eclipse.parsson/jakarta.json@1.1.7?type=jar",
        "pkg:maven/io.swagger.core.v3/swagger-annotations-jakarta@2.2.37?type=jar",
        "pkg:maven/org.datanucleus/javax.jdo@3.2.1?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-api-jdo@6.0.5?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-core@6.0.11?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-rdbms@6.0.10?type=jar",
        "pkg:maven/com.zaxxer/HikariCP@7.0.2?type=jar",
        "pkg:maven/org.javassist/javassist@3.30.2-GA?type=jar",
        "pkg:maven/com.h2database/h2@2.4.240?type=jar",
        "pkg:maven/io.jsonwebtoken/jjwt@0.13.0?type=jar",
        "pkg:maven/org.mindrot/jbcrypt@0.4?type=jar",
        "pkg:maven/com.nimbusds/oauth2-oidc-sdk@11.29.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar",
        "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-base@2.20.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-json-provider@2.20.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.20.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
        "pkg:maven/ch.qos.logback/logback-classic@1.5.18?type=jar",
        "pkg:maven/ch.qos.logback/logback-core@1.5.18?type=jar",
        "pkg:maven/org.owasp/security-logging-common@1.1.7?type=jar",
        "pkg:maven/org.owasp/security-logging-logback@1.1.7?type=jar",
        "pkg:maven/net.logstash.logback/logstash-logback-encoder@8.1?type=jar",
        "pkg:maven/org.eclipse.microprofile.health/microprofile-health-api@4.0.1?type=jar",
        "pkg:maven/org.owasp.encoder/encoder@1.3.1?type=jar",
        "pkg:maven/org.owasp.encoder/encoder-jsp@1.3.1?type=jar",
        "pkg:maven/jakarta.mail/jakarta.mail-api@2.1.0?type=jar",
        "pkg:maven/org.eclipse.angus/angus-mail@2.0.4?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.2.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/commons-io/commons-io@2.20.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@3.1.11?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet-core@3.1.11?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-common@3.1.11?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-server@3.1.11?type=jar",
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.1.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet-core@3.1.11?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-common@3.1.11?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-server@3.1.11?type=jar",
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.1.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.media/jersey-media-json-jackson@3.1.11?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.jersey.core/jersey-common@3.1.11?type=jar",
        "pkg:maven/org.glassfish.jersey.ext/jersey-entity-filtering@3.1.11?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.module/jackson-module-jakarta-xmlbind-annotations@2.20.0?type=jar",
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.ext/jersey-entity-filtering@3.1.11?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.1.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.module/jackson-module-jakarta-xmlbind-annotations@2.20.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.media/jersey-media-multipart@3.1.11?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.jersey.core/jersey-common@3.1.11?type=jar",
        "pkg:maven/org.jvnet.mimepull/mimepull@1.9.15?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jvnet.mimepull/mimepull@1.9.15?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@3.1.11?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.jersey.core/jersey-common@3.1.11?type=jar",
        "pkg:maven/org.glassfish.hk2/hk2-locator@3.0.6?type=jar",
        "pkg:maven/org.javassist/javassist@3.30.2-GA?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.hk2/hk2-locator@3.0.6?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@3.0.6?type=jar",
        "pkg:maven/org.glassfish.hk2/hk2-api@3.0.6?type=jar",
        "pkg:maven/org.glassfish.hk2/hk2-utils@3.0.6?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@3.0.6?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.hk2/hk2-api@3.0.6?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.hk2/hk2-utils@3.0.6?type=jar",
        "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@3.0.6?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.hk2/hk2-utils@3.0.6?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.jaxb/jaxb-runtime@4.0.6?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.jaxb/jaxb-core@4.0.6?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.jaxb/jaxb-core@4.0.6?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.0?type=jar",
        "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.0?type=jar",
        "pkg:maven/org.eclipse.angus/angus-activation@2.0.2?type=jar",
        "pkg:maven/org.glassfish.jaxb/txw2@4.0.6?type=jar",
        "pkg:maven/com.sun.istack/istack-commons-runtime@4.1.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.eclipse.angus/angus-activation@2.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.jaxb/txw2@4.0.6?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.sun.istack/istack-commons-runtime@4.1.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/jakarta.json/jakarta.json-api@2.1.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.eclipse.parsson/jakarta.json@1.1.7?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.h2database/h2@2.4.240?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.mindrot/jbcrypt@0.4?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.nimbusds/oauth2-oidc-sdk@11.29.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar",
