<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:fd6a0221-fb12-33e2-8f66-c7b3eb8d82e4" version="1" xmlns="http://cyclonedx.org/schema/bom/1.6">
  <metadata>
    <lifecycles>
      <lifecycle>
        <phase>build</phase>
      </lifecycle>
    </lifecycles>
    <tools>
      <components>
        <component type="library">
          <author>OWASP Foundation</author>
          <group>org.cyclonedx</group>
          <name>cyclonedx-maven-plugin</name>
          <version>2.9.1</version>
          <description>CycloneDX Maven plugin</description>
          <hashes>
            <hash alg="MD5">9c7a565cf28cce58557d0c621c5ea4b1</hash>
            <hash alg="SHA-1">be882d5a22050bfa9d19090b1420c188617d0e1c</hash>
            <hash alg="SHA-256">698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249</hash>
            <hash alg="SHA-512">c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0</hash>
            <hash alg="SHA-384">d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb</hash>
            <hash alg="SHA3-384">80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f</hash>
            <hash alg="SHA3-256">142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699</hash>
            <hash alg="SHA3-512">af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b</hash>
          </hashes>
        </component>
      </components>
    </tools>
    <component type="library" bom-ref="pkg:maven/fr.inria.gforge.spoon/spoon-pom@11.3.1-beta-3?type=pom">
      <publisher>Inria</publisher>
      <group>fr.inria.gforge.spoon</group>
      <name>spoon-pom</name>
      <version>11.3.1-beta-3</version>
      <description>Common Maven config for Spoon modules</description>
      <licenses>
        <license>
          <id>CECILL-C</id>
          <url>http://www.cecill.info/licences/Licence_CeCILL-C_V1-en.html</url>
        </license>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/license/mit/</url>
        </license>
      </licenses>
      <purl>pkg:maven/fr.inria.gforge.spoon/spoon-pom@11.3.1-beta-3?type=pom</purl>
      <externalReferences>
        <reference type="website">
          <url>http://spoon.gforge.inria.fr/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/INRIA/spoon/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/INRIA/spoon/tree/v11.3.1-beta-3/spoon-pom</url>
        </reference>
      </externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeAggregateBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
      <property name="cdx:reproducible">enabled</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/fr.inria.gforge.spoon/spoon-core@11.3.1-beta-3?type=jar">
      <publisher>Inria</publisher>
      <group>fr.inria.gforge.spoon</group>
      <name>spoon-core</name>
      <version>11.3.1-beta-3</version>
      <description>Spoon is a tool for meta-programming, analysis and transformation of Java programs.</description>
      <hashes>
        <hash alg="MD5">c801d3ebc369d484d85579001a835b10</hash>
        <hash alg="SHA-1">626ec8d3648d48493b877601782d7b939b2ec98e</hash>
        <hash alg="SHA-256">4c9ced08ec7c6b72c27720c2ebe4c32d3f0783ace9190fc89e5b9400c49e1b24</hash>
        <hash alg="SHA-512">38a1b5ada3cf77dde4c3ae8c49fc1c7f5891a843e547d0025a7d8c3270fac6840d560a49f3ff6471f45fbf620bcce4b3061556f4908facf0ef0ba991f4fc1658</hash>
        <hash alg="SHA-384">3eced8af26dd9b237082e8ebad776906e0b846060a5ef997c6ad7e9e1fe9c8d91fd34fac72863d52b006039d0e69a182</hash>
        <hash alg="SHA3-384">81f8c2ffadb67cd12abc198d668486d13bdd4cf2deb41cfa0ac429429ab90b033d72ae2dcb35219597f277f3f18a7e3d</hash>
        <hash alg="SHA3-256">bd9954b55d676c94fbb48305812577252db94a147deb960a363b9c438c5d4af2</hash>
        <hash alg="SHA3-512">83fec1420fa15e0aac5475c225fc9674fbbcd3b512ee004f8d19be56c812963c722692f8a064fe04373ad5eb0d4dd32fae6ccd45ecdd3ef46245f68fdcd76539</hash>
      </hashes>
      <licenses>
        <license>
          <id>CECILL-C</id>
          <url>http://www.cecill.info/licences/Licence_CeCILL-C_V1-en.html</url>
        </license>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/license/mit/</url>
        </license>
      </licenses>
      <purl>pkg:maven/fr.inria.gforge.spoon/spoon-core@11.3.1-beta-3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://spoon.gforge.inria.fr/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/INRIA/spoon/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/INRIA/spoon/tree/v11.3.1-beta-3</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jdt/org.eclipse.jdt.core@3.44.0?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.eclipse.jdt</group>
