{
  "bomFormat": "CycloneDX",
  "specVersion": "1.4",
  "serialNumber": "urn:uuid:197441bb-f540-477f-86c2-34253b9f6a4b",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "vendor": "OWASP Foundation",
        "name": "CycloneDX Maven plugin",
        "version": "2.9.2",
        "hashes": [
          {
            "alg": "MD5",
            "content": "843a7130400f75d33f563dc7e9f52dea"
          },
          {
            "alg": "SHA-1",
            "content": "2cac5a176b9f48801dfc4910d4f6a34bfbb13445"
          },
          {
            "alg": "SHA-256",
            "content": "d9e5a12bac3c1a91d85f3a1ad84307099f457ff24aa65b438ba7de9ca784a54e"
          },
          {
            "alg": "SHA-512",
            "content": "636f788518752c5a23d14bad41d68b0d549e4b3a3d720d66f2f6e2b8b956207942ee12abba968a1e9aac6cf1d78d9e738a4a75eeb8bc6fca2377030fbb482407"
          },
          {
            "alg": "SHA-384",
            "content": "72aad41633b92fadd4dbd1c6f5c1b956836b22d3b96afbdd7ca8b8eb0456eec00c2ed658e3c2d4e93d95048bcc23dac8"
          },
          {
            "alg": "SHA3-384",
            "content": "9837cee0f9b7d575f8d88df3ad6f58a075032ad2635e0987abbc102240327f1cec87dc062b3034009f028ab5baf988f9"
          },
          {
            "alg": "SHA3-256",
            "content": "4c654267cde6eb6d295dbc06b33e33528412bee57549dae89c85b8df8202dbcb"
          },
          {
            "alg": "SHA3-512",
            "content": "f7da73632ef2fd1c2d85f0cf5eebc2b6a3ff1ae2ed0945442e679da71490562a2ff6b67422dbd5285f4042eda6637e6f3544f62825a625b38efacfdebc8df137"
          }
        ]
      }
    ],
    "component": {
      "type": "application",
      "bom-ref": "pkg:maven/org.dependencytrack/apiserver@5.0.4?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "apiserver",
      "version": "5.0.4",
      "description": "The Dependency-Track API Server",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/apiserver@5.0.4?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/apiserver/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/apiserver",
          "type": "vcs"
        }
      ]
    }
  },
  "components": [
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/api@5.0.4?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "api",
      "version": "5.0.4",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "23d43e0fc4351467cfbd968b519cd58e"
        },
        {
          "alg": "SHA-1",
          "content": "f47bad0914f825be9e3eb8a2a423f97278ec94d8"
        },
        {
          "alg": "SHA-256",
          "content": "39c652f927fb5af5443281a250791210a6753582237c11bfb2928da12e14f265"
        },
        {
          "alg": "SHA-512",
          "content": "6562d87e7ee58bd08f935f69451dda11470d6351956762fbc2e98b646aee80f6e9b01c7126888007f394c7f0d294f12ea138d55e5ee4c9d8efe88e1923dd9a7d"
        },
        {
          "alg": "SHA-384",
          "content": "932a96c5351559296943c3753a73e778a442f2497f127c256da851a66cb667be455dd17a9fc4ce448c69624eabd4f074"
        },
        {
          "alg": "SHA3-384",
          "content": "8416487e4b3475153da7e3100a81790f5878cddc20432686c3d98cbc17d1f1239e7702fff37236ce4c794a7d2db7aac1"
        },
        {
          "alg": "SHA3-256",
          "content": "f8ef620ef3602924651979d3ed3cb623fd32b7d55126f29150ac3470d31c3f10"
        },
        {
          "alg": "SHA3-512",
          "content": "f8475f61989e0b23c46be427b6e175357774fbcedcbbb3555717a7d3d580995ffa8eeeaf545ab1a464ceee5308e2b2b167e04d8d7ea494e4a75dc96e46b715e3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/api@5.0.4?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/api/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/cache-api@5.0.4?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "cache-api",
      "version": "5.0.4",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "996de4af44a60b5a080560ed29b6abbb"
        },
        {
          "alg": "SHA-1",
          "content": "537babed707049fe88cd6e1045d02e8be2b23ce4"
        },
        {
          "alg": "SHA-256",
          "content": "12ee8d1c3f6beede42d739cc92db9330429343a9ebf97c17edaa71e2bcbf18f8"
        },
        {
          "alg": "SHA-512",
          "content": "c33b5bee06917eafd8eecfc00edaa5d9920cb48d9844cfb1f79511022c997e2ab76047763f8f9607ade0a401d71e27c6025f4906dc3103a57eafd07bd7e0c624"
        },
        {
          "alg": "SHA-384",
          "content": "2fde27ee3a9ef02dc8e9b02f88838b25bfcce3b65de95cea66fdf40e5fcda0a949b6a90c0647118905c9f595c5d454fd"
        },
        {
          "alg": "SHA3-384",
          "content": "e09ac1174c27eb819d7da9bd1b341ba5ce45f3e9c6763543e7f5dce9fd6b822a3d62ff3d5b0b5a0a89b38e0b7d12f779"
        },
        {
          "alg": "SHA3-256",
          "content": "13dfb7cba3db2ebbb9d467e996ec63e25c71265f33af49ebf6fdfdd601b38e0c"
        },
        {
          "alg": "SHA3-512",
          "content": "6ea7cf97c0dd98165c9920a2e6df44c9e2eced8afbacb42c031d5f36558ef513586b41d7d4a4e58f6f927198fe2b3e29c937afd8da8db350eed15b9d6a07e478"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/cache-api@5.0.4?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/cache-parent/cache-api/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/cache-parent/cache-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
      "group": "org.jspecify",
      "name": "jspecify",
      "version": "1.0.0",
      "description": "An artifact of well-named and well-specified annotations to power static analysis checks",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9133aba420d0ca3b001dbb6ae9992cf6"
        },
        {
          "alg": "SHA-1",
          "content": "7425a601c1c7ec76645a78d22b8c6a627edee507"
        },
        {
          "alg": "SHA-256",
          "content": "1fad6e6be7557781e4d33729d49ae1cdc8fdda6fe477bb0cc68ce351eafdfbab"
        },
        {
          "alg": "SHA-512",
          "content": "efded31ef5b342f09422935076e599789076431e93a746685c0607e7de5592719ba6aacde0be670b3f064d1e85630d58d5bce6b34aed2a288fdb34f745efb7bc"
        },
        {
          "alg": "SHA-384",
          "content": "814f860e5a44ead6c457676841eef471a8b87be31b84c60a8a4477a18a9cbcb6e3c2ae700969d5c5e52309d961e0537a"
        },
        {
          "alg": "SHA3-384",
          "content": "c8844e5b71e5ecfbb7366097ce34af2f5863d86d5ccc3f9ec384d8ade4b60ccc8124c7fc88664f1afd2b0962fc8775bf"
        },
        {
          "alg": "SHA3-256",
          "content": "4b4f08ad7606a3ac62997779484919a302267b26d26ee19125f8a7eea60e8a71"
        },
        {
          "alg": "SHA3-512",
          "content": "65c6845ebae981cb81b61107707ced39f5b377dae970b47606ef482aaf10e3729def0da40d9377c43abbfb483a5ceae039b0d51c129c50a6d36ad351a5d6b01e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
      "externalReferences": [
        {
          "url": "http://jspecify.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/jspecify/jspecify/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@3.1.1?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.eclipse.microprofile.config",
      "name": "microprofile-config-api",
      "version": "3.1.1",
      "description": "MicroProfile Config :: API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "22af9d6a9821440e2f3c5d8831816cea"
        },
        {
          "alg": "SHA-1",
          "content": "448885d7505256a6b21c578f5867c6a6f5706c32"
        },
        {
          "alg": "SHA-256",
          "content": "0d4eaa7e17730e153b1e0613104a989af7d7a0d4ba4d19c84c71862bff993773"
        },
        {
          "alg": "SHA-512",
          "content": "a3c70968b9723cfc13bcfa602fd7e56afdb2da684f865c546488cb79b050c9c3fdbe18138de561b6fcb308e3b8762cd8fe2bc53f3b22c29b0ee7faa8715bd0b6"
        },
        {
          "alg": "SHA-384",
          "content": "082cf193b5f1d2a9a477348bb94e43cf9c54f900791820240ae5496aacce205039866e95b7650eee38755f69dd823979"
        },
        {
          "alg": "SHA3-384",
          "content": "555999b1fc72bcf324b818e0ab1c83b982541de4dfbd313552069ced8367111de1c8665615d3a701a5d0478fa5442de2"
        },
        {
          "alg": "SHA3-256",
          "content": "2a1cbb68a81065b657699fc4ff7caedc30d3b55a3c0901057bb9084f24eff2db"
        },
        {
          "alg": "SHA3-512",
          "content": "c5f590d1c46457e8288a45b18494f5d7601a8de88755811b630b0ed5088c5ff06b1ea87318a2c1184218ec8c4391dc5288b825f1a949c1b1003c739c390694a9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@3.1.1?type=jar",
      "externalReferences": [
        {
          "url": "https://microprofile.io/project/eclipse/microprofile-config/microprofile-config-api",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.org/publish/publish-maven/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse/microprofile-config/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse/microprofile-config/microprofile-config-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/cache-provider-database@5.0.4?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "cache-provider-database",
      "version": "5.0.4",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "bb89bee7a1e71c2067bccae8ee896e1e"
        },
        {
          "alg": "SHA-1",
          "content": "6b5b14195bbd6c4d056b124c2ef04456bbad89be"
        },
        {
          "alg": "SHA-256",
          "content": "2adc770843812e5aa7c0ce2f7f5b2b1c094a2eab824a9fb88357eaad0f2b2f52"
        },
        {
          "alg": "SHA-512",
          "content": "bd8cd262b0291ca80dc52a6f2a8db0208a0ec9fb834f41800a9ad82209fd4a8e9c24cd362e03c4854e274cb4f9d5fd7ef7ca8a668c4f62e23da3eec6fb99e528"
        },
        {
          "alg": "SHA-384",
          "content": "62b5e30d1be179dd3b7f53ac064e6793e63495e326d6919c2c95b7ca9415d5b68a5108a738616a32ed0aa88786a0ca7f"
        },
        {
          "alg": "SHA3-384",
          "content": "0df8e88b3ca9545ec5f0723c7603c4bdb7421ec465ce065475a645a4b7291ab6b10c7568c8494f125ff1b1a326855cc6"
        },
        {
          "alg": "SHA3-256",
          "content": "08eac55a87a03489089489c60abcde7f68d6ec97b8b0f08e2be0ea88f7811ef0"
        },
        {
          "alg": "SHA3-512",
          "content": "7f7c5e9bb1f58eb20d2b05e2e5d05aa84213175d1564685ceb104ab79f311453ff82bef0de572c01bbb7d62fdd346f85183d47d4c7ae0de137f00f416ac9ec0b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/cache-provider-database@5.0.4?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/cache-parent/cache-provider-database/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/cache-parent/cache-provider-database",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/common-datasource@5.0.4?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "common-datasource",
      "version": "5.0.4",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f71a32e7dda4472020d7134412c32c96"
        },
        {
          "alg": "SHA-1",
          "content": "9588a543fd3dee69bb5d07e7ed92262ff5537188"
        },
        {
          "alg": "SHA-256",
          "content": "a10489196d0d5fee69f87d1fee0e8c87dbc6ae73bd130458f453e38e9b888863"
        },
        {
          "alg": "SHA-512",
          "content": "1d36660630d23b4eb1e0ba2ef903d8a6dd3375b310b4eda71b8ba687d95d5ff7b399d8ded3ee01031bf7b053ee7d46c3d20a46b7dcc6b317279039e4a77fdfa1"
        },
        {
          "alg": "SHA-384",
          "content": "6fdc96a58e0f0afe43b03d2be9e8acc3fbb2c18209e25abd917914a8c86be7232dd5388a53061f45a768e5805c590498"
        },
        {
          "alg": "SHA3-384",
          "content": "15f4fd0524832d300e22addf4ed0a75ceeecd94ae8e9643b4c8c143fe4870f86a81527faf2ce59f85b2a7d7ce6c8d8b6"
        },
        {
          "alg": "SHA3-256",
          "content": "0cd5585c5fd8e67a07926d92fb8662d45d798f2484ff49bb6708d899f70dafc5"
        },
        {
          "alg": "SHA3-512",
          "content": "1a3b7e04c6d1bdf4b487beec925f96bac1a5ee9b2740898eb58111fde58d0214e2f9b851f201837e4fa0e69109b0b09c355473dc55ec87696a92bc33f8c2de69"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/common-datasource@5.0.4?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/common-parent/common-datasource/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/common-parent/common-datasource",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/common-health@5.0.4?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "common-health",
      "version": "5.0.4",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "cfe5fdf8404dc9bb27484f060ede381c"
        },
        {
          "alg": "SHA-1",
          "content": "7847d52e916cc9532cf426463f9bb0349065da5f"
        },
        {
          "alg": "SHA-256",
          "content": "cecdab4513c85891f0d36fe6f372fe7cc262273ebf3276ca790b19eb603f37b0"
        },
        {
          "alg": "SHA-512",
          "content": "8d550859dd2d2f50ab8a524aa455ecc460e7de4957da60ebbcf9ba88c18b7aebdd6bbef511ddbe733b07ec809751c19d6c0e26484e7f4768e8c7fe593205046d"
        },
        {
          "alg": "SHA-384",
          "content": "48758d1d8619762d3e12e458a1b93eb6ba07b329d5ddd72c2b1b93e46caa9c33e9e7624fc733df9f5a978dd451d4f462"
        },
        {
          "alg": "SHA3-384",
          "content": "9dd750b9810fc0ce3df0814f4550694ace84e84172624d6c941505c9c15be0081ee42a5e033753681675b8d5e6bb4041"
        },
        {
          "alg": "SHA3-256",
          "content": "f0ed43edd3a2609b86924d9b66b073a81fb85d8a8a104390190cec0728612617"
        },
        {
          "alg": "SHA3-512",
          "content": "178587f6772d4c83bed8020be55ba33876f47c34fbe16d5c7269dce7f9c8880b6ffcce4102729ee2b372ebd300a489dad7114e02e53166d2855d746ce9f4541f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/common-health@5.0.4?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/common-parent/common-health/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/common-parent/common-health",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.smallrye.config/smallrye-config-core@3.18.1?type=jar",
      "group": "io.smallrye.config",
      "name": "smallrye-config-core",
      "version": "3.18.1",
      "description": "SmallRye Parent POM",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0f5bfa46a72105e20c3e777eff1b0f22"
        },
        {
          "alg": "SHA-1",
          "content": "1071d0ee1267745ac62662569615dc93669ae5e3"
        },
        {
          "alg": "SHA-256",
          "content": "ba63550bb33a4f3569740cbfe3dd77f7ff582a2cd7cb32138620212bdfbea013"
        },
        {
          "alg": "SHA-512",
          "content": "efa5594c836e67c16036ba5a04410fcc2d40650cf02edb9963114e58c47a00e0a9438013f3389f3bcba030673440b757a1371c4e845957489ac252f700d7faba"
        },
        {
          "alg": "SHA-384",
          "content": "2dbf2a8e3a264c5206bc256e5fd5b026f2fe984ff9db02114d9e656892a64a573f56963994e3c30c7e3d26020c6c4e2a"
        },
        {
          "alg": "SHA3-384",
          "content": "6c9282846ad5ef9b41303b66208b16357468c54b68a59ded31eb28d5dd132f6020ac22bdc6fbf7abeee31098998bdc92"
        },
        {
          "alg": "SHA3-256",
          "content": "4e1240ff79a07323f76d151df1b19aa6bb2b9b918177ba6070e50d585cbb0c3e"
        },
        {
          "alg": "SHA3-512",
          "content": "7dd2ec0707ff5d5fbfe8f626734acbbd957b9a54a668d3161b2d4ec6cbc7b4fc1f41b5e45f0f8e5cdc1b2bfe2c46ff4f9c371705ddae72dd7ffc0ddcd5c792c0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.smallrye.config/smallrye-config-core@3.18.1?type=jar",
      "externalReferences": [
        {
          "url": "https://smallrye.io",
          "type": "website"
        },
        {
          "url": "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/smallrye/smallrye-config/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/smallrye/smallrye-config/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-annotation@2.19.0?type=jar",
      "group": "io.smallrye.common",
      "name": "smallrye-common-annotation",
      "version": "2.19.0",
      "description": "Common utilities for SmallRye",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "75e4807925300b3499ea65a8cf999105"
        },
        {
          "alg": "SHA-1",
          "content": "bc18f1c66a7977203fcbbe38e61114b2949ba0c4"
        },
        {
          "alg": "SHA-256",
          "content": "a29ef5d8ed9e306ed683a4d680bb1c03f89c41196aa0a41c95eb0dda8e81e346"
        },
        {
          "alg": "SHA-512",
          "content": "7c6b0accd59de04b48316141cf7a6703007a9029e8ca67309a9d95a2ca920b85930d1b6762eadae9b4c30839b15de0d7116889ce9c069efc1521199b9fe434e0"
        },
        {
          "alg": "SHA-384",
          "content": "6c2236d464de6051e7b6260248a8b2792d4d6d3cf3aa6740663aeab73b181200a5339501c1da6e34004415399bd0bf0a"
        },
        {
          "alg": "SHA3-384",
          "content": "c5428e4c4169a9b5d91649f2cc83e4328f75e8a06c7539507af2e9d752889ef7abaeb87a4e1360eb9ee9ec70e2746970"
        },
        {
          "alg": "SHA3-256",
          "content": "d83cc291847478a35961bba0762231190607c11dc56d7ed307e93d10b131ae9f"
        },
        {
          "alg": "SHA3-512",
          "content": "529880ea8ad844e460d25c30ee64db516bdea9902c3027c63f4ee460a26e6450eec9cc5101ef59cce39a054349c6df121180d52fe3e936bdb290ce61831a8dc9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.smallrye.common/smallrye-common-annotation@2.19.0?type=jar",
      "externalReferences": [
        {
          "url": "http://smallrye.io",
          "type": "website"
        },
        {
          "url": "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/smallrye/smallrye-common/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/smallrye/smallrye-common/smallrye-common-annotation/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-expression@2.19.0?type=jar",
      "group": "io.smallrye.common",
      "name": "smallrye-common-expression",
      "version": "2.19.0",
      "description": "Common utilities for SmallRye",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c6d5184394bfbedb4d0aba7b94cf92ce"
        },
        {
          "alg": "SHA-1",
          "content": "781e6d49a54d39cc7215b4b271b922031f2b84bf"
        },
        {
          "alg": "SHA-256",
          "content": "27863f0441acd0b003536f63ddfd40f9f8c02f16d97d1fd1e9f616d683541aaa"
        },
        {
          "alg": "SHA-512",
          "content": "a0b249dff4662cf682a4dc39a16dd29ef2113e303f0bc6f2ca988a3f5d6972b6e685635bd5a0d02038aaac602cb04a4ae8c566b87c7078a56539d1d3f8fbf0de"
        },
        {
          "alg": "SHA-384",
          "content": "0454ee7b96db99269caf6fb699a0227ee4c5869f61a79679794f58b5b6f42929d4d9eba32c4352ccea6b2f6dc486b20f"
        },
        {
          "alg": "SHA3-384",
          "content": "5ba63326e0e3b36fbf27c764209fab43de431d0e4471e2b1ca77779573cb411a5c47af9dbf8bcf1fb23f0b4a5a6eecff"
        },
        {
          "alg": "SHA3-256",
          "content": "96b44f3e4cfaed3e857982e982a242629df21860ebf8b204a0f62b2d2c88075f"
        },
        {
          "alg": "SHA3-512",
          "content": "0f17f33cf785590a595504fbf98df5e7805706e9afbe09aa86f68652c6b7d3c441a146cd6da3441d8f8444f81fdf70aef3a7e815d3a9983faae9073070b7143f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.smallrye.common/smallrye-common-expression@2.19.0?type=jar",
      "externalReferences": [
        {
          "url": "http://smallrye.io",
          "type": "website"
        },
        {
          "url": "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/smallrye/smallrye-common/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/smallrye/smallrye-common/smallrye-common-expression/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-function@2.19.0?type=jar",
      "group": "io.smallrye.common",
      "name": "smallrye-common-function",
      "version": "2.19.0",
      "description": "Common utilities for SmallRye",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "bcae170280346cf25af39843adfd9989"
        },
        {
          "alg": "SHA-1",
          "content": "d4abb656ee5c52437f77834a903c60441092bd91"
        },
        {
          "alg": "SHA-256",
          "content": "c78f2661e82821d3ac7153b88bec4aaec375e041aae261832e5e5f4ac17f4800"
        },
        {
          "alg": "SHA-512",
          "content": "7572dcdeb1ee89ef9b00d0ac679115c80c5d1d1a5c3c2806a97fd3f78db9065b4c3bdfa762ef299b07782b07ee0f56a364dc64164be6788c57e470d04024fc17"
        },
        {
          "alg": "SHA-384",
          "content": "65fad65e6f542c505f535a05899ab4b618f4e4bb2ee1362fae93b189cb7931a374d001a78ed94a0636056f6e0756b1ac"
        },
        {
          "alg": "SHA3-384",
          "content": "496622bd1bb85cccddd5cc5e0d929a4baa2755d4f2cf71bd52e61200abde2baf61b71b1c73412ae6c19b762df0a69a39"
        },
        {
          "alg": "SHA3-256",
          "content": "321c833c8a6cc53d9250aefacf51e42913f67c6e340be1d0ba0c6d785a39cc63"
        },
        {
          "alg": "SHA3-512",
          "content": "5de273e5d59200b9a731d491ff1f8009bf1055b16d1927d7a0a1574ea7a1b4f8331f5975fdc6907b6e9eaa2900f26c32d23c493a622f73e6160f84d093a23612"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.smallrye.common/smallrye-common-function@2.19.0?type=jar",
      "externalReferences": [
        {
          "url": "http://smallrye.io",
          "type": "website"
        },
        {
          "url": "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/smallrye/smallrye-common/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/smallrye/smallrye-common/smallrye-common-function/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-constraint@2.19.0?type=jar",
      "group": "io.smallrye.common",
      "name": "smallrye-common-constraint",
      "version": "2.19.0",
      "description": "Common utilities for SmallRye",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "326328d8b24edb48ff762cce4c71942a"
        },
        {
          "alg": "SHA-1",
          "content": "2e1f3113b60553cfc180b16ce02a976907b7e818"
        },
        {
          "alg": "SHA-256",
          "content": "4454a2f32caeadb47cf6f0565c667f64c21facbee959cf15bcfc8ec8755c471a"
        },
        {
          "alg": "SHA-512",
          "content": "6ecbe8b24fd0bd3f08cc591c3a765007e49cb23baf4d60939007621fa0db627acd8babe62c85e3db323fefa8e107c5d522c56e16898f32e8f8eb46cff21eada9"
        },
        {
          "alg": "SHA-384",
          "content": "130bf3094d5a264e9d4bab18106449eee72e7756f8745c30237fd0d65ca358beb5f9730426eb041b90866f7babab6411"
        },
        {
          "alg": "SHA3-384",
          "content": "9c304f458c676d67b4159f58157a654de4e1023b08d59123fe1cdf2a1445f521624fc6e9fdae6c52e45c914930dd90a8"
        },
        {
          "alg": "SHA3-256",
          "content": "43134cee4dd1c4412e807147ebe976aea0bb4a48f80644d98e18f1cbf417abb8"
        },
        {
          "alg": "SHA3-512",
          "content": "a8edaab629fe9b2e5ea33690503e0cfa56a001dfbca41c63d518813760ed01b52ad20b5657ef7b568ae371ef76af19beead3c137a911d479297a35dcd28a03e8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.smallrye.common/smallrye-common-constraint@2.19.0?type=jar",
      "externalReferences": [
        {
          "url": "http://smallrye.io",
          "type": "website"
        },
        {
          "url": "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/smallrye/smallrye-common/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/smallrye/smallrye-common/smallrye-common-constraint/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-classloader@2.19.0?type=jar",
      "group": "io.smallrye.common",
      "name": "smallrye-common-classloader",
      "version": "2.19.0",
      "description": "Common utilities for SmallRye",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0aed5e408e1582e7701c296fb2ee2329"
        },
        {
          "alg": "SHA-1",
          "content": "9590dd6833fb3ef3ac3a06546197813be85ba177"
        },
        {
          "alg": "SHA-256",
          "content": "868c3fcb738281b2b360ba706b9074b674ee6c697d971a52bd77f4099ba2fd5c"
        },
        {
          "alg": "SHA-512",
          "content": "c1b6a5ff39773d66d7196b777822938c3a29e814591cd7b9d92156074e3d979b99fcd9f7f7d94e4ef5564db3b0ff864176ac65e5194a8427d7fcdbd8879e455d"
        },
        {
          "alg": "SHA-384",
          "content": "075092701b4b48759da99d1b712b43582f091b724767d0af96d4e2adabe94cb548af2ef1e1f3036035728494871f60c8"
        },
        {
          "alg": "SHA3-384",
          "content": "39ffafdc354294803df939e3634cef90749f00e8a890eed72bcec0d1a2a5ea01c2187bf04356c09757f8a788bef1e0c3"
        },
        {
          "alg": "SHA3-256",
          "content": "1c792f65ab875ddd5ee91fdea18a02fd2f1c3b4a8997a5b5583937facf767b49"
        },
        {
          "alg": "SHA3-512",
          "content": "2de229e12178c844333c34c6dd4e62a0502c84d48e74f2d53e6113b5f1dedc234227f36e2683b70626a59a3fa3c4f617813798083cf099aa73d768babde7fadb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.smallrye.common/smallrye-common-classloader@2.19.0?type=jar",
      "externalReferences": [
        {
          "url": "http://smallrye.io",
          "type": "website"
        },
        {
          "url": "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/smallrye/smallrye-common/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/smallrye/smallrye-common/smallrye-common-classloader/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.ow2.asm/asm@9.10.1?type=jar",
      "publisher": "OW2",
      "group": "org.ow2.asm",
      "name": "asm",
      "version": "9.10.1",
      "description": "ASM, a very small and fast Java bytecode manipulation framework",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9cb72080438acf27f2607002e1444a7b"
        },
        {
          "alg": "SHA-1",
          "content": "ada2141c0cc52ee8f5c48cd5fa4ce0e794f22236"
        },
        {
          "alg": "SHA-256",
          "content": "ed825d10ab1399c8c0cb669e688cf0c8c82629b4c8399b58352b68e92ca10fcb"
        },
        {
          "alg": "SHA-512",
          "content": "8db6efa37d4d569bf2b95d90931b8064f87ed928d20bbf8d8e7fa6182e9a11d32e6a2cc034a3d173a38ee70ce2ea9f20f52f9d8730d9401d2bc6060674c18928"
        },
        {
          "alg": "SHA-384",
          "content": "451863dca686c04151bef6e632df2ee3c8c67ca97d191cdee3d7c4f9350f8a096011cadc1c79b4ba012b3f2179ef2bbe"
        },
        {
          "alg": "SHA3-384",
          "content": "faa7b5fa7a5fefaae6d320ad43c09d588d6deecd41b2a3ebec36a4143a2b90373b2d01936c0733413a01f451c9740bc8"
        },
        {
          "alg": "SHA3-256",
          "content": "e37aa694329cbbfcd0a81a735270166386aceff3797af2c391fd8484baa5a576"
        },
        {
          "alg": "SHA3-512",
          "content": "1d660ebc24411c38b0928b543f402e7cb09747b7c522047f36b57865acfb83d25c9348c1d70af78e3d26e1ad220f10055d63eeb2965f7b6966cb2fbd29b47671"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.ow2.asm/asm@9.10.1?type=jar",
      "externalReferences": [
        {
          "url": "http://asm.ow2.io/",
          "type": "website"
        },
        {
          "url": "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail.ow2.org/wws/arc/asm/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.smallrye.config/smallrye-config-common@3.18.1?type=jar",
      "group": "io.smallrye.config",
      "name": "smallrye-config-common",
      "version": "3.18.1",
      "description": "SmallRye Parent POM",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "64a2e1f42e657f16755f1a2525327670"
        },
        {
          "alg": "SHA-1",
          "content": "c7062935fe362fb68d806e71f4748cd701c0ae3a"
        },
        {
          "alg": "SHA-256",
          "content": "c5e414032d79ae63c1314f77ca319617d9e6a1bc12d7c2fea411c793c193fa11"
        },
        {
          "alg": "SHA-512",
          "content": "4cc9379419a303e1f52aad048e09de6c8195bee865739805f0f1eb25821f4fce02ecff863b74b9aca29dc289517356f161f569d42c0d5e8c2314019edd10d1f5"
        },
        {
          "alg": "SHA-384",
          "content": "e9bcc856e03f1febed109757db411bf40c81ba9e1466ec182097a072ad59df23f317b4312e1ce74680ac80f2c84da991"
        },
        {
          "alg": "SHA3-384",
          "content": "915cfaf70b3437ad6db065096ef2dce7129347221faf1ac79aa403adc5049ce725ace56d0e9b2960baf730bf475305a6"
        },
        {
          "alg": "SHA3-256",
          "content": "fdf102e9f1670f8e4975594e5c2de54d66d7a86ec77fb3172f2a2df85c498b7f"
        },
        {
          "alg": "SHA3-512",
          "content": "8d9030755c6b21facb72387539ef920d009ebc00e0765aecf411d87d95f65036fffbe2e1d5b8b2e7996648fa46efd63b0c7d2c24c58513295781234f38b5433f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.smallrye.config/smallrye-config-common@3.18.1?type=jar",
      "externalReferences": [
        {
          "url": "https://smallrye.io",
          "type": "website"
        },
        {
          "url": "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/smallrye/smallrye-config/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/smallrye/smallrye-config/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.micrometer/micrometer-core@1.17.0?type=jar",
      "group": "io.micrometer",
      "name": "micrometer-core",
      "version": "1.17.0",
      "description": "Core module of Micrometer containing instrumentation API and implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "221613de705d9cce6eeca09bedd1e9cc"
        },
        {
          "alg": "SHA-1",
          "content": "b71d95b2819c5959bedf186e9a667e932b573dad"
        },
        {
          "alg": "SHA-256",
          "content": "73503e701a377fafeaf33b71b9b8910a8d7884cbba88ab27971b33b3753b65aa"
        },
        {
          "alg": "SHA-512",
          "content": "609c77e5e46e517f05a4ecc873ef108441afa1696f1a7d0c9e5341406fe30a15f400d4e5cdd72e846d0732ea99d8ad28ffc07b33e2d2904f79f64228357dbd88"
        },
        {
          "alg": "SHA-384",
          "content": "614dd0fbea42221432b42a1632e1a2c6bdb9939804b456962cbe467bcdfb6193a118c7ef1b978e932863e0337ebfd1c3"
        },
        {
          "alg": "SHA3-384",
          "content": "0ae54876d170882f5bdc07c153b66e422167db6b6deb25f3d73dbf144f65ba3f9174a7eaebada404e636a2f8342b710c"
        },
        {
          "alg": "SHA3-256",
          "content": "015eb976d1002780e496bd114b0fd5c2a4b0115ed770cf64979b735435295519"
        },
        {
          "alg": "SHA3-512",
          "content": "17403d38fd309c5319775d1987bc17da3442da2743eb3c1c79f3291e47cbec2cc5cbe9604d82563c89f05440a3fe15d97d6acd369448c34bf581a01db7d8d490"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.micrometer/micrometer-core@1.17.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/micrometer-metrics/micrometer",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.micrometer/micrometer-commons@1.17.0?type=jar",
      "group": "io.micrometer",
      "name": "micrometer-commons",
      "version": "1.17.0",
      "description": "Module containing common code",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "97111e30ab33f8764b969caf00bfc43e"
        },
        {
          "alg": "SHA-1",
          "content": "2edbb561cdd2b2777fbcd83aa9f2204ebabf592b"
        },
        {
          "alg": "SHA-256",
          "content": "03919dc71e2417ec4b5c254c4ba924963c972e124190f73cdcb68ed51c6eede6"
        },
        {
          "alg": "SHA-512",
          "content": "1cfd7911431ad9448d84e6068b2daa340a8c09a058217883d510a930be0745529cc65e0f2aa0fa5d719eb949885e7dabf09b5fdf2e6f9fd928a5f8f5b0ef346e"
        },
        {
          "alg": "SHA-384",
          "content": "38655bfdaf4e8ee2ef11d62a722f186107be71347cebcd00beb947b366d246052bb8838dd2b4ad829f46c6e0f1228c44"
        },
        {
          "alg": "SHA3-384",
          "content": "0d81ce368a71d67a31cc83562a23f9a4c7927173c7362aee0873f890a2a18a47387181f15b5d113095d781962b410f83"
        },
        {
          "alg": "SHA3-256",
          "content": "16608e9e146eb9c326a5893f626ea3b1a19d30c7ad3472b62ee2e13161198819"
        },
        {
          "alg": "SHA3-512",
          "content": "c47016c605f3aa7dcf8f6d631ca596eb3ca85071d0932b0cdb09be624f9daf0df5e63e6376bb86e5f00b5065c800c574abe7ccaee709fb69753892398ee931b9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.micrometer/micrometer-commons@1.17.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/micrometer-metrics/micrometer",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.hdrhistogram/HdrHistogram@2.2.2?type=jar",
      "group": "org.hdrhistogram",
      "name": "HdrHistogram",
      "version": "2.2.2",
      "description": "HdrHistogram supports the recording and analyzing sampled data value counts across a configurable integer value range with configurable value precision within the range. Value precision is expressed as the number of significant digits in the value recording, and provides control over value quantization behavior across the value range and the subsequent value resolution at any given level.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "41f807bf0c681d6f692c408a6e217eaf"
        },
        {
          "alg": "SHA-1",
          "content": "7959933ebcc0f05b2eaa5af0a0c8689fa257b15c"
        },
        {
          "alg": "SHA-256",
          "content": "22d1d4316c4ec13a68b559e98c8256d69071593731da96136640f864fa14fad8"
        },
        {
          "alg": "SHA-512",
          "content": "fb28f1bc3a3d4430474ea87a0833d56dc3d1303c98918122d93c630ebdb0d1323bbf8feb9ffdc7dddd1908105858e6959bdfdd3889ca5803cecde93a974ab6b7"
        },
        {
          "alg": "SHA-384",
          "content": "fa19cf4674dee37cb5114689cccafeadbb7989e17768b814cb431806a0f69c7b37093b6e100430bd571a45d87a319758"
        },
        {
          "alg": "SHA3-384",
          "content": "fc0a9e2e5284bc2f911c5e2fdf9eec6cfa1973b6cfb1362822580d6c8768c73ebd1c8056b6e4e5302940f6b5ec4c74b7"
        },
        {
          "alg": "SHA3-256",
          "content": "79af553410abf4d3bbfa64374dfdf8777ce49d28b4c67a615e6d4a78e97d0498"
        },
        {
          "alg": "SHA3-512",
          "content": "5b2b1795ed1ea55b5a3566bb1f4170a4367b7893256809fdb428df9405857c8454196badf3681abaf536260ed6f293c096a3f3c9d72f0f04830e8fe71d49410a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "CC0-1.0"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.hdrhistogram/HdrHistogram@2.2.2?type=jar",
      "externalReferences": [
        {
          "url": "http://hdrhistogram.github.io/HdrHistogram/",
          "type": "website"
        },
        {
          "url": "https://github.com/HdrHistogram/HdrHistogram/issues",
          "type": "issue-tracker"
        },
        {
          "url": "scm:git:git://github.com/HdrHistogram/HdrHistogram.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
      "publisher": "QOS.ch",
      "group": "org.slf4j",
      "name": "slf4j-api",
      "version": "2.0.18",
      "description": "The slf4j API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "fe2837bd49bfb76657419002fed20ca9"
        },
        {
          "alg": "SHA-1",
          "content": "78a9e7a37cd6360e0b818e86341b24123d28d4df"
        },
        {
          "alg": "SHA-256",
          "content": "44508fd1576500688c790b190acdd16fec4f8c79a3e0b900afd70503cf055f55"
        },
        {
          "alg": "SHA-512",
          "content": "539288fa0c96cea750d11293dbed4c562630587aa7cd88bbf76ad04390d1c40636506da48faa6453090c7e9baa6b690b9fbded55a7e2b4a91547eeea011f971a"
        },
        {
          "alg": "SHA-384",
          "content": "917885c7812289f5178f68e3c421153d55abd7fe5cc9a071ffdc5de48b7afc79c352c667a20a3ad0f3b4660952932513"
        },
        {
          "alg": "SHA3-384",
          "content": "d6898eb5dd2e5caa2185c6cd2804735802b3848a3041b82ef7faa7904b3eaf5ac382d43a70a71e22b77a929e10ae2aaf"
        },
        {
          "alg": "SHA3-256",
          "content": "6bbc9103bec05ef3280dd895d8c6267ccf8b940df03c9f5145cfaa77f6e9a41a"
        },
        {
          "alg": "SHA3-512",
          "content": "e2913e96e4b1c94e7cb5c46828d1afe68c5a7248293d5c16aaa9ab462ee8e0ff97dd3d1155d2a64f66ccd9bc1ac0c83476cc886b675004b2f84aaaf50e2b2af2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl": "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
      "externalReferences": [
        {
          "url": "http://www.slf4j.org",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/qos-ch/slf4j/slf4j-parent/slf4j-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/common-init@5.0.4?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "common-init",
      "version": "5.0.4",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b5fe003d93acf28a28a374267d27eae0"
        },
        {
          "alg": "SHA-1",
          "content": "45bee087f85d9d188c91ff16ac320f5f75738932"
        },
        {
          "alg": "SHA-256",
          "content": "6ea49fd21bdf329ea286b8d2e7c7fb0faa8c4fb07adef7399578324e580171e0"
        },
        {
          "alg": "SHA-512",
          "content": "87e65c3dcffb2a7357b3a7eb13cb5a9783319c35d004b6cc27f141cb30c70e7bd6256b6237338f6f0c50a6789a1b66ad884dac0eec4873ae6009e12a7e035d2f"
        },
        {
          "alg": "SHA-384",
          "content": "746c01ad1fc2a63e1d061eed53c5d02bb504ef3130fd6c4624e379ec03c123d9b1aa83afc569d209a8777c7fc5dd4d87"
        },
        {
          "alg": "SHA3-384",
          "content": "ff953430c12229ba4d41de80367c564fd5b68d3c40c0dafb52231eaeccba39d4efa4b2c51559bd5ceacfe602494e2f7c"
        },
        {
          "alg": "SHA3-256",
          "content": "d01d16d2f8909eba2469c240517a8852c6eb7e86eec8e8ac522966f2ac5de3c3"
        },
        {
          "alg": "SHA3-512",
          "content": "8017e23e731fd3d2fb1a3935dd11a6661e0cac5716b95b438be4a05804ace6d5037214811f30ebc9243b0c9a013203d09b8e7fdd873c0731778391697772ba29"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/common-init@5.0.4?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/common-parent/common-init/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/common-parent/common-init",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.microprofile.health/microprofile-health-api@4.0.1?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.eclipse.microprofile.health",
      "name": "microprofile-health-api",
      "version": "4.0.1",
      "description": "MicroProfile Health :: API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1d023ee3b9b8545318fdeebe98d66d74"
        },
        {
          "alg": "SHA-1",
          "content": "395ea08f4f636696fb23b84a18ba81430cfebe7c"
        },
        {
          "alg": "SHA-256",
          "content": "b89ca4b6c4f7a044250d31c0673f6bc221e40fd669fc5871dbad5e5a0769ca47"
        },
        {
          "alg": "SHA-512",
          "content": "87ea9c7443bf0dbe0a3d38f3f7fd5287e24440f6285fcafdaade6312380fcce802bfe083646669207d11d36b660f05a6ef6e27ab03f3093905821d44024e5764"
        },
        {
          "alg": "SHA-384",
          "content": "4ddaceabea79f53c70fd17c6140453a19d4a9dfc1c3e8910449ce32ddef4b9023dbccbd6dbfbad49b50316389df25c8c"
        },
        {
          "alg": "SHA3-384",
          "content": "893eef36f7b7edf98be7835597d06c81055887f7a59ea70550274032a5b7ebb1822600a185d626db36d38160d0632e6f"
        },
        {
          "alg": "SHA3-256",
          "content": "94ea43765310e56d62888eafd32d4595c1e8d91a4183ad3455f51f1b52a6d2eb"
        },
        {
          "alg": "SHA3-512",
          "content": "79ba68099a777dbd5e596d9697358bc122c53cd52cb5ba5ce3a2be1086abb1f45c2f7289540f1693c1950efe6189ff8f57a91f1d53915be3fa5abbb22597d15a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.microprofile.health/microprofile-health-api@4.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://microprofile.io/project/eclipse/microprofile-health/microprofile-health-api",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse/microprofile-health/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse/microprofile-health/microprofile-health-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/common-pagination@5.0.4?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "common-pagination",
      "version": "5.0.4",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "59a41d2e0a922d77f25f67707d8c7010"
        },
        {
          "alg": "SHA-1",
          "content": "5d879faf59754e7768eb319f6a8b264a89122b92"
        },
        {
          "alg": "SHA-256",
          "content": "42510f71d3388939564a2fb1135ae52d2bd37e9c92a37c4f949f8401671596b1"
        },
        {
          "alg": "SHA-512",
          "content": "bb99addaf9ca6a092c4894a468e7d77925e1a1c7b0a6cb07ea4b12d15f754ee404b38faf3a138d41b8223d4edba15e51fd2935c4ab4a1c0622c13b64c4d0f086"
        },
        {
          "alg": "SHA-384",
          "content": "f173c28070390d43cc616b68bf8eef28b1256a7459d2fc99e28e54b9d3f6292b6fa604e9485c83404a68bc8146505c15"
        },
        {
          "alg": "SHA3-384",
          "content": "44229b4b872a24d4ef7d06bf94b657855d108d5c9dbffd505aa631c061bbc8640c678da56080b45c5ee5fdd952ddbf20"
        },
        {
          "alg": "SHA3-256",
          "content": "f6979f69feb5115211432b7835fbf86a850385780ea2265bc3700e67bd8e9759"
        },
        {
          "alg": "SHA3-512",
          "content": "f119f216f6ec327fe35fda96521d124adc59d7157bcdbfb3c4a8cdac317ceaac2377a97d69dd3b7fa4a97f3c45e875a7c3272954d1aa50b27d888bf8397f14b3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/common-pagination@5.0.4?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/common-parent/common-pagination/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/common-parent/common-pagination",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-cbor@2.22.1?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.dataformat",
      "name": "jackson-dataformat-cbor",
      "version": "2.22.1",
      "description": "Support for reading and writing Concise Binary Object Representation ([CBOR](https://www.rfc-editor.org/info/rfc7049) encoded data using Jackson abstractions (streaming API, data binding, tree model)",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "693d67dc1f218c9275b2d94d8ccec410"
        },
        {
          "alg": "SHA-1",
          "content": "f1a9be02f8e042ee37441116b31104cec8ec9373"
        },
        {
          "alg": "SHA-256",
          "content": "5c6e49843e46aaeebd3ffc777ad221ac2208f3e36e24c56779ac6fabdfb1d499"
        },
        {
          "alg": "SHA-512",
          "content": "2cf5bd689b673212abdd70c14f7a44b25439c1a60a6020e86edd3bb66a7c495a8f135916405bb5051c084db4821b7a30fa1d25de07266f5584fcc91cd4677674"
        },
        {
          "alg": "SHA-384",
          "content": "6c610c1f45ea8d85fe14101ca90b77d58568a9ada1c5bd8e54e6c1c9d6832f332e2266dd54eea7b9a87589bda07d39a3"
        },
        {
          "alg": "SHA3-384",
          "content": "cdb1dd5f15728a886bf6ece145d2d5dfc6b72fba0dc47e63e084ea0c85ff71c686dc52c91491f4819f2a7854c2981fbb"
        },
        {
          "alg": "SHA3-256",
          "content": "3983bb43b5c4241073a5ef237a056d5a3bd741cab49c6c0b1ddf768e3838fa6e"
        },
        {
          "alg": "SHA3-512",
          "content": "dcc643bceac807674aaf2de3ca58a828375caba81ab7de9fabfdf039ee9a96c5b21092911021d3822f4919677a7d6fd3d860f49a35b2b5b88b4796f40881ff3e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-cbor@2.22.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-dataformats-binary",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-dataformats-binary/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-dataformats-binary/jackson-dataformat-cbor",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/datanucleus-plugin@5.0.4?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "datanucleus-plugin",
      "version": "5.0.4",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f55c52a99548c0a16438cc4df0f7bf38"
        },
        {
          "alg": "SHA-1",
          "content": "b6acdd3f0aec4acc748dcf294c3cb03318395e7a"
        },
        {
          "alg": "SHA-256",
          "content": "dd64a76e1643110128c5287fcf1c200f8365e964bfa2ff2d4e9b0bd330b91a37"
        },
        {
          "alg": "SHA-512",
          "content": "dd22274d60727316c95fa32a108f74fc1bf45686afc545cae464e2f872b9ce099dcfe72a9e2b9fa0bdf2c0a6adae790c82934ff0fc862f446f0043456964e569"
        },
        {
          "alg": "SHA-384",
          "content": "638d0da137d3a8a3bbd8933632e3831c2a2873ab3da7b98aee87583c07dd99bf96ab5f61311ccd43a76c1f0ddef4b9c5"
        },
        {
          "alg": "SHA3-384",
          "content": "4084ca67776aad27316e009efc96853a18f044f14eccdc8bbf9486e67032948c52084aa6bd14c25d70fb577a8855fcfe"
        },
        {
          "alg": "SHA3-256",
          "content": "631507ab20b53001128a7f49a206cead84d77397bf7d3b2a4cc7b12fd1fb7eec"
        },
        {
          "alg": "SHA3-512",
          "content": "d2fa164e19ee65d1b99589fe0e0680dd763a8d26f3ff1841a1cfe220f2a1663031f66fd45b33ad9574ab245959190b37ec16b42ce8afcbcce71dfb4491a83bc4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/datanucleus-plugin@5.0.4?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/support/datanucleus-plugin-parent/datanucleus-plugin/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/support/datanucleus-plugin-parent/datanucleus-plugin",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.uuid/java-uuid-generator@5.2.0?type=jar",
      "publisher": "FasterXML.com",
      "group": "com.fasterxml.uuid",
      "name": "java-uuid-generator",
      "version": "5.2.0",
      "description": "Java UUID Generator (JUG) is a Java library for generating Universally Unique IDentifiers, UUIDs (see http://en.wikipedia.org/wiki/UUID). It can be used either as a component in a bigger application, or as a standalone command line tool. JUG generates UUIDs according to the IETF UUID draft specification. JUG supports 3 original official UUID generation methods as well as later additions (v6, v7)",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "285019a0ccc0e0a79cdfd2d667f73e26"
        },
        {
          "alg": "SHA-1",
          "content": "3ca5091c87cd327880f09447e62b86b8b93db256"
        },
        {
          "alg": "SHA-256",
          "content": "5724d6a0f27db90d45af884f4520bce581f29eebe21840d07cae22b670bb8ebb"
        },
        {
          "alg": "SHA-512",
          "content": "d1fdaa7adde071beae68363003cadb0ccaa5914cc8fb313f59a18c2b8ed5661551bee9a1f243863f1af506c45d2539bf37fab08ac4dc608bb5bf6a7acaa23362"
        },
        {
          "alg": "SHA-384",
          "content": "c8204e36cd512ef971631145329d8dfecdde1a64aea4a439b93297c24202b7eb1fab410fb5f953f356cc63e34c5cca0e"
        },
        {
          "alg": "SHA3-384",
          "content": "eff84b0cc59804a9c6ab03dc252c1164aa6f07475aa60130ba06b3a0a729a33682bbf06a127ab3993bc2ed7f88ee302a"
        },
        {
          "alg": "SHA3-256",
          "content": "5b299156e5e9eab6fa17995e44b3a20d9e9d904e5e3962b3da02dd9c0dff184a"
        },
        {
          "alg": "SHA3-512",
          "content": "d8448a2458b3d85d0cf16b14bc0f3f00bead80795b97934440f94f72f7cf015ec83136d26a8fc10c6c30e16aa76865fe5b0916a2e7f5b1c00e3031976f8ee826"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.uuid/java-uuid-generator@5.2.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/cowtowncoder/java-uuid-generator",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "http://github.com/cowtowncoder/java-uuid-generator/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/cowtowncoder/java-uuid-generator",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/migration@5.0.4?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "migration",
      "version": "5.0.4",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a389b6f67caaa9acce9b9c99dd8a5300"
        },
        {
          "alg": "SHA-1",
          "content": "9040349cc5aed3843864f4765a4e4191e3debf2d"
        },
        {
          "alg": "SHA-256",
          "content": "5f03124894ac29632c6a111baad3ff631d581e975d0e2b6404a8f70d2fdd3f46"
        },
        {
          "alg": "SHA-512",
          "content": "3fc885d3c1019d3cd86769259ca1c407803c3534b6cf5252ea164a20c01b1062e4db01c646b2dd7008371d88a75b6a6e929039dd0c8374415efc755b4cea029a"
        },
        {
          "alg": "SHA-384",
          "content": "58cf1c2cf15e39f49d273b9f4b14a74f851a01b97b9e8c336f16c75f403c6350f436b21e606bade9246636317848b25c"
        },
        {
          "alg": "SHA3-384",
          "content": "4ecc39864ee54d12227ecd8cd3c3cb417163e297357788e587b5edd8a1de488e949431bdbba80366345daf8aad3ae4f5"
        },
        {
          "alg": "SHA3-256",
          "content": "5ed0b923c04355928fab3be15514def3a11580b661fb5ebf35e9e195dfa1e5d5"
        },
        {
          "alg": "SHA3-512",
          "content": "09ec9ea71857c95dd0950b08d4f94627d3a00e47af36c970f590598bfc6253f22b13376b459cddab245fa562bc88a6548a7f2196fc367a1f6b056297cfcc8e08"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/migration@5.0.4?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/migration/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/migration",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/flyway-support@5.0.4?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "flyway-support",
      "version": "5.0.4",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1aa58795efb2c96c70ae981f54d52fc9"
        },
        {
          "alg": "SHA-1",
          "content": "40f257ec2c5a328e0a869d747646af647aa597a8"
        },
        {
          "alg": "SHA-256",
          "content": "5d723d6cf84e60e6703a63a8a3a8897e919207d910883eb8709f7818ad506e18"
        },
        {
          "alg": "SHA-512",
          "content": "f9c06252778422b014757d10cda545b71904d9e4107a134768c55e1d19fdcea0d7e86c9540eeecbe003d2c878e945409e2495d95545757c4e00f8cff787aa428"
        },
        {
          "alg": "SHA-384",
          "content": "ff6eec28e42cab5a3f94f35953b3680ec369300924fec5406e25da921bd9c94e45b23f2465f2beafe4f8a009e12b0b19"
        },
        {
          "alg": "SHA3-384",
          "content": "300b3e2460d4a446b9159eecceb2c2c081e6c744adadf63c0d0e367b385772f9f89765a878034448132b19bde0a913b1"
        },
        {
          "alg": "SHA3-256",
          "content": "15b50cf21d3c017365877587000526d9c3bfd6e10fd7c811fddb817736c8e5e9"
        },
        {
          "alg": "SHA3-512",
          "content": "0191a070cb6e75f614c6ee86b6877963f445e7017f34d41ee23992f9debda8c2a606a2eb598bf5fd698c76d3907cdecdf65d618a730b0d551c2ebfaa5d8e4321"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/flyway-support@5.0.4?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/support/flyway-support/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/support/flyway-support",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.flywaydb/flyway-core@12.11.0?type=jar",
      "group": "org.flywaydb",
      "name": "flyway-core",
      "version": "12.11.0",
      "description": "Flyway: Database Migrations Made Easy.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "63e450042e1edc448d5a14732e0083c3"
        },
        {
          "alg": "SHA-1",
          "content": "99b145893a0492379b10aae207a7633b0790aa1f"
        },
        {
          "alg": "SHA-256",
          "content": "34c9696e6fd4ebae87ba36e021fa491dfcb853c72e8dbe3e4177da22a1e9eacc"
        },
        {
          "alg": "SHA-512",
          "content": "f236d2e7c8cdfeca3c108e6c79b7878d2b559720648e451b8677eea69e6bcd43cd32dd84882375f16d2e571d1fcd01d14b7b52246ecc9e210cdb4c6cef04d2ee"
        },
        {
          "alg": "SHA-384",
          "content": "2ed566cff12d5355fbf940eb8c90ef0e926752aa4516cad890df440851ce54f83344a1ad1b858362fea3fab97cbcbff0"
        },
        {
          "alg": "SHA3-384",
          "content": "131169b1c3e4c366500c3c9394cd3e59799da392345b457cc4b1b033e602ea766780c19ef3aa9d354f7dbcaf7dc354d2"
        },
        {
          "alg": "SHA3-256",
          "content": "caa94adbc89025762a6642aa68831eb223466e5f282babb2598793bbd6da2a2b"
        },
        {
          "alg": "SHA3-512",
          "content": "7375d754bb5c533eeecd35616506138b009fa2866b2329ad9ccd247c03dc1d102e04ccba35f4153890cf490b93ec4bc147961c078679964633ab14e0188fd5e1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.flywaydb/flyway-core@12.11.0?type=jar",
      "externalReferences": [
        {
          "url": "https://flywaydb.org/flyway-core",
          "type": "website"
        },
        {
          "url": "https://github.com/flyway/flyway/flyway-core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/tools.jackson.core/jackson-databind@3.1.4?type=jar",
      "publisher": "FasterXML",
      "group": "tools.jackson.core",
      "name": "jackson-databind",
      "version": "3.1.4",
      "description": "General data-binding functionality for Jackson: works on core streaming API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "177c7c83c06cd3fd971fc1ec819bbe9f"
        },
        {
          "alg": "SHA-1",
          "content": "c7be3c757289893a791b2a4967ec09d1a8b6c576"
        },
        {
          "alg": "SHA-256",
          "content": "14034bfdf392b6ebec1b4bb6c1de29d604f0aa97251259a19d5f19af8719bb20"
        },
        {
          "alg": "SHA-512",
          "content": "f4361a8ab6dee7d5b5dbb15c7249ebf9960783c230b8b817704d53e21d1e5a05a42e570dd86a61dea2acc79edb2a3b21ccef535559b704a5c5245f19b2f09cc8"
        },
        {
          "alg": "SHA-384",
          "content": "9d0357646bde12c8c0b154709e926f0e27be129821dbd86792f5e7339015be744111fe1573f072c1fb6a13aca36ddd73"
        },
        {
          "alg": "SHA3-384",
          "content": "47b940f5ac8e63b9d9a3f61ae7a53126ae9cc638b2d97493deaa374565bcb885427811ceee005cc41c20e71da5868e77"
        },
        {
          "alg": "SHA3-256",
          "content": "18438bae47cc5e47e8a5b8ec69d32f58a03cab0419cf84b368f11b2125a5b3a5"
        },
        {
          "alg": "SHA3-512",
          "content": "2ac2f2c1b9780db84f08a84c9cee30ee143523d2f7fc53e7c59b20641f6b818b395412bb8f7e19b6ae927e09850dd1d7d3e2fb2afee39cc8beec0ef94aadd424"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/tools.jackson.core/jackson-databind@3.1.4?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-databind/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-databind",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/tools.jackson.core/jackson-core@3.1.4?type=jar",
      "publisher": "FasterXML",
      "group": "tools.jackson.core",
      "name": "jackson-core",
      "version": "3.1.4",
      "description": "Core Jackson processing abstractions (aka Streaming API), implementation for JSON",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "521f9137ec231cad4309ffa4de454830"
        },
        {
          "alg": "SHA-1",
          "content": "f9fd39204bd3d4922b42f6a54b81f46bd8ed575a"
        },
        {
          "alg": "SHA-256",
          "content": "3bda1cd6eff0a8d47bdfcaeae7c2bd5311d6c8ed494ef5f3e51029bb44aa9bdf"
        },
        {
          "alg": "SHA-512",
          "content": "dbbfd41206f4f81b3c7691c4d28a0f9471dc724065e3b1221cce1d03f40c60e6885359f779367ed4c1c3e79b197a525f1793b31d3db07ad32f7a15294d8905c1"
        },
        {
          "alg": "SHA-384",
          "content": "7dfa14841ee2e2f802a9757197c2753a245e01816963436026a622c1400dafea2a7c1fc5fdff5d269753a45ab71c5284"
        },
        {
          "alg": "SHA3-384",
          "content": "e9be6368e92e0cff494edefd80bc19f46f6cfda3b9948519d46d4e6148056d08a8b7cec6221038de6ff44be018ff34a7"
        },
        {
          "alg": "SHA3-256",
          "content": "69d72d2ae5d0f5e0861ca591138848d444f6611de007f02400f524340f602cd0"
        },
        {
          "alg": "SHA3-512",
          "content": "261288f2b9577bfe26f6d5b0c662611f4416be7e93c67b3eb5b826ee56767245e1b58a52805f583fe24bc9fe8ae65a5d49fdfec9c44fa89ad5d1eb02b52e08e9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/tools.jackson.core/jackson-core@3.1.4?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-core",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-core/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/FasterXML/jackson-core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.flywaydb/flyway-database-postgresql@12.11.0?type=jar",
      "group": "org.flywaydb",
      "name": "flyway-database-postgresql",
      "version": "12.11.0",
      "description": "Flyway: Database Migrations Made Easy.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "7bacf983291971b67946acb6f5b44ba7"
        },
        {
          "alg": "SHA-1",
          "content": "f4721bdd0ff377be099b5a1b3a4a7bfc6651978c"
        },
        {
          "alg": "SHA-256",
          "content": "38836ae3d6851869e7235d5e2093c0eb4c45b97507b625de5cc38701f56a0439"
        },
        {
          "alg": "SHA-512",
          "content": "d3ecd1d0f366720893cd4d48a4d67cb843adb942e4279196cb4aec535f91286d11734da09ccf07b69fe4cff97c63eb52a511b4c4d57cafca1ee8fc4a639ac278"
        },
        {
          "alg": "SHA-384",
          "content": "1f824a46fb78980a8f6fd5742d455dc5320443f0248879a88fed7d20f4835ed3b9fdf77d08aba4c715dc83da778540df"
        },
        {
          "alg": "SHA3-384",
          "content": "efa0adaa5a25a5e63cefc889f6c60164b5c4a95788011a93357b9381e97898e750b2e321a718c66a1c2b17df79cacef5"
        },
        {
          "alg": "SHA3-256",
          "content": "da26b9ac2d751951a113ae542d77537bfe99e844c8cb532296fcee196e0802d2"
        },
        {
          "alg": "SHA3-512",
          "content": "411ae80722a39d2a499dc3eec7fb7d84f51eec55bea152c0f236e16af8eaa4b236a282e712848bd350c6e7333a652f9b145002ea7f81eb03da5a3fa9f31a29ed"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.flywaydb/flyway-database-postgresql@12.11.0?type=jar",
      "externalReferences": [
        {
          "url": "https://flywaydb.org/flyway-database-postgresql",
          "type": "website"
        },
        {
          "url": "https://github.com/flyway/flyway/flyway-database-postgresql",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/notification-api@5.0.4?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "notification-api",
      "version": "5.0.4",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b8a037adfe92ba71fb7af7ecd6b6fdb1"
        },
        {
          "alg": "SHA-1",
          "content": "e7d0aa2cacc0baacf77ad817fa5fad9c1eb69833"
        },
        {
          "alg": "SHA-256",
          "content": "6224735a5030dc9a246582a0a268cdcc6e1a3e5025823865d14fe22f44405c07"
        },
        {
          "alg": "SHA-512",
          "content": "2cbca4edce9575bf6847518741d499333e554f1ae37ed548801e4209de5fc24ee702aa41a69b58d8b4c0aa0e4a14521ccf0006ad6897fa3f9cdeb69a778f8fa9"
        },
        {
          "alg": "SHA-384",
          "content": "c585b5892726cee32d0e832265d8e281096548633b1fc7225940aeab4be2ca8dbd75b5c1834fc10d4ea92315e786b95e"
        },
        {
          "alg": "SHA3-384",
          "content": "1713b5e6e944eb2932b47761562cfe2a2e11eab7fe7c3183f9edd52322dfac5aa1ead578e2a3e085c85c3d7edb5b09a0"
        },
        {
          "alg": "SHA3-256",
          "content": "aa02f8cc4331c5682a48a7c837e2190136af44166d20426c0d3e5c077d4a26fe"
        },
        {
          "alg": "SHA3-512",
          "content": "88b15e302e9fd85d37d17543967693a6d04543bbf93b6271aa4e576872febd76df0faaab75a8b920ba1a8d557cb936b57a688af8d57b112d98fa93d0335f09ba"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/notification-api@5.0.4?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/notification-parent/notification-api/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/notification-parent/notification-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/net-support@5.0.4?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "net-support",
      "version": "5.0.4",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ac455213b69e65c28662d87018c1d547"
        },
        {
          "alg": "SHA-1",
          "content": "b4c320812264309dd6acbe594e05182e82c685eb"
        },
        {
          "alg": "SHA-256",
          "content": "3f40430b515533ca86e41fe523cfd71466486842d1be4069cbed08527097f901"
        },
        {
          "alg": "SHA-512",
          "content": "953407ffd6caa98bf51a2f78db1f602859903407d5dfb17d1b2c801f79a8a57fcf2b18692f040d4a2e1518f2292dc9dcd9c154cdd4cee8a0703c6d452e6f0944"
        },
        {
          "alg": "SHA-384",
          "content": "b3bd818bb4271c52f7eb5ac6b524eb07393126eacdfcf21e59467695b65401b3c509c307346d7cbec7a6caa646065a31"
        },
        {
          "alg": "SHA3-384",
          "content": "06360b0ebbdd218a3abedec7f2566c4454b5dd1df60414e0f7d181b4e5b49cd806eaea03a2ad1378a156c645dcc70616"
        },
        {
          "alg": "SHA3-256",
          "content": "3e33559749b41817d2f663b16552dc80fc0b025b72e6ffb14a5853f05e687563"
        },
        {
          "alg": "SHA3-512",
          "content": "5c8cc8c865e654111f1d9e21300ca884ae59373d9320450b43929b7334e0d703c5d96f4b2dd876395f5db1dc37aecda31f3ae65a63062a13bb1710cc4defaeb6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/net-support@5.0.4?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/support/net-support/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/support/net-support",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.protobuf/protobuf-java@4.35.1?type=jar",
      "group": "com.google.protobuf",
      "name": "protobuf-java",
      "version": "4.35.1",
      "description": "Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an efficient yet extensible format.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "215524692c4efb9eb5d6ec0cac5ce520"
        },
        {
          "alg": "SHA-1",
          "content": "b933d3f9fc35b0356f28980c2ffc5892d297eebf"
        },
        {
          "alg": "SHA-256",
          "content": "a4345ba2aa009912ff6f90467fea2d104605256b72c50840d75f13256638a472"
        },
        {
          "alg": "SHA-512",
          "content": "eca731159b69870a7564c039c869b078ab33528de5eda2eebe24a6bf5ac768bf67cbdf0e4b07ebe4cc09911fd9e1aeff54672e410f543a8004c4245460dfe964"
        },
        {
          "alg": "SHA-384",
          "content": "fadc40e4c735f2dff66ce19ba260feb5caf0e3bdd832bf44817c1f260563edacdd5103091966bcbb3320c727c589aa68"
        },
        {
          "alg": "SHA3-384",
          "content": "110f37d0d907014b5cd610b5815794e2b16a086bbf7e01a7f1be0649a4fb24595f07aa799ad5c07bc26176943002bbe4"
        },
        {
          "alg": "SHA3-256",
          "content": "38aa11e7e6057c0636462188fd5c33acb1ab3d45d6ccc7b7f6437c35505a09c8"
        },
        {
          "alg": "SHA3-512",
          "content": "fbb170ecd42db3a368fcc15f6d110085fd83fb1f5f3069d58af0910134edbf2d69b378c8752a75120d1bd45e46166d6b9de50a4af7e2178e9c8600aee4e4991a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.google.protobuf/protobuf-java@4.35.1?type=jar",
      "externalReferences": [
        {
          "url": "https://developers.google.com/protocol-buffers/protobuf-java/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/protocolbuffers/protobuf/protobuf-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/notification-publishing@5.0.4?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "notification-publishing",
      "version": "5.0.4",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f0f1321d35ce60185c0de20ed8861f22"
        },
        {
          "alg": "SHA-1",
          "content": "08ac60fe3eed57c5cbb8657840fb46eb22189cf3"
        },
        {
          "alg": "SHA-256",
          "content": "329295c4c67c2aae7d23bc0eabd7b115f6999f13bfafbd9d784c712fd02a208e"
        },
        {
          "alg": "SHA-512",
          "content": "ae318554ad55c89c55a361fbbe69c35a3e3102932a565bb95e4a5405d9c3da74feaf89fb35fa1b3e721b01be0665f405e1327adcc5fc862e834d8d51353c84c2"
        },
        {
          "alg": "SHA-384",
          "content": "f97ced1334e54f225c1e6e1b57166a254521349f4a6cd1f591b4bffb26eee0ad7fdfd7b1eb4d04e7c50c69c199348a48"
        },
        {
          "alg": "SHA3-384",
          "content": "8fed3c83d050eb7a11e4e6bd6b346e3e72e7ea2bded1191b8438ed97bd7a39b57bac246aded1d71523262edbcf035ee7"
        },
        {
          "alg": "SHA3-256",
          "content": "256231043329c17b467ca48b6f713c20b8c34f72212fdff05d9b3058211f94a5"
        },
        {
          "alg": "SHA3-512",
          "content": "dd3af611ce7c838ae3fb5ec51516d7f2cce1a8f1ed15eb8e59a6d1a48d2880f29e868d999eb71133edaffe01ad58756298930a99e60b148d99d06a566707bf32"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/notification-publishing@5.0.4?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/notification-parent/notification-publishing/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/notification-parent/notification-publishing",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.angus/angus-mail@2.0.5?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.eclipse.angus",
      "name": "angus-mail",
      "version": "2.0.5",
      "description": "Angus Mail Provider",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e965a2653568c0138457b4c6fc9e5d77"
        },
        {
          "alg": "SHA-1",
          "content": "427f6d52ec0782f7efaca0c0732042e347a6cb4f"
        },
        {
          "alg": "SHA-256",
          "content": "b4d8c30d35f455def6c7a05fe595a1e62ea2b80cac3efec1e9ccf4118b23168a"
        },
        {
          "alg": "SHA-512",
          "content": "500985e3045a7640049aa1ebb008d675983f537150605f192d2746ca2aa8c7a1b5231f782f950dfd968cc8ca26c32c6e93008cc7de309c5da4b17af0139baff7"
        },
        {
          "alg": "SHA-384",
          "content": "35c797fdc52800ccfbd36d7574c0919fbba1f820eafb1d236271eefb07266360c1b87c07c089f97c07d12a634e54037c"
        },
        {
          "alg": "SHA3-384",
          "content": "9a10dd9cf09af51c29d178d2dd87c6a796121753c91ca13b8c51843b8ed737803090fa93f41ec8689469550941e12473"
        },
        {
          "alg": "SHA3-256",
          "content": "7ac45dd92d65996c4de11701bf1a1130e393a3e33b4bc02af69bf627e54b122e"
        },
        {
          "alg": "SHA3-512",
          "content": "b45eb356f855b9777cfdf6be94c6797c33e86fe28e8e2e7fe7311e661f07d162e8c4e46a2f3dd67b7c0f8261ab5610c85f4f62cc874e64ee2a76eca3501e2e2d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.angus/angus-mail@2.0.5?type=jar",
      "externalReferences": [
        {
          "url": "http://eclipse-ee4j.github.io/angus-mail/angus-mail",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/angus-mail/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/angus-mail/angus-mail",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.mail/jakarta.mail-api@2.1.3?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.mail",
      "name": "jakarta.mail-api",
      "version": "2.1.3",
      "description": "Jakarta Mail API 2.1 Specification API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "288a687deb06b87602ce14cd03dddff4"
        },
        {
          "alg": "SHA-1",
          "content": "a327aa5f514ba86e80d54584417d7376ed2bde0e"
        },
        {
          "alg": "SHA-256",
          "content": "8051b58d75f982f9a5b963b3765426e824b2a64865ef0af17205e455b98db05c"
        },
        {
          "alg": "SHA-512",
          "content": "841a9784cfcfa1723d1c634b094280fabe6ecfdf640513a76a6a39b1ad29d59c1207c086cd66ec8e7f161ffaacd9e1dad12828ac4c57583e9d8593f12ae6460d"
        },
        {
          "alg": "SHA-384",
          "content": "dd18dbcf72559ea405946a6d73dc60e672b3bc222e32944b2bf51e81cd41348ad7873b5b2a9d86f0440b44bcd6e45176"
        },
        {
          "alg": "SHA3-384",
          "content": "c02d8861b3c9fee8f18bfcb41947d2a83eeaed4ea9d1bb8784525c7fedd2ccab6b704663ff5a452c78537d1b79fd960a"
        },
        {
          "alg": "SHA3-256",
          "content": "c10cb31acf35574a203d85427d81e36162edc44b9f6cd9b422c19144b8e7ae4b"
        },
        {
          "alg": "SHA3-512",
          "content": "4034e1d5280fde464902035e7491e997ffec62a327844deec6f7e64b7b2d8d1d9fe505f10691caf7223ec06e6d27ac263ae1341582a5c48adad1c7635c13f0d5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.mail/jakarta.mail-api@2.1.3?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j/jakarta.mail-api",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jakartaee/mail-api/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jakartaee/mail-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.angus/angus-activation@2.0.3?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.eclipse.angus",
      "name": "angus-activation",
      "version": "2.0.3",
      "description": "Angus Activation Registries Implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ad20392145690b36b4f950fe31a31a2a"
        },
        {
          "alg": "SHA-1",
          "content": "7f80607ea5014fef0b1779e6c33d63a88a45a563"
        },
        {
          "alg": "SHA-256",
          "content": "a6bd35c538cf90fff941ad6258c40c08fca0b5c9c3f536c657114f27ce0527a7"
        },
        {
          "alg": "SHA-512",
          "content": "efb987b781f665589b2a524d86826ffcf37eaf105b2f823be124fded85bd118098c0749b5d268373d00b1d3b8bf0f89f86670444f9990b91948704a7052376e1"
        },
        {
          "alg": "SHA-384",
          "content": "4086b356cdf168e28a09dfa2ee9cd54926491438d556e4608508ae6a895929adf63f3a259779c83624a9bb1f886efb6d"
        },
        {
          "alg": "SHA3-384",
          "content": "7b79721ec0b28964fad4bf56ffc3be67d81b62e45a4ac703917094e281c125834b9bebcc0623176d4904c5b50c94450e"
        },
        {
          "alg": "SHA3-256",
          "content": "aecadbd33e92abf894ae28c8cc609f5f85e8af736621c44fb71b84ca34e91247"
        },
        {
          "alg": "SHA3-512",
          "content": "ebdc07c3b3cf0817f6d9ee54bb23461657f213648b70f6c7f634a1028cdf1522d5b5a7e2168130f72afa112f36cb08858d1c94bb67b40a0f051f567b4d696d1e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.angus/angus-activation@2.0.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/angus-activation/angus-activation",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/angus-activation/issues/",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/angus-activation/angus-activation",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.2.4?type=jar",
      "group": "com.github.ben-manes.caffeine",
      "name": "caffeine",
      "version": "3.2.4",
      "description": "A high performance caching library",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "04d655feb58be297a86fa2814a1f1ef8"
        },
        {
          "alg": "SHA-1",
          "content": "c63b303adf59c733d2a96125ad6670e938a2c15d"