        "pkg:maven/com.nimbusds/content-type@2.3?type=jar",
        "pkg:maven/net.minidev/json-smart@2.5.2?type=jar",
        "pkg:maven/com.nimbusds/lang-tag@1.7?type=jar",
        "pkg:maven/com.nimbusds/nimbus-jose-jwt@10.4.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.nimbusds/content-type@2.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/net.minidev/json-smart@2.5.2?type=jar",
      "dependsOn": [
        "pkg:maven/net.minidev/accessors-smart@2.5.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/net.minidev/accessors-smart@2.5.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.ow2.asm/asm@9.7.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.ow2.asm/asm@9.7.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.nimbusds/lang-tag@1.7?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.nimbusds/nimbus-jose-jwt@10.4.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-base@2.20.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-json-provider@2.20.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-base@2.20.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.module/jackson-module-jakarta-xmlbind-annotations@2.20.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.20.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/ch.qos.logback/logback-classic@1.5.18?type=jar",
      "dependsOn": [
        "pkg:maven/ch.qos.logback/logback-core@1.5.18?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/ch.qos.logback/logback-core@1.5.18?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.owasp/security-logging-common@1.1.7?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.owasp/security-logging-logback@1.1.7?type=jar",
      "dependsOn": [
        "pkg:maven/org.owasp/security-logging-common@1.1.7?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
        "pkg:maven/ch.qos.logback/logback-classic@1.5.18?type=jar",
        "pkg:maven/ch.qos.logback/logback-core@1.5.18?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.19.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/commons-codec/commons-codec@1.19.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/net.logstash.logback/logstash-logback-encoder@8.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.microprofile.health/microprofile-health-api@4.0.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.owasp.encoder/encoder@1.3.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.owasp.encoder/encoder-jsp@1.3.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.owasp.encoder/encoder@1.3.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.mail/jakarta.mail-api@2.1.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.eclipse.angus/angus-mail@2.0.4?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.0?type=jar",
        "pkg:maven/jakarta.mail/jakarta.mail-api@2.1.0?type=jar",
        "pkg:maven/org.eclipse.angus/angus-activation@2.0.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.2.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/us.springett/cvss-calculator@1.4.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/us.springett/owasp-risk-rating-calculator@1.0.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/us.springett/cpe-parser@3.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.cyclonedx/cyclonedx-core-java@11.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/commons-codec/commons-codec@1.19.0?type=jar",
        "pkg:maven/commons-io/commons-io@2.20.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
        "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.20.0?type=jar",
        "pkg:maven/com.networknt/json-schema-validator@1.5.9?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.20.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.0?type=jar",
        "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar",
        "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.networknt/json-schema-validator@1.5.9?type=jar",
      "dependsOn": [
        "pkg:maven/com.ethlo.time/itu@1.14.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.20.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.ethlo.time/itu@1.14.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.20.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.0?type=jar",
        "pkg:maven/org.yaml/snakeyaml@2.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.yaml/snakeyaml@2.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.json/json@20250107?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.0.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.apache.lucene/lucene-core@8.11.4?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.apache.lucene/lucene-analyzers-common@8.11.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.lucene/lucene-core@8.11.4?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.lucene/lucene-queryparser@8.11.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.lucene/lucene-core@8.11.4?type=jar",
        "pkg:maven/org.apache.lucene/lucene-queries@8.11.4?type=jar",
        "pkg:maven/org.apache.lucene/lucene-sandbox@8.11.4?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.lucene/lucene-queries@8.11.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.lucene/lucene-core@8.11.4?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.lucene/lucene-sandbox@8.11.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.lucene/lucene-core@8.11.4?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.jeremylong/open-vulnerability-clients@9.0.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.4.3?type=jar",