      <name>org.eclipse.jdt.core</name>
      <version>3.44.0</version>
      <description>Java Development Tools Core</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6fda7b537aeb2dc1cf739f294d29edb7</hash>
        <hash alg="SHA-1">8a160d1066f426fe8254e0cc1e33dafca66628a7</hash>
        <hash alg="SHA-256">5cc842b72f8c87086747d464c1c375680c84eaae2dfd83f53a43205a221bf5e7</hash>
        <hash alg="SHA-512">71d169753b93eb94a0e8816b92423f181ffc34dcdf8c6c3d276f08143178ae03a2fe8a8b44edc266463ea74847b1a22267e4e2d5bc25206319673bf4a4c67f03</hash>
        <hash alg="SHA-384">4141a295d9f6eb0a1c26e10386bf906f866c7ecd8b13f127f2d42330b99d4076f98cea5117b0f2e3824ea03b9f845a4f</hash>
        <hash alg="SHA3-384">8a666dbc81fb4d6a8c19d6b031f2a7bc67079feefa42d45005affea998f5b110b944727c557b6a6342dd42f6b1688348</hash>
        <hash alg="SHA3-256">99ca1c2d22c1988023fefd72d95d65495f16149686e36ac46c3c890bb03dccc9</hash>
        <hash alg="SHA3-512">978c62a2c7700099b62e4c16345b817fc27c4d969ae2f76862eb0141bb25e1bbf279f045b0b4a35d086fb7035ac786e5a0f7ce64718fea0d78272bcbaf48723c</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
          <url>https://www.eclipse.org/legal/epl-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jdt/org.eclipse.jdt.core@3.44.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-jdt/eclipse.jdt.core/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-jdt/eclipse.jdt.core/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-jdt/eclipse.jdt.core/tree/745799bf0e1c8bd0f2b25f36880bd1c3505e21a3/org.eclipse.jdt.core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jdt/ecj@3.44.0?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.eclipse.jdt</group>
      <name>ecj</name>
      <version>3.44.0</version>
      <description>Eclipse Compiler for Java(TM)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8d0d2b80bc3d9431f0bdf3037f3d5954</hash>
        <hash alg="SHA-1">a4e1c9f58954801783e1b49d2f281000f814a779</hash>
        <hash alg="SHA-256">14c46ddc2e511c46c998da728f6a80f13a689c920f3832402f7ad150f6a6188d</hash>
        <hash alg="SHA-512">41d5cea69f9bdc75eee3b5e89bf29ae9cbfe8de9f1ccdc94ea9364c182463bc4003fdee19b23c17b9ddc7c8950f4d196bb4cf3d8a5c2d1af56a769905385e906</hash>
        <hash alg="SHA-384">fd097711a8d1fc19f7c64972a0b18da240f587143dfaf1ed39e5d616b59ebb25ba31b71e40a67c3ea7ae8cba4b8e6297</hash>
        <hash alg="SHA3-384">85db4bd32792e237459fe2b089fac918982c62d744101febfff26de652566b57e2b03eafd5eff525218048de7533d68e</hash>
        <hash alg="SHA3-256">e5c0f119f333fb877fa629840f2ae045a8ecb5be3440a69ad90e03cd7d556cfb</hash>
        <hash alg="SHA3-512">251882c7cfc611e620aaed16a801353122046d5d4372e78ec1047e78b7e86646f06e81f44849b7a6f35f7ed3bdf148ea354a777a0a0099d8eae491ef6825d3f1</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
          <url>https://www.eclipse.org/legal/epl-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jdt/ecj@3.44.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-jdt/eclipse.jdt.core/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-jdt/eclipse.jdt.core/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-jdt/eclipse.jdt.core/tree/745799bf0e1c8bd0f2b25f36880bd1c3505e21a3/org.eclipse.jdt.core.compiler.batch</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.martiansoftware/jsap@2.1?type=jar">
      <group>com.martiansoftware</group>
      <name>jsap</name>
      <version>2.1</version>
      <description>the Java-based Simple Argument Parser</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">37c5996faaca2c37e6b45c74ffe997aa</hash>
        <hash alg="SHA-1">d17c260c8f5eb6e7d6bd75449a57edfeb53d2305</hash>
        <hash alg="SHA-256">331746fa62cfbc3368260c5a2e660936ad11be612308c120a044e120361d474e</hash>
        <hash alg="SHA-512">7d5caa60f9f084efe7a59edb8db09ba261acb9e4be0852134e6c8b9794ae79cd3f4e5c342cecb398d22e3b585c328408545fada4d5b00ba799fb58bf928b8feb</hash>
        <hash alg="SHA-384">ba08a5183432d6d57ed21dc24217f274e515c659d728a9ac53a6333f23134c9a33b874514a07aea457dbb5a6df6dc8a9</hash>
        <hash alg="SHA3-384">cd6ff71114e49aa56a520ea0c1996494428c6253a4c47d5c161398e88385093213732ae35f8f8a6f355e51d81f25fd70</hash>
        <hash alg="SHA3-256">02e2038dbd1d8274f94c11b3ca919b5ad2c4f5de8e6d6d46b073d327e3df2c2d</hash>
