{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.6",
  "serialNumber" : "urn:uuid:195aa8bf-bed4-36cb-8ff6-cf16d820c820",
  "version" : 1,
  "metadata" : {
    "lifecycles" : [
      {
        "phase" : "build"
      }
    ],
    "tools" : {
      "components" : [
        {
          "type" : "library",
          "author" : "OWASP Foundation",
          "group" : "org.cyclonedx",
          "name" : "cyclonedx-maven-plugin",
          "version" : "2.9.1",
          "description" : "CycloneDX Maven plugin",
          "hashes" : [
            {
              "alg" : "MD5",
              "content" : "9c7a565cf28cce58557d0c621c5ea4b1"
            },
            {
              "alg" : "SHA-1",
              "content" : "be882d5a22050bfa9d19090b1420c188617d0e1c"
            },
            {
              "alg" : "SHA-256",
              "content" : "698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249"
            },
            {
              "alg" : "SHA-512",
              "content" : "c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0"
            },
            {
              "alg" : "SHA-384",
              "content" : "d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb"
            },
            {
              "alg" : "SHA3-384",
              "content" : "80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f"
            },
            {
              "alg" : "SHA3-256",
              "content" : "142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699"
            },
            {
              "alg" : "SHA3-512",
              "content" : "af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b"
            }
          ]
        }
      ]
    },
    "component" : {
      "type" : "library",
      "bom-ref" : "pkg:maven/fr.inria.gforge.spoon/spoon-pom@11.3.1-beta-5?type=pom",
      "publisher" : "Inria",
      "group" : "fr.inria.gforge.spoon",
      "name" : "spoon-pom",
      "version" : "11.3.1-beta-5",
      "description" : "Common Maven config for Spoon modules",
      "licenses" : [
        {
          "license" : {
            "id" : "CECILL-C",
            "url" : "http://www.cecill.info/licences/Licence_CeCILL-C_V1-en.html"
          }
        },
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/fr.inria.gforge.spoon/spoon-pom@11.3.1-beta-5?type=pom",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://spoon.gforge.inria.fr/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/INRIA/spoon/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/INRIA/spoon/tree/v11.3.1-beta-5/spoon-pom"
        }
      ]
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeAggregateBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      },
      {
        "name" : "cdx:reproducible",
        "value" : "enabled"
      }
    ]
  },
  "components" : [
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/fr.inria.gforge.spoon/spoon-core@11.3.1-beta-5?type=jar",
      "publisher" : "Inria",
      "group" : "fr.inria.gforge.spoon",
      "name" : "spoon-core",
      "version" : "11.3.1-beta-5",
      "description" : "Spoon is a tool for meta-programming, analysis and transformation of Java programs.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "199953a05d324dc9fbfa5cb9cff54e7e"
        },
        {
          "alg" : "SHA-1",
          "content" : "582e1de0f15dc3089926788e2d633976d91c3bb9"
        },
        {
          "alg" : "SHA-256",
          "content" : "be4bb4cd4bd1ec11eeaa27c13a87b9e3dcacf2dc5a40aeee4c3a1279eb1fd110"
        },
        {
          "alg" : "SHA-512",
          "content" : "8cf2adc405b3b3a1e3bff57d2da755003c679c82d4b71ef0f9dff8c0b9ef31d73aaf8a9975caf24b7bbbebeb47ec839ebd0b12fe78ddf5ea17a321d945addc57"
        },
        {
          "alg" : "SHA-384",