        "pkg:maven/org.apache.httpcomponents.client5/httpclient5-cache@5.5?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.20.0?type=jar",
        "pkg:maven/com.samskivert/jmustache@1.16?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.4.3?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.3.4?type=jar",
        "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.3.4?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.3.4?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.3.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.3.4?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents.client5/httpclient5-cache@5.5?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.4.3?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.20.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.samskivert/jmustache@1.16?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.pebbletemplates/pebble@3.2.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.unbescape/unbescape@1.1.6.RELEASE?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.unbescape/unbescape@1.1.6.RELEASE?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.protobuf/protobuf-java@4.30.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.protobuf/protobuf-java-util@4.30.2?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.protobuf/protobuf-java@4.30.2?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.8.9?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
        "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar",
        "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.code.gson/gson@2.8.9?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
        "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/org.checkerframework/checker-qual@3.49.3?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
        "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.checkerframework/checker-qual@3.49.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.swagger.core.v3/swagger-jaxrs2-jakarta@2.2.37?type=jar",
      "dependsOn": [
        "pkg:maven/io.github.classgraph/classgraph@4.8.181?type=jar",
        "pkg:maven/org.javassist/javassist@3.30.2-GA?type=jar",
        "pkg:maven/io.swagger.core.v3/swagger-models-jakarta@2.2.37?type=jar",
        "pkg:maven/io.swagger.core.v3/swagger-annotations-jakarta@2.2.37?type=jar",
        "pkg:maven/io.swagger.core.v3/swagger-integration-jakarta@2.2.37?type=jar",
        "pkg:maven/org.yaml/snakeyaml@2.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-json-provider@2.20.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.classgraph/classgraph@4.8.181?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.swagger.core.v3/swagger-models-jakarta@2.2.37?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.swagger.core.v3/swagger-integration-jakarta@2.2.37?type=jar",
      "dependsOn": [
        "pkg:maven/io.github.classgraph/classgraph@4.8.181?type=jar",
        "pkg:maven/io.swagger.core.v3/swagger-core-jakarta@2.2.37?type=jar",
        "pkg:maven/io.swagger.core.v3/swagger-models-jakarta@2.2.37?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.swagger.core.v3/swagger-core-jakarta@2.2.37?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
        "pkg:maven/io.swagger.core.v3/swagger-annotations-jakarta@2.2.37?type=jar",
        "pkg:maven/io.swagger.core.v3/swagger-models-jakarta@2.2.37?type=jar",
        "pkg:maven/org.yaml/snakeyaml@2.3?type=jar",
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.0?type=jar",
        "pkg:maven/jakarta.validation/jakarta.validation-api@3.0.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.20.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.20.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.19.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/oauth.signpost/signpost-core@2.1.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.brotli/dec@0.1.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents/httpmime@4.5.14?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.maven/maven-artifact@3.9.9?type=jar",
      "dependsOn": [
        "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.microsoft.sqlserver/mssql-jdbc@12.10.0.jre11?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.mysql/mysql-connector-j@8.2.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.postgresql/postgresql@42.7.7?type=jar",
      "dependsOn": [
        "pkg:maven/org.checkerframework/checker-qual@3.49.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.cloud.sql/mysql-socket-factory-connector-j-8@1.24.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.cloud.sql/jdbc-socket-factory-core@1.24.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.cloud.sql/jdbc-socket-factory-core@1.24.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.jnr/jnr-enxio@0.32.18?type=jar",
        "pkg:maven/com.github.jnr/jnr-unixsocket@0.38.23?type=jar",
        "pkg:maven/com.google.http-client/google-http-client@1.46.3?type=jar",
        "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
        "pkg:maven/com.google.http-client/google-http-client-gson@1.46.3?type=jar",
        "pkg:maven/com.google.api-client/google-api-client@2.7.2?type=jar",
        "pkg:maven/com.google.apis/google-api-services-sqladmin@v1beta4-rev20250310-2.0.0?type=jar",
        "pkg:maven/com.google.auth/google-auth-library-credentials@1.33.1?type=jar",
        "pkg:maven/com.google.auth/google-auth-library-oauth2-http@1.33.1?type=jar",
        "pkg:maven/com.google.oauth-client/google-oauth-client@1.39.0?type=jar",