        <hash alg="SHA3-512">18ce1f05d2956bcc720f1ae1477fb2d2ab08e916360b4143d40d45a594a56ae37585cc18fbae55d7e9b06cf67f060ebe2ec63add0be3bbb7dbc17906a3d79a3f</hash>
      </hashes>
      <licenses>
        <license>
          <name>LGPL</name>
          <url>http://www.martiansoftware.com/jsap/license.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.martiansoftware/jsap@2.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.martiansoftware.com/jsap/</url>
        </reference>
        <reference type="vcs">
          <url>http://jsap.cvs.sourceforge.net/jsap/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>2.0.17</version>
      <description>The slf4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b6480d114a23683498ac3f746f959d2f</hash>
        <hash alg="SHA-1">d9e58ac9c7779ba3bf8142aff6c830617a7fe60f</hash>
        <hash alg="SHA-256">7b751d952061954d5abfed7181c1f645d336091b679891591d63329c622eb832</hash>
        <hash alg="SHA-512">9a3e79db6666a6096a3021bb2e1d918f30f589d8de51d6b600f8ebd92515a510ae2d8f87919cc2dfa8365d64f10194cac8dfa0fb950160eef0e9da06f6caaeb9</hash>
        <hash alg="SHA-384">6ea24f814a9b6ece428cfd0535e2f3b8927005745ef61006b50fdb5a90126ee5ea05650155382b3b755c5bce38ef3944</hash>
        <hash alg="SHA3-384">9b1015052f0ec43f9be09764e131834157599611cb52f6fe591c4ac6a8ab4817518f2a4b8871e5e738c8678e93af5557</hash>
        <hash alg="SHA3-256">00559b4f4066b4917ba4fe2a6f23111eaeada321112d030910d218ced9084b5e</hash>
        <hash alg="SHA3-512">9579c2f7e7516e177c2d493ccc9eb8150978cf19f6f09b28d116f6935239fd56dc6af2b62b3336f79b0b462445550cd1fb5377a07001a6f44aaab6a32fa2fa47</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/license/mit/</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.slf4j.org</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/qos-ch/slf4j/slf4j-parent/slf4j-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-io/commons-io@2.21.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-io</group>
      <name>commons-io</name>
      <version>2.21.0</version>
      <description>The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">bc7e020873f086ede85f97bd9f013215</hash>
        <hash alg="SHA-1">52a6f68fe5afe335cde95461dd5c3412f04996f7</hash>
        <hash alg="SHA-256">7d643a2afea8b058b762aa6fb90e5b256f6c729739f8b3784c3370ddc609e88d</hash>
        <hash alg="SHA-512">7ac1aa4d834cd7cdecaee223a64c63d481810c73dfdb5109f402234a05cadf754e414cead99072f5140d4f7042ee084161935fb28129a631d908d989c5bbac5d</hash>
        <hash alg="SHA-384">97c07e5c4f62484c98b6777f63ab032ee09eeb1c9ddae8332890126df9c665afb9cd554db02495171738720d23c53732</hash>
        <hash alg="SHA3-384">e3e44c9f4a5f4075fb62a438a84015fe2abf878e9793835a7816dc3c35141bb79fe96dfdc6bb5aef96b7c5bbbcf453c1</hash>
        <hash alg="SHA3-256">1f8f4ce25b7169452dabb10ce843b3246378ea55c1971acd2300e417747b3a68</hash>
        <hash alg="SHA3-512">175630adf10305aeb31d737f833021a25582ffe2ef66fda6e7f694598af9c68cebbd205ade469eca4faaf6b9d349244289e62179d9cf48d93427090e2c008cf8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/commons-io/commons-io@2.21.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-io/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-io/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/IO</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=commons-io.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-model@3.6.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-model</name>
      <version>3.6.0</version>
      <description>Model for Maven POM (Project Object Model)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0505d964b102e3f62845f5d4508e166e</hash>
        <hash alg="SHA-1">06d73e6218a10cfe82cf0325b582cbed732cc751</hash>
        <hash alg="SHA-256">a1bf0c7856afd1f1b9c81c22818328fb7a796b4047010e08f2e859d1896080a9</hash>
        <hash alg="SHA-512">6ea5f34f4d11524e069716a142140af0f17c7723eec070e33443fab20501e177f265b38c02a324dd50fc2c9d6aa62e73ef537a09e07a9e55282c686b0a905e67</hash>
        <hash alg="SHA-384">fd8129ac75e246281f79a520d5dc7299df8c5b7a3d6f90d69cd56aff6049970619f229df7c28d6d59331c401b01412df</hash>
        <hash alg="SHA3-384">0b293af684836821291a16801172a812bbc6cc96bf036c8d69ab4051650aa40bc8d70b2870288c76ad7ddcee391e3cb8</hash>
        <hash alg="SHA3-256">6e10d09a9e77a88fb38a2c4f730a73bf9200a0f043511b9ec9d80a26df5e4a7f</hash>