          "content" : "6a85bd913e2b459b32a5177aa3bd88e056df4726bc69cb695b84f7747df7184c1593412072b73f40a960d7e79379f3aa"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f9653e91e419d916b64546dd5f86c7e0a160a5cdd7808ae849eff52008a3aed2dc48677fa3f1c12c7e092274a7db0546"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ea5c3980513f68d3158068641963922dae8b5739755adbd68de2faee2b49a19b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9c2a9b157db7b0b424f3ad4e5c1a627d12742c624b493ff03b1d1e541439d8b4cb9daab9ad158bf01d94d1b19519a42a3b18b0eaa4b327d8495db366a64584a4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CECILL-C",
            "url" : "http://www.cecill.info/licences/Licence_CeCILL-C_V1-en.html"
          }
        },
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/fr.inria.gforge.spoon/spoon-core@11.3.1-beta-5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://spoon.gforge.inria.fr/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/INRIA/spoon/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/INRIA/spoon/tree/v11.3.1-beta-5"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jdt/org.eclipse.jdt.core@3.44.0?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "org.eclipse.jdt",
      "name" : "org.eclipse.jdt.core",
      "version" : "3.44.0",
      "description" : "Java Development Tools Core",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6fda7b537aeb2dc1cf739f294d29edb7"
        },
        {
          "alg" : "SHA-1",
          "content" : "8a160d1066f426fe8254e0cc1e33dafca66628a7"
        },
        {
          "alg" : "SHA-256",
          "content" : "5cc842b72f8c87086747d464c1c375680c84eaae2dfd83f53a43205a221bf5e7"
        },
        {
          "alg" : "SHA-512",
          "content" : "71d169753b93eb94a0e8816b92423f181ffc34dcdf8c6c3d276f08143178ae03a2fe8a8b44edc266463ea74847b1a22267e4e2d5bc25206319673bf4a4c67f03"
        },
        {
          "alg" : "SHA-384",
          "content" : "4141a295d9f6eb0a1c26e10386bf906f866c7ecd8b13f127f2d42330b99d4076f98cea5117b0f2e3824ea03b9f845a4f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8a666dbc81fb4d6a8c19d6b031f2a7bc67079feefa42d45005affea998f5b110b944727c557b6a6342dd42f6b1688348"
        },
        {
          "alg" : "SHA3-256",
          "content" : "99ca1c2d22c1988023fefd72d95d65495f16149686e36ac46c3c890bb03dccc9"
        },
        {
          "alg" : "SHA3-512",
          "content" : "978c62a2c7700099b62e4c16345b817fc27c4d969ae2f76862eb0141bb25e1bbf279f045b0b4a35d086fb7035ac786e5a0f7ce64718fea0d78272bcbaf48723c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0",
            "url" : "https://www.eclipse.org/legal/epl-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jdt/org.eclipse.jdt.core@3.44.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/eclipse-jdt/eclipse.jdt.core/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-jdt/eclipse.jdt.core/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-jdt/eclipse.jdt.core/tree/745799bf0e1c8bd0f2b25f36880bd1c3505e21a3/org.eclipse.jdt.core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jdt/ecj@3.44.0?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "org.eclipse.jdt",
      "name" : "ecj",
      "version" : "3.44.0",
      "description" : "Eclipse Compiler for Java(TM)",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8d0d2b80bc3d9431f0bdf3037f3d5954"
        },
        {
          "alg" : "SHA-1",
          "content" : "a4e1c9f58954801783e1b49d2f281000f814a779"
        },
        {
          "alg" : "SHA-256",
          "content" : "14c46ddc2e511c46c998da728f6a80f13a689c920f3832402f7ad150f6a6188d"
        },
        {
          "alg" : "SHA-512",
          "content" : "41d5cea69f9bdc75eee3b5e89bf29ae9cbfe8de9f1ccdc94ea9364c182463bc4003fdee19b23c17b9ddc7c8950f4d196bb4cf3d8a5c2d1af56a769905385e906"
        },
        {
          "alg" : "SHA-384",
          "content" : "fd097711a8d1fc19f7c64972a0b18da240f587143dfaf1ed39e5d616b59ebb25ba31b71e40a67c3ea7ae8cba4b8e6297"
        },