        "pkg:maven/com.google.api/gax@2.63.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.jnr/jnr-enxio@0.32.18?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.jnr/jnr-constants@0.10.4?type=jar",
        "pkg:maven/com.github.jnr/jnr-ffi@2.2.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.jnr/jnr-constants@0.10.4?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.github.jnr/jnr-ffi@2.2.17?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.jnr/jffi@1.3.13?type=jar",
        "pkg:maven/com.github.jnr/jffi@1.3.13?classifier=native\u0026type=jar",
        "pkg:maven/org.ow2.asm/asm@9.7.1?type=jar",
        "pkg:maven/org.ow2.asm/asm-commons@9.7.1?type=jar",
        "pkg:maven/org.ow2.asm/asm-analysis@9.7.1?type=jar",
        "pkg:maven/org.ow2.asm/asm-tree@9.7.1?type=jar",
        "pkg:maven/org.ow2.asm/asm-util@9.7.1?type=jar",
        "pkg:maven/com.github.jnr/jnr-a64asm@1.0.0?type=jar",
        "pkg:maven/com.github.jnr/jnr-x86asm@1.0.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.jnr/jffi@1.3.13?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.github.jnr/jffi@1.3.13?classifier=native\u0026type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.ow2.asm/asm-commons@9.7.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.ow2.asm/asm@9.7.1?type=jar",
        "pkg:maven/org.ow2.asm/asm-tree@9.7.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.ow2.asm/asm-tree@9.7.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.ow2.asm/asm@9.7.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.ow2.asm/asm-analysis@9.7.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.ow2.asm/asm-tree@9.7.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.ow2.asm/asm-util@9.7.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.ow2.asm/asm@9.7.1?type=jar",
        "pkg:maven/org.ow2.asm/asm-tree@9.7.1?type=jar",
        "pkg:maven/org.ow2.asm/asm-analysis@9.7.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.jnr/jnr-a64asm@1.0.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.github.jnr/jnr-x86asm@1.0.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.github.jnr/jnr-unixsocket@0.38.23?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.jnr/jnr-ffi@2.2.17?type=jar",
        "pkg:maven/com.github.jnr/jnr-constants@0.10.4?type=jar",
        "pkg:maven/com.github.jnr/jnr-enxio@0.32.18?type=jar",
        "pkg:maven/com.github.jnr/jnr-posix@3.1.20?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.jnr/jnr-posix@3.1.20?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.jnr/jnr-ffi@2.2.17?type=jar",
        "pkg:maven/com.github.jnr/jnr-constants@0.10.4?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.http-client/google-http-client@1.46.3?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
        "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar",
        "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar",
        "pkg:maven/io.grpc/grpc-context@1.70.0?type=jar",
        "pkg:maven/io.opencensus/opencensus-api@0.31.1?type=jar",
        "pkg:maven/io.opencensus/opencensus-contrib-http-util@0.31.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.grpc/grpc-context@1.70.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.grpc/grpc-api@1.70.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.grpc/grpc-api@1.70.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.opencensus/opencensus-api@0.31.1?type=jar",
      "dependsOn": [
        "pkg:maven/io.grpc/grpc-context@1.70.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.opencensus/opencensus-contrib-http-util@0.31.1?type=jar",
      "dependsOn": [
        "pkg:maven/io.opencensus/opencensus-api@0.31.1?type=jar",
        "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.http-client/google-http-client-gson@1.46.3?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.http-client/google-http-client@1.46.3?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.8.9?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.api-client/google-api-client@2.7.2?type=jar",
      "dependsOn": [
        "pkg:maven/commons-codec/commons-codec@1.19.0?type=jar",
        "pkg:maven/com.google.auth/google-auth-library-credentials@1.33.1?type=jar",
        "pkg:maven/com.google.auth/google-auth-library-oauth2-http@1.33.1?type=jar",
        "pkg:maven/com.google.http-client/google-http-client-gson@1.46.3?type=jar",
        "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar",
        "pkg:maven/com.google.http-client/google-http-client-apache-v2@1.45.2?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
        "pkg:maven/com.google.http-client/google-http-client@1.46.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.auth/google-auth-library-credentials@1.33.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.auth/google-auth-library-oauth2-http@1.33.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.0?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/com.google.auth/google-auth-library-credentials@1.33.1?type=jar",
        "pkg:maven/com.google.http-client/google-http-client@1.46.3?type=jar",
        "pkg:maven/com.google.http-client/google-http-client-gson@1.46.3?type=jar",
        "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.8.9?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.http-client/google-http-client-apache-v2@1.45.2?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.http-client/google-http-client@1.46.3?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.apis/google-api-services-sqladmin@v1beta4-rev20250310-2.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.api-client/google-api-client@2.7.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.oauth-client/google-oauth-client@1.39.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.http-client/google-http-client@1.46.3?type=jar",