        <hash alg="SHA3-512">6bb00967a436512fa8971d57476dada94f74c04125d304d615000e56fc8ce086741ed608c8d14a1924714fac2c113bfb577a6aa0083a3228fb97960749cb076b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-model@3.6.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/ref/3.6.0/maven-model/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/maven-box/job/maven/</url>
        </reference>
        <reference type="distribution">
          <url>https://maven.apache.org/download.html</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/MNG</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven/tree/maven-3.6.0/maven-model</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.1.0?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-utils</name>
      <version>3.1.0</version>
      <description>A collection of various utility classes to ease working with strings, files, command lines, XML and
    more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">bfec331a62402081dd4143e3a8d193e4</hash>
        <hash alg="SHA-1">60eecb6f15abdb1c653ad80abaac6fe188b3feaa</hash>
        <hash alg="SHA-256">0ffa0ad084ebff5712540a7b7ea0abda487c53d3a18f78c98d1a3675dab9bf61</hash>
        <hash alg="SHA-512">3805c57b7297459c5e2754d0fd56abd454eee08691974fb930ebb9b79a529fd874f16d40cec66e7fd90d4146c9d1fef45cdb59f9e359fce0c48ac77526fc320d</hash>
        <hash alg="SHA-384">2f2b5f791adacf36428671ba92fff6fb0a6a009f92c8a4b1cc0e3a700edf725152a76b805c77551b24a62e62adc59561</hash>
        <hash alg="SHA3-384">a82d71e5de8917d8d5e5553128d7c63bc9465368b193afd167c4decdb4e8468aca4d4fd995f1323057ee1dc66a56fcdf</hash>
        <hash alg="SHA3-256">ff5574c752b6f516ae64e7335e98e65a429aa7de738aa963fe25b991cf1ffcef</hash>
        <hash alg="SHA3-512">67548a57d26bdb883b0344e129988722e4a02c8732d1d05b4dc5d1cc86fde9d27063ceae80b6a7b94131340022efea994b8bdbbbfa724d4a7a57eb8245ddd989</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-utils@3.1.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://codehaus-plexus.github.io/plexus-utils/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://github.com/codehaus-plexus/plexus-utils/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>http://archive.plexus.codehaus.org/user</url>
        </reference>
        <reference type="vcs">
          <url>http://github.com/codehaus-plexus/plexus-utils</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-lang3</name>
      <version>3.20.0</version>
      <description>Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.

  The code is tested using the latest revision of the JDK for supported
  LTS releases: 8, 11, 17, 21 and 25 currently.
  See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml
  
  Please ensure your build environment is up-to-date and kindly report any build issues.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4b29562ded527aa074e1d44f8646dac5</hash>
        <hash alg="SHA-1">65897b3e5731220962e659e001904af3c3cbeba9</hash>
        <hash alg="SHA-256">69e5c9fa35da7a51a5fd2099dfe56a2d8d32cf233e2f6d770e796146440263f4</hash>
        <hash alg="SHA-512">1c72db334ea44f932c35e602b78907865f5bab43e30c871c9be67c8184eaa778f32d7bc3ab525d5921cd28619d3f9babfd483f17de54f007ee07db2e074b0307</hash>
        <hash alg="SHA-384">77dd27c4d5e9372c002bd6878d2cfaaec3cf46dd57d65de63d7f2e09351344531cfa81a537b56628ac6db18adee7e484</hash>
        <hash alg="SHA3-384">3456de40eef224b3ad195d2f218dd28eacb0da07607aee7ead94bd8d54bd8311d51c28d4066db4bf8b69a2df48c415f5</hash>
        <hash alg="SHA3-256">36e3f71352fa14bc580db45a05b09b063392c6d39acf9e24ffa6a67bbc07a336</hash>
        <hash alg="SHA3-512">6ecbc05bb5cd3f7537078b0cf51b0a5f7189dfa60c22e5ec0d6b9e2fd3f7fa7566770b5da87e0c9929f48769933c3e3a473fd5cc7231672fca36ab1fee1f8670</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-lang/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-lang/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/LANG</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/commons-lang.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-databind</name>
      <version>2.20.1</version>
      <description>General data-binding functionality for Jackson: works on core streaming API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">49d7b7226df5ed4a036e48997a03d066</hash>
        <hash alg="SHA-1">9586a7fe0e1775de0e54237fa6a2c8455c93ac06</hash>
        <hash alg="SHA-256">34bbeb4526fff4f8565b12106bf85a6afcbae858966d489b54214ac46b2e26e8</hash>