        },
        {
          "alg": "SHA-256",
          "content": "9d9d2cfd681fd9272ded3d27c9930db12f89f732345975aa113ebc223bbf1224"
        },
        {
          "alg": "SHA-512",
          "content": "6923d1b826e3723a9d58b092626045bdbac48dd91e758b3b78164de31105035343145d14c20a00b62658b7d1dff2a5cfb7475b200cc630dcd967c4732c2628ee"
        },
        {
          "alg": "SHA-384",
          "content": "dd9a4951638126227d1a27ed4689391783f42f55a6e863d5022dd9f864e0cf174bc9e6267b3f7f3d6ca4a03399d38c28"
        },
        {
          "alg": "SHA3-384",
          "content": "f84911ac6299bccc137471d1ea3ca870ca0d0604e47e475ef19ee1850bcd5d98e1a13b6ae493096a4349dcaef94abcf7"
        },
        {
          "alg": "SHA3-256",
          "content": "745b6815303fc9a89f385e7d17120b1d3d5987b5af03870d72d077c2d060f038"
        },
        {
          "alg": "SHA3-512",
          "content": "cb5ea47d93b8bd42d4df7d1727c0870479acadd423c284843bd95fdc1f4becf328943adad501a253d91d369bb3b6ec9858ebca4d272008e655afe89a037a0c96"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.2.4?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/ben-manes/caffeine",
          "type": "website"
        },
        {
          "url": "https://github.com/ben-manes/caffeine",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-databind",
      "version": "2.22.1",
      "description": "General data-binding functionality for Jackson: works on core streaming API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "df2dcf8d581836d48aae7387311cba93"
        },
        {
          "alg": "SHA-1",
          "content": "9e2fb91831cce9cb9262909cd76647508949f232"
        },
        {
          "alg": "SHA-256",
          "content": "7dcd7e53bec1f56c7ad278bd1ca0840bebcc595d61ce44d6a8439abb75b965b2"
        },
        {
          "alg": "SHA-512",
          "content": "d8a905e80e6d7dd2026b16b075dde2d409425b61417120980ea07b261c6bf98d5c065053f1c063b60da30b4324157778ec4eb859945fb8543176e55a2d3b8db8"
        },
        {
          "alg": "SHA-384",
          "content": "b45efa1187b756bdfa7e0c6bc2eda85fcf13d879b4bf370f06ef95325c13b629f763a8027dbc34dab7c6a549bb33e945"
        },
        {
          "alg": "SHA3-384",
          "content": "7eeb7d7ea5434fdede4b0d256955d0ebf93a11ad89efcc2a3551d649bf197f6aa6c3dd60247805a13270fd8ed0a98ae8"
        },
        {
          "alg": "SHA3-256",
          "content": "ab1df340c8e99a3ea6f485b9e3bf0e1cb7b57810b09e9161c8eee38eb8db3e47"
        },
        {
          "alg": "SHA3-512",
          "content": "dc3f3df098898dc6bf71fcef0ca232a592f59fb465161b95b03a28eebc9539bede1db83bacaf14dc57328feffc7a4637b911a09356fa4330d93f52131ac7254e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-databind/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-databind",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.kafka/kafka-clients@4.3.1?type=jar",
      "group": "org.apache.kafka",
      "name": "kafka-clients",
      "version": "4.3.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5fe1478c9371fd445f6e730f1dc26744"
        },
        {
          "alg": "SHA-1",
          "content": "74209a28d36f819b2f7a9b599e468b5654cad514"
        },
        {
          "alg": "SHA-256",
          "content": "52501b7b47510c66f898871adaf6d2968ab7246561d44ced43643a8a587f0b36"
        },
        {
          "alg": "SHA-512",
          "content": "f3b76117e349b2875509cbf0d55fdb687dcf2d0d554c87273739bbda6226232a81679901613d3f1c1e49f777fd18780104390509637ba06552b868473b54b950"
        },
        {
          "alg": "SHA-384",
          "content": "38f8796f4c4883f6f50cf4304882f1fee08b2c18d0323b9990365078766c6b85e7c0f42d6a427d128eca3f2bbd4b99b9"
        },
        {
          "alg": "SHA3-384",
          "content": "96cf0303b7faa70a9e01ae6f3a0a6ee31b499e72cd507259248104369d0cf9cfb8a7a669d58517f5c784b8d81fe09f34"
        },
        {
          "alg": "SHA3-256",
          "content": "0997d620a357a166e4bda0c823c71b301299793d376a79b7ad2f17f824061d33"
        },
        {
          "alg": "SHA3-512",
          "content": "bb98536bb8b6a1504812c1e0d1971a455a5aaa79a96f516ac4a4fd4c905d2391c725e47a5b9296b8a453e8e10f0957b3762a51e913014a5bd44e085286d7428e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.kafka/kafka-clients@4.3.1?type=jar",
      "externalReferences": [
        {
          "url": "https://kafka.apache.org",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/at.yawk.lz4/lz4-java@1.10.2?type=jar",
      "group": "at.yawk.lz4",
      "name": "lz4-java",
      "version": "1.10.2",
      "description": "Java bindings and pure Java implementations of LZ4 and XXHash",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f9fe6db582e61989316715dca1c79f6d"
        },
        {
          "alg": "SHA-1",
          "content": "1df182cf1b030e347c81ca8768c24dab414a04d8"
        },
        {
          "alg": "SHA-256",
          "content": "252dabd586d22149a31661a8afc1a50747714eb1a298bd4a6e780c8c91a13866"
        },
        {
          "alg": "SHA-512",
          "content": "2634adf408910c3a1cff41f5bbde0f0643d6aa89b9c10c84ee5982628ceaf092015acaa0ed90eb56cdb0cc1c72b6667bc51b4312c8674662d5150a821c512f88"
        },
        {
          "alg": "SHA-384",
          "content": "0583dafa52d9c28aa84204fb3996528fd3fac71ed7c452b904bcc8f3f8fc07ca36da13fea1bd7a5eec34f9e6480925f5"
        },
        {
          "alg": "SHA3-384",
          "content": "70753f41fb3eba873d96c9a2dc79bc92bf1bfd9e71c1153841338b01c986f95f47c264e651e16a359b2abc0d61339dc6"
        },
        {
          "alg": "SHA3-256",
          "content": "bd18f6b4f05872ec9baf1fae2fa743a102d076f9ae1856c0b38ad03aeaa02e2e"
        },
        {
          "alg": "SHA3-512",
          "content": "82edfdade65175934695df09016a2b6af81d89250afb905a31453e991ac92e5952b274410344f2aca7c3458c77b1d5e38a8f37ddbf77e11caf03d04bc1591832"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/at.yawk.lz4/lz4-java@1.10.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/yawkat/lz4-java",
          "type": "website"
        },
        {
          "url": "https://github.com/yawkat/lz4-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/notification-templating@5.0.4?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "notification-templating",
      "version": "5.0.4",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c60335b139358bbcbfa60551a78635af"
        },
        {
          "alg": "SHA-1",
          "content": "5fee13e4b51ae10a5c9226f39024d10370c1d76c"
        },
        {
          "alg": "SHA-256",
          "content": "a0ff04c074d83fc50c6f1de91f9ab2ab57d1c9114b4ebd52fe3895369340ce04"
        },
        {
          "alg": "SHA-512",
          "content": "c1540827752f167890a504d36b05a01fd4c6974b5e109b95e1204d958c47c86e639ff622416d45857759f2f18a81884d46f08f2f6be947daae770483daeaeb85"
        },
        {
          "alg": "SHA-384",
          "content": "6f8e41199f1ffca7af317179cc55ffde00a17beab8824d63a18501bc0d115b6e010f9265c9c195d9cb9907f1482cb417"
        },
        {
          "alg": "SHA3-384",
          "content": "f67c65eb3ae306e6a5c35d1817c042457d74f8fbb04da4bffbe10995ea251f740f64cb851ad3ee1a2efa740acd9b08c7"
        },
        {
          "alg": "SHA3-256",
          "content": "58a55ad70cd3952d5f5cffaad179561d96a4eb762c21ae6d2d6e6beae705db5b"
        },
        {
          "alg": "SHA3-512",
          "content": "1081527eb7aba14107b480bdc1b4b9a919e71760af532a7abb6a4ce9927850192c52bc64d1586800d7bfa92af7d2c5c301350c8df76c7d008faf7313f1c22d9b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/notification-templating@5.0.4?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/notification-parent/notification-templating/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/notification-parent/notification-templating",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/plugin-api@5.0.4?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "plugin-api",
      "version": "5.0.4",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "7eb598b7087e9eb5281a60ed586d06ac"
        },
        {
          "alg": "SHA-1",
          "content": "0cdc359fc23f70015db59857d9b8d1f9a96dd6a1"
        },
        {
          "alg": "SHA-256",
          "content": "98b18917f8d2bb1a9f0a3d543cfb023fbf3c4f98abcf7d9058864ffba32d9b48"
        },
        {
          "alg": "SHA-512",
          "content": "2e23720669e99e659aaba569c07b501d09684379d15cd4255cd81e48b8b15d316d06dfcfd470b1d53b8a573daff41b1aa60e602a58a3ccdd856b569c93c50c0f"
        },
        {
          "alg": "SHA-384",
          "content": "426b9f3f571b2bfc924aab899d9fa07573d36fdec35f5d72af35491666eb815a54023685c53fca006d9173ba5e453afb"
        },
        {
          "alg": "SHA3-384",
          "content": "0ea162b133ece1769ab1d40d279bec92d27c6350a114684fbe861dce32887ef6b72c0aac0aba0217f5c1b09d2c8b33f0"
        },
        {
          "alg": "SHA3-256",
          "content": "8196f2b52ec37c7a6f6280ce26bf24108e0d259fd9587f69f0b8e67afc3c2096"
        },
        {
          "alg": "SHA3-512",
          "content": "1e14532606b22ef2392626aaee6f0bb4f29f5f0ae9eefa82432c0bec6923b53b937a1fdd8f385b998f9ae37a781774f6623af6a0cd83a03e7bc012744fcb7528"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/plugin-api@5.0.4?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/plugin-parent/plugin-api/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/plugin-parent/plugin-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/plugin-config@5.0.4?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "plugin-config",
      "version": "5.0.4",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "618cdb1c7163a10d66e0b3dfb69fc8b0"
        },
        {
          "alg": "SHA-1",
          "content": "d13813e95b477ce7c0f11a932230cf9bc53facd4"
        },
        {
          "alg": "SHA-256",
          "content": "0bd8b42881b612248d82f5f9b3fd298a8db83fec232b2a881fb45311d1fb6361"
        },
        {
          "alg": "SHA-512",
          "content": "f991e1b1433abc04e25c21f2b7b5d7ed460a7776d13648094324b65d0cc146f10326825dfab2957ba774bcb7a1eaa1e22cb6e1e5ccc80493b1e329ef2d075729"
        },
        {
          "alg": "SHA-384",
          "content": "a72dc20f74dd3318ef920c7cb443ec7d799e40dfe1e4b507ef8eb44673f00947cecf9a5823bedaa5b8a5a9e591ff14e9"
        },
        {
          "alg": "SHA3-384",
          "content": "1683f75b2ce237d7c6760848f96cf2f818306241e5d984d19f4218049688039f91c2cac4dafd7ffd8b15e929399811c5"
        },
        {
          "alg": "SHA3-256",
          "content": "cf01f1481244987b21dafd31046339711cc5be3c4a1ea9fa9c4614f1bb5fff3c"
        },
        {
          "alg": "SHA3-512",
          "content": "15e70b9f59981c39af934efaefb899808e7fcf2b73f78776f4494737a505626e0a14daa15802eaaf4026e43f8e8738413614af96561ee2cd2e0a8de285505f8d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/plugin-config@5.0.4?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/plugin-parent/plugin-config/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/plugin-parent/plugin-config",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.networknt/json-schema-validator@1.5.9?type=jar",
      "group": "com.networknt",
      "name": "json-schema-validator",
      "version": "1.5.9",
      "description": "A json schema validator that supports draft v4, v6, v7, v2019-09 and v2020-12",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "84622292ac5001bac8f16dc5002a8b94"
        },
        {
          "alg": "SHA-1",
          "content": "6a2f9fe324b9dc8d8e0c3d7b435f7ae99595a556"
        },
        {
          "alg": "SHA-256",
          "content": "e0b8baeb78fd1ba027454ee3974d8a02f54447eaa510d3052820a7d2160d9ae4"
        },
        {
          "alg": "SHA-512",
          "content": "5ba210c135717a6ed043e0889d96f6381b3668f9e2a011bd0def8138ad327813f792259858ae5ed192cb8ec0645308113769aa8ebee903db1ccd82e98cb3009d"
        },
        {
          "alg": "SHA-384",
          "content": "21a4f4fb586959241ce92ad788cb4326d62232aafcddf6953ef7769efa5c6936487ffea51693ff44206f4d66c83ee753"
        },
        {
          "alg": "SHA3-384",
          "content": "36bb0b96a34254780e991440e879c1f44a0a62362e115a5c761df0ec1c8f2a9f64a7421ea3cb50a589ae501619fd3942"
        },
        {
          "alg": "SHA3-256",
          "content": "c97a2638d46c235056bacfe90d8e0b88a823a5622e88b608a31f481f3adb9ccf"
        },
        {
          "alg": "SHA3-512",
          "content": "08b256bb3ac49102d87c0e635d025699154bfa7785916d591173af6ec14dfde885e34500a7bd13159a00a7fe78dc859aefa9dc930d0719a64ea08209ccffb20a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.networknt/json-schema-validator@1.5.9?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/networknt/json-schema-validator",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/networknt/json-schema-validator/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/networknt/json-schema-validator.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.ethlo.time/itu@1.14.0?type=jar",
      "group": "com.ethlo.time",
      "name": "itu",
      "version": "1.14.0",
      "description": "Extremely fast date-time parser and formatter - RFC 3339 (ISO 8601 profile) and W3C format",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e537d0a2bc8066726f7e4654c253cf84"
        },
        {
          "alg": "SHA-1",
          "content": "c0f9f9d4f4404787e992ab3af5ae95f2fad79e47"
        },
        {
          "alg": "SHA-256",
          "content": "5cf40ab0cc77828ab2b875b1f3ecd71c8295d7721933476abc2e08fddcea164a"
        },
        {
          "alg": "SHA-512",
          "content": "aa69a6af3a7123eb41425bbaf6834e16dc3323172709e2338b8a21b970fd21333d996515f42da4aa0225251e30542ad7d9c8332bdf7d62ed96b42fadc8a1520d"
        },
        {
          "alg": "SHA-384",
          "content": "8d201334c39b68d13d66fc9df2440fa848b055a9b901e1c630ff66a47e70c8816484d106ae18c642d4257034f33e55f2"
        },
        {
          "alg": "SHA3-384",
          "content": "033715e1422cb3f22c1073bc7b058fd16d1436c6314f49f13480d81c86b656cb77a4d852cbba35542bc8f2ce49244ba6"
        },
        {
          "alg": "SHA3-256",
          "content": "f18d275dd2a0038a82432e06bb9f396151310136e3a316a869ef54d7fae834c5"
        },
        {
          "alg": "SHA3-512",
          "content": "8a51b3c6144eb2e363f8804da316d9e3dc246be07af4c0bb55e9540c2a0deb5eb9beb825120d3d203e3a561fd8a605ad64f3af5d233725e1b9c7e06232deaea9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.ethlo.time/itu@1.14.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/ethlo/itu",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/ethlo/itu",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/plugin-runtime@5.0.4?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "plugin-runtime",
      "version": "5.0.4",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "da9464b08d6bdc6b5822b54747a9b980"
        },
        {
          "alg": "SHA-1",
          "content": "11cad757f2f33d1bd9c5be82a22f39778cb4bfe9"
        },
        {
          "alg": "SHA-256",
          "content": "2c1f980d11fbf00aa96d67ae6f5bd48d4b6d97460bda120adf29c9633ae6cd76"
        },
        {
          "alg": "SHA-512",
          "content": "b37d0ca592847f16fb10e7edfce16b545ff0fa48d70d9c31001684ac4d999405e30ea31b4bc74c225401e6bb2bc2c9178a0f8351b9c59a1dad2815cc6349830b"
        },
        {
          "alg": "SHA-384",
          "content": "a3480acaa7f80bb9b6f095e2f0d34b1b19f79698c20d257a6b3b20c0d177dae5d4802347fb7af5088431c441d23b6871"
        },
        {
          "alg": "SHA3-384",
          "content": "185ce9ee0422637ab34b72e88de60315f8a06364d0202c4077e27213f2ecb04fddfcf6200e5dd412dc9499e64f69d13f"
        },
        {
          "alg": "SHA3-256",
          "content": "a14d766b216b7a7f6695f7b9d5a0b82e534c22721589ee0354e4aa6efa6354f1"
        },
        {
          "alg": "SHA3-512",
          "content": "0b3ab30d33434dd23340766d967382973ef6bbabd8446334d9c044cfef5c68950e5fc330940a1c4d86b26555852285c6c915a2bad166337f2bf9b84a72b54512"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/plugin-runtime@5.0.4?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/plugin-parent/plugin-runtime/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/plugin-parent/plugin-runtime",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/common-config@5.0.4?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "common-config",
      "version": "5.0.4",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "944e19eb79d8c55fdb34cda42622438a"
        },
        {
          "alg": "SHA-1",
          "content": "3315e83439f5fe9033d8417f08e2b88b3c9a502f"
        },
        {
          "alg": "SHA-256",
          "content": "cc6e6ea4e265d247eacb4087bf8fafcbcbf798d56f4fef5ede72f167855c2773"
        },
        {
          "alg": "SHA-512",
          "content": "9c9880c3ae321b955b71ccb2e512e99297f9203950f551eec4d16546625e493025f8b20b3eac7dd61d3f8ccdf07fec03e6f53ed38de0c1dcc0c27faefda90363"
        },
        {
          "alg": "SHA-384",
          "content": "121d2bac140fa2e759f8a05f930b3efa3fa91ed0cf25585ca40fbca09bc87f0577c616c4029eca485146e75625a6eece"
        },
        {
          "alg": "SHA3-384",
          "content": "287b213af06d964616cc5feb8c68cfed7aac6008c68354f798c3893bf4bd256079c7c23c60f21329b0dd97225adbfc03"
        },
        {
          "alg": "SHA3-256",
          "content": "9169059aad1346e80b826e3e9d74bbf6d6c5fdfc9589dfed42229f795b9723db"
        },
        {
          "alg": "SHA3-512",
          "content": "3baf28f84c805f9124ba65e4c0394915e2a40be1bc8e80d255e0022138d045719a056055a5998144576f84e259c8dee00a589dc6a964d5d26bfc0e9c62b5561b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/common-config@5.0.4?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/common-parent/common-config/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/common-parent/common-config",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/smallrye-config-secret-handler-file@5.0.4?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "smallrye-config-secret-handler-file",
      "version": "5.0.4",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "01de55f236a3e578e2f679a91e2b9f7a"
        },
        {
          "alg": "SHA-1",
          "content": "b8e03c1ac6b7e460d55fc69d8ab13e2c03e34f9e"
        },
        {
          "alg": "SHA-256",
          "content": "9954cce35a60c5011f6b462a50dda9bada9773d72ddea66843ac4a8a4463efd5"
        },
        {
          "alg": "SHA-512",
          "content": "4c4121b103b70d982b0b688e3fc0cc93b8e6884c5fa9f8a54aa75d2c95865573c7ad3659ff0f5ae6de24aeebf1a2976096d28510561ccfd0a5e588000df0255b"
        },
        {
          "alg": "SHA-384",
          "content": "f81aa2cd74c7dcbddabfcbb089efaab88152ab414b9d76c753ba01264c6d4fe92f959c76a2cb68bd1fefb597ae9ba642"
        },
        {
          "alg": "SHA3-384",
          "content": "2b97aa62004ab93e7ee2184a7aa79d1bd90d83402f3612acebbb9133e803dd9b6c660c1ee83d4288aefdfb8fc97f948f"
        },
        {
          "alg": "SHA3-256",
          "content": "aa39cbaa3aa6e0c35eeecf6fe83f68bcaf3ef3d89b66cb93ed0941d6bd00707d"
        },
        {
          "alg": "SHA3-512",
          "content": "7cd20bfae18492feab17a8bbae3bea4c22f41d354934cd59e45b8100cf5df8bd4cbbd05b2e58bd86e3fcb86943fe4878a715b8266e75e5797a2f011da6d2a837"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/smallrye-config-secret-handler-file@5.0.4?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/support/smallrye-config-secret-handler-file/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/support/smallrye-config-secret-handler-file",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/proto@5.0.4?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "proto",
      "version": "5.0.4",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1a6a6fea1ab64212f269036a2254ec8e"
        },
        {
          "alg": "SHA-1",
          "content": "d95dfcd38d868296cd0e9036d9773fe6b8aca57f"
        },
        {
          "alg": "SHA-256",
          "content": "7df5edf6c2ea6e65f055c77191062f68e9bfd47068d03fe6084c6860ce1ac9d1"
        },
        {
          "alg": "SHA-512",
          "content": "57dc59b393232f9061c6ff2df4c9483411839b107f3b8788e7e630196a5ece772ed28ce54422eca44108671c56b976698112adf35c675fcf1c7ee6531757d6e0"
        },
        {
          "alg": "SHA-384",
          "content": "6da86b9ed9deeb16af1590cebefe40e00144c045aaaaa3c4d56e425e4dce382a5c4e95eeb6d5f433a25b2f12dd9967c7"
        },
        {
          "alg": "SHA3-384",
          "content": "3774f8a4b272be6a0f0978517a1c5c9d1709251c1b318ef0a7bb55a6c014ab4e61af645899b3d6d0e95788f2f56a0887"
        },
        {
          "alg": "SHA3-256",
          "content": "96f5d20387f02b6c819d0d32bdccdc6d7353de39a8dcd38530740ff742e041e4"
        },
        {
          "alg": "SHA3-512",
          "content": "f6c00ab23b8d33482aecff70177ab9bc15ae058250902345c768d654ebc2c0ed393957776ca69df2ebfb4c2ce089cb855628ce4a52a627e155f04937546f7b7d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/proto@5.0.4?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/proto/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/proto",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/cyclonedx-proto@5.0.4?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "cyclonedx-proto",
      "version": "5.0.4",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "89a0548631286b414c0cf10ffe4dc7c1"
        },
        {
          "alg": "SHA-1",
          "content": "29e03c62fa91a852e4322c9318caeecc6bf0962a"
        },
        {
          "alg": "SHA-256",
          "content": "969b9dc5ec5f82ad9f50710e1780f1b3a89b355da7feb1950076c4915117c8b2"
        },
        {
          "alg": "SHA-512",
          "content": "f8726668f2109af178078b45cb2e4a8eecb90bdc2e6f20dea49a4c2e62be9b9b240f9888840239f64631f361a8f45bb69067df1b735359d3f4e109f346b3ad59"
        },
        {
          "alg": "SHA-384",
          "content": "4a9cb78c6b75f86f126889a410acb20a05f73dc201b3b34e543be91726b7a9e01a79aa3b51af590b044cf62994c24853"
        },
        {
          "alg": "SHA3-384",
          "content": "00eedd695f971030079f875c77cba1441930acc65d97ad5359588ae6b26454b98f696389a72410836a17294cabe8031e"
        },
        {
          "alg": "SHA3-256",
          "content": "6c2cb291c8772093a68cadf94ec4cf6f6438b090b0139df1fd1b849e6607091f"
        },
        {
          "alg": "SHA3-512",
          "content": "dc4bb7ec2eaf56065f7e822bf471ba12c58cd65359693d9f2e0b285a027e363cf1c09fec9820a734d8a892edb36539dfe96ff062822b30dcc82f56c4b8506e79"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/cyclonedx-proto@5.0.4?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/support/cyclonedx-proto/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/support/cyclonedx-proto",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/secret-management@5.0.4?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "secret-management",
      "version": "5.0.4",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f1f6cb3312e112b9e90040941030b1ae"
        },
        {
          "alg": "SHA-1",
          "content": "3445b3573507552d0f21fd527c5a6b4662f81fdf"
        },
        {
          "alg": "SHA-256",
          "content": "85929502e74c5ac72f5eb4e06abfd592d856cba08c03d344a409f9786beb0600"
        },
        {
          "alg": "SHA-512",
          "content": "70fec97613b3f1a8d2ff18fff58396477a3c1d4ccadab5c800c3ca8123cf12fa6435a4378fa3658fcfb06e073bbf566cf6d8bf5528bae78ab424e8e73d46f13f"
        },
        {
          "alg": "SHA-384",
          "content": "fa5fe5ec2d16b8534cf671b195429c19831d0c0f0443aa67c69499411861a98d9ef4a17edd648d74970c2eb9734931ac"
        },
        {
          "alg": "SHA3-384",
          "content": "22a65f95e2d7afcf5571c753acbed0042a2c233ba4fa281ee6fcb5d96e7a115b057f11ed0f41d0361caf47870d77914c"
        },
        {
          "alg": "SHA3-256",
          "content": "1f6ca9a0971c15b2b51d25c3853f8c120718e006282b82b8072942c904fdbbf2"
        },
        {
          "alg": "SHA3-512",
          "content": "22e11801850ea5b335a116b40617c9bba07926fc1e33282e749f1e1f243c772722bf221669aaf69790ef9d6c641236934a95cd59f58d407fae032294042642f4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/secret-management@5.0.4?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/secret-management/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/secret-management",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.crypto.tink/tink@1.23.0?type=jar",
      "group": "com.google.crypto.tink",
      "name": "tink",
      "version": "1.23.0",
      "description": "Tink is a small cryptographic library that provides a safe, simple, agile and fast way to accomplish some common cryptographic tasks.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "3653eb60c431373789b981536f639dfd"
        },
        {
          "alg": "SHA-1",
          "content": "05bc3db7a0a7ee19ff2392bf586f85dc7b528bfd"
        },
        {
          "alg": "SHA-256",
          "content": "5bcdc8798ce106f5145acb4a0e993c5e5861337b1e75ca88ceb6ab9da10fa512"
        },
        {
          "alg": "SHA-512",
          "content": "6a236d57e3b98eba266b6a98aba65eefc2c94e1592049e676863c902b67ee7086e16bb72ce843d13b762210ff36dbaba678265637f6ad138f2ea0668b5d4dc7a"
        },
        {
          "alg": "SHA-384",
          "content": "6095a648a2c7e2f82d59cf849d8d0836023dce68ca7fff868d5f26720234c64d5982881157a2fe43ac544330ad778268"
        },
        {
          "alg": "SHA3-384",
          "content": "cd6200f5cb4a73652e617252505ff5a143be9d94a5d4c82fb3d8d38d964aca2a4c19f1e70221056bfc640ccaeaca2ab2"
        },
        {
          "alg": "SHA3-256",
          "content": "5ed24275f206e73bb2f275ab4e4d26b2d28c8ccdbf8c1683ba365569f0cde0cc"
        },
        {
          "alg": "SHA3-512",
          "content": "4b26e55b1f442d7cd9c319f1b1d6f9b2119fabba2284e8e1ff237138f2d48644829c1dbff67f80e9502ffb2f551f78ee31000363e367b1e3f3e7544b571dda81"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.crypto.tink/tink@1.23.0?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/tink-crypto/tink-java",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/tink-crypto/tink-java/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://groups.google.com/group/tink-users",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/tink-crypto/tink-java.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-analysis-api@5.0.4?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-analysis-api",
      "version": "5.0.4",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c19249959cc6d0cc79eb365b789516a0"
        },
        {
          "alg": "SHA-1",
          "content": "e7e5d90d49e9d32510b598fcf3c6ac64b036f224"
        },
        {
          "alg": "SHA-256",
          "content": "47d798c52d0327f4efef9fb8a3a03155cc6ede60a9b0e9a6526dcb5aa3ef626f"
        },
        {
          "alg": "SHA-512",
          "content": "6b8e5d9c4f22f5f60dcd41be684115e66f57829db44bf253c44bf927ec9434c8f4f9d01876a4c48d07389d767921485b7c209b029fc6b1a642aa4dc03285f519"
        },
        {
          "alg": "SHA-384",
          "content": "1e94052b10ca41b97bc96614d54cfb83d7473d5d518d8ea6b28129c8050dd444ff2b60a04e141ae5b0b1d0648dafa840"
        },
        {
          "alg": "SHA3-384",
          "content": "9fa86b69412f76b5eb76a3e06614338d80aee0f5d81de3e9e5971e7527fb8f6b63d8f624564dd73ae66af431e537a886"
        },
        {
          "alg": "SHA3-256",
          "content": "64ef3f27743bb66e7ea578653ada8f30a1bcb933574193162164f774669ceadf"
        },
        {
          "alg": "SHA3-512",
          "content": "71f7a30fa0824c35122778ce8ff37ae212deb1ddde29945228cff5f4c34131b7b7ff824ebd579f67aaf3012b71fafbf7ac154fd3e986e47fe59df546d7ecd88f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-analysis-api@5.0.4?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-analysis-parent/vuln-analysis-api/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/vuln-analysis-parent/vuln-analysis-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-analyzer-internal@5.0.4?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-analyzer-internal",
      "version": "5.0.4",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "08a0caa56f6ce7ece0375ebf8d44238a"
        },
        {
          "alg": "SHA-1",
          "content": "c439b129aad215c86de02baecc7e6a8ea121ee0d"
        },
        {
          "alg": "SHA-256",
          "content": "bae5a06eb870038f180542368075020bca497f2ebcae1277b9e556d5e07a7595"
        },
        {
          "alg": "SHA-512",
          "content": "083877a7e514c94730cf2dd20ec6458462751bbae2ee91bc8cd9a1733405478c22ee7baddd68d6e4fba307c66de4996cac6c075d1f36f4d2887411c366453066"
        },
        {
          "alg": "SHA-384",
          "content": "14fc3216168eb1c3a15cebfb735644e72df278ba0daa4d23f96bbeea68352e4306ebf48676e3d9d857bbe989d79cf355"
        },
        {
          "alg": "SHA3-384",
          "content": "bba347c6f1e5f9c17175eab8f2edcd0254c73315036ffbcc9fd552a141ef6b785e6de5387e748b872a664487df8d9928"
        },
        {
          "alg": "SHA3-256",
          "content": "afdd60fd0cfa9e05a61adb6f1f0d75b331dc9222415a4c2704671d08c7b3793c"
        },
        {
          "alg": "SHA3-512",
          "content": "9bf0938bf8ebf2e221829ae53b4ecec79fcbe4511777798c9f118c62b6abcda2511605380cc9227108dc45c1e15742ea5bfae71597e7321aa10f9439890ee10b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-analyzer-internal@5.0.4?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-analysis-parent/vuln-analyzer-internal/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/vuln-analysis-parent/vuln-analyzer-internal",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/os-distro-metadata@5.0.4?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "os-distro-metadata",
      "version": "5.0.4",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "89644d75b73a100d8b01021dba47e6f0"
        },
        {
          "alg": "SHA-1",
          "content": "8210c9df230c14c61dd08718089f963edb4e3abc"
        },
        {
          "alg": "SHA-256",
          "content": "4d14132a22ceed0a08a1c22569302985152a527fa3c7c486c143da076048e27f"
        },
        {
          "alg": "SHA-512",
          "content": "79b1e8890f6129174be8b0301e6ae70bfa98ebd30f6ec07fd811733ee5469f54979d3ae8786fa8e9ad9bde14afec02042ebe5497772c62e9b6067eee173ac5bb"
        },
        {
          "alg": "SHA-384",
          "content": "6da71d97577c93caa38d3c99e23a3f9fa08eb6156260968400fd170ae7253a3c97ba814112fea579b9b3d22ec6a63265"
        },
        {
          "alg": "SHA3-384",
          "content": "b3ad576486b0783ddca4dd75d00df33066d11172073bd7e5cc60e9b5939037fef70900afb8e3d26fe88df0d6d0f0519f"
        },
        {
          "alg": "SHA3-256",
          "content": "96ab4b1944292cd8fd66a7192608253c225b724f8af96b833b9c2718a2e2dc36"
        },
        {
          "alg": "SHA3-512",
          "content": "dd11365a186147fbe835afddc595224d8d04ac71a88d1507a9a8254ca8267302e0a00fea5bb1adb016d9d27a9e3bf28c8b9fb9074e277a013ec293019aebb2a7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/os-distro-metadata@5.0.4?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/support/os-distro-metadata/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/support/os-distro-metadata",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/package-metadata-api@5.0.4?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "package-metadata-api",
      "version": "5.0.4",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "bfffefa2590a1b80e61d621e3ed8ab2d"
        },
        {
          "alg": "SHA-1",
          "content": "f45e26ecfcdc66970c78ed82706ac633141e7d3e"
        },
        {
          "alg": "SHA-256",
          "content": "99ecf8be2024f78b0ea83c60f7bc0e17b4e32a329f7f9c2ad2953ce7c1540f44"
        },
        {
          "alg": "SHA-512",
          "content": "44104ef71bb15166000739682f196ecd4c48b6c02f1a833145c89aa22dc49c108c29188b78b4e40b3d721f3d3256825fadb11f7fdda63939ac8302bfeaed2990"
        },
        {
          "alg": "SHA-384",
          "content": "1430e7ab059c4588807e2379cf1ead9431ed658429b741e63b64439d7784b6b1d8cfc548413be18a7fbc69e16435230f"
        },
        {
          "alg": "SHA3-384",
          "content": "bb8cea5060d284467c7f96ce01d5a972c0c0fd3dbe46b3c06123121bc18e8d9100d2a58460789ee1ff6f5a2bd89c3da7"
        },
        {
          "alg": "SHA3-256",
          "content": "b5d6506628c1575b96b1796922a12301b3752ed1e18616bd90f43eb039feaae7"
        },
        {
          "alg": "SHA3-512",
          "content": "1f988c7243b6a9e8bf29204301604e028f5ca493b86bf48e7ec4b49f2fdb9eec58cd9d705d4a749eef64ace1a282f6fb3b2697d55e25deb1282a3c51e840acca"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/package-metadata-api@5.0.4?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/package-metadata-parent/package-metadata-api/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/package-metadata-parent/package-metadata-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/package-metadata-resolution@5.0.4?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "package-metadata-resolution",
      "version": "5.0.4",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b2ee9ede3d9e037136a29a5da7d1266d"
        },
        {
          "alg": "SHA-1",
          "content": "16b1b1ab05a36481312ec4f4760531df1e3ec371"
        },
        {
          "alg": "SHA-256",
          "content": "89e6ff87e66b6b8e46b31b9443cf4959d1e9cb5d4afcdd4b7d5d8ad0105e917b"
        },
        {
          "alg": "SHA-512",
          "content": "b4990dba686307147ceb5c5b7f32bb50a7b174e35a3582f3c4a1624b7efecc7ac0647ae3a55fa38d472cdc4829e4c37a37afc7ac5860f20c797fd257406791cf"
        },
        {
          "alg": "SHA-384",
          "content": "fcdfe87f561054a6c1837dbcd49e698275cc1add739f8530ed27962c49850ee79b9ef4f9f3cc2019ffefac6d9b4d3f50"
        },
        {
          "alg": "SHA3-384",
          "content": "72ef80d124ec9e1633e6c9c8560aef8d96850b370b186b2772d2a40ed4df5e55b26f624544f803bf9de5b596f575c6ac"
        },
        {
          "alg": "SHA3-256",
          "content": "aa03950773a1ee104739ce1a2ad0f41ac76c7628e417d1083612bf4f297cc9fb"
        },
        {
          "alg": "SHA3-512",
          "content": "0d76d1c91c64d8db9a9e79f50039452790cba8ffe2c9cbc1d95d4e6b51322b509c64a814ad36c9fb6bf786bfaa7c6a92f96017371651cf77a6d64b1db42b5907"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/package-metadata-resolution@5.0.4?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/package-metadata-parent/package-metadata-resolution/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/package-metadata-parent/package-metadata-resolution",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.brotli/dec@0.1.2?type=jar",
      "group": "org.brotli",
      "name": "dec",
      "version": "0.1.2",
      "description": "Brotli is a generic-purpose lossless compression algorithm.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4b1cd14cf29733941cc536b27e6aedfa"
        },
        {
          "alg": "SHA-1",
          "content": "0c26a897ae0d524809eef1c786cc6183b4ddcc3b"
        },
        {
          "alg": "SHA-256",
          "content": "615c0c3efef990d77831104475fba6a1f7971388691d4bad1471ad84101f6d52"
        },
        {
          "alg": "SHA-512",
          "content": "d4cd2b33f7c358012ff01db6a13ebfe1e8051a580698bffcd942c47451012cf53ce49a400b1c8bf7502b01e631d79d7c6417202a145622572d79fd145ccde61a"
        },
        {
          "alg": "SHA-384",
          "content": "d6b8ad9d0ee6baf8c3a29c1dc2911eaf207352e2c7de893a0185e987e7eae87827890c1d4dbf31c46f25846fbcdc08bb"
        },
        {
          "alg": "SHA3-384",
          "content": "d16c32130bf6b168ff4c8a3dedf1b17787f8d6f0eab9de21e51ed3ab1e7d85925dd02315972f6ca3a4493357aad545cb"
        },
        {
          "alg": "SHA3-256",
          "content": "962dc76a5c487de8d34308860ab65927bf91f50ccb12f37bffb036a7a05145a4"
        },
        {
          "alg": "SHA3-512",
          "content": "a82a3f79b57d30613606ca51dc432b097fa75aab5c87fb45eabec6d80ddeff1b329100b325bb07005aebaec166952c4599a863d4bfd5a684bad21103a2046311"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl": "pkg:maven/org.brotli/dec@0.1.2?type=jar",
      "externalReferences": [
        {
          "url": "http://brotli.org/dec",
          "type": "website"
        },
        {
          "url": "https://github.com/google/brotli/dec",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-analyzer-oss-index@5.0.4?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-analyzer-oss-index",
      "version": "5.0.4",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8148c19ef7728fa8087ae890553c13fd"
        },
        {
          "alg": "SHA-1",
          "content": "f759af20dd9d9d835dde19d6030accc8ee8a29c2"
        },
        {
          "alg": "SHA-256",
          "content": "e1e544d3ea7c201e2765175c6d013ed9d458113be1f346bb7b2b710e49a3e905"
        },
        {
          "alg": "SHA-512",
          "content": "06cee3fceabc371db39c9ee738dd2a02af280a9a63f36aee4dbef4db9e6cb03918e27c8d9b15d915b3a926095071df31dd3896b29b901deb618db57383c4fb15"
        },
        {
          "alg": "SHA-384",
          "content": "eb178daea7df73a9d16ce3bae6e5bb9561f4b076e584a45f6c5a0be02ecf51c3ae1b9804fc1a21ba4ffb936b783c730d"
        },
        {
          "alg": "SHA3-384",
          "content": "ba7eb9e5df36f32bbba753acb16aecc4724311888a8b39f776307eeeb25d6b6c4337ea85564260decf68bc466a53d804"
        },
        {
          "alg": "SHA3-256",
          "content": "f9d0d0e9931055b29d38d4de264f8686a992ae28db627fbf20905cec2397a235"
        },
        {
          "alg": "SHA3-512",
          "content": "ec78ebc859bc3739609d374b7a493ce991bd25c99f892839c09c52b44021115b813604548309874082057360840df176f8e27941fcd0615ff45c678620dba31e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-analyzer-oss-index@5.0.4?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-analysis-parent/vuln-analyzer-oss-index/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/vuln-analysis-parent/vuln-analyzer-oss-index",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-analyzer-snyk@5.0.4?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-analyzer-snyk",
      "version": "5.0.4",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e0d03c4b73aa056cce2020b45c8699ed"
        },
        {
          "alg": "SHA-1",
          "content": "3482d3647d817c0b8e93fd6c69eb48a375fce629"
        },
        {
          "alg": "SHA-256",
          "content": "960f7a97b5d695e8d35d7282a96a4fa3b72241a5343fde1423d7ee00e1ba378f"
        },
        {
          "alg": "SHA-512",
          "content": "0e582ae33683fdc0b7ad85129408087b1102cf10e0a83af6db1eb03811b6124b66781392792e87f8750dcd59b10f5d7117343beeaedba918bee8c05bba9e3fc7"
        },
        {
          "alg": "SHA-384",
          "content": "2379f5c934beef88bcae9e4e62caca4616122d515c5086084997cc80db679cb1fc6355309f8fbf1534c18ff5b3cc37e6"
        },
        {
          "alg": "SHA3-384",
          "content": "23760fcb9adde17cbbac6fadce42cd1684f307f814ee1ff59c3f9c30819b6787b1377d4259025dee2c0b928de21f1b42"
        },
        {
          "alg": "SHA3-256",
          "content": "8bb0916c9ab2f431db759f3fa65ba97402da4469d2ac8e49ee5efe3881e60e12"
        },
        {
          "alg": "SHA3-512",
          "content": "3c2750d3393966bd8d1b6f10bd085ab2c4ea7c7b137f288f890942518fc35de151a4e3d92cfabcb71f1ff3e9183aba9ad8025abb928946fcd9b6770290be4370"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-analyzer-snyk@5.0.4?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-analysis-parent/vuln-analyzer-snyk/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/vuln-analysis-parent/vuln-analyzer-snyk",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-analyzer-trivy@5.0.4?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-analyzer-trivy",
      "version": "5.0.4",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "726ae570b7eb1dca803413c1af896cb2"
        },
        {
          "alg": "SHA-1",
          "content": "5eea35fa07bc573c6176c4343581e658cee957dc"
        },
        {
          "alg": "SHA-256",
          "content": "7a6f113a1ae05f2522e12ec4f23a9e596674224ae5c4924235906464bb22c100"
        },
        {
          "alg": "SHA-512",
          "content": "dff8f38727b35acf44ffd1c81bf19fc814623e5d93226beb66ae9668346c013f3e5370a58e2cc0c133410c0d13d5b6338e0b6cdd65b6e3fc1dfc91400d7b90c2"
        },
        {
          "alg": "SHA-384",
          "content": "fe82c2fe2aba153137efb51b1912ad6c58e401a9f1a12678a9406565dee22b2b688e14e5c204d11ce2413a6d32daec12"
        },
        {
          "alg": "SHA3-384",
          "content": "575a3545d896523ca52ad59f1df6af102c5630041fb9111e18e253c396c3ae63d28ff0ca6ce0e5b0b69985cb860fbb26"
        },
        {
          "alg": "SHA3-256",
          "content": "0d841205c9fc5506b3535a7e212897dd05f9759c5b59edffe1741fca91722f8c"
        },
        {
          "alg": "SHA3-512",
          "content": "e7da37e29958bfeae5b75cbc38003358d7a2a094d83f3347bdcba6a15335fb35cf40e4fd2efa0be5def83e76c63ee0888921fffa8424513c44decfec3d51e4ac"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-analyzer-trivy@5.0.4?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-analysis-parent/vuln-analyzer-trivy/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/vuln-analysis-parent/vuln-analyzer-trivy",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-analyzer-vuln-db@5.0.4?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-analyzer-vuln-db",
      "version": "5.0.4",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "7237a72fcac193310ae0a42ed043c437"
        },
        {
          "alg": "SHA-1",
          "content": "389a7beef229117a2a361282b10545647915af3d"
        },
        {
          "alg": "SHA-256",
          "content": "e32f4dea0ee7137ac16b9849bd66d02aece61ca1264d0e2182a04dac0e9660d2"
        },
        {
          "alg": "SHA-512",
          "content": "6f3b7577c5b99a9721657cef9946ee25c5e9e22f07c4d07948e2dc1f6adfcd3f7b662782f24b3b24a8a22962e736d74650e4ef85d48b0008eca0d2fd0106959a"
        },
        {
          "alg": "SHA-384",
          "content": "048c176d4db7b73bc44cb7b9f90144a2939fa3b3d9e8eb12a1a5643c4d294e623cf28407eaf0ea502400d73e44784d29"
        },
        {
          "alg": "SHA3-384",
          "content": "f07ad5355af2be32008be8606a7f57a5e4c2eb6e4f66dbea70fdb98c02edeea2fe095096beb8f6594ab853dc05f25b7f"
        },
        {
          "alg": "SHA3-256",
          "content": "c80a848c5c40e6470e021c6f7c51b1627e96d07f1b0b5f806595761158cd54fb"
        },
        {
          "alg": "SHA3-512",
          "content": "b4be5726cc116f776fd16ac7ec86357a387c9638e003877605f15b2417ac6d78c00b935e02ae9123f9afe297a741022274181f8137389b02cdcf8b6df5debec1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-analyzer-vuln-db@5.0.4?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-analysis-parent/vuln-analyzer-vuln-db/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/vuln-analysis-parent/vuln-analyzer-vuln-db",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/dex-engine@5.0.4?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "dex-engine",
      "version": "5.0.4",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e491ea633bc08a6271beed49b9cc639a"
        },
        {
          "alg": "SHA-1",
          "content": "10b8bff74e8f5463aade1b67305be2fa501996e7"
        },
        {
          "alg": "SHA-256",
          "content": "bf1ba6ad990b11e1a6d0ddf102bb427073cae508f282d6de0c812d1e35809ed0"
        },
        {
          "alg": "SHA-512",
          "content": "ef7deeae0be99a9bbff5b1c73a99d2450741e750c0c00a67ca3b7cd42ad415212f285d939aeca3b6d254ec6742f29ce35b1f15a5911815e885133673631ae94d"
        },
        {
          "alg": "SHA-384",
          "content": "ebd29b54a0d49c398b5f2049ee52191dcdeef7782fc29ed62227e19a2fedff0bd6f6933de75e480b5cfd071c6f732b09"
        },
        {
          "alg": "SHA3-384",
          "content": "f939d18be3832e6c412c99b32d75c9b994fca950e7b28a85783b2fc8ed62f72f8481223237264e09e63d9f2ed516fed3"
        },
        {
          "alg": "SHA3-256",
          "content": "f719600736c616e0a4c66ea48d1ea2211f56c01b0c1bc29e7f774ba9e3a4dc66"
        },
        {
          "alg": "SHA3-512",
          "content": "7ef41cb88cacc918d18e816c4762419e9d2d3dad56764e4901dd619d79ef043e8179f6dcf01ca9aef4e45f61d5f7a11e3b2cb9efa6fe49dc082c3ba48f8604cf"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/dex-engine@5.0.4?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/dex-parent/dex-engine/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/dex-parent/dex-engine",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/dex-api@5.0.4?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "dex-api",
      "version": "5.0.4",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "135d482740dc5b3134336fce51e63c61"
        },
        {
          "alg": "SHA-1",
          "content": "744dba53f55cf815486a29cf4f1b049a1bd8d14c"
        },
        {
          "alg": "SHA-256",
          "content": "b2f02f9b0f240cbdc6cffa745e7468302fabcde1a776f371e279ee2d81f40e40"
        },
        {
          "alg": "SHA-512",
          "content": "7903fa75c8aae0c19d4bfd4e3c670640c4a75952942d9135091dac188c4ee6b93ad76d2790a46dd3917485c350aeb8540469dcb7acfbf77ef65ed0009b2a522e"
        },
        {
          "alg": "SHA-384",
          "content": "49c4cd7aece8075cecf6931e68a3f729891ee72ed1be296491553c30963b28114742ab8b0b1e998419525e185c901cdc"
        },
        {
          "alg": "SHA3-384",
          "content": "8d1f53d90754b1ec211262c8433104d79d69e5c18f729936e02f5b1bccd970519801694f01e91f78838b8c512e2cb72b"
        },
        {
          "alg": "SHA3-256",
          "content": "01f47409e642bc9a9aedb3a5d5ed20c1d4c18d9d6a175074a3d6691fad658dde"
        },
        {
          "alg": "SHA3-512",
          "content": "90c758a4261500252130e4a51908492a537d918e57b872acabbd02b52a2e5e496b0743d1ee0a4c925670307dd8b9e2e15e9e4a3103397567d8883b17169e11ea"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/dex-api@5.0.4?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/dex-parent/dex-api/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/dex-parent/dex-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/dex-engine-api@5.0.4?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "dex-engine-api",
      "version": "5.0.4",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "becb7a502106c114050cfb7eeae4f15c"
        },
        {
          "alg": "SHA-1",
          "content": "d76becd0778a74f7b3aa3e99c5a93e6eed690b0f"
        },
        {
          "alg": "SHA-256",
          "content": "44fc8e7c6246e0d83875b13fb8236a1c24470b8a36dfe519d933682cd4470830"
        },
        {
          "alg": "SHA-512",
          "content": "6e2714f2e1a02fd70b6b58cb6edf3bb24c00bc0761fcc85bedb449e9164b0475381f87b0883b12c9edf781681cfd81437b9835eb6a0122a97531d89560cdb5fa"
        },
        {
          "alg": "SHA-384",
          "content": "9cd760063f9107e9c4efc20a341858d57b2f4b12d2d23a8e22a572510887191449fddcac03942a0c54f4ca2c8fdecb0f"
        },
        {
          "alg": "SHA3-384",
          "content": "9eb4677e48cefd80fb55fdf6b32e56b7cfaa737e43717b5e57df4367bef3670893bc3e2a0df353bd46371ce22f79d5ba"
        },
        {
          "alg": "SHA3-256",
          "content": "7811f66cc20a2a3005df235066925e14d6bbed0d556041acd2e2564543c96ab2"
        },
        {
          "alg": "SHA3-512",
          "content": "6d02343b26a1fa57be3d22b2a07698028689eb3969095daef01f2b596afe9809d355bddc4533a6ce34f375f5048deea3f2b6be057018fcef3cbea46ba3e39126"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/dex-engine-api@5.0.4?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/dex-parent/dex-engine-api/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/dex-parent/dex-engine-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/dex-engine-migration@5.0.4?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "dex-engine-migration",
      "version": "5.0.4",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "3aab3290dff17d6600088b6ae382724c"
        },
        {
          "alg": "SHA-1",
          "content": "e91a02f40e11fd18d859da59a3bcde663d66c4da"
        },
        {
          "alg": "SHA-256",
          "content": "4341aa6392af4fdee6a8395b95f4262730d1718f73272af20c649cc9480114ab"
        },
        {
          "alg": "SHA-512",
          "content": "eed3a0998c276ac4ffe1c754b967fa282a70cc0e4545f38eb0803598df2afd70f2e65e1e7474161aee1ec0c532ab3f44d519c9aef19bef6575ef3ee72a27baf2"
        },
        {
          "alg": "SHA-384",
          "content": "7150fdb8f33cebcb6ad68066a00d539eb319785e7fdfde7023d809ac104ba0ed2a5885f04f47486f27e3999895dd2a5b"
        },
        {
          "alg": "SHA3-384",
          "content": "3097922cdce7d47c32fab06d3a4e4fde9dee957141cefa490bfcc410e25ad037fcddf85fe6e1f8ece01c297f65dc4769"
        },
        {
          "alg": "SHA3-256",
          "content": "4a751babc3cb224e3917f9a0006254b219f4ae0230adc1e4dfa18f67df7dc5a4"
        },
        {
          "alg": "SHA3-512",
          "content": "d9d138395aacd45863f471dbdae2a4c53bf7bee566c82db9bf1336b51c9afc1999a3e8dedcc210efda69a5dd953f6ff7b18e4c9fbb013f58af5e0bb756a401e3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/dex-engine-migration@5.0.4?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/dex-parent/dex-engine-migration/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/dex-parent/dex-engine-migration",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-circuitbreaker@2.4.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-circuitbreaker",
      "version": "2.4.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5e142f710747b6d4746413aca6757222"
        },
        {
          "alg": "SHA-1",
          "content": "10b06bc2b679f5682f5528b0058ba1a166734db5"
        },
        {
          "alg": "SHA-256",
          "content": "31ab1d15570357271b8c28d82b2f412c5f36a81ac253145aa32177c4f087efdc"
        },
        {
          "alg": "SHA-512",
          "content": "b5d23f8ddabb8d22585e93db1d5ed0b11cb2807c1279b45c74988eaf621e87324cd9a74deaad8b17c6b5a7219f2a17b32550be478c0621cb9fea762f3f5d867c"
        },
        {
          "alg": "SHA-384",
          "content": "826513581ccb029b95c9fb4b579035131a3166e6d99381b7084875fe2997545dfc41956f9449f3f4963d233b71f9d647"
        },
        {
          "alg": "SHA3-384",
          "content": "6f25185fccf89be43a7aef0349ce69a272ef09bc179d8394932bf473cd17650d143cdc6a24a3aaeb77bb806be018b630"
        },
        {
          "alg": "SHA3-256",
          "content": "6de361abc2ecbde73d99917ee11cc808c12f72f4a4c0da8682835675da985f4b"
        },
        {
          "alg": "SHA3-512",
          "content": "3baa1529e89d34844eab621f170ff4ea78771f15bdda9a5ff50ae1095b3d1c579b4ca45bc169c654f8934118325bd82ea6cdb3977d06d76218b2c128591b9a44"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-circuitbreaker@2.4.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-core@2.4.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-core",
      "version": "2.4.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "876d87ec308d8636105e17577dc32ec0"
        },
        {
          "alg": "SHA-1",
          "content": "917315545f2ae0221ef3d6c27337b9ba6cba2702"
        },
        {
          "alg": "SHA-256",
          "content": "a15d25c4709a4c12432cd0a4f620e37a00a82dbe112f5d1a7a68b31325ffc978"
        },
        {
          "alg": "SHA-512",
          "content": "0b297e68f9e4542a724d507697c5476568dc8459156e70dc2e4b3fa812be7a6d070c603a58ba9eb1e2331df78479da71a44ada6a4d303f6f0ab224cb24bb2f07"
        },
        {
          "alg": "SHA-384",
          "content": "73498053467091de64ba6cdb62948e268afba62386a03fabcee6aafcfde6ed152bcec726c1f7d78d5b9ee7a1c34008fe"
        },
        {
          "alg": "SHA3-384",
          "content": "d1adb2a7e58982ff23beafd2aebfd2b3769d37caa965a1542d8d1c6d3cc1499117d874fa2e95c8e4b1c98033ecc37656"
        },
        {
          "alg": "SHA3-256",
          "content": "db568c467b698f1e695e75982105fbce261f91ba528539cc3ff10c67e81562b5"
        },
        {
          "alg": "SHA3-512",
          "content": "635fd7c97582d1deaf7b3fc74ff38d796656fd110e881d3cf793aafd30d73e649a25e58f7575bf8ce54e85291061871c21bbf31c19db937902b31a5de27f0054"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-core@2.4.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/file-storage-api@5.0.4?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "file-storage-api",
      "version": "5.0.4",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8c8babf6ea071641f0b1cbd34bfe30be"
        },
        {
          "alg": "SHA-1",
          "content": "3e01b051bbdda003acd2f9ffa40b3905d667e5d4"
        },
        {
          "alg": "SHA-256",
          "content": "1473b7648c27992a46786a8afd1f11245395346795804b7e29bfe65fde970a36"
        },
        {
          "alg": "SHA-512",
          "content": "faff4e019e8ed0f0dda41ad1a80a77f9a42b42e89393653cf0dd9a457f0c6c8061c27cd720dabe0ca6390d07c769622fb067b4f6081238e03bc9d55ee72cb729"
        },
        {
          "alg": "SHA-384",
          "content": "2ea184fbd3e4132b851b6cce84a4d5421c59f7389b755fc9ede7761af314b3ee790203f82facfbf44a99c28f2a205bed"
        },
        {
          "alg": "SHA3-384",
          "content": "ac9590e456737890067d79f1d5e4566b8fa47ee9166fc6abc6f26a68e4d33a0e766d3799db3b501751047a90b570a6e6"
        },
        {
          "alg": "SHA3-256",
          "content": "3d8b704f7d33fb75a33b110b46d197517af1ac75462e945e2df35ff9bba3c8b1"
        },
        {
          "alg": "SHA3-512",
          "content": "61734f259ba983a4bd3f87c20bd1be42bcfaa176db1b2fbd1c68a2b237b02d8126af87e8b3fc3d2b2cd0a28d84ebb551c74797fe4b2e6e1ada5c0dd449dd24c7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/file-storage-api@5.0.4?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/file-storage-parent/file-storage-api/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/file-storage-parent/file-storage-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/file-storage-provider-local@5.0.4?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "file-storage-provider-local",
      "version": "5.0.4",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "48782d863126a907dc4e2fdc3d3e1ea3"
        },
        {
          "alg": "SHA-1",
          "content": "baf3a3c2213c3759ac4e8dcef39677f76533d1aa"
        },
        {
          "alg": "SHA-256",
          "content": "1dc7c41c4fe638159c73339b75584861bb6d577dd4bf01423361a188565ff5ba"
        },
        {
          "alg": "SHA-512",
          "content": "c720e5f067e69b187753f1e6568c64a2c0f12f52876f79761563557424ac7f925e54123f87edd9215c5c11420bf82603cfea4227c01a439540d4ec244a62f1b0"
        },
        {
          "alg": "SHA-384",
          "content": "d777e3e89cb8d51721d954c48f8da1f8674a6db8e6a15c4fc815e56e08ce0fa4c8788e1447b020cc35a8edbf2014adf6"
        },
        {
          "alg": "SHA3-384",
          "content": "7b77d0e820d672bb29b39d00b765c791bb7760dad10b12665bf2682d5a0746429e4e92035972165bb960932ad14bd70c"
        },
        {
          "alg": "SHA3-256",
          "content": "c4749642064811b38c0ab9ed88204b106fdccdc0ee5f23fb89346f2e66a732f4"
        },
        {
          "alg": "SHA3-512",
          "content": "38e9d18bd77942079e537808df448d8c99af81f8b0a7c5131868f94dfb04d1ce2c84bbfe14873caddd4f9b787e3ee089810a3b5733e3a2b0f8f630c0375540c7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/file-storage-provider-local@5.0.4?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/file-storage-parent/file-storage-provider-local/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/file-storage-parent/file-storage-provider-local",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.luben/zstd-jni@1.5.7-11?type=jar",
      "publisher": "com.github.luben",
      "group": "com.github.luben",
      "name": "zstd-jni",
      "version": "1.5.7-11",
      "description": "JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "db3bda239585fb7eae95c3ea6eb89da6"
        },
        {
          "alg": "SHA-1",
          "content": "4e88b2ca784e3530070c074dc38052876e74b9ab"
        },
        {
          "alg": "SHA-256",
          "content": "e45c18832293934924e4f2f1dd97ee2083a74def46caeeea1346cf817a37cea4"
        },
        {
          "alg": "SHA-512",
          "content": "3285e02d4aa3f9c9c49fafd2120499f3217adbc7d6a98869fb57505b23f55d1cca234de6593eac22d32a5a3446ffed36b8e0db1a47d39b9b8903707b17e08cc5"
        },
        {
          "alg": "SHA-384",
          "content": "91383c747924b3e57222890e039c54e746b81214306637154829e1630dba034f278febc3c38c8299dd3f59a19e4aedfc"
        },
        {
          "alg": "SHA3-384",
          "content": "8fa47e1dc6fe62d9ef75f66673f7b9fbb826dc2a764cb2a53bbac6a126f39614d8997c2270aef2f6cae00d94f6bde1b6"
        },
        {
          "alg": "SHA3-256",
          "content": "4cd8891c0069ac5679eb8b149438631fd981293929c60ed207a9c54fded21f0c"
        },
        {
          "alg": "SHA3-512",
          "content": "25a62e16b0fe9b3469bf3c299a9a6ac2fe62d12a4ffcb47ea527a8ebb1f1068c948b49e21549f88c24b7bef1f9ee66a402543870e6e8030b3bb03f919e1bec39"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.github.luben/zstd-jni@1.5.7-11?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/luben/zstd-jni",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/file-storage-provider-memory@5.0.4?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "file-storage-provider-memory",
      "version": "5.0.4",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "cb0d10262fe85b49af57bd07a502b852"
        },
        {
          "alg": "SHA-1",
          "content": "5580e3ab8cfc53f315576eb1b5c212c7a191c03b"
        },
        {
          "alg": "SHA-256",
          "content": "02f2130075e056eca2a7d97c2754ca05cc3cd24f2594c409dc8783d9b15a99af"
        },
        {
          "alg": "SHA-512",
          "content": "a9e301ff255d9274937cb14b365cfbe6e39c845866fb4b1499876a6bc61f4323f786a559340d765873ec7426b5209e7a60ab8cfce36f9a6a8e0f504b70522855"
        },
        {
          "alg": "SHA-384",
          "content": "cfedf0ef20de46f59f70c39f14f4d61da4845dfa6120823c261a205f3f34ab15ff20b120fded286ed09b0931db2c066a"
        },
        {
          "alg": "SHA3-384",
          "content": "07e0aa78e7aabdcbe817b402b4e1da4df1e9ef6156072713f72db683460be6f09174f51d29f65ce656561d7de6a6ab7f"
        },
        {
          "alg": "SHA3-256",
          "content": "79316a15b4b4860bf5aba1e723c2006805e246596e8528e137cb7d66dd1a5de6"
        },
        {
          "alg": "SHA3-512",
          "content": "f2a4a450bd7981183309a97cd804bb1b4cd555a452651f9c3bf7fe0862261a74138f850df8183e06f31958ab01e11979ade20989784dee14dd6d010ce4162dba"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/file-storage-provider-memory@5.0.4?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/file-storage-parent/file-storage-provider-memory/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/file-storage-parent/file-storage-provider-memory",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/file-storage-provider-s3@5.0.4?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "file-storage-provider-s3",
      "version": "5.0.4",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "483f2356d4651b38a351af274df14936"
        },
        {
          "alg": "SHA-1",
          "content": "75ab11e8f611b9d38c747c9dedcbaf897567bd2e"
        },
        {
          "alg": "SHA-256",
          "content": "26fc39135210b409c9c83f085b7145dc5191d4c8e09a2c03508b3f1b5bd7864c"
        },
        {
          "alg": "SHA-512",
          "content": "33e02da10a29954240caee6ef6fb51144f9f8d877935a9a9a44f65333187b8aa6ec6ec5d32717a453de7bb44dd0ee66abf625880bb236db43b848873e3e71d7c"
        },
        {
          "alg": "SHA-384",
          "content": "c136043f550051d382dfb01526d930ba9588319f22814f5fdb202efca015b74d689484427f4c896b9e9cf50958738bb2"
        },
        {
          "alg": "SHA3-384",
          "content": "890191c0e0db0efe1a6db4ed357baf19e1f8e5537e27a63dee2dc26a19ac799e6cfc086200537f27d3d32be0102b8c3f"
        },
        {
          "alg": "SHA3-256",
          "content": "16641665060204f407e997801ac0228eb7ade433a9b1d8fd744b10a448a1cfcd"
        },
        {
          "alg": "SHA3-512",
          "content": "bcecf7ad592c362a92159c072cd18d7a6eb96d5f3f4e50731b29b8248bb3fae9b6a389a00500c5b039c306ed0318fea4ed9298738b4f4b299887bd40ea4c6f11"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/file-storage-provider-s3@5.0.4?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/file-storage-parent/file-storage-provider-s3/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/file-storage-parent/file-storage-provider-s3",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-data-source-api@5.0.4?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-data-source-api",
      "version": "5.0.4",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2c846e9f31f2515b5fc989a064c20dd4"
        },
        {
          "alg": "SHA-1",
          "content": "431c55fa30f621f27004b050abca848e36c7095a"
        },
        {
          "alg": "SHA-256",
          "content": "28319dfa45a490e59163058d39d564953aa95f0446dabc4c1f20a86a2cb43c43"
        },
        {
          "alg": "SHA-512",
          "content": "3a60ed6c69495868f79a04a84ef4e023e9e82a2a9985b0d14d5d2dd72bd8d7d80d0db500261b75d07e8a9593cb20266316d0b7d8fe6e400dfdb2f80c077dfc26"
        },
        {
          "alg": "SHA-384",
          "content": "26ff532ec6960951e3adcc2294ab26830c0de0c62b28f4472a221a8acf1a1978dd42db102e81068c15686ea41b8d82f6"
        },
        {
          "alg": "SHA3-384",
          "content": "90aa7c2d60285a1c3419f1b0102c918063f307f1ab6513e31629789389872b61acabb8b14eb460fda6d6fec8bae90199"
        },
        {
          "alg": "SHA3-256",
          "content": "a5ada236f04b4e9ab68d4fe41dd80d350743490b2a7cb176fc4974ac63ef8071"
        },
        {
          "alg": "SHA3-512",
          "content": "2fe36542b51d21160ef9462fbfeea4b759204d8245c2302ec06c6d7b395af7db3054d8dba46b3a3a52e233db4e5cd0df6b6a33c6f307bffaaf9de492b275a651"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-data-source-api@5.0.4?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-data-source-parent/vuln-data-source-api/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/vuln-data-source-parent/vuln-data-source-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-data-source-github@5.0.4?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-data-source-github",
      "version": "5.0.4",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "63fb72c015b2ac7e0c41a95115c0c8ff"
        },
        {
          "alg": "SHA-1",
          "content": "397f521b3e5506db8d54e85f061ebb89a7450613"
        },
        {
          "alg": "SHA-256",
          "content": "f2df41c635fb53cb6c895e5e36c2459a0db7430f64730ae089797921cd25b6cf"
        },
        {
          "alg": "SHA-512",
          "content": "3c3a52760f55145772ad54d356b4d8b612f89933f3f1ff2c0362a366859549fe8a19582068508dd77793fd7735541e7e09134329f45a36da46403ed42ebb9ac0"
        },
        {
          "alg": "SHA-384",
          "content": "cf2280f021d7706597e56e3a5d9b507dc7b52235d96c872ee29052002383fe2500a9de09243f51ddddcd021c8d3af22f"
        },
        {
          "alg": "SHA3-384",
          "content": "9971337a56354d65db8ebfff47aadaf8503ac6e846646d7f2ca8ac18e46b2dc7d282ca46c3fca1e45e9bf98cb9627fb4"
        },
        {
          "alg": "SHA3-256",
          "content": "0553d7729729ff9b502654945197d65383f4b04ce72fbc5354a1cb9771a35e6a"
        },
        {
          "alg": "SHA3-512",
          "content": "ed00b86ade0bd320a47f6b227add0998495505c8fcf05349a5d6132e12c2e270f8e081b629c2c83125ed7eeadb6c0f4dd03650db0e84b65d49d099d48c75fa7d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-data-source-github@5.0.4?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-data-source-parent/vuln-data-source-github/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/vuln-data-source-parent/vuln-data-source-github",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.commons",
      "name": "commons-lang3",
      "version": "3.20.0",
      "description": "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang\u0027s hierarchy, or are considered to be so standard as to justify existence in java.lang. The code is tested using the latest revision of the JDK for supported LTS releases: 8, 11, 17, 21 and 25 currently. See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml Please ensure your build environment is up-to-date and kindly report any build issues.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4b29562ded527aa074e1d44f8646dac5"
        },
        {
          "alg": "SHA-1",
          "content": "65897b3e5731220962e659e001904af3c3cbeba9"
        },
        {
          "alg": "SHA-256",
          "content": "69e5c9fa35da7a51a5fd2099dfe56a2d8d32cf233e2f6d770e796146440263f4"
        },
        {
          "alg": "SHA-512",
          "content": "1c72db334ea44f932c35e602b78907865f5bab43e30c871c9be67c8184eaa778f32d7bc3ab525d5921cd28619d3f9babfd483f17de54f007ee07db2e074b0307"
        },
        {
          "alg": "SHA-384",
          "content": "77dd27c4d5e9372c002bd6878d2cfaaec3cf46dd57d65de63d7f2e09351344531cfa81a537b56628ac6db18adee7e484"
        },
        {
          "alg": "SHA3-384",
          "content": "3456de40eef224b3ad195d2f218dd28eacb0da07607aee7ead94bd8d54bd8311d51c28d4066db4bf8b69a2df48c415f5"
        },
        {
          "alg": "SHA3-256",
          "content": "36e3f71352fa14bc580db45a05b09b063392c6d39acf9e24ffa6a67bbc07a336"
        },
        {
          "alg": "SHA3-512",
          "content": "6ecbc05bb5cd3f7537078b0cf51b0a5f7189dfa60c22e5ec0d6b9e2fd3f7fa7566770b5da87e0c9929f48769933c3e3a473fd5cc7231672fca36ab1fee1f8670"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
      "externalReferences": [
        {
          "url": "https://commons.apache.org/proper/commons-lang/",
          "type": "website"
        },
        {
          "url": "https://github.com/apache/commons-lang/actions",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/LANG",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/commons-user/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitbox.apache.org/repos/asf/commons-lang.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.6.2?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents.client5",
      "name": "httpclient5",
      "version": "5.6.2",
      "description": "Apache HttpComponents Client",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "206eade53e6cde90a9ffe09cc56d4788"
        },
        {
          "alg": "SHA-1",
          "content": "10ab45a37a2f4174492045840cdb5eb12c4336e7"
        },
        {
          "alg": "SHA-256",
          "content": "f3bf571b04dffe005ff29b965b9e3a88846aac6e63f24eae38a86d1979ea49a3"
        },
        {
          "alg": "SHA-512",
          "content": "21707e209f29fba9c903fce4ae448addfd884db4d88d658ec6d05ca8fbb721f88ef873fb1ef4db1d89632a2028536203c86f1810c0e3bc46d3b9056518df3f36"
        },
        {
          "alg": "SHA-384",
          "content": "ffb665436e85caf368f5245f74a8cea475e4ed687a56c16e090f143742862f6a8429134150e14c29dea08faa7b075c72"
        },
        {
          "alg": "SHA3-384",
          "content": "1c139ebfc53e51df4c7d402bbb30dd9e3d1b47b918f6329e9edcf6df3401ec1ec70b36cbc0fae92d6f5983742c439e89"
        },
        {
          "alg": "SHA3-256",
          "content": "07f7adcb21cb6fe09f3095b83ff996206fd1e899c0cb73e7a41c7d6486fb3313"
        },
        {
          "alg": "SHA3-512",
          "content": "703b17e712f7889557131e3b3bde27287f4e1e070da07013fa55b9e7dd43fcd1daa8e05d3f26ec59f7c56e13078d5e8759307b9f8015227b44a9fc7307d88196"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.6.2?type=jar",
      "externalReferences": [
        {
          "url": "https://hc.apache.org/httpcomponents-client-5.6.x/5.6.2/httpclient5/",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/HTTPCLIENT",
          "type": "issue-tracker"
        },
        {
          "url": "https://lists.apache.org/list.html?httpclient-users@hc.apache.org",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/httpcomponents-client/tree/5.6.2/httpclient5",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.4.3?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents.core5",
      "name": "httpcore5",
      "version": "5.4.3",
      "description": "Apache HttpComponents HTTP/1.1 core components",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "40cba87d4704bc9e1691f340fb8042cf"
        },
        {
          "alg": "SHA-1",
          "content": "32a0699fbcb103f5621c00983ee8f5aac080e4a6"
        },
        {
          "alg": "SHA-256",
          "content": "18bfbbabb478dfb67f31aeaf428c387f3c3df654582e1309f708ee1f3086830a"
        },
        {
          "alg": "SHA-512",
          "content": "2ae04ae83015c46314a502a0973bec86312680cb548f0ae68002af4f5fd958deb60c702ad9dcae72c23561e2e0954518bb0355a1496096f7e9b9a2efbb7c9bae"
        },
        {
          "alg": "SHA-384",
          "content": "09312cfbd7b33c3c8712405aff437ef7b93260a07a625b7cc491d3e2fa0d65852d72f4f6701ef707c4cae52caadcddd0"
        },
        {
          "alg": "SHA3-384",
          "content": "419f9608bec952746b274a3510bc0f0dbdb6cc4b1269c9bd89c218894a42fda0dfd7b46912b57cc722b3d76b7f11c07b"
        },
        {
          "alg": "SHA3-256",
          "content": "8cb162e60b804205084fcc8e562f6eb47f5c13eefa42208cf6accab1d28e0ba2"
        },
        {
          "alg": "SHA3-512",
          "content": "eccc71fecc0525c6fca46ca9e19eaecf26d646f3e71528796e8dcc0f16cb0882d485ceffa1c48e14e60eb8b429ae0fd5935274bb8907c2869ab54cb76e931abd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.4.3?type=jar",
      "externalReferences": [
        {
          "url": "https://hc.apache.org/httpcomponents-core-5.4.x/5.4.3/httpcore5/",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/HTTPCORE",
          "type": "issue-tracker"
        },
        {
          "url": "https://lists.apache.org/list.html?httpclient-users@hc.apache.org",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/httpcomponents-core/tree/5.4.3/httpcore5",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.4.3?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents.core5",