        {
          "alg" : "SHA3-384",
          "content" : "85db4bd32792e237459fe2b089fac918982c62d744101febfff26de652566b57e2b03eafd5eff525218048de7533d68e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e5c0f119f333fb877fa629840f2ae045a8ecb5be3440a69ad90e03cd7d556cfb"
        },
        {
          "alg" : "SHA3-512",
          "content" : "251882c7cfc611e620aaed16a801353122046d5d4372e78ec1047e78b7e86646f06e81f44849b7a6f35f7ed3bdf148ea354a777a0a0099d8eae491ef6825d3f1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0",
            "url" : "https://www.eclipse.org/legal/epl-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jdt/ecj@3.44.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/eclipse-jdt/eclipse.jdt.core/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-jdt/eclipse.jdt.core/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-jdt/eclipse.jdt.core/tree/745799bf0e1c8bd0f2b25f36880bd1c3505e21a3/org.eclipse.jdt.core.compiler.batch"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.martiansoftware/jsap@2.1?type=jar",
      "group" : "com.martiansoftware",
      "name" : "jsap",
      "version" : "2.1",
      "description" : "the Java-based Simple Argument Parser",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "37c5996faaca2c37e6b45c74ffe997aa"
        },
        {
          "alg" : "SHA-1",
          "content" : "d17c260c8f5eb6e7d6bd75449a57edfeb53d2305"
        },
        {
          "alg" : "SHA-256",
          "content" : "331746fa62cfbc3368260c5a2e660936ad11be612308c120a044e120361d474e"
        },
        {
          "alg" : "SHA-512",
          "content" : "7d5caa60f9f084efe7a59edb8db09ba261acb9e4be0852134e6c8b9794ae79cd3f4e5c342cecb398d22e3b585c328408545fada4d5b00ba799fb58bf928b8feb"
        },
        {
          "alg" : "SHA-384",
          "content" : "ba08a5183432d6d57ed21dc24217f274e515c659d728a9ac53a6333f23134c9a33b874514a07aea457dbb5a6df6dc8a9"
        },
        {
          "alg" : "SHA3-384",
          "content" : "cd6ff71114e49aa56a520ea0c1996494428c6253a4c47d5c161398e88385093213732ae35f8f8a6f355e51d81f25fd70"
        },
        {
          "alg" : "SHA3-256",
          "content" : "02e2038dbd1d8274f94c11b3ca919b5ad2c4f5de8e6d6d46b073d327e3df2c2d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "18ce1f05d2956bcc720f1ae1477fb2d2ab08e916360b4143d40d45a594a56ae37585cc18fbae55d7e9b06cf67f060ebe2ec63add0be3bbb7dbc17906a3d79a3f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "LGPL",
            "url" : "http://www.martiansoftware.com/jsap/license.html"
          }
        }
      ],
      "purl" : "pkg:maven/com.martiansoftware/jsap@2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.martiansoftware.com/jsap/"
        },
        {
          "type" : "vcs",
          "url" : "http://jsap.cvs.sourceforge.net/jsap/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "2.0.17",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b6480d114a23683498ac3f746f959d2f"
        },
        {
          "alg" : "SHA-1",
          "content" : "d9e58ac9c7779ba3bf8142aff6c830617a7fe60f"
        },
        {
          "alg" : "SHA-256",
          "content" : "7b751d952061954d5abfed7181c1f645d336091b679891591d63329c622eb832"
        },
        {
          "alg" : "SHA-512",
          "content" : "9a3e79db6666a6096a3021bb2e1d918f30f589d8de51d6b600f8ebd92515a510ae2d8f87919cc2dfa8365d64f10194cac8dfa0fb950160eef0e9da06f6caaeb9"
        },
        {
          "alg" : "SHA-384",
          "content" : "6ea24f814a9b6ece428cfd0535e2f3b8927005745ef61006b50fdb5a90126ee5ea05650155382b3b755c5bce38ef3944"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9b1015052f0ec43f9be09764e131834157599611cb52f6fe591c4ac6a8ab4817518f2a4b8871e5e738c8678e93af5557"
        },
        {
          "alg" : "SHA3-256",