        <hash alg="SHA-512">16906e9c2f1962649eb21de148f362fedf2ce903c7ca0e6d68a01d43dbe8402b70cc537c104f36bc40a2bed6601162e7c21663735582e25bff7e27852be1405d</hash>
        <hash alg="SHA-384">0591935cdfed1d65fa4a2820133ba129384f71921228ffe093f343d3ebf0b699762810d9208641726111015f0e35753b</hash>
        <hash alg="SHA3-384">855ccd449944e7884f8088c8c5b224e6e2f63bcd3123502618b4f5ded025e5978143af8c5d31215276932bc3bb089472</hash>
        <hash alg="SHA3-256">53732171c9f2bdeaa40017a34683a00ac11e8a8c1bcefaed07eb91e629e20376</hash>
        <hash alg="SHA3-512">05017efae94bc3c83131aaaa7911f20e7c367502cd2cd05c6cedabc877b55724bcde2521ba1da15bf1c1c3ccb1a235124b39b2d4860142f2b89d4df197cf5c83</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/FasterXML/jackson</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://central.sonatype.com/api/v1/publisher</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/FasterXML/jackson-databind/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/FasterXML/jackson-databind</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-annotations</name>
      <version>2.20</version>
      <description>Core annotations used for value types, used by Jackson data binding package.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b901def3c20752817f27130e4b8d6640</hash>
        <hash alg="SHA-1">6a5e7291ea3f2b590a7ce400adb7b3aea4d7e12c</hash>
        <hash alg="SHA-256">959a2ffb2d591436f51f183c6a521fc89347912f711bf0cae008cdf045d95319</hash>
        <hash alg="SHA-512">8926d89bfe7f427c7793f6af619249540f23f82eae055dd03d4cb163ff603a43dd6a3ebe43528d00789aed3df0dd2f10e08552fdec53e2691849b9769f57f0c9</hash>
        <hash alg="SHA-384">40ee4c1438a5a190624dff9deca83377f7e60690b4535359b2a79924f736bff7c8d077e5b01c6c8972735dc152f2ccf4</hash>
        <hash alg="SHA3-384">0fc0f697d03692b63c2b11fcabac51c630278ed6df15420975263ea4ad19418b3b71b7889497ed20a150035f9bcba79d</hash>
        <hash alg="SHA3-256">6bf49e384735969af020f758b255ceed26af92d4cf456f6e7b83e8de53289f93</hash>
        <hash alg="SHA3-512">3372f6c456a7f6a33ebc3ecc65daaf36288be2a14b1f2cb9fcd7387c07acab1c69ae803a366e5d12adf4934970ffd2e34017917c5f16a6d563bc94810f228ab3</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/FasterXML/jackson</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://central.sonatype.com/api/v1/publisher</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/FasterXML/jackson-annotations/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/FasterXML/jackson-annotations</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-core</name>
      <version>2.20.1</version>
      <description>Core Jackson processing abstractions (aka Streaming API), implementation for JSON</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">889b2c417b61c9f4f460b06957147234</hash>
        <hash alg="SHA-1">5734323adfece72111769b0ae38a6cf803e3d178</hash>
        <hash alg="SHA-256">ffab4d957daa2796cf24cb66d0b78a7090f1bcbe17c3a4578f09affaaf137089</hash>
        <hash alg="SHA-512">0463e1c2e1d8e8cfa4954dfce491583f0ec9ec1de6e6f342d1e5f0c63dcfb959673552a279ec4e6b6cc69e6ac2de6d42dd512149ceb76620b5d780db7325e6a7</hash>
        <hash alg="SHA-384">a279b2d57d019a05f65762ce670ce23e02466b11276d8c0687f3bb5ed40a8a1854bfe6dd2dc157d0f5695186f7d9a65a</hash>
        <hash alg="SHA3-384">06b9f33e030a99fa95d171118ab668bee42e32b35b85e05750f8514128dbadc94026afde16dbadc0ff786027b09712a4</hash>
        <hash alg="SHA3-256">3e83a1a349d8ba3a4e76ee983f04b259a85263dda5090f55aae5535109c4b6c0</hash>
        <hash alg="SHA3-512">87b3a61a71a625adfc6b9b402079c26b223e19535ca5af07e4130932d479f9c22e90696911050d8ab8a09a6209651fe2f25f54d7d9a1493b6dab6f8acb76203d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/FasterXML/jackson-core</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://central.sonatype.com/api/v1/publisher</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/FasterXML/jackson-core/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/FasterXML/jackson-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-compress</name>
      <version>1.28.0</version>
      <description>Apache Commons Compress defines an API for working with
compression and archive formats. These include bzip2, gzip, pack200,
LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,
Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f33efe616d561f8281ef7bf9f2576ad0</hash>