      "name": "httpcore5-h2",
      "version": "5.4.3",
      "description": "Apache HttpComponents HTTP/2 Core Components",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4b9da0d3e87ed769ef6a162223f2265c"
        },
        {
          "alg": "SHA-1",
          "content": "33bcd37d645539d27c65e17420843fd7f6c0ebf4"
        },
        {
          "alg": "SHA-256",
          "content": "c7db7026b8e2dea39132b04a6069f6671e2858309b20a146ec5c7dd6ed73a0b6"
        },
        {
          "alg": "SHA-512",
          "content": "0bde9a7579cba0dbb6322c8a25eefd0bdb80bd907b4e66c20570ce23558fd57daf9ae5233a571546171456b9f7da6e970507cde971a1155d1bce011c62b281af"
        },
        {
          "alg": "SHA-384",
          "content": "31c865c7c4fd4975d1a60223478b1aa9a8c374e77e23f46c3033f9f88a4fa774850c5f7c4974ee6c98a8f0ac031ed843"
        },
        {
          "alg": "SHA3-384",
          "content": "06cf3bffe6edd2fc68630b79d041cc1af328f83f55356d75e69ebed85057edcd3c3f1319d5d7c777878807122ed9c86b"
        },
        {
          "alg": "SHA3-256",
          "content": "d9e78aa4f4420d006a5df8b339df2c58d5fc680e5c344d746bdb39ecf4af1791"
        },
        {
          "alg": "SHA3-512",
          "content": "63557025bcf6a3b28d85a62d06840290d5587e10b35cf41f4b4a640c29d09f1cc96bba26a3aec0cc0de37098edfb42c53de401ce94cbf32680f6e1143cd091a4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.4.3?type=jar",
      "externalReferences": [
        {
          "url": "https://hc.apache.org/httpcomponents-core-5.4.x/5.4.3/httpcore5-h2/",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/HTTPCORE",
          "type": "issue-tracker"
        },
        {
          "url": "https://lists.apache.org/list.html?httpclient-users@hc.apache.org",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/httpcomponents-core/tree/5.4.3/httpcore5-h2",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-annotations",
      "version": "2.22",
      "description": "Core annotations used for value types, used by Jackson data binding package.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "04c11c456fd1e21b9a21c25c665109cc"
        },
        {
          "alg": "SHA-1",
          "content": "15c67f9498d6934cff9510fc70c5a12e52290457"
        },
        {
          "alg": "SHA-256",
          "content": "21ddb598807d3a51a876704eb979d9296e1c6a6f47ab1826ff88c6d6a127a2d0"
        },
        {
          "alg": "SHA-512",
          "content": "63b597ec02b4e31c57266d9b96f05f301f217bc12ffb7ba046a5658d2829728930a559947b98eb6c3cc448413a96b4939427aa669ae1e2dc3597ab5d5d287f9f"
        },
        {
          "alg": "SHA-384",
          "content": "35b6fe651afeed54d1e6f7a39ac6cf6fdbafacdf2e3bdff7b29b965ccb79a0c53342a56bf0ecea4d6c4c4651b1d6aa19"
        },
        {
          "alg": "SHA3-384",
          "content": "72267dc54c4175c42ca0dd430a87b12cc68619a8777be2048e1d2f0747db884a568b5c346c77c9c8c0714ab96018f5f7"
        },
        {
          "alg": "SHA3-256",
          "content": "6bfc7b4ba70779fe5f0b1e2af585abab982f7929a68beb2c0e62ea2e2a321de0"
        },
        {
          "alg": "SHA3-512",
          "content": "3f1bdfa32f7df76ac14cd2a3e689b65066fa0a6a760a9b8b1121773bb1b043a44587d4148c67f361dc6c630e6b31f29b2691a57d47caabea5ca23ae44af34a5e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-annotations/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-annotations",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.jeremylong/open-vulnerability-clients@9.0.5?type=jar",
      "group": "io.github.jeremylong",
      "name": "open-vulnerability-clients",
      "version": "9.0.5",
      "description": "Clients for vulnerability sources",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ffb30f5216c160cf97b59ac846e885f1"
        },
        {
          "alg": "SHA-1",
          "content": "f88ff671b4f4c0d7bf69169ae119887e933cacc3"
        },
        {
          "alg": "SHA-256",
          "content": "4c74763f5f251702d8e842529ce929bbba0c961348d37a28477e327a589f4f52"
        },
        {
          "alg": "SHA-512",
          "content": "b4857ac81fc948f722fd96f60619786149f86091a980277a40085fc5a9d7fb0e24e01189771b95ae5ea5cf17c2fa7e3b1bad3fb9b5b0a71e69796ffd78d347d6"
        },
        {
          "alg": "SHA-384",
          "content": "a4cfcbf7285c7abec9e8d2422544ad616e267f4aaffa478f8e38657897ab01f3c91b14c1b204ac623f1f1c597675af96"
        },
        {
          "alg": "SHA3-384",
          "content": "cc521bb2f13e0b64806d5605fd74b82dc7c9e90868480c5964040910661d44d3ac261eb09a82efa767b29065c5f850a6"
        },
        {
          "alg": "SHA3-256",
          "content": "2439eb9af7871a4faac10ebdb1dc87ef8258a7ea5b877532744425622277ea72"
        },
        {
          "alg": "SHA3-512",
          "content": "8483ed16d094534223784fda547ec076fbf7b8ca636bb0d5db2d1bbffc5b08b7455ad9caa3cbe23b7e42115855ac23e5d368d1716207d4bd54693f5eff1bfb3b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.jeremylong/open-vulnerability-clients@9.0.5?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/jeremylong/open-vulnerability-clients/",
          "type": "website"
        },
        {
          "url": "https://github.com/jeremylong/open-vulnerability-clients",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.httpcomponents.client5/httpclient5-cache@5.6?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents.client5",
      "name": "httpclient5-cache",
      "version": "5.6",
      "description": "Apache HttpComponents HttpClient Cache",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8cec7f04887daf5db87b49a75037297f"
        },
        {
          "alg": "SHA-1",
          "content": "161f12ce409b84c92bd092a8e7509f57f0a5f31f"
        },
        {
          "alg": "SHA-256",
          "content": "1cceca0cad38592e30126b0655b050a737e92e48be70c3959cdc95347d0cb06a"
        },
        {
          "alg": "SHA-512",
          "content": "d411f5a9cbc53b3d50d7ac48410a34006d4b050793704ce1c5b415b212f81ab1018d2eec148b1a323723436f4cdcdb524c5f2872d8ba0cb52533f903a4d1c6e4"
        },
        {
          "alg": "SHA-384",
          "content": "549438ced92f3dcb0251284ccccda096ef41ac810bcbd5be9105b8730e8bb04ce453ea142470f2c8c31bf4f66a1e6013"
        },
        {
          "alg": "SHA3-384",
          "content": "66f328ef55cb03b58061a4e08be71d6b23745e786b31913b2d4fd66110819d7b5e01768cf3f09595e40186f08ce534df"
        },
        {
          "alg": "SHA3-256",
          "content": "0c389088e726c03bc80b25b0de1da4e409c82f7a4fe595f6b351b6923a99e16b"
        },
        {
          "alg": "SHA3-512",
          "content": "fdfeeebc941420b249284e2938bc786cf01446a33de542847f88176ec6e63c7f7f3b01a2841c364e1189254e608b260948fed01e7d9c57c9adf3a6e50ab12d8e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents.client5/httpclient5-cache@5.6?type=jar",
      "externalReferences": [
        {
          "url": "https://hc.apache.org/httpcomponents-client-5.5.x/5.6/httpclient5-cache/",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/HTTPCLIENT",
          "type": "issue-tracker"
        },
        {
          "url": "https://lists.apache.org/list.html?httpclient-users@hc.apache.org",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/httpcomponents-client/tree/5.6/httpclient5-cache",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.samskivert/jmustache@1.16?type=jar",
      "group": "com.samskivert",
      "name": "jmustache",
      "version": "1.16",
      "description": "A Java implementation of the Mustache templating language.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "7eff40c29c2fdf3faac3db921f07dc80"
        },
        {
          "alg": "SHA-1",
          "content": "979c7145a406b83bf28da32531f88a34c2d2919c"
        },
        {
          "alg": "SHA-256",
          "content": "3d4b984abd66908f05b38c9c892325cd4785d01ff33922569ff9b90c9ebfc475"
        },
        {
          "alg": "SHA-512",
          "content": "f245f8b979cf63fb4ad762e586a27468fa91b751aecf94f9f1dce32f551dec30c4b2dd881ea8b9b6a7eea3e9dfb34ceb96204d358bbb62120233416a4df382e1"
        },
        {
          "alg": "SHA-384",
          "content": "f53c07c96c4a4e8f9b424b17bbb152cc540dea8174db43b9bf5a12357d5207e5b8c0de506d83703fb46cfab13051c142"
        },
        {
          "alg": "SHA3-384",
          "content": "ac74164c34a0b40bf8e2d2c9f737bbae1b5c9c2c3a342487ca8271888379be51c5a0e3f45d1db57538eaed470bd7722f"
        },
        {
          "alg": "SHA3-256",
          "content": "2fdfe84999fe4930c399d5f78b678907881eea246fa30fd97f42f31ec90a2a8d"
        },
        {
          "alg": "SHA3-512",
          "content": "e213ee1cc34d3fde03785ac05a5df09c4b462fb1b1d0f02dff41e7b53522005df2e38b303bc193cff9203ab7f8a50764e1dea967035a454cf1988c056a615d57"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "The (New) BSD License",
            "url": "http://www.opensource.org/licenses/bsd-license.php"
          }
        }
      ],
      "purl": "pkg:maven/com.samskivert/jmustache@1.16?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/samskivert/jmustache",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "http://github.com/samskivert/jmustache/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/samskivert/jmustache",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-data-source-nvd@5.0.4?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-data-source-nvd",
      "version": "5.0.4",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "56a194c51406b015fe35b012293e53f1"
        },
        {
          "alg": "SHA-1",
          "content": "121b56e24eae2c0d34f0442b89fb73470d296614"
        },
        {
          "alg": "SHA-256",
          "content": "4f7f2c66b84f288baeb373728e32f2ae9ffa8164ff26b0b178de9e62ea413032"
        },
        {
          "alg": "SHA-512",
          "content": "7cf194b12f98e1ba00de9c2b2a20470f180f10b60718118b8d223a6c6ba239e8a7bea3d80f9928849be9c8e6524c1842df94ad0b6b9887fc2a4cb2a566004b5d"
        },
        {
          "alg": "SHA-384",
          "content": "98896e8498bd5bac33efc6ab02e5f00236dda7dadfdacc3c78d718966a86501bd54800c2121735443d234954d44accae"
        },
        {
          "alg": "SHA3-384",
          "content": "0b4c81a01afd330db0019a0a4396739717dfc3ddc5e6a2a89ffdf61af82d23c5f8f61df683409b4460ed9f3d9d9cbb67"
        },
        {
          "alg": "SHA3-256",
          "content": "7511ca16e53770a92ff686b7b7058509ed564c037a236592460e767a35eb66bf"
        },
        {
          "alg": "SHA3-512",
          "content": "da015fe8002e80e62301b4b0b18ee424f080523c53a9ecab51a0ac4b1792078485e841abfc4de1abedfa59753d4a9b849628a7474d3dba2c61f0546bb8c39b06"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-data-source-nvd@5.0.4?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-data-source-parent/vuln-data-source-nvd/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/vuln-data-source-parent/vuln-data-source-nvd",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-data-source-osv@5.0.4?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-data-source-osv",
      "version": "5.0.4",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "890dbf16010c4183bbe3aa0d72d2e177"
        },
        {
          "alg": "SHA-1",
          "content": "1bbf674eb57daaa7d70e451c650bf1d94cde03db"
        },
        {
          "alg": "SHA-256",
          "content": "ccb021b92be5288842ec6340dc24ca53d34ac5ebcc222b98ca535b4bf6f1d69e"
        },
        {
          "alg": "SHA-512",
          "content": "4c04a3cd0f52943a809575459a903fb8e36fcd35bb05606c672b14e897063a6c5618ac8f72c5a627a8d5aa72cc350b588b042bb0dc340f850a226d43af91070b"
        },
        {
          "alg": "SHA-384",
          "content": "aa0b7a1881d0b91bf6cbc373c1fff9630194f64c020fe9883b38e06e5da63e0a0da2174743b34f111acab7f5e02e0bbc"
        },
        {
          "alg": "SHA3-384",
          "content": "83e7e1992cce8353415acb33a7fd4affbfa7fb380abb74f1ad6ba8e517ab2fc1218bd137623041226fba85f2bcd634dc"
        },
        {
          "alg": "SHA3-256",
          "content": "8af8169a98c9ae5074a52389100238ed7d4d04bb5da813125f3f48a5ab24537a"
        },
        {
          "alg": "SHA3-512",
          "content": "8b61c9f8d197111545c665acec72ba5a67aaddbb89011bbd0f9a6e1605850ba364e478f1ee693d36bd5d53f2b4e48deb9aed7bc7ef80efcd7ba215d85a103dc6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-data-source-osv@5.0.4?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-data-source-parent/vuln-data-source-osv/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/vuln-data-source-parent/vuln-data-source-osv",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/alpine-common@5.0.4?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "alpine-common",
      "version": "5.0.4",
      "description": "An opinionated scaffolding library that jumpstarts Java projects with an API-first design, secure defaults, and minimal dependencies.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b9b2719e071f6ecc3e11f9ad0fb1e2a8"
        },
        {
          "alg": "SHA-1",
          "content": "480e918ecca2b8b351d051e75c8fd2c3040427b5"
        },
        {
          "alg": "SHA-256",
          "content": "ab4b70937acdef1499609f1e3b4e5d2a1b451560349556b62be4f7a9abc0d323"
        },
        {
          "alg": "SHA-512",
          "content": "d7f9f85cbc0cf127f1c0a9d1ff8cfec478aa7c81fbe3d53c304b0891d2ffd40943a3e29663ae94d8581fed609a9ede70236be08856499338aece89b742d22f04"
        },
        {
          "alg": "SHA-384",
          "content": "96490da1332e109ac11261479d22e73fcfa2dca11944f466996eb793187db5856775000e213c2fd14752592bd41efe5a"
        },
        {
          "alg": "SHA3-384",
          "content": "656dedbb03cbee72f1b1005bdd5ff1a496ec8fcd330b006282a9779c6abd6f9bee49bfa0adbd582c7788c4a3f202893e"
        },
        {
          "alg": "SHA3-256",
          "content": "103ea5d349698ca4affae94e213857e5adb8ee2ff3fc47828359511ba1d2bdf9"
        },
        {
          "alg": "SHA3-512",
          "content": "e51287d99eea4554499831faa5a63a6ec8341c54e03765363b4a70f3182e893e5cb153dfafaa297573229b85b27ab813b0dcc2e0d92f39b9d64a01177eeac989"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/alpine-common@5.0.4?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/Alpine/alpine-common",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/alpine-parent/alpine-common",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/alpine-model@5.0.4?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "alpine-model",
      "version": "5.0.4",
      "description": "An opinionated scaffolding library that jumpstarts Java projects with an API-first design, secure defaults, and minimal dependencies.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "93ed0358ca8f08e3251e973075cde70d"
        },
        {
          "alg": "SHA-1",
          "content": "bf4e2f9c92ecac4343f2cf10e574284c73c83a27"
        },
        {
          "alg": "SHA-256",
          "content": "9f848548e83bd4370234784d7a9a1caba923f86edb9982d542de965b29db21ac"
        },
        {
          "alg": "SHA-512",
          "content": "1d03c60c70b1361fa4c337f3589aa867edd491ffb4563ff562d939eb9de507c883f9fc4c85d57ab566c27f251505dc5c5b450112ef8acfeb8064fadf80dab1d5"
        },
        {
          "alg": "SHA-384",
          "content": "de515d29033f9c411dbc6d0203df2e931bb0c9920173689a1e43b27414ba4403c28eee14bcdc9a26e193fdf1833e63e6"
        },
        {
          "alg": "SHA3-384",
          "content": "1a692e452e9e2309d0bad2efc48c98f5b0d22a5899b14d4c27e6090bcbb1990d196f0dfa48780d2f3084c7ef781a991f"
        },
        {
          "alg": "SHA3-256",
          "content": "5e5667595d1326f77f8f1a14490d9c2e945828981ddeaf3556c681db4104e959"
        },
        {
          "alg": "SHA3-512",
          "content": "e890708ef83eb303b329b3a8638adcd66c451035b053055d29f0cd26f6fc878fa7801600590ca5801797d109a193601623bbbc739d48d89097067fc21da43350"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/alpine-model@5.0.4?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/Alpine/alpine-model",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/alpine-parent/alpine-model",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.datanucleus/datanucleus-api-jdo@6.0.5?type=jar",
      "group": "org.datanucleus",
      "name": "datanucleus-api-jdo",
      "version": "6.0.5",
      "description": "Plugin providing DataNucleus implementation of the JDO API.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9b7448a21838cae99a8b9f3875d93a08"
        },
        {
          "alg": "SHA-1",
          "content": "30f49348795e1d2e9a8e1613e9dbc6c3f851f1ca"
        },
        {
          "alg": "SHA-256",
          "content": "423ea8da36763d6c17d55434477b7ab2339d3cef5acf67dd30198ef1dd0ed477"
        },
        {
          "alg": "SHA-512",
          "content": "5262a518ccc344692af86a30d51e4d1d9ee2b3167dc16657b37e8cfb2affc3fd73db4df9df5463e4a25097d9eff27c9f305407239e19381cd32c0c7f9f01aaab"
        },
        {
          "alg": "SHA-384",
          "content": "96e3ee21e3958259fcbc3bcd8af53d0814415f027a73bb1a1025c9112406564e65eaff74c874f02d994e6239562a7202"
        },
        {
          "alg": "SHA3-384",
          "content": "8c88668e57a4ccf381e6fb3a9859e8fe15376bd9a0fd4d9b9d771c9f7712459e97edc219dcdf008971f0d06363592d09"
        },
        {
          "alg": "SHA3-256",
          "content": "54562d403842a670b5f4cfa2a272bbb05789bd39f278b52732f1df540c7e33b3"
        },
        {
          "alg": "SHA3-512",
          "content": "55accaf6c0e8a6082d09619351596707df28223929dd313bbfe25abd1f8693c2eb195c0dada149f11dd0aecdfca724edfd67de84152e0a2aa8c39383fbc8b8d2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.datanucleus/datanucleus-api-jdo@6.0.5?type=jar",
      "externalReferences": [
        {
          "url": "http://www.datanucleus.org/#/datanucleus-api-jdo",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/datanucleus/datanucleus-api-jdo",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.datanucleus/datanucleus-core@6.0.11?type=jar",
      "group": "org.datanucleus",
      "name": "datanucleus-core",
      "version": "6.0.11",
      "description": "DataNucleus Core provides the primary components of a heterogenous Java persistence solution. It supports persistence API\u0027s being layered on top of the core functionality.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2493fed928c1eade5a38f4016f1ba7c0"
        },
        {
          "alg": "SHA-1",
          "content": "87fae77204b7032165d6cfb468cb5dafacf39200"
        },
        {
          "alg": "SHA-256",
          "content": "2e2a23d21100e82a8bd0822eebe8bb9f39a8e3ea1ba5e2bb068c24cb0515bd08"
        },
        {
          "alg": "SHA-512",
          "content": "969e5e8b3330e1bd675af05d106f0081dbef25bfea99689a6a051eac96e81907dc8d42e574b464b33fe467c5024a282416f114946ed4374510b4abe7897027d3"
        },
        {
          "alg": "SHA-384",
          "content": "286413cbd9c681561bf5c7d83839893879a9476a0a2a9b60e60d6e161a665e92bef6db57cd9e18b4d13a6ed2a75bbe73"
        },
        {
          "alg": "SHA3-384",
          "content": "afcc830fdadc3c4b7130921ad521f4e0a7fe23b57614ac61f4c2a1d9eae47b56e6a0df82d1ebef82c1cbe1d2244c547d"
        },
        {
          "alg": "SHA3-256",
          "content": "02b169414ef4c5a9d7c79e6e98e86e21071054f035ce4a1ca8fde85aa5f726ef"
        },
        {
          "alg": "SHA3-512",
          "content": "1de064ff2de6452618e7a9f3bc83e91228105722697597e4dc0b836349d21c3d71ff6ee4613433f7da795efba9b56be7bfa3c6854a02587271cd7d4a6001bdb5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.datanucleus/datanucleus-core@6.0.11?type=jar",
      "externalReferences": [
        {
          "url": "http://www.datanucleus.org/#/datanucleus-core",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/datanucleus/datanucleus-core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.datanucleus/javax.jdo@3.2.1?type=jar",
      "group": "org.datanucleus",
      "name": "javax.jdo",
      "version": "3.2.1",
      "description": "The Java Data Objects API (JDO) : a standard interface-based Java model abstraction of persistence, developed by the JCP.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "79f1e95e6d7f1eb191edce207ac6ecd8"
        },
        {
          "alg": "SHA-1",
          "content": "e8d1af5779f95d3c85b641184b605725762a36c3"
        },
        {
          "alg": "SHA-256",
          "content": "61646f544baf75fc7a305410443c5f5f7d219fa7a2cabe3b782950a350ca5d3f"
        },
        {
          "alg": "SHA-512",
          "content": "29580963b5478646b0f3b47ae3387d0bdb5bd86da37afceef6841c32b9db3a4407186fc257855c5c47efbbf1f1bfbff0b45b6ad45101b6dfbed7946a9251fe43"
        },
        {
          "alg": "SHA-384",
          "content": "1845d95a87e9fb954ff3e0c80a0dae62eca817abb3f727d65edc9296a0992e60a7fa57db0a72858afaf9e2d872f6435f"
        },
        {
          "alg": "SHA3-384",
          "content": "e4f04e5be64a1a58ef475cf5b155e6169307dd9636cd4fe6661dd394fe28a0a9ee9dee426291bff62d66885ae35ab2c8"
        },
        {
          "alg": "SHA3-256",
          "content": "3703404351c56d4a658de2012266838fea9741cceb09e7304b4c323e33d88ca3"
        },
        {
          "alg": "SHA3-512",
          "content": "da4b8c30667d67651469ed1a750004a3afbaad1ce8c6697ac29889fd2e78dadbcde07d414161e42bc972017afe83e690329d4ede5e94a67553377ee7c2a7929a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.datanucleus/javax.jdo@3.2.1?type=jar",
      "externalReferences": [
        {
          "url": "http://www.datanucleus.org/#/javax.jdo",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/datanucleus/javax.jdo",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/javax.transaction/javax.transaction-api@1.3?type=jar",
      "publisher": "GlassFish Community",
      "group": "javax.transaction",
      "name": "javax.transaction-api",
      "version": "1.3",
      "description": "Project GlassFish Java Transaction API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6e9cb1684621821248b6823143ae26c0"
        },
        {
          "alg": "SHA-1",
          "content": "e006adf5cf3cca2181d16bd640ecb80148ec0fce"
        },
        {
          "alg": "SHA-256",
          "content": "603df5e4fc1eeae8f5e5d363a8be6c1fa47d0df1df8739a05cbcb9fafd6df2da"
        },
        {
          "alg": "SHA-512",
          "content": "3497cf77352aa1317c70ad1d28e8e7da51337d844c8227a35707209c750ba6f5d644a4ffdbdb10e5fbde204003aa43ff80e9e2ff3164584a7a34d8292266b2bc"
        },
        {
          "alg": "SHA-384",
          "content": "7044d8d5829a777d85e1a987c3e346eb535dd321366bdf32a9e8ed4f52facd0610ac2f3f58b4a1b001893f01fddc5eae"
        },
        {
          "alg": "SHA3-384",
          "content": "d0c1807001e02ce47320be657be055b4777b8b5673c22a78b0574955f7a6105dacc42b46b86ab967dc382cf332da59d8"
        },
        {
          "alg": "SHA3-256",
          "content": "c7c48884317a2d0e1596f201763acbca4ef76462af9172fd5e68aca3465303e1"
        },
        {
          "alg": "SHA3-512",
          "content": "bf053d4fe995cb5c1d6c01320fc73530017ee364de6ae21eb98fa0372b2aa6eff2fa4ac2d9cd5f692c930ee573c2f6226441918123fcfc48b5b4a126d350928c"
        }
      ],
      "licenses": [
        {
          "expression": "(CDDL-1.0 OR GPL-2.0-with-classpath-exception)"
        }
      ],
      "purl": "pkg:maven/javax.transaction/javax.transaction-api@1.3?type=jar",
      "externalReferences": [
        {
          "url": "http://jta-spec.java.net",
          "type": "website"
        },
        {
          "url": "https://maven.java.net/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/javaee/javax.transaction/issues",
          "type": "issue-tracker"
        },
        {
          "url": "javaee-spec@javaee.groups.io",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/javaee/javax.transaction",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.ext/jersey-bean-validation@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.ext",
      "name": "jersey-bean-validation",
      "version": "4.0.2",
      "description": "Jersey extension module providing support for Bean Validation (JSR-349) API.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "254cf1628fdd8561cab876a729c98564"
        },
        {
          "alg": "SHA-1",
          "content": "db93aaf2cd038fbb77f0184b1df866782592e2df"
        },
        {
          "alg": "SHA-256",
          "content": "e92fa0ab1e4882e9c749b09ec7f5019ec3f165bdcef3888f0a1988c1da7347ae"
        },
        {
          "alg": "SHA-512",
          "content": "d127fdeba362dcb5677ee4d68bfd7e53b2636087de4769cff73c43553a5b39a6588b83d971147fa6c73af18fc2946c0c7349af221523a162c30094c7dcb5ecc9"
        },
        {
          "alg": "SHA-384",
          "content": "bb1940e39ab4580e898c652b4cc3b74560ac7eecaf97e4e06f0023ff0193d288f4407625ee713ede5604163b97515441"
        },
        {
          "alg": "SHA3-384",
          "content": "ac63c81e85bd6cd0dd05b6185b99c79552a57ac696d49b4f4abeb97b86c01572c07483e6acc9a81ef244c3fb086b39d3"
        },
        {
          "alg": "SHA3-256",
          "content": "10b67f4c5c7790e224b48885ca67c27802468a8505bc7ab039041322b27637c4"
        },
        {
          "alg": "SHA3-512",
          "content": "e2628bac3fbd61793d403f4cf5e93ca5a1c8e1c2a9210c4a1b02ed8bc314f7c06ef4bf340b0bd0b62a15f2999552016f3aa5b68cd00e2cbd6f14afbfc1545e08"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.ext/jersey-bean-validation@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-bean-validation",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "http://localhost",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/project/jersey-bean-validation",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.inject",
      "name": "jakarta.inject-api",
      "version": "2.0.1",
      "description": "Jakarta Dependency Injection",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "72003bf6efcc8455d414bbd7da86c11c"
        },
        {
          "alg": "SHA-1",
          "content": "4c28afe1991a941d7702fe1362c365f0a8641d1e"
        },
        {
          "alg": "SHA-256",
          "content": "f7dc98062fccf14126abb751b64fab12c312566e8cbdc8483598bffcea93af7c"
        },
        {
          "alg": "SHA-512",
          "content": "f186b2ada470abba1cc3b4f8c4373d940fb7c71a051b2c26f7c204ad4dfb69235fbf3f9c33da36d744cb90f52d921c51d76c0ff263bacb35eafb66cab83dc47d"
        },
        {
          "alg": "SHA-384",
          "content": "405bd297a73901f013d48a0da028d04d400f3e61f4997c0e7297eb08120670a0e242e0002db8f130c33ab16cb02feb2d"
        },
        {
          "alg": "SHA3-384",
          "content": "4db7e54434d0a208c876868f5595b808f2728c0455feaa752ab7b569a2186fc37cb891c9aa0076de3d08f6da6ff06eba"
        },
        {
          "alg": "SHA3-256",
          "content": "3a5aba9f1ff1a130b76af886123eb375fa578498490df3dc60bb7ce7d59e9404"
        },
        {
          "alg": "SHA3-512",
          "content": "00bba8efc2d6e7f0a509b321868d75f1aaf0681a750d089d913bde8424ab7bb88aadf49de6e291e352523e4f8c117b1b48033ff31d4d665dcc43c4c6ea000ba9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/injection-api",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/ee4j/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/injection-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.validation/jakarta.validation-api@3.1.1?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.validation",
      "name": "jakarta.validation-api",
      "version": "3.1.1",
      "description": "Jakarta Validation API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "93ce96e77734f4280157edeffcae44e8"
        },
        {
          "alg": "SHA-1",
          "content": "ec8622148afc5564235d17af80ea80288d0e7f92"
        },
        {
          "alg": "SHA-256",
          "content": "63ce00156388c365f3ac1be71fcfaf114682fc0c452020b5df6e7ec236e142ab"
        },
        {
          "alg": "SHA-512",
          "content": "02483f9d631538a71f436982ed3842c5d054781ec58350ba33fd0e0db92db531caa17abd2e7aa25a062ba4cd5e85b63a27b615041df236ffb979a73fdd121e18"
        },
        {
          "alg": "SHA-384",
          "content": "8e4a235fb69ebf7327fe8947b0be32c76ae8ebb748d0b3195efb87cd1d57ea92402403a59e2c4312a11a3a2300bbb4d6"
        },
        {
          "alg": "SHA3-384",
          "content": "7f52280ddd46c87e00c6b10f708aa77d571e68942651ada952b4b9e58805a0216394a31a4666c88908af0a6408c9b64d"
        },
        {
          "alg": "SHA3-256",
          "content": "21e404a7897b223e9324f7b709c3038f4ca01599896a0e166cee4eb714b9e600"
        },
        {
          "alg": "SHA3-512",
          "content": "6bc15a9beecdbdb881c1ed5d7682156417db766898a14e205a496b8d7e0e552a4e4c2303727b1c4dbc2391d62257b1b9a9504827dc6b8ceff149225d94bf10a9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.validation/jakarta.validation-api@3.1.1?type=jar",
      "externalReferences": [
        {
          "url": "https://beanvalidation.org",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://hibernate.atlassian.net/projects/BVAL/",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jakartaee/validation",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.hibernate.validator/hibernate-validator@8.0.2.Final?type=jar",
      "group": "org.hibernate.validator",
      "name": "hibernate-validator",
      "version": "8.0.2.Final",
      "description": "Hibernate\u0027s Jakarta Bean Validation reference implementation.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1adda123292ba2627d03a696d8c7e76a"
        },
        {
          "alg": "SHA-1",
          "content": "220e64815dd87535525331de20570017f899eb13"
        },
        {
          "alg": "SHA-256",
          "content": "2f2224a5a19bdcfa73540e9ff5c971b6c425ad80415876f305259fe873a15b2f"
        },
        {
          "alg": "SHA-512",
          "content": "3b4c68e41a245050addba3d5a856fad838e6a27fb0b8c13d34200274e13e0b3aa04c3f3d3cd883ceed880f0683093022625ed4db9522fc557782b8ad9668902d"
        },
        {
          "alg": "SHA-384",
          "content": "4addce04dd4599547dd81a02bb38426087edc11fc929ddc04790536264aa4bd4a62337b0f91604fe47b2b898039828f7"
        },
        {
          "alg": "SHA3-384",
          "content": "bcd829d013c6bb110a5d9dee2b4249678e41d670c9a7beb8b0c7ac52b7fae90be75997ef54a17900e8ef42e7afc171de"
        },
        {
          "alg": "SHA3-256",
          "content": "a1ff9dd13a537d46735504b4b3074277102c31f1b13eef40ba65537c25e1a9e6"
        },
        {
          "alg": "SHA3-512",
          "content": "db82be4ff0ca253beac177cf9fe474e3d448081a439e85e949f8f1d3a857b41c249c1bbebad1219b45a4ed580284b444c0aade591e907457e2d43fdc3f56cb60"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.hibernate.validator/hibernate-validator@8.0.2.Final?type=jar",
      "externalReferences": [
        {
          "url": "http://hibernate.org/validator/hibernate-validator",
          "type": "website"
        },
        {
          "url": "http://ci.hibernate.org/view/Validator/",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://hibernate.atlassian.net/projects/HV/summary",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/hibernate/hibernate-validator/hibernate-validator",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml/classmate@1.5.1?type=jar",
      "publisher": "fasterxml.com",
      "group": "com.fasterxml",
      "name": "classmate",
      "version": "1.5.1",
      "description": "Library for introspecting types with full generic information including resolving of field and method types.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e91fcd30ba329fd1b0b6dc5321fd067c"
        },
        {
          "alg": "SHA-1",
          "content": "3fe0bed568c62df5e89f4f174c101eab25345b6c"
        },
        {
          "alg": "SHA-256",
          "content": "aab4de3006808c09d25dd4ff4a3611cfb63c95463cfd99e73d2e1680d229a33b"
        },
        {
          "alg": "SHA-512",
          "content": "7fc4764eb65227f5ba614698a5cf2f9430133f42ec6e2ae53b4c724ee53f258541a0109fe0659e0b9e45729b46c95c00227e696b8d1addcd772c85f877658c9a"
        },
        {
          "alg": "SHA-384",
          "content": "28b4780b2353ebc08dbc02c9a343527a9062a0455bfb4ab135cb639c03e5dfd9c2250a835c44d5f17d275667c2009694"
        },
        {
          "alg": "SHA3-384",
          "content": "b194ace8f1f49f410286bd859866678b95a1b2c6f73e41f48291eb7438dffea57aaa9b177459038b6997771ce4d1cee1"
        },
        {
          "alg": "SHA3-256",
          "content": "50234c94efed4c816eb77bd2f70b869c9f89ddf8ee73dc25e354f4d0b81b3e1f"
        },
        {
          "alg": "SHA3-512",
          "content": "9886421726066b313a62283a6811b76d904ea1c1e9b7b2d850cb47afa189b03cdef053c8f7f6b79e77f2269c45f8cc2ed75c3389e96594b50987fef311d5a25f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml/classmate@1.5.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/java-classmate",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/classmate/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/java-classmate",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jboss.logging/jboss-logging@3.6.1.Final?type=jar",
      "publisher": "JBoss by Red Hat",
      "group": "org.jboss.logging",
      "name": "jboss-logging",
      "version": "3.6.1.Final",
      "description": "The JBoss Logging Framework",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "acab989faf62db02c092448e95614fab"
        },
        {
          "alg": "SHA-1",
          "content": "886afbb445b4016a37c8960a7aef6ebd769ce7e5"
        },
        {
          "alg": "SHA-256",
          "content": "5e08a4b092dc85b337f0910a740571d8720cfa565fabd880a8caf94a657ca416"
        },
        {
          "alg": "SHA-512",
          "content": "3dee7fadc04407538248def38fd0ae885c2aa454e2a38ecaaf7ef74abc1505f4efcd3e1a4e024c9f28d37fabb663c19cc3f29b7641b3094d5a504e93730c4a22"
        },
        {
          "alg": "SHA-384",
          "content": "26b1ba129bd9cd1777ba90da087d343698b1f7fa48b855ce0a1030afc1c7ae81433f75e7b8293eb42fc063ce35386280"
        },
        {
          "alg": "SHA3-384",
          "content": "7fbed126ae79578a4136d769f31d9d879e14cd0f0b78ec91515be7cfce5fea7f1c1ca10bf752d19edd5511d3d4ef5254"
        },
        {
          "alg": "SHA3-256",
          "content": "0de02a61df5dc9fbb8e9a344a8744356f3e867b4567ca2baa0bbf16a8763de01"
        },
        {
          "alg": "SHA3-512",
          "content": "2c7b522c04afab22900222f287da17c1526b3b3fd6a9376298613112918afb050af3d8ead2239be3e7dc3337ae74a636bf1963a1bc56426996b0f7283681bb3c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jboss.logging/jboss-logging@3.6.1.Final?type=jar",
      "externalReferences": [
        {
          "url": "http://www.jboss.org",
          "type": "website"
        },
        {
          "url": "https://issues.redhat.com/",
          "type": "issue-tracker"
        },
        {
          "url": "http://lists.jboss.org/pipermail/jboss-user/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jboss-logging/jboss-logging/tree/main/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.el/jakarta.el-api@6.0.1?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.el",
      "name": "jakarta.el-api",
      "version": "6.0.1",
      "description": "Jakarta Expression Language defines an expression language for Java applications",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a98f097e059552a75748fcdd067e5c16"
        },
        {
          "alg": "SHA-1",
          "content": "c7c4a2eb1e40e0ff45ab5e2e52bd77d8c7a75176"
        },
        {
          "alg": "SHA-256",
          "content": "7e84b5bed49de32b79cc5e85d90b6f5adb1a953ac67283adbb41c1e297f9c605"
        },
        {
          "alg": "SHA-512",
          "content": "fbab7bdf18e9bfb316b519a8c3b3d1f2e769e3f318b72e46cf33621f2942b84eede9b97970ff46fe29b54f8d61cb0df9e584d371f10e56bf0050d7727eb0ee23"
        },
        {
          "alg": "SHA-384",
          "content": "8c9c0712f90e359567fb2f080a18d38227ebd3096730980aeec86ee290b79f79cb4cf9888f72944ac240c01330828344"
        },
        {
          "alg": "SHA3-384",
          "content": "3c82d728737f09f400956a25664b008a307a359f33084ae9304ecf850b2b8448b27a7f017a6630299b7bd7ea4dddc239"
        },
        {
          "alg": "SHA3-256",
          "content": "2e870db1b8d460705534cba4ccd57b2d8247db1ff9bba831e2b2aef28261b4ea"
        },
        {
          "alg": "SHA3-512",
          "content": "d7eba15a92c49d1061ed4ac4c6a298dcd5b17896d8de214d5ad560624c2e2c855e9846626821754c47b898dea656ab516138d0ef607d5faf7c1dbed8c660ee6f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "name": "GNU General Public License, version 2 with the GNU Classpath Exception",
            "url": "https://www.gnu.org/software/classpath/license.html"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.el/jakarta.el-api@6.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.el",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/el-ri/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/el-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/el-ri",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.expressly/expressly@5.0.0?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.expressly",
      "name": "expressly",
      "version": "5.0.0",
      "description": "Jakarta Expression Language Implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d4448c69fe69ebca37b2c76e62e385c3"
        },
        {
          "alg": "SHA-1",
          "content": "78637fec7db6414c3ad32f3aa9e5d6610a299e5b"
        },
        {
          "alg": "SHA-256",
          "content": "b0c872737bb8381921b304d0952854666d1ba320b9b3c5bf4d70a09a86b61524"
        },
        {
          "alg": "SHA-512",
          "content": "8abd592d1fd70ef7fac5d0c1debe59dddea59dd82262bae016b44c506ceb68bb0619f464a07e553cc6885d527e1b8b8571e8975ca040c7864baba2349f30b725"
        },
        {
          "alg": "SHA-384",
          "content": "dc233d0838d2912d2473b8b6f5988145f4116dc2b139ea0378e78f260ed4c7609c954875c21fa579c4901f3202b3ca61"
        },
        {
          "alg": "SHA3-384",
          "content": "d946ffea99369b9933d07076f88a605a8b724edbc1d771ec92db145e6a68e447ac261efd9a4cdb74dce38827f75bd7d4"
        },
        {
          "alg": "SHA3-256",
          "content": "a46f1d62e482167ead93bc3f1261852cbd968e8fc7b68b399685d0bf6eb095d7"
        },
        {
          "alg": "SHA3-512",
          "content": "5e23912f838fe9487d5c0ab44d806e05f1754df1d18f1f7231a32975a73d7747edab4166903b5cbdc6ef002efc4a768b10baa4d7dabcb1c29bca61e9ab923347"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "name": "GNU General Public License, version 2 with the GNU Classpath Exception",
            "url": "https://www.gnu.org/software/classpath/license.html"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.expressly/expressly@5.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.expressly",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/expressly-ri/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/expressly-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/expressly-ri",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/alpine-infra@5.0.4?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "alpine-infra",
      "version": "5.0.4",
      "description": "An opinionated scaffolding library that jumpstarts Java projects with an API-first design, secure defaults, and minimal dependencies.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ddb20e2b5e37c5993d28f909fd43d925"
        },
        {
          "alg": "SHA-1",
          "content": "dbf64bc9134d6172e2ebd91954fd9d077408233f"
        },
        {
          "alg": "SHA-256",
          "content": "14899823e6050e1f0cca9915a8e4c8487fbc52811010c4be44223d2fc12abef2"
        },
        {
          "alg": "SHA-512",
          "content": "9d42290ad38e8ee6ba16a06de3b0e32e59acde69eb380468a44abc3ff4576d9f827e33d80b0f86ae8d25ac8ae6451ea137af57fb178ed5878eef72ef79271776"
        },
        {
          "alg": "SHA-384",
          "content": "e9016446413cf33123fd6d86e1a3728f5e23be806964be4d7966727c078bd6c0b0271ade3cef1302aaf14e2828cdf7c3"
        },
        {
          "alg": "SHA3-384",
          "content": "3ddefd3f2e76a80a21ede4d137677e3bf53e3822acfa95fabb91eb3253d4bb54a6238ef6251b1e462371c8546ba784d9"
        },
        {
          "alg": "SHA3-256",
          "content": "f3cc5aee3d0ed97ed232cd203a08731f521db7209ff163b4e4ea12b567d2b2d4"
        },
        {
          "alg": "SHA3-512",
          "content": "9132e011ecb827f77c92f958a8f3dace1ccce558875778432666a1e86ee6bf8e603845f2439410587f798c967edb50c793b9cf724431d3d6fdeaf4accba5df0f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/alpine-infra@5.0.4?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/Alpine/alpine-infra",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/alpine-parent/alpine-infra",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.datanucleus/datanucleus-rdbms@6.0.11?type=jar",
      "group": "org.datanucleus",
      "name": "datanucleus-rdbms",
      "version": "6.0.11",
      "description": "Plugin for DataNucleus providing persistence to RDBMS datastores.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "33a96bd9a1e242d31cc0929562e3af04"
        },
        {
          "alg": "SHA-1",
          "content": "52d9d3d77483021736ee88ee7f53d2447cb1049e"
        },
        {
          "alg": "SHA-256",
          "content": "a9271d3c793bdd73ab6444346d6036982929529cdcb874dbd8fad1e90de04338"
        },
        {
          "alg": "SHA-512",
          "content": "fe93c578f598f5282e637b542e7dd44061b59ea6e9f00fc6df595c9f26ff567daccf7ec7359e3a120e5a4090b8b7f4ff36e991210507123d6e3477f0aae24984"
        },
        {
          "alg": "SHA-384",
          "content": "f80c7aa7375f1317172236773e4ba02a67c45b788566977278d8125fe4226ffd60604c4fe5ad2b82aa97122f15ed8e7d"
        },
        {
          "alg": "SHA3-384",
          "content": "0583f548e429a4412a87e6423ec0d334aca631470b3e7a355d192e39a68c64e68d59fbff11552eefc7b7cb2153fcc2a3"
        },
        {
          "alg": "SHA3-256",
          "content": "8cb46d03fdee2bc0f022e5d724c1b7affcd378e5bd4c72c0779e80f35fe40b47"
        },
        {
          "alg": "SHA3-512",
          "content": "e630592197b25c46cf137b4146e884b18b6b4793ed4a4a32f6169ab51f64775a5eabdbccd3bb3e2dc87526330bc4cf0b0b8a661e457a32ca565d10f3b2759af8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.datanucleus/datanucleus-rdbms@6.0.11?type=jar",
      "externalReferences": [
        {
          "url": "http://www.datanucleus.org/#/datanucleus-rdbms",
          "type": "website"
        },
        {
          "url": "https://github.com/datanucleus/datanucleus-rdbms",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/alpine-server@5.0.4?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "alpine-server",
      "version": "5.0.4",
      "description": "An opinionated scaffolding library that jumpstarts Java projects with an API-first design, secure defaults, and minimal dependencies.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1b13f1ab4b5351f9d992096a9cfa75b1"
        },
        {
          "alg": "SHA-1",
          "content": "37ab9931a6a596eb2bd8dd7b646c3e0f1148293a"
        },
        {
          "alg": "SHA-256",
          "content": "f47f59bf6bdb8eb4d2b4a4f380bd6063d7e4210ba6d87e6f1cf101f9a493135e"
        },
        {
          "alg": "SHA-512",
          "content": "100540c8424761c1e151965d338bcba1a32692717648664ac4a55fb2e2eb055c672be0dcb598cdcebb438acebd330b1f9836c53dfc3c562742c7cf57ff829b68"
        },
        {
          "alg": "SHA-384",
          "content": "b00f194775f2da012185c9f025bbc51828740272d38fb94e9e2e273bc60cf550f56ba0f91e2ec432172b77794347709c"
        },
        {
          "alg": "SHA3-384",
          "content": "3325d748f27331c401be7911b44d7fd7b4012b540dfeb61f6f0a73963a8a46f2818dae8a98cee0b273da3ef26b8153b3"
        },
        {
          "alg": "SHA3-256",
          "content": "9b6500b0d749a3adb0689a6d451798d0e06cfa7fea60399612b88946f5055642"
        },
        {
          "alg": "SHA3-512",
          "content": "d1fa0aca8f697f6aa25ac233d38f8ba8bad811bee42006b2b2a87ed30210fffe396b3077ecfe6d1b40138348591154b273745e3f0a6a6457d99e1d2d843e9c90"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/alpine-server@5.0.4?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/Alpine/alpine-server",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/alpine-parent/alpine-server",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.containers",
      "name": "jersey-container-servlet",
      "version": "4.0.2",
      "description": "Jersey core Servlet 3.x implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "25818f2d34a03809a4e2a1a4949aa3c5"
        },
        {
          "alg": "SHA-1",
          "content": "e49f6b43e8f35fc42d78aadebf9ce675be83eb2a"
        },
        {
          "alg": "SHA-256",
          "content": "9317b4c9cc8f86906fe6f64b2ae613d7b586d7fb396cd13eaf615a2d5bb142ae"
        },
        {
          "alg": "SHA-512",
          "content": "f881cd95bd25fae560bf52771a3e869cfe732c5ac99aae1645a014da92a2f5db7b6e2353dfdfa595e3f39aa85a1516a0b45b71b33d226d5af8fb1aaca3a9492b"
        },
        {
          "alg": "SHA-384",
          "content": "a71eea737f5a1a65ba648fe4e315f5f7a5731649199fa4c925146592639642ee48b15939f30277c8b27022294394dc1a"
        },
        {
          "alg": "SHA3-384",
          "content": "b4ca6ab8e6eb625bbafe472a8c5be3aa3b93e296345243e4ef5f8a29b37a517954b41829a7d9a214bdc0c02976d3a48a"
        },
        {
          "alg": "SHA3-256",
          "content": "49b2b2914f513aa873f17692bb67b324c9109ce9b8ea95db11e2c92101c4e4fa"
        },
        {
          "alg": "SHA3-512",
          "content": "887968d759326a48839b736ed1f44cc444f6c6e2895219c4886323eb417ae8ef824e4d87b9739906e84fd101073be0eddb2b0e1e2b9a66f19cb7ef37b86bd193"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-container-servlet",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "http://localhost",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/project/jersey-container-servlet",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.media/jersey-media-json-jackson@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.media",
      "name": "jersey-media-json-jackson",
      "version": "4.0.2",
      "description": "Jersey JSON Jackson (2.x) entity providers support module.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "35bc0ebd87e351b294c4c2d80a49637d"
        },
        {
          "alg": "SHA-1",
          "content": "49a43c8e343340e8a91671d14a4e71bf6bcca832"
        },
        {
          "alg": "SHA-256",
          "content": "efa2fdad26e994adde4f827c11e44ab5fd3cf3c3e0aa4f99e8eefd1b83449fa7"
        },
        {
          "alg": "SHA-512",
          "content": "c57f5a439c0fec721d8776afe4947d004bb77a3beae809bf71cfe621f6a3aad3342450529a0e0d0696dce691bf3ab35c167829aa60829db903f5b5b73998b5ba"
        },
        {
          "alg": "SHA-384",
          "content": "f324740990411a83622cd12bdefb3e89cfb02c4ea703f4b6a693033b906f0c51b36ff28bb6ff38e5de1553b8e56b8e09"
        },
        {
          "alg": "SHA3-384",
          "content": "67024bf3a7e0eb78074482c54a6bb8edde46152a8421b0018948592358b548c653049d1cfea3c46d2f2e6a43696d260c"
        },
        {
          "alg": "SHA3-256",
          "content": "929d16ec5a727e2fb44e970048f7b9afb15af7e3cfe8ae6927faf9214ce1bc9e"
        },
        {
          "alg": "SHA3-512",
          "content": "9e21c8523d65bb618302f96ab10914fe217e60d18ec6ef3ebea51fdccd8c0fe8c5e6b159a59d257134448c152dde8496e4b23e054d55254465f0797fa5e1a703"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "name": "The GNU General Public License (GPL), Version 2, With Classpath Exception",
            "url": "https://www.gnu.org/software/classpath/license.html"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.media/jersey-media-json-jackson@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-media-json-jackson",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "http://localhost",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/project/jersey-media-json-jackson",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.ext/jersey-entity-filtering@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.ext",
      "name": "jersey-entity-filtering",
      "version": "4.0.2",
      "description": "Jersey extension module providing support for Entity Data Filtering.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6a9d18c10c375eaf87da84354bdbea31"
        },
        {
          "alg": "SHA-1",
          "content": "ebe669571bf00ea4030cfd17c3593ad1d334662d"
        },
        {
          "alg": "SHA-256",
          "content": "633afbf5f3c1ae53aeffbec1f486a878446f19ec8df42b2f795cb06620d1db90"
        },
        {
          "alg": "SHA-512",
          "content": "db48c6417f847d2f51b41d15315c6e73ed3a50e8b3f3b767f05c3f50827bc64359a9132a76283913ea753e840bfb96b0aa602e92b8b8818cb80d47fed11eb4f9"
        },
        {
          "alg": "SHA-384",
          "content": "c290248a96e5ccbc7bda48f0ac8312f829c801921aa1614066595b0f7395af94d67732bb4684834db85c1fa59db96d76"
        },
        {
          "alg": "SHA3-384",
          "content": "53d6d7c09162840e7bed9f1fb7a4bbf761c641b9701d8d562b3233e866cb424887120e7933dbcaea37d9951b67579773"
        },
        {
          "alg": "SHA3-256",
          "content": "189e43a565898a7fa96814e1c2430033a3e85f053958dc5c9c803e26385f899c"
        },
        {
          "alg": "SHA3-512",
          "content": "8789df3ed80682cc9bcdc0706c967a6749490a7b00f2a017fb9c5f1a500a14f2ddd2ff3596a95c0e44d86b156eb1be4b75a4b8bdb44aa4087323b6908716fd09"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.ext/jersey-entity-filtering@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-entity-filtering",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "http://localhost",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/project/jersey-entity-filtering",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.module/jackson-module-jakarta-xmlbind-annotations@2.22.1?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.module",
      "name": "jackson-module-jakarta-xmlbind-annotations",
      "version": "2.22.1",
      "description": "Support for using Jakarta XML Bind (aka JAXB 3.0) annotations as an alternative to \u0022native\u0022 Jackson annotations, for configuring data-binding.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8df22583a81efe16d81a8464315acc2d"
        },
        {
          "alg": "SHA-1",
          "content": "8f181526fbf95e7b448f141703c5d7281d407f6f"
        },
        {
          "alg": "SHA-256",
          "content": "5146572020e535f22fc572563ee5ac758a7d25e692e96eb445bd537605d4ce69"
        },
        {
          "alg": "SHA-512",
          "content": "88130ca8961c04a0bcec41e360932bdc55b40db4373f2a60ef281eea5d79cdde0cc721f50292eb4bcf5864898c639c37ad36504f49df2ae4191800e9753dbf36"
        },
        {
          "alg": "SHA-384",
          "content": "ac5b8ca4f108865748a79291d24cac8b8da22c81ec3431d2f8881928c7c4d9b392f813e6bd720c4bd011bb8f3374eb6c"
        },
        {
          "alg": "SHA3-384",
          "content": "e2f1b4e394055ffdcd30c249c63dfc8df2e6372bae066ffa47564164cfbcaf29090944e0b48247a15e27727ad8f45e77"
        },
        {
          "alg": "SHA3-256",
          "content": "babf0e025dd6ec9d02c9408b9ddc89d8e2f0ffbaba95a55cb81f4a6095fa7d41"
        },
        {
          "alg": "SHA3-512",
          "content": "fd44f4ef07088a1f6032a6296f64edba7299f7986e76d4a3ab0585ce771779d43908f6e7f121015577e9f153195fd8603af408c6356357c48ca28806aafca53a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.module/jackson-module-jakarta-xmlbind-annotations@2.22.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-modules-base",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-modules-base/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-modules-base/jackson-module-jakarta-xmlbind-annotations",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.xml.bind",
      "name": "jakarta.xml.bind-api",
      "version": "4.0.2",
      "description": "Jakarta XML Binding API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0c8f9991081def819435c3ff36e4d93f"
        },
        {
          "alg": "SHA-1",
          "content": "6cd5a999b834b63238005b7144136379dc36cad2"
        },
        {
          "alg": "SHA-256",
          "content": "0d6bcfe47763e85047acf7c398336dc84ff85ebcad0a7cb6f3b9d3e981245406"
        },
        {
          "alg": "SHA-512",
          "content": "2e57ce867ae3592959243ab9d7d064b09d9587933c98f89f5d5eeb8fe70556a53fea6db91520a2e086555684e8917f4001741bd8ffb07d26c59fe95c13d71fa0"
        },
        {
          "alg": "SHA-384",
          "content": "7ac5da337fccfa426b48691febed0d874a8e9a6a230bb7a53169f902e5b499778106f7b710afbe133dbd7bfacca693a0"
        },
        {
          "alg": "SHA3-384",
          "content": "fc952425a51459a5d18dc7b6315625c55889e1b92e700450c84205506e5107ca4c7c8bc449190220bf471db3dcbf9c8a"
        },
        {
          "alg": "SHA3-256",
          "content": "a78dd7c5883b16cf899495930e653650005c71b4d9b509e56cac4665778d715e"
        },
        {
          "alg": "SHA3-512",
          "content": "bdf9db79b8ade9421c3f5fc497ebe13a552be5852d99cedfa38bb6c760c8bf190f88204ab6e02442db5fb24378afc6112297c5a582d4e721de71285405a6429d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/jakartaee/jaxb-api/jakarta.xml.bind-api",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jakartaee/jaxb-api/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jaxb-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jakartaee/jaxb-api.git/jakarta.xml.bind-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.media/jersey-media-multipart@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.media",
      "name": "jersey-media-multipart",
      "version": "4.0.2",
      "description": "Jersey Multipart entity providers support module.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "aae6111826bc8092f33c8e80de9c120d"
        },
        {
          "alg": "SHA-1",
          "content": "f5400fc442af3cdcc46f0204f2b6072402aaca9d"
        },
        {
          "alg": "SHA-256",
          "content": "b9bbd74fa5337753c1f96e2ef1e9ab5c7ab1ad3b8fe1c4f719a311e8f3821aed"
        },
        {
          "alg": "SHA-512",
          "content": "75a380ec7fee2a1a04327cc765ea6a52e1b70da3a91dc921cbc221085b1541e68e40d5c743a6227c86d2d74a65cfe68b05ec1fbce42ac739f6a5e4498c8dcdd6"
        },
        {
          "alg": "SHA-384",
          "content": "f09f5dcd92f1960593f1909c13813774658f735e8a875502c9061c51cc6a78d5195d1973ea346809d837d25e3dff2ee4"
        },
        {
          "alg": "SHA3-384",
          "content": "07030c4ab91f627b75f8d93460e45e4966db068a6a06fc2108a2cde14360685717d4669d0311885687d787085e79c97a"
        },
        {
          "alg": "SHA3-256",
          "content": "d4110cad7c9d2fb29775aa789b662dfda3b70755706d90815eaaf0ee0c3f5d4d"
        },
        {
          "alg": "SHA3-512",
          "content": "ecd7b48b0e3069d4441f9a9f357552ba7f15a952fab0d71e52bfac349c04492c80687f849b88d2b22b85ee1dc902d56a9b7cf1c20d9c0440bfea5113798d290c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.media/jersey-media-multipart@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-media-multipart",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "http://localhost",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/project/jersey-media-multipart",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jvnet.mimepull/mimepull@1.9.15?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.jvnet.mimepull",
      "name": "mimepull",
      "version": "1.9.15",
      "description": "Provides a streaming API to access attachments parts in a MIME message.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "fdc35a1eae84c5a60c95d617551d4a06"
        },
        {
          "alg": "SHA-1",
          "content": "60f9a7991ad9ec1a280db8deea216a91c10aae74"
        },
        {
          "alg": "SHA-256",
          "content": "b9f586bf8844b14a33e75fe7a4b94896dc80d80b732d128777e287af14c836fa"
        },
        {
          "alg": "SHA-512",
          "content": "d80e7f2550272edefe8eebace17c8b836d72602bfff67007c6463d4c7b02a36b97467f23d358601d97882160533ed110da938082994434e2312fb0c4e0f2a19e"
        },
        {
          "alg": "SHA-384",
          "content": "dea380fc137e9784a6c6d114c0a12d4a415baa21e2ce188b952ee1bfa59baaa53e133a0c5fcde9ff1abdbf4dbe93a58b"
        },
        {
          "alg": "SHA3-384",
          "content": "c4d8fc6eff8b9325c07f037484d49e1a52ad580237ba247eec92617e15be03501862b7f64b334919077e124bb94975c5"
        },
        {
          "alg": "SHA3-256",
          "content": "648e6b07265e79912cf8191efdaf316a7f2d317e79d7e4e9b7e323556da74fac"
        },
        {
          "alg": "SHA3-512",
          "content": "14672a4a8dd2a5fe1d437a1204de922eb668ff76c72dae0acc4438fa54eb25a2f6232c75038a391428544b3e77a0a6290d84a99b9c60ea7ce743561ca9b4e1ba"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.jvnet.mimepull/mimepull@1.9.15?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/metro-mimepull",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/metro-mimepull/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/metro-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/metro-mimepull",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.inject",
      "name": "jersey-hk2",
      "version": "4.0.2",
      "description": "HK2 InjectionManager implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "295f464e22b0303c2c5dc23888194042"
        },
        {
          "alg": "SHA-1",
          "content": "8283989a7a36b51f31c5f35b354881d106bee6b3"
        },
        {
          "alg": "SHA-256",
          "content": "5df758fc55d0d7cdb431b4c9ab50fbf613965ce0a7898d1a923d957e3a93df2c"
        },
        {
          "alg": "SHA-512",
          "content": "846c8d018bb0059eda93b8b1f464f7bf14d284b36d871df0233b6655486344168373a31b8a778891d2de0d8e4141446e04b0845b21bce793ce728c0d93bda512"
        },
        {
          "alg": "SHA-384",
          "content": "1b3d5da027e60c1cd2d0c97069350cef3e42b45b4814976ce8185dcf57b1dac907375835f8a34f25f59fdcd0c394e4fb"
        },
        {
          "alg": "SHA3-384",
          "content": "fd5e03a684c044960e176577371ce74cadabc5673d558f96a7d1dff56b59bef6809a897913c99660bcdcc8c27fe43be4"
        },
        {
          "alg": "SHA3-256",
          "content": "b9c053c2b3cd0fe0c1bd0c8b78ac4a7a1b97ce5c80f7722483b70d40c1cfb476"
        },
        {
          "alg": "SHA3-512",
          "content": "087e8d0583f2db5c0b877188d8bd85e15af42e0e6bdb10e5363639a8e721cf128874fdeaead7ad5d2b5c6b2e2741708d4bddd3638c7f27275b11c3a96095c2ef"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-hk2",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "http://localhost",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/project/jersey-hk2",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.hk2/hk2-locator@4.0.0-M3?type=jar",
      "publisher": "Oracle Corporation",
      "group": "org.glassfish.hk2",
      "name": "hk2-locator",
      "version": "4.0.0-M3",
      "description": "ServiceLocator Default Implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b4208d604d4c23e3acae9f6300aafd4c"
        },
        {
          "alg": "SHA-1",
          "content": "64a198be0ce5a86c6e6e439188fc4e7187416588"
        },
        {
          "alg": "SHA-256",
          "content": "290027395d95bfcbb5f40c992376a6f21c75bf63c9c8d4df3cfc034ba1a85ded"
        },
        {
          "alg": "SHA-512",
          "content": "cb3280c9af78f7fa19cf537448bb28be7e1981733fbf2bc1e86823288539def8c856cb915c921c9cd6ef490b39bb93aba998eb35ed967aa3c0a11d7a65b05cad"
        },
        {
          "alg": "SHA-384",
          "content": "a0a74b0787b7240632ac04fb635bfb8cdb8ce7529ebeca5a03f3157ee5ccdd902ce83300995eff2e44ff5d58e0ed330b"
        },
        {
          "alg": "SHA3-384",
          "content": "f260e2b328e7be64987ac4b2f72b7f627eac5dbfb318ae40ae5c7cd08a5cb4a8e2b60cd2e5863bfb54782200563a7f6c"
        },
        {
          "alg": "SHA3-256",
          "content": "a3bd95277a4f2f33a9e8b0fec11ef6b7e7e57efe6454bb35a8b9a9474c7d8818"
        },
        {
          "alg": "SHA3-512",
          "content": "1a4eb5c85a9346ee214f5f9afc1a9fa5bc9b0d8bcf4261370a6dc6efd595b3a3ff50ad89eb85a4c6693ebf86590d362d58fbffdc5c399c7746524caef25ad24b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.hk2/hk2-locator@4.0.0-M3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/hk2-locator",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/hk2-locator",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@4.0.0-M3?type=jar",
      "publisher": "Oracle Corporation",
      "group": "org.glassfish.hk2.external",
      "name": "aopalliance-repackaged",
      "version": "4.0.0-M3",
      "description": "Dependency Injection Kernel",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "265ded5507ff1db7cd2184d4846fc85b"
        },
        {
          "alg": "SHA-1",
          "content": "71779579326f1648524a86fdee77bdf1d2d45336"
        },
        {
          "alg": "SHA-256",
          "content": "65c0abb946d2ab3a1237c610f24bf15f04696151e9cafbe1afa6cee52fbed5ed"
        },
        {
          "alg": "SHA-512",
          "content": "e45784cc801cef6726c4c74ba6158f34de84b6ee7b3c4823be16b9a53aee22f0b251c8c0144953c8c09d4e8169c2134a1530baece93169efbb33c0c118af7de5"
        },
        {
          "alg": "SHA-384",
          "content": "de80c2803aafdedaddb185277ca9946c5ea24e8f3f10f172abedf8cf9fd2de61d4ac022ae466cbe9fc54ffff3a43acd8"
        },
        {
          "alg": "SHA3-384",
          "content": "af3ce290b4aecad2cf4f5b163a484013732d2891b640b927169e9dfdaec19254404b5ce9a0162842a1d915024fa5752a"
        },
        {
          "alg": "SHA3-256",
          "content": "9043468d2fa46fd4b156845bcfa8a5ed350dcab0929a970aa2d4f885c62f69c6"
        },
        {
          "alg": "SHA3-512",
          "content": "88722b8a289ecbe9753c9801ffadc909089879b4c3d71edd4ec298eb5d6fddb5a6bd0d56fa01ae6fad5f9826460d0809a6d0f4aabc009a1d2d4377f03fb507ed"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@4.0.0-M3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/external/aopalliance-repackaged",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/external/aopalliance-repackaged",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.hk2/hk2-api@4.0.0-M3?type=jar",
      "publisher": "Oracle Corporation",
      "group": "org.glassfish.hk2",
      "name": "hk2-api",
      "version": "4.0.0-M3",
      "description": "HK2 API module",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4a7799f8b0c76121478fdbfd3fa481cb"
        },
        {
          "alg": "SHA-1",
          "content": "4b9520d9c4ecdc8b688a50968c19b54b55fc1274"
        },
        {
          "alg": "SHA-256",
          "content": "66f859916e6a7de3622973acf7f672a895c9bac81622080dfbb95ac9b021b1f8"
        },
        {
          "alg": "SHA-512",
          "content": "f202d82a2493430495b7c0d2006f21b3435f5367b6e24f7ef41736c2fb0d551a8ab4a269808dec7f8c8df8b3bb62fc05f148740ca5b4f642becac6216971ba12"
        },
        {
          "alg": "SHA-384",
          "content": "be02adf52ba9a8cfc1fa5792b4b2ede0a577e8f55d7589740c563ddd3c6fcbabf9ed9d9a310f5f8ac4aac91b09cecc58"
        },
        {
          "alg": "SHA3-384",
          "content": "0c5d90d77991c80953945914bbc2cf22420765396edf899863f16dc50527cb251c04c8e3ee6b68a44e657ce76a97c7e3"
        },
        {
          "alg": "SHA3-256",
          "content": "25692ba0b74506800453bed8bc69f98b6b8ebe75cf78984cb5af1047a0e3f028"
        },
        {
          "alg": "SHA3-512",
          "content": "e4d89788416d7f29a91758f03715fc3bc5c85023bc0e0f2093852d72c0437308bb53e71c5710f6e8f0841a1eaece0af1351ea0bce5ca075f9b2c19af8508b9d6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.hk2/hk2-api@4.0.0-M3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/hk2-api",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/hk2-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.hk2/hk2-utils@4.0.0-M3?type=jar",
      "publisher": "Oracle Corporation",
      "group": "org.glassfish.hk2",
      "name": "hk2-utils",
      "version": "4.0.0-M3",
      "description": "HK2 Implementation Utilities",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8bc6984bd681f30286f4d95ee8795b61"
        },
        {
          "alg": "SHA-1",
          "content": "d0017a4fffdb8184582d579c15e4d90765e4d11b"
        },
        {
          "alg": "SHA-256",
          "content": "ba7087827fe89af3d824fc26556c985ce9afa0cc30faa24e8b65145ca0fefcf1"
        },
        {
          "alg": "SHA-512",
          "content": "b39a525b64d012ae99e09809ecd906bab9fc98baf027005b86f964b2baf2ca455e4fca655bca1b147ddc8225b0f6abda32859beed920d59f813bf4c3a5de7a43"
        },
        {
          "alg": "SHA-384",
          "content": "08d57c36622c3cfd6471b0552653aea5194d491e7cef0a8946ebc7c26195e640c6fe54c5db4829e71f5a213294fc5a6c"
        },
        {
          "alg": "SHA3-384",
          "content": "b5d5b9bb24d31585a42052571cb6cad2b10035a3439ec6f66689dff03034cab04d81a3b0187c3917158f1e6332ae75e5"
        },
        {
          "alg": "SHA3-256",
          "content": "0d635ee61147b0fcf9ec3208926e86e14752e390f45ec26828d427a12b0cf15e"
        },
        {
          "alg": "SHA3-512",
          "content": "5280173e2349d1490362b2b320cbbd17e56f751d995ac20e2867de2c7955118c3d12f852c784e0e8dce21854c534a0c1721245e8b4ab1d96a97788a3dc006372"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.hk2/hk2-utils@4.0.0-M3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/hk2-utils",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/hk2-utils",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.javassist/javassist@3.30.2-GA?type=jar",
      "publisher": "Shigeru Chiba, www.javassist.org",
      "group": "org.javassist",
      "name": "javassist",
      "version": "3.30.2-GA",
      "description": "Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation simple. It is a class library for editing bytecodes in Java.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f5b827b8ddec0629cc7a6d7dafc45999"
        },
        {
          "alg": "SHA-1",
          "content": "284580b5e42dfa1b8267058566435d9e93fae7f7"
        },
        {
          "alg": "SHA-256",
          "content": "eba37290994b5e4868f3af98ff113f6244a6b099385d9ad46881307d3cb01aaf"
        },
        {
          "alg": "SHA-512",
          "content": "046c5b87732ef28540c56f88891238e49ac15fcc23e1f13e0b12de816831ba3de54e68a727b6163877a7b19b13f1362c0e6affa2664af1fdac5748632ed7a09e"
        },
        {
          "alg": "SHA-384",
          "content": "d1dfb87ac4d7797ea07098b7814190eed3aa16e86dd792916ff7f86c30ad456dd153f9ae4e77f13cee03e23dd3cfb24b"
        },
        {
          "alg": "SHA3-384",
          "content": "f70abfcb1b0d9e7903171bf52fe34b33ceffa9c53b697fabac9f2d3e02b8621446f7b2471d44e2cb70862e559b4d36b2"
        },
        {
          "alg": "SHA3-256",
          "content": "cf3f1d9150d71a6f23a749c24d355accb133991a9272110c5fa0ccff73220367"
        },
        {
          "alg": "SHA3-512",
          "content": "e294c989c20271f42a4bf0c63cbb691cb2fa284088c8a846983aa0e4948b4325131b8829b210214f539d30eb4e20b14c06f4b164208488719512739d78dfd454"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MPL-1.1"
          }
        },
        {
          "license": {
            "id": "LGPL-2.1-only"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.javassist/javassist@3.30.2-GA?type=jar",
      "externalReferences": [
        {
          "url": "https://www.javassist.org/",
          "type": "website"
        },
        {
          "url": "https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://jira.jboss.org/jira/browse/JASSIST/",
          "type": "issue-tracker"
        },
        {
          "url": "scm:git:git@github.com:jboss-javassist/javassist.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.annotation",
      "name": "jakarta.annotation-api",
      "version": "3.0.0",
      "description": "Jakarta Annotations API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "7faffaab962918da4cf5ddfd76609dd2"
        },
        {
          "alg": "SHA-1",
          "content": "54f928fadec906a99d558536756d171917b9d936"
        },
        {
          "alg": "SHA-256",
          "content": "b01f55552284cfb149411e64eabca75e942d26d2e1786b32914250e4330afaa2"
        },
        {
          "alg": "SHA-512",
          "content": "2bd5a16684c4e8144897ba6dc467628d1b8a85326235240e4c20101b6df3681d23aeebc30ca99e395ec848f33cb5244085031b2a0fbce746c8ede7148a5e7c1d"
        },
        {
          "alg": "SHA-384",
          "content": "1a12cb78019d310eb08314f863c2a0e48aa2845bde844f8204e653ec50713bf135cc58cce882e14ef631327952b5ad99"
        },
        {
          "alg": "SHA3-384",
          "content": "a0dd7dd32e8dc5ed679589f6066f16593b52334b9947a71381aeab44b3cbe295ec24dfef4fbfa5514ba24ea60fe042a9"
        },
        {
          "alg": "SHA3-256",
          "content": "6ae915a05b483f75c51f3a109cf368842d186b2996758b8a106377a7a9485c12"
        },
        {
          "alg": "SHA3-512",
          "content": "52f611aa0a98812e525be2b9d5a5712aef660598cff64282dbd9afc237560f442ab745fc95c919216f9cb4197c224ba6c7317282962c638fee956925bfa031c0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.ca",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jakartaee/common-annotations-api/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/ca-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jakartaee/common-annotations-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.json/jakarta.json-api@2.1.3?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.json",
      "name": "jakarta.json-api",
      "version": "2.1.3",
      "description": "Jakarta JSON Processing defines a Java(R) based framework for parsing, generating, transforming, and querying JSON documents.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "596997520702889d4afef9cffbd4b71a"
        },
        {
          "alg": "SHA-1",
          "content": "4febd83e1d9d1561d078af460ecd19532383735c"
        },
        {
          "alg": "SHA-256",