          "content" : "00559b4f4066b4917ba4fe2a6f23111eaeada321112d030910d218ced9084b5e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9579c2f7e7516e177c2d493ccc9eb8150978cf19f6f09b28d116f6935239fd56dc6af2b62b3336f79b0b462445550cd1fb5377a07001a6f44aaab6a32fa2fa47"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-parent/slf4j-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-io/commons-io@2.21.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-io",
      "name" : "commons-io",
      "version" : "2.21.0",
      "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bc7e020873f086ede85f97bd9f013215"
        },
        {
          "alg" : "SHA-1",
          "content" : "52a6f68fe5afe335cde95461dd5c3412f04996f7"
        },
        {
          "alg" : "SHA-256",
          "content" : "7d643a2afea8b058b762aa6fb90e5b256f6c729739f8b3784c3370ddc609e88d"
        },
        {
          "alg" : "SHA-512",
          "content" : "7ac1aa4d834cd7cdecaee223a64c63d481810c73dfdb5109f402234a05cadf754e414cead99072f5140d4f7042ee084161935fb28129a631d908d989c5bbac5d"
        },
        {
          "alg" : "SHA-384",
          "content" : "97c07e5c4f62484c98b6777f63ab032ee09eeb1c9ddae8332890126df9c665afb9cd554db02495171738720d23c53732"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e3e44c9f4a5f4075fb62a438a84015fe2abf878e9793835a7816dc3c35141bb79fe96dfdc6bb5aef96b7c5bbbcf453c1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1f8f4ce25b7169452dabb10ce843b3246378ea55c1971acd2300e417747b3a68"
        },
        {
          "alg" : "SHA3-512",
          "content" : "175630adf10305aeb31d737f833021a25582ffe2ef66fda6e7f694598af9c68cebbd205ade469eca4faaf6b9d349244289e62179d9cf48d93427090e2c008cf8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-io/commons-io@2.21.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-io/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-io/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/IO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-model@3.6.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-model",
      "version" : "3.6.0",
      "description" : "Model for Maven POM (Project Object Model)",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0505d964b102e3f62845f5d4508e166e"
        },
        {
          "alg" : "SHA-1",
          "content" : "06d73e6218a10cfe82cf0325b582cbed732cc751"
        },
        {
          "alg" : "SHA-256",
          "content" : "a1bf0c7856afd1f1b9c81c22818328fb7a796b4047010e08f2e859d1896080a9"
        },
        {
          "alg" : "SHA-512",
          "content" : "6ea5f34f4d11524e069716a142140af0f17c7723eec070e33443fab20501e177f265b38c02a324dd50fc2c9d6aa62e73ef537a09e07a9e55282c686b0a905e67"
        },
        {
          "alg" : "SHA-384",
          "content" : "fd8129ac75e246281f79a520d5dc7299df8c5b7a3d6f90d69cd56aff6049970619f229df7c28d6d59331c401b01412df"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0b293af684836821291a16801172a812bbc6cc96bf036c8d69ab4051650aa40bc8d70b2870288c76ad7ddcee391e3cb8"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6e10d09a9e77a88fb38a2c4f730a73bf9200a0f043511b9ec9d80a26df5e4a7f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6bb00967a436512fa8971d57476dada94f74c04125d304d615000e56fc8ce086741ed608c8d14a1924714fac2c113bfb577a6aa0083a3228fb97960749cb076b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-model@3.6.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.6.0/maven-model/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.6.0/maven-model"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-utils@3.1.0?type=jar",
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-utils",
      "version" : "3.1.0",
      "description" : "A collection of various utility classes to ease working with strings, files, command lines, XML and more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bfec331a62402081dd4143e3a8d193e4"
        },
        {
          "alg" : "SHA-1",
          "content" : "60eecb6f15abdb1c653ad80abaac6fe188b3feaa"