        <hash alg="SHA-1">e482f2c7a88dac3c497e96aa420b6a769f59c8d7</hash>
        <hash alg="SHA-256">e1522945218456f3649a39bc4afd70ce4bd466221519dba7d378f2141a4642ca</hash>
        <hash alg="SHA-512">f1f140f4f40ab3cf3265919db9dbb95a631a29aa784e305f291de4e68876bb711d9217d62d7937cddddd393982decdf71a608b4b3ab7f4e6375cf28af2893d7f</hash>
        <hash alg="SHA-384">afe6a8fc8e7486c4ecce95276bb1467763d7ff7d941c7bcff8661bbbd4bff442fd0899ff7a11bc540cda86818ee4a8f0</hash>
        <hash alg="SHA3-384">6afb636ad0805e522913cfd91c8293c485b7f4eff5e45dd3a17a716c3f4b8ab8969e9c00927559a5fb762cba1fdb3d3f</hash>
        <hash alg="SHA3-256">4420e0b462b5dcc45077e95e012a82a5ae17659e5abe8a685fa086dab6995298</hash>
        <hash alg="SHA3-512">23e37d13c8ee6c7369e407c29d1f9ee1bb44eca9f09a6f9742f6b4cf3d38dd7a0509fe0142536cd8087b68a76e71d819105af2c23f2aeed08acc58eb93cf7e61</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-compress/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-compress/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/COMPRESS</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=commons-compress.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-codec/commons-codec@1.19.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-codec</group>
      <name>commons-codec</name>
      <version>1.19.0</version>
      <description>The Apache Commons Codec component contains encoders and decoders for
     formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these
     widely used encoders and decoders, the codec package also maintains a
     collection of phonetic encoding utilities.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e46fa78c69544eb6239c4e8447e72544</hash>
        <hash alg="SHA-1">8c0dbe3ae883fceda9b50a6c76e745e548073388</hash>
        <hash alg="SHA-256">5c3881e4f556855e9c532927ee0c9dfde94cc66760d5805c031a59887070af5f</hash>
        <hash alg="SHA-512">d98a7a1cfcc08aa9cce4f7778e3f37ecb99da7b1da01944e5fa8faf06fbf9f969f2efb0b416832f419d53085250f711c071f1dac9fa0968483c37034198367fb</hash>
        <hash alg="SHA-384">f0edec3cd84b2320e6930380d3fe13335d33f041470d27fb93789db0c696ec01dda21b471f0015bf70bffffcbfdb67c0</hash>
        <hash alg="SHA3-384">ce771ef9f0df326a34ab37e70f710801bb18d545aca0ee492db62770db323ab8a0b5082123ca4826f3d3182748537cfc</hash>
        <hash alg="SHA3-256">8296db95bb2fac86a0eb68e61e9730084f4272ad6a4a4327a5259c631840e98e</hash>
        <hash alg="SHA3-512">05da2f8674a257c5d8a1137cadbda71d2635f22237450bf2cbc980380a56905247bea38049c8cd80e60077be2be73b1eae6b466c228e4277763a54979cf856fb</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/commons-codec/commons-codec@1.19.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-codec/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-cli/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CODEC</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/commons-codec</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jspecify/jspecify@1.0.0?type=jar">
      <group>org.jspecify</group>
      <name>jspecify</name>
      <version>1.0.0</version>
      <description>An artifact of well-named and well-specified annotations to power static analysis checks</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9133aba420d0ca3b001dbb6ae9992cf6</hash>
        <hash alg="SHA-1">7425a601c1c7ec76645a78d22b8c6a627edee507</hash>
        <hash alg="SHA-256">1fad6e6be7557781e4d33729d49ae1cdc8fdda6fe477bb0cc68ce351eafdfbab</hash>
        <hash alg="SHA-512">efded31ef5b342f09422935076e599789076431e93a746685c0607e7de5592719ba6aacde0be670b3f064d1e85630d58d5bce6b34aed2a288fdb34f745efb7bc</hash>
        <hash alg="SHA-384">814f860e5a44ead6c457676841eef471a8b87be31b84c60a8a4477a18a9cbcb6e3c2ae700969d5c5e52309d961e0537a</hash>
        <hash alg="SHA3-384">c8844e5b71e5ecfbb7366097ce34af2f5863d86d5ccc3f9ec384d8ade4b60ccc8124c7fc88664f1afd2b0962fc8775bf</hash>
        <hash alg="SHA3-256">4b4f08ad7606a3ac62997779484919a302267b26d26ee19125f8a7eea60e8a71</hash>
        <hash alg="SHA3-512">65c6845ebae981cb81b61107707ced39f5b377dae970b47606ef482aaf10e3729def0da40d9377c43abbfb483a5ceae039b0d51c129c50a6d36ad351a5d6b01e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.jspecify/jspecify@1.0.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://jspecify.org/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jspecify/jspecify/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.shared/maven-invoker@3.3.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.shared</group>