          "content": "bc934142805ea1d794f1440563965a3861a2a9fb7414ecd3fe44f26500734414"
        },
        {
          "alg": "SHA-512",
          "content": "5a6566f0ceaa8b0ca40ae643942c0d46acd118a3b4d85af5f3a977e738465e8c8d4bc977f0c3e4b51f4471e408c28f66dbc0b19adf61237f6f6f7fa1d0dacc31"
        },
        {
          "alg": "SHA-384",
          "content": "1a17b8a416692ba0e485d7290782b2b5c4de8cb65c2043f221381deee668953655c221dc3efa29d3c65c8b2c1fab173f"
        },
        {
          "alg": "SHA3-384",
          "content": "4c009f9fec6b1e14b2c675ee7addb49ebd047d71d7aaf31601ccea3ffe4af1d82838a3452b0e5d7c2814e27861cd3ffd"
        },
        {
          "alg": "SHA3-256",
          "content": "5b839f4645dbac0d1bc76a91e168a52574c2bb6de0b7e92cd14aafd0ad6a28b0"
        },
        {
          "alg": "SHA3-512",
          "content": "fedcd8618f44ab0b771bef7d2fcb61d49021eb2e592d8d3058d3f57e7fe0ed1a9239cac859fe534dd0629aaf577fb8f77841412dbb3ae58b8d8cd0754da2ec48"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "name": "GNU General Public License, version 2 with the GNU Classpath Exception",
            "url": "https://projects.eclipse.org/license/secondary-gpl-2.0-cp"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.json/jakarta.json-api@2.1.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/jsonp",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/ee4j/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jsonp",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.parsson/jakarta.json@1.1.9?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.eclipse.parsson",
      "name": "jakarta.json",
      "version": "1.1.9",
      "description": "Default provider for Jakarta JSON Processing",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f91d45a29f468d318ec82a943145a32d"
        },
        {
          "alg": "SHA-1",
          "content": "afd42f540fbecc38984fe6024d8ed00adcefe08c"
        },
        {
          "alg": "SHA-256",
          "content": "75b97f4c8dd035aae97a92478fdd7fe961a6ed7c4051b54377152decafa62a57"
        },
        {
          "alg": "SHA-512",
          "content": "e134152aa2a57327dda6cca1ffc3f5aac4292cc2e6251b1175b391a9fb11f1179a0432e25fd654118e3f5c7ef1d965d3f75f2a5cbbc5045c7926b5dd28efb5da"
        },
        {
          "alg": "SHA-384",
          "content": "da0a39754ede607264486f9fa01d1f2c0220a02f4bd1c869e3bd82960a367fa8d506b1fb05c8e61ded867846ab46d754"
        },
        {
          "alg": "SHA3-384",
          "content": "47af9b290e08d9df2bf50b3cee1b9ea68962622fab1825e48086c7dc7d36c72b67516fa1042af7420373c5c3c915ecba"
        },
        {
          "alg": "SHA3-256",
          "content": "437a64aec47b276b787f9a297e254c6c7edbc65762f466128ed812152bcdbdb2"
        },
        {
          "alg": "SHA3-512",
          "content": "e406baed4cb9e2e7c5560a93f07c0dad73fcf270f1fd0245ffe515057100eae52c22f3f62db524febdbbdea4b319fbf7a9068be3e33b4e6b82b0272514831939"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "name": "GNU General Public License, version 2 with the GNU Classpath Exception",
            "url": "https://projects.eclipse.org/license/secondary-gpl-2.0-cp"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.parsson/jakarta.json@1.1.9?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/parsson/parsson-bundles/jakarta.json",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/ee4j/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/parsson/parsson-bundles/jakarta.json",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.zaxxer/HikariCP@7.1.0?type=jar",
      "publisher": "Zaxxer.com",
      "group": "com.zaxxer",
      "name": "HikariCP",
      "version": "7.1.0",
      "description": "Ultimate JDBC Connection Pool",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4f40811c9309be1d38e27dbec4200359"
        },
        {
          "alg": "SHA-1",
          "content": "13ac26e0d5ef25ae7f1515e59e525c500f013ccc"
        },
        {
          "alg": "SHA-256",
          "content": "2be45c641b841e81df87292e181f2c203500c5f0e9a1676f135927387f3cf40b"
        },
        {
          "alg": "SHA-512",
          "content": "d49d6cfd831d0b973fa16e61dc8682f983205dbb4399b679df4f18f3f30e1ddbc5247d3724881c1d3579144cc9aba11bd56e2aa9755a2c4754f5df21cc4760f3"
        },
        {
          "alg": "SHA-384",
          "content": "dd518256d0ecade85921e17bae8b41d63e458b06cf7b80e8d2d666735b1ad87b6f6c4ebcb9545454cad5253966c3b11b"
        },
        {
          "alg": "SHA3-384",
          "content": "ca14a89ee53fa74f2864fd70da166b9ea70ba7ddf74aa06d19b3f034163ab0afd664bb168f28d9d7c255d7758faff67b"
        },
        {
          "alg": "SHA3-256",
          "content": "5ef8c54addf0ee782714d73dbcb40f64dca61f38dc1dd00b6e477a1854f7d22d"
        },
        {
          "alg": "SHA3-512",
          "content": "d46da214debedf24f58be53c2b679c1300af4ce96f8fdc94e2fb9c73608750056004f3b6d60f00c2884ce899b82a6b191bbc2a1455be6205af226b9ed2129b43"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.zaxxer/HikariCP@7.1.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/brettwooldridge/HikariCP",
          "type": "website"
        },
        {
          "url": "https://github.com/brettwooldridge/HikariCP/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/brettwooldridge/HikariCP",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.mindrot/jbcrypt@0.4?type=jar",
      "group": "org.mindrot",
      "name": "jbcrypt",
      "version": "0.4",
      "description": "OpenBSD-style Blowfish password hashing for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d2b39d874e0d512f85386a72b0083682"
        },
        {
          "alg": "SHA-1",
          "content": "af7e61017f73abb18ac4e036954f9f28c6366c07"
        },
        {
          "alg": "SHA-256",
          "content": "e183f6f59404fc1e12073cfea4ace7ea103c900463cd21fb609a7c617ecdf624"
        },
        {
          "alg": "SHA-512",
          "content": "95ffe1f6593f83da047ff289a52b5ef73adcaca4a9a990a47744fbd50a52fce39958c17ed393e95d64093b2acbcaba39ba0b5b983a2e0ad98ce5c6e9282a67cd"
        },
        {
          "alg": "SHA-384",
          "content": "66a24af2134e6fcee1f4232c2c4bab43ab97d0c8ffbbc009f9bb0e5ef2a7d8795a6da3c6b47c583675b98036958aa729"
        },
        {
          "alg": "SHA3-384",
          "content": "33cf5e13897f25c525017888e7fcd2faf9a0f25135be03a65dd154feb11455e33c1df31963470b2ecaaba5267f6ad652"
        },
        {
          "alg": "SHA3-256",
          "content": "a347c842385e1d76780f9afe2200a7b9815bcd873b2a9fdd2652d0b0a5e0d324"
        },
        {
          "alg": "SHA3-512",
          "content": "5a71c6f1fde98865302e8c9ee6c99ace9efa220c0193bcdd56423015d1c73e54bd65f19a9a3ba3199b242589eb9ccc96b1d6c0d413387f8e8fbed7c691fc8790"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://www.isc.org/licenses/"
          }
        }
      ],
      "purl": "pkg:maven/org.mindrot/jbcrypt@0.4?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/djmdjm/jBCrypt",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/djmdjm/jBCrypt.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.nimbusds/oauth2-oidc-sdk@11.38.2?type=jar",
      "publisher": "Connect2id Ltd.",
      "group": "com.nimbusds",
      "name": "oauth2-oidc-sdk",
      "version": "11.38.2",
      "description": "OAuth 2.0 SDK with OpenID Connect and Federation extensions for developing client and server applications.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "38e046019e13d821b2c4bc17b0aa7bb1"
        },
        {
          "alg": "SHA-1",
          "content": "633504f3430c148cc583d9d481f5f4e48e29cccf"
        },
        {
          "alg": "SHA-256",
          "content": "30e63220c15bd93006c557bd0d614bb57a5f00232188693577c222383ea4bbe7"
        },
        {
          "alg": "SHA-512",
          "content": "30928fd2dcb6680ad1a8bf0923b2e7125eca4ec22eae584695468db82529a17f43ac405ecd28e622446ea4c96755b9c111311deb7d53179cb9c435fa0140f114"
        },
        {
          "alg": "SHA-384",
          "content": "daec981126c784ad4214d7959e72f2c4464fa2cdfc35d41523d032448b0bea32a7d275908cea9d1afc9b3533be6a6159"
        },
        {
          "alg": "SHA3-384",
          "content": "4282a8dbfd0b80180b72883cb9a5cdb28be7c68fe2c571d36a8cbe5541cb87b79405214512a3dfdcbf539629062bd0e0"
        },
        {
          "alg": "SHA3-256",
          "content": "260ca92e0aeed607eb58bc11f06a4ca825ca03b7c6da048eb9fd231acab9fca2"
        },
        {
          "alg": "SHA3-512",
          "content": "5de230dd0e11e61afc711ed0c5e1e33526c955109b1edbaf4330d595aac565a51164b775d82f81caa1fa0a3a9b10d7dbbb64cde0d6d595b8c8618733c8229889"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.nimbusds/oauth2-oidc-sdk@11.38.2?type=jar",
      "externalReferences": [
        {
          "url": "https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar",
      "group": "com.github.stephenc.jcip",
      "name": "jcip-annotations",
      "version": "1.0-1",
      "description": "A clean room implementation of the JCIP Annotations based entirely on the specification provided by the javadocs.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d62dbfa8789378457ada685e2f614846"
        },
        {
          "alg": "SHA-1",
          "content": "ef31541dd28ae2cefdd17c7ebf352d93e9058c63"
        },
        {
          "alg": "SHA-256",
          "content": "4fccff8382aafc589962c4edb262f6aa595e34f1e11e61057d1c6a96e8fc7323"
        },
        {
          "alg": "SHA-512",
          "content": "02fcd16a30d0e68b3e9e4899731181c6abb7117baa15c096ca940e01dde08bb86101cbeae552c497f8a90d923b5fa2f2b6f3850baf8dc94dbd399887924a9069"
        },
        {
          "alg": "SHA-384",
          "content": "88b0ecfde391a3d8468349c70e1539569768dfac3233dfe0b4660904df04e6c6bf26ed9c0784b9b22c122c3448e2a6b6"
        },
        {
          "alg": "SHA3-384",
          "content": "487b53f48b55b98a61ae60abedc43543887944867aa6bcb78d5ed46e2d0d7c19510c5fcadc362d939313feafdcfc55e1"
        },
        {
          "alg": "SHA3-256",
          "content": "3e79c8f58865d2d58a5311a8bb45772007f07e7f3ed2780784d1e4382dc934d0"
        },
        {
          "alg": "SHA3-512",
          "content": "ff32665e1b6d8176ccc7e8c836ca7343c2603dab053e42d79b4258d51a14ff63933c67d24034169ac91e11ebda21cc2c84a2a540072e656d2a8e6fcea7808421"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar",
      "externalReferences": [
        {
          "url": "http://stephenc.github.com/jcip-annotations",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "http://github.com/stephenc/jcip-annotations/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/stephenc/jcip-annotations/tree/master/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.nimbusds/content-type@2.3?type=jar",
      "publisher": "Connect2id Ltd.",
      "group": "com.nimbusds",
      "name": "content-type",
      "version": "2.3",
      "description": "Java library for Content (Media) Type representation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f0fc0d6be73e838863e2197c03a27c3f"
        },
        {
          "alg": "SHA-1",
          "content": "e3aa0be212d7a42839a8f3f506f5b990bcce0222"
        },
        {
          "alg": "SHA-256",
          "content": "60349793e006fba96b532cb0c21e10e969fe0db8d87f91c3b9eaf82ba2998895"
        },
        {
          "alg": "SHA-512",
          "content": "58f7fe3b4303cecd6eac73c3345af71536479ce4bc38c88153bdcf6176a7cf5a0875420ea4a6024b4e734b78de08a8e544014b435cb63416c759b957ad3818e4"
        },
        {
          "alg": "SHA-384",
          "content": "9dbe31f543aaf807093fe1dd18a0ed33346252e2f6fce598e1b193b9d73fcebf79608fce6a620ede8ea7adf45f1a7422"
        },
        {
          "alg": "SHA3-384",
          "content": "67b8b5d051230739ee85678006758450cd6510c5fb9a6b3134d43f644c2d70bc6dc3cff6133b132b5b158a1f346880a9"
        },
        {
          "alg": "SHA3-256",
          "content": "b8046b3dd12321400b4643ff0c47ea5c1e77d6252177bdd8be6f0e0b234c80bf"
        },
        {
          "alg": "SHA3-512",
          "content": "734a6a5a383aac8dcfaca09c8e37637f74334ce2d5c050b519277ad7c20f065fad44b5a6417cdc32d6cd43f80c0e1e0c37d9daa9279651facb6c38cb88376396"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.nimbusds/content-type@2.3?type=jar",
      "externalReferences": [
        {
          "url": "https://bitbucket.org/connect2id/nimbus-content-type",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://bitbucket.org/connect2id/nimbus-content-type",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/net.minidev/json-smart@2.6.0?type=jar",
      "publisher": "Chemouni Uriel",
      "group": "net.minidev",
      "name": "json-smart",
      "version": "2.6.0",
      "description": "JSON (JavaScript Object Notation) is a lightweight data-interchange format. It is easy for humans to read and write. It is easy for machines to parse and generate. It is based on a subset of the JavaScript Programming Language, Standard ECMA-262 3rd Edition - December 1999. JSON is a text format that is completely language independent but uses conventions that are familiar to programmers of the C-family of languages, including C, C\u002B\u002B, C#, Java, JavaScript, Perl, Python, and many others. These properties make JSON an ideal data-interchange language.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "fde8981f31c3b972355a5adf26a9ec65"
        },
        {
          "alg": "SHA-1",
          "content": "5f858a43a325a8673da6869ab2bc787a1bcb2244"
        },
        {
          "alg": "SHA-256",
          "content": "1ae4b561458afb540be8ec5c6dbb4f2e715a319a7ae64854998aaf924770d61b"
        },
        {
          "alg": "SHA-512",
          "content": "fc8269826394dbca52fa9366f28226e5e37bc64c1268d7a49e2dea7fb2c62da2be8c8bcf362da5561a3cf413816019d8c4f95199a585eb8b13e8a8b634259a00"
        },
        {
          "alg": "SHA-384",
          "content": "13db694eb1f73778d628452b6840bff4c044101f2dcf7c3782f4bb48798fbae8b752cb8f7536b5173e896de4c225c3a6"
        },
        {
          "alg": "SHA3-384",
          "content": "86c0dc99d98a7c70015b6158f76253cd16a4b2bfb754ea6526991860e2536880b95130044cbe953865b284eebadad781"
        },
        {
          "alg": "SHA3-256",
          "content": "edee009cc2977ff4c2aae9098d14e7e651168dca1735726772d6bda5b66e2e98"
        },
        {
          "alg": "SHA3-512",
          "content": "23f8d5a59cd7111680f65d9fc2ed80b9876ab3094a2048526b376ae16ad855680b1c90264c23c52468efe0646a30db8a22f6b279ec67e047f3951b55a6d0d104"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/net.minidev/json-smart@2.6.0?type=jar",
      "externalReferences": [
        {
          "url": "https://urielch.github.io/",
          "type": "website"
        },
        {
          "url": "https://github.com/netplex/json-smart-v2",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/net.minidev/accessors-smart@2.6.0?type=jar",
      "publisher": "Chemouni Uriel",
      "group": "net.minidev",
      "name": "accessors-smart",
      "version": "2.6.0",
      "description": "Java reflect give poor performance on getter setter an constructor calls, accessors-smart use ASM to speed up those calls.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0ad72639eea293193f68898da9b0b902"
        },
        {
          "alg": "SHA-1",
          "content": "2d96f1d9b6ab7f13261aa81b15703574185747a0"
        },
        {
          "alg": "SHA-256",
          "content": "222c9f547bb20a99fc486403a398352d1306fb671b38abd7ecab6401df170e61"
        },
        {
          "alg": "SHA-512",
          "content": "220eb28c94fdd15e7ac9b7e80d238a9871fc78db3127db9ca6207251e0e5563c62cfd5ab7625d69eb9e2563fc726e71a25562a4081f089f564dc206e0569665f"
        },
        {
          "alg": "SHA-384",
          "content": "c861d37b7a3a5d3d42a699239e3437cf094a8359b2371bacce5f7a17da02f9a0eb65ca2456d0168c4870be36bddc135f"
        },
        {
          "alg": "SHA3-384",
          "content": "4fa8ea0794e22ccc34ecc9b73cb9cad062cd82561227b15f1261541180d584ba745611ff31e98653e4f5d481846de361"
        },
        {
          "alg": "SHA3-256",
          "content": "1b170bf2e79abd9a77bb330c51b73d695c17e5db41817efab22294f4ee65a2c1"
        },
        {
          "alg": "SHA3-512",
          "content": "224c001707e5b478f6503b88ab8c07b94f82bfb02bc81094a3ffdcf05d29f1377a8e518b223f9282d0147f386f13faf319692002d59f4c6f452b282aa6b000c0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/net.minidev/accessors-smart@2.6.0?type=jar",
      "externalReferences": [
        {
          "url": "https://urielch.github.io/",
          "type": "website"
        },
        {
          "url": "https://github.com/netplex/json-smart-v2",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.nimbusds/lang-tag@1.7?type=jar",
      "publisher": "Connect2id Ltd.",
      "group": "com.nimbusds",
      "name": "lang-tag",
      "version": "1.7",
      "description": "Java implementation of \u0022Tags for Identifying Languages\u0022 (RFC 5646)",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "31b8a4f76fdbf21f1d667f9d6618e0b2"
        },
        {
          "alg": "SHA-1",
          "content": "97c73ecd70bc7e8eefb26c5eea84f251a63f1031"
        },
        {
          "alg": "SHA-256",
          "content": "e8c1c594e2425bdbea2d860de55c69b69fc5d59454452449a0f0913c2a5b8a31"
        },
        {
          "alg": "SHA-512",
          "content": "494267766c974ce16a99cb221953edc91fde8db0c920230758ecea0ea9d3006e95d86ad46f7a9d61b810d85b0fa6da9a3ce2b507cdbe4be320c499eaea93666b"
        },
        {
          "alg": "SHA-384",
          "content": "fdc2cde39a1b07a2542cbc07222afd6292ae19cb1f9ae008476f7ec1b8ebe1e3e84aca08e47e1ef81887a23ac5267d00"
        },
        {
          "alg": "SHA3-384",
          "content": "b0e673087533f60173a11a55b0fde554c0830e7b3b6609e1ea6546de19fc9a97fbfe6eee73580d09b2de66989d0603c7"
        },
        {
          "alg": "SHA3-256",
          "content": "ea208d4eb55212ce9835a9be60396861b0fc33f4161efee3736c3e7159acb9f7"
        },
        {
          "alg": "SHA3-512",
          "content": "450f819981d73711c30d838261ff55a7f1988c8b965c786708dc27fbd10a2018cfde82b8fee5d7d1022eacf085dfdabe22d9de92462eba80e2c15a116c3c73ed"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.nimbusds/lang-tag@1.7?type=jar",
      "externalReferences": [
        {
          "url": "https://bitbucket.org/connect2id/nimbus-language-tags",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://bitbucket.org/connect2id/nimbus-language-tags.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.nimbusds/nimbus-jose-jwt@10.9.1?type=jar",
      "publisher": "Connect2id Ltd.",
      "group": "com.nimbusds",
      "name": "nimbus-jose-jwt",
      "version": "10.9.1",
      "description": "Java library for Javascript Object Signing and Encryption (JOSE) and JSON Web Tokens (JWT)",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2dcec009745fe5ba876b5c5d8ac71caf"
        },
        {
          "alg": "SHA-1",
          "content": "82ab15c57686545d989dd2c82cbec5b6b6f1c860"
        },
        {
          "alg": "SHA-256",
          "content": "33152ea83ec50d22706fdaf3b07acbcd716f9a68edcabdd7c4d02843cbdcdcf6"
        },
        {
          "alg": "SHA-512",
          "content": "5942ec095618438497425b3c0b96f97a3910d75897b27babf570673a7e5311e05d6be441b9794eb0eb528bc9eba1ba805a7bab9b669b088db7c549978d4eb8c2"
        },
        {
          "alg": "SHA-384",
          "content": "e1bb6bd950a286e9f0099a2274c1eaedf53c273cff53022833a7178b4f369d294d1e312af3babe11bbe752b5405e5e0d"
        },
        {
          "alg": "SHA3-384",
          "content": "094843f7ddba4a8f62591f95c1bf2cc087eeb8c9bda335cc6b8dd368bfdc2294f8f94ca757a361eee0ddc46caa75d38c"
        },
        {
          "alg": "SHA3-256",
          "content": "e2782041f5ac52a36e8841ffda3b8bb8c3bfb53f4aca52cffe2c78b81f268a98"
        },
        {
          "alg": "SHA3-512",
          "content": "d44432a00f7a447d53c96ce50b21a7368076f30b152b1006b1ae3573acbd6f190ae020b531e919d3779b7e0a712c56d1acb62e0e6511da42d15cdf4d9d2367fc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.nimbusds/nimbus-jose-jwt@10.9.1?type=jar",
      "externalReferences": [
        {
          "url": "https://bitbucket.org/connect2id/nimbus-jose-jwt",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://bitbucket.org/connect2id/nimbus-jose-jwt",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-base@2.22.1?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.jakarta.rs",
      "name": "jackson-jakarta-rs-base",
      "version": "2.22.1",
      "description": "Pile of code that is shared by all Jackson-based Jakarta-RS providers.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "200116c649c8f81d1188390e7a149919"
        },
        {
          "alg": "SHA-1",
          "content": "4ae1742146295b1b6f334e295c0ead7f0d151448"
        },
        {
          "alg": "SHA-256",
          "content": "7b9f37169cad0733b4f3e2bae135f0a8bd01b22583f3b2b476df434bcd33e534"
        },
        {
          "alg": "SHA-512",
          "content": "857ea5c548227825dd29628a4ab837dc50c4deb5ef989f06d07fc87fca99df20944d50202793e817fc594a78607e73569d58fcb26fe948aa1d29d9a6bea57dbb"
        },
        {
          "alg": "SHA-384",
          "content": "ee780f58dc1f2fea7f179e8231424d5d838d21fe4a7939c2b8e9828fe69f353b50039c3ae12410a391974489a262a26a"
        },
        {
          "alg": "SHA3-384",
          "content": "170224d44ce19db36a4962202713063b016f1cfdaa68501ea3e76c9869679684a7b0e915045151cd580a637ca7071d86"
        },
        {
          "alg": "SHA3-256",
          "content": "97dc27164cc977921a408e5415a09a8bfe5e27472cb06f2fdd61993f8f634422"
        },
        {
          "alg": "SHA3-512",
          "content": "a8505546698b673693fb5374a71ec0470e766e0f93ed8891a678a75d67061a9cec36c553f704d484e6d89ca5cba5aa0d0199afcc2b1739fcf7295d302459f29d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-base@2.22.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-jakarta-rs-providers/jackson-jakarta-rs-base",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-jakarta-rs-base/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-jakarta-rs-providers/jackson-jakarta-rs-base",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-json-provider@2.22.1?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.jakarta.rs",
      "name": "jackson-jakarta-rs-json-provider",
      "version": "2.22.1",
      "description": "Functionality to handle JSON input/output for Jakarta-RS implementations (like Jersey and RESTeasy) using standard Jackson data binding.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0518a27594d151c2dea021141f6d73fa"
        },
        {
          "alg": "SHA-1",
          "content": "fe60c13878afb274a9a033ed4120a6ec19d298a0"
        },
        {
          "alg": "SHA-256",
          "content": "2d764b82a8a8c2afb7a23277eb0ad25c9009bdaa219025521d7e84fa0fdfd4ad"
        },
        {
          "alg": "SHA-512",
          "content": "520b04a12a1a0dae69b6acf0068067170307526deeedd024f77307959d35517c43c299f4a42f94547b054d9aa1bbff04edf3246c8f195027530864aa02c6b1d2"
        },
        {
          "alg": "SHA-384",
          "content": "4093ef3e86b591be102cefc60d18594bd01a46bbf6be80673bb09c820b65377c691ca9f979c0d4ba3fe17dc978c1b7f4"
        },
        {
          "alg": "SHA3-384",
          "content": "769a939833151e836cec75496f4b6c07c7f49ef9d07ecd64e9996a1feba69ede5786df1220039ffe8d7d6bf8167cf575"
        },
        {
          "alg": "SHA3-256",
          "content": "df4dc4b8e13a2664aa11c6d78f010d7f85c87256e4a3d23068eac0e959853f95"
        },
        {
          "alg": "SHA3-512",
          "content": "11ca19751f61bc0032b63c9a0d2f39a6d3e30b6ac086875187b4112102373868d47a99a8c536d691cef4ca448466916ba4b7371082a0983af0e83bbbb7750d91"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-json-provider@2.22.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-jakarta-rs-providers/jackson-jakarta-rs-json-provider",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-jakarta-rs-json-provider/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-jakarta-rs-providers/jackson-jakarta-rs-json-provider",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.22.1?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.datatype",
      "name": "jackson-datatype-jdk8",
      "version": "2.22.1",
      "description": "Add-on module for Jackson (https://github.com/FasterXML/jackson) to support JDK 8 data types.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "58b2d6d030c310d11902a11a47159f7f"
        },
        {
          "alg": "SHA-1",
          "content": "ef21a94e7b5603f57ca1efe9215513d210d96320"
        },
        {
          "alg": "SHA-256",
          "content": "2d5ee03fcaa017db0c947a5921ede8b39481d1d637af39079840a87d55e907eb"
        },
        {
          "alg": "SHA-512",
          "content": "62a533985dee473d3ef39400afb7bb833ce83611d0b2414f3a89bd53bcd9e21f14e63ad94cb2cfb7ae96fa961903fda78e0176d46bbe19473d19c627fdfa648c"
        },
        {
          "alg": "SHA-384",
          "content": "423db1c93aa364cd7677eb2971e8354d30be788e8dc6c63cedbe8c784b6439170c3c208c303b96c08ab120ac802c22d1"
        },
        {
          "alg": "SHA3-384",
          "content": "a02e2eaf81ca6869c821015c0d1dec580ed2bd539821a795957b0239834e813db0808144e4ecfbcece992a212117f252"
        },
        {
          "alg": "SHA3-256",
          "content": "a246cfeed6f3f59c48cf6990d6d7adc77637c318401956a8e0ccaa0ed51e9814"
        },
        {
          "alg": "SHA3-512",
          "content": "9808c24c3d1c241ff9c89e621338fcbb483fc1eb6560465562546713506639c5e633df41b844c8bd0f76497027404dd73fe3f720cddd65ec15841f22ec8fc13f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.22.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jdk8",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-modules-java8/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jdk8",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/ch.qos.logback/logback-classic@1.5.38?type=jar",
      "publisher": "QOS.ch",
      "group": "ch.qos.logback",
      "name": "logback-classic",
      "version": "1.5.38",
      "description": "logback-classic module",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "558314a8784c6dd39cc18670303457cf"
        },
        {
          "alg": "SHA-1",
          "content": "bc5873cb4a7f502ce18ce2977d98ad26b9f96444"
        },
        {
          "alg": "SHA-256",
          "content": "afb439c61fa287c9e1925523b13baab03617e724406a389d48b61c2c3e46b700"
        },
        {
          "alg": "SHA-512",
          "content": "89e69701388d5c859ab2216d240f13afdf502268dfc54782b183b38cb43e34d65657cb7f8d12d269dd351488ce7c59783d6c463fee84b11737a5b886c71b5858"
        },
        {
          "alg": "SHA-384",
          "content": "21fe0b5a9c06635d0dae42ec40483e3b290d92a7e5199a31296e505b811effa8fc23abc84c9d7ad7d3e98916d03648d4"
        },
        {
          "alg": "SHA3-384",
          "content": "3ebbf60b1411f4cd1b5118c24dd7dc8cf74c98532bd2ba7c56e711aac6e4be0ff031c1dbd29d940eb44e9ff8ebccd18c"
        },
        {
          "alg": "SHA3-256",
          "content": "cbacc14a951204dc09684db550a86ee7e543845a35e7c65fb16bccef078df81f"
        },
        {
          "alg": "SHA3-512",
          "content": "25e5f44f13c7b240fa5acb8e3fb396590b29ed5e287f97586ba5c832f71251cb6787cd902abf6a081616a11af886439b6d9e9239583ff58914b54848e230bd33"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "LGPL-2.1-only",
            "url": "https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html"
          }
        }
      ],
      "purl": "pkg:maven/ch.qos.logback/logback-classic@1.5.38?type=jar",
      "externalReferences": [
        {
          "url": "http://logback.qos.ch/logback-classic",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/qos-ch/logback/logback-classic",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/ch.qos.logback/logback-core@1.5.38?type=jar",
      "publisher": "QOS.ch",
      "group": "ch.qos.logback",
      "name": "logback-core",
      "version": "1.5.38",
      "description": "logback-core module",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a065b3893602a19f6f393a42c499c198"
        },
        {
          "alg": "SHA-1",
          "content": "7b1d133b29bf42ff268cf3f71d1308b80480fb8d"
        },
        {
          "alg": "SHA-256",
          "content": "a855a0fc97b1d06f4efb1c3bba5ebd0eb508d8b58e68e89e4bbc23a85135c883"
        },
        {
          "alg": "SHA-512",
          "content": "c5f73bdfcf4aea58506c4764a05b6992edc628ca54ec6903e56a3d2bf93da7ee5514bcbde1c8ca0ff2d1a164ba92f7354576cf2b7f6a40c3ea8cfa3a865dd396"
        },
        {
          "alg": "SHA-384",
          "content": "9d3c6f6913b941ef270fd15d355607f4b9e76c621386182e10e83796ff27e6e038736c5ed54a378981e725e91296ef09"
        },
        {
          "alg": "SHA3-384",
          "content": "b649d010518d3dd41b6b568bac744f8cc9220835e34c9a38306efb9cb46f692570dedf9a914d70a1647bd3a95296a6b9"
        },
        {
          "alg": "SHA3-256",
          "content": "5b7610c3dbfaae028f5f0d8c2ddc145803e793a795cd0ed8dfa86c3ca284fef5"
        },
        {
          "alg": "SHA3-512",
          "content": "80d3a5cfa5ce11ec797c26c1cf387676b937942dab5d344559d1f469e6315cb9b55171da4202174671ad416c74ba2fb82f08e198b58f355bf03b97814a340e13"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "LGPL-2.1-only",
            "url": "https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html"
          }
        }
      ],
      "purl": "pkg:maven/ch.qos.logback/logback-core@1.5.38?type=jar",
      "externalReferences": [
        {
          "url": "http://logback.qos.ch/logback-core",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/qos-ch/logback/logback-core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.owasp/security-logging-common@1.1.7?type=jar",
      "group": "org.owasp",
      "name": "security-logging-common",
      "version": "1.1.7",
      "description": "The OWASP Security Logging project provides developers and ops personnel with APIs for logging security-related events.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9f11b84aefd2f2dcf48f8443a6213619"
        },
        {
          "alg": "SHA-1",
          "content": "4717c0c2225a2aad898b2fbdf717ec6e034d48f8"
        },
        {
          "alg": "SHA-256",
          "content": "ef9c6e4fefcf8ffcee7590239a8e8c56b192fc71c183fd8a943cf177e01b07eb"
        },
        {
          "alg": "SHA-512",
          "content": "d30fa0cce5b75758289a255946f165418786d96c5de3dbb12084d6da6bb75e556e43e002050ea114e3adb0ca15dc16e28b6218f5b2fcf993eadcb37076fb522a"
        },
        {
          "alg": "SHA-384",
          "content": "f10fbb5250849634a79477a536eb7f4a07aa66d5d1234e18caf5dbd2ab9473a4e26baa4fe381af9240eb6f9471cbb937"
        },
        {
          "alg": "SHA3-384",
          "content": "fee72e5c1e41740264f6d0f1fcfd72731c92df25af3d529509a006ce8330430390ab1139b8798c8cd6b78bcc0656d4e4"
        },
        {
          "alg": "SHA3-256",
          "content": "2c7bf9e688071240437f106b05955c298c9ee42f6c119cd918460af5a3a82a48"
        },
        {
          "alg": "SHA3-512",
          "content": "0ff1a2d6da110ca1a1713b052bab481bf052033e9cef7362a69a30e485d4a8ae8ba78ecd02278f4f81558d9cd2f12402108f82668754eade77fde3670433740c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.owasp/security-logging-common@1.1.7?type=jar",
      "externalReferences": [
        {
          "url": "https://www.owasp.org/index.php/OWASP_Security_Logging_Project",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/javabeanz/owasp-security-logging",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.owasp/security-logging-logback@1.1.7?type=jar",
      "group": "org.owasp",
      "name": "security-logging-logback",
      "version": "1.1.7",
      "description": "The OWASP Security Logging project provides developers and ops personnel with APIs for logging security-related events.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c1148e1a96d53351f39b407185a59e06"
        },
        {
          "alg": "SHA-1",
          "content": "e609fe8531b96fcd559c9e146342aa3a56d16231"
        },
        {
          "alg": "SHA-256",
          "content": "100f5e85cbf9cf395983d85355cc17ed1d19d77176d93c58a14f339e62382168"
        },
        {
          "alg": "SHA-512",
          "content": "9bdb7df787ae5264e509082aa3b6f865ec543801587270eb582c3cb430a15f019c24a25e5a1d4df462a2dec0e6e82ce636807b055d5e72b73d67d90805e9e5d1"
        },
        {
          "alg": "SHA-384",
          "content": "8502c6a84746dfd8b9960d599cd476dd3b2c0017b2e8eba169411f7adbfea4236323ada03cb7e005812456976e673a7b"
        },
        {
          "alg": "SHA3-384",
          "content": "283c28b7760973dc0195fcd2127294c4c77a2a8c95bcc597401f00ffbd8c5367788ae9c9b6874deac178526fe93c1265"
        },
        {
          "alg": "SHA3-256",
          "content": "5a2f21e6fe6fe4bc45c439d7dbb5a16d07cc56ecf15b10a60125ee777bac1122"
        },
        {
          "alg": "SHA3-512",
          "content": "f2fa575c8838d7dcb5d11678cff9afaeb65d3bb227f501cf86541e4131c7a3cb72921d8ff8d28f91f7a6d5d3ac08d579f1fba73e8a7627c7a46371ed0a62fad9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.owasp/security-logging-logback@1.1.7?type=jar",
      "externalReferences": [
        {
          "url": "https://www.owasp.org/index.php/OWASP_Security_Logging_Project",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/javabeanz/owasp-security-logging",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/net.logstash.logback/logstash-logback-encoder@8.1?type=jar",
      "group": "net.logstash.logback",
      "name": "logstash-logback-encoder",
      "version": "8.1",
      "description": "Provides logback encoders, layouts, and appenders to log in JSON and other formats supported by Jackson",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "08a18cd6a4737221773acc1d2a5c9e3a"
        },
        {
          "alg": "SHA-1",
          "content": "aca81cdb03c48f4e0213d3e351ab1befafa9991e"
        },
        {
          "alg": "SHA-256",
          "content": "2716cb6a3e83ec2f296395b8752063f502d10a90de1a88f711f06ae5b6ecefb7"
        },
        {
          "alg": "SHA-512",
          "content": "71c73ef76d1f1562a54ba2f0fe8335f5e5a4938dc7896bcb58abd8a2b466e8c46640361d63ea475a5d37b12334335fd3e2827eda54fd17b0384027d955cdec7b"
        },
        {
          "alg": "SHA-384",
          "content": "5c332ad34b65c15869217e79c5e505502df624b0e76f47a7a9eba4d323a1ca4ea34dabb1ef75de489b329e2f94deba1d"
        },
        {
          "alg": "SHA3-384",
          "content": "cd44829a3e71f245a300f9b5a6d9b1e7838835b5f16dcb3d5c01c3cdcf23f76693abe517014bb5318d528e74a0ea150e"
        },
        {
          "alg": "SHA3-256",
          "content": "a5fd0008198d89b57aff757173ea60f1aa0e3cc2ea4ff043b2a73c5bf200244e"
        },
        {
          "alg": "SHA3-512",
          "content": "e3769fe9dbdc066f346b3f38cd3738d6d19bc5a0551164bb7593bf3dfa2deeb338d24ae664fda0b7f20510127fddb9875b4621b8f63cf76c851369711ea4e79a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl": "pkg:maven/net.logstash.logback/logstash-logback-encoder@8.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/logfellow/logstash-logback-encoder",
          "type": "website"
        },
        {
          "url": "https://github.com/logfellow/logstash-logback-encoder",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/dev.cel/cel@0.13.1?type=jar",
      "group": "dev.cel",
      "name": "cel",
      "version": "0.13.1",
      "description": "Common Expression Language for Java. This include both the compilation and runtime packages.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "11e9163941195ed2a94ce03b6ab8b367"
        },
        {
          "alg": "SHA-1",
          "content": "9be5fdb7f6a6ef84c135c83fa48ba16e3d558bfd"
        },
        {
          "alg": "SHA-256",
          "content": "67b85ff0a0176679ee3fe2fbfd2cd6f1e08c0ec67af5da22074f246a87751a4c"
        },
        {
          "alg": "SHA-512",
          "content": "1702ef6e2ebca67de2bde40ea38fb97757c54f9933fc4afcef4992ec29bd10f5715613748a0eb5ed621f771834d8358a2c04d1bbe10ca0e8f740cf540c9d248c"
        },
        {
          "alg": "SHA-384",
          "content": "603a75e5ddfa2b63df04e631de59b88b06b1c8af186e30cf03c7f4d83e6dd8dd514465d2040efc56f78af15cb588a4e4"
        },
        {
          "alg": "SHA3-384",
          "content": "e6313a4f5886709f177512a8b86d65d752eef7bda7daccb76d4c5b4581794f7f6b386b9deae8213295476cc3f91c79ba"
        },
        {
          "alg": "SHA3-256",
          "content": "9d9b42a3435764eaebbc9663cbad49b9efabdd2a2f695e049b1cf1c77cfe12d6"
        },
        {
          "alg": "SHA3-512",
          "content": "2b70b2db4090e0f914866d5be8b21d89d976772f8557d59ccff9911d5cf5c8c07a98546c8993e827a4871b2b356eef924b6e3b72ba1b9156cbdbb619fa40c29f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/dev.cel/cel@0.13.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/cel-java",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/google/cel-java/tree/main",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.0?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.auto.value",
      "name": "auto-value-annotations",
      "version": "1.11.0",
      "description": "Immutable value-type code generation for Java 8\u002B.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8fc3c2d0bbdef8927f08a5c7c829a768"
        },
        {
          "alg": "SHA-1",
          "content": "f0d047931d07cfbc6fa4079854f181ff62891d6f"
        },
        {
          "alg": "SHA-256",
          "content": "5a055ce4255333b3346e1a8703da5bf8ff049532286fdcd31712d624abe111dd"
        },
        {
          "alg": "SHA-512",
          "content": "339742a85491c0fe529e97668cd86d9c3a7a80061d226e1a51eae45fb9c466e10ee2a4d4fc3b502b96aa473ac4e03850aef8a3b744d3972a934b279ceb80816e"
        },
        {
          "alg": "SHA-384",
          "content": "626c76525b939a087be13919b760b447ef6b8668004634650e9c98105c7b31412c205e022a8ba15ea7bc1c7061a6367c"
        },
        {
          "alg": "SHA3-384",
          "content": "f5c85d8934f52d108217ce20c0641c7692023c657049e40b4916185cd3f9d4386f4404dbc13a0694c9bb13fdf9b687e5"
        },
        {
          "alg": "SHA3-256",
          "content": "549eac3adc58ec5271c45ff9390bbfc0b30c3af27a8d74392ca0a46c19062ed7"
        },
        {
          "alg": "SHA3-512",
          "content": "9f65f28e7b022ea782b45939fd1170d6d0a175f639ca8cf66363f87390b642046da5d5bb0c8adc679b6b9533c9d8cd4b4dfefb7f09d6fb5028219c96fb37d508"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/auto/tree/main/value",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "http://github.com/google/auto/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/google/auto",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
      "group": "com.google.guava",
      "name": "guava",
      "version": "33.5.0-jre",
      "description": "Guava is a suite of core and expanded libraries that include utility classes, Google\u0027s collections, I/O classes, and much more.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d9fbf39a41a5bab891348f07668e18c5"
        },
        {
          "alg": "SHA-1",
          "content": "8699de25f2f979108d6c1b804a7ba38cda1116bc"
        },
        {
          "alg": "SHA-256",
          "content": "1e301f0c52ac248b0b14fdc3d12283c77252d4d6f48521d572e7d8c4c2cc4ac7"
        },
        {
          "alg": "SHA-512",
          "content": "994a4dbcbd8e528ad3b4a7acf49b631a40dcebb03d9a8f5e1d3b74351f805f77774e9a19f7233e42036cb415b7838710f207ac1e18335e4a219b7f99ea22a44f"
        },
        {
          "alg": "SHA-384",
          "content": "9dabff6e543ead881b20d38a533e9151aaa83999239cf0ace3e712cf678e7976c3a50d79e3f3c57afc05a3b9ff14ad90"
        },
        {
          "alg": "SHA3-384",
          "content": "9f65d4d942113facb2eb25229c1530b79dd3b8994574034b8d4a1c2b39ed8ee5bb4d415ec690d3d87cee0d8cb2283564"
        },
        {
          "alg": "SHA3-256",
          "content": "fedafab2279bdf6eff66314fc61b056e92312695678e66dc1e25fe1d18af5a36"
        },
        {
          "alg": "SHA3-512",
          "content": "e64f3c49f9030358554bb0b8abdff729394988f1e3247b05a86302014eeff4a2855acf46d9bf1c683cbecc33a24173a20a103d3c82c94f8cabd6676a01b40fb6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/guava",
          "type": "website"
        },
        {
          "url": "https://github.com/google/guava/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/google/guava/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/google/guava/guava",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar",
      "group": "com.google.guava",
      "name": "failureaccess",
      "version": "1.0.3",
      "description": "Contains com.google.common.util.concurrent.internal.InternalFutureFailureAccess and InternalFutures. Most users will never need to use this artifact. Its classes are conceptually a part of Guava, but they\u0027re in this separate artifact so that Android libraries can use them without pulling in all of Guava (just as they can use ListenableFuture by depending on the listenablefuture artifact).",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "29a782e90f6b37218b18bb880d2a8f4a"
        },
        {
          "alg": "SHA-1",
          "content": "aeaffd00d57023a2c947393ed251f0354f0985fc"
        },
        {
          "alg": "SHA-256",
          "content": "cbfc3906b19b8f55dd7cfd6dfe0aa4532e834250d7f080bd8d211a3e246b59cb"
        },
        {
          "alg": "SHA-512",
          "content": "72be228e7805da5623e42bf024ded7d9147023c66b22f4dbd04ac6898201af46ee82e1f92ea51eb0595f1b49151c4b8ecb862653d4906c17609c42544ee97abf"
        },
        {
          "alg": "SHA-384",
          "content": "9dd1a2a08efda311604992d3e7cee64873bc8c64de3b423b1b3a3dcc1f7f0810bb03901fbfe39a5f835accb0646f4ad8"
        },
        {
          "alg": "SHA3-384",
          "content": "ffd67766c165ee77e96824e06de2c19864a6e61f785b2085eb825f308f173d71f2555559d90d910f33f3367378ace0e3"
        },
        {
          "alg": "SHA3-256",
          "content": "08a77b528a72ca412b36e4004692705ebfd75cfb4897c88632d367d08a34b09f"
        },
        {
          "alg": "SHA3-512",
          "content": "7cba6c266babbe8272f029eea6e2cbddadee96eb1a16916a6eb2441a55837867ce717385d4388735fd83f2f6555931077c0ebda011a1ee9a37ac38c8c0c43a65"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/guava/failureaccess",
          "type": "website"
        },
        {
          "url": "https://github.com/google/guava/actions",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/google/guava/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/google/guava/failureaccess",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "group": "com.google.guava",
      "name": "listenablefuture",
      "version": "9999.0-empty-to-avoid-conflict-with-guava",
      "description": "An empty artifact that Guava depends on to signal that it is providing ListenableFuture -- but is also available in a second \u0022version\u0022 that contains com.google.common.util.concurrent.ListenableFuture class, without any other Guava classes. The idea is: - If users want only ListenableFuture, they depend on listenablefuture-1.0. - If users want all of Guava, they depend on guava, which, as of Guava 27.0, depends on listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-... version number is enough for some build systems (notably, Gradle) to select that empty artifact over the \u0022real\u0022 listenablefuture-1.0 -- avoiding a conflict with the copy of ListenableFuture in guava itself. If users are using an older version of Guava or a build system other than Gradle, they may see class conflicts. If so, they can solve them by manually excluding the listenablefuture artifact or manually forcing their build systems to use 9999.0-....",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d094c22570d65e132c19cea5d352e381"
        },
        {
          "alg": "SHA-1",
          "content": "b421526c5f297295adef1c886e5246c39d4ac629"
        },
        {
          "alg": "SHA-256",
          "content": "b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99"
        },
        {
          "alg": "SHA-512",
          "content": "c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f"
        },
        {
          "alg": "SHA-384",
          "content": "caff9b74079f95832ca7f6029346b34b606051cc8c5a4389fac263511d277ada0c55f28b0d43011055b268c6eb7184d5"
        },
        {
          "alg": "SHA3-384",
          "content": "e939f08df0545847ea0d3e4b04a114b08499ad069ba8ec9461d1779f87a56e0c37273630a0f4c14e78c348d3ac7eb97f"
        },
        {
          "alg": "SHA3-256",
          "content": "1f0a8b1177773b3a8ace839df5eed63cbf56b24a38714898a6e4ed065c42559f"
        },
        {
          "alg": "SHA3-512",
          "content": "6b495ecc2a18b17365cb08d124a0da47f04bcdde81927b5245edf3edd8e498c3c3fb92ce6a4127f660bac851bb1d3e4510e5c20d03be47ce99dc296d360db285"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/guava/listenablefuture",
          "type": "website"
        },
        {
          "url": "https://travis-ci.org/google/guava",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/google/guava/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/google/guava/listenablefuture",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar",
      "group": "com.google.j2objc",
      "name": "j2objc-annotations",
      "version": "3.1",
      "description": "A set of annotations that provide additional information to the J2ObjC translator to modify the result of translation.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "abe8bd3abff622b9a8b15c3a737aa741"
        },
        {
          "alg": "SHA-1",
          "content": "a892ca9507839bbdb900d64310ac98256cab992f"
        },
        {
          "alg": "SHA-256",
          "content": "84d3a150518485f8140ea99b8a985656749629f6433c92b80c75b36aba3b099b"
        },
        {
          "alg": "SHA-512",
          "content": "34ee5aad57b0b507e89c897306f73043f80fa0eb02b453e54d9052feb0808a0d2ed835d888946211921d2bf733780b19ff636479ce19b9f48814ba6008733ce1"
        },
        {
          "alg": "SHA-384",
          "content": "7b760a346a586d6a3fa4477807e2f02f091e61898fc9a6ff449e43c55b6465fbbc17720663183c84c41d4d8814085e51"
        },
        {
          "alg": "SHA3-384",
          "content": "a2166c1c08f947c0e60aa7c9167602942e7bac37ba45863d34c0132a1f352e7807a382588d350b93bdbbbbe315a3573f"
        },
        {
          "alg": "SHA3-256",
          "content": "3d4d3b8bfd2ad13351a53610aa4bf1c5a69d2bde4272c281003120ed9bcddb8c"
        },
        {
          "alg": "SHA3-512",
          "content": "0a574b379a3f8022f0b88252c87d0e6b6cfa434fdb981efd1b24387025a962d7ac4e90161e8bd048df142bf52f4fc41e4a0c1d45e4eeb872c5954aad552988e9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/j2objc/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "http://github.com/google/j2objc",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.re2j/re2j@1.8?type=jar",
      "group": "com.google.re2j",
      "name": "re2j",
      "version": "1.8",
      "description": "Linear time regular expressions for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4240e655caa938c61ddbec8b92bfb061"
        },
        {
          "alg": "SHA-1",
          "content": "12c25e923e9e4fb1575a7640a2698745c6f19a94"
        },
        {
          "alg": "SHA-256",
          "content": "7b52c72156dd7f98b3237a5b35c1d34fba381b21048c89208913ad80a45dfbd7"
        },
        {
          "alg": "SHA-512",
          "content": "f556b098dc29ed8fbfa7ecd343b457c49c4deda80dc495ed164297a415328c20d7c89b17cb240f6d2f92607828db52e4f13b66b11277e33e6ebc34a97832da86"
        },
        {
          "alg": "SHA-384",
          "content": "beef5588c374be01cb9cb1c7854e2741827444ce6908c73e4494fb6c7b14fda4a8424f257c1cf900957dd7928e7247d4"
        },
        {
          "alg": "SHA3-384",
          "content": "580230a2224e63cbbe5dd3742935e8ff51333b9e38510203b7ab22070b903dbbc8d720a820db3a01b65cb06983632f7d"
        },
        {
          "alg": "SHA3-256",
          "content": "1346abb0ccffe538d735667ba664b4ee2eaec5c30f2052115d34b16fb0fb350b"
        },
        {
          "alg": "SHA3-512",
          "content": "68b26bddbacc2d72fde5db285549bdefc62206adbf285b58cd5b49f7a20ce1e2545a031c021b5d4402ff068170f4ce1fb90b618b5ed1e1f3b7a1b694f5ddf5ec"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "Go License",
            "url": "https://golang.org/LICENSE"
          }
        }
      ],
      "purl": "pkg:maven/com.google.re2j/re2j@1.8?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/google/re2j",
          "type": "website"
        },
        {
          "url": "https://github.com/google/re2j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/dev.cel/common@0.13.1?type=jar",
      "group": "dev.cel",
      "name": "common",
      "version": "0.13.1",
      "description": "Common dependencies for Common Expression Language for Java.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a3da25924a368941781c631ec1deccc4"
        },
        {
          "alg": "SHA-1",
          "content": "d5871b3fd00b755246bb1d4e1b0ce36109d2cd19"
        },
        {
          "alg": "SHA-256",
          "content": "302a5a074b16d7165bf3a7842beb985fafc563c69ce451791b008b1554ed695b"
        },
        {
          "alg": "SHA-512",
          "content": "c7d1c1d53495336ac4319fb09737650e9756527eebf5f3bd83f296c7a370c770847471bfa90d2fa0fb2c7cda48b13116ef0a7454998ba011f99eb20257d82cd9"
        },
        {
          "alg": "SHA-384",
          "content": "6d90424c91e38770ed93f4fded982fe98611350ded22d124fb4b2cc39a05c3ff5b9b61754bd5f48f96339cf3dd473704"
        },
        {
          "alg": "SHA3-384",
          "content": "9938f670685afb3f6af2d4659aeac0491718fb0ae7f4920c0f44b9273c5a4e7da62ff112c6e6072624a2256644601792"
        },
        {
          "alg": "SHA3-256",
          "content": "780b700fab7d15f4e1ccd0c9b31b928af9107fe2215cd435753c4f5bad2e932f"
        },
        {
          "alg": "SHA3-512",
          "content": "b5c85a06019b15b7b8f72807ab19d5cbd39213bc545b00b4873c564e0da430c9374017b5d648be40538ccdc3489a51fa43b009ce7289c7a52a6f512f3e264d46"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/dev.cel/common@0.13.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/cel-java",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/google/cel-java/tree/main",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/dev.cel/compiler@0.13.1?type=jar",
      "group": "dev.cel",
      "name": "compiler",
      "version": "0.13.1",
      "description": "Common Expression Language Compiler for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b074b4f9cd6fef204377b7722af53994"
        },
        {
          "alg": "SHA-1",
          "content": "3534df53b6add29f9415a0496adb4f4ea0ed709c"
        },
        {
          "alg": "SHA-256",
          "content": "49e97f882e4f9bd44457dad4f797bb4dac2bc8b6c61c722d21447d637113eb19"
        },
        {
          "alg": "SHA-512",
          "content": "ea7eacb6c11f9156638e84fccf4902d4d158fb24091fca237607a577609a4cfb20dd532ef346fdb03f36fe5c308467672c266c35f6d65a6b01604d063c86151f"
        },
        {
          "alg": "SHA-384",
          "content": "b4f6081f54e35bf3a0d18111acf2493a58cf32172d4094d12d628ef69a2176aaaab85afd23a275bfdd36c2e412af17ee"
        },
        {
          "alg": "SHA3-384",
          "content": "0c59e12781d30e30a8194be89f066f64542b64017325eebb5f511d5e67339e2a87d59a537b998be53b37fe27168562e1"
        },
        {
          "alg": "SHA3-256",
          "content": "90467e2ebc54e15d28334c1844fc4efbfae33accaf4b7f4e5311155645f2d861"
        },
        {
          "alg": "SHA3-512",
          "content": "a2f6f87c5bb1ebefd2d54077b917301d429dcfccee34a7558ba4c5f40f60c952a48686e394dcd2d2638bdb48bf6d8666c0fe965910a9108985078eb9294fd62c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/dev.cel/compiler@0.13.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/cel-java",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/google/cel-java/tree/main",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/dev.cel/protobuf@0.13.1?type=jar",
      "group": "dev.cel",
      "name": "protobuf",
      "version": "0.13.1",
      "description": "Common Expression Language Adapter for converting canonical cel.expr protobuf definitions",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ec7a1682a109ef7874fed038ec9d7aa4"
        },
        {
          "alg": "SHA-1",
          "content": "02b2080dba5dcf5016d1eecbe76723f80ca64ffc"
        },
        {
          "alg": "SHA-256",
          "content": "d343b22e4d1507c636fca5d61c8272f2394a3fd0c1e1729568a8f575a9002143"
        },
        {
          "alg": "SHA-512",
          "content": "9e5d876a7abfe0d7d1fbbc03cd2b3a79fc87469b75de37c4b23b792f505e196c6c5afbec05353d6cc5be7548ce54b91ecb809ce5d99df7ba7e9162507c1f772b"
        },
        {
          "alg": "SHA-384",
          "content": "5d698cda243836a4764ec87e4813fc2788e34b4fd2efd23ea9bcd128998578333a43602620f57ea67a3e1f026cef1664"
        },
        {
          "alg": "SHA3-384",
          "content": "30f7375ab08fa2fe5bbc8b823fe2e1fc0b6adc7f93edcd71649a56aba3052b3a6edd5f34d7dcdbdd14234f4c4b27f47a"
        },
        {
          "alg": "SHA3-256",
          "content": "898a10881463dafebac86e9537a4c81efb6b5465bafcb9fe7c1f4289f5ebee58"
        },
        {
          "alg": "SHA3-512",
          "content": "fcf5bc79d2e1e5d6ca908365fb5ac539237928a04e62bf6537f494302c86e2bb0f968c488efe8f178049f2bf2e9dd88c09e5aa7b65edb778ca61fb2bce8bb6e2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/dev.cel/protobuf@0.13.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/cel-java",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/google/cel-java/tree/main",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/dev.cel/runtime@0.13.1?type=jar",
      "group": "dev.cel",
      "name": "runtime",
      "version": "0.13.1",
      "description": "Common Expression Language Runtime for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "37b93dec9a151dba76e63f6736ca085c"
        },
        {
          "alg": "SHA-1",
          "content": "c5aaa1b0e33f04693a942ab4560794ed2a3ccedd"
        },
        {
          "alg": "SHA-256",
          "content": "1d09ae1d0cb0126934c08d6856b3a2c38adf15f2abd58798e8b9c76a8fc24e5f"
        },
        {
          "alg": "SHA-512",
          "content": "f3b985b99017953250583f6a914ed688ab7b4d83baa77483fe61049cf210c2245a2ac799c528989c3d56ad8d3e452d3f58be56cb7aafa60c07c7cb4d8b6e365a"
        },
        {
          "alg": "SHA-384",
          "content": "552101b0a80a223b11699faea3f8fe6ec42e338b73a0532dd1e5068c2b6e9a64cb5c82254cd412f92562be7f0b2c142a"
        },
        {
          "alg": "SHA3-384",
          "content": "520d73c080b9b52324d6dd8657da9de37ef3357dff21160d248b2d21d032204be11eb30ec99c2456ce210eaa4c3655f5"
        },
        {
          "alg": "SHA3-256",
          "content": "2aa77b45825bfe41e6efda1586bfb7a727d58ef76cba0335ef63e618501cc9ed"
        },
        {
          "alg": "SHA3-512",
          "content": "a81ca97d8360e2a71591e00ee62439370e47a362cd90cff7afab99fee0339d7b371f9717f9d79507e8faf4ce2776232a99154148b53a4ebfeca9971367c387ea"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/dev.cel/runtime@0.13.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/cel-java",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/google/cel-java/tree/main",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/dev.cel/v1alpha1@0.13.1?type=jar",
      "group": "dev.cel",
      "name": "v1alpha1",
      "version": "0.13.1",
      "description": "Common Expression Language Utility for supporting v1alpha1 protobuf definitions",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8e09c5e79de99fafa3893d9bc1f12d13"
        },
        {
          "alg": "SHA-1",
          "content": "4e7c13ddf4e23c44b67e1c8041044be927be47a5"
        },
        {
          "alg": "SHA-256",
          "content": "429a705bc974d06c63fc14f4d7be7d23e5e7825d6fe76ab657bad2a2d9791c77"
        },
        {
          "alg": "SHA-512",
          "content": "efaa8638137267a26e11668936a53b58716f71437cf1a1d057d6432a53e5c273c4c17fc656d2b47aa0e4c6ba56ef9896aa8d54b156688c6b25ec4fe3dafda8ad"
        },
        {
          "alg": "SHA-384",
          "content": "b4e1fc34a8ac52f90779970b6b1d40877978396c29de475aeb16853ffcc65526949bf9a3c5593284a82335ad60b25e75"
        },
        {
          "alg": "SHA3-384",
          "content": "b86559a1571b69592384cdde36a0ee23a1599270002d6488d3401e05e4f569b616c44a59bfa69b55d39e28aca8aaf406"
        },
        {
          "alg": "SHA3-256",
          "content": "6891df0f460647f9d1f20e2cf708602d76027b5d089cc777d437adc77b1bfda6"
        },
        {
          "alg": "SHA3-512",
          "content": "5e148f912d1a9e89b0bdd836b0ada4f5145792d39632c19589fe172e9251a09d3f1115a8a20fdea837087b6eb6dc77c5ae6c7378cf75c6ae5d927ca43b5a1b85"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/dev.cel/v1alpha1@0.13.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/cel-java",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/google/cel-java/tree/main",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.antlr/antlr4-runtime@4.13.2?type=jar",
      "publisher": "ANTLR",
      "group": "org.antlr",
      "name": "antlr4-runtime",
      "version": "4.13.2",
      "description": "The ANTLR 4 Runtime",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "eecf1908f0cfff10f8bb82878b5ca401"
        },
        {
          "alg": "SHA-1",
          "content": "fc3db6d844df652a3d5db31c87fa12757f13691d"
        },
        {
          "alg": "SHA-256",
          "content": "dd3e8a13a2d669bf84fb8d834de35ce4875f27157698d206241ec8488aadcaf7"
        },
        {
          "alg": "SHA-512",
          "content": "1c3e47b6b5dc40ca13927a7ae2ed187f470b8f406cea325e73c7a18af8e07b9ada0484312dd611f225f030b5585924932c702fd9326c143a626e271682b2b95e"
        },
        {
          "alg": "SHA-384",
          "content": "f49c2395e16fe71fa35622bcca225c0910609ef09626207ce4522c73c760fd232489489ea88d54c88fc21b05a03031e0"
        },
        {
          "alg": "SHA3-384",
          "content": "322345326586e3f8954e80efa80b510228a7eb06f6d7283177f04809c15aad1722c700897c8c8f405955946b63808bc0"
        },
        {
          "alg": "SHA3-256",
          "content": "2d39db66ce6dc530c7796f75d646f4d8316586e2acd0756524c25b238eb71618"
        },
        {
          "alg": "SHA3-512",
          "content": "a4cdaec49dff4a6963a0db56712a837db7300de7145335b915ffc2234b0d53d6f9fd4b1d6e82c4350e22fee9390ca643cfbf7f51ff47a11bc44561b6686be32b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.antlr/antlr4-runtime@4.13.2?type=jar",
      "externalReferences": [
        {
          "url": "https://www.antlr.org/antlr4-runtime/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/antlr/antlr4/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://groups.google.com/forum/?fromgroups#!forum/antlr-discussion",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/antlr/antlr4/tree/master/antlr4-runtime",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.threeten/threeten-extra@1.8.0?type=jar",
      "publisher": "ThreeTen.org",
      "group": "org.threeten",
      "name": "threeten-extra",
      "version": "1.8.0",
      "description": "Additional functionality that enhances JSR-310 dates and times in Java SE 8 and later",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4af91264b2e3d26f4c41f055f7ce02f8"
        },
        {
          "alg": "SHA-1",
          "content": "d3b1ac7e361b642132e529f562622aac7dfea752"
        },
        {
          "alg": "SHA-256",
          "content": "51e4d21edc4e9447f7760c050e0baee75d7d973f387ba605a17abdc4d24fd6d8"
        },
        {
          "alg": "SHA-512",
          "content": "b60d18135450dbca9660097f6f726676940c1925343e0ce9547e57e68beb321ecd5df73710332113e1ea3aba71fb5ceb0483cc8f41806a3c6ef075d3c690aae6"
        },
        {
          "alg": "SHA-384",
          "content": "b6e8c6861fe876ac0fc34f97b4966c8816d94ab566cfe8458709b48825cf600fcec4d845de35a3d518d4c28e160b665b"
        },
        {
          "alg": "SHA3-384",
          "content": "1eaf035067146399ff4698dfe6f418e2f812d203b7b8b9b2bb7afaa34b4d380bbc06d8836456e732111ea2c35820d09a"
        },
        {
          "alg": "SHA3-256",
          "content": "981ad37d8273108f1bd1de37f7bca594b8ef49ab33dfbbc2e84c647aba733ead"
        },
        {
          "alg": "SHA3-512",
          "content": "7b528b1f6d625f647f63fc7117c006dce4c08c5f447151c34b1acfa9bd8062c2c31f2e579a38024dad6f86d9f3e7f0cc4a3ea0e9c011926b49413515045a291d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.threeten/threeten-extra@1.8.0?type=jar",
      "externalReferences": [
        {
          "url": "https://www.threeten.org/threeten-extra",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/content/repositories/threeten-releases",
          "type": "distribution"
        },
        {
          "url": "https://github.com/ThreeTen/threeten-extra/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/ThreeTen/threeten-extra",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.yaml/snakeyaml@2.5?type=jar",
      "group": "org.yaml",
      "name": "snakeyaml",
      "version": "2.5",
      "description": "YAML 1.1 parser and emitter for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8d3b7581db5c7620db55183f33a4f2ad"
        },
        {
          "alg": "SHA-1",
          "content": "2d53ddec134280cb384c1e35d094e5f71c1f2316"
        },
        {
          "alg": "SHA-256",
          "content": "e6682acf1ace77508ef13649cbf4f8d09d2cf5457bdb61d25ffb6ac0233d78dd"
        },
        {
          "alg": "SHA-512",
          "content": "a69bea3ae0ed31b12d9fa23bf1cd3fb71bae88e231d9657f0291e3000ae17a1df50709e072134f9155158f488eba67a3f8daf879462499f07b07d9239e78933e"
        },
        {
          "alg": "SHA-384",
          "content": "2fa12e4330d6da0a693a13588c8cdeff562c1bd1dc32e043d402ca1fc72d87a30dcc7bb31f9b582df3fe018eb6c6a3bb"
        },
        {
          "alg": "SHA3-384",
          "content": "8c5037c75bb2f464829ba38126a4773c88951705effc2b14289f3bbdef05bb598f10e4d9603dcd1b58efd7cb68d996a2"
        },
        {
          "alg": "SHA3-256",
          "content": "3aa9329b0eab5185331e526a011c74b45b4c4a506214e6c3ec2d2038c51cc261"
        },
        {
          "alg": "SHA3-512",
          "content": "f80ff702aee20a5150a11818985d659fffb1d5238e331aca2048524649e0270e5bca0186ce7caf04ecf85fd95c95c6b9d8ed1f362ed399fef624eb94b70dc6de"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.yaml/snakeyaml@2.5?type=jar",
      "externalReferences": [
        {
          "url": "https://bitbucket.org/snakeyaml/snakeyaml",
          "type": "website"
        },
        {
          "url": "https://bitbucket.org/snakeyaml/snakeyaml/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://bitbucket.org/snakeyaml/snakeyaml/src",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/dev.cel/extensions@0.4.1?type=jar",
      "group": "dev.cel",
      "name": "extensions",
      "version": "0.4.1",
      "description": "Common Expression Language Extensions for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a70eab4afa038505e57783b72666eb1c"
        },
        {
          "alg": "SHA-1",
          "content": "433df034d55c456425a3c96165d650bc583fe2e0"
        },
        {
          "alg": "SHA-256",
          "content": "291835f64786e5b973ae289b77ddc5bfacf4c85d5f67861cab65e0c59bb6742c"
        },
        {
          "alg": "SHA-512",
          "content": "1fd37f3929287fd365e58713d1512244f12079874b4498e033c3df542d89b5881a379554aa55d5270c9abf42509d7fdf4a3c9dda4b6bd8756eccc96f1360c666"
        },
        {
          "alg": "SHA-384",
          "content": "f8a4ca7ce0726ebc7cef49f394090da5de40c4b330f97a6389606faf64885d12247dff049bff4e4b18ebb6b052b85ea6"
        },
        {
          "alg": "SHA3-384",
          "content": "9431fa635ec7721498c93401cad4d5a70e4b872396a60e407a0041eb2dd32ce5d94de269843cf71bd6257b860f28dbcc"
        },
        {
          "alg": "SHA3-256",
          "content": "579c399929539362444428bf48b7935de926d454bad990de27dee3844df40565"
        },
        {
          "alg": "SHA3-512",
          "content": "10bfaf33daa8618a7771845a167f294dcf7c2caa90081b21c11da08a6b2cb4f443e9ea06e675cb93a7a635eb31db05a2e31dcde9f92c8ff013c191e6cec0e879"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/dev.cel/extensions@0.4.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/cel-java",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/google/cel-java/tree/main",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.metaeffekt.core/ae-security@0.156.5?type=jar",
      "publisher": "metaeffekt GmbH",
      "group": "org.metaeffekt.core",
      "name": "ae-security",
      "version": "0.156.5",
      "description": "Core project with fundamental runtime and build support.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9214c8de2f17f691cb63eeb12e34a20f"
        },
        {
          "alg": "SHA-1",
          "content": "adc9458327d9fdc81893e2f6a1616ef7f187dfce"
        },
        {
          "alg": "SHA-256",
          "content": "1fadaf1522936540115b6ca69c3d123df63793d568396a1c406ebb0314fe478c"
        },
        {
          "alg": "SHA-512",
          "content": "63d32dfebd8f6a59cc87ae16c3faa32121eb50abab81a590414507cc21d0c05c0c1b0a90de7c0e1d83663c9fbcae7afb9cbe46f59359736f1b06591ab67d11b2"
        },
        {
          "alg": "SHA-384",
          "content": "4b315b06b3aa089f88b74453d07d152dd7e8fee4bf40227fa53771fd7e6bc04bfefcd0b4b2b247b80b6dc7c7e84ffa6c"
        },
        {
          "alg": "SHA3-384",
          "content": "005e352a37707707b2df10d4a04c3d086f5afd69235b8ce35a28d2fcd83bc3dd514745990f36edea162b576f0ad564ec"
        },
        {
          "alg": "SHA3-256",
          "content": "2a0fdc03c45d00de34ca284886e10dd2ee471c01b96b0b944419e7675e23e295"
        },
        {
          "alg": "SHA3-512",
          "content": "2e03f09aa65cc32a78c87d0e4b4bc92533ec9874536f3156c07338a54874dd01cfc7a987b91fccab607435a45383332a7a98d372ecd634bbb33b251e612d1abd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.metaeffekt.core/ae-security@0.156.5?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/org-metaeffekt/metaeffekt-core/ae-core-poms/ae-core-plugin-management-pom/ae-libraries/ae-security",
          "type": "website"
        },
        {
          "url": "https://github.com/org-metaeffekt/metaeffekt-core.git/ae-core-poms/ae-core-plugin-management-pom/ae-libraries/ae-security",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.18?type=jar",
      "publisher": "QOS.ch",
      "group": "org.slf4j",
      "name": "jcl-over-slf4j",
      "version": "2.0.18",
      "description": "JCL 1.2 implemented over SLF4J",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "889b3b36f33843d83ba84f7355c2150d"
        },
        {
          "alg": "SHA-1",
          "content": "fb36c10c70e27bb427bb3cec86ac30bb83f667c7"
        },
        {
          "alg": "SHA-256",
          "content": "ec5c36d57d2dbe100f84878f944575cb7871da32c7a115b8d7e0721277045d67"
        },
        {
          "alg": "SHA-512",
          "content": "6a2d26ab6873b25bab037f5620ce5a4a1c35cf79e89a09ff900d873877231bf117e35e9dfd05912c36be0b4a89a739c84ba20231fd0f74c1fcf14126c8846248"
        },
        {
          "alg": "SHA-384",
          "content": "6c8413069e3d41c85ff74f94e0ea01553b2edaf8b589b390c6b3d935d4a6e256720ded91d98a5aeadb67920bc8c10f35"
        },
        {
          "alg": "SHA3-384",
          "content": "6fc21de57edba60d2f58e7907e051f70efc9d20729190d2dd0453a6bde313d764a96e1e392fe50042e09c2a1221067fb"
        },
        {
          "alg": "SHA3-256",
          "content": "4c3fbe65804bd4e70d9698c553819bd9866eec21b8ba4a4d01b89f4e8895ff24"
        },
        {
          "alg": "SHA3-512",
          "content": "d4fa671a7f0365d0dbe49b42fd5f354a6af2d22dbbcc7c1f5afbdba084845ea0aeabc112b89379988c7dcf57ab36350a39e436ddc45895ddf29f48082485c5b3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.18?type=jar",
      "externalReferences": [
        {
          "url": "http://www.slf4j.org",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/qos-ch/slf4j/slf4j-parent/jcl-over-slf4j",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/commons-io/commons-io@2.22.0?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "commons-io",
      "name": "commons-io",
      "version": "2.22.0",
      "description": "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f91d54bd47c42456b4a5ae62eed85565"
        },
        {
          "alg": "SHA-1",
          "content": "5b1e18bc0ad651ed878029d83f88d9c8189fd51e"
        },
        {
          "alg": "SHA-256",
          "content": "2b9a7b1f726fb86216dbd2c8321eabe0221dbd5b1be81c18e1cb53811b104758"
        },
        {
          "alg": "SHA-512",
          "content": "fca0b4ae70e531bee74413e0b865981aa8b60a9390f789b63997203dae67be65362e95a0c35b9d4b072fbb0810114783415dd22b92fb42e5594b10992f632bc5"
        },
        {
          "alg": "SHA-384",
          "content": "e1fbf3729c4d2d77b036d90234d9e2ed3fe0c2f5379d333a695c1cb0037f63d288c8b62de05022da0f612da65835fee0"
        },
        {
          "alg": "SHA3-384",
          "content": "02acc6e7f614d8684e7104a52123573152a2e1b651bc6a5be12d4b58861c757d6c56f51105bb97c92309d126059232ea"
        },
        {
          "alg": "SHA3-256",
          "content": "134157813629f4d9b97044602e1fa2f61c14c3be1f641490b3e06ac941ff3315"
        },
        {
          "alg": "SHA3-512",
          "content": "47832f3b7abe375f3b0ed169996d9776b2a0007b073ab3f06438dce67be9bda45e8aac84737cc639ada4424b13c7614d8c9fcb23779868f7421414777cc0946a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/commons-io/commons-io@2.22.0?type=jar",
      "externalReferences": [
        {
          "url": "https://commons.apache.org/proper/commons-io/",
          "type": "website"
        },
        {
          "url": "https://github.com/apache/commons-io/actions",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/IO",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/commons-user/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitbox.apache.org/repos/asf?p=commons-io.git/commons-io",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.json/json@20260522?type=jar",