        "pkg:maven/com.google.http-client/google-http-client-gson@1.46.3?type=jar",
        "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.api/gax@2.63.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.30.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.cloud.sql/postgres-socket-factory@1.24.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.cloud.sql/jdbc-socket-factory-core@1.24.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.cloud.sql/cloud-sql-connector-jdbc-sqlserver@1.24.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.cloud.sql/jdbc-socket-factory-core@1.24.1?type=jar",
        "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar",
      "dependsOn": [
        "pkg:maven/commons-codec/commons-codec@1.19.0?type=jar",
        "pkg:maven/commons-io/commons-io@2.20.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.commons/commons-text@1.13.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-retry@2.2.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.2.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-core@2.2.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-ratelimiter@2.2.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.2.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-micrometer@2.2.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.micrometer/micrometer-core@1.10.0?type=jar",
        "pkg:maven/io.micrometer/micrometer-observation@1.10.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-bulkhead@2.2.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-circuitbreaker@2.2.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-retry@2.2.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-ratelimiter@2.2.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-timelimiter@2.2.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-bulkhead@2.2.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.2.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-circuitbreaker@2.2.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.2.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-timelimiter@2.2.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.2.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.slf4j/log4j-over-slf4j@2.0.17?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.kohsuke/github-api@1.330?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.0?type=jar",
        "pkg:maven/commons-io/commons-io@2.20.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.asahaf.javacron/javacron@1.4.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/us.springett/alpine-executable-war@3.3.0?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.0.0?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-server@12.1.1?type=jar",
        "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-webapp@12.1.1?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-deploy@12.1.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
        "pkg:maven/ch.qos.logback/logback-classic@1.5.18?type=jar",
        "pkg:maven/org.slf4j/log4j-over-slf4j@2.0.17?type=jar",
        "pkg:maven/org.slf4j/jul-to-slf4j@2.0.17?type=jar",
        "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-server@12.1.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-http@12.1.1?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-io@12.1.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-http@12.1.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-io@12.1.1?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-util@12.1.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-io@12.1.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-util@12.1.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-util@12.1.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-webapp@12.1.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-session@12.1.1?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-xml@12.1.1?type=jar",
        "pkg:maven/org.eclipse.jetty.ee/jetty-ee-webapp@12.1.1?type=jar",
        "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-servlet@12.1.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-session@12.1.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-server@12.1.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-xml@12.1.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-util@12.1.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty.ee/jetty-ee-webapp@12.1.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-server@12.1.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-servlet@12.1.1?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.0.0?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-security@12.1.1?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-server@12.1.1?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-session@12.1.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-security@12.1.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-server@12.1.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-deploy@12.1.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-server@12.1.1?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-xml@12.1.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.slf4j/jul-to-slf4j@2.0.17?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.17?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    }
  ]
}