      <name>maven-invoker</name>
      <version>3.3.0</version>
      <description>A component to programmatically invoke Maven.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">adb05ae23cfc780b9dd6899870840378</hash>
        <hash alg="SHA-1">a4b04e28abf90c3528868545176c5fcd6dcfa06a</hash>
        <hash alg="SHA-256">f9785c3bcf4ceec8208b05199adf473115e4e49ea66e60b2b533beb743c67a2a</hash>
        <hash alg="SHA-512">4713a1b47d73c5458cddf7d992bd9b826a21a70d8eccc8718033f11c83dc3d52c966964e9828459f7682244d93f8ac72337e750c295cbbf9216ba9aa7f117d68</hash>
        <hash alg="SHA-384">4a9b2803a1fa26ec58e883beec834c7650aa23c7c2615a4fd9148fdf660bbc78c357ed4fed44fd649e46de053c3f6380</hash>
        <hash alg="SHA3-384">f4ddcb6fc140ca5797ff4e05404e5beb0c2a241fe4ee2033ca1fc0ca7d38728258133ae45a920b0656d85b8e0cc12313</hash>
        <hash alg="SHA3-256">feeb602f8d473b4bbf663d93a110ff22f444e8cc133df73b3dc612bfb47a203a</hash>
        <hash alg="SHA3-512">a11746d4b1fcf4e46df2c960630fb74ce271a1867915b113a48534bc0deb8ce409df9c72b1231539f2aee4e0646fbad57e0943a3bfdf646e5de29eec4d1ca989</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.shared/maven-invoker@3.3.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/shared/maven-invoker/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-invoker/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/issues/?jql=project%20%3D%20MSHARED%20AND%20component%20%3D%20maven-invoker</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven-invoker/tree/maven-invoker-3.3.0</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.shared/maven-shared-utils@3.4.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.shared</group>
      <name>maven-shared-utils</name>
      <version>3.4.2</version>
      <description>Shared utilities for use by Maven core and plugins</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">53a038f77a81cb5816ad2b1c7daa8711</hash>
        <hash alg="SHA-1">bfa28296272a5915b08de9f11f34a94b0a818fd0</hash>
        <hash alg="SHA-256">b613357e1bad4dfc1dead801691c9460f9585fe7c6b466bc25186212d7d18487</hash>
        <hash alg="SHA-512">71db8a485a6436cb305276ea9d748f578e1a8ffa1346c8570f7038684ce53d320584174634aeffa1b51629af0171a2d6572854eb07236a83236ad1d9949988e9</hash>
        <hash alg="SHA-384">8f7e2c449282244fea3151ac0c956b42bb7ae6cb2397ca8b18952aea802d33cccad6e08a5f515fc34e52bacfece18862</hash>
        <hash alg="SHA3-384">72ec6c2c5de8cd074bd59dbb8215005bedc9de58795484ec2792fa867eaf13547aaca81daaf06f1ec117d29b21e70cd0</hash>
        <hash alg="SHA3-256">5cf6de29555bde0317d641e8a7afd7d1ed84dddff92c80f8493b4a2873d26c41</hash>
        <hash alg="SHA3-512">836acb2525ddc3b352da7db824e00c0831b25f46cb32a77c1e578b39978621e3c47da3554a901749af15b3981620875a4c4492f421a1833d8eb8e50c4804eff8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.shared/maven-shared-utils@3.4.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/shared/maven-shared-utils/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-shared-utils/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/issues/?jql=project%20%3D%20MSHARED%20AND%20component%20%3D%20maven-shared-utils</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven-shared-utils/tree/maven-shared-utils-3.4.2</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.inject/javax.inject@1?type=jar">
      <group>javax.inject</group>
      <name>javax.inject</name>
      <version>1</version>
      <description>The javax.inject API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">289075e48b909e9e74e6c915b3631d2e</hash>
        <hash alg="SHA-1">6975da39a7040257bd51d21a231b76c915872d38</hash>
        <hash alg="SHA-256">91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff</hash>
        <hash alg="SHA-512">e126b7ccf3e42fd1984a0beef1004a7269a337c202e59e04e8e2af714280d2f2d8d2ba5e6f59481b8dcd34aaf35c966a688d0b48ec7e96f102c274dc0d3b381e</hash>
        <hash alg="SHA-384">ac04c9f03ccbe35a25deb8b50280a0ca01dbe6aff0dd795d55af6112bfe3cd5817eb82f32fb18378d86cd64b07597190</hash>
        <hash alg="SHA3-384">fca090ecb1edeacb9fe865dc515cd1d109b323cd742d4a9733ff199a96ee96e0db4f924079520b9c189ef750f255475d</hash>
        <hash alg="SHA3-256">5b0054e39e522de0e0ffc4034d12f72270291fb24d94d5ffc9c4d69c25035fc6</hash>