      "group": "org.json",
      "name": "json",
      "version": "20260522",
      "description": "JSON is a light-weight, language independent, data interchange format. See http://www.JSON.org/ The files in this package implement JSON encoders/decoders in Java. It also includes the capability to convert between JSON and XML, HTTP headers, Cookies, and CDL. This is a reference implementation. There are a large number of JSON packages in Java. Perhaps someday the Java community will standardize on one. Until then, choose carefully.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2371c5b3befff11bd5af0c7927750831"
        },
        {
          "alg": "SHA-1",
          "content": "04b6403288ab9457f3b841884a4bcf73acc544f4"
        },
        {
          "alg": "SHA-256",
          "content": "d671b45e5954211f3566722aa614fbd3b5d46e95f4f9da4dc58c173280bb1799"
        },
        {
          "alg": "SHA-512",
          "content": "c4c89af8a9bb9567a3766fa1dbc035ce84691276f3d26c20b6feb4bbba2132be85d49a3b6ba55d04100edacdb7efbbae887037fb55f841c600c3531e26790e0b"
        },
        {
          "alg": "SHA-384",
          "content": "92bfd8d3d60221c25067f9cd5609c78e31b1f5728512d770a36168c9a92b5c16af98671cc9f83436fcc2569ee27e7642"
        },
        {
          "alg": "SHA3-384",
          "content": "ae2b3bc74a601d91ad9a3c094377d1ffaa681a96a952456ba3bfbc09aebe7dd5ba714164cf464611ea4160ba2499331b"
        },
        {
          "alg": "SHA3-256",
          "content": "ab6a299000b7981fc85dba3ce73b92dbdfa4e4afd64a831a5c912e8529b45466"
        },
        {
          "alg": "SHA3-512",
          "content": "22e2aaf8bb6c39f8e9d02845017e01c2695bb91cb5ef442606fae87727d22d107101cb527d4aa0275548d4c184176dc74df989cb50f79edc83bdfaffcf55eac0"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "Public Domain",
            "url": "https://github.com/stleary/JSON-java/blob/master/LICENSE"
          }
        }
      ],
      "purl": "pkg:maven/org.json/json@20260522?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/douglascrockford/JSON-java",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/douglascrockford/JSON-java.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.kagkarlsson/db-scheduler@16.12.0?type=jar",
      "publisher": "Gustav Karlsson",
      "group": "com.github.kagkarlsson",
      "name": "db-scheduler",
      "version": "16.12.0",
      "description": "Simple persistent scheduler for scheduled tasks, recurring or ad-hoc.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6d5a136ad6650017b4b31072c8e043af"
        },
        {
          "alg": "SHA-1",
          "content": "129913568e06c3fd3a3480c896d698653d2fdf74"
        },
        {
          "alg": "SHA-256",
          "content": "2238bdad70014c41a762dd215d500a57a0bf22138df7dace1faf5c82eaeed545"
        },
        {
          "alg": "SHA-512",
          "content": "0ee889aecbf89b2fafbc953b53e91770020cfe96ec95e28891ef38e453a1a07e96116d32a5ac18fb30beba40ad618276cfc562a300876e15932bb4dd50cbb99c"
        },
        {
          "alg": "SHA-384",
          "content": "2192fa79ffa02a5a673539f646d7507220a0980e7a5e26148bb747e8e44482f5b3ed812bc769a3dbd76c790da86446ce"
        },
        {
          "alg": "SHA3-384",
          "content": "1b6a30851aa7d815a0e60a26e9896def19d0e04b8318570152a8934cd7e3429b1e2e057b845cfa31440ed1c62e22cd5f"
        },
        {
          "alg": "SHA3-256",
          "content": "560ee50d2a0c7693b872b117107e5cc164aba3d031ef7e44892d07244f598c41"
        },
        {
          "alg": "SHA3-512",
          "content": "c9fb738c3d59c498226deedec73c95e57f7f43b0ceefad1ea09081839f30ac543c31652fbfa30f39c7acea3b980619198f659d5392dbd339c31e1cec5badc894"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.kagkarlsson/db-scheduler@16.12.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/kagkarlsson/db-scheduler",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/kagkarlsson/db-scheduler/db-scheduler/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/jdbi-support@5.0.4?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "jdbi-support",
      "version": "5.0.4",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a77f04b1e11195d9ae1d8773235bcc1b"
        },
        {
          "alg": "SHA-1",
          "content": "85e900c620634dc5269671f5a354dfaa225b3d4e"
        },
        {
          "alg": "SHA-256",
          "content": "032c19ab4d264966e5089c564376376cae6e5e0fc711088c89b1d9efb7d20e40"
        },
        {
          "alg": "SHA-512",
          "content": "aaf40ddf570dcd2da1d1c858d16cbe0f5f2444139a60cf1be29ad977accf73452b6fa072e40996083c62e2597a9125e0ef090cb8e129f2edf0dc7beea83ac664"
        },
        {
          "alg": "SHA-384",
          "content": "04d9f88c73d9d51fb10f161c5f35fe766361890805ac0b3a7d5da80b27c66c5e4fd360c7075b775e91cdc9eac407fde7"
        },
        {
          "alg": "SHA3-384",
          "content": "c5a80ee8450429ec1117eb3224d103bdade283722d96cb8590fcfa1d0314fa6fd72b118596943694be26d431a93e1bb0"
        },
        {
          "alg": "SHA3-256",
          "content": "86aa13ccb207672aa8c52759da072892ff9cf96c4eb942355ccec6abf3387ba4"
        },
        {
          "alg": "SHA3-512",
          "content": "0536e108c634832d770cd913df7dfbdf2b1451bc82231bb44ff6419e085305bf48a3de624d06d4e77e3fefbf3844b50ab37f8537f0546442cc9d164d0a0734d5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/jdbi-support@5.0.4?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/support/jdbi-support/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/support/jdbi-support",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jdbi/jdbi3-core@3.54.0?type=jar",
      "group": "org.jdbi",
      "name": "jdbi3-core",
      "version": "3.54.0",
      "description": "The Jdbi core API. Jdbi 3 is designed to provide convenient tabular data access in Java(tm) and other JVM based languages. It uses the Java collections framework for query results, provides a convenient means of externalizing SQL statements, and named parameter support for any database that supports JDBC.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "04274d6a8971aed4ebd9a9473a236cfa"
        },
        {
          "alg": "SHA-1",
          "content": "462f0a1420826b9a2e186db89b1c91df6e5db1eb"
        },
        {
          "alg": "SHA-256",
          "content": "2fd7938a701d60fa02e394250328be2d9415728cb636e24eeba4da3e0afcef9a"
        },
        {
          "alg": "SHA-512",
          "content": "d454962653c996434077079a7db792d5745058b3b3d8611c96936f87eb907786e272d42097b3d3e97a3db102a3eb677bd2a86776e894c05ac67a3cb2d4994faf"
        },
        {
          "alg": "SHA-384",
          "content": "d9682a9ebc506ff1536bbb74f028de48a6c2151118436d4c772987037856c674b8d32ee567dc180ec2158e720f2ba591"
        },
        {
          "alg": "SHA3-384",
          "content": "f4affc49ff5aec04ae6c666a8206d953a22c906a8cf1e7d26c0f035adcac0ea4d6428777cc6e36cb1db1fbeeb96f6fcc"
        },
        {
          "alg": "SHA3-256",
          "content": "593b78509bfb985950788e185ed6cd0d7e74e86e2ab1b1f19f08d709dc8e8829"
        },
        {
          "alg": "SHA3-512",
          "content": "ac004a1c5e396569f32c7142d14b6f11555394b45edea0bb50ba8d20faae935b3e86656bbfcef1454a97d5764b4db9d76b1a5943b13a385d2ce31f58a78a6f24"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jdbi/jdbi3-core@3.54.0?type=jar",
      "externalReferences": [
        {
          "url": "https://jdbi.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/jdbi/jdbi/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.leangen.geantyref/geantyref@2.0.1?type=jar",
      "group": "io.leangen.geantyref",
      "name": "geantyref",
      "version": "2.0.1",
      "description": "Generic type reflection library with support for AnnotatedType",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "08dce47c87ec3228628a42cb3eb8c181"
        },
        {
          "alg": "SHA-1",
          "content": "81253383ac75126142f97781d22d19de2532bf76"
        },
        {
          "alg": "SHA-256",
          "content": "386b535c079be7d65ddbe0ad9c00955155b7862225aa92b4c6553ab2b1ea95f9"
        },
        {
          "alg": "SHA-512",
          "content": "c6655ef00ede5d9bb17d4e7556200acaeb5babd67295e9f72e26e8ea48fd50978cc147156e35feada204163163292ad3a0daf0d6b1366c9e933f13a1b4a9eb2f"
        },
        {
          "alg": "SHA-384",
          "content": "3b97009b3b70156fcd3f39a8365e562d481fed54d779e6f60a82bdb0736ee7701edd0c69f58409154dc1823895e7da05"
        },
        {
          "alg": "SHA3-384",
          "content": "36cfd6a2d9d4f0df12e9c688b1981f494f4b77f6f05dc57af69f03ab2d7f9d5628f9b90ad324dbadc2ffc210a74d25aa"
        },
        {
          "alg": "SHA3-256",
          "content": "414a37fe9755beb446609dbc43f2eb702a0789ef5d046baff144596774e189ac"
        },
        {
          "alg": "SHA3-512",
          "content": "6a2ecd82a48dc5272720726298d21a8548c46df8b52f9dea1c97c38e77372fb620ca5c5fbed1b9ea7234f7328c47ba9642366d63f0d3f0340c33faf1f5f7de76"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.leangen.geantyref/geantyref@2.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/leangen/geantyref",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/leangen/geantyref/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/leangen/geantyref",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jdbi/jdbi3-jackson2@3.54.0?type=jar",
      "group": "org.jdbi",
      "name": "jdbi3-jackson2",
      "version": "3.54.0",
      "description": "Use Jackson 2.x for JSON column serialization/deserialization.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c503f6febc2d8625cd3689ec8eea4b97"
        },
        {
          "alg": "SHA-1",
          "content": "d04f5c116a8c0a25310b24c7807e94e76d35bc94"
        },
        {
          "alg": "SHA-256",
          "content": "a3c94641384daeed1fb9f32a0f1b0aaf14748ab7aa44141f21f66960e5d74102"
        },
        {
          "alg": "SHA-512",
          "content": "e9d178a4058a3b9f17958bfce723aaf5b82c91b9097448e4811d2acbd6c337b1f858d7b71e48c1d61197c0bac63f3a8aa8fc91abbedf16ef8f2eeeea1685a672"
        },
        {
          "alg": "SHA-384",
          "content": "b8030cc5a360b2e316a55609492abc6681f0aa7dd8a20f55d531652ace3a55cd88c0a70c60356d2ef32bcc60745ce548"
        },
        {
          "alg": "SHA3-384",
          "content": "35566d97b43ac9454230f5b6519faa893e62619c128171b24bf791779e8b17a5b12d81b489cb08e8295c2d82ef27d3f9"
        },
        {
          "alg": "SHA3-256",
          "content": "d97f371d97f1484a9d49c4e27bd658251503d540af356a3126d7c674eaa93ae5"
        },
        {
          "alg": "SHA3-512",
          "content": "a825d555cab75e4fd377776485cfd84096208fa2724243091d97c9b25c7d4a88b81e51ef2fba1c5104c93f3ec2f35a666870ceeeeec27032259f8a985a1cd5b1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jdbi/jdbi3-jackson2@3.54.0?type=jar",
      "externalReferences": [
        {
          "url": "https://jdbi.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/jdbi/jdbi/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jdbi/jdbi3-json@3.54.0?type=jar",
      "group": "org.jdbi",
      "name": "jdbi3-json",
      "version": "3.54.0",
      "description": "Support for JSON column types. In addition to this module, a serialization module (jackson2, gson2, moshi) is required.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2a6deaff113c75281455ed306237c01f"
        },
        {
          "alg": "SHA-1",
          "content": "3b42c543f49ecc79ce7adf176d1199c2bc183423"
        },
        {
          "alg": "SHA-256",
          "content": "9cfbeba66c54fabb7e1c2d54ec2e2603f0fc3915fa948c19534608dabaa0291f"
        },
        {
          "alg": "SHA-512",
          "content": "6f368e94a33c51a5a6d3f74cb88ab8347c26d259f3af1c2f3cea65ab84f61b5f2ea08e7303e31ecc4ed79a6107f30d3184b2fdb6e604cec72e92ac6f99a8450e"
        },
        {
          "alg": "SHA-384",
          "content": "7d4e6a8ca71f9b79caf88e5262d4e8f613539383402e8241adcfc94e89e915e9d54a0c1b2d2698adb78b3e759873aa99"
        },
        {
          "alg": "SHA3-384",
          "content": "4e1194691cd9a79010a1630362a255eaae28e10912a8f3066c5403031ffe1cd1fc2def2cfcecaf1c02b369128dd015ef"
        },
        {
          "alg": "SHA3-256",
          "content": "34b25beae91ce08208d8a2ada6c3cc8b2f387855e52886dfaaa624ac7475f30a"
        },
        {
          "alg": "SHA3-512",
          "content": "bd0b7894f7ce3e5c1884110ffec44acc28a67467d21ab0325a39c8386f0f1c69d03ccd66e36ff286af9321ccc1ebdabceffe492bfb2768159a0e9f05e5b0cbc9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jdbi/jdbi3-json@3.54.0?type=jar",
      "externalReferences": [
        {
          "url": "https://jdbi.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/jdbi/jdbi/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.1?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-core",
      "version": "2.22.1",
      "description": "Core Jackson processing abstractions (aka Streaming API), implementation for JSON",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "09e866bcd73613665ef49f5086704fb1"
        },
        {
          "alg": "SHA-1",
          "content": "da7ffb60088d7e8f37ecdd3b617520971cc7b9bf"
        },
        {
          "alg": "SHA-256",
          "content": "941ff029bcdb93e83d209ce516c1a7fb8bbac07d0a2fa122f5bf194b2cd7b4f4"
        },
        {
          "alg": "SHA-512",
          "content": "d4485af4465f561034df86686d672835b0272b6200efb0af55ea71e62d3faf09e9f90e42df4da64650795cf00519fc553f892bf6179330a3e74750110a785efb"
        },
        {
          "alg": "SHA-384",
          "content": "faaf92de6e93475fdbb7d56221fd35d8435ac4f87dddfd334ed05c4318b8b72220010effd08bf8dd156420771b294eb4"
        },
        {
          "alg": "SHA3-384",
          "content": "5c432f1a2f3369485c4ed7d3c3c4499342c23efd0d7a574b73421345df9762bd27643cc469b01632400691f3c09b5d8b"
        },
        {
          "alg": "SHA3-256",
          "content": "48fc6e17c36e14b8bae387b92248a43da12293b68a61dd2517c708dbb24ed010"
        },
        {
          "alg": "SHA3-512",
          "content": "f72ef2d2a1012be8b1c972323527a396bbaea0b543bd79fac6d380f8e4855c6d98190b067ccec92ece9ed8e1ece1e6046b1d93f9c85944fcb7133fe0b4dc60e4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-core",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-core/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jdbi/jdbi3-sqlobject@3.54.0?type=jar",
      "group": "org.jdbi",
      "name": "jdbi3-sqlobject",
      "version": "3.54.0",
      "description": "SqlObject is a declarative, annotation-driven API for database access. It complements the core API. Jdbi 3 is designed to provide convenient tabular data access in Java(tm) and other JVM based languages. It uses the Java collections framework for query results, provides a convenient means of externalizing SQL statements, and named parameter support for any database that supports JDBC.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b3d9afd1d38206a6522c978f34d06c54"
        },
        {
          "alg": "SHA-1",
          "content": "2f52595bd2d9792a3c07265d820adf4562ee0ad5"
        },
        {
          "alg": "SHA-256",
          "content": "ced2576e0106da2c50b25aaa3a7e239d385615adc92595a251b14966553fb4e8"
        },
        {
          "alg": "SHA-512",
          "content": "3089542e758cbce8d4a8ea427e8d5b33d41b03b54ccdb74a8bb2313e978f1495bb0402d43e85fb2f40017a80b213f222086805bf0183923f25529003039e7595"
        },
        {
          "alg": "SHA-384",
          "content": "c7a24f39df1768394b6d4d9b2196eb7325730abc0b721ffc5afbb65f89ce894d2121918ce2d5f2f4d54c85c30d792c78"
        },
        {
          "alg": "SHA3-384",
          "content": "600f7309e2b49435b05df01cec3155d585ab56f63eba4f34d5d4d69411dc17a5ce76c292ba8dc6a156f00b77dbcaba8c"
        },
        {
          "alg": "SHA3-256",
          "content": "5bd912157c817185cf49f90127f450c08c3aee672f979ab629dd450bde75c0d8"
        },
        {
          "alg": "SHA3-512",
          "content": "4f01454998782dba075756b568a625aa9ae2d17de2796e45bbf691f6a4e03a85a9ff8e8187b2c9fe0511df6d1d00da0d008408cc3bea67f86fcd0a9e398dac43"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jdbi/jdbi3-sqlobject@3.54.0?type=jar",
      "externalReferences": [
        {
          "url": "https://jdbi.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/jdbi/jdbi/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jdbi/jdbi3-postgres@3.54.0?type=jar",
      "group": "org.jdbi",
      "name": "jdbi3-postgres",
      "version": "3.54.0",
      "description": "Support for additional PostgreSQL features and data types.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6659f44d8a4e67e5698a2c24438d57fe"
        },
        {
          "alg": "SHA-1",
          "content": "3a2d00760d347513cca5483b797f5658de390409"
        },
        {
          "alg": "SHA-256",
          "content": "6b0716ad4f49a5132f239d4e9d77582548280a0f0dee88bc2b92351a4ea49308"
        },
        {
          "alg": "SHA-512",
          "content": "64e1093dbea5c49ad0db907c21b85a0180092c55b7bb6909289b8ea8a6165a3e8c914eb75b703991634c9e3c87da602e768358629904d1235e7f0ff003b41bb3"
        },
        {
          "alg": "SHA-384",
          "content": "9e45e2bdb1bd888c6fa8b4acc0ecb1e97d921e641fe4db6f02e8076831e757a684e286ba6f31b6751babcdef60384614"
        },
        {
          "alg": "SHA3-384",
          "content": "2a0c88258526e4a9a15c782738e36fec1e926e2445cd2d6ebb8b8d244dd832cbbd6aad7413cd3279f50bf177dc5148e5"
        },
        {
          "alg": "SHA3-256",
          "content": "2c798d13a0a080bb55f24099495adc1d6c67982e85acfbc22df55dad8fdaa679"
        },
        {
          "alg": "SHA3-512",
          "content": "d65e3bb8543d6d5220415c304a7373bdd07e58541c4655d4716dbb031dfd8ecdfd368858b40d9e6b0643d903ea169773acf8542e4329aeee6ebcee3ffed00706"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jdbi/jdbi3-postgres@3.54.0?type=jar",
      "externalReferences": [
        {
          "url": "https://jdbi.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/jdbi/jdbi/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jdbi/jdbi3-freemarker@3.54.0?type=jar",
      "group": "org.jdbi",
      "name": "jdbi3-freemarker",
      "version": "3.54.0",
      "description": "Use Apache Freemarker for query templating.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d366c02c1c949b6e60998606d124a825"
        },
        {
          "alg": "SHA-1",
          "content": "800cde027a758cf44354af003482741b41cacbf2"
        },
        {
          "alg": "SHA-256",
          "content": "fcce2be45cdbb8f0f8073a99764273af68170a5d56cfdd8292478196b92abdfa"
        },
        {
          "alg": "SHA-512",
          "content": "e1066a0f465ce0fbed3322ab03de7d3a3c40170684a0f87e861719d676a04a3e9720a326fa40be2634fdb3413135f49cf3f1f363c4c0b9975da753f7930e9f70"
        },
        {
          "alg": "SHA-384",
          "content": "9bf1b0f775a12d798471edb7bec21ad0868d83719fe4344a76a3d2022438fcd91405c6a4fe786f378c35797f4a83ef93"
        },
        {
          "alg": "SHA3-384",
          "content": "3bbf7cb2c6f7fdaab5bd5760d61d392a7f26d1a53178c5e93fcd83b3468a5403acb0c2be32572ee1a882a1a32453adea"
        },
        {
          "alg": "SHA3-256",
          "content": "ec74e7e646380c6e5d561dfa8057547a28c34f1b5fc47b7f120089bb7cc47cca"
        },
        {
          "alg": "SHA3-512",
          "content": "ff015b95fde8f7fb0c27010c9ed6c3e2b7a699125f93e400dac24935f689b0f713e558e44aac19926426c31bdf964d07d105cbeaf29ef9c7701285b055c7bb58"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jdbi/jdbi3-freemarker@3.54.0?type=jar",
      "externalReferences": [
        {
          "url": "https://jdbi.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/jdbi/jdbi/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.freemarker/freemarker@2.3.34?type=jar",
      "publisher": "Apache Software Foundation",
      "group": "org.freemarker",
      "name": "freemarker",
      "version": "2.3.34",
      "description": "FreeMarker is a \u0022template engine\u0022; a generic tool to generate text output based on templates.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1704fd3c579385ca5fd0ebcdf50df73c"
        },
        {
          "alg": "SHA-1",
          "content": "c2fa47a1c3b6dcdfca90e952e51211967a4baa54"
        },
        {
          "alg": "SHA-256",
          "content": "9a9fb91cd64199232eb1ca9766148a5d30ef8944be5fac051018f96c70c8f6a3"
        },
        {
          "alg": "SHA-512",
          "content": "58bc6e157452f6b3a70a7d1bcfb89013e7204e716e267386014f6834fb66a56333fe4b538ef25b651913ab585bfa5c8fa010159d96ab952de42a82edb9552fca"
        },
        {
          "alg": "SHA-384",
          "content": "3def74003978738e770a121746f2fd5b3f179f117050fac529ba9a6eee104ac7d20f74a1e815f97a5bf451b3f36f0ed1"
        },
        {
          "alg": "SHA3-384",
          "content": "5636e107cd5406439d57e41ebcfa3cb068e32639941f1b7d780efb5acdb50ee99f7966b9174c52e9cfb27de22666fec6"
        },
        {
          "alg": "SHA3-256",
          "content": "22113afa6de5d146e0be2840ffd3103323b87849f020b06f24d9a70f3dfd3571"
        },
        {
          "alg": "SHA3-512",
          "content": "69c49e3ffb693fbeb98515f578c5a1bf1a6f81baf04efb21d8b2cdcbe93d59eff28f3e6d82a785c9c5b27222fc6f1bfa16a33bc08c92ea792a26a5d1b6068df9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.freemarker/freemarker@2.3.34?type=jar",
      "externalReferences": [
        {
          "url": "https://freemarker.apache.org/",
          "type": "website"
        },
        {
          "url": "https://issues.apache.org/jira/browse/FREEMARKER/",
          "type": "issue-tracker"
        },
        {
          "url": "http://mail-archives.apache.org/mod_mbox/freemarker-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://git-wip-us.apache.org/repos/asf?p=freemarker.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.ext/jersey-micrometer@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.ext",
      "name": "jersey-micrometer",
      "version": "4.0.2",
      "description": "Jersey extension modules providing utilities, filters as well as integrations with external frameworks (Guice, Spring, Freemarker, etc.) and languages (Scala, Groovy, etc.). NOTE: Jersey security extensions have their own dedicated security umbrella project.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "3f236652b18c85dd1d3d42be134e5304"
        },
        {
          "alg": "SHA-1",
          "content": "f32a752d69e3ac4c4b02181bb24a8eb596437fbc"
        },
        {
          "alg": "SHA-256",
          "content": "703dd4ec1ca66d0cfe0e8a4ae5fb804b496f5160c68b881ff4730e8d63370a78"
        },
        {
          "alg": "SHA-512",
          "content": "9898a4196b1f282023471a6dabc1fb0a10e6cd614c6ff721cb0ac59eee3950e4badf532db999fca3da25df2d3880cec470112aa327bd446cea58596b79069786"
        },
        {
          "alg": "SHA-384",
          "content": "8016c540b330bffd9bfdcfe67ffa70634924af42be3caa10a03d7a652da7b2553397ad3f0db07089f3387236eaed152e"
        },
        {
          "alg": "SHA3-384",
          "content": "7a17537bf467022f7578410aefcbf826e5272cbe889956f18927806ad1bf5ea329c1541d802258bdc385480f2b6d3433"
        },
        {
          "alg": "SHA3-256",
          "content": "5816cc53154fac6d0726fc11d948884007d8bf2abbe7fdb7606ad128b887fa19"
        },
        {
          "alg": "SHA3-512",
          "content": "56c27796e3961ec83ae7154bc9c3a16970530b7607728394b8eba41c256b248726d90264e0597b67c0affa868c1562e71a14f0e448bf54958e2edebdf6839037"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.ext/jersey-micrometer@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-micrometer",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "http://localhost",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/project/jersey-micrometer",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.core",
      "name": "jersey-common",
      "version": "4.0.2",
      "description": "Jersey core common packages",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "727c798720203d12c8e41bbefcd3e66d"
        },
        {
          "alg": "SHA-1",
          "content": "0f45e98ad8798ee80a3904d32fffdab62c1cbbd6"
        },
        {
          "alg": "SHA-256",
          "content": "83466815c46d8f813509411986a22d1d3a2abe572b15b03078f98bc020154538"
        },
        {
          "alg": "SHA-512",
          "content": "8deadb5f070eea6d25523d8e634394f13183124aa673e5b08751371c558c49bb428452d07c74cfb477f7da53e3827818bb0ff3715fa97a19b515976a9d9fd65a"
        },
        {
          "alg": "SHA-384",
          "content": "fe3592ead798bfbe2d28093e589f2f73d73314e134f49e186ebf338c6f4ca030def8b982fc0b5fc6f9dc0c4d090d6cf7"
        },
        {
          "alg": "SHA3-384",
          "content": "17afad77ae4b187499349ffdaa877b80cf51da0e573407ab3ff550ff8f4e44f60de4861cce0a8c7ffc9f02edd688e5b9"
        },
        {
          "alg": "SHA3-256",
          "content": "5920f7c36054a487d8a66a8541fd69cf60fb01d96f6c9da1f05a52f6fbd56d50"
        },
        {
          "alg": "SHA3-512",
          "content": "fd0dc5c6ba36eae0cfaac1f2cc02676c87cf899bff7f21d3f367499a7695dab26aaa122a9a442156cd86b86dfd8a158bbaa832bfd1be89b2b902bddde043e7cb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "name": "The GNU General Public License (GPL), Version 2, With Classpath Exception",
            "url": "https://www.gnu.org/software/classpath/license.html"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/jersey-common",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "http://localhost",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/jersey-common",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.hk2/osgi-resource-locator@3.0.0?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.hk2",
      "name": "osgi-resource-locator",
      "version": "3.0.0",
      "description": "Eclipse Enterprise for Java (EE4J) is an open source initiative to create standard APIs, implementations of those APIs, and technology compatibility kits for Java runtimes that enable development, deployment, and management of server-side and cloud-native applications.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "de9e96f2606a6f86def8659e9762c163"
        },
        {
          "alg": "SHA-1",
          "content": "5483c94aa9a7e16319abaec0a6c74c999678feac"
        },
        {
          "alg": "SHA-256",
          "content": "a1866ccfddaa29f18da5d39df662894ab2dd9902994a5000e7644f6cc1e37e55"
        },
        {
          "alg": "SHA-512",
          "content": "ff7e7fc1656bd6f938f69186aa6be1379aacdd4ba9724735c7613d76edf4496d5ff74589bbb83d42c98a22620c6eaa17319d77f878f206744be3e8677f3cba09"
        },
        {
          "alg": "SHA-384",
          "content": "65739334c0f2f3f877a4a14b4d8009711f05d37d9ab4ad3e89560c0a7635011e3dc24ab3ee31ad3f19396bc320d9962b"
        },
        {
          "alg": "SHA3-384",
          "content": "dc6237482f129cb62e8bc16233174d36d76c114b2a51de64505374105a7099454143d18e4e2700e34f6aa497740dcbc4"
        },
        {
          "alg": "SHA3-256",
          "content": "b02549e92eb21dc206488d6d7cade6f94867c537646c9ab3009fd4c119a73c2c"
        },
        {
          "alg": "SHA3-512",
          "content": "d0ed41c9b5d0fe75a12d8dbfa65df17e6d2380c25e52436929d9eaa8154f474e66447e518dbee445c4c94660882a20f509b6f69aff8081805802b7a34d518f1c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.hk2/osgi-resource-locator@3.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j/hk2-extra-parent/osgi-resource-locator",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/ee4j/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2-extra/osgi-resource-locator",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.core",
      "name": "jersey-server",
      "version": "4.0.2",
      "description": "Jersey core server implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d938a53dc417de9bc60f3158068dd1c4"
        },
        {
          "alg": "SHA-1",
          "content": "5b684689d7d36001b883eca81b00e4597f31f414"
        },
        {
          "alg": "SHA-256",
          "content": "c92030c36d6b72cea53464f954e23260ed1ad3559cbb653264497d83882a9aba"
        },
        {
          "alg": "SHA-512",
          "content": "df351826bf9b32dc4f76293029f9202b9141d939532e839afe1bfa504137644ef5156874eefa299db2f7e17fa204e2f7a390b87a3f3ad62282db622078546cd4"
        },
        {
          "alg": "SHA-384",
          "content": "4e00f26790de2a10b90285f7bc3ff0b094c8fb3c1870ef556920f698dcdb61809d2929448c044a686520256e007645d6"
        },
        {
          "alg": "SHA3-384",
          "content": "152cdbab19536c2c3f3d3189e58143253e4cbf35146314097da457cefacf0b96dc6aba4eb3c37195baa87fb8550f1744"
        },
        {
          "alg": "SHA3-256",
          "content": "71d88e8db96d993601980beeaf55d28e5bbbac8ba3438bd6e409ee8fed7e51dd"
        },
        {
          "alg": "SHA3-512",
          "content": "555f64a84060dd85c5ed5df97221e2a5d38d465f58a1cd60f33ad602163d858f6d08b44cf2a3e40b466db2b839e5c1a902b6ad1997edc04ea993fa15cf10c2c5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "name": "The GNU General Public License (GPL), Version 2, With Classpath Exception",
            "url": "https://www.gnu.org/software/classpath/license.html"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/jersey-server",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "http://localhost",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/jersey-server",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.core/jersey-client@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.core",
      "name": "jersey-client",
      "version": "4.0.2",
      "description": "Jersey core client implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9c61cbd9c4fc6749f0dc2338ea0eb870"
        },
        {
          "alg": "SHA-1",
          "content": "15a14c04c458dc9eafc12af7d33ed43fd78dab04"
        },
        {
          "alg": "SHA-256",
          "content": "91fd986ee7c7fa468b2f601d7a2cdf9bfad6ce4fa0fbf5d4f7e6d0c07c12a023"
        },
        {
          "alg": "SHA-512",
          "content": "3121c7fa53d914bb2af504ca183b245bc3184fb080f1d1b2cc0721c733be3e6c4b8cda1c4860ce0646ccd921ea83f6d145af529fa595fe6aacb4bc14644b7250"
        },
        {
          "alg": "SHA-384",
          "content": "754112b2b37246559223abb5d8cf6828ef82507b732c2abe2bdbf28c343cd1815266ddfedb7e8a16797547cda70cd053"
        },
        {
          "alg": "SHA3-384",
          "content": "334b0e0352e584761bedab51a1220f6d1ba8d4cd4221a9cc6fd1ce90d528e5f00c1fe716bdf06b9babb8f757f0740ea0"
        },
        {
          "alg": "SHA3-256",
          "content": "4ea8a1ec58dfa91a85277f085b64b3d5c979984bb50ebe60900b335f21f5ebf5"
        },
        {
          "alg": "SHA3-512",
          "content": "808a3272d41658fcfe831cc2b482968d3962544ffcf8d00d45096f80bfb37b4415b6cb72e1f608f42f04a397ba843f677a8970fcb18267aede08b1c8ad20c928"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.core/jersey-client@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/jersey-client",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "http://localhost",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/jersey-client",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.ws.rs",
      "name": "jakarta.ws.rs-api",
      "version": "4.0.0",
      "description": "Jakarta RESTful Web Services",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9b7cc90c000f193157d60d95caf45972"
        },
        {
          "alg": "SHA-1",
          "content": "c27a67f84ca491efcb3fa68f4df926e8a110069e"
        },
        {
          "alg": "SHA-256",
          "content": "6368b126cbcf34e694bb9ba5b9fe3e5040b7acea7ce622e636d698bb085fd2a6"
        },
        {
          "alg": "SHA-512",
          "content": "e423f90e5f20d133986c60c3fc2f63cfc74531d51b57bf38942cf8e603d8c6817005708117b0bb07e242eae3ba6e1cf23c6ded8fb2776274a9382505ea726ac1"
        },
        {
          "alg": "SHA-384",
          "content": "494b2962ad17d9477d58125cd99d4c0e52e58e10b7ad81e66196649da6651a3187d1ccf64e642083d0a6e54c70f07401"
        },
        {
          "alg": "SHA3-384",
          "content": "1803d40582c05b6956cfeb2cfc7b39c03f2211d4d8511b2b9df2fc4c5830f5a1f8e05d86731f4b168caa3a78bae28d69"
        },
        {
          "alg": "SHA3-256",
          "content": "5e91619ebc4cc811f1639acf926dc4935ac38808d5d834b6d6f26784d7299e9b"
        },
        {
          "alg": "SHA3-512",
          "content": "48c8ed0acd56c83a0d9413bdaa950c92345ac0f36491745e8675b96909c35311fcb05bd80839d0d1247eb5b373754ce5d922d99d06cd1ef9f6063a491e51d671"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception",
            "url": "https://www.gnu.org/software/classpath/license.html"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/jakartaee/rest/jakarta.ws.rs-api",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jakartaee/rest/issues",
          "type": "issue-tracker"
        },
        {
          "url": "jaxrs-dev@eclipse.org",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jakartaee/rest/jakarta.ws.rs-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/us.springett/owasp-risk-rating-calculator@1.0.1?type=jar",
      "group": "us.springett",
      "name": "owasp-risk-rating-calculator",
      "version": "1.0.1",
      "description": "A Java library for calculating OWASP Risk Rating scores",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f387d7ce91df7f1b56224b972b916ebe"
        },
        {
          "alg": "SHA-1",
          "content": "f4ae15b14d7a4c3686f6a8a8a93e30560472b1f8"
        },
        {
          "alg": "SHA-256",
          "content": "9b66d91d1ff61f99e320466ff451555696f139147260528591ff1718c5605d1c"
        },
        {
          "alg": "SHA-512",
          "content": "449331aaabc401a7c7ac42c6bba06d17a2c2dc8def07961b93de7bde8fb9f54aa2541cbab7e541b6fa1552977d46e5367a78277cffbafc60873bb7042facff65"
        },
        {
          "alg": "SHA-384",
          "content": "e83afc9976cfcb5419768fdba983815bf755101fef34df693b6033094e12a29d23127148edef4ba6db3573e0b2bb3871"
        },
        {
          "alg": "SHA3-384",
          "content": "07bed3d3cc524090d01da7711e684d7c645e9225e38225ca92da6f58f3ae86c9d9f2e1a45ad923f9345abecb609c0be1"
        },
        {
          "alg": "SHA3-256",
          "content": "153dbb661c502fd174cdbb735a0a89f69555365e165dd6a91d7c765226b9947a"
        },
        {
          "alg": "SHA3-512",
          "content": "6c6bb8298f8f3337395693f4963d08d21d7f76e6ef8802773e37efc64b1b25a6f8ec77169f730591f429cfa5ac5f6a1b2ef0948af67fa49f19cf7ba8a0223f25"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/us.springett/owasp-risk-rating-calculator@1.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/owasp-risk-rating-calculator",
          "type": "website"
        },
        {
          "url": "https://travis-ci.org/stevespringett/owasp-risk-rating-calculator",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/stevespringett/owasp-risk-rating-calculator/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/stevespringett/owasp-risk-rating-calculator.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/us.springett/cpe-parser@3.0.1?type=jar",
      "group": "us.springett",
      "name": "cpe-parser",
      "version": "3.0.1",
      "description": "A utility for validating and parsing Common Platform Enumeration (CPE) v2.2 and v2.3 as originally defined by MITRE and maintained by NIST.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "753b3f9a2223c44111f7098ff8a65e3f"
        },
        {
          "alg": "SHA-1",
          "content": "377c4cdca1c3c800dd1ff77d6b5cece16dbf1852"
        },
        {
          "alg": "SHA-256",
          "content": "f98a50dce0a381e08f0f0ac067801c7f4c51dc7f8f1fe7a3c9960c684a809705"
        },
        {
          "alg": "SHA-512",
          "content": "241e1a559ac01966f74e820d0af3fb4f79ec41b76590f26198929790a35579f5663d3d8f97b98e841665f57eb5bc6c51370969f0db34c99c3293c6d98093d9c2"
        },
        {
          "alg": "SHA-384",
          "content": "92929bc29a157cbe13d424875e5a66eacd52b2e20a412306ae48a43076123dca75f1cf0d6d075e140cec34e4bf7a5e25"
        },
        {
          "alg": "SHA3-384",
          "content": "bf36fd4e57aa02054d12018926b7fdb8f89b1fa669b1b4c7ff8327c3203c86843c53825facedd34b86c6d95455ce1907"
        },
        {
          "alg": "SHA3-256",
          "content": "064ece86c096355ca9a06fb4942fb3abac3555e8213653fce7ed1f7767b5531d"
        },
        {
          "alg": "SHA3-512",
          "content": "2f005c9caa28acb5a4f9d521a4b847316f949f9f377bbad4cf25ba485127104717bab5e2382238c4f7349d598eb4de073f08dea0838990d32b6d1f2741b33fc5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/us.springett/cpe-parser@3.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/CPE-Parser",
          "type": "website"
        },
        {
          "url": "https://github.com/stevespringett/CPE-Parser/actions/workflows/maven.yml",
          "type": "build-system"
        },
        {
          "url": "https://github.com/stevespringett/CPE-Parser/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/stevespringett/CPE-Parser.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.cyclonedx/cyclonedx-core-java@12.1.0?type=jar",
      "publisher": "OWASP Foundation",
      "group": "org.cyclonedx",
      "name": "cyclonedx-core-java",
      "version": "12.1.0",
      "description": "The CycloneDX core module provides a model representation of the BOM along with utilities to assist in creating, parsing, and validating BOMs.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "dabcf66c24dc633f2d7b88a69beeb16d"
        },
        {
          "alg": "SHA-1",
          "content": "449f227a8e1603880fff41789a8c1d3a090b42ec"
        },
        {
          "alg": "SHA-256",
          "content": "9f7c0dba25f5c02eccf3d79dea9566f1794e3e357655286c4831480952ab4788"
        },
        {
          "alg": "SHA-512",
          "content": "9691c6928c7681ec3b733b02febd2b95c1727d8fb8d25fe5dc116d0bbba33bfff688bcaf38b709d605516924bcc3156b404d699c94ca119682e362f8fcda4926"
        },
        {
          "alg": "SHA-384",
          "content": "57f1d23616aae2409e17165c172f290349a51a088189e37751460b97dc08e20028bd52121d9b4a97a98cf3d5b8245079"
        },
        {
          "alg": "SHA3-384",
          "content": "e7f119b0488c8f78e2afb47c253e6c39c5f1cc80beaa0c6c44924654362a0d475b885a4605253c0b8a3ca4ec1587d60e"
        },
        {
          "alg": "SHA3-256",
          "content": "f34c7330ac0e58fadd1c82c0f0cdc21984840b63f07fea340a7b8f2acdae3701"
        },
        {
          "alg": "SHA3-512",
          "content": "3fa4373bd6178acba5a6da96c137108ca1ece1fb916c2a804da935c5febd38cc02684284126884b925759a2d8aeff3c4611caca3a24e201630ef9b76567f4ce8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.cyclonedx/cyclonedx-core-java@12.1.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/CycloneDX/cyclonedx-core-java",
          "type": "website"
        },
        {
          "url": "https://github.com/CycloneDX/cyclonedx-core-java/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/CycloneDX/cyclonedx-core-java/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/commons-codec/commons-codec@1.21.0?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "commons-codec",
      "name": "commons-codec",
      "version": "1.21.0",
      "description": "The Apache Commons Codec component contains encoders and decoders for formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c49977029838babaf8a71485aa9aaef8"
        },
        {
          "alg": "SHA-1",
          "content": "d95f998db5f89900fe895daf6cd2cddcb2f1d64b"
        },
        {
          "alg": "SHA-256",
          "content": "4da851cb6abfb98bfe9eb77c5e5fc47f5414fa28b94e21b7fd9a646705dc167f"
        },
        {
          "alg": "SHA-512",
          "content": "3ceb4aa588d0b918e46b1ddda9ff41b5a765985bf66542d2728458fc3f83b9dedfd972ff5d919cf6f456fbaa9f8c4e5f0c0913848ec3a471c316374e683b1f2a"
        },
        {
          "alg": "SHA-384",
          "content": "05786582b0a85264688ad5b49ad6da09db1cdfe6301cf31ddea48f97f45b13ff25d9e3def1702890457fd5bbbd00f793"
        },
        {
          "alg": "SHA3-384",
          "content": "805bda170837bbedbecc5c63a5defc6a348777952906d8e6f33544866e86aa25c9d28f3b351e981d0fa49bb16e07884c"
        },
        {
          "alg": "SHA3-256",
          "content": "cbc2eafcba305c08e852133d0881d209799c4dc83d587869eed5f281d6bed4f3"
        },
        {
          "alg": "SHA3-512",
          "content": "244e6a342d4b5a6e7d077426427979f26320be305f1cb33d933672c926ea3a96fe4f284c9f592970f604928209fe0e149613b64990202d595bce01a669de418b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/commons-codec/commons-codec@1.21.0?type=jar",
      "externalReferences": [
        {
          "url": "https://commons.apache.org/proper/commons-codec/",
          "type": "website"
        },
        {
          "url": "https://github.com/apache/commons-codec/actions",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/CODEC",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/commons-user/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/commons-codec",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.commons",
      "name": "commons-collections4",
      "version": "4.5.0",
      "description": "The Apache Commons Collections package contains types that extend and augment the Java Collections Framework.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d564105594035b363b193d8ce3c18b98"
        },
        {
          "alg": "SHA-1",
          "content": "e5cf89f0c6e132fc970bd9a465fdcb8dbe94f75a"
        },
        {
          "alg": "SHA-256",
          "content": "00f93263c267be201b8ae521b44a7137271b16688435340bf629db1bac0a5845"
        },
        {
          "alg": "SHA-512",
          "content": "ee43c513ac9dcbd7dd23b5cbb4ea5f65a2e10cdfbb403d080b87e778b3b45062315522297c41eca514a9a946228ad7650f0a572d5b78effb8260dd8084131988"
        },
        {
          "alg": "SHA-384",
          "content": "73db8eb3e79569b3fa62aefdce413e6ea250b9853953cb75b9d5ce0f2f35b59b6e86ef708326a608ff20d95bdade8522"
        },
        {
          "alg": "SHA3-384",
          "content": "7a9c035fa846cdcebd4331eb86ed31a67595518299a8bee54597c1eb663aee63214553a561a510b929035266c2a4800b"
        },
        {
          "alg": "SHA3-256",
          "content": "614c41bfd8f9c6c1c1e5667c5be45587c3021b780937ad62f54d17051f425086"
        },
        {
          "alg": "SHA3-512",
          "content": "3cfd12ec2d03ed29b682123cedae422a4c6dc459034a7e0ab5f00ccd422cb9a2ec423a08b953119c426569b888157a6d80aa0e0c63debea50c5c54c481e2eff5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar",
      "externalReferences": [
        {
          "url": "https://commons.apache.org/proper/commons-collections/",
          "type": "website"
        },
        {
          "url": "https://github.com/apache/commons-parent/actions",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/COLLECTIONS",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/commons-user/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitbox.apache.org/repos/asf?p=commons-collections.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.22.1?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.dataformat",
      "name": "jackson-dataformat-xml",
      "version": "2.22.1",
      "description": "Data format extension for Jackson to offer alternative support for serializing POJOs as XML and deserializing XML as POJOs.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "dc9e8f9090ad8aab73dc3e850a77586b"
        },
        {
          "alg": "SHA-1",
          "content": "52e415c14654d65bc80cc4942585c5a25423f3c2"
        },
        {
          "alg": "SHA-256",
          "content": "243a9c67b3d7c40d13719daf0a2838942d3e969feafd6b2cae24eeb02c1d75e2"
        },
        {
          "alg": "SHA-512",
          "content": "c8135e28efac33cf9950e6a0b58443df28501f17fbf5426a8ce407a6c5ff53de8e14c1cb1b20a297887a5915fe52e2ef9414946a4234a4b4173133a26be06832"
        },
        {
          "alg": "SHA-384",
          "content": "6ad9617cb4bad3701f76f098d84ebfbac6c86e7e6b780fea49a944e719b0d5667e90063dde614e4ed7bee8912d20599a"
        },
        {
          "alg": "SHA3-384",
          "content": "701a1eda9821af584e8a9ebc998637e7a21e10e6d370f99a0979a5c633605e10a0d13e8408f965b020d12fbba9341915"
        },
        {
          "alg": "SHA3-256",
          "content": "7246efd028dcd9a3f10195bc10e7ca984a3e4a779050d74d10c42de3ccb57a2b"
        },
        {
          "alg": "SHA3-512",
          "content": "f376c49689c609dc890634c7c3ffcd4b0eb670893ba900ca7392b7ed841f28010283815155458532d1845dc0432c975b3b3c978895888d5a5c9ddb43714b9076"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.22.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-dataformat-xml",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-dataformat-xml/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/FasterXML/jackson-dataformat-xml",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.activation",
      "name": "jakarta.activation-api",
      "version": "2.1.3",
      "description": "Jakarta Activation API 2.1 Specification",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "76e7b680375ea9f40f3ddbd702efcd25"
        },
        {
          "alg": "SHA-1",
          "content": "fa165bd70cda600368eee31555222776a46b881f"
        },
        {
          "alg": "SHA-256",
          "content": "01b176d718a169263e78290691fc479977186bcc6b333487325084d6586f4627"
        },
        {
          "alg": "SHA-512",
          "content": "aaabd4d6085a07035eaaae7b5a81aef429fea76e7fe1c8d29971e6595f0adad6bcf1088cff8a1c8936d739b0e3fce4b845323032f046b7edab2eaebd0e10a2ad"
        },
        {
          "alg": "SHA-384",
          "content": "4c4e73f59bf09342ca7691fd4855b41d3466da80618a5b7df059a2d89cf6d9779a4af751a6c4a9c48e5025c3ff75f42e"
        },
        {
          "alg": "SHA3-384",
          "content": "20be816700c87778e9453d41b6d8cb9dc992a092a308a9b7f2dfbf72e2393940a7d666c46625f130a2b57bc414df85ca"
        },
        {
          "alg": "SHA3-256",
          "content": "8a574b0a249842ea1b397d4cdef9b6d00b34ce8a849ea34184cdf45ac5aafe67"
        },
        {
          "alg": "SHA3-512",
          "content": "69cfb7dddda70ac1fca272ace0a3d5551b85dd60a6dbaf987ee777fbf573b420d13f06b8990ae70e8fe063f92b78c8a447cf9309ba516a5e993ba2d49cca8d23"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/jakartaee/jaf-api",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jakartaee/jaf-api/issues/",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jakartaee/jaf-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.servlet",
      "name": "jakarta.servlet-api",
      "version": "6.1.0",
      "description": "Eclipse Enterprise for Java (EE4J) is an open source initiative to create standard APIs, implementations of those APIs, and technology compatibility kits for Java runtimes that enable development, deployment, and management of server-side and cloud-native applications.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "314c930b3e40ac1abc3529c7c9942f09"
        },
        {
          "alg": "SHA-1",
          "content": "1169a246913fe3823782af7943e7a103634867c5"
        },
        {
          "alg": "SHA-256",
          "content": "8a31f465f3593bf2351531a5c952014eb839da96a605b5825b93dd54714c48c4"
        },
        {
          "alg": "SHA-512",
          "content": "8651fc14b79e284fe29dff5b2cadbf6748615ececde798c42687472f4f6fd1f80ee05ec53794021c62a11abed0c0170bb08b28d3f9cd7f562eb320bc9870ddec"
        },
        {
          "alg": "SHA-384",
          "content": "48b2a26351619286ffe41d25e5e61cbc0eb8a5a648a205d0f8db48178278cb16850469fe8dbc219aee0ee37f4081c248"
        },
        {
          "alg": "SHA3-384",
          "content": "2047f0b88a12619fb3f07a98048fc405e9cec4ddee6af2a2efc06c1172d2bebefc6c23bdb4df0a1054060f91d5cc5617"
        },
        {
          "alg": "SHA3-256",
          "content": "4b506d06772f32251cadc40251623ebd4f3144531249ce4821787b1a9c4a55b3"
        },
        {
          "alg": "SHA3-512",
          "content": "07632a67f7ca7b460cfc3042ecf97f9097e7d7638209434def89a3bd55da5a31e287f32def27ce776d5775ec0629979abb08fe2836d88d638802194af0320fe0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.servlet",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/servlet-api/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/servlet-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/servlet-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-server@12.1.11?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-server",
      "version": "12.1.11",
      "description": "Jetty Server Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "249fcd2e5ca5b31277446b44e3355342"
        },
        {
          "alg": "SHA-1",
          "content": "d01ed1d317616ad84f3715b0f684af84a88d0c88"
        },
        {
          "alg": "SHA-256",
          "content": "772f84baf043bbc34edd99de728f3c0b2de642c400dde0fefa763e40de2ea583"
        },
        {
          "alg": "SHA-512",
          "content": "7b27dbb6690e0c5429025cb8555fa91e53892797149763af6eb510be40847b6653980fe6e4c4694cc4ecae314c205ecb168c402134c355a683aefc2bc6ddd0e7"
        },
        {
          "alg": "SHA-384",
          "content": "9afeede1c188e4964eedf9371f91fd3722e8f7c1bd417eca160bad1270d7f178654a970ced230df7f579214e761cb0fe"
        },
        {
          "alg": "SHA3-384",
          "content": "42540d773046bbdc84f1028f32b9d2700db15ee7c1f6733d12d583e03b305e1445651d3f7c3f5592d4e6aba84440c2d5"
        },
        {
          "alg": "SHA3-256",
          "content": "6d003ff86adf1a9f463972fb16f940d0f96e1b5694eb77d2a4f5043269dd7594"
        },
        {
          "alg": "SHA3-512",
          "content": "4efc1cdac80b6cfad2494da014143899cdd91c26cd6aee0e1838f41db2275393ba752e463a34df3e8c3f3595842025a76a5a5770f508bec2bd59a208ee977c76"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-server@12.1.11?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-server",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-server",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-http@12.1.11?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-http",
      "version": "12.1.11",
      "description": "Jetty HTTP Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "141e8730558a415fb69060e3a697d824"
        },
        {
          "alg": "SHA-1",
          "content": "1ac6f17b6ae8b07eaba7305fbe3af846f0764478"
        },
        {
          "alg": "SHA-256",
          "content": "0e204f4c71c5d7e138949d50bb7fb15766840ecea6ca24513fb92ee34b363f55"
        },
        {
          "alg": "SHA-512",
          "content": "58a9cfb1cc8e1ac75776b05df396b23cecd759358181aae0b62db49b52bf236498e14bfac57804034f37ebf6caeddcfbb178527e5c3c7dda3237b41726dced59"
        },
        {
          "alg": "SHA-384",
          "content": "58e2a34d363789e2c64580cd7d29776142641fdad97e8265f19c35647c30c300c70d037678edeea31b1d4bcc8cd629a1"
        },
        {
          "alg": "SHA3-384",
          "content": "c20bcb700f8222093354dca9ff3e7c15b339a18354095e6056441871d60472bd28ce6689747b2213da0d1d525eada655"
        },
        {
          "alg": "SHA3-256",
          "content": "9cf5919d2b5a0fe0b9325148c1d423c48f157e0cc082a3e11f30a69722ac0ca9"
        },
        {
          "alg": "SHA3-512",
          "content": "48aef1ad32987719bc948caa25f05819c0078c0fb2bf19a59add8c07ba14f2e50863785d67d67de627af176a586eda9de838cc0255b52ddb378726ea5f41e930"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-http@12.1.11?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-http",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-http",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-util@12.1.11?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-util",
      "version": "12.1.11",
      "description": "Jetty Utilities Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6fe1a9551fc4043490b6f8b0290f07e0"
        },
        {
          "alg": "SHA-1",
          "content": "b9e8ac7571d3420049ff3412ea6a3012d74b54f0"
        },
        {
          "alg": "SHA-256",
          "content": "8a8d7e063cf312b044927f817b09ad7a4517162d747f7ff891a414e8ef476c26"
        },
        {
          "alg": "SHA-512",
          "content": "1f670f2a0318611eadc53708d89e46e0316e3c818a9b79aec62228d1636a0a958430641e08eb474a7180f8914273fc053242ae116f4ef342b6f83e71ff2cc11b"
        },
        {
          "alg": "SHA-384",
          "content": "2b7948d561ddc0376ad926c41602cd189949f0198749f8056146b45f87f29c49349262e04fcc92cb9dacd76170a223c4"
        },
        {
          "alg": "SHA3-384",
          "content": "7895c808d93c0cbd1bd9c96358546aa7ef4769a95a93b61fb06e1c7f27a2cee00c604990e4ba28b560affc5e62dacf5c"
        },
        {
          "alg": "SHA3-256",
          "content": "c81cf4011933dfb8506c46549f759ed2b20c81d91b660f0380caaec3cfa3bfc6"
        },
        {
          "alg": "SHA3-512",
          "content": "d36f6fafcd2692507279687bd156c87037291daa7d6a33a3c81821bd860d4045774c38380734c8e0f7c34bfae394f819a839464802da4be8fabc78e69dddf62c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-util@12.1.11?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-util",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-util",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-io@12.1.11?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-io",
      "version": "12.1.11",
      "description": "Jetty I/O Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "bcceb24f4876d32723c2c9a5a74d0865"
        },
        {
          "alg": "SHA-1",
          "content": "b581a335f75f27102c9b5155c88ad0eaf432c4ff"
        },
        {
          "alg": "SHA-256",
          "content": "0534454eb445263a8577200f7bd009153d36f3a81ef1543e79ab551846ee3b94"
        },
        {
          "alg": "SHA-512",
          "content": "400385675e4e524a3f5d16c9378e260af2f2a6b4c97c163a14a7ff8141bc7022fe36062253aac6af5890dbb691ada74812ba63659b02e157eafa0d7b4794b0b8"
        },
        {
          "alg": "SHA-384",
          "content": "2ea0efb6972e3d4b9bf02886dd829af6e5c0ed1da7f15ebd0506e7aa22e3b9548d25668e02492b84d64b01f9cbfb5b09"
        },
        {
          "alg": "SHA3-384",
          "content": "3c7f8f3cb9bf902a043e079e7bec1fdcc1bf8ac867c30bc77f0eb0007c36371ba385434436bab5acb9e3342a848713f7"
        },
        {
          "alg": "SHA3-256",
          "content": "cb0c9fb71249c8f304095f0ecc27d94ba02f32d5baaaac42f6e1cf50fb130b1e"
        },
        {
          "alg": "SHA3-512",
          "content": "32c9c4b7f80cdce20f5699c4880ff3cd8067afd2e036d50d745110b55d3198828e4e05ae0a23778038627bed32d8dbf1f180ae16cb008d2682ac1a4abd62cd6b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-io@12.1.11?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-io",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-io",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty.compression/jetty-compression-gzip@12.1.11?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty.compression",
      "name": "jetty-compression-gzip",
      "version": "12.1.11",
      "description": "Jetty Compression Gzip Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "82f1a3f072ba7e20587ee08e5c3fcc27"
        },
        {
          "alg": "SHA-1",
          "content": "9bfee7d7e4ec2bd9ddf44e7bed1b263631c8626d"
        },
        {
          "alg": "SHA-256",
          "content": "1cab4e2ebb3684b603535328bbda87d0e2f96902242157a8f8f74a80370955a8"
        },
        {
          "alg": "SHA-512",
          "content": "bc4991d798bb74911f40bb8f719363900fcf69c7fb4ed9b5719424e71e3c959f2b1f493bc12cfa934ab007508a4589d1d25045f7ed7086c942ba82e9e04d0dfd"
        },
        {
          "alg": "SHA-384",
          "content": "689a074b56165eb1263d319f8d79f52842caae89dc51cc3adcc973ac1c3d4b2fb83f3cfa9b44299508213e526f719671"
        },
        {
          "alg": "SHA3-384",
          "content": "b2b1665a7d1e4ed21032118f8716fab336d55fe1b9cad22ae309350c796624833ce3d9a879fd33d096bc08b68c4424d6"
        },
        {
          "alg": "SHA3-256",
          "content": "46d96c51e160cd69ad037ce6e0e5a52589b1bc5ec7846ef797f4c925c5d50528"
        },
        {
          "alg": "SHA3-512",
          "content": "93cc6f607b090be25d0c8e0891cc95c3b7442bb26d9512ccce79ef66fc1d531543e3e91f3fedba1affb815f52d751e076bdec07ea421666ae519905c3ddcb96c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty.compression/jetty-compression-gzip@12.1.11?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-compression/jetty-compression-gzip",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-compression/jetty-compression-gzip",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty.compression/jetty-compression-common@12.1.11?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty.compression",
      "name": "jetty-compression-common",
      "version": "12.1.11",
      "description": "Jetty Compression Common Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "db6e40ef595a9e406241c5b3c28ad90a"
        },
        {
          "alg": "SHA-1",
          "content": "31af6e4828fcedcec495af502ba4c57002f253c9"
        },
        {
          "alg": "SHA-256",
          "content": "0379fc639fc0d38a57d4d28c5a8780b62088c6d25f27d50995524dbcf3723fe0"
        },
        {
          "alg": "SHA-512",
          "content": "b593c410426a606a276457618f27227ab68ded7339c1cd179167010bb457ea5b3cd4bd4df4485125904706d8772d80944a1f0fb4856c88271846d4ca71c78680"
        },
        {
          "alg": "SHA-384",
          "content": "3dff4c87facc0d5049ccf94486dfc2bd6a77033dda45f628b8f549fdb0ed177e033d21bc4ea005c0cac51833d1b1989e"
        },
        {
          "alg": "SHA3-384",
          "content": "887cf71768c6eeef23c905a0ef651b8f7db2e470fde36b48ffb447c05627cd23687cc7f8cd915c46f8254694caf30ab6"
        },
        {
          "alg": "SHA3-256",
          "content": "7f376fa5999f605f39bf01044bba71e9e01011c0011b9ea13d6ce37ef0a916ea"
        },
        {
          "alg": "SHA3-512",
          "content": "e5d538b630adcde1a9b0683c362cabfb28e489dc271aa6ad2e50c09e4642ce80bb47209d4f2c3bd4cf72645bbffe4581b308634b2644b076793e5ec3c001368a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty.compression/jetty-compression-common@12.1.11?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-compression/jetty-compression-common",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-compression/jetty-compression-common",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty.compression/jetty-compression-server@12.1.11?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty.compression",
      "name": "jetty-compression-server",
      "version": "12.1.11",
      "description": "Jetty Compression Server Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "bd6d42b636d59183f8b0aa151006be33"
        },
        {
          "alg": "SHA-1",
          "content": "e8e8643f0ccd1a4e05b49dabe11f6dfd87beef35"
        },
        {
          "alg": "SHA-256",
          "content": "810f9bd63710968bee207215e26f358a33f3c4390afb82b5efa06b6d3ce34d12"
        },
        {
          "alg": "SHA-512",
          "content": "12d4cb64a99e69c603ba01c355721ef32582afc03cd94df78a1e0ff15acfe36754835df30d93091feee3e8479929e7ef982be0eae6459b312f53b4b040165834"
        },
        {
          "alg": "SHA-384",
          "content": "46232d279d0057ac5817b060cdd8e258675e5bea7ea468c9300c65b4b6dc6d63d61fb36616be099caea7e14e1175327e"
        },
        {
          "alg": "SHA3-384",
          "content": "3787a57d3e42dc68adf4f93ec7eb2bdc5810c9df5161fd76f0db4f815ff7ec98538be29ce5330709e6792f5d2258df29"
        },
        {
          "alg": "SHA3-256",
          "content": "f63c613c854b68cc2f5467776b537d9ea615c3b806e77bf344f4d70f45cdbc15"
        },
        {
          "alg": "SHA3-512",
          "content": "28411fff02e3c7b5b75b968e37835009eb0e5f87c6909b86be3cb0d3dc0574a2b545707bc201bc417e2dfe1e52d4b987bbe9a9b660bab7b7aae2af6f83d1e6bd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty.compression/jetty-compression-server@12.1.11?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-compression/jetty-compression-server",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-compression/jetty-compression-server",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty.ee11/jetty-ee11-servlet@12.1.11?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty.ee11",
      "name": "jetty-ee11-servlet",
      "version": "12.1.11",
      "description": "Jetty Servlet Container",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "29190773a7603aeefa0c685baa2314ea"
        },
        {
          "alg": "SHA-1",
          "content": "da463e59465e2a08e4651d525e368246783c5d76"
        },
        {
          "alg": "SHA-256",
          "content": "f88e19a29f4e46322df60fe43d5ac4d852edefad923e8c38ef17ff14dc522e84"
        },
        {
          "alg": "SHA-512",
          "content": "5e563e7184f4b912830a68898d801b18aeb3af93847e19a70b1e420752f6d65a595fa2e46764305a5dcd96e6aede16e5951114203873241a610c05f73a0d6f0b"
        },
        {
          "alg": "SHA-384",
          "content": "00e1497667b79b0718946a616de58bd419014d0d82ade9fc403ecf0955d1515fb501e536b0932e24f4ff843c0171f89d"
        },
        {
          "alg": "SHA3-384",
          "content": "a353d0f991462a000c6a17e86319a732b1e1a38c96b4037a66fa5292781eeb8389548571b2a2b51f09b9f8d0b00821bf"
        },
        {
          "alg": "SHA3-256",
          "content": "a0a58f3aa4288eea7ac29757e10101781cc0d999680f0dda696ee5c7e8d9cd72"
        },
        {
          "alg": "SHA3-512",
          "content": "e35a18f786d22308cf056d8633f24bc55b5f204c513f6f97a99e2b2c3741685650ebdf3c09a7ca46aa61cedc2c367cba2a525bea70cb6107769beaf5824e3de7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty.ee11/jetty-ee11-servlet@12.1.11?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-ee11/jetty-ee11-servlet",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-ee11/jetty-ee11-servlet",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-security@12.1.11?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-security",
      "version": "12.1.11",
      "description": "Jetty Server Security Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a67388e4c6d7be2793c6247d2f9f9fdc"
        },
        {
          "alg": "SHA-1",
          "content": "a92bf751f1edd5b4a7529d7323b2f40225ee286f"
        },
        {
          "alg": "SHA-256",
          "content": "6d21a7cbfd1915735cab6638011998f881161fdeff94936ee8f71e37d3528e79"
        },
        {
          "alg": "SHA-512",
          "content": "498261b77e4403528d9290fbd7bc0915799f3e3c22e93d7b245400ef9e12703cdaeb78b16bbd2ff964fa861c6e251e0a1b400fb79e928ca159fb2c961da72e93"
        },
        {
          "alg": "SHA-384",
          "content": "5636662f76a891e58e46a3ef04356beebf84c5705f5c5a8262a747c3c828e8a3ec7812314f9418004ae7a47553dd4ebb"
        },
        {
          "alg": "SHA3-384",
          "content": "71f3036562afb043f17a7712dc183994a239419cd769c25ce40755319b1b68d93be055cc6c135b8d691878a3b6f0ae95"
        },
        {
          "alg": "SHA3-256",
          "content": "2adde1fbb8c3b0a6f4bb1fc480b60f4627b75854b57181510a2b10fa3ed6a470"
        },
        {
          "alg": "SHA3-512",
          "content": "bf8df4b6459d90452f487d35cf5dd07e5975d768f1db2b4bd2f2cd9b7f4f14a3708b1f961120f34f00e5ee4eb4ac38c0ab20a3b4c188a102b3fc18ddc9624ed0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-security@12.1.11?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-security",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-security",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-session@12.1.11?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-session",
      "version": "12.1.11",
      "description": "Jetty Session Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "126ee76efe01418dfca44fdb3779c468"
        },
        {
          "alg": "SHA-1",
          "content": "8334e427954c70ad51b39ba3ac2e9a5ae7b146fe"
        },
        {
          "alg": "SHA-256",
          "content": "d00db0879d2dde6bc8742c3050e995314c5d423e20ca63601cf91add2547a381"
        },
        {
          "alg": "SHA-512",
          "content": "a0685700b4009352c95d1f5cdbf75f1bb0c5a5d5986090602554cd5d62779609590f11ac0f7f6540b3ec2cb9bb701d5ab5d5433fb0ab2307dae116a4f4d0aaa7"
        },
        {
          "alg": "SHA-384",
          "content": "52e5edc5b9c4b1e90ce1fb7801cc76d7da2dcd24beb7b49bb08113023fe865754eed65879e3987a2ea75ab7021ba841c"
        },
        {
          "alg": "SHA3-384",
          "content": "8a50084e7c21978511e9bda2977ac40f0f1fedb27c9e54fc964085f1b5bcdfd3531f97b71696cf07cc59f1eb008561b1"
        },
        {
          "alg": "SHA3-256",
          "content": "cb62ba21509cfa6c4d7a2d4ef89a1a6f2eed4bf24d58f4d2f2097f8eb9e3fd4c"
        },
        {
          "alg": "SHA3-512",
          "content": "94352ec85152727a917b703604ff74f69346409a151ee4bd654002664bb321c275a220aa9c6fbd70dab3c80da604c187467ddc707879b0effc80d74c7a4c13d1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-session@12.1.11?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-session",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-session",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.slf4j/jul-to-slf4j@2.0.18?type=jar",
      "publisher": "QOS.ch",
      "group": "org.slf4j",
      "name": "jul-to-slf4j",
      "version": "2.0.18",
      "description": "JUL to SLF4J bridge",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f339bf7648049b2105e180cab6c45c9d"
        },
        {
          "alg": "SHA-1",
          "content": "79739c98001d5c9d078d087d5a348ec9e474ec8f"
        },
        {
          "alg": "SHA-256",
          "content": "cbb7d1aaaa9e871eb1a06594abd911bf97027152976edf1edc315be75239204e"
        },
        {
          "alg": "SHA-512",
          "content": "fd6019636513f7b121d0321f0897667713e7d9a0d21f6d15c3b55d2bc804687c1d264ad3d79aa227e9712169e4d6b4d05d5d8746399e900c933ce330f1850569"
        },
        {
          "alg": "SHA-384",
          "content": "0d6d600cab9a960b2b5de8e8591fbba648c155f19c5d10d11eb4eee0572edd9670ed5a63197412bfeb9d58ce4a72259f"
        },
        {
          "alg": "SHA3-384",
          "content": "cedd50402de6b6f146b3f2b71a253a24a17b17eb7f632d555f287da572d8ee157dfd154169f3b3c9a2b2b917a2001f23"
        },
        {
          "alg": "SHA3-256",
          "content": "0c8f1bf469bbfda88c4a601408e40116eb8a27e89bb77f82f7feeee409d4b12e"
        },
        {
          "alg": "SHA3-512",
          "content": "0b25b9049a933eeadca90876ba1d499bf53779063846367870b5ef69c916b041354c33d256bdba9d4f87143d1e07dad9ec66fe502a9bba0858c23e9fca416066"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl": "pkg:maven/org.slf4j/jul-to-slf4j@2.0.18?type=jar",
      "externalReferences": [
        {
          "url": "http://www.slf4j.org",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/qos-ch/slf4j/slf4j-parent/jul-to-slf4j",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.swagger.core.v3/swagger-annotations-jakarta@2.2.52?type=jar",
      "group": "io.swagger.core.v3",
      "name": "swagger-annotations-jakarta",
      "version": "2.2.52",
      "description": "swagger-annotations-jakarta",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "23c007ada7f14134eaa9f972169ac5c4"
        },
        {
          "alg": "SHA-1",
          "content": "03806bb2a46610b20b5841c7f711b2d660ca5848"
        },
        {
          "alg": "SHA-256",
          "content": "330742c7666396e96f1b22db00b749774d3ccfb40c35ea9f557a39c6f3c56778"
        },
        {
          "alg": "SHA-512",
          "content": "06596745535259085d0f6245b6f4a5a1dec972d7eb50a680e3765efa4009987a0d5a7d27f5ba80891118d14076391493d76cdc0f509c0aa4f7a3bfdf3bef631c"
        },
        {
          "alg": "SHA-384",
          "content": "c97c02fed723ff0efe04d2fb6fe88adf8d0493b9ee0dda07e70dc736de1233b074223d42cf6353af6dc3504e20488de1"
        },
        {
          "alg": "SHA3-384",
          "content": "4c22a99cb95c0120eff19b83c15419a4f26d0abda9e6c390918555f2d4a04901e9953b15b184ecfebef291e1be54e3a1"
        },
        {
          "alg": "SHA3-256",
          "content": "37ab2892d536fcd9805004b8b6f74487e86b46d71e8d0f95afc1aa40f195c65f"
        },
        {
          "alg": "SHA3-512",
          "content": "b1c7eb945584888a361ca2b55da0ccaa63ca409bad23ff915fd1f31a34cc87e2d0c443d2b6972e9684e8af5c40a0b3b34663f088aeba67187776c247c14fd665"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.swagger.core.v3/swagger-annotations-jakarta@2.2.52?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/swagger-api/swagger-core/modules/swagger-annotations-jakarta",
          "type": "website"
        },
        {
          "url": "https://github.com/swagger-api/swagger-core/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://groups.google.com/forum/#!forum/swagger-swaggersocket",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/swagger-api/swagger-core/modules/swagger-annotations-jakarta",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents",
      "name": "httpclient",
      "version": "4.5.14",
      "description": "Apache HttpComponents Client",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2cb357c4b763f47e58af6cad47df6ba3"
        },
        {
          "alg": "SHA-1",
          "content": "1194890e6f56ec29177673f2f12d0b8e627dec98"
        },
        {
          "alg": "SHA-256",
          "content": "c8bc7e1c51a6d4ce72f40d2ebbabf1c4b68bfe76e732104b04381b493478e9d6"
        },
        {
          "alg": "SHA-512",
          "content": "a084ef30fb0a2a25397d8fab439fe68f67e294bf53153e2e1355b8df92886d40fe6abe35dc84f014245f7158e92641bcbd98019b4fbbd9e5a0db495b160b4ced"
        },
        {
          "alg": "SHA-384",
          "content": "c8ccaa1fa8ba7c421413e3c30375bd9c31284e837c476fd831e18043ad4187e92166f49554123108891241bed674b95d"
        },
        {
          "alg": "SHA3-384",
          "content": "9a17dfcf12b2af3a9b006ec369f9bc78ba322348bf1a01146e0d4f3fec2bed6cbe8b2193fac5b4d5a0c3036c06477510"
        },
        {
          "alg": "SHA3-256",
          "content": "48f0a61b691e22dec9d6db8e0b58be4ca17a42a2846c82f0875de21f72bb0faa"
        },
        {
          "alg": "SHA3-512",
          "content": "4ad2c9adc761b7e813330f0dcad3f9978702896c7d0cbf81f60a472d550e320b1527be425ba597c8c9352d587e32e1d46ceb4c73e99c70a6190df4c699a7c2a9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
      "externalReferences": [
        {
          "url": "http://hc.apache.org/httpcomponents-client-ga",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "http://issues.apache.org/jira/browse/HTTPCLIENT",
          "type": "issue-tracker"
        },
        {
          "url": "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/httpcomponents-client/tree/4.5.14/httpclient",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "commons-logging",
      "name": "commons-logging",
      "version": "1.2",
      "description": "Apache Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "040b4b4d8eac886f6b4a2a3bd2f31b00"
        },
        {
          "alg": "SHA-1",
          "content": "4bfc12adfe4842bf07b657f0369c4cb522955686"
        },
        {
          "alg": "SHA-256",
          "content": "daddea1ea0be0f56978ab3006b8ac92834afeefbd9b7e4e6316fca57df0fa636"
        },
        {
          "alg": "SHA-512",
          "content": "ed00dbfabd9ae00efa26dd400983601d076fe36408b7d6520084b447e5d1fa527ce65bd6afdcb58506c3a808323d28e88f26cb99c6f5db9ff64f6525ecdfa557"
        },
        {
          "alg": "SHA-384",
          "content": "ac20720d7156131478205f1b454395abf84cfc8da2f163301af32f63bd3c4764bd26cb54ed53800f33193ae591f3ce9c"
        },
        {
          "alg": "SHA3-384",
          "content": "628eb4407e95dca84da1a06b08a6d9b832a49de8472b1b217e8607f08efeeed18b996232d64dd07f03e78e0e3bb4b078"
        },
        {
          "alg": "SHA3-256",
          "content": "9aab62deccf156ee6e324c925dfc30ecb53e8465802863a551901a461424e807"
        },
        {
          "alg": "SHA3-512",
          "content": "3fd76857f6d20c03799537cc961c1c4ddf1c375c6c192fb982363e3b9397ba138b77f24ef38b4202f44e37586789c0320e4de18fdadd2772304fd14a9b26d552"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
      "externalReferences": [
        {
          "url": "http://commons.apache.org/proper/commons-logging/",
          "type": "website"
        },
        {
          "url": "https://continuum-ci.apache.org/",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "http://issues.apache.org/jira/browse/LOGGING",
          "type": "issue-tracker"
        },
        {
          "url": "http://mail-archives.apache.org/mod_mbox/commons-user/",
          "type": "mailing-list"
        },
        {
          "url": "http://svn.apache.org/repos/asf/commons/proper/logging/trunk",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.22.1?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.datatype",
      "name": "jackson-datatype-jsr310",
      "version": "2.22.1",
      "description": "Add-on module to support JSR-310 (Java 8 Date \u0026 Time API) data types.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4dd3e0a2be3f88d720f9214954ed59b6"
        },
        {
          "alg": "SHA-1",
          "content": "3377a0589c1b0e62bbe245ac8e9f56fa7d7b8bb9"
        },
        {
          "alg": "SHA-256",
          "content": "85da45b7e5e565418963ff8f0dcb184365b0557c15468933f4318dde5c3ce845"
        },
        {
          "alg": "SHA-512",
          "content": "362067f556de43c49829fd5d69681bba3a43bc5a7211811061d62838f047cea368174d865944aa2434f5d7592a2cdbd7a75b534493b0c14e6340f1536718ce41"
        },
        {
          "alg": "SHA-384",
          "content": "aec680e1f9f4b48c7cb1b0e6ba1631ee6c69b0d2983da2f0ce26b4e525054fffa0a8d073c1ac37f36b6f004d413abc38"
        },
        {
          "alg": "SHA3-384",
          "content": "afc1e60eb4215320d1ae959f2095215f9fa38db4cfe04b2d9ea626938c7469bd9872d3ad83e401ce5e6c0f11f338290e"
        },
        {
          "alg": "SHA3-256",
          "content": "a7e4a6a3455c2dfda0a691d413a5afeef1d38587b1ead2318b80f8966d1c783f"
        },
        {
          "alg": "SHA3-512",
          "content": "58a71d8bad72fada694e5484d99a4625d672d994ffc3b43196642ae48a08c4430fc21e20937f3fa01d0c182136eccfbc09926d11bad267455180fbd9774427c0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.22.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jsr310",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-modules-java8/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jsr310",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
      "group": "com.github.package-url",
      "name": "packageurl-java",
      "version": "1.5.0",
      "description": "The official Java implementation of the PackageURL specification. PackageURL (purl) is a minimal specification for describing a package via a \u0022mostly universal\u0022 URL.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "90856d8bb5b17e08fdf03b6a2f93b81c"
        },
        {
          "alg": "SHA-1",
          "content": "e6bf530f52feab911f4032604ca0b8216f7ff337"
        },
        {
          "alg": "SHA-256",
          "content": "e45551727707acc0c56ac62d56964332ea0f138d6cc3656d988b9369150f5247"
        },
        {
          "alg": "SHA-512",
          "content": "8064df400154caa110b8845bd17e6cea2683307e575ce88e40d7c0c8965ea0af6c150a376d8b9ba7354676c41b52c94535f30c6e830447613299ccf5fc7aa959"
        },
        {
          "alg": "SHA-384",
          "content": "0597100022f72e020c9d929bf57ecef91af7574610fb03b4019feba4b25f491a076f03577be2009e66d9001c4c0f8ab0"
        },
        {
          "alg": "SHA3-384",
          "content": "bbdd55a31a4755ef589bcb176283fe03e3c9089d315eab577fef3a9c2d02e632c6ac3fdebbc90a2f0f8ed7974b9f397c"
        },
        {
          "alg": "SHA3-256",
          "content": "c9881b69bde35ea6ff4006877b9fbf91462f911b5b142aa699a45a00867d413a"
        },
        {
          "alg": "SHA3-512",
          "content": "2b9caf58deef687a9bf01abd61a7af4abdb61247a8a966683a18157ee948f1ea424602598dc8f665bf24f7e1e516866298ef0507e9d697cb20dcf60eff2095ca"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl": "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/package-url/packageurl-java",
          "type": "website"
        },
        {
          "url": "https://travis-ci.com/package-url/packageurl-java",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/package-url/packageurl-java/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/package-url/packageurl-java.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.asahaf.javacron/javacron@1.4.0?type=jar",
      "group": "com.asahaf.javacron",
      "name": "javacron",
      "version": "1.4.0",
      "description": "A java library for parsing crontab expressions and calculating the next run time",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5129700c6b2af8e972d52829faae173c"
        },
        {
          "alg": "SHA-1",
          "content": "2291bf1f0996c6ba0dbe6783aa8a473f09cec3d9"
        },
        {
          "alg": "SHA-256",
          "content": "c1866f1c6dc28cec113c3388101d4d0a3816cb3a9025c07d2e71f668a2845538"
        },
        {
          "alg": "SHA-512",
          "content": "b64c450770445f349f2e76f696ed5599ea87c32d5006818122e59b412792a4d71b19a7c13ecbee3b5dbf86dfb0b7350cb1e32615bd5d910e2839e165dcd9b5ca"
        },
        {
          "alg": "SHA-384",
          "content": "0f66c5ddf22ebc720cd2b765c45c639843a00a882e2d19c89e562c564878a5d40a374d491cdff275187156c2dd464724"
        },
        {
          "alg": "SHA3-384",
          "content": "a854ed19a5cf790abd511f309a1674d1050c94567fce257da250de541a63215f78aa7629d6fe53ec1291c59011f3922e"
        },
        {
          "alg": "SHA3-256",
          "content": "a9b1643fdf1d81eab85d8cdc51d02f77dd36860c04f2d0ff717ebddb9cee5b3e"
        },
        {
          "alg": "SHA3-512",
          "content": "8f860b34f901cb5b3feb74037cbe852f5723256c8f5c44c25bb34cda5148fc511a240b9c0f34cd934d3843d55960a3600dd95ba7b0ae0fde5af569ce232ae645"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl": "pkg:maven/com.asahaf.javacron/javacron@1.4.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/asahaf/javacron",
          "type": "website"
        },
        {
          "url": "https://github.com/asahaf/javacron",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.micrometer/micrometer-java11@1.17.0?type=jar",
      "group": "io.micrometer",
      "name": "micrometer-java11",
      "version": "1.17.0",
      "description": "Micrometer core classes that require Java 11",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2097ce8e545bab628688722c03c149d5"
        },
        {
          "alg": "SHA-1",
          "content": "82e3d3b9634255214f4805f1950b077990fbd18d"
        },
        {
          "alg": "SHA-256",
          "content": "38af94076eae93f1385a03a48d9dfc9a8f298d84a096669b0de010bf3b581b29"
        },
        {
          "alg": "SHA-512",
          "content": "17c347abadee7ace63f008f7f5dace1a7fbcefeb9e1429cdc35350c44a7ebb997411d44b89179903304370147da46834500c53e802437205833506090b08f128"
        },
        {
          "alg": "SHA-384",
          "content": "afe6a8f0d8a59baa28f91a2cb7b59cf561db8494025c87d8875e3f38a45b614a614b71883ba3b27e8a984b4354ef5bc6"
        },
        {
          "alg": "SHA3-384",
          "content": "d5a43a29d71f54630c8be5ebb8c15f5e6b3784cbc0c830ffe4c8df4deb117162803b3ffa5276453f58c89d565a42da6c"
        },
        {
          "alg": "SHA3-256",
          "content": "b73f09d2fdd55de443c64ec6696dc15a872bdcc89d41ce39b80f0ee9029f26b9"
        },
        {
          "alg": "SHA3-512",
          "content": "4cf44d872894029c081816e95e901660f866b799c9798b0312eefbd35a923f5ed816233b91187af376aa0480fe604666607e0ed01008cf5b58edde83c61fd11d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.micrometer/micrometer-java11@1.17.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/micrometer-metrics/micrometer",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.micrometer/micrometer-registry-prometheus@1.17.0?type=jar",
      "group": "io.micrometer",
      "name": "micrometer-registry-prometheus",
      "version": "1.17.0",
      "description": "MeterRegistry implementation for Prometheus using io.prometheus:prometheus-metrics-core. If you have compatibility issues with this module, you can go back to io.micrometer:micrometer-registry-prometheus-simpleclient that uses io.prometheus:simpleclient_common.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "939592019806beae5d09180f9f04d95b"
        },
        {
          "alg": "SHA-1",
          "content": "13f882d6ff49ea5088b1b3746775f072d8524ecf"
        },
        {
          "alg": "SHA-256",
          "content": "6fc1177ec572a4bec332d00515859cf4a7adec232d66d2b5bedb4ad96456a4e3"
        },
        {
          "alg": "SHA-512",
          "content": "c17206a911afd54c148f48db141b7bb2549932506a49276e1128098e8d9db8d692ab5a034e775e2df47bb87b1b280904af4ec038c78b1d43766abc8cd6f66815"
        },
        {
          "alg": "SHA-384",
          "content": "b62097cb9bd23b7049eb1f79db0c65abf9d727f5a6f92ee47478b9c8fbaacdacf432d45316a052aa7c5a1b3cd8852200"
        },
        {
          "alg": "SHA3-384",
          "content": "3c0f22c4a67256b5f64d09c1303112d37b32a6767641eea631b9968f4b5e63887a46c580fe43b66057333def32170c74"
        },
        {
          "alg": "SHA3-256",
          "content": "597e03cd6b951e75c77cd1802cb00953329cedd44e3141ec13e12ca3d1e16c2d"
        },
        {
          "alg": "SHA3-512",
          "content": "987889531494af4633c9728c93fbc5f9660095f35b40331d0ace6e4a18236dc59f2a4009e5e81f997dd424305f5d285f0ccec2969501f37448de45d4b8cdea09"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.micrometer/micrometer-registry-prometheus@1.17.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/micrometer-metrics/micrometer",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/prometheus-metrics-core@1.8.0?type=jar",
      "group": "io.prometheus",
      "name": "prometheus-metrics-core",
      "version": "1.8.0",
      "description": "Core Prometheus metric types",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6027749a3ebf49a1811e329c4cc001c8"
        },
        {
          "alg": "SHA-1",
          "content": "4c935de81dc5eee8d9d362b7d8651620bc57e86a"
        },
        {
          "alg": "SHA-256",
          "content": "b5eaf00a8d6f9fd23714af0ed3846e954bbb2e53b484a54b53f18d2155111dc7"
        },
        {
          "alg": "SHA-512",
          "content": "5c45a74ad8a8f657b1b6af9652336a9473451ed36c0a3867bd228404c32d92d718da72234c93d5334edc489e808c252070ab587cf81c077701df533a62800251"
        },
        {
          "alg": "SHA-384",
          "content": "5544ff37d89d09fccbc35da1b5baea80bea6a5b2b84fdb6e4345db8d13a2244a9ea21b8313861fc99e19d070e4698ff5"
        },
        {
          "alg": "SHA3-384",
          "content": "569d3843cb5d301879eef50e449f4c168fb2d2c756015bfb1927e0720e9043c08597dd56196c5df8bc426601bd292bac"
        },
        {
          "alg": "SHA3-256",
          "content": "5d925a0ef4f7fa1e1ba9043666c7f1978a94a930d03683bbeba0d187a1f51314"
        },
        {
          "alg": "SHA3-512",
          "content": "170fc70ea46a5d6358404d88481b09d0ee711511579f0743746a2803973ae21d4b7b6477fe80f3e7f5c658fb80caa57851f306d5746994bbfc00ed6409129812"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/prometheus-metrics-core@1.8.0?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/client_java/prometheus-metrics-core",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/prometheus-metrics-tracer-common@1.8.0?type=jar",
      "group": "io.prometheus",
      "name": "prometheus-metrics-tracer-common",
      "version": "1.8.0",
      "description": "Common Module for Prometheus integrations with distributed tracing libraries.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6b0abe95b78ffd93473515481a702290"
        },
        {
          "alg": "SHA-1",
          "content": "da8fdb7c20900ed548f7d2815669832b4a3160ea"
        },
        {
          "alg": "SHA-256",
          "content": "037ee7c19e97aa6f36d77285812ae2c56ddfd32de4d9b1c759b97779c71a26d9"
        },
        {
          "alg": "SHA-512",
          "content": "f223ac614b611d84b2d7e73524e1fd15f3a657de9710f871ea3165fdd4a6fa7feb713e8f31dd3bd1848ebf247c49dc62577be9cc78ef67397b7aa70457a32f8e"
        },
        {
          "alg": "SHA-384",
          "content": "3d627f4062e1234a3f28306dd30d03d3a8bc995cf7737c0c56610755792abc3feb5a9a64bca0fc8257e1f03736422e59"
        },
        {
          "alg": "SHA3-384",
          "content": "e79e5387f472541b3199fef843201874772bc21325e67f9c33bcdae9b6551c8469a9cdb2c893bcbfc3332497f908fa8e"
        },
        {
          "alg": "SHA3-256",
          "content": "de3acc7c05e3696a706f6532687dbba28e8e107fd5657ddb5703f5081fce991e"
        },
        {
          "alg": "SHA3-512",
          "content": "937766048abe3e584b276148bb43a29ef0813b7a28389013e8b20ad13fa06beb56e6329af00e3bbfd18fc7a97a2c4f8c03e456c1dcf6a0ef00e5f76cb1ef7075"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/prometheus-metrics-tracer-common@1.8.0?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/client_java/prometheus-metrics-tracer/prometheus-metrics-tracer-common",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/prometheus-metrics-exposition-formats@1.8.0?type=jar",
      "group": "io.prometheus",
      "name": "prometheus-metrics-exposition-formats",
      "version": "1.8.0",
      "description": "Prometheus exposition formats.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "041b85f36627e875956313f22c721896"
        },
        {
          "alg": "SHA-1",
          "content": "61e073246bec7dcb8ad2f060af4385a0c37e5c86"
        },
        {
          "alg": "SHA-256",
          "content": "1fdc5caa726f3d6cd60959894bf1c1ba12cc8e3e2283439915b9d689ebd845d0"
        },
        {
          "alg": "SHA-512",
          "content": "aa4bd1a4ffd0d275ac1c6f90b47f3c679e40adc044b2be808a521106e261ddfa168ab23674f409d8ae823dc031acd4833cda145d6135d0a06e3fcba0d88b2b98"
        },
        {
          "alg": "SHA-384",
          "content": "07d32c9a9464d1388aa57964da5da7fb5d52569433e3e013e3df1ef896882a6ef6cb6d368e3011defb05c79ad5323881"
        },
        {
          "alg": "SHA3-384",
          "content": "6e82c37e54bf8a4a3b0323b7a0cf07345208504d0728ed726c9ac8156e1adfcd7af9bd5050856604c3b33659fa1ba68a"
        },
        {
          "alg": "SHA3-256",
          "content": "f444c67ea68d3bd87448e7dcac48035f1d0e404ca25b0d3d89b4acbb9883b04f"
        },
        {
          "alg": "SHA3-512",
          "content": "5dd20a1356e47bf97d52956c2ccb822f6bcce808b4e4db4b515621a5d9a793f04510fc7317cbf6167d1b53f79f9b3d9eda28f511972586000ced9c02b611fa4a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/prometheus-metrics-exposition-formats@1.8.0?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/client_java/prometheus-metrics-exposition-formats",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/prometheus-metrics-exposition-textformats@1.8.0?type=jar",
      "group": "io.prometheus",
      "name": "prometheus-metrics-exposition-textformats",
      "version": "1.8.0",
      "description": "Prometheus exposition text formats.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "3f3ce238e642c1055a9e6abe08c55c4c"
        },
        {
          "alg": "SHA-1",
          "content": "6fa37bb0e23926b4fd90f5a05063522ba426a6f0"
        },
        {
          "alg": "SHA-256",
          "content": "17b6e78ad224cb1921e66ea622aea7fc00f143e292c540db8dc1a9af5cf660bc"
        },
        {
          "alg": "SHA-512",
          "content": "844b2161bc6b3bf90b31946111307c64577b2e1a3f38c14f9991c4256f42785a61c5177c6e94f145663d3c5524446a11a52bc2cb4ee11558e6f81080d1b645a9"
        },
        {
          "alg": "SHA-384",
          "content": "b63b0e7849c86322c25a082acbf54b4a480dcfb1fb0efe62f985f5552351457267fb5f674c4f76ad8a3d80baf32579f6"
        },
        {
          "alg": "SHA3-384",
          "content": "2d312d67e7ffc95ba3221429c151142810aed7778a86c9b837493fab893ba1310737b415a2208e03952b5e7e9e475c37"
        },
        {
          "alg": "SHA3-256",
          "content": "52c6cf55bbbdb75cf79de1b32b798649fcca39598e98e84afbc120e16ec97908"
        },
        {
          "alg": "SHA3-512",
          "content": "8fd18499d32632058e90a5423f553e6b0e15b5be66feec7cb7c771eef5ae248fda106ded4b3977397d354c6a5dd754c4df92e56982d7b683e315018878e9bc81"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/prometheus-metrics-exposition-textformats@1.8.0?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/client_java/prometheus-metrics-exposition-textformats",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/prometheus-metrics-model@1.8.0?type=jar",
      "group": "io.prometheus",
      "name": "prometheus-metrics-model",
      "version": "1.8.0",
      "description": "Data model for read-only immutable Prometheus metrics snapshots.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "65e4674cf71489a48743c8dc1c5cb2b4"
        },
        {
          "alg": "SHA-1",
          "content": "cd79bf59ba6d5c014e2b7380f83c9359d68445ef"
        },
        {
          "alg": "SHA-256",
          "content": "18a5c698073306b46234280530ab6e36046b14fb681aa42fac640a94865246f2"
        },
        {
          "alg": "SHA-512",
          "content": "07e2daf274c77909ccad0db03bd26855d12e8136b507095d3edefb655154e84a0c2b8ba614915cf11081ccda460037ff26f3819b14573055387385bab76365ff"
        },
        {
          "alg": "SHA-384",
          "content": "d179bd56dafb74fb371703f237629fde4517a9d3d1628c75a3760b0c37703f5a4f3679c8313759d08e3ca2637bc0a349"
        },
        {
          "alg": "SHA3-384",
          "content": "beb5c671bd3c41e7848d8313292663af66a9769861e60f8e9da6e0ed0b7aa9e9e2fca4428bee8624be445fa7640d710f"
        },
        {
          "alg": "SHA3-256",
          "content": "02aec34d9cb5469ff6acfebbeeb2506b9d1d5d6c62498cb160462f537c8e34bb"
        },
        {
          "alg": "SHA3-512",
          "content": "9ac122b0965b568e4e97380aeee925920ace12b52ad834a6dcfebd38db454456c99c2e2a5921423151535769266cedfb17b4807e6550a6fb7d6a136d0588d143"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/prometheus-metrics-model@1.8.0?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/client_java/prometheus-metrics-model",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/prometheus-metrics-config@1.8.0?type=jar",
      "group": "io.prometheus",
      "name": "prometheus-metrics-config",
      "version": "1.8.0",
      "description": "Configuration for Prometheus metrics and exposition formats.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0ae891c60ebd0e7d975e71b2d6617ff8"
        },
        {
          "alg": "SHA-1",
          "content": "42e6da5241a6e66ccb788da6fc62a6e6c588658d"
        },
        {
          "alg": "SHA-256",
          "content": "7b16c71dbbe9f6e9b2e9afef15746a371a7961229f4460ebe0157e8b711969d9"
        },
        {
          "alg": "SHA-512",
          "content": "aef0713b26155660368959a88dcd686a7771be77b1ada53b7034509867640e577877a60bdcd86c19f864908d3061a8cb8f0d455d21ea2524bf3916bbc852e732"
        },
        {
          "alg": "SHA-384",
          "content": "660524b1f404da8573060a72c1d16d8b761ed7498c7dbdea33fb6574473934c9217cd75439b2eb1a58fb6d392e48195e"
        },
        {
          "alg": "SHA3-384",
          "content": "753a50a04115b6daf5d55c08b30c977196c9bcfa2afd26cca2f6b9d961002e8dc96915ea87e417ac7b3b27d0b90c07c6"
        },
        {
          "alg": "SHA3-256",
          "content": "58ed9ada52e5bb07902867b484547f642e086049679f545e62dbff23455a168d"
        },
        {
          "alg": "SHA3-512",
          "content": "cd92ac1ac4d098ce46d6952f6251d562bdeb306e8fd17db07b61c1eed25c5e9aba54634f07d800da8ac44eb76272259def05df6c9edcf19831935ad236eef259"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/prometheus-metrics-config@1.8.0?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/client_java/prometheus-metrics-config",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.mweirauch/micrometer-jvm-extras@0.3.0?type=jar",
      "group": "io.github.mweirauch",
      "name": "micrometer-jvm-extras",
      "version": "0.3.0",
      "description": "A set of additional JVM process metrics for micrometer.io.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c63df9d0f3a3f2297052741dfd275e94"
        },
        {
          "alg": "SHA-1",
          "content": "86fce8e8a3bffaa50f87e5d67427419b7b5c72d3"
        },
        {
          "alg": "SHA-256",
          "content": "9e9699ddddf1d1be033eb99ac2b7b4a2f2213b7ce2ad946b13e943990e8bf223"
        },
        {
          "alg": "SHA-512",
          "content": "d71d7ea0868c7d55ab0c0f668d5461ff4b27e36ebe60c12036a652690ca12d701f941fa44f075c8ad3bf0e10a7706c90fa42db378b99df6a2594f050fbe8f054"
        },
        {
          "alg": "SHA-384",
          "content": "36353c016cb1be7637eb202b60bfa2a2eb2044506e8f5855eedae96c1e1f610dcdf1ca0539b81e99d39844b6c4b2b2d5"
        },
        {
          "alg": "SHA3-384",
          "content": "2067d2f63917f8cfde473c081ccf8b5d0ff7428ad0904d2649b65822e6d3de1e96c29b4956f445c34319de522af8a87a"
        },
        {
          "alg": "SHA3-256",
          "content": "c7131c9c0dcc8fc90e60e5ea5b9ca94844c391fb9afc83ac9cce2f0296caf3b9"
        },
        {
          "alg": "SHA3-512",
          "content": "bc5e6b0ee1c4ab411114585b8bd26fc19a9c14861811bdea97b83c02bc4ae17498cbbd9d7198e9b3c23040d566a41f1500a0980d63847fe85b5cf0bdd357f1b5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.mweirauch/micrometer-jvm-extras@0.3.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/mweirauch/micrometer-jvm-extras",
          "type": "website"
        },
        {
          "url": "https://github.com/mweirauch/micrometer-jvm-extras",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.pebbletemplates/pebble@4.1.2?type=jar",
      "group": "io.pebbletemplates",
      "name": "pebble",
      "version": "4.1.2",
      "description": "Templating engine for Java.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6d20632243292dadc46ab7d02084c8b9"
        },
        {
          "alg": "SHA-1",
          "content": "a29bdfb56da29d41fac5a34f953082f5bee883ff"
        },
        {
          "alg": "SHA-256",
          "content": "bd4021cebeb3d34ca80dc1e406b6ec23baa3ead4b9b82d5282fdacc64f655cd7"
        },
        {
          "alg": "SHA-512",
          "content": "784924f3e2c257bc8aada40114213440bffb1c14d68fd7cdf8849a6f7783358348ad52245555b635e7043a854d9f433866caaf78f002190f2545617b202959d0"
        },
        {
          "alg": "SHA-384",
          "content": "93fb5aaffa80adee0aa2e7d0bcd2e28180559a0ef4d8517307951340f3d7476111253e17b98590ca80960cbb6eec556c"
        },
        {
          "alg": "SHA3-384",
          "content": "d12e78bf915681f5c2d99867b02ba8b3d3b90704c7df221b86a7984154724e089d6866ddaa8b2864181bbff75315d688"
        },
        {
          "alg": "SHA3-256",
          "content": "37b7c73535d329214f3fe4ff224555b10e6d72f7226dc5a02465229266babf74"
        },
        {
          "alg": "SHA3-512",
          "content": "17a9c905267453131adcf03f774790afcffdb064231184967b79fd392339c2f12a10cdd60bad5dc25697fbf1a6271ef78ccb27afdf145138aa344cec22f79bce"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/io.pebbletemplates/pebble@4.1.2?type=jar",
      "externalReferences": [
        {
          "url": "http://pebbletemplates.io",
          "type": "website"
        },
        {
          "url": "https://github.com/PebbleTemplates/pebble.git/pebble",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.unbescape/unbescape@1.1.6.RELEASE?type=jar",
      "publisher": "The UNBESCAPE team",
      "group": "org.unbescape",
      "name": "unbescape",
      "version": "1.1.6.RELEASE",
      "description": "Advanced yet easy-to-use escape/unescape library for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d95ed94e1624e307a1958ee105ccbf39"
        },
        {
          "alg": "SHA-1",
          "content": "7b90360afb2b860e09e8347112800d12c12b2a13"
        },
        {
          "alg": "SHA-256",
          "content": "597cf87d5b1a4f385b9d1cec974b7b483abb3ee85fc5b3f8b62af8e4bec95c2c"
        },
        {
          "alg": "SHA-512",
          "content": "6918e9579b06721942fdcd91e401f5b996fb4eac13056dbafdf594661f355a34874eb5266784bc2c4f82df9fdd9e219d71a96f52945a354f01665f85f8166bb3"
        },
        {
          "alg": "SHA-384",
          "content": "1b808b67c784b69afea64364ba4c0d433c7f042c512f5c18f07d5388fe7ac4741913f696424bd8fbde147383cfb3d8f9"
        },
        {
          "alg": "SHA3-384",
          "content": "6525bd20a12ff43a0089c0d59369574ae6c01e2b4b1aacf466847d4433ae403db08404a9b59be397c3034f972bcd6b06"
        },
        {
          "alg": "SHA3-256",
          "content": "a190c9bedccff959d08db12fe7080437fb4e98f05516b39d6540be718e151cc6"
        },
        {
          "alg": "SHA3-512",
          "content": "5d7b5edc0c2a0d47c9625936c14b4122330b96cdf54260fe2a6468289c2f4cbc4ee19770c1144acfa702f2f058a81544b4aea9258fe0e15166a1a331736d7b77"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.unbescape/unbescape@1.1.6.RELEASE?type=jar",
      "externalReferences": [
        {
          "url": "http://www.unbescape.org",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "scm:git:git@github.com:unbescape/unbescape.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.protobuf/protobuf-java-util@4.35.1?type=jar",
      "group": "com.google.protobuf",
      "name": "protobuf-java-util",
      "version": "4.35.1",
      "description": "Utilities for Protocol Buffers",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "49090d6c9b1b48292ae31398364f8843"
        },
        {
          "alg": "SHA-1",
          "content": "3ea4772e5b79ba8ff3050bc85252a1dca36711f8"
        },
        {
          "alg": "SHA-256",
          "content": "ed75aaf651a243a943ae73413acf96cb4b02fdae14a11ae05c8e66a4489e23f3"
        },
        {
          "alg": "SHA-512",
          "content": "b1281b790bc9f4376ba5f6e829ca8d8211f3cf7cc8c81c825c90f314ab2d787a082925888a6c9dda403ec558edff132edaf82afc60a96e5fef33d0cf81430dab"
        },
        {
          "alg": "SHA-384",
          "content": "3dea5f9bdbbac6f3dbcbb77a7aeeaa36e2b0c1d3dfd6091d6404fae7ef785c84ea9abb9195780777d6215ecb3f9dd344"
        },
        {
          "alg": "SHA3-384",
          "content": "dac81d25c1881ed7d421e747e5d83ac5676ae5f46774b3230c07acc96b9b938a1e636ab1d9cad279f6a5c8fea9e5c370"
        },
        {
          "alg": "SHA3-256",
          "content": "819013607a885e4f8e8e0b815f35e6e68c765a6db1a078b3f3fb2915cdc9dd53"
        },
        {
          "alg": "SHA3-512",
          "content": "791f426805328253d2c312f736a777dbeed4fd18ab0b6c7c6b6f2fbf4dd7315af450b8346af7fd99e501f1236df25b3674fceb792c8716d52341fc0e3c833fd1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.google.protobuf/protobuf-java-util@4.35.1?type=jar",
      "externalReferences": [
        {
          "url": "https://developers.google.com/protocol-buffers/protobuf-java-util/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/protocolbuffers/protobuf/protobuf-java-util",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "group": "com.google.code.findbugs",
      "name": "jsr305",
      "version": "3.0.2",
      "description": "JSR305 Annotations for Findbugs",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "dd83accb899363c32b07d7a1b2e4ce40"
        },
        {
          "alg": "SHA-1",
          "content": "25ea2e8b0c338a877313bd4672d3fe056ea78f0d"
        },
        {
          "alg": "SHA-256",
          "content": "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7"
        },
        {
          "alg": "SHA-512",
          "content": "bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804"
        },
        {
          "alg": "SHA-384",
          "content": "ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4"
        },
        {
          "alg": "SHA3-384",
          "content": "9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1"
        },
        {
          "alg": "SHA3-256",
          "content": "223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff"
        },
        {
          "alg": "SHA3-512",
          "content": "3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "externalReferences": [
        {
          "url": "http://findbugs.sourceforge.net/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://code.google.com/p/jsr-305/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.code.gson/gson@2.14.0?type=jar",
      "group": "com.google.code.gson",
      "name": "gson",
      "version": "2.14.0",
      "description": "Gson JSON library",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "43b20830936ec97d8df6b174e3509d9e"
        },
        {
          "alg": "SHA-1",
          "content": "efc0e34ede4e3204eaefb84a00e55e8c86634382"
        },
        {
          "alg": "SHA-256",
          "content": "2cbd119bf1961c28788310963dc80ba65f58cdeec1dd139c8bdb1240faa2c36f"
        },
        {
          "alg": "SHA-512",
          "content": "d040d19a47ca2df33365493f9813a1d0a40b91685f7d87ca445b98d37b4c1b801314aef87940dc8b43dd1b0b96f6d5e6e4296778bf1af8dbfb1091425b37da21"
        },
        {
          "alg": "SHA-384",
          "content": "fb3f4db322b691e37e48df3eda60b8a216d1136619f9e354aa5e3ee7aa0b4afab985ae9510c16a6fe05ea674417b4cd6"
        },
        {
          "alg": "SHA3-384",
          "content": "7943b642d76b35f1e322ec7753c4de85cecc233d4cbd79582e93cf3551896c436f3bcc1166f51789470dec715f515312"
        },
        {
          "alg": "SHA3-256",
          "content": "46eafa830748a2fde4dc595d2aaf94417bc2956570f8406dc000b323738f8764"
        },
        {
          "alg": "SHA3-512",
          "content": "ba3abdb15073b5159782f05dbc440b76139d1d129d80a5cf98b035c399a405dec39b9c7fa7e6d8e5a2676f10fda63ed8b817538a8504ef381992a91fa1832b68"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.code.gson/gson@2.14.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/gson",
          "type": "website"
        },
        {
          "url": "https://github.com/google/gson/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/google/gson/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.errorprone",
      "name": "error_prone_annotations",
      "version": "2.18.0",
      "description": "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "64145d0e7fee5a69ed7b84cf402de998"
        },
        {
          "alg": "SHA-1",
          "content": "89b684257096f548fa39a7df9fdaa409d4d4df91"
        },
        {
          "alg": "SHA-256",
          "content": "9e6814cb71816988a4fd1b07a993a8f21bb7058d522c162b1de849e19bea54ae"
        },
        {
          "alg": "SHA-512",
          "content": "3cea86be94bb8ae40d21ad4bf7d7f6b2233e89593b7b741ad84c78840cd3837bb5136f52e62fe9ae0953d7b190c46ad3edc102dfa97b4c7ea472a80206bf5db7"
        },
        {
          "alg": "SHA-384",
          "content": "7622eb33f83f03ab32b710b36c2fe836e24c5318f65fb8c0631a99507ca3ae65c2df8e33b63a5ce853b9cab6d9cb32e5"
        },
        {
          "alg": "SHA3-384",
          "content": "1ea52a5ce2a9ee1a960dc2a1bbe4b009d4d6a4448498e4cd76401605fa877662911e8c93b2b8bfda57bedc56c83f10a0"
        },
        {
          "alg": "SHA3-256",
          "content": "ed53f4295da75753267f241315352c4a39e60796f04e1c0c12d29c3a38be48ed"
        },
        {
          "alg": "SHA3-512",
          "content": "8266b313bd4e1170daf60642e838841370d99bc24b2a1f91825ca22037a6a30ff15cc76069f8e8770f1dc12772c277ee1320de67e815041697d93d6d7ba884fb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
      "externalReferences": [
        {
          "url": "https://errorprone.info/error_prone_annotations",
          "type": "website"
        },
        {
          "url": "https://github.com/google/error-prone/error_prone_annotations",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.2.1?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.woodstox",
      "name": "woodstox-core",
      "version": "7.2.1",
      "description": "Woodstox is a high-performance XML processor that implements Stax (JSR-173), SAX2 and Stax2 APIs",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "fb51be19a13a46002eec7061ff925f01"
        },
        {
          "alg": "SHA-1",
          "content": "68867a734916adfb379bc6881df6e1d8b575edb9"
        },
        {
          "alg": "SHA-256",
          "content": "95d5a916ab82aca0a8c4ca8a2cf7e4fd7eab18817c24f1fdc7738e15d2a58845"
        },
        {
          "alg": "SHA-512",
          "content": "347261a66146846eca9b4dd9251403a9b6671eb027537ab4784442d786b1f1e68a813c611c5e0f51be1424c98656b4f34f50b0c81a861106d089dda938d9fff8"
        },
        {
          "alg": "SHA-384",
          "content": "cf53cf017f70b9e8210bdfc476283cc8c8e877e69caef7ef995573c61704bd29bd239850879b01ccf85a04e09e32952e"
        },
        {
          "alg": "SHA3-384",
          "content": "332333f351bfb098b550546e593b9de1863d6c8da6bb6cb91651a9ef05e14db91a063248dd0918c8921acca3a522f3aa"
        },
        {
          "alg": "SHA3-256",
          "content": "9960ce63d8488dabf88ac193d6b72c77345f48d8dcbdf1a27add4bce6225376f"
        },
        {
          "alg": "SHA3-512",
          "content": "bf65e6c02097ecfd9311ecaef6be932e0b67d062c46abeec05e520a7f02c2e8e3e7c20a157d5dd64d027dc1e4499526fefdaca6f1c2b947ba086a86c52dbd458"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.2.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/woodstox",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/woodstox/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/woodstox",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.codehaus.woodstox/stax2-api@4.3.0?type=jar",
      "publisher": "fasterxml.com",
      "group": "org.codehaus.woodstox",
      "name": "stax2-api",
      "version": "4.3.0",
      "description": "Stax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6eec6c1cb7f63d8a8098cc5569a47e99"
        },
        {
          "alg": "SHA-1",
          "content": "59251773c44122e8d1366f68884e29dd784e141b"
        },
        {
          "alg": "SHA-256",
          "content": "7c805f36129ea9fa42b696093b7ae1eb20bb6ccec65c8280d6f33db5609ca5e1"
        },
        {
          "alg": "SHA-512",
          "content": "4d1bf5cb3a803423c5420050c245227b944acb4ced29e8095e470bc3a742d6a057c484fa1d531b58933ed8f81d52d5bbfc8406acc4241f6e4ec4c5116fe30d53"
        },
        {
          "alg": "SHA-384",
          "content": "664bf1044e8c9e80083d02d2ccdba3c3953a515594b6a262baef76d1cf3790da9d71eb853806c27c94721e65983d72a3"
        },
        {
          "alg": "SHA3-384",
          "content": "298f2dcfffb3fe28229452770a969b2138008a23c508599a13303f48f21d3458c61ad19df53a20d6447c0f8ef56e4216"
        },
        {
          "alg": "SHA3-256",
          "content": "5a3bc0bf1b00df535d572ae16c62817788bea0f7d02a8c430fadd4cf4df95f5e"
        },
        {
          "alg": "SHA3-512",
          "content": "5d4e4618b22accb1fee19d6d2702dcd0538df7f9e3b7aa8590e7554811770bb317d4bab1eecebc4b31df49a349c68e746256b3e9cca5fbea6f102df411c0e678"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.codehaus.woodstox/stax2-api@4.3.0?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/FasterXML/stax2-api",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/stax2-api/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/FasterXML/stax2-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.nscuro/versatile-core@0.21.1?type=jar",
      "group": "io.github.nscuro",
      "name": "versatile-core",
      "version": "0.21.1",
      "description": "Java implementation of vers, a mostly universal version range specifier",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "de7c083e49528f2f2992a2ba5e068177"
        },
        {
          "alg": "SHA-1",
          "content": "612e31668794f98597aa7870edd0ec212ff142ae"
        },
        {
          "alg": "SHA-256",
          "content": "d3f23eac27ff9ffc24338f8ac536a96ade30451dc6a03fd21c01634f1f7572db"
        },
        {
          "alg": "SHA-512",
          "content": "0dbe59e4013687678c19f1b0ac606fa16c30ea05a9003e03f855354949fd854a9dc3455609349578bf6c6270deb47154ebe3165e036a2dfdb8ed9099766d0d00"
        },
        {
          "alg": "SHA-384",
          "content": "624edaa0530e4828f82b6f0bc393b242345ad415a6b021eda73518e3073d858d4119919dfc3158dab5a35a9efad9d5d0"
        },
        {
          "alg": "SHA3-384",
          "content": "6591136f0dbfc7bd76ab5eac64828814a20d84d3ba37311e34b4f07aab7de55d509954e9bf9afc888b0ef7992ce090d6"
        },
        {
          "alg": "SHA3-256",
          "content": "08bdc00235c138fbe4d2e86c74b2c94d6d49adb94b8044ea75d3a6cf4fbebaa1"
        },
        {
          "alg": "SHA3-512",
          "content": "ea97f252473890393aabfcb74aba835221ef0d9a02f7776c91707b2f0b36e05e75535ea52ce593cb1b19fefbcb8c440285417c4c1824d8ab473507a76825dac3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.nscuro/versatile-core@0.21.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/nscuro/versatile/versatile-core",
          "type": "website"
        },
        {
          "url": "https://github.com/nscuro/versatile/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/versatile-core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.nscuro/versatile-spi@0.21.1?type=jar",
      "group": "io.github.nscuro",
      "name": "versatile-spi",
      "version": "0.21.1",
      "description": "Java implementation of vers, a mostly universal version range specifier",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "41fed386023461b4161422f7e8b39e4a"
        },
        {
          "alg": "SHA-1",
          "content": "29854f584869ed4ee736efb7b6941433881cc2f0"
        },
        {
          "alg": "SHA-256",
          "content": "dc27b099871832f823886f8e4f7850ed35db56817b6f2f0ba38417bd1c86bdd6"
        },
        {
          "alg": "SHA-512",
          "content": "72a0f8bdea14332bcaafa47d2bf0fe4f8bd62df8579999cd2d407ab344f773833b1e0c31384b9cc9219ad6a51fa4f950c3bd49181df4121415024ebbe7b61a23"
        },
        {
          "alg": "SHA-384",
          "content": "df769c43a4b995eddef8516a9fbf13955c161d72fae3151b13f0c0da85582d3c5111a65086ef6a46d8876539f36de89f"
        },
        {
          "alg": "SHA3-384",
          "content": "e5fa70c9f35bee95ffdf96022f4cb67458fee8cd037d4e77bb60e3c65077dc4019725e2a7c17805df0b6b3beebaafdb7"
        },
        {
          "alg": "SHA3-256",
          "content": "d9b287eaa1d34db6e4455b2f1c55a3774fa0fcea81fc684144d245e6143473dd"
        },
        {
          "alg": "SHA3-512",
          "content": "b67093bf2b08c652325b796ae31d372f54014783df5eb247b6299fe18d2e3ff034549132fb8de409b19ee8ad57441dfa6e20ff4efe4c96b38c13005b9b1d153c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.nscuro/versatile-spi@0.21.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/nscuro/versatile/versatile-spi",
          "type": "website"
        },
        {
          "url": "https://github.com/nscuro/versatile/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/versatile-spi",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.maven/maven-artifact@3.9.16?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.maven",
      "name": "maven-artifact",
      "version": "3.9.16",
      "description": "Maven is a software build management and comprehension tool. Based on the concept of a project object model: builds, dependency management, documentation creation, site publication, and distribution publication are all controlled from the declarative file. Maven can be extended by plugins to utilise a number of other development tools for reporting or the build process.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6005ab2198a19a41cd3cf59618f9abc1"
        },
        {
          "alg": "SHA-1",
          "content": "1176c6579a8a68508c3479ef72d514e71c98ddca"
        },
        {
          "alg": "SHA-256",
          "content": "54cc1c1ef932e3d4a903352111b42b4d3c3ed8e7a1d0de73b625309d9c3ad3e8"
        },
        {
          "alg": "SHA-512",
          "content": "9688ea1f519c113dd4f78b63e6ff2256b65c2fc13446e5c5c776ef4e330a1087311a89fd4212c3a75a8a327d44a855aa98e9e6215c22416cc91cf6e0db48942f"
        },
        {
          "alg": "SHA-384",
          "content": "d0c7c604f82f74eae1b820d88d621fd87ebc567bd7159ce00364a60cb065da1208341ed05f0f8277afcdfbc85544da8f"
        },
        {
          "alg": "SHA3-384",
          "content": "55c50e32471d19532c40489cd76ed77015965ce4a9137fb8daba5c40702ffd9acca4bf54d9d449a2ff6b1d67364122e9"
        },
        {
          "alg": "SHA3-256",
          "content": "69ad66e3d9391c3ed5b6e7bbeb6731568b13d93ad3e795a85b67f7cea15b7008"
        },
        {
          "alg": "SHA3-512",
          "content": "48b82cdfecaee78545011e0c5ada2fa0bc1ea8bf21493da92b39e7742f6cdefb32c5f4e75efe8991d1946c1bbeb345667a632031c2844d3cf440241d92887a70"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.maven/maven-artifact@3.9.16?type=jar",
      "externalReferences": [
        {
          "url": "https://maven.apache.org/ref/3.9.16/maven-artifact/",
          "type": "website"
        },
        {
          "url": "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/",
          "type": "build-system"
        },
        {
          "url": "https://maven.apache.org/download.html",
          "type": "distribution"
        },
        {
          "url": "https://github.com/apache/maven/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://lists.apache.org/list.html?users@maven.apache.org",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/maven/tree/maven-3.9.16/maven-artifact",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.codehaus.plexus/plexus-utils@3.6.1?type=jar",
      "publisher": "Codehaus Plexus",
      "group": "org.codehaus.plexus",
      "name": "plexus-utils",
      "version": "3.6.1",
      "description": "A collection of various utility classes to ease working with strings, files, command lines, XML and more.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "bf77c7ef462342bd42ce245be9648540"
        },
        {
          "alg": "SHA-1",
          "content": "9dce1b9c69b197f453223e45a2cb9fa0cd48b424"
        },
        {
          "alg": "SHA-256",
          "content": "05a63effd67e2d6b9d610cc82e2bd7473289d34802e57a529b28110f28af5679"
        },
        {
          "alg": "SHA-512",
          "content": "cdf52ae14e19fbc040a8ce9eb56f25fb6f3c1c2703b8cb7815329f06f675a284934e4fb19acedb49a24abc8ba28493fd5aedf15f0ac8033d123c71620de0ac98"
        },
        {
          "alg": "SHA-384",
          "content": "a02b453e4590c5028dcd94a72b818eb63ff7831cda8337daef63f774c1972b920b9eaae979867be34d9d4843e8296d42"
        },
        {
          "alg": "SHA3-384",
          "content": "28541c0fccf50c5eafa4b420c1453a77a8db9466b4da35f94ca745100f5b8b5a3f9ac2b3ab7f1008edb5ce33204a3ae2"
        },
        {
          "alg": "SHA3-256",
          "content": "f7353bfe893ab5932fe443ef26d2a9d9541f1f62105f35f923bd9b6b94808683"
        },
        {
          "alg": "SHA3-512",
          "content": "a7d95eaf9c02a688bcfaa1702c555eac1975190abda0ca626f3e41cec2492125e712c561a3cc67ed0d76a1b174ff03a8cd05afc0d377af1ff4c74a846546675f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.codehaus.plexus/plexus-utils@3.6.1?type=jar",
      "externalReferences": [
        {
          "url": "https://codehaus-plexus.github.io/plexus-utils/",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/codehaus-plexus/plexus-utils/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://groups.google.com/forum/#!forum/mojohaus-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/codehaus-plexus/plexus-utils/tree/plexus-utils-3.6.1/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.vdurmont/semver4j@3.1.0?type=jar",
      "group": "com.vdurmont",
      "name": "semver4j",
      "version": "3.1.0",
      "description": "Semantic versioning for Java apps.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b39112afda0af7dba1f160f7284d402f"
        },
        {
          "alg": "SHA-1",
          "content": "0de1248f09dfe8df3b021c84e0642ee222cceb13"
        },
        {
          "alg": "SHA-256",
          "content": "0f33724dd012099f0737e3d9203e28f4a804435526998d4f5841993058651cb8"
        },
        {
          "alg": "SHA-512",
          "content": "4b7cc68857eb7633d0ef8a6bd8101243d0300537e51fac1380ebb944a8708f0f75ec3fa10186845b7e3a2d7988ae0bf22369909a52b6d95b5faaa9bc96dbbe64"
        },
        {
          "alg": "SHA-384",
          "content": "5e193b3ae6a6f34fb38abca0a2f9124daa0401238bb18015f8dfe4431da87525afa82921dd57754a1095d30451dfc363"
        },
        {
          "alg": "SHA3-384",
          "content": "62d09d2c1151a5108b55f04c8cf520c1b1b9e96ff045973e7aa729ff79522cf6772af7808c7435e6679620bdd0b722bc"
        },
        {
          "alg": "SHA3-256",
          "content": "fa98f695faa97464ce8b90f8c93b0179843ab2cc8a9e09d09586523e1cf4f401"
        },
        {
          "alg": "SHA3-512",
          "content": "6b24821607cb2040dd649c569e01cb87af0b5b92488111655ef15eb675a1e9f33029616c154253b4a865c42906b699a44dacf36411f42d062f57ccc60a0b5d42"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:maven/com.vdurmont/semver4j@3.1.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/vdurmont/semver4j",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.postgresql/postgresql@42.7.13?type=jar",
      "publisher": "PostgreSQL Global Development Group",
      "group": "org.postgresql",
      "name": "postgresql",
      "version": "42.7.13",
      "description": "PostgreSQL JDBC Driver Postgresql",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "52ba042322b750121222bd57423003b5"
        },
        {
          "alg": "SHA-1",
          "content": "a6e1bd21b412d6ffb3df23cd13d507bc2cc9e37d"
        },
        {
          "alg": "SHA-256",
          "content": "6e0e4cc2d8cae902084f8a2b18728b073a6fd9d1f87c9d8bff8f298c18185b93"
        },
        {
          "alg": "SHA-512",
          "content": "9c1c4abd2febc8bfb0cedc02b8ec073f0b5ab1fce25956024e2bf81353b0a67e424fbc4cbf8e804e8d92a11f2c6440538ec962de52938516aa5251efff9ab187"
        },
        {
          "alg": "SHA-384",
          "content": "3c74706eed0df6c847aca07a7f5554702887a3345e5da057efd629b3f404eb0f6fd33ddbafa687dfca09ca1fa9185a87"
        },
        {
          "alg": "SHA3-384",
          "content": "617e565389029a213ee778fe88fcdaaf5a21b1f97660726de358b40b9c41d304e6a681b71a27fb77fd017514df2e1346"
        },
        {
          "alg": "SHA3-256",
          "content": "8eb1a86d856497aec0b9c428c215a75f3b8acf8c519a33c538a4c95564db9a95"
        },
        {
          "alg": "SHA3-512",
          "content": "cf48526f5d57e7852351197be9c7698353e29f72c2219cf0af0425e9502046d032ba566f98ee3e5446cd5e2d34c30fec2df3ff784ef93d5c3750dc7dff3dc07e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.postgresql/postgresql@42.7.13?type=jar",
      "externalReferences": [
        {
          "url": "https://jdbc.postgresql.org",
          "type": "website"
        },
        {
          "url": "https://github.com/pgjdbc/pgjdbc/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.postgresql.org/list/pgsql-jdbc/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/pgjdbc/pgjdbc",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.checkerframework/checker-qual@3.55.1?type=jar",
      "group": "org.checkerframework",
      "name": "checker-qual",
      "version": "3.55.1",
      "description": "checker-qual contains annotations (type qualifiers) that a programmerwrites to specify Java code for type-checking by the Checker Framework.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "05361199dc29af8334d1405f28b83109"
        },
        {
          "alg": "SHA-1",
          "content": "3d40699936a66b2d4c1f759f2f1a0446c8cf64fc"
        },
        {
          "alg": "SHA-256",
          "content": "857658c8bdcbff794949a8d9922f88d63ee3751c203c7cd7d21ea97f9e745288"
        },
        {
          "alg": "SHA-512",
          "content": "564b78a1a0e76c756b74c60f9441a43cc5232b5d887bf7a701fdf8ff9e646f2900a10a56254534fa69499dff864338037edfb6d05f59ba52351e1013a522f316"
        },
        {
          "alg": "SHA-384",
          "content": "cd20464a20b4f93e85f5e1917f747696b28803d171fa8d34762b3eac6b4541a0472772c21585fa5f43c1ae188a6dab48"
        },
        {
          "alg": "SHA3-384",
          "content": "1c7d8fe4a8922ef5a739ff7cf52c1a93f3aec79c7024a0e6f827ec865e6c63ee2818ce1d9412d9768bb2f45eb441bc0b"
        },
        {
          "alg": "SHA3-256",
          "content": "9eae4832715938932bbaf8846e4f8d24daf664bc2f368f65a6847644faab7329"
        },
        {
          "alg": "SHA3-512",
          "content": "5be2781a61e995e9cf1b284a9439f32391fc280b41d5b5c34c75539e055be9fd519564caef2f4a96672ad4946fd83ee391126c45d74f30c1ef606e5338dd842e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:maven/org.checkerframework/checker-qual@3.55.1?type=jar",
      "externalReferences": [
        {
          "url": "https://checkerframework.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/typetools/checker-framework.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.cloud.sql/postgres-socket-factory@1.28.6?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.cloud.sql",
      "name": "postgres-socket-factory",
      "version": "1.28.6",
      "description": "Socket factory for the Postgres JDBC driver that allows a user with the appropriate permissions to connect to a Cloud SQL database without having to deal with IP allowlisting or SSL certificates manually.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "95cacda80d1887ef77d787e7eca0c0f0"
        },
        {
          "alg": "SHA-1",
          "content": "119f6562419c22dca08fd5597a9d5e3cdfbb8f93"
        },
        {
          "alg": "SHA-256",
          "content": "97ee115a438b14ac62e7508071c8871ce103379924ffbf4cb72e35a853d33643"
        },
        {
          "alg": "SHA-512",
          "content": "cba45b3ebc46d0c9198ba73228cdfad23e6ccf3e6a6e03cf4a277afdd4884e418ebeabe2efc0ed5c5a014199653de617c78b8fda500049c69c94ed3514d9b266"
        },
        {
          "alg": "SHA-384",
          "content": "7fcbd2907039b19a87a692fec0cdc229f00633a528e592b94902932119c6b15fc67f4b2a42121bcb93fd485f499ba0b9"
        },
        {
          "alg": "SHA3-384",
          "content": "6cbdc8ed5fde0833288dc93f427528fd3d80027adc8c506e44d1dd89fbaa28c9b318746b1490ffa8f65e8a066327549b"
        },
        {
          "alg": "SHA3-256",
          "content": "8f7d5b97d27e3d149df00221628ab7234d3f427d237933ad37d988dc9e53b59d"
        },
        {
          "alg": "SHA3-512",
          "content": "d4d556c1e8be52370b6deaa8c1e875403554bdaaed9665bfa623629080c543e1bb2f4b23ccf2fe7d706111625465602b5a964b2e1ecf237a2c991508ce72c618"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.cloud.sql/postgres-socket-factory@1.28.6?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/GoogleCloudPlatform/cloud-sql-mysql-socket-factory/postgres-socket-factory",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/googleapis/java-shared-config/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/GoogleCloudPlatform/cloud-sql-mysql-socket-factory.git/postgres-socket-factory",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.cloud.sql/jdbc-socket-factory-core@1.28.6?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.cloud.sql",
      "name": "jdbc-socket-factory-core",
      "version": "1.28.6",
      "description": "Core library for establishing secure connections. End users should depend on the driver-specific socket factory artifacts.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "058162dcc97cf61ae34fbcfe4d7651c1"
        },
        {
          "alg": "SHA-1",
          "content": "78a8cb78e9bfbf249f93822e3cda909bdcb65b39"
        },
        {
          "alg": "SHA-256",
          "content": "87b5448cff6bc0811a550c2965fa1ba17d636ea89cd08c3a60fa8fbd9cb2d701"
        },
        {
          "alg": "SHA-512",
          "content": "0a8029e051d53232682a3cd8e8f4dcc0f395423b6e03b7177127aa44974d2422522ed72bb87c0a4f56f264cd9132d727c69896963a6a7d0610a324e1dd009418"
        },
        {
          "alg": "SHA-384",
          "content": "c4050ad61fe090374a18885b80e43c50b197b51c4c703a43846bf6dfe5a8c9a641d565afc99ba82acb4382abc07878f5"
        },
        {
          "alg": "SHA3-384",
          "content": "72164c90ecad7664686c5a16bb4e517f75c97fbfebfc58ac70b96fb652dba2f9f8237b4fc8f818e750cc4145cba3f5cd"
        },
        {
          "alg": "SHA3-256",
          "content": "c738999a28da96e73a4a1e6627beca02c81c6b1281fa1530d79ea117eed2da86"
        },
        {
          "alg": "SHA3-512",
          "content": "9841c551d33047d91ead83aa98a3f65c6d2eed733f1567df1efddccfaaf2467e099d1b9b021582588dab9801bb3477ce12590fc8b5b316e6cfd7693225e92911"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.cloud.sql/jdbc-socket-factory-core@1.28.6?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/GoogleCloudPlatform/cloud-sql-mysql-socket-factory/jdbc-socket-factory-core",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/googleapis/java-shared-config/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/GoogleCloudPlatform/cloud-sql-mysql-socket-factory.git/jdbc-socket-factory-core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jnr-enxio@0.32.20?type=jar",
      "group": "com.github.jnr",
      "name": "jnr-enxio",
      "version": "0.32.20",
      "description": "Native I/O access for java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "cb5113570f8674c401a3025784239528"
        },
        {
          "alg": "SHA-1",
          "content": "b2cec8e40691976e1e2686d92edefa7e060a7798"
        },
        {
          "alg": "SHA-256",
          "content": "8f3062892a5edf03922eaee282ba9ac69d6e3142ad036810a50b15919a85d8b8"
        },
        {
          "alg": "SHA-512",
          "content": "a15f42e4ce45ea4ac903e8e355e672bf0de1d539b510b2ac0ed952a7cd7b0f35c54495c4a8925ed2a4a44f754f105686361dd6d5d9887230d4eb886af90b8a2d"
        },
        {
          "alg": "SHA-384",
          "content": "7983451dcd76d6bcfd2a0307ff963aa87882ab20a308f0affa85a53ff9186fc0442bd279fc3027aaa621465e32e8ea61"
        },
        {
          "alg": "SHA3-384",
          "content": "62b00e6937e6d2497514d0d755ff49b36468c7a2a49451772a98c656ad4330665b03f351b5c81c21acea4cefa89c431e"
        },
        {
          "alg": "SHA3-256",
          "content": "7ac41d4747670bd1e9d670adafeafc0e7a24d409320a827d7d77c3bbdf64789e"
        },
        {
          "alg": "SHA3-512",
          "content": "2750b642fe87f11210e891f5905149349546d9a65adf4436ff58aba89cdddcbd5d1e8fc60e47cba584f19bdc42a531d4f5f73da370b776e035627307d90dd1d0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jnr-enxio@0.32.20?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/jnr/jnr-enxio",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jnr-constants@0.10.4?type=jar",
      "group": "com.github.jnr",
      "name": "jnr-constants",
      "version": "0.10.4",
      "description": "A set of platform constants (e.g. errno values)",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a5a4036fd334522540041b062b304abc"
        },
        {
          "alg": "SHA-1",
          "content": "09f6f23763bf40ea7b56391791f574174914430a"
        },
        {
          "alg": "SHA-256",
          "content": "9a5b8cf9798d9d0331b8d8966c5235a22c4307676e35803a24659e6d76096f78"
        },
        {
          "alg": "SHA-512",
          "content": "608b2c53914aeb3fb36e2fb81a948e5dbec835a9d220d50a4bb9693d4a534414d1bc4c5e5582b196793317fb64fe7617d78d5ec974e6413732940e141201fdba"
        },
        {
          "alg": "SHA-384",
          "content": "dfe87e3b585304854d0dd23d2d5b3a4f00ca47fc52e8e28c6c75f976cc12bbe627cdfcca5fccaf6cb3b2591cf70dee89"
        },
        {
          "alg": "SHA3-384",
          "content": "8d1bf7084c5f34d13fab9b9b77dd095f43f105a7722a0d95fcc4e050e41f608f426914c3ff63573da053a9188e7f30bc"
        },
        {
          "alg": "SHA3-256",
          "content": "842f986856d42bf3703b2b9b8a5db9c8cbd166fafb94d81739dc3ff9469b8ae0"
        },
        {
          "alg": "SHA3-512",
          "content": "b87d2ffb045ed6bcf0d1976933e8ec258132f43b705388c905805e27e6f3b547d212c4eed37dec53541eebf17669365fa88519e8436f22545e56f8fc4215eda6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jnr-constants@0.10.4?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/jnr/jnr-constants",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jnr-ffi@2.2.19?type=jar",
      "group": "com.github.jnr",
      "name": "jnr-ffi",
      "version": "2.2.19",
      "description": "A library for invoking native functions from java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "3f14d83a07419b92cf5a4474c2a9e080"
        },
        {
          "alg": "SHA-1",
          "content": "2b0e946924b7f63b5375840398bfaec50265626d"
        },
        {
          "alg": "SHA-256",
          "content": "0896484223ef8dede16ff08c97f000b4f29a40db18151ad8b9bd8c0b89b7c847"
        },
        {
          "alg": "SHA-512",
          "content": "650443269242324bfe8ba0adb33bd743448a3dfea3a1029e0c892c6405d6379ab7d3fd97a78156a2b1e097dd21c6219559e92d6bb3596247915ad0d7c4cb8448"
        },
        {
          "alg": "SHA-384",
          "content": "f9c827f2477bc2c5358c13893f315acd535e6d21fd2865587f35e1ad22c5ac5eac57bffd8fa710635054c90af0a8a0f5"
        },
        {
          "alg": "SHA3-384",
          "content": "6dbb707f0a8d67e40adceaaf44d2a7288c74623b655f064fe69129bc275ec105cb28d998125f8a0a90c8e19c27557493"
        },
        {
          "alg": "SHA3-256",
          "content": "36946349d7af6c6d2ef4e3847d293fa07a2efbbe68568675550cca0a0d6a07ab"
        },
        {
          "alg": "SHA3-512",
          "content": "a404d027b7da956cfe9ef300cf3339d523073df1dbf818cc6265d73b7c08438eeb150a2d34232d0662314bbe1a3ca35509a314dd41e6add844cb58042bae3e9e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jnr-ffi@2.2.19?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/jnr/jnr-ffi",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jffi@1.3.15?type=jar",
      "group": "com.github.jnr",
      "name": "jffi",
      "version": "1.3.15",
      "description": "Java Foreign Function Interface",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "661a5bc9ace0463ca2125c357cb2def7"
        },
        {
          "alg": "SHA-1",
          "content": "4d5016e7a6042b8b01ec4e55803ef79f684b217e"
        },
        {
          "alg": "SHA-256",
          "content": "ed247e2325586ae036532a46f130811d0af73a0b494c8303fc30ead7d653ca86"
        },
        {
          "alg": "SHA-512",
          "content": "e49b61931371213cf1b30daa1c9ed47c6ab12cce81d248fccbb0fbbedcdf73f626b322cea647510bee1bcd5e0d4cfdc06c78147d424f2a2ef7fe3d6d86183139"
        },
        {
          "alg": "SHA-384",
          "content": "9a91c8e76c5c3d00bd6694f29031534928800e5ed233eef748e540c074067c82c26c01f5a68b73d29c8438a09860799e"
        },
        {
          "alg": "SHA3-384",
          "content": "8d8359c05c08cabff8ce0e6c2b5e555d5172974134500be984531c54df20c58f54d4c67920f52c1aa7ed7fa0d1f463c4"
        },
        {
          "alg": "SHA3-256",
          "content": "966ad023c42aa93fb0716b2f2d0c11665327bb79543264afb4d98a5987cc26c8"
        },
        {
          "alg": "SHA3-512",
          "content": "7f0c6a3e4a00c248731f26d81eed30d88ffe37cf0a4827cf87944736c13f05903903bb7260c70fae46ce80e07e243a92f2378485049b4ba4c02534a84283dbb7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "name": "GNU Lesser General Public License version 3",
            "url": "https://www.gnu.org/licenses/lgpl-3.0.txt"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jffi@1.3.15?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/jnr/jffi",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jffi@1.3.15?classifier=native\u0026type=jar",
      "group": "com.github.jnr",
      "name": "jffi",
      "version": "1.3.15",
      "description": "Java Foreign Function Interface",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5e070ba8b9ee448e4effbddc53bca984"
        },
        {
          "alg": "SHA-1",
          "content": "561b84cb4e96bb8d21b35a3a5bae725ad88d4b1b"
        },
        {
          "alg": "SHA-256",
          "content": "dd54a800877593cfd033d6bdae1b67ebb9b5ca38f9e9b4ae7ea080375371e41a"
        },
        {
          "alg": "SHA-512",
          "content": "f230e39d8c239858821df194ddb0c9c159e39475ee8c6ebeb81dc72f162729c4e3a2d4ff277905dd82a494cbfdadc3ff7cf3f69be1e898b0f1fa4bb848fd1f43"
        },
        {
          "alg": "SHA-384",
          "content": "ab5d732df66611a3697a2a9c3d6359d21ccaeb2616e5216ec4a1ba905a921425d59ba9b5a5268f2bc404e877b6455220"
        },
        {
          "alg": "SHA3-384",
          "content": "028a768f557931875833c4d125ec35a1f9db4ddc82fad41905494ef00d60b13fe3d9bf2a431948dfe296e455bff820cf"
        },
        {
          "alg": "SHA3-256",
          "content": "4b77d991ef1a3ac77397bc0c129ec321d894d00c5480d7cce5d3865e047cffcf"
        },
        {
          "alg": "SHA3-512",
          "content": "6673f10f0e8592f2bf90e1ced2df086a51adafdab57e50c13abd1f6bf504ae6b58cf3c13e78d26922352fac2e2758b465a9e4590a7ef1ed6e921f86d9750e3d3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "name": "GNU Lesser General Public License version 3",
            "url": "https://www.gnu.org/licenses/lgpl-3.0.txt"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jffi@1.3.15?classifier=native\u0026type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/jnr/jffi",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.ow2.asm/asm-commons@9.7.1?type=jar",
      "publisher": "OW2",
      "group": "org.ow2.asm",
      "name": "asm-commons",
      "version": "9.7.1",
      "description": "Usefull class adapters based on ASM, a very small and fast Java bytecode manipulation framework",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8344aea3c8b7d707e9d35a62710e77c9"
        },
        {
          "alg": "SHA-1",
          "content": "406c6a2225cfe1819f102a161e54cc16a5c24f75"
        },
        {
          "alg": "SHA-256",
          "content": "9a579b54d292ad9be171d4313fd4739c635592c2b5ac3a459bbd1049cddec6a0"
        },
        {
          "alg": "SHA-512",
          "content": "81daf5765e387e6aeec5d45c4b9e4e1b471fb4f350931e5a214845c7c657a2142768f6902765e49c0ce2c595962e5d008883cba2e4a40c4bdce8f2e92518d2db"
        },
        {
          "alg": "SHA-384",
          "content": "473ba9b72bd47d2000d127dababdd649fd7738d658cd5b818266cd978e8d3bb2589e431a52bfaa7fb8a03d2345a529f2"
        },
        {
          "alg": "SHA3-384",
          "content": "1a792b9567115e97b81242325de41d3757e8b11dc5c38b4f6b8c9aa34ef8a33b5ef9a7401c725574ee4c36ebb5c0f46a"
        },
        {
          "alg": "SHA3-256",
          "content": "2974918408bf8791d133c96cee74e86f4fa9659faa1faaf886eed3c586b7c717"
        },
        {
          "alg": "SHA3-512",
          "content": "21c2635f5cdee961ea6aedee78589603b0ff1d56ee295d4548e882abe4485a5818a82848a99851592de5a8d09e4c74e406fc0bea9f23e250e58e0e31986845af"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.ow2.asm/asm-commons@9.7.1?type=jar",
      "externalReferences": [
        {
          "url": "http://asm.ow2.io/",
          "type": "website"
        },
        {
          "url": "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail.ow2.org/wws/arc/asm/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.ow2.asm/asm-analysis@9.7.1?type=jar",
      "publisher": "OW2",
      "group": "org.ow2.asm",
      "name": "asm-analysis",
      "version": "9.7.1",
      "description": "Static code analysis API of ASM, a very small and fast Java bytecode manipulation framework",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4cd9e7178dfb85371bba3077e40cd514"
        },
        {
          "alg": "SHA-1",
          "content": "f97a3b319f0ed6a8cd944dc79060d3912a28985f"
        },
        {
          "alg": "SHA-256",
          "content": "85b29371884ba31bb76edf22323c2c24e172c3267a67152eba3d1ccc2e041ef2"
        },
        {
          "alg": "SHA-512",
          "content": "a8bd265c81d9bb4371cafd3f5d18f96ad79aec65031457d518c54599144d199d9feddf13b8dc822b2598b8b504a88edbd81d1f2c52991a70a6b343d8f5bb6fe5"
        },
        {
          "alg": "SHA-384",
          "content": "31620bb948127b811684769f966990170ced469f4b15f30bf22a7a0d28c7da644027cf7c9ffd10f80fcc4cdf377909d8"
        },
        {
          "alg": "SHA3-384",
          "content": "fe5920760dfcbe5dda26d7839ba9ad621a8d2b139994e0d2107873512651cfffdb73e85e635dbad0f9db7cfee55420d3"
        },
        {
          "alg": "SHA3-256",
          "content": "3fe7b153bea627308dbfb2ce682a3c10646a06eee5d34a13acd76e60a7cda240"
        },
        {
          "alg": "SHA3-512",
          "content": "1acd097141b321e440561a9ef759b5b5ab125b42ae02e5806fd026978727740124a483f608db230563fde701161e51f8548a662e29ba12d97ba3d24949b4c821"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.ow2.asm/asm-analysis@9.7.1?type=jar",
      "externalReferences": [
        {
          "url": "http://asm.ow2.io/",
          "type": "website"
        },
        {
          "url": "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail.ow2.org/wws/arc/asm/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.ow2.asm/asm-tree@9.7.1?type=jar",
      "publisher": "OW2",
      "group": "org.ow2.asm",
      "name": "asm-tree",
      "version": "9.7.1",
      "description": "Tree API of ASM, a very small and fast Java bytecode manipulation framework",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e85029f613b6469989cc7cf53fe06b74"
        },
        {
          "alg": "SHA-1",
          "content": "3a53139787663b139de76b627fca0084ab60d32c"
        },
        {
          "alg": "SHA-256",
          "content": "9929881f59eb6b840e86d54570c77b59ce721d104e6dfd7a40978991c2d3b41f"
        },
        {
          "alg": "SHA-512",
          "content": "e55008c392fdd35e95d3404766b12dd4b46e13d5c362fcd0ab42a65751a82737eaf0ebc857691d1916190d34407adfde4437615d69c278785416fd911e00978d"
        },
        {
          "alg": "SHA-384",
          "content": "4363d7d075700cbe6161bf86a0ff1b0e732fe96963010f1fc66f7701e8139673cc4fba81ae2937d25e0a5032368b0d5a"
        },
        {
          "alg": "SHA3-384",
          "content": "d22a3eeb20ee739bfbf3535655e7d25e3b3910f13ac86d9e4c29b4e0b19efd53ab65c1d843bbc0e289a8744d27e09453"
        },
        {
          "alg": "SHA3-256",
          "content": "9d57ddbdd10cda7f9bc45bc0bcb54143f7ea1b802540cf3029ab7e31dfc59df7"
        },
        {
          "alg": "SHA3-512",
          "content": "1352a6d8caca6649bc7e1c8e209a1e3864ac8eac8d6af2f11e2701eab5304a4cff41355828ed0c69adc8fc3b8d639d607bec574834e8e3185a3e3f81199e756a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.ow2.asm/asm-tree@9.7.1?type=jar",
      "externalReferences": [
        {
          "url": "http://asm.ow2.io/",
          "type": "website"
        },
        {
          "url": "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail.ow2.org/wws/arc/asm/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.ow2.asm/asm-util@9.7.1?type=jar",
      "publisher": "OW2",
      "group": "org.ow2.asm",
      "name": "asm-util",
      "version": "9.7.1",
      "description": "Utilities for ASM, a very small and fast Java bytecode manipulation framework",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "36d373a9cd6cad9b35db9f984c6b4bbb"
        },
        {
          "alg": "SHA-1",
          "content": "9e23359b598ec6b74b23e53110dd5c577adf2243"
        },
        {
          "alg": "SHA-256",
          "content": "f885be71b5c90556f5f1ad1c4f9276b29b96057c497d46666fe4ddbec3cb43c6"
        },
        {
          "alg": "SHA-512",
          "content": "522d793d15a2c5ea6504a50222cf0750f1eab7b881cf289675042539b1aba8b3868197b1bebe729de728dd10020eb028ae16252dcd5d84fdcbf7f925832bc269"
        },
        {
          "alg": "SHA-384",
          "content": "c073e7d64d5891d024860f638c3ee901aca60637b820ad05f9be7d33b4f4ad99fc448173dd9cb0b1cd0032485e813b24"
        },
        {
          "alg": "SHA3-384",
          "content": "2300d5572d929e6f20a7569dceb05bd9930b6ca18bcf11f648e37f28d00e78883f632ff60f4c4f9997aaa3d560a9450b"
        },