        <hash alg="SHA3-512">fb290f5a70b1efc1dff12f40a0b2d7b94019f66da42e78010c0b8e61f222c4f267b67e356a9e9c346eb801e5515e36243888f280c5cb95c2dd69016a30cadeb9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/javax.inject/javax.inject@1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://code.google.com/p/atinject/</url>
        </reference>
        <reference type="vcs">
          <url>http://code.google.com/p/atinject/source/checkout</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/fr.inria.gforge.spoon/spoon-javadoc@11.3.1-beta-3?type=jar">
      <publisher>Inria</publisher>
      <group>fr.inria.gforge.spoon</group>
      <name>spoon-javadoc</name>
      <version>11.3.1-beta-3</version>
      <description>A javadoc parser for the java source code analysis tool spoon.</description>
      <hashes>
        <hash alg="MD5">f8d60129a988ceb63e10af8999b9141a</hash>
        <hash alg="SHA-1">a6f2d99574c0b09b9346c97d52e1451cf1bd8ef4</hash>
        <hash alg="SHA-256">7fbf155ea88871c2244443028103faaa973f7cca6360473a6f7d7e54b13f2a94</hash>
        <hash alg="SHA-512">44c790a0ab2c7f4285b12e81b99367fd2a0ae21bfa93371b1e4dabfae0d351d566e9431c9fe25b3a5b711709517aa2636a2ae5ff71a37dbf5a358aacdf01a250</hash>
        <hash alg="SHA-384">eeabbacca0506d33300dc2cb0625d6086e195f7c4e6eeb5bc1780e78d9c1dbca5b42437c0c12f46ac04c0a6e212b978b</hash>
        <hash alg="SHA3-384">8414871911f7599c185ae09ea70e10a58d62f6af30e55d9cc815af5fd89b1676a46333e72f683109f4829283d1c3646d</hash>
        <hash alg="SHA3-256">4ffff3d555cfdcc3f7ae130deafc0fc6faef2b8098ad1b8f5c7c99f5b2024e6b</hash>
        <hash alg="SHA3-512">8ef2b685430bf56238c71fdf3f2d6e02c3bdb0ba7235b5b3da32be9a34cec4cef280296af59a5d190f5db7891ad346fa5cce49613e5cd84d7efb5a335c95a9e5</hash>
      </hashes>
      <licenses>
        <license>
          <id>CECILL-C</id>
          <url>http://www.cecill.info/licences/Licence_CeCILL-C_V1-en.html</url>
        </license>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/license/mit/</url>
        </license>
      </licenses>
      <purl>pkg:maven/fr.inria.gforge.spoon/spoon-javadoc@11.3.1-beta-3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://spoon.gforge.inria.fr/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/INRIA/spoon/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/INRIA/spoon/tree/v11.3.1-beta-3/spoon-javadoc</url>
        </reference>
      </externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/fr.inria.gforge.spoon/spoon-core@11.3.1-beta-3?type=jar">
      <dependency ref="pkg:maven/org.eclipse.jdt/org.eclipse.jdt.core@3.44.0?type=jar"/>
      <dependency ref="pkg:maven/com.martiansoftware/jsap@2.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.21.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-model@3.6.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar"/>
      <dependency ref="pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.shared/maven-invoker@3.3.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.jdt/org.eclipse.jdt.core@3.44.0?type=jar">
      <dependency ref="pkg:maven/org.eclipse.jdt/ecj@3.44.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.jdt/ecj@3.44.0?type=jar"/>
    <dependency ref="pkg:maven/com.martiansoftware/jsap@2.1?type=jar"/>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
    <dependency ref="pkg:maven/commons-io/commons-io@2.21.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven/maven-model@3.6.0?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.1.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.1.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar">
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.19.0?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.21.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-codec/commons-codec@1.19.0?type=jar"/>
    <dependency ref="pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven.shared/maven-invoker@3.3.0?type=jar">
      <dependency ref="pkg:maven/org.apache.maven.shared/maven-shared-utils@3.4.2?type=jar"/>
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven.shared/maven-shared-utils@3.4.2?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.21.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
    <dependency ref="pkg:maven/fr.inria.gforge.spoon/spoon-javadoc@11.3.1-beta-3?type=jar">
      <dependency ref="pkg:maven/fr.inria.gforge.spoon/spoon-core@11.3.1-beta-3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/fr.inria.gforge.spoon/spoon-pom@11.3.1-beta-3?type=pom"/>
  </dependencies>
</bom>