        {
          "alg": "SHA3-256",
          "content": "f5b3d45b832550fc3d1a675fdc4531a32eb8688db37b7102f0d544635f967ed2"
        },
        {
          "alg": "SHA3-512",
          "content": "ae097429b38febbc39a91d9697b6f709a49aad2fbc032ae2222e8f11c2907ef1a526afc4ee38d4dee46c09a7196f4f676f5704461dd3a0fe1e606bc9e3ef970a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.ow2.asm/asm-util@9.7.1?type=jar",
      "externalReferences": [
        {
          "url": "http://asm.ow2.io/",
          "type": "website"
        },
        {
          "url": "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail.ow2.org/wws/arc/asm/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jnr-a64asm@1.0.0?type=jar",
      "group": "com.github.jnr",
      "name": "jnr-a64asm",
      "version": "1.0.0",
      "description": "A pure-java A64 assembler",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6cb469cbbcf9eca78d50f7da595a8337"
        },
        {
          "alg": "SHA-1",
          "content": "0a1cb8dbe71b5a6a0288043c3ba3ca64545be165"
        },
        {
          "alg": "SHA-256",
          "content": "53ae5ea7fa5c284e8279aa348e7b9de4548b0cae10bfd058fa217c791875e4cf"
        },
        {
          "alg": "SHA-512",
          "content": "922bdf2883c6a9cd6491289020d404ab151fd9ffa78d2ec884a2ac3af739d397016f1f4596c3e6c58744ea600fdbc2d330c8f520a1a9ab0eef6af6b667b35b89"
        },
        {
          "alg": "SHA-384",
          "content": "933298b61960f09eccb672a0622a93a721d06cf85cdb29500ff6efdf874bad7b08aede29b6cf3b51141c16b38b250be2"
        },
        {
          "alg": "SHA3-384",
          "content": "2a7231c649f4805d34eb19c7e6b6dbb5ecdb663e29ef69a4523e2f7d2ae70740ca3aa03eba3476960d0fe344ea45df2d"
        },
        {
          "alg": "SHA3-256",
          "content": "fc270fd94a4e2b4fb1a9e4dd42ff4600c94e226ef3431aee998a915b62eb19ae"
        },
        {
          "alg": "SHA3-512",
          "content": "8ee64fec1b5e93ff9c2b596c0345ef120479217bea95d669c6e17f338a45945545b546813af2f58920a6bb2d607bd004870d10c8660a516261288d9f555fc850"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jnr-a64asm@1.0.0?type=jar",
      "externalReferences": [
        {
          "url": "http://nexus.sonatype.org/oss-repository-hosting.html/jnr-a64asm",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jnr-x86asm@1.0.2?type=jar",
      "group": "com.github.jnr",
      "name": "jnr-x86asm",
      "version": "1.0.2",
      "description": "A pure-java X86 and X86_64 assembler",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "00670735acb2a9d1421b506dc7d338bc"
        },
        {
          "alg": "SHA-1",
          "content": "006936bbd6c5b235665d87bd450f5e13b52d4b48"
        },
        {
          "alg": "SHA-256",
          "content": "39f3675b910e6e9b93825f8284bec9f4ad3044cd20a6f7c8ff9e2f8695ebf21e"
        },
        {
          "alg": "SHA-512",
          "content": "e928926b01ce545144c1bbf160edee9b923773e32f9a399a71c2ab5e8325d9cbcfb41f41c8f008b80d1beab8da1c4b74845996479c07ed73bc131959911d4762"
        },
        {
          "alg": "SHA-384",
          "content": "91839815885716f1202a824b195a475d4d7561690192b42cf05b8c6432556a3e7e2dab13b6e970986a97711fb7060844"
        },
        {
          "alg": "SHA3-384",
          "content": "ed27f9b39907e92805c2d6ae6a045e00e24f51544501df3b98b593177df4fe55fee2347c668df66c2ea6fae64c66ee0c"
        },
        {
          "alg": "SHA3-256",
          "content": "f2e4e4807f6674a5b428cebdbdd01e8cadbeee71b785a046bec2bec1de63a41b"
        },
        {
          "alg": "SHA3-512",
          "content": "0dfffcf0daac9513b347ab8bf22887360feea890428e12857d7d3400400ba498fdc61307d9fd9c6a5e1baa9a96279afc07bba08c6229ed4ede71569d710fd0f6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jnr-x86asm@1.0.2?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/jnr/jnr-x86asm",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jnr-unixsocket@0.38.25?type=jar",
      "group": "com.github.jnr",
      "name": "jnr-unixsocket",
      "version": "0.38.25",
      "description": "UNIX socket channels for java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6128f5bfe53ea584f3f90ddc00572273"
        },
        {
          "alg": "SHA-1",
          "content": "e8e0a87d80789510109337d6b66df7d8f90dfbee"
        },
        {
          "alg": "SHA-256",
          "content": "9961504058668059d7fbfcc050252afd99901604c4c954bfe7c1325be06a34c0"
        },
        {
          "alg": "SHA-512",
          "content": "6be26fa405fdf161b4a999899c7f1d926628059d0af310531b6d093e27233dba8b310b3dd0a5828a722b0a89f637820d71c1f257aba528e314f63062e63558d5"
        },
        {
          "alg": "SHA-384",
          "content": "b36b8d31ca8157b374b93ef17365c137283aa8871c2168c7dca1019dfc120f0074f610171abeb7ce3b4d5a2f6a3370ad"
        },
        {
          "alg": "SHA3-384",
          "content": "561ac4ec50fa1a2a2c8732c7e1c42c370bff3efdb200f29c67c354f060d250162c5118b4f03985700dd22889b7ef4b01"
        },
        {
          "alg": "SHA3-256",
          "content": "383bd00ba498176a5a2281f6be887858bf5a6a718dc9aad37e6429aae0c5840b"
        },
        {
          "alg": "SHA3-512",
          "content": "8ec7eaf87ee1857e57d92b17146bdeeea464e3265c4ffb99a270a1d5ea855adad201ea8ec6c8971d1638116df7ed179fe68bd9f4bb0fce4ddcdc4b130ff17a9f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jnr-unixsocket@0.38.25?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/jnr/jnr-unixsocket",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jnr-posix@3.1.22?type=jar",
      "group": "com.github.jnr",
      "name": "jnr-posix",
      "version": "3.1.22",
      "description": "Common cross-project/cross-platform POSIX APIs",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2afdc7365d26adf44fc0bb96feeadc24"
        },
        {
          "alg": "SHA-1",
          "content": "f11ed8edba66935b0ddb76c2caa0e57d2653ddeb"
        },
        {
          "alg": "SHA-256",
          "content": "392645f602af36cd38ff0542838125e7ce39e577d09d911991f7834e7d56d8ff"
        },
        {
          "alg": "SHA-512",
          "content": "af8e8d5b385dfcaba27afafa0c0d2f4b88b80b638f47f2ed37e52550061be7925d47fbe22c95bda185127810afe50d06c379653db8120c865c7feb75ffe3309c"
        },
        {
          "alg": "SHA-384",
          "content": "ced641298c07ffd7b55bbcc45f9d4012935c65aa3185017604983a4fb1d1ad664f8cf16271271fdc838205270e56839e"
        },
        {
          "alg": "SHA3-384",
          "content": "398f2f09a6dee392b6e28a648f27e91eba786fbc7e98e29c9ab3c1fb15f03a0e63c4e5aad5f4c2ab37be4098ab7bef02"
        },
        {
          "alg": "SHA3-256",
          "content": "741556840e7bdadbbf9cd747b882ab98b4d1aa875eb3a7ecb8cbb213dd3b5f60"
        },
        {
          "alg": "SHA3-512",
          "content": "fc14db60dd4cbe7fa0bf007abc77294f12b5a0041ee678713aaeb7a78c20f6fc0099b23cad5661802be694ee2eed0c54ae7d49f2741eda51350c672d6a9734b6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "name": "GNU General Public License Version 2",
            "url": "http://www.gnu.org/copyleft/gpl.html"
          }
        },
        {
          "license": {
            "name": "GNU Lesser General Public License Version 2.1",
            "url": "http://www.gnu.org/licenses/lgpl.html"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jnr-posix@3.1.22?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/jnr/jnr-posix",
          "type": "website"
        },
        {
          "url": "http://github.com/jnr/jnr-posix/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.http-client/google-http-client@2.1.0?type=jar",
      "publisher": "Google",
      "group": "com.google.http-client",
      "name": "google-http-client",
      "version": "2.1.0",
      "description": "Google HTTP Client Library for Java. Functionality that works on all supported Java platforms, including Java 7 (or higher) desktop (SE) and web (EE), Android, and Google App Engine.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "7217e647aa20c034bc81e2a3341b2434"
        },
        {
          "alg": "SHA-1",
          "content": "f4c08fa160a5199af19f81080fbaa921ae2193c7"
        },
        {
          "alg": "SHA-256",
          "content": "20aa0948f6ceb5cfa9b2b3adddd9b7e990ab40230e084081642cbb81235d3eef"
        },
        {
          "alg": "SHA-512",
          "content": "0eb1d146ccd4abaff14178e1d3628d4df4e946caa9fd0f0b78ccf308b8fa56b653ff32de9b77227abe3def63587140917067110868f0bdf67ba11447560547ba"
        },
        {
          "alg": "SHA-384",
          "content": "27668ee79c00120f325c82c7da35a2592487a862f99e30c64bf5221952ba9887a13838852666bb3b82de5535d600f9f1"
        },
        {
          "alg": "SHA3-384",
          "content": "7d28728d58a73cb89683b0389c8ed383a4f5b578076051ba6de441a6f64c1b619692bf1d51072b9b7e9c5e71b8959b96"
        },
        {
          "alg": "SHA3-256",
          "content": "3248473756643cb20f99dae47170411c2f38a529c4483c68a08feb3a34baef4d"
        },
        {
          "alg": "SHA3-512",
          "content": "1d6c79cfb2b92bc781c4c5d3fbec390f596293d862b687c309a3f7581f698ff778b0c040773cc6cb2e87c9723e01501bbb5a9081327736c5eca721939110a661"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.http-client/google-http-client@2.1.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-http-java-client/google-http-client",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/googleapis/google-http-java-client/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/google-http-java-client/google-http-client",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents",
      "name": "httpcore",
      "version": "4.4.16",
      "description": "Apache HttpComponents Core (blocking I/O)",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "28d2cd9bf8789fd2ec774fb88436ebd1"
        },
        {
          "alg": "SHA-1",
          "content": "51cf043c87253c9f58b539c9f7e44c8894223850"
        },
        {
          "alg": "SHA-256",
          "content": "6c9b3dd142a09dc468e23ad39aad6f75a0f2b85125104469f026e52a474e464f"
        },
        {
          "alg": "SHA-512",
          "content": "168026436a6bcf5e96c0c59606638abbdc30de4b405ae55afde70fdf2895e267a3d48bba6bdadc5a89f38e31da3d9a9dc91e1cab7ea76f5e04322cf1ec63b838"
        },
        {
          "alg": "SHA-384",
          "content": "ba9ceaee1a37ca3201d6a1315ecb0327b495489efd0baa155c219c475df8d3eb69fe77ab0026563db406497626da6562"
        },
        {
          "alg": "SHA3-384",
          "content": "b9dc44dcc7cc86d5036f26d54c4003a2d72808ae7b07a0808bb53505c6d4281b5ad213eb1f3d0fef1113dec57cb0dfe1"
        },
        {
          "alg": "SHA3-256",
          "content": "fd8ab51846476c6c18822151c9ec07b39a9633010b5d20ea937fc6910407bc64"
        },
        {
          "alg": "SHA3-512",
          "content": "b42fa528242981a9d70e4f68ab75a24292df5112c44c21b6f18cb9201ce747885ba1d4dc69bc3d14d0da46a6c2638f937c11bc45749abeb55dc89ddada90cdda"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
      "externalReferences": [
        {
          "url": "http://hc.apache.org/httpcomponents-core-ga",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "http://issues.apache.org/jira/browse/HTTPCORE",
          "type": "issue-tracker"
        },
        {
          "url": "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/httpcomponents-core/tree/4.4.16/httpcore",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.grpc/grpc-context@1.70.0?type=jar",
      "group": "io.grpc",
      "name": "grpc-context",
      "version": "1.70.0",
      "description": "gRPC: Context",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b7e575dcff9de5208d81a29566a3d76a"
        },
        {
          "alg": "SHA-1",
          "content": "375570c198b9ff46f2202731d11271bb5cb396fa"
        },
        {
          "alg": "SHA-256",
          "content": "eb2824831c0ac03e741efda86b141aa863a481ebc4aaf5a5c1f13a481dbb40ff"
        },
        {
          "alg": "SHA-512",
          "content": "430cd53a07173fcfe8ac65d0b6f682a30eb7a50df9c33850a39dd2d48a159e63afec1e430471aeeb00c9c88e2354d4d5c456e451309ef5640c91a73def197fb7"
        },
        {
          "alg": "SHA-384",
          "content": "abf8b56a9d9848ec73c2567f1fca13bbb77e5c106b216a8112347b057caa2d9793804d6f1e1f235c9433fb7edd1c27a2"
        },
        {
          "alg": "SHA3-384",
          "content": "5c4c6b820f489296a340822b6891773e5d801d7e266f5ecde111b85c53be9e965094e80b98a396858c6fe2672688caf0"
        },
        {
          "alg": "SHA3-256",
          "content": "fa505119427ecd73239a401444f43654b5e7d2ed7c78a6bd7407b1d9f5cc3a58"
        },
        {
          "alg": "SHA3-512",
          "content": "56d7389a20562d264b1b759a7f0ff7057b3f832eee5a57eba65d4f2ba878fe7d1569b44ea22e42c9ae0abf5a79506a8dccffe5f51ce56563812d53442395e115"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.grpc/grpc-context@1.70.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/grpc/grpc-java",
          "type": "website"
        },
        {
          "url": "https://github.com/grpc/grpc-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.opencensus/opencensus-api@0.31.1?type=jar",
      "group": "io.opencensus",
      "name": "opencensus-api",
      "version": "0.31.1",
      "description": "null",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a5e7092bb89baaaee424f5a7b20d1bad"
        },
        {
          "alg": "SHA-1",
          "content": "66a60c7201c2b8b20ce495f0295b32bb0ccbbc57"
        },
        {
          "alg": "SHA-256",
          "content": "f1474d47f4b6b001558ad27b952e35eda5cc7146788877fc52938c6eba24b382"
        },
        {
          "alg": "SHA-512",
          "content": "aac98ed2de298609bac9cb5a69ac16df0ca9c9fc82f429720ddcfdd769fdae96b707ed81c8d8c37380de846b302aacaac80156ef75567061aed3f77cc3c3b725"
        },
        {
          "alg": "SHA-384",
          "content": "d8dfdbc7d584809f00b5a4239cbaf575e8924a176e92a44230e8ac1e9dc85e458b63fad69b0b445d8d2e8c1a70e7633a"
        },
        {
          "alg": "SHA3-384",
          "content": "5cb3db9b30adb23c2b33ce0ded61a69e5347a4531d0563fc9185aba11aab7a639bf40286fc8d0f52a73c50add15775c7"
        },
        {
          "alg": "SHA3-256",
          "content": "733221e8a1dc4476c53fee92837757bfd468afe25f57bbce79d25c60f2e240f6"
        },
        {
          "alg": "SHA3-512",
          "content": "cdb61cef7324e1173f297867ec9274c6439779cdd674a442d26724de047258a64f3f76ad4e496f7afde785b5dbdf5d03f0b0f1d4424868cf14ebc1fd3b63dc76"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.opencensus/opencensus-api@0.31.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/census-instrumentation/opencensus-java",
          "type": "website"
        },
        {
          "url": "https://github.com/census-instrumentation/opencensus-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.opencensus/opencensus-contrib-http-util@0.31.1?type=jar",
      "group": "io.opencensus",
      "name": "opencensus-contrib-http-util",
      "version": "0.31.1",
      "description": "null",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9ecc9c428eb87dc734ae8d07b820ce26"
        },
        {
          "alg": "SHA-1",
          "content": "3c13fc5715231fadb16a9b74a44d9d59c460cfa8"
        },
        {
          "alg": "SHA-256",
          "content": "3ea995b55a4068be22989b70cc29a4d788c2d328d1d50613a7a9afd13fdd2d0a"
        },
        {
          "alg": "SHA-512",
          "content": "3192532e4989a26d9a69f4246ef994b35058d155e199b500196d14427d1b46b1515f872a36500cb84768524870297388c90272ffa61dc8448f6f7571c4f86b27"
        },
        {
          "alg": "SHA-384",
          "content": "46f9dcc71f71f33be99a00fdd9a2ba602eb547b56b6e8177660d3a44d3dd974609bf16d2a1b58359a0f39797cb3ee683"
        },
        {
          "alg": "SHA3-384",
          "content": "21d66f5efa2511de4e4b4f3ea18d37aeb954ea1b4315f1e11cd84a11a95e9bb9841addee4d1230c3813f06144a675a1c"
        },
        {
          "alg": "SHA3-256",
          "content": "8352c7dcd73fced7e49425d70f6955579f5c24fafd4529e5f5e54ef5a88a3c83"
        },
        {
          "alg": "SHA3-512",
          "content": "f8ec86e5728b9acbdaa684cbf385ab3834006e44363de43f9af4b50dca71d4e0d77d0d8b2e7bb97435581dda6572691b1d263835e4e97256999df550b9efc13b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.opencensus/opencensus-contrib-http-util@0.31.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/census-instrumentation/opencensus-java",
          "type": "website"
        },
        {
          "url": "https://github.com/census-instrumentation/opencensus-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.http-client/google-http-client-gson@2.1.0?type=jar",
      "publisher": "Google",
      "group": "com.google.http-client",
      "name": "google-http-client-gson",
      "version": "2.1.0",
      "description": "Google HTTP Client Library for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1416246dac1dae9f117f63c38ec6ce9c"
        },
        {
          "alg": "SHA-1",
          "content": "e65ea98fe4e8d3a512559698a0d8664908fd36f3"
        },
        {
          "alg": "SHA-256",
          "content": "3cf72c7b88375a34bf721c664f42edc8e096e2370e4126c9b8933c3c92e591f3"
        },
        {
          "alg": "SHA-512",
          "content": "16056abdea4d5accabf3e50aa572c485ea25dfca2dfe19e5258e87eef78121a5270eda3cd8c690bac9823dc8a89872de0e81fc9da62113707ec7df7f5ae88e5d"
        },
        {
          "alg": "SHA-384",
          "content": "1dc17d9a9faae3c38fdafba685600e00da33386150c5df126f450a360d26017940fcc5af2d8cb561b817195020bf1008"
        },
        {
          "alg": "SHA3-384",
          "content": "4f50fff2b447dc08918878ddc59a448383097c777fed59a0f12de85b07660faad6f5f1db0be72706806d73d162e2377d"
        },
        {
          "alg": "SHA3-256",
          "content": "23f4dbdc62afd307e7bb3354ba97a7ba614259441453fc2acdcf51f60e67d801"
        },
        {
          "alg": "SHA3-512",
          "content": "0b79e4f60953d3a8fb06c53016473c365fb019cf7c7a2a873a0ef94b2ff51c32f0b6b26044fcebc719bff7522fbeef28514d8fda568dc6d9a0a8b88362d97f3e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.http-client/google-http-client-gson@2.1.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-http-java-client/google-http-client-gson",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/googleapis/google-http-java-client/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/google-http-java-client/google-http-client-gson",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.api-client/google-api-client@2.9.0?type=jar",
      "publisher": "Google",
      "group": "com.google.api-client",
      "name": "google-api-client",
      "version": "2.9.0",
      "description": "The Google APIs Client Library for Java is a Java client library for accessing any HTTP-based API on the web",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ea5f238f3ad4f44eb2261e66a2dcfc9d"
        },
        {
          "alg": "SHA-1",
          "content": "d5729efe51f8d0d03314749079921ddf69507082"
        },
        {
          "alg": "SHA-256",
          "content": "461377a5c904e8e4e0091cd1b4752bc9ef58b7223d608886d9642436d4b21273"
        },
        {
          "alg": "SHA-512",
          "content": "f2071c5d1da4220d3ea1127802cb569ba5558cedc820f092d1db44a52a60bf444eb523a1593335a12f7dab5f9f1942b1d3f989850d6e35419b52ee28c9743b6e"
        },
        {
          "alg": "SHA-384",
          "content": "6b9cfcf0a7dd6fd93b5bb8d77457a7994144f971a4cd6c82e024b34879c0cc03d6a8e873e6f886be16604161204153f5"
        },
        {
          "alg": "SHA3-384",
          "content": "832023844ea373aa06b8a59ed71a77b5189c86ee8d6b2a8bff66bf9a19868475f39a8739210af63cca01c241d02a029c"
        },
        {
          "alg": "SHA3-256",
          "content": "1125d8a859a8dff49278597119cf238a26513c2c784ae5b83791d44aa0e77bda"
        },
        {
          "alg": "SHA3-512",
          "content": "5058fe8f99b63f9fe25e76d04be905f0c39910afc3e1dabaa3a75837455e2ba324d78270dffef52b15bbd2653e2ccaaf684479df512118092e0b56a5c8db0692"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.api-client/google-api-client@2.9.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-api-java-client/google-api-client",
          "type": "website"
        },
        {
          "url": "https://github.com/googleapis/google-api-java-client/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/google-api-java-client/google-api-client",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.http-client/google-http-client-apache-v2@2.0.0?type=jar",
      "publisher": "Google",
      "group": "com.google.http-client",
      "name": "google-http-client-apache-v2",
      "version": "2.0.0",
      "description": "Google HTTP Client Library for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2eea96e72c1d01d74e0f93c9b677519b"
        },
        {
          "alg": "SHA-1",
          "content": "9d7ec2f47541ac747bce141c0d04b07c01a9f820"
        },
        {
          "alg": "SHA-256",
          "content": "9dfeedb952d2f0351dabc3327c42d87431acba63ad15eee272282af56ec033ab"
        },
        {
          "alg": "SHA-512",
          "content": "a6c7f96546105edbeff39373eace61893f0c53a6efca1de071ee481ca0a2b8845c2c5fc7c0f8a24f9dd7a0a1e69e177ac00f28aefbf54aca29a681470a523a17"
        },
        {
          "alg": "SHA-384",
          "content": "c5e0867f05fa5961d761c57a0f2a799bb20b3544a35ff5192ed17e220c07e43fc5eba7a9758130c0976d48f854790bd0"
        },
        {
          "alg": "SHA3-384",
          "content": "08a2b32fa6656f17a65983de440a7789c904616371458f200a8bbf7e8b9dbabd5c8720e9d83a490247289d6759e89cb3"
        },
        {
          "alg": "SHA3-256",
          "content": "edd458343dec03285dcedf4a29f094678b9295085dba2b9c7ab13faa06e80c3c"
        },
        {
          "alg": "SHA3-512",
          "content": "cda69daafb9b6743c32b3a4e9c1267454c98d35102fb1534d4dd0d7b4f6ee28f89c2d8121ec00155d35324e73b9e22ad32e437072d49075187b7d79f2e95fdb4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.http-client/google-http-client-apache-v2@2.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-http-java-client/google-http-client-apache-v2",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/googleapis/google-http-java-client/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/google-http-java-client/google-http-client-apache-v2",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.apis/google-api-services-sqladmin@v1beta4-rev20260529-2.0.0?type=jar",
      "publisher": "Google",
      "group": "com.google.apis",
      "name": "google-api-services-sqladmin",
      "version": "v1beta4-rev20260529-2.0.0",
      "description": "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a39789237227016628f6813ba7024829"
        },
        {
          "alg": "SHA-1",
          "content": "f57456e3a60ab9723c7cbd7e6fe2bd63373855ef"
        },
        {
          "alg": "SHA-256",
          "content": "70d1d618f975e815f1660df0514b3fc15418d3a3082fe334c686a7695410c275"
        },
        {
          "alg": "SHA-512",
          "content": "02d65ee1feb2644802f9608dbca177c6b2d9a47684d51dfd3224293cb3957486ff91b238a56ab498d8cac0f5d484933214daafea62b80ea1391acf07de86e010"
        },
        {
          "alg": "SHA-384",
          "content": "a348bab72e076592b8e50f15d3818a92d5aece1ef5a4394b1f492f904b5f042cce591b9adcc1a66e07385fcf68244953"
        },
        {
          "alg": "SHA3-384",
          "content": "6876b63b3c51faab61d1978db2be644270cc1eb6bedd75b716558fdf2013c485b33b0c96e674a848a01ae2f7e304f5e4"
        },
        {
          "alg": "SHA3-256",
          "content": "5b7d407846808304f7d8f3ff12b72b538a8f360fb169bff9b64386a3499a35e1"
        },
        {
          "alg": "SHA3-512",
          "content": "9dfef64ce45ee3ee52b4fbcbed664158cb9ed8555b2e4100a4e98e1641715186e61726fd020ec53fe593276623c96d065784d588dd5d0e5c936b0d567388daa6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.apis/google-api-services-sqladmin@v1beta4-rev20260529-2.0.0?type=jar",
      "externalReferences": [
        {
          "url": "http://nexus.sonatype.org/oss-repository-hosting.html/google-api-services-sqladmin",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "http://svn.sonatype.org/spice/tags/oss-parent-7/google-api-services-sqladmin",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.auth/google-auth-library-credentials@1.48.0?type=jar",
      "publisher": "Google",
      "group": "com.google.auth",
      "name": "google-auth-library-credentials",
      "version": "1.48.0",
      "description": "Client libraries providing authentication and authorization to enable calling Google APIs.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d474107de85dba72e7d5252e7d771fe5"
        },
        {
          "alg": "SHA-1",
          "content": "ed2bbb1e309727bff5fb80c93cdd49cb814ed88e"
        },
        {
          "alg": "SHA-256",
          "content": "220b419a81679b2711cb2d3496e34ebcbef03c3ca38b68fac848462db37e1935"
        },
        {
          "alg": "SHA-512",
          "content": "c843e6f86a8e75a5943d114f2010ba7281b1730c7bf4a5f3c1d703bc2ac278ec7f3b97bf0bbe7179efe8ef1dc90748218cd5970cd0f9aca89abcd369097db93e"
        },
        {
          "alg": "SHA-384",
          "content": "2c2720f93415e34f17b12bedd1741cd35d0a906ffb630b245ed0a4dc0be3ad1d19f5ecfc31550dd926b84cded0c953ac"
        },
        {
          "alg": "SHA3-384",
          "content": "1ce9e19a826a24f8b8a73ce8ba9b2246ddf4858f6c42f390235c82eaa79c7140f75783066093a79cb96bdeafbb0456eb"
        },
        {
          "alg": "SHA3-256",
          "content": "1c2db4f855b8df9d25edc9526d2b9d8a6b52131200099731c79d342e8ae9a002"
        },
        {
          "alg": "SHA3-512",
          "content": "1df3a7f86503bdbf23290888965c15135823674c05026a8f59417b6226448fecb26a02c6c3e00b89e3f39d746aafca8fd27fa21c70911567d57b4a4de6f9bd4f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.google.auth/google-auth-library-credentials@1.48.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-cloud-java/google-auth-library-credentials",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/googleapis/java-shared-config/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/google-cloud-java/google-auth-library-credentials",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.auth/google-auth-library-oauth2-http@1.48.0?type=jar",
      "publisher": "Google",
      "group": "com.google.auth",
      "name": "google-auth-library-oauth2-http",
      "version": "1.48.0",
      "description": "Client libraries providing authentication and authorization to enable calling Google APIs.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b83b9cf4ab6e7f42c32b52efffdabaa2"
        },
        {
          "alg": "SHA-1",
          "content": "6f60491221a120e373d43fa366e0ce2f5b60a8d3"
        },
        {
          "alg": "SHA-256",
          "content": "2ab4c031319b0e933a1be7cdc89dc8eef1cc5ce03eb779a3bfd7fd9dc5e15cd8"
        },
        {
          "alg": "SHA-512",
          "content": "1e7648914e008b63abd017058a72d987c6df1b9a60616ed0bdfcce435a31eaaa375f6a4f2019e7b122481ef7116f034d2bddcb612127f461fe25b7718cfc3336"
        },
        {
          "alg": "SHA-384",
          "content": "ecdefcc32e601090105f3af0a6d52304ce96c20c60cf06e28407beec68b7719c7af7a19ef485bede0c44ac599b7b1d63"
        },
        {
          "alg": "SHA3-384",
          "content": "75d4fa3c23fe0812db37bbb91eefda923625629ef3dcf98e7df1b7934c9118df56e63ffca2cb80995aefc535b3a5ff7a"
        },
        {
          "alg": "SHA3-256",
          "content": "4528b06243733851a083d7667dd9b1cc165b6889fecbc5d6f154cbd7803e8c96"
        },
        {
          "alg": "SHA3-512",
          "content": "b124d36c0e71d9a529cce82b2e142918f0a478c58f00101518b04132f91602ef7df07c098ddfa7585f2f4c5f39b3c8eb4211cde09269b51f6688ec674c16c15d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.google.auth/google-auth-library-oauth2-http@1.48.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-cloud-java/google-auth-library-oauth2-http",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/googleapis/java-shared-config/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/google-cloud-java/google-auth-library-oauth2-http",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.api/api-common@2.64.0?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.api",
      "name": "api-common",
      "version": "2.64.0",
      "description": "Common utilities for Google APIs in Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6caff7ee51f5ce0b1aa781262d269567"
        },
        {
          "alg": "SHA-1",
          "content": "cf7d93aa7a4d348be7bf41d8afe3b104e16382be"
        },
        {
          "alg": "SHA-256",
          "content": "d2e69f2f7ab50eb3197ae33c532ee1d67902e964a49fbf711ab11b077ac39b0f"
        },
        {
          "alg": "SHA-512",
          "content": "b7f810cb8dbea5dfb0a0870d62836cc6b667584a64fc55b7acae26a3a479cbf58bb2709c09bea450cd6041959cdde5a1b3e06b70a850ddd678c40a086bac36df"
        },
        {
          "alg": "SHA-384",
          "content": "6961ad44e46071e362bd5f420014d538ef998f60a95bfa642daef057cc6c98448418c81ba0fb5970c1f102c3101d3207"
        },
        {
          "alg": "SHA3-384",
          "content": "4cfa296dd4696ba8dd2d37d045a941f78311ad5551044997b01ea9c83341e28744507fb1b14d79750419040fb7f5c794"
        },
        {
          "alg": "SHA3-256",
          "content": "52e948f7e0bcbedde64385fa3ab313f0c38c8abcdc25783c3ffe298de6188e42"
        },
        {
          "alg": "SHA3-512",
          "content": "0b7e1d9d0f6fa7c6223f2d32b19d1ab46834d6f931db5c45c1f8c77fb42a31709d553af6caafda21546a80a7ab88ebc78c4cc52e01c78e1a9d4c56a34a6d8fac"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.google.api/api-common@2.64.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/sdk-platform-java",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/googleapis/sdk-platform-java/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/sdk-platform-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar",
      "publisher": "GlassFish Community",
      "group": "javax.annotation",
      "name": "javax.annotation-api",
      "version": "1.3.2",
      "description": "Common Annotations for the JavaTM Platform API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2ab1973eefffaa2aeec47d50b9e40b9d"
        },
        {
          "alg": "SHA-1",
          "content": "934c04d3cfef185a8008e7bf34331b79730a9d43"
        },
        {
          "alg": "SHA-256",
          "content": "e04ba5195bcd555dc95650f7cc614d151e4bcd52d29a10b8aa2197f3ab89ab9b"
        },
        {
          "alg": "SHA-512",
          "content": "679cf44c3b9d635b43ed122a555d570292c3f0937c33871c40438a1a53e2058c80578694ec9466eac9e280e19bfb7a95b261594cc4c1161c85dc97df6235e553"
        },
        {
          "alg": "SHA-384",
          "content": "fc0058495e54efb6e05a34e3ff422e7c8347bcc77d6d9b87e9253424968dee6ef6a215c318d7e54f8705276be81f0682"
        },
        {
          "alg": "SHA3-384",
          "content": "ed6464b715de6ced0d9981a3f28140824946a4b7a02ffaff6116c833bb36e8f77a6282ce63c0d82cfe841d4fd6916891"
        },
        {
          "alg": "SHA3-256",
          "content": "ecfc9bef24ae28cf94c6775ecf6e2086d90a25d8d5476a4f6bb24001601b6cd0"
        },
        {
          "alg": "SHA3-512",
          "content": "f2b333527faedf504f60aa70a3d491972fa76f7e61e6351027f74613f41001157656824fe312b6e1df6dc4979704fe2a745b618d5368a97fe0bf8749739de9e2"
        }
      ],
      "licenses": [
        {
          "expression": "(CDDL-1.0 OR GPL-2.0-with-classpath-exception)"
        }
      ],
      "purl": "pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar",
      "externalReferences": [
        {
          "url": "http://jcp.org/en/jsr/detail?id=250",
          "type": "website"
        },
        {
          "url": "https://maven.java.net/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/javaee/javax.annotation/issues",
          "type": "issue-tracker"
        },
        {
          "url": "javaee-spec@javaee.groups.io",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/javaee/javax.annotation",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.oauth-client/google-oauth-client@1.39.0?type=jar",
      "publisher": "Google",
      "group": "com.google.oauth-client",
      "name": "google-oauth-client",
      "version": "1.39.0",
      "description": "Google OAuth Client Library for Java. Functionality that works on all supported Java platforms, including Java 7 (or higher) desktop (SE) and web (EE), Android, and Google App Engine.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "cf4992aee304401b66f6d03e654ab981"
        },
        {
          "alg": "SHA-1",
          "content": "99f02f3c46c68c01dfc95878456b009a13229c88"
        },
        {
          "alg": "SHA-256",
          "content": "27fc61ee2d526e33d31350b5ea383091c0879345e261f9b2e6fcc97a20c86f88"
        },
        {
          "alg": "SHA-512",
          "content": "f8973ab9ddda79746cc4e5d6c156e571604304627db7ebc2a570f56679cdeeddad86ce8e36a8acb7593a215c9a55cd8b8f86d85d9bec67b71c15b27eb1af45fd"
        },
        {
          "alg": "SHA-384",
          "content": "a3ef0821a2964960487e39747c2a69ec2030ac04e0fd1bae025c5c71036ffa6dc8a1c99effb7c5a63fe9ce81b742e9d0"
        },
        {
          "alg": "SHA3-384",
          "content": "c3c37f7e6c0f7d107c8e52546c8ec9e4f726308dfb065e9cdd8265904ca1a06d401b29fa6b84d3df67c420b8604b6330"
        },
        {
          "alg": "SHA3-256",
          "content": "44c05e415db8bdfef87fb2207b5d4d02c115aa661b334cf26ef9b97be29d019e"
        },
        {
          "alg": "SHA3-512",
          "content": "abd5c4d3fe3a17103f09c70f6adaf130b59690d8639fd771ed03588451bd061c3d38782dd178ff1999806942a950b584d016b77a4bab0fa28e66b64052e08d60"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.oauth-client/google-oauth-client@1.39.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-oauth-java-client/google-oauth-client",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/googleapis/google-oauth-java-client/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/google-oauth-java-client/google-oauth-client",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/dnsjava/dnsjava@3.6.5?type=jar",
      "publisher": "dnsjava.org",
      "group": "dnsjava",
      "name": "dnsjava",
      "version": "3.6.5",
      "description": "dnsjava is an implementation of DNS in Java. It supports all defined record types (including the DNSSEC types), and unknown types. It can be used for queries, zone transfers, and dynamic updates. It includes a cache which can be used by clients, and a minimal implementation of a server. It supports TSIG authenticated messages, partial DNSSEC verification, and EDNS0.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f3596bdfe0e357a51843a2cb523f0b7d"
        },
        {
          "alg": "SHA-1",
          "content": "7a632e247adc97efb36ce9f6b90a6cc397f9cc68"
        },
        {
          "alg": "SHA-256",
          "content": "d1208e39e4ba17ec643ac5832b8b17dcaf5e3ae28f8c65904a755e23523cd94a"
        },
        {
          "alg": "SHA-512",
          "content": "5a6d6446c26ebf714f5513ad13149866e5e93c65004ef6908b7fd896b54cdefafa87c6f920bc42f1458630f2130590be16a793e8b09bc119f686f0e2a84566f8"
        },
        {
          "alg": "SHA-384",
          "content": "8caba4dbf132bd99fe73f175f58eac448db3aeb1d418da62e1081e41b686c9be67ae4359af374a1ad14f9769496ca5e6"
        },
        {
          "alg": "SHA3-384",
          "content": "2c9be6818658466c8efa2b7a00f547a0a408faf7088bafd1d88540e123e02e4fd377da40ef7108ce7bab193da456da48"
        },
        {
          "alg": "SHA3-256",
          "content": "f64645c1dcac3b98a0f16bf01ee3b90a061d140b1769387ae441702bb6e7b34f"
        },
        {
          "alg": "SHA3-512",
          "content": "6fb98f1e049a3464e42cb9f21e69dc5bc80edc8c6205c78ffaf14c08444a4e3a170e1e71a0b62fa2b276d736035b81470171165298d842eb15e52ad1b5118713"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/dnsjava/dnsjava@3.6.5?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/dnsjava/dnsjava",
          "type": "website"
        },
        {
          "url": "https://github.com/dnsjava/dnsjava",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.api/gax@2.81.0?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.api",
      "name": "gax",
      "version": "2.81.0",
      "description": "Google Api eXtensions for Java (Core)",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a812bf53f692a8ef05c9a03adb84a5ff"
        },
        {
          "alg": "SHA-1",
          "content": "69daeb0f12d235adc42f122963131c66d103c4ca"
        },
        {
          "alg": "SHA-256",
          "content": "0fdb2dde59a8d614a624f0c7cc84652fe0837915a036ba147651d921cf6a8aff"
        },
        {
          "alg": "SHA-512",
          "content": "d244416da06c36c876a5f7ef1d2d0bdb0dae54ead16de3b68cdbed30e655b6820f8746ce5556e8b0dd2de6e25d03ff77b2eb23ef817a1c5a27b44dcb93e661ae"
        },
        {
          "alg": "SHA-384",
          "content": "52a70bf31389ab7c9eee3bbad28d65bc4c54e498f7118a5f620470c7e027fce04a9bf87b5c50b147b9a44d2fff5ae857"
        },
        {
          "alg": "SHA3-384",
          "content": "f1c1458199a57f9c9ee1f32f2cdd7e3bb979c42a0cae715735b7f473c1eeca2dc3c9fed1549713f9a39c7700b2db42db"
        },
        {
          "alg": "SHA3-256",
          "content": "e115794b4f8acf570a872bd0fdfaa4624ccf57c04ee77d4aa238923e33d6a252"
        },
        {
          "alg": "SHA3-512",
          "content": "f98d4cd5579150e78e20630a8f4fbdee4e1e9eb2afa7dc5edf9a8bf692c42250a61dda7daa7ec9c18af4b8c413fbd0fe93abdf440c51766f0e1a17bdade37ec8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.google.api/gax@2.81.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/sdk-platform-java",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/googleapis/sdk-platform-java/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/sdk-platform-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.grpc/grpc-api@1.81.0?type=jar",
      "group": "io.grpc",
      "name": "grpc-api",
      "version": "1.81.0",
      "description": "gRPC: API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e20b9839dbdb36c7a244b0f80c9c96bb"
        },
        {
          "alg": "SHA-1",
          "content": "7a5827c8180858b12ba3d308c7ce31e95002b6ed"
        },
        {
          "alg": "SHA-256",
          "content": "3e6a659ba3edcdac730c857b27725e2e4d985c2241055e8326eb4fe0f9573d53"
        },
        {
          "alg": "SHA-512",
          "content": "f03336b82344848c7dfe51bd6bfe39cb2264b995da0c8292ce209e5988f91e4823ac62a63808bf460faaa67c6b8abe6dcf80f71bed6ff6b9910860b2bbb6ce8e"
        },
        {
          "alg": "SHA-384",
          "content": "21796ada3e05f81167df5351b1bc9e645f7a2f2475092d9c868bd8e79372d10d1bfd5ba8e74957e29da8f8b22a0e924c"
        },
        {
          "alg": "SHA3-384",
          "content": "c3ce688ee606c772013983961fb663c1ab6e8cfe94f3f794c73dbf52211c9c7f37f57561e196761688e81f6a78385e62"
        },
        {
          "alg": "SHA3-256",
          "content": "524fc17b730ec117cef5cc75545c66d89bea1b2808869ac65989c1d740b7355b"
        },
        {
          "alg": "SHA3-512",
          "content": "5d198429bd74f1bde9be473df65b98b4beccbdd07f45afc851fe5c586ee107cc0c7fdd09dbfb10d5c6cc382c1ebd5bf64007679c1dfc63b62377b0c49c75668a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.grpc/grpc-api@1.81.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/grpc/grpc-java",
          "type": "website"
        },
        {
          "url": "https://github.com/grpc/grpc-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.cloud.sql/schemas@1.28.6?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.cloud.sql",
      "name": "schemas",
      "version": "1.28.6",
      "description": "Generated source code to support the Metadata Exchange Protocol.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "12e70810ffa60572ee113615c6f5f846"
        },
        {
          "alg": "SHA-1",
          "content": "5a8f1277a673e7dc98f9000a7ac4bcfd79e10f46"
        },
        {
          "alg": "SHA-256",
          "content": "794aa19027193108a4b00ed1c6aacba3184a547faf17f29e25cd8d424448a8cf"
        },
        {
          "alg": "SHA-512",
          "content": "04acc6df0d471123586d87e3aa433800582126045be70cabf4a16463dcd480a5db8e49517b75e7ea41195694b2306e644a179786ddffacf597a86cd8350cbea0"
        },
        {
          "alg": "SHA-384",
          "content": "0971c03f6aaa5befa804d71dc09dbf41f70a37f1e2c3b5fe742b3707e91bfe28b5895b8b52640d7c2e23b235002d086d"
        },
        {
          "alg": "SHA3-384",
          "content": "fc28fcb65c12a9d853bae1e47a7062065239ec029e30547cd045589f31aaa3fb9a3f163910a0bbfe4dcadfca00037f5f"
        },
        {
          "alg": "SHA3-256",
          "content": "008accb644f38515fbcb6f55c4b0637c11775a1b64655e6ee77d4051426ee07c"
        },
        {
          "alg": "SHA3-512",
          "content": "e1e3458ab507ee19448bdb3dcc16136d6c222f29de4ed2110df749d74cea8dd64ffa9bba094020e0896cf7cf72c1af38b7bf1fb7a3f267e7bf78a45dfec8996a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.cloud.sql/schemas@1.28.6?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/GoogleCloudPlatform/cloud-sql-mysql-socket-factory/schemas",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/googleapis/java-shared-config/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/GoogleCloudPlatform/cloud-sql-mysql-socket-factory.git/schemas",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-retry@2.4.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-retry",
      "version": "2.4.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0cdac2f0d96184c09dfe3e4f1705e963"
        },
        {
          "alg": "SHA-1",
          "content": "7072ed9351dc3a38a7c5a4a1ca21d3355e1f6453"
        },
        {
          "alg": "SHA-256",
          "content": "13cd52c89b69b9dbd68188877f16bdbeb3ae524d351a2d947f31ae07684c420a"
        },
        {
          "alg": "SHA-512",
          "content": "1e60cc69111eee4fe1d18d9c36e1baad62cc6ea06aa065cdce461fbd3cdc8c625f4ef818750def5b31469a80af2f8f52d4441aa946205b3203cafceed55655c0"
        },
        {
          "alg": "SHA-384",
          "content": "a1373917623fd647255c0c29533604d69d4f8395b8b7c50c95830447871d52d983df4a16a58990f9f7d6c242fdbb2903"
        },
        {
          "alg": "SHA3-384",
          "content": "b405c2ddefb6b78aa8d936c5c581e62cfdefc719c892da1625d82a624a6ac5afc60aa78251ccccbf056e8b6b4a4ce766"
        },
        {
          "alg": "SHA3-256",
          "content": "320682e81e53f54397c029244f5b1ee1b0cd589f88e57b00643e300c924f4623"
        },
        {
          "alg": "SHA3-512",
          "content": "9bc37b4a7fc968fc2c2f6f17b1083208b95a82aa5f826974a110cd9b057040071f02b850b32099f7657b20e36198da8eec5dd46e203a574338428d2f84d0845e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-retry@2.4.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-micrometer@2.4.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-micrometer",
      "version": "2.4.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b89d1f870641d912bbb350339b63bd94"
        },
        {
          "alg": "SHA-1",
          "content": "4d81d22237b84c5c075f805a0c7d4640bbd7ca33"
        },
        {
          "alg": "SHA-256",
          "content": "728613147bbbc0c329f69f5423b760778322e2f9af345cb0bd69b3fc89b17e88"
        },
        {
          "alg": "SHA-512",
          "content": "ec0f842b57a23b8536f9672c0c3eeb6831c9e9951be5862141ee029c6ff51994e9c3a046343ae985286acb3ab35766a770507fbaf35735aafc269fb28cf4fad4"
        },
        {
          "alg": "SHA-384",
          "content": "2187703d3e99f7f8b86f5d3280b3a247721752c38ef0dab42962729bf3ef6d88aff5eb34c6349e4b3f9e524d77ff1433"
        },
        {
          "alg": "SHA3-384",
          "content": "38f298fca66df6f9421b7cc92cfa13a537c49f57aa3651dd680684ca452fd764bc2e51e0d00b5774eb45b6126ebcf0da"
        },
        {
          "alg": "SHA3-256",
          "content": "2a57abc1c0ab88009c34b48f4135ce4e23974fc37deb33b99e4310cb8f0ff0a4"
        },
        {
          "alg": "SHA3-512",
          "content": "8b0f573a05168383121e9590c73c3263b43e9fc8f84b6813034baf07841d23661a965aa0abd348bc1c5b0166c9d3e50b896c8462b9d9381d60a7d1c08a10c9fe"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-micrometer@2.4.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.micrometer/micrometer-observation@1.17.0?type=jar",
      "group": "io.micrometer",
      "name": "micrometer-observation",
      "version": "1.17.0",
      "description": "Module containing Observation related code",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "921cb7a799d3e76983c9b90aa2cce23e"
        },
        {
          "alg": "SHA-1",
          "content": "2037bdaeb5725bdddb2390cbf93be3c19f8b8b48"
        },
        {
          "alg": "SHA-256",
          "content": "2fc95a327578d3b2a81c3ff40e646a4a21e46b0153ccbbf91690142bf80d9661"
        },
        {
          "alg": "SHA-512",
          "content": "dd2e1c883eb25ffc6fc6a4ff4c809266b540377cbb79930948cf2a2d3c9344da8fbb28489a8cb23be7fde951370fa91c6af99da1488d55c170a854193184c3a7"
        },
        {
          "alg": "SHA-384",
          "content": "c339f8d28c5c471edd65d774bf3e5574ca0486ef9f959e68d1c7c722ca13d412cc434dad0f55a53a133edac33469ea0c"
        },
        {
          "alg": "SHA3-384",
          "content": "0d2eb7cd3e75fa7352afbb298ef32bb3101b7b4bfb89da704c33ae54f5f21e37a9d8455827b22bfcc2a20a0518bb6cbb"
        },
        {
          "alg": "SHA3-256",
          "content": "070f3d9a51d8325082b02c46cda7423780a849aa52674c3d532d0007b319543a"
        },
        {
          "alg": "SHA3-512",
          "content": "efb32595ba5745242546901f3b14aba5a187e35972a282dae2030068aa6cb87496523ef394638c946a02f0c5c3fb87af351dc691769b283e9d47149dd1b46aaf"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.micrometer/micrometer-observation@1.17.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/micrometer-metrics/micrometer",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-bulkhead@2.4.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-bulkhead",
      "version": "2.4.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "dfd76f43ef9c2d7912a99c128af344bb"
        },
        {
          "alg": "SHA-1",
          "content": "eb8ba5861207fcaec13468eab5a4dbe1d9e9e66f"
        },
        {
          "alg": "SHA-256",
          "content": "d718b601cedd94946c7572caafac1d93f5c9695bad61e0e4b6518e3f5f7c6ccc"
        },
        {
          "alg": "SHA-512",
          "content": "00b42a5110c37bcef4df56a807882f1d6919ceb9fc53e0daca2564258d7dafd299925f2f5ef9ac65c076c2757a934f48e88028f7bf839a956d44350ecfd4d28e"
        },
        {
          "alg": "SHA-384",
          "content": "03455782043e549dcb307f728281cfc8ecb4a8d6dd96d944db0d8cdb9bf80bed43cef1370b65f32e71dc52505a0803f1"
        },
        {
          "alg": "SHA3-384",
          "content": "af46a0541107931e8f5f7995d0f40f35914c66b8944f56417aff9605d29f888f571a1afcca1ea81f384eb747cd350e40"
        },
        {
          "alg": "SHA3-256",
          "content": "b00fd36b17bfb3db6b0ee095f9980af4829df095fdf326f78b0a26163a4d3916"
        },
        {
          "alg": "SHA3-512",
          "content": "de367c0a1d1bfe4c38333f8668567416adee1eba420e80c4524842180da9e2dc09579d4b2063edbab2da1e468f1fd093e42adfe174b0afa372cd33f421f9146c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-bulkhead@2.4.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-ratelimiter@2.4.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-ratelimiter",
      "version": "2.4.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6a450ca57c1c0172ffc32c2355d4885d"
        },
        {
          "alg": "SHA-1",
          "content": "4017079c1f73b0cc73fcc53a25306f3f8743e64c"
        },
        {
          "alg": "SHA-256",
          "content": "09a3c33cced3e1135cefda8667914b32b7304429c509b07fca771bd92d0c1780"
        },
        {
          "alg": "SHA-512",
          "content": "d50e1bcb0700963bfe2b4802301cdf2156a553f29caae07aa8192a44e0a2abac703fa190b1527a9aeae1412ae9215d701b494220ee3f3edfdeb9d3b3652f71ae"
        },
        {
          "alg": "SHA-384",
          "content": "6ee2786d1c40380381393adb6beef91b978bc9ba66647b16316ab448e3c97e2eb486521ebfdb965c5db6aae7c72e0fb6"
        },
        {
          "alg": "SHA3-384",
          "content": "189831d7d92301ca5f1211909d8787cb4a2fa6d9f267e3af9b0d9900dfe718ec75130d26110c21b34c59674e1f2720e4"
        },
        {
          "alg": "SHA3-256",
          "content": "8ac8f08bc4c21b1dcff1e8561364e5c7149523cdd658cecc426eb9fcfc4114d0"
        },
        {
          "alg": "SHA3-512",
          "content": "c078763d56a7190c102719fac6c012bd4c4d6e4e1b61c8201a8ed9909b4c7736c9d681163a0c46d99251ac1d2186d158ffd6539666bccf8b5ac759825dc2f755"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-ratelimiter@2.4.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-timelimiter@2.4.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-timelimiter",
      "version": "2.4.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2d421c59f3f87eaee243997f529cf5b4"
        },
        {
          "alg": "SHA-1",
          "content": "28351433fa75cccb0e0c8154676a427b5b4a3340"
        },
        {
          "alg": "SHA-256",
          "content": "946237017a5f52a878cfad8227c3eb6b957482be30d25a409cb8004e13237d38"
        },
        {
          "alg": "SHA-512",
          "content": "74e100e06388785058cd506459a0190bef879953dfd2ae2e3f16dcc83e76c5ecff62880d8ac7b96fcdf4087e863f4f3423b44290010a15a5b64c60808d2544f1"
        },
        {
          "alg": "SHA-384",
          "content": "586453333996b3d2b8150277eb41dbb7e2146b8e2a877e7cf8932cdddfe8a0e7c690335ba6e53e7051b0265a5016ecfa"
        },
        {
          "alg": "SHA3-384",
          "content": "b99c965e83e8f57bded1e66856b1278525947bea15c905dda5e13333ab9b82ebc5d0c27f14e6a8961ee32a0861995772"
        },
        {
          "alg": "SHA3-256",
          "content": "8709bedf51af90c9ee3c31b64fb893a199ef5defe54670507825b15551312737"
        },
        {
          "alg": "SHA3-512",
          "content": "865aa0e62b990fda80679824ae9ba32b631fe6cd72ea437201e0ce43bbae1b3a5c23fcdfe7454736822a7e6a38ba68456494f694775fc7b06a1077847357e988"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-timelimiter@2.4.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.slf4j/log4j-over-slf4j@2.0.18?type=jar",
      "publisher": "QOS.ch",
      "group": "org.slf4j",
      "name": "log4j-over-slf4j",
      "version": "2.0.18",
      "description": "Log4j implemented over SLF4J",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "98ec26919bc690052e2912dad2ee2abd"
        },
        {
          "alg": "SHA-1",
          "content": "9346cfcbbe1cd58c8f80ca04de4c709fba22052c"
        },
        {
          "alg": "SHA-256",
          "content": "d030643b4b3371ac79ce9a5bf2e4f82b65ee5621e2c0c6bbfb254d74c9a90df6"
        },
        {
          "alg": "SHA-512",
          "content": "1af189c18a92a946d3d0e657dc028afaa80bbc03d26fcda5b76c237edf30d2ab3b98f949706ed4751f369ad8334d2ecf8e199ca0f5173d35096bf764859e8021"
        },
        {
          "alg": "SHA-384",
          "content": "744a93867dd330e545ed505f383d87cc6ec3b928a7f99f69932a06a3e35d38d3ed094ad46970c8efe3ad19c8f8a1a1d5"
        },
        {
          "alg": "SHA3-384",
          "content": "d5a54ea78edabc28151f4b27b7c918030fa2964182684229547314acae1e8af5d70299bfd2fd9302e31a80a34ef5806d"
        },
        {
          "alg": "SHA3-256",
          "content": "e2ade27d9fa1565c7d9612eeebc127587bf9d257a159a23c0a42d7e3a568dd0b"
        },
        {
          "alg": "SHA3-512",
          "content": "8b25d1c720684f872afdd3318b452b0887ddc0f5d31a9290cba8414aef58a91ed8315db600a46d7502117e71fed0d6783cda2f783985051b6b8df68ade90e54d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.slf4j/log4j-over-slf4j@2.0.18?type=jar",
      "externalReferences": [
        {
          "url": "http://www.slf4j.org",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/qos-ch/slf4j/slf4j-parent/log4j-over-slf4j",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.22.1?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.dataformat",
      "name": "jackson-dataformat-yaml",
      "version": "2.22.1",
      "description": "Support for reading and writing YAML-encoded data via Jackson abstractions.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8348dc064a58fb2ae67371764b634812"
        },
        {
          "alg": "SHA-1",
          "content": "af5fde2414e4a8d2617e7890f7068c26b5b66a33"
        },
        {
          "alg": "SHA-256",
          "content": "cc3a0e540791a9a1cbcd7584767b84572ffda0b72823856558f47dea69ae8ed1"
        },
        {
          "alg": "SHA-512",
          "content": "12398c493aa3b54716813a6297b72104fa52ab324bae54512e41a1285ac756fcbb800084c088f8e9d3aceae2e698ca164bc547421d5fe2fb62ed2dadf1d3d000"
        },
        {
          "alg": "SHA-384",
          "content": "2f20d92e2fc1932406055a055e0602c9d0a96d7c19b75aeb7dca7c19b30e65bd126677a9bb855ef493be8f4be1feaf62"
        },
        {
          "alg": "SHA3-384",
          "content": "e0bc342c2bcd8d91b674657a28e0a762d68232729d7a53d0c04ba63807a1f6bc458bfb64c422408f0cb701ce753ff7cd"
        },
        {
          "alg": "SHA3-256",
          "content": "2d33856e0e0aa27571950d57227a66ab78f22c5cecf7c07afc3ad4dbe3b4b4ae"
        },
        {
          "alg": "SHA3-512",
          "content": "47bdf965089a1949286216aed3b286d8990a3b9169dacb15f0a6f36df07ee397d0ecbcc1294228479068cdbff4b1d8a11718ad5efa744952c34eb092e62cf644"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.22.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-dataformats-text",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-dataformats-text/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-dataformats-text/jackson-dataformat-yaml",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.minio/minio@9.0.3?type=jar",
      "group": "io.minio",
      "name": "minio",
      "version": "9.0.3",
      "description": "MinIO Java SDK for Amazon S3 Compatible Cloud Storage",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "63fca58827ec65d71930f31d04832460"
        },
        {
          "alg": "SHA-1",
          "content": "f44ec333c12a1a3773c92d8d48e9f5d52942d4e6"
        },
        {
          "alg": "SHA-256",
          "content": "db827b8ede16cfa33196b1249ecc7f7df0391c6d2a82e841499d09f84df7b11c"
        },
        {
          "alg": "SHA-512",
          "content": "5c3dc1c2a75f6b0f8ad3a7b30fc87236fd8545d516dac54372fdd5f2ecce6fac6a6bcce0fd29fe2c6c3ef9fcd433618624484262fa543f5b6002b72dc3d5ccbf"
        },
        {
          "alg": "SHA-384",
          "content": "924a5fbb47d05c2d54d33c9553bd60c22368d8b03eaa1ebde0219292ace0eb83fbc51a5c7f9d166e891e65b62e2c9a09"
        },
        {
          "alg": "SHA3-384",
          "content": "3be4b9555bd3267d1406986da5674188205ad4ea21bd0a033115921a15ee3677e718682b5c032f73e824f33bf81b6330"
        },
        {
          "alg": "SHA3-256",
          "content": "8793cb0022f8230c6affb7f3afc152ea34aa63d36d507bca83d534f09b595b9d"
        },
        {
          "alg": "SHA3-512",
          "content": "a1c50384ed0c280f36105a3b717f194dacefc4b3021b55994802635f48cc50361f4249b87c71e385636a677633419e9beaf2e011e97090e6a743065773574bcd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.minio/minio@9.0.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/minio/minio-java",
          "type": "website"
        },
        {
          "url": "http://github.com/minio/minio-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.carrotsearch.thirdparty/simple-xml-safe@2.7.1?type=jar",
      "publisher": "Carrot Search s.c.",
      "group": "com.carrotsearch.thirdparty",
      "name": "simple-xml-safe",
      "version": "2.7.1",
      "description": "A fork of Niall Gallagher\u0027s simple-xml library with web-safe defaults",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "150936ed745f2c207db42931d7d5839b"
        },
        {
          "alg": "SHA-1",
          "content": "045fda5ac6087bc82a209d8cdb73f8d0dbdcfc7b"
        },
        {
          "alg": "SHA-256",
          "content": "4506e4bb57d41481936f0ac684468ca4b2cc9e002ca8466ee19e23228d455957"
        },
        {
          "alg": "SHA-512",
          "content": "d13c25a9c4b7ce07e6b096e37591b37e415332d3e1adcb65c753238f1c3d968a98293223a720101b0af0d76c4bd9f8a0d487de9b0122172187b59e923877592a"
        },
        {
          "alg": "SHA-384",
          "content": "a96086b4fe29a470978638f14d5508daa1f1f2a629de4cc424964e8c05a7d0d6960650b5536aee098fda03c6b5a8acae"
        },
        {
          "alg": "SHA3-384",
          "content": "3975d435b3f32c32dfdebc88625c7226d5052275269f4b0533f0d2cca05fd7d91c9a7ca58eb9559a6f4855166d3fd4bc"
        },
        {
          "alg": "SHA3-256",
          "content": "ed6f680d21c9fc1cd9606dc0dfcbbbed7baa71d41c51654b32159fef896d8806"
        },
        {
          "alg": "SHA3-512",
          "content": "d35d823731ce1d4bd9dbfca093f59ab91346b2b7f901c43c5aabe36fdc6ad5e1af130129da75dc9d731c3d9597e53afe888efefd752891b4f09f3eb2a8a6a5f5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.carrotsearch.thirdparty/simple-xml-safe@2.7.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/dweiss/simplexml",
          "type": "website"
        },
        {
          "url": "https://github.com/dweiss/simplexml",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.squareup.okhttp3/okhttp@5.4.0?type=jar",
      "group": "com.squareup.okhttp3",
      "name": "okhttp",
      "version": "5.4.0",
      "description": "Square\u2019s meticulous HTTP client for Java and Kotlin.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "51ff6835e18758e9ec30bfbe29d42282"
        },
        {
          "alg": "SHA-1",
          "content": "eb39f0d8a8bb9d0ad292551b830d662fea547d90"
        },
        {
          "alg": "SHA-256",
          "content": "aebaab3fe77633befcf69fd0ee3052083999a7eaa98d6f2f7c4b498e7bdbb732"
        },
        {
          "alg": "SHA-512",
          "content": "2f781d52a71806d226aa5e070c4d0b71220217d341ae4b02fb47058becece2347e660eb263f96b49f49530ab4576fe7110f9b28472acc6b01e2890e02008c753"
        },
        {
          "alg": "SHA-384",
          "content": "f07d775b5d0caf2fc7a07c474b4d9dc968691082b9b8c331cf555f1fecdff9b5b800f377813b505ec0fe016f14f235e1"
        },
        {
          "alg": "SHA3-384",
          "content": "3ea2267f9512cdda787dd75ebd40ff20a06744cb51d5cace53a1b33c5a7e14c93ae88ac636e3186beb47e42a893e135f"
        },
        {
          "alg": "SHA3-256",
          "content": "98526bf410948cc57063b243122ad5f058bf1f62e4230b4efb9c14c1f74bf1da"
        },
        {
          "alg": "SHA3-512",
          "content": "1399a16c3ab378e106f94dbce4389260a3fd75971031f641a1aa56ea9afc50641738ed4290194cdda9754201862763cfb02efb56c2c4a08eee0dab3c7acd855a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.squareup.okhttp3/okhttp@5.4.0?type=jar",
      "externalReferences": [
        {
          "url": "https://square.github.io/okhttp/",
          "type": "website"
        },
        {
          "url": "https://github.com/square/okhttp",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.squareup.okio/okio@3.17.0?type=jar",
      "group": "com.squareup.okio",
      "name": "okio",
      "version": "3.17.0",
      "description": "A modern I/O library for Android, Java, and Kotlin Multiplatform.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "97f50ce670f601dd9985efd82574fc7c"
        },
        {
          "alg": "SHA-1",
          "content": "8ef358a316477e91dbe32e78abf6c8c49e1a06df"
        },
        {
          "alg": "SHA-256",
          "content": "892898ff13b0cfda5f0bf689eb33b7c00c853b2531fcd4fe20fe5302d37981d8"
        },
        {
          "alg": "SHA-512",
          "content": "45ff512698550fb67d3785e2bdcd1c5ace2a56e6bbb30e4253681f0da4b30e4fde88b5700b8b5a45cac2a366e9e6a0a817b7311c837810be7932386ce7d84d79"
        },
        {
          "alg": "SHA-384",
          "content": "a4cf1c2d5ed71bc66cc2a33dabbada4e80226436b8c54a1f8666e53e2b7b08a3dbeb61336d1ac21e06f6fc72f363acfb"
        },
        {
          "alg": "SHA3-384",
          "content": "d00b7e0514552f7e3b101f0a9fac5b5b58d7e002a2317cb74c1d3064f4a06d1b795a76c3f21493133457793eb3a28a51"
        },
        {
          "alg": "SHA3-256",
          "content": "9605f1cd62cc7d9a8a7bda33e3f9d97f2ea9a9d24afd1d02a33c691b27c81b8a"
        },
        {
          "alg": "SHA3-512",
          "content": "b149a60d6a20ae3ac0b4ab4b42ebf9310654eb0e565a606914632ad20ff6fffea784e60b6dc68bfaaf214ef095f2096631bb5b86eb95bdda28b4ace642fcaf5f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.squareup.okio/okio@3.17.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/square/okio/",
          "type": "website"
        },
        {
          "url": "https://github.com/square/okio/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.commons",
      "name": "commons-compress",
      "version": "1.28.0",
      "description": "Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f33efe616d561f8281ef7bf9f2576ad0"
        },
        {
          "alg": "SHA-1",
          "content": "e482f2c7a88dac3c497e96aa420b6a769f59c8d7"
        },
        {
          "alg": "SHA-256",
          "content": "e1522945218456f3649a39bc4afd70ce4bd466221519dba7d378f2141a4642ca"
        },
        {
          "alg": "SHA-512",
          "content": "f1f140f4f40ab3cf3265919db9dbb95a631a29aa784e305f291de4e68876bb711d9217d62d7937cddddd393982decdf71a608b4b3ab7f4e6375cf28af2893d7f"
        },
        {
          "alg": "SHA-384",
          "content": "afe6a8fc8e7486c4ecce95276bb1467763d7ff7d941c7bcff8661bbbd4bff442fd0899ff7a11bc540cda86818ee4a8f0"
        },
        {
          "alg": "SHA3-384",
          "content": "6afb636ad0805e522913cfd91c8293c485b7f4eff5e45dd3a17a716c3f4b8ab8969e9c00927559a5fb762cba1fdb3d3f"
        },
        {
          "alg": "SHA3-256",
          "content": "4420e0b462b5dcc45077e95e012a82a5ae17659e5abe8a685fa086dab6995298"
        },
        {
          "alg": "SHA3-512",
          "content": "23e37d13c8ee6c7369e407c29d1f9ee1bb44eca9f09a6f9742f6b4cf3d38dd7a0509fe0142536cd8087b68a76e71d819105af2c23f2aeed08acc58eb93cf7e61"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar",
      "externalReferences": [
        {
          "url": "https://commons.apache.org/proper/commons-compress/",
          "type": "website"
        },
        {
          "url": "https://github.com/apache/commons-compress/actions",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/COMPRESS",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/commons-user/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitbox.apache.org/repos/asf?p=commons-compress.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.8?type=jar",
      "publisher": "xerial.org",
      "group": "org.xerial.snappy",
      "name": "snappy-java",
      "version": "1.1.10.8",
      "description": "snappy-java: A fast compression/decompression library",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a25bd213d1ca2f3c605c5f03050db070"
        },
        {
          "alg": "SHA-1",
          "content": "ccbaa2b5ea6a023a27c44daf2d6cdec0e138592d"
        },
        {
          "alg": "SHA-256",
          "content": "50485d06037fea3d6e40c968386feeca6338cc9872e25549593ff3eb352cefcc"
        },
        {
          "alg": "SHA-512",
          "content": "c7133f726f366b9f06df98d94b4dd7c91c7702c543e1a318055a886af5e625d8231b0a6728250596181bc20a6c4147855eeb02ed55c447fe13ff2156e29985a9"
        },
        {
          "alg": "SHA-384",
          "content": "aeb78b3f4c56ce769f5fda9cfabe00be77d21b93637f70601c28b16eef41405e1291001c3a6e45001b356543e33b664b"
        },
        {
          "alg": "SHA3-384",
          "content": "6137f6354b574d8decb579ad9147dd9463e3a9f62d1e929266bee1adc020f57382973d0a1abf9daeb2007bb32671fed8"
        },
        {
          "alg": "SHA3-256",
          "content": "f44a4a8cffe82ce6c99b401e9d822e71cdfc63c1b279b278282eda07243b2a94"
        },
        {
          "alg": "SHA3-512",
          "content": "655731ef3b20a2cec213138c170f7dc7182c2a09536d74c1d8a13224bb204dd706a35749bf99b51c4b945b75784a0a26c60931a158d27e1378ccd1c8ac7a0783"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.8?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/xerial/snappy-java",
          "type": "website"
        },
        {
          "url": "https://github.com/xerial/snappy-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.squareup.okhttp3/okhttp-jvm@5.4.0?type=jar",
      "group": "com.squareup.okhttp3",
      "name": "okhttp-jvm",
      "version": "5.4.0",
      "description": "Square\u2019s meticulous HTTP client for Java and Kotlin.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f79f61c92f5dc7fd399b7e36731b7b9e"
        },
        {
          "alg": "SHA-1",
          "content": "e1fae6fccaae70e60b31153c6a7680306a86ed31"
        },
        {
          "alg": "SHA-256",
          "content": "b15e605ca0a4b12c62ea7f657dad413c236c947e875854767349cdbe20df473c"
        },
        {
          "alg": "SHA-512",
          "content": "2b5da32a14319d78ebb62067011dd0f4533ae95652d153e84f9803fab55cb1eedc8a3aaa189efa5ebacdc7e52b8618c08dd20e82e73e91305dc12038ca8e1e76"
        },
        {
          "alg": "SHA-384",
          "content": "5725efe5dd02576a36cf67e9e50db1bc04840ff121e19de8b2ce22efbc879a4dcd0372421d7c4642648580b4bf96a77d"
        },
        {
          "alg": "SHA3-384",
          "content": "99bdc556b02f827c8613af5198956f4b139676f36fbd08f05fcaf2f28cf518739e1284d1cf7b37b1e35a159e057f0707"
        },
        {
          "alg": "SHA3-256",
          "content": "ebda7d4c3befb6937738e34a158c185066d3e4fa184d068c4f2424ec5285435d"
        },
        {
          "alg": "SHA3-512",
          "content": "da2a72208f4c3c826d98ed1229804f05561a95ff88fd3841a8095cb711c6491138afbbac3036e0f1121d8d75bb4d2e9b516df074f597e51c558240f03f1b6dec"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.squareup.okhttp3/okhttp-jvm@5.4.0?type=jar",
      "externalReferences": [
        {
          "url": "https://square.github.io/okhttp/",
          "type": "website"
        },
        {
          "url": "https://github.com/square/okhttp",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@2.4.10?type=jar",
      "group": "org.jetbrains.kotlin",
      "name": "kotlin-stdlib",
      "version": "2.4.10",
      "description": "Kotlin Standard Library",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5b757154baf259203dc5a025571bec14"
        },
        {
          "alg": "SHA-1",
          "content": "8943c84ddc6d5cc00a10dbc3736c397066eeaab5"
        },
        {
          "alg": "SHA-256",
          "content": "4ec0293bc3751423b203f1d8493251c57c42e73eb6377a6b8560d0974ff0a6df"
        },
        {
          "alg": "SHA-512",
          "content": "2214a0acb80919a40f3d45416e9c22f7fd32a6c63b70d3b7435a66d9f729dd5e77c40081b549ce570cea4c2c87b261069b575e515376033b35cb969b2faa3d3d"
        },
        {
          "alg": "SHA-384",
          "content": "b6c7b91bb950082b9bf4f3fdec8afad121b55a839ba90cf6bc4f074321f2bfd9f676e8e3d995e184778eda583ddaf35a"
        },
        {
          "alg": "SHA3-384",
          "content": "3cdcd8336b1a3b2d8b4a2bcf29ef1a6f99bfc90fc05672543fb6659ecae8847ca7a9dc688109e49f308d5ceb587d9ad2"
        },
        {
          "alg": "SHA3-256",
          "content": "4e0cef3945e498896f451d64516dc84560451095bf86a0bdc36e5044bceb587c"
        },
        {
          "alg": "SHA3-512",
          "content": "2fdde4473787035201db7153b1f45f93ddfe21542e668839b6afe12d6b802ae345f90a46215ba1ca1fef3c98a502d2853912577c935f0839dde6ca30a0c57fdb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@2.4.10?type=jar",
      "externalReferences": [
        {
          "url": "https://kotlinlang.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/JetBrains/kotlin",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jetbrains/annotations@13.0?type=jar",
      "group": "org.jetbrains",
      "name": "annotations",
      "version": "13.0",
      "description": "A set of annotations used for code inspection support and code documentation.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f4fb462172517b46b6cd90003508515a"
        },
        {
          "alg": "SHA-1",
          "content": "919f0dfe192fb4e063e7dacadee7f8bb9a2672a9"
        },
        {
          "alg": "SHA-256",
          "content": "ace2a10dc8e2d5fd34925ecac03e4988b2c0f851650c94b8cef49ba1bd111478"
        },
        {
          "alg": "SHA-512",
          "content": "5622d0ffe410e7272e2bb9fae1006caedeb86d0c62d2d9f3929a3b3cdcdef1963218fcf0cede82e95ef9f4da3ed4a173fa055ee6e4038886376181e0423e02ff"
        },
        {
          "alg": "SHA-384",
          "content": "6bcde3a6e471d416522e6288474bc4f9115e2e8abf8ce5d300829bee4aa98dff73be7d8c6f0607f3d6d423c7f5abbf90"
        },
        {
          "alg": "SHA3-384",
          "content": "f4d5a5d5a76b24c4751c8c52f2879b097d2430c3571c59b4630e8c871c9bdb08e24e803a14c24fc8d3378417f29b7244"
        },
        {
          "alg": "SHA3-256",
          "content": "b4a80ea81c4bc7e364e07981465f547e8ed83031806eaf3b97dfb38f894f5b6f"
        },
        {
          "alg": "SHA3-512",
          "content": "15b23bce818b4399b334dd632eb85de5a1b70c47fb9260561e70b1f726211c83bddbc957f3b4c32a1d8c687f9bc6c38d0a638c731cb5daf5b619aa725d6050c2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jetbrains/annotations@13.0?type=jar",
      "externalReferences": [
        {
          "url": "http://www.jetbrains.org",
          "type": "website"
        },
        {
          "url": "http://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/JetBrains/intellij-community",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.squareup.okio/okio-jvm@3.17.0?type=jar",
      "group": "com.squareup.okio",
      "name": "okio-jvm",
      "version": "3.17.0",
      "description": "A modern I/O library for Android, Java, and Kotlin Multiplatform.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "96ad357689fd2841747aec56e94a7162"
        },
        {
          "alg": "SHA-1",
          "content": "a12d684ec0df9541b3869ae60a4a5257fd3613df"
        },
        {
          "alg": "SHA-256",
          "content": "3b13dcc3e1573047c2d507fc4f7fcb0bb0cbcd9d395da21d20e09406e2cd6a73"
        },
        {
          "alg": "SHA-512",
          "content": "2da2e240fb11ee254554bd59b94d4f9545078f69182a56cb528cb3228e42b8cd8e7a6547ed81d198f105413ff03e111f42a903ff092c4c3a0c3b46433ad10921"
        },
        {
          "alg": "SHA-384",
          "content": "ef53c6670e1819033ce2be6a4396795f693ba8d0d73a0e6507f5cd0baae7eaa9c6f1a0138482550e7a13cc2182af8e83"
        },
        {
          "alg": "SHA3-384",
          "content": "20d14db69ea7e8d692111057f7daecd595eccc56585550b18d042b1374cbf9edfcf1a24e8c1a2955e90341927bbd986b"
        },
        {
          "alg": "SHA3-256",
          "content": "fca6940c1a89a0951559cbb3a9aef63cdfff96ca0aaf2ef8b8847ef1d52e52a8"
        },
        {
          "alg": "SHA3-512",
          "content": "21fc1f60c7f201b85649e3eb5a56ad376f49e0d18dedd3d64c8bfdb6180c58a8fbb8cddf4411b6bea271908dfa09f7bf46d8bf138ca134bae38b8450d1ab478d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.squareup.okio/okio-jvm@3.17.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/square/okio/",
          "type": "website"
        },
        {
          "url": "https://github.com/square/okio/",
          "type": "vcs"
        }
      ]
    }
  ],
  "services": [
    {
      "bom-ref": "service:gov.nist.nvd",
      "provider": {
        "name": "National Institute of Standards and Technology (NIST)",
        "url": [
          "https://nist.gov"
        ],
        "contact": [
          {
            "email": "nvd@nist.gov"
          }
        ]
      },
      "group": "gov.nist.nvd",
      "name": "National Vulnerability Database (NVD)",
      "description": "Used as a vulnerability data source. CVE feeds are mirrored to Dependency-Track.",
      "endpoints": [
        "https://nvd.nist.gov/feeds"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "Public domain"
          }
        }
      ]
    },
    {
      "bom-ref": "service:org.sonatype.ossindex",
      "provider": {
        "name": "Sonatype",
        "url": [
          "https://sonatype.com"
        ],
        "contact": [
          {
            "email": "ossindex@sonatype.org"
          }
        ]
      },
      "group": "org.sonatype.ossindex",
      "name": "OSS Index",
      "description": "Optional vulnerability analyzer. Queried by component package URL to retrieve known vulnerabilities.",
      "endpoints": [
        "https://ossindex.sonatype.org/api/v3/component-report",
        "https://ossindex.sonatype.org/api/v3/version"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:com.cyberriskanalytics.vulndb",
      "provider": {
        "name": "Risk Based Security",
        "url": [
          "https://riskbasedsecurity.com/"
        ],
        "contact": [
          {
            "email": "support@riskbasedsecurity.com"
          },
          {
            "email": "sales@riskbasedsecurity.com",
            "phone": "1-855-RBS-RISK"
          }
        ]
      },
      "group": "com.cyberriskanalytics.vulndb",
      "name": "VulnDB",
      "description": "Optional commercial vulnerability analyzer. Queried for component vulnerabilities. Requires a paid subscription.",
      "endpoints": [
        "https://vulndb.cyberriskanalytics.com/api/v1/account_status",
        "https://vulndb.cyberriskanalytics.com/api/v1/vendors/",
        "https://vulndb.cyberriskanalytics.com/api/v1/products/",
        "https://vulndb.cyberriskanalytics.com/api/v1/versions/by_product_id",
        "https://vulndb.cyberriskanalytics.com/api/v1/vulnerabilities/",
        "https://vulndb.cyberriskanalytics.com/api/v1/vulnerabilities/find_by_cpe"
      ],
      "authenticated": true,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:com.github.api",
      "provider": {
        "name": "GitHub",
        "url": [
          "https://github.com/"
        ]
      },
      "group": "com.github.api",
      "name": "GitHub Advisories",
      "description": "Used as a vulnerability data source. GitHub Security Advisories are mirrored to Dependency-Track via GraphQL. Also queried for repository metadata of packages hosted on GitHub.",
      "endpoints": [
        "https://api.github.com/graphql",
        "https://api.github.com/repos/"
      ],
      "authenticated": true,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:io.crates",
      "provider": {
        "name": "Crates.io",
        "url": [
          "https://crates.io"
        ]
      },
      "group": "io.crates",
      "name": "Crates.io",
      "description": "Queried for package metadata and latest version information of Rust crates.",
      "endpoints": [
        "https://crates.io/api/v1/crates"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.packagist.repo",
      "provider": {
        "name": "Packagist",
        "url": [
          "https://packagist.org"
        ]
      },
      "group": "org.packagist.repo",
      "name": "Packagist",
      "description": "Queried for latest version information of PHP Composer packages.",
      "endpoints": [
        "https://repo.packagist.org/p/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.rubygems",
      "provider": {
        "name": "RubyGems",
        "url": [
          "https://rubygems.org"
        ]
      },
      "group": "org.rubygems",
      "name": "RubyGems",
      "description": "Queried for package metadata and latest version information of Ruby gems.",
      "endpoints": [
        "https://rubygems.org/api/v1/versions"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.golang.proxy",
      "provider": {
        "name": "Google",
        "url": [
          "https://go.dev/"
        ]
      },
      "group": "org.golang.proxy",
      "name": "Go Module Mirror, Index, and Checksum Database",
      "description": "Queried for package metadata and latest version information of Go modules.",
      "endpoints": [
        "https://proxy.golang.org/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:pm.hex",
      "provider": {
        "name": "Six Colors AB.",
        "url": [
          "https://hex.pm"
        ],
        "contact": [
          {
            "name": "Eric Meadows-J\u00F6nsson",
            "phone": "\u002B46 070-893 94 01"
          }
        ]
      },
      "group": "pm.hex",
      "name": "hex",
      "description": "Queried for package metadata and latest version information of Erlang and Elixir packages.",
      "endpoints": [
        "https://hex.pm/api/packages"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.maven.repo1",
      "provider": {
        "name": "Sonatype",
        "url": [
          "https://sonatype.com"
        ]
      },
      "group": "org.maven.repo1",
      "name": "Maven Central",
      "description": "Queried for package metadata and latest version information of Java artifacts.",
      "endpoints": [
        "https://repo1.maven.org/maven2"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:com.atlassian.maven",
      "provider": {
        "name": "Atlassian",
        "url": [
          "https://atlassian.com"
        ]
      },
      "group": "com.atlassian.maven",
      "name": "Atlassian Public",
      "description": "Queried for latest version information of Atlassian-published Maven artifacts.",
      "endpoints": [
        "https://packages.atlassian.com/content/repositories/atlassian-public/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.jboss.repository",
      "provider": {
        "name": "RedHat",
        "url": [
          "https://redhat.com"
        ]
      },
      "group": "org.jboss.repository",
      "name": "JBoss Releases",
      "description": "Queried for latest version information of JBoss-published Maven artifacts.",
      "endpoints": [
        "https://repository.jboss.org/nexus/content/repositories/releases/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.clojars.repo",
      "provider": {
        "name": "Clojars",
        "url": [
          "https://clojars.org/"
        ]
      },
      "group": "org.clojars.repo",
      "name": "Clojars",
      "description": "Queried for latest version information of Clojure libraries.",
      "endpoints": [
        "https://repo.clojars.org/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:com.google.maven",
      "provider": {
        "name": "Google",
        "url": [
          "https://google.com"
        ]
      },
      "group": "com.google.maven",
      "name": "Google\u0027s Maven Repository",
      "description": "Queried for latest version information of Google and Android Maven artifacts.",
      "endpoints": [
        "https://maven.google.com/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.npmjs.registry",
      "provider": {
        "name": "npm",
        "url": [
          "https://www.npmjs.com/"
        ]
      },
      "group": "org.npmjs.registry",
      "name": "NPM Registry",
      "description": "Queried for package metadata and latest version information of npm packages.",
      "endpoints": [
        "https://registry.npmjs.org/-/package/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.nuget.api",
      "provider": {
        "name": "Microsoft",
        "url": [
          "https://www.microsoft.com/"
        ],
        "contact": [
          {
            "email": "support@nuget.org"
          }
        ]
      },
      "group": "org.nuget.api",
      "name": "NuGet Registry",
      "description": "Queried for package metadata and latest version information of NuGet packages.",
      "endpoints": [
        "https://api.nuget.org/v3-flatcontainer/",
        "https://api.nuget.org/v3/registration3/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:dev.osv",
      "provider": {
        "name": "Google",
        "url": [
          "https://google.com"
        ]
      },
      "group": "dev.osv",
      "name": "OSV",
      "description": "Used as a vulnerability data source. Per-ecosystem OSV feeds are mirrored to Dependency-Track.",
      "endpoints": [
        "https://osv-vulnerabilities.storage.googleapis.com"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.pypi",
      "provider": {
        "name": "Python Software Foundation",
        "url": [
          "https://www.python.org/psf/"
        ],
        "contact": [
          {
            "email": "psf@python.org"
          }
        ]
      },
      "group": "org.pypi",
      "name": "PyPI",
      "description": "Queried for package metadata and latest version information of Python packages.",
      "endpoints": [
        "https://pypi.org/pypi/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.dependencytrack.metrics",
      "provider": {
        "name": "OWASP",
        "url": [
          "https://owasp.org"
        ]
      },
      "group": "org.dependencytrack.metrics",
      "name": "Dependency-Track Telemetry",
      "description": "Receives anonymous usage telemetry submitted by this Dependency-Track instance. Optional.",
      "endpoints": [
        "https://metrics.dependencytrack.org"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "outbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:io.snyk",
      "provider": {
        "name": "Snyk",
        "url": [
          "https://snyk.io"
        ]
      },
      "group": "io.snyk",
      "name": "Snyk",
      "description": "Optional commercial vulnerability analyzer. Queried for component vulnerabilities. Requires a paid subscription.",
      "endpoints": [
        "https://api.snyk.io"
      ],
      "authenticated": true,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:com.empiricalsecurity.epss",
      "provider": {
        "name": "Empirical Security",
        "url": [
          "https://www.first.org/epss/"
        ]
      },
      "group": "com.empiricalsecurity.epss",
      "name": "EPSS",
      "description": "Used as a source of EPSS exploit prediction scores for CVEs. Feeds are mirrored to Dependency-Track.",
      "endpoints": [
        "https://epss.empiricalsecurity.com/epss_scores-current.csv.gz"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.metacpan",
      "provider": {
        "name": "The Perl Foundation",
        "url": [
          "https://metacpan.org"
        ]
      },
      "group": "org.metacpan",
      "name": "MetaCPAN",
      "description": "Queried for latest version information of Perl modules on CPAN.",
      "endpoints": [
        "https://fastapi.metacpan.org/v1/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.haskell.hackage",
      "provider": {
        "name": "Haskell.org",
        "url": [
          "https://www.haskell.org"
        ]
      },
      "group": "org.haskell.hackage",
      "name": "Hackage",
      "description": "Queried for latest version information of Haskell packages.",
      "endpoints": [
        "https://hackage.haskell.org/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.nixos.channels",
      "provider": {
        "name": "NixOS Foundation",
        "url": [
          "https://nixos.org"
        ]
      },
      "group": "org.nixos.channels",
      "name": "Nixpkgs",
      "description": "Queried for latest version information of Nixpkgs packages.",
      "endpoints": [
        "https://channels.nixos.org/nixpkgs-unstable/packages.json.br"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.dependencytrack/apiserver@5.0.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/api@5.0.4?type=jar",
        "pkg:maven/org.dependencytrack/cache-api@5.0.4?type=jar",
        "pkg:maven/org.dependencytrack/cache-provider-database@5.0.4?type=jar",
        "pkg:maven/org.dependencytrack/common-init@5.0.4?type=jar",
        "pkg:maven/org.dependencytrack/common-pagination@5.0.4?type=jar",
        "pkg:maven/org.dependencytrack/datanucleus-plugin@5.0.4?type=jar",
        "pkg:maven/org.dependencytrack/migration@5.0.4?type=jar",
        "pkg:maven/org.dependencytrack/notification-api@5.0.4?type=jar",
        "pkg:maven/org.dependencytrack/notification-publishing@5.0.4?type=jar",
        "pkg:maven/org.dependencytrack/notification-templating@5.0.4?type=jar",
        "pkg:maven/org.dependencytrack/plugin-api@5.0.4?type=jar",
        "pkg:maven/org.dependencytrack/plugin-config@5.0.4?type=jar",
        "pkg:maven/org.dependencytrack/plugin-runtime@5.0.4?type=jar",
        "pkg:maven/org.dependencytrack/proto@5.0.4?type=jar",
        "pkg:maven/org.dependencytrack/secret-management@5.0.4?type=jar",
        "pkg:maven/org.dependencytrack/vuln-analysis-api@5.0.4?type=jar",
        "pkg:maven/org.dependencytrack/vuln-analyzer-internal@5.0.4?type=jar",
        "pkg:maven/org.dependencytrack/package-metadata-api@5.0.4?type=jar",
        "pkg:maven/org.dependencytrack/package-metadata-resolution@5.0.4?type=jar",
        "pkg:maven/org.dependencytrack/vuln-analyzer-oss-index@5.0.4?type=jar",
        "pkg:maven/org.dependencytrack/vuln-analyzer-snyk@5.0.4?type=jar",
        "pkg:maven/org.dependencytrack/vuln-analyzer-trivy@5.0.4?type=jar",
        "pkg:maven/org.dependencytrack/vuln-analyzer-vuln-db@5.0.4?type=jar",
        "pkg:maven/org.dependencytrack/dex-engine@5.0.4?type=jar",
        "pkg:maven/org.dependencytrack/file-storage-api@5.0.4?type=jar",
        "pkg:maven/org.dependencytrack/file-storage-provider-local@5.0.4?type=jar",
        "pkg:maven/org.dependencytrack/file-storage-provider-memory@5.0.4?type=jar",
        "pkg:maven/org.dependencytrack/file-storage-provider-s3@5.0.4?type=jar",
        "pkg:maven/org.dependencytrack/vuln-data-source-api@5.0.4?type=jar",
        "pkg:maven/org.dependencytrack/vuln-data-source-github@5.0.4?type=jar",
        "pkg:maven/org.dependencytrack/vuln-data-source-nvd@5.0.4?type=jar",
        "pkg:maven/org.dependencytrack/vuln-data-source-osv@5.0.4?type=jar",
        "pkg:maven/org.dependencytrack/alpine-common@5.0.4?type=jar",
        "pkg:maven/org.dependencytrack/alpine-model@5.0.4?type=jar",
        "pkg:maven/org.dependencytrack/alpine-infra@5.0.4?type=jar",
        "pkg:maven/org.dependencytrack/alpine-server@5.0.4?type=jar",
        "pkg:maven/dev.cel/cel@0.13.1?type=jar",
        "pkg:maven/dev.cel/extensions@0.4.1?type=jar",
        "pkg:maven/org.metaeffekt.core/ae-security@0.156.5?type=jar",
        "pkg:maven/com.github.kagkarlsson/db-scheduler@16.12.0?type=jar",
        "pkg:maven/org.dependencytrack/jdbi-support@5.0.4?type=jar",
        "pkg:maven/org.jdbi/jdbi3-core@3.54.0?type=jar",
        "pkg:maven/org.jdbi/jdbi3-jackson2@3.54.0?type=jar",
        "pkg:maven/org.jdbi/jdbi3-sqlobject@3.54.0?type=jar",
        "pkg:maven/org.jdbi/jdbi3-postgres@3.54.0?type=jar",
        "pkg:maven/org.jdbi/jdbi3-freemarker@3.54.0?type=jar",
        "pkg:maven/org.glassfish.jersey.ext/jersey-micrometer@4.0.2?type=jar",
        "pkg:maven/us.springett/owasp-risk-rating-calculator@1.0.1?type=jar",
        "pkg:maven/us.springett/cpe-parser@3.0.1?type=jar",
        "pkg:maven/org.cyclonedx/cyclonedx-core-java@12.1.0?type=jar",
        "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar",
        "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-server@12.1.11?type=jar",
        "pkg:maven/org.eclipse.jetty.compression/jetty-compression-gzip@12.1.11?type=jar",
        "pkg:maven/org.eclipse.jetty.compression/jetty-compression-server@12.1.11?type=jar",
        "pkg:maven/org.eclipse.jetty.ee11/jetty-ee11-servlet@12.1.11?type=jar",
        "pkg:maven/org.slf4j/jul-to-slf4j@2.0.18?type=jar",
        "pkg:maven/io.swagger.core.v3/swagger-annotations-jakarta@2.2.52?type=jar",
        "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.22.1?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
        "pkg:maven/com.asahaf.javacron/javacron@1.4.0?type=jar",
        "pkg:maven/io.micrometer/micrometer-java11@1.17.0?type=jar",
        "pkg:maven/io.micrometer/micrometer-registry-prometheus@1.17.0?type=jar",
        "pkg:maven/io.prometheus/prometheus-metrics-exposition-textformats@1.8.0?type=jar",
        "pkg:maven/io.github.mweirauch/micrometer-jvm-extras@0.3.0?type=jar",
        "pkg:maven/io.pebbletemplates/pebble@4.1.2?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.35.1?type=jar",
        "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.2.1?type=jar",
        "pkg:maven/io.github.nscuro/versatile-core@0.21.1?type=jar",
        "pkg:maven/org.postgresql/postgresql@42.7.13?type=jar",
        "pkg:maven/com.google.cloud.sql/postgres-socket-factory@1.28.6?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-retry@2.4.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-micrometer@2.4.0?type=jar",
        "pkg:maven/org.slf4j/log4j-over-slf4j@2.0.18?type=jar",
        "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.22.1?type=jar",
        "pkg:maven/io.minio/minio@9.0.3?type=jar",
        "pkg:maven/com.squareup.okhttp3/okhttp-jvm@5.4.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/api@5.0.4?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/cache-api@5.0.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@3.1.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@3.1.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/cache-provider-database@5.0.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/common-datasource@5.0.4?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/io.micrometer/micrometer-core@1.17.0?type=jar",
        "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@3.1.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/common-datasource@5.0.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/common-health@5.0.4?type=jar",
        "pkg:maven/com.zaxxer/HikariCP@7.1.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/io.micrometer/micrometer-core@1.17.0?type=jar",
        "pkg:maven/org.postgresql/postgresql@42.7.13?type=jar",
        "pkg:maven/io.smallrye.config/smallrye-config-core@3.18.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/common-health@5.0.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.eclipse.microprofile.health/microprofile-health-api@4.0.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.microprofile.health/microprofile-health-api@4.0.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.zaxxer/HikariCP@7.1.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.micrometer/micrometer-core@1.17.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/io.micrometer/micrometer-commons@1.17.0?type=jar",
        "pkg:maven/io.micrometer/micrometer-observation@1.17.0?type=jar",
        "pkg:maven/org.hdrhistogram/HdrHistogram@2.2.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.micrometer/micrometer-commons@1.17.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.micrometer/micrometer-observation@1.17.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/io.micrometer/micrometer-commons@1.17.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.hdrhistogram/HdrHistogram@2.2.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.postgresql/postgresql@42.7.13?type=jar",
      "dependsOn": [
        "pkg:maven/org.checkerframework/checker-qual@3.55.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.checkerframework/checker-qual@3.55.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.smallrye.config/smallrye-config-core@3.18.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@3.1.1?type=jar",
        "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar",
        "pkg:maven/io.smallrye.common/smallrye-common-annotation@2.19.0?type=jar",
        "pkg:maven/io.smallrye.common/smallrye-common-expression@2.19.0?type=jar",
        "pkg:maven/io.smallrye.common/smallrye-common-constraint@2.19.0?type=jar",
        "pkg:maven/io.smallrye.common/smallrye-common-classloader@2.19.0?type=jar",
        "pkg:maven/org.jboss.logging/jboss-logging@3.6.1.Final?type=jar",
        "pkg:maven/org.ow2.asm/asm@9.10.1?type=jar",
        "pkg:maven/io.smallrye.config/smallrye-config-common@3.18.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.smallrye.common/smallrye-common-annotation@2.19.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.smallrye.common/smallrye-common-expression@2.19.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.smallrye.common/smallrye-common-function@2.19.0?type=jar",
        "pkg:maven/org.jboss.logging/jboss-logging@3.6.1.Final?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.smallrye.common/smallrye-common-function@2.19.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.smallrye.common/smallrye-common-constraint@2.19.0?type=jar",
        "pkg:maven/org.jboss.logging/jboss-logging@3.6.1.Final?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.smallrye.common/smallrye-common-constraint@2.19.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.jboss.logging/jboss-logging@3.6.1.Final?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jboss.logging/jboss-logging@3.6.1.Final?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.smallrye.common/smallrye-common-classloader@2.19.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.ow2.asm/asm@9.10.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.smallrye.config/smallrye-config-common@3.18.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@3.1.1?type=jar",
        "pkg:maven/io.smallrye.common/smallrye-common-classloader@2.19.0?type=jar",
        "pkg:maven/org.jboss.logging/jboss-logging@3.6.1.Final?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/common-init@5.0.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@3.1.1?type=jar",
        "pkg:maven/org.eclipse.microprofile.health/microprofile-health-api@4.0.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/common-pagination@5.0.4?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-cbor@2.22.1?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-cbor@2.22.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/datanucleus-plugin@5.0.4?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.uuid/java-uuid-generator@5.2.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.uuid/java-uuid-generator@5.2.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/migration@5.0.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/flyway-support@5.0.4?type=jar",
        "pkg:maven/org.flywaydb/flyway-database-postgresql@12.11.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/flyway-support@5.0.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.flywaydb/flyway-core@12.11.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.flywaydb/flyway-core@12.11.0?type=jar",
      "dependsOn": [
        "pkg:maven/tools.jackson.core/jackson-databind@3.1.4?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/tools.jackson.core/jackson-databind@3.1.4?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar",
        "pkg:maven/tools.jackson.core/jackson-core@3.1.4?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/tools.jackson.core/jackson-core@3.1.4?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.flywaydb/flyway-database-postgresql@12.11.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.flywaydb/flyway-core@12.11.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/notification-api@5.0.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/net-support@5.0.4?type=jar",
        "pkg:maven/com.fasterxml.uuid/java-uuid-generator@5.2.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.35.1?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.35.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/net-support@5.0.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.protobuf/protobuf-java@4.35.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.protobuf/protobuf-java-util@4.35.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.protobuf/protobuf-java@4.35.1?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.14.0?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.code.gson/gson@2.14.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/notification-publishing@5.0.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.angus/angus-mail@2.0.5?type=jar",
        "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.2.4?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.apache.kafka/kafka-clients@4.3.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.angus/angus-mail@2.0.5?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar",
        "pkg:maven/jakarta.mail/jakarta.mail-api@2.1.3?type=jar",
        "pkg:maven/org.eclipse.angus/angus-activation@2.0.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/jakarta.mail/jakarta.mail-api@2.1.3?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.angus/angus-activation@2.0.3?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.2.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.kafka/kafka-clients@4.3.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.luben/zstd-jni@1.5.7-11?type=jar",
        "pkg:maven/at.yawk.lz4/lz4-java@1.10.2?type=jar",
        "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.8?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.luben/zstd-jni@1.5.7-11?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/at.yawk.lz4/lz4-java@1.10.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.8?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/notification-templating@5.0.4?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.2.4?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/io.pebbletemplates/pebble@4.1.2?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.35.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.pebbletemplates/pebble@4.1.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.unbescape/unbescape@1.1.6.RELEASE?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.unbescape/unbescape@1.1.6.RELEASE?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/plugin-api@5.0.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/cache-api@5.0.4?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/plugin-config@5.0.4?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar",
        "pkg:maven/com.networknt/json-schema-validator@1.5.9?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.networknt/json-schema-validator@1.5.9?type=jar",
      "dependsOn": [
        "pkg:maven/com.ethlo.time/itu@1.14.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.22.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.ethlo.time/itu@1.14.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.22.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar",
        "pkg:maven/org.yaml/snakeyaml@2.5?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.yaml/snakeyaml@2.5?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/plugin-runtime@5.0.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/cache-api@5.0.4?type=jar",
        "pkg:maven/org.dependencytrack/common-config@5.0.4?type=jar",
        "pkg:maven/org.dependencytrack/plugin-config@5.0.4?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar",
        "pkg:maven/org.jdbi/jdbi3-core@3.54.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@3.1.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/common-config@5.0.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/io.smallrye.config/smallrye-config-core@3.18.1?type=jar",
        "pkg:maven/org.dependencytrack/smallrye-config-secret-handler-file@5.0.4?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/smallrye-config-secret-handler-file@5.0.4?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.jdbi/jdbi3-core@3.54.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/io.leangen.geantyref/geantyref@2.0.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.leangen.geantyref/geantyref@2.0.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/proto@5.0.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/cyclonedx-proto@5.0.4?type=jar",
        "pkg:maven/org.dependencytrack/file-storage-api@5.0.4?type=jar",
        "pkg:maven/org.dependencytrack/notification-api@5.0.4?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.35.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/cyclonedx-proto@5.0.4?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.protobuf/protobuf-java@4.35.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/file-storage-api@5.0.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.35.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/secret-management@5.0.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/common-datasource@5.0.4?type=jar",
        "pkg:maven/org.dependencytrack/common-pagination@5.0.4?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.postgresql/postgresql@42.7.13?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/com.google.crypto.tink/tink@1.23.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.crypto.tink/tink@1.23.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.14.0?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.35.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-analysis-api@5.0.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/cyclonedx-proto@5.0.4?type=jar",
        "pkg:maven/org.dependencytrack/net-support@5.0.4?type=jar",
        "pkg:maven/org.dependencytrack/plugin-api@5.0.4?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-analyzer-internal@5.0.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/jdbi-support@5.0.4?type=jar",
        "pkg:maven/org.dependencytrack/os-distro-metadata@5.0.4?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar",
        "pkg:maven/org.jdbi/jdbi3-core@3.54.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/io.github.nscuro/versatile-core@0.21.1?type=jar",
        "pkg:maven/us.springett/cpe-parser@3.0.1?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/jdbi-support@5.0.4?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/os-distro-metadata@5.0.4?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.nscuro/versatile-core@0.21.1?type=jar",
      "dependsOn": [
        "pkg:maven/io.github.nscuro/versatile-spi@0.21.1?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.apache.maven/maven-artifact@3.9.16?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
        "pkg:maven/com.vdurmont/semver4j@3.1.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.nscuro/versatile-spi@0.21.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.maven/maven-artifact@3.9.16?type=jar",
      "dependsOn": [
        "pkg:maven/org.codehaus.plexus/plexus-utils@3.6.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.codehaus.plexus/plexus-utils@3.6.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.vdurmont/semver4j@3.1.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/us.springett/cpe-parser@3.0.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/package-metadata-api@5.0.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/net-support@5.0.4?type=jar",
        "pkg:maven/org.dependencytrack/plugin-api@5.0.4?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/package-metadata-resolution@5.0.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/net-support@5.0.4?type=jar",
        "pkg:maven/org.brotli/dec@0.1.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.22.1?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.35.1?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/io.github.nscuro/versatile-core@0.21.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.brotli/dec@0.1.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.22.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-analyzer-oss-index@5.0.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.metaeffekt.core/ae-security@0.156.5?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.metaeffekt.core/ae-security@0.156.5?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.18?type=jar",
        "pkg:maven/commons-io/commons-io@2.22.0?type=jar",
        "pkg:maven/org.json/json@20260522?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.18?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/commons-io/commons-io@2.22.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.json/json@20260522?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-analyzer-snyk@5.0.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.metaeffekt.core/ae-security@0.156.5?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.35.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-analyzer-trivy@5.0.4?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.35.1?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.35.1?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-analyzer-vuln-db@5.0.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.metaeffekt.core/ae-security@0.156.5?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/dex-engine@5.0.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/dex-api@5.0.4?type=jar",
        "pkg:maven/org.dependencytrack/dex-engine-api@5.0.4?type=jar",
        "pkg:maven/org.dependencytrack/dex-engine-migration@5.0.4?type=jar",
        "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.2.4?type=jar",
        "pkg:maven/com.fasterxml.uuid/java-uuid-generator@5.2.0?type=jar",
        "pkg:maven/org.jdbi/jdbi3-core@3.54.0?type=jar",
        "pkg:maven/org.jdbi/jdbi3-freemarker@3.54.0?type=jar",
        "pkg:maven/org.jdbi/jdbi3-jackson2@3.54.0?type=jar",
        "pkg:maven/org.jdbi/jdbi3-postgres@3.54.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/io.micrometer/micrometer-core@1.17.0?type=jar",
        "pkg:maven/org.postgresql/postgresql@42.7.13?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.35.1?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.35.1?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-circuitbreaker@2.4.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.4.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-micrometer@2.4.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/dex-api@5.0.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.35.1?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.35.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/dex-engine-api@5.0.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/common-pagination@5.0.4?type=jar",
        "pkg:maven/org.dependencytrack/dex-api@5.0.4?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/io.micrometer/micrometer-core@1.17.0?type=jar",
        "pkg:maven/org.eclipse.microprofile.health/microprofile-health-api@4.0.1?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.4.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-core@2.4.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/dex-engine-migration@5.0.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/flyway-support@5.0.4?type=jar",
        "pkg:maven/org.flywaydb/flyway-database-postgresql@12.11.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jdbi/jdbi3-freemarker@3.54.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.jdbi/jdbi3-core@3.54.0?type=jar",
        "pkg:maven/org.freemarker/freemarker@2.3.34?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.freemarker/freemarker@2.3.34?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.jdbi/jdbi3-jackson2@3.54.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.jdbi/jdbi3-core@3.54.0?type=jar",
        "pkg:maven/org.jdbi/jdbi3-json@3.54.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jdbi/jdbi3-json@3.54.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.jdbi/jdbi3-core@3.54.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jdbi/jdbi3-postgres@3.54.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.jdbi/jdbi3-core@3.54.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-circuitbreaker@2.4.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.4.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-micrometer@2.4.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.micrometer/micrometer-core@1.17.0?type=jar",
        "pkg:maven/io.micrometer/micrometer-observation@1.17.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-bulkhead@2.4.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-circuitbreaker@2.4.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-retry@2.4.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-ratelimiter@2.4.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-timelimiter@2.4.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-bulkhead@2.4.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.4.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-retry@2.4.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.4.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-ratelimiter@2.4.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.4.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-timelimiter@2.4.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.4.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/file-storage-provider-local@5.0.4?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.luben/zstd-jni@1.5.7-11?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/file-storage-provider-memory@5.0.4?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/file-storage-provider-s3@5.0.4?type=jar",
      "dependsOn": [
        "pkg:maven/io.minio/minio@9.0.3?type=jar",
        "pkg:maven/com.squareup.okhttp3/okhttp-jvm@5.4.0?type=jar",
        "pkg:maven/com.github.luben/zstd-jni@1.5.7-11?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.minio/minio@9.0.3?type=jar",
      "dependsOn": [
        "pkg:maven/com.carrotsearch.thirdparty/simple-xml-safe@2.7.1?type=jar",
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
        "pkg:maven/com.squareup.okhttp3/okhttp@5.4.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.21.0?type=jar",
        "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.8?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.carrotsearch.thirdparty/simple-xml-safe@2.7.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar",
        "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
        "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.squareup.okhttp3/okhttp@5.4.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@2.4.10?type=jar",
        "pkg:maven/com.squareup.okio/okio@3.17.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@2.4.10?type=jar",
      "dependsOn": [
        "pkg:maven/org.jetbrains/annotations@13.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jetbrains/annotations@13.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.squareup.okio/okio@3.17.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.squareup.okio/okio-jvm@3.17.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.squareup.okio/okio-jvm@3.17.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@2.4.10?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar",
      "dependsOn": [
        "pkg:maven/commons-codec/commons-codec@1.21.0?type=jar",
        "pkg:maven/commons-io/commons-io@2.22.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/commons-codec/commons-codec@1.21.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.squareup.okhttp3/okhttp-jvm@5.4.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@2.4.10?type=jar",
        "pkg:maven/com.squareup.okio/okio-jvm@3.17.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-data-source-api@5.0.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/plugin-api@5.0.4?type=jar",
        "pkg:maven/org.dependencytrack/cyclonedx-proto@5.0.4?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-data-source-github@5.0.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
        "pkg:maven/org.metaeffekt.core/ae-security@0.156.5?type=jar",
        "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.6.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar",
        "pkg:maven/io.github.jeremylong/open-vulnerability-clients@9.0.5?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.35.1?type=jar",
        "pkg:maven/io.github.nscuro/versatile-core@0.21.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.6.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.4.3?type=jar",
        "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.4.3?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.4.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.4.3?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.4.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.jeremylong/open-vulnerability-clients@9.0.5?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.6.2?type=jar",
        "pkg:maven/org.apache.httpcomponents.client5/httpclient5-cache@5.6?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.22.1?type=jar",
        "pkg:maven/com.samskivert/jmustache@1.16?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents.client5/httpclient5-cache@5.6?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.6.2?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.samskivert/jmustache@1.16?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-data-source-nvd@5.0.4?type=jar",
      "dependsOn": [
        "pkg:maven/us.springett/cpe-parser@3.0.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.22.1?type=jar",
        "pkg:maven/io.github.jeremylong/open-vulnerability-clients@9.0.5?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.35.1?type=jar",
        "pkg:maven/io.github.nscuro/versatile-core@0.21.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-data-source-osv@5.0.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/os-distro-metadata@5.0.4?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
        "pkg:maven/org.metaeffekt.core/ae-security@0.156.5?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.22.1?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.35.1?type=jar",
        "pkg:maven/io.github.nscuro/versatile-core@0.21.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/alpine-common@5.0.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/common-config@5.0.4?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/alpine-model@5.0.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/alpine-common@5.0.4?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-api-jdo@6.0.5?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-core@6.0.11?type=jar",
        "pkg:maven/org.datanucleus/javax.jdo@3.2.1?type=jar",
        "pkg:maven/org.glassfish.jersey.ext/jersey-bean-validation@4.0.2?type=jar",
        "pkg:maven/io.swagger.core.v3/swagger-annotations-jakarta@2.2.52?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.datanucleus/datanucleus-api-jdo@6.0.5?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.datanucleus/datanucleus-core@6.0.11?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.datanucleus/javax.jdo@3.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/javax.transaction/javax.transaction-api@1.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/javax.transaction/javax.transaction-api@1.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.ext/jersey-bean-validation@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.2?type=jar",
        "pkg:maven/jakarta.validation/jakarta.validation-api@3.1.1?type=jar",
        "pkg:maven/org.hibernate.validator/hibernate-validator@8.0.2.Final?type=jar",
        "pkg:maven/org.jboss.logging/jboss-logging@3.6.1.Final?type=jar",
        "pkg:maven/jakarta.el/jakarta.el-api@6.0.1?type=jar",
        "pkg:maven/org.glassfish.expressly/expressly@5.0.0?type=jar",
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar",
        "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar",
        "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
        "pkg:maven/org.glassfish.hk2/osgi-resource-locator@3.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.hk2/osgi-resource-locator@3.0.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-client@4.0.2?type=jar",
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar",
        "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar",
        "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
        "pkg:maven/jakarta.validation/jakarta.validation-api@3.1.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.core/jersey-client@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
        "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.validation/jakarta.validation-api@3.1.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.hibernate.validator/hibernate-validator@8.0.2.Final?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml/classmate@1.5.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml/classmate@1.5.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/jakarta.el/jakarta.el-api@6.0.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.expressly/expressly@5.0.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.swagger.core.v3/swagger-annotations-jakarta@2.2.52?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/alpine-infra@5.0.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/alpine-common@5.0.4?type=jar",
        "pkg:maven/org.dependencytrack/alpine-model@5.0.4?type=jar",
        "pkg:maven/io.micrometer/micrometer-core@1.17.0?type=jar",
        "pkg:maven/org.datanucleus/javax.jdo@3.2.1?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-api-jdo@6.0.5?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-core@6.0.11?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-rdbms@6.0.11?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.datanucleus/datanucleus-rdbms@6.0.11?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/alpine-server@5.0.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/common-datasource@5.0.4?type=jar",
        "pkg:maven/org.dependencytrack/alpine-common@5.0.4?type=jar",
        "pkg:maven/org.dependencytrack/alpine-infra@5.0.4?type=jar",
        "pkg:maven/org.dependencytrack/alpine-model@5.0.4?type=jar",
        "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@4.0.2?type=jar",
        "pkg:maven/org.glassfish.jersey.media/jersey-media-json-jackson@4.0.2?type=jar",
        "pkg:maven/org.glassfish.jersey.media/jersey-media-multipart@4.0.2?type=jar",
        "pkg:maven/org.glassfish.jersey.ext/jersey-bean-validation@4.0.2?type=jar",
        "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@4.0.2?type=jar",
        "pkg:maven/jakarta.json/jakarta.json-api@2.1.3?type=jar",
        "pkg:maven/org.eclipse.parsson/jakarta.json@1.1.9?type=jar",
        "pkg:maven/io.swagger.core.v3/swagger-annotations-jakarta@2.2.52?type=jar",
        "pkg:maven/org.datanucleus/javax.jdo@3.2.1?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-api-jdo@6.0.5?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-core@6.0.11?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-rdbms@6.0.11?type=jar",
        "pkg:maven/com.zaxxer/HikariCP@7.1.0?type=jar",
        "pkg:maven/org.mindrot/jbcrypt@0.4?type=jar",
        "pkg:maven/com.nimbusds/oauth2-oidc-sdk@11.38.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar",
        "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-base@2.22.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-json-provider@2.22.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.22.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/ch.qos.logback/logback-classic@1.5.38?type=jar",
        "pkg:maven/ch.qos.logback/logback-core@1.5.38?type=jar",
        "pkg:maven/org.owasp/security-logging-common@1.1.7?type=jar",
        "pkg:maven/org.owasp/security-logging-logback@1.1.7?type=jar",
        "pkg:maven/net.logstash.logback/logstash-logback-encoder@8.1?type=jar",
        "pkg:maven/org.eclipse.microprofile.health/microprofile-health-api@4.0.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.2?type=jar",
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.media/jersey-media-json-jackson@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
        "pkg:maven/org.glassfish.jersey.ext/jersey-entity-filtering@4.0.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.module/jackson-module-jakarta-xmlbind-annotations@2.22.1?type=jar",
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.ext/jersey-entity-filtering@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.module/jackson-module-jakarta-xmlbind-annotations@2.22.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.media/jersey-media-multipart@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
        "pkg:maven/org.jvnet.mimepull/mimepull@1.9.15?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jvnet.mimepull/mimepull@1.9.15?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
        "pkg:maven/org.glassfish.hk2/hk2-locator@4.0.0-M3?type=jar",
        "pkg:maven/org.javassist/javassist@3.30.2-GA?type=jar",
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2?type=jar",
        "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar",
        "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.hk2/hk2-locator@4.0.0-M3?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@4.0.0-M3?type=jar",
        "pkg:maven/org.glassfish.hk2/hk2-api@4.0.0-M3?type=jar",
        "pkg:maven/org.glassfish.hk2/hk2-utils@4.0.0-M3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@4.0.0-M3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.hk2/hk2-api@4.0.0-M3?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.hk2/hk2-utils@4.0.0-M3?type=jar",
        "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@4.0.0-M3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.hk2/hk2-utils@4.0.0-M3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.javassist/javassist@3.30.2-GA?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/jakarta.json/jakarta.json-api@2.1.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.eclipse.parsson/jakarta.json@1.1.9?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.mindrot/jbcrypt@0.4?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.nimbusds/oauth2-oidc-sdk@11.38.2?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar",
        "pkg:maven/com.nimbusds/content-type@2.3?type=jar",
        "pkg:maven/net.minidev/json-smart@2.6.0?type=jar",
        "pkg:maven/com.nimbusds/lang-tag@1.7?type=jar",
        "pkg:maven/com.nimbusds/nimbus-jose-jwt@10.9.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.nimbusds/content-type@2.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/net.minidev/json-smart@2.6.0?type=jar",
      "dependsOn": [
        "pkg:maven/net.minidev/accessors-smart@2.6.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/net.minidev/accessors-smart@2.6.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.ow2.asm/asm@9.10.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.nimbusds/lang-tag@1.7?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.nimbusds/nimbus-jose-jwt@10.9.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-base@2.22.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-json-provider@2.22.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-base@2.22.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.module/jackson-module-jakarta-xmlbind-annotations@2.22.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.22.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/ch.qos.logback/logback-classic@1.5.38?type=jar",
      "dependsOn": [
        "pkg:maven/ch.qos.logback/logback-core@1.5.38?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/ch.qos.logback/logback-core@1.5.38?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.owasp/security-logging-common@1.1.7?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.owasp/security-logging-logback@1.1.7?type=jar",
      "dependsOn": [
        "pkg:maven/org.owasp/security-logging-common@1.1.7?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/ch.qos.logback/logback-classic@1.5.38?type=jar",
        "pkg:maven/ch.qos.logback/logback-core@1.5.38?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.21.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/net.logstash.logback/logstash-logback-encoder@8.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/dev.cel/cel@0.13.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.0?type=jar",
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.35.1?type=jar",
        "pkg:maven/com.google.re2j/re2j@1.8?type=jar",
        "pkg:maven/dev.cel/common@0.13.1?type=jar",
        "pkg:maven/dev.cel/compiler@0.13.1?type=jar",
        "pkg:maven/dev.cel/protobuf@0.13.1?type=jar",
        "pkg:maven/dev.cel/runtime@0.13.1?type=jar",
        "pkg:maven/dev.cel/v1alpha1@0.13.1?type=jar",
        "pkg:maven/org.antlr/antlr4-runtime@4.13.2?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.threeten/threeten-extra@1.8.0?type=jar",
        "pkg:maven/org.yaml/snakeyaml@2.5?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.re2j/re2j@1.8?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/dev.cel/common@0.13.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.0?type=jar",
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.35.1?type=jar",
        "pkg:maven/com.google.re2j/re2j@1.8?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/dev.cel/compiler@0.13.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.0?type=jar",
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.35.1?type=jar",
        "pkg:maven/com.google.re2j/re2j@1.8?type=jar",
        "pkg:maven/dev.cel/common@0.13.1?type=jar",
        "pkg:maven/dev.cel/protobuf@0.13.1?type=jar",
        "pkg:maven/org.antlr/antlr4-runtime@4.13.2?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/dev.cel/protobuf@0.13.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.0?type=jar",
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.35.1?type=jar",
        "pkg:maven/dev.cel/common@0.13.1?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.antlr/antlr4-runtime@4.13.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/dev.cel/runtime@0.13.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.0?type=jar",
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.35.1?type=jar",
        "pkg:maven/com.google.re2j/re2j@1.8?type=jar",
        "pkg:maven/dev.cel/common@0.13.1?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.threeten/threeten-extra@1.8.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.threeten/threeten-extra@1.8.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/dev.cel/v1alpha1@0.13.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.0?type=jar",
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.35.1?type=jar",
        "pkg:maven/dev.cel/common@0.13.1?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/dev.cel/extensions@0.4.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.35.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.kagkarlsson/db-scheduler@16.12.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jdbi/jdbi3-sqlobject@3.54.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.jdbi/jdbi3-core@3.54.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.ext/jersey-micrometer@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/io.micrometer/micrometer-core@1.17.0?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.2?type=jar",
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/us.springett/owasp-risk-rating-calculator@1.0.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.cyclonedx/cyclonedx-core-java@12.1.0?type=jar",
      "dependsOn": [
        "pkg:maven/commons-codec/commons-codec@1.21.0?type=jar",
        "pkg:maven/commons-io/commons-io@2.22.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
        "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.22.1?type=jar",
        "pkg:maven/com.networknt/json-schema-validator@1.5.9?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.22.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.1?type=jar",
        "pkg:maven/org.codehaus.woodstox/stax2-api@4.3.0?type=jar",
        "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.2.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.codehaus.woodstox/stax2-api@4.3.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.codehaus.woodstox/stax2-api@4.3.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-server@12.1.11?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-http@12.1.11?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-io@12.1.11?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-http@12.1.11?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-io@12.1.11?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-util@12.1.11?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-io@12.1.11?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-util@12.1.11?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-util@12.1.11?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty.compression/jetty-compression-gzip@12.1.11?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty.compression/jetty-compression-common@12.1.11?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty.compression/jetty-compression-common@12.1.11?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-http@12.1.11?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-io@12.1.11?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-util@12.1.11?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty.compression/jetty-compression-server@12.1.11?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-server@12.1.11?type=jar",
        "pkg:maven/org.eclipse.jetty.compression/jetty-compression-common@12.1.11?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty.ee11/jetty-ee11-servlet@12.1.11?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-security@12.1.11?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-server@12.1.11?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-session@12.1.11?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-security@12.1.11?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-server@12.1.11?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-session@12.1.11?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-server@12.1.11?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.slf4j/jul-to-slf4j@2.0.18?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.asahaf.javacron/javacron@1.4.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.micrometer/micrometer-java11@1.17.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/io.micrometer/micrometer-core@1.17.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.micrometer/micrometer-registry-prometheus@1.17.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/io.micrometer/micrometer-core@1.17.0?type=jar",
        "pkg:maven/io.prometheus/prometheus-metrics-core@1.8.0?type=jar",
        "pkg:maven/io.prometheus/prometheus-metrics-tracer-common@1.8.0?type=jar",
        "pkg:maven/io.prometheus/prometheus-metrics-exposition-formats@1.8.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.prometheus/prometheus-metrics-core@1.8.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.prometheus/prometheus-metrics-model@1.8.0?type=jar",
        "pkg:maven/io.prometheus/prometheus-metrics-config@1.8.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.prometheus/prometheus-metrics-model@1.8.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.prometheus/prometheus-metrics-config@1.8.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.prometheus/prometheus-metrics-config@1.8.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.prometheus/prometheus-metrics-tracer-common@1.8.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.prometheus/prometheus-metrics-exposition-formats@1.8.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.prometheus/prometheus-metrics-exposition-textformats@1.8.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.prometheus/prometheus-metrics-exposition-textformats@1.8.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.prometheus/prometheus-metrics-model@1.8.0?type=jar",
        "pkg:maven/io.prometheus/prometheus-metrics-config@1.8.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.mweirauch/micrometer-jvm-extras@0.3.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.cloud.sql/postgres-socket-factory@1.28.6?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.cloud.sql/jdbc-socket-factory-core@1.28.6?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.cloud.sql/jdbc-socket-factory-core@1.28.6?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.jnr/jnr-enxio@0.32.20?type=jar",
        "pkg:maven/com.github.jnr/jnr-unixsocket@0.38.25?type=jar",
        "pkg:maven/com.google.http-client/google-http-client@2.1.0?type=jar",
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
        "pkg:maven/com.google.http-client/google-http-client-gson@2.1.0?type=jar",
        "pkg:maven/com.google.api-client/google-api-client@2.9.0?type=jar",
        "pkg:maven/com.google.apis/google-api-services-sqladmin@v1beta4-rev20260529-2.0.0?type=jar",
        "pkg:maven/com.google.auth/google-auth-library-credentials@1.48.0?type=jar",
        "pkg:maven/com.google.auth/google-auth-library-oauth2-http@1.48.0?type=jar",
        "pkg:maven/com.google.oauth-client/google-oauth-client@1.39.0?type=jar",
        "pkg:maven/dnsjava/dnsjava@3.6.5?type=jar",
        "pkg:maven/com.google.api/gax@2.81.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/com.google.cloud.sql/schemas@1.28.6?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.jnr/jnr-enxio@0.32.20?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.jnr/jnr-constants@0.10.4?type=jar",
        "pkg:maven/com.github.jnr/jnr-ffi@2.2.19?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.jnr/jnr-constants@0.10.4?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.github.jnr/jnr-ffi@2.2.19?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.jnr/jffi@1.3.15?type=jar",
        "pkg:maven/com.github.jnr/jffi@1.3.15?classifier=native\u0026type=jar",
        "pkg:maven/org.ow2.asm/asm@9.10.1?type=jar",
        "pkg:maven/org.ow2.asm/asm-commons@9.7.1?type=jar",
        "pkg:maven/org.ow2.asm/asm-analysis@9.7.1?type=jar",
        "pkg:maven/org.ow2.asm/asm-tree@9.7.1?type=jar",
        "pkg:maven/org.ow2.asm/asm-util@9.7.1?type=jar",
        "pkg:maven/com.github.jnr/jnr-a64asm@1.0.0?type=jar",
        "pkg:maven/com.github.jnr/jnr-x86asm@1.0.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.jnr/jffi@1.3.15?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.github.jnr/jffi@1.3.15?classifier=native\u0026type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.ow2.asm/asm-commons@9.7.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.ow2.asm/asm@9.10.1?type=jar",
        "pkg:maven/org.ow2.asm/asm-tree@9.7.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.ow2.asm/asm-tree@9.7.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.ow2.asm/asm@9.10.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.ow2.asm/asm-analysis@9.7.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.ow2.asm/asm-tree@9.7.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.ow2.asm/asm-util@9.7.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.ow2.asm/asm@9.10.1?type=jar",
        "pkg:maven/org.ow2.asm/asm-tree@9.7.1?type=jar",
        "pkg:maven/org.ow2.asm/asm-analysis@9.7.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.jnr/jnr-a64asm@1.0.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.github.jnr/jnr-x86asm@1.0.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.github.jnr/jnr-unixsocket@0.38.25?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.jnr/jnr-ffi@2.2.19?type=jar",
        "pkg:maven/com.github.jnr/jnr-constants@0.10.4?type=jar",
        "pkg:maven/com.github.jnr/jnr-enxio@0.32.20?type=jar",
        "pkg:maven/com.github.jnr/jnr-posix@3.1.22?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.jnr/jnr-posix@3.1.22?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.jnr/jnr-ffi@2.2.19?type=jar",
        "pkg:maven/com.github.jnr/jnr-constants@0.10.4?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.http-client/google-http-client@2.1.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
        "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar",
        "pkg:maven/io.grpc/grpc-context@1.70.0?type=jar",
        "pkg:maven/io.opencensus/opencensus-api@0.31.1?type=jar",
        "pkg:maven/io.opencensus/opencensus-contrib-http-util@0.31.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.21.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.grpc/grpc-context@1.70.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.grpc/grpc-api@1.81.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.grpc/grpc-api@1.81.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.opencensus/opencensus-api@0.31.1?type=jar",
      "dependsOn": [
        "pkg:maven/io.grpc/grpc-context@1.70.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.opencensus/opencensus-contrib-http-util@0.31.1?type=jar",
      "dependsOn": [
        "pkg:maven/io.opencensus/opencensus-api@0.31.1?type=jar",
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.http-client/google-http-client-gson@2.1.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.http-client/google-http-client@2.1.0?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.14.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.api-client/google-api-client@2.9.0?type=jar",
      "dependsOn": [
        "pkg:maven/commons-codec/commons-codec@1.21.0?type=jar",
        "pkg:maven/com.google.auth/google-auth-library-credentials@1.48.0?type=jar",
        "pkg:maven/com.google.auth/google-auth-library-oauth2-http@1.48.0?type=jar",
        "pkg:maven/com.google.http-client/google-http-client-gson@2.1.0?type=jar",
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
        "pkg:maven/com.google.http-client/google-http-client-apache-v2@2.0.0?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
        "pkg:maven/com.google.http-client/google-http-client@2.1.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.auth/google-auth-library-credentials@1.48.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.auth/google-auth-library-oauth2-http@1.48.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
        "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.0?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/com.google.auth/google-auth-library-credentials@1.48.0?type=jar",
        "pkg:maven/com.google.http-client/google-http-client@2.1.0?type=jar",
        "pkg:maven/com.google.http-client/google-http-client-gson@2.1.0?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
        "pkg:maven/com.google.api/api-common@2.64.0?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.14.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.api/api-common@2.64.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
        "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.0?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.http-client/google-http-client-apache-v2@2.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.http-client/google-http-client@2.1.0?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.apis/google-api-services-sqladmin@v1beta4-rev20260529-2.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.api-client/google-api-client@2.9.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.oauth-client/google-oauth-client@1.39.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.http-client/google-http-client@2.1.0?type=jar",
        "pkg:maven/com.google.http-client/google-http-client-gson@2.1.0?type=jar",
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/dnsjava/dnsjava@3.6.5?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.api/gax@2.81.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.35.1?type=jar",
        "pkg:maven/io.grpc/grpc-api@1.81.0?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.14.0?type=jar",
        "pkg:maven/com.google.http-client/google-http-client-gson@2.1.0?type=jar",
        "pkg:maven/com.google.http-client/google-http-client@2.1.0?type=jar",
        "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.0?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.cloud.sql/schemas@1.28.6?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.protobuf/protobuf-java@4.35.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.slf4j/log4j-over-slf4j@2.0.18?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    }
  ]
}