        },
        {
          "alg" : "SHA-256",
          "content" : "0ffa0ad084ebff5712540a7b7ea0abda487c53d3a18f78c98d1a3675dab9bf61"
        },
        {
          "alg" : "SHA-512",
          "content" : "3805c57b7297459c5e2754d0fd56abd454eee08691974fb930ebb9b79a529fd874f16d40cec66e7fd90d4146c9d1fef45cdb59f9e359fce0c48ac77526fc320d"
        },
        {
          "alg" : "SHA-384",
          "content" : "2f2b5f791adacf36428671ba92fff6fb0a6a009f92c8a4b1cc0e3a700edf725152a76b805c77551b24a62e62adc59561"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a82d71e5de8917d8d5e5553128d7c63bc9465368b193afd167c4decdb4e8468aca4d4fd995f1323057ee1dc66a56fcdf"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ff5574c752b6f516ae64e7335e98e65a429aa7de738aa963fe25b991cf1ffcef"
        },
        {
          "alg" : "SHA3-512",
          "content" : "67548a57d26bdb883b0344e129988722e4a02c8732d1d05b4dc5d1cc86fde9d27063ceae80b6a7b94131340022efea994b8bdbbbfa724d4a7a57eb8245ddd989"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-utils@3.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://codehaus-plexus.github.io/plexus-utils/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://github.com/codehaus-plexus/plexus-utils/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://archive.plexus.codehaus.org/user"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/codehaus-plexus/plexus-utils"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.20.0",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. The code is tested using the latest revision of the JDK for supported LTS releases: 8, 11, 17, 21 and 25 currently. See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml Please ensure your build environment is up-to-date and kindly report any build issues.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4b29562ded527aa074e1d44f8646dac5"
        },
        {
          "alg" : "SHA-1",
          "content" : "65897b3e5731220962e659e001904af3c3cbeba9"
        },
        {
          "alg" : "SHA-256",
          "content" : "69e5c9fa35da7a51a5fd2099dfe56a2d8d32cf233e2f6d770e796146440263f4"
        },
        {
          "alg" : "SHA-512",
          "content" : "1c72db334ea44f932c35e602b78907865f5bab43e30c871c9be67c8184eaa778f32d7bc3ab525d5921cd28619d3f9babfd483f17de54f007ee07db2e074b0307"
        },
        {
          "alg" : "SHA-384",
          "content" : "77dd27c4d5e9372c002bd6878d2cfaaec3cf46dd57d65de63d7f2e09351344531cfa81a537b56628ac6db18adee7e484"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3456de40eef224b3ad195d2f218dd28eacb0da07607aee7ead94bd8d54bd8311d51c28d4066db4bf8b69a2df48c415f5"
        },
        {
          "alg" : "SHA3-256",
          "content" : "36e3f71352fa14bc580db45a05b09b063392c6d39acf9e24ffa6a67bbc07a336"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6ecbc05bb5cd3f7537078b0cf51b0a5f7189dfa60c22e5ec0d6b9e2fd3f7fa7566770b5da87e0c9929f48769933c3e3a473fd5cc7231672fca36ab1fee1f8670"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-lang/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-lang/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/commons-lang.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.0?type=jar",
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-databind",
      "version" : "2.21.0",
      "description" : "General data-binding functionality for Jackson: works on core streaming API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6da51758193ce8b00c39e742010b6c45"
        },
        {
          "alg" : "SHA-1",
          "content" : "a6b96ee168ca8734a293b6dc70acd5d495119521"
        },
        {
          "alg" : "SHA-256",
          "content" : "0057817ee40bc71544072dc2a3ba575ef91dce53a2d87489bde91c05f3a22621"
        },
        {
          "alg" : "SHA-512",
          "content" : "757949bf3a5d21f7a2d6567b1d2d80de60faaf11f8705b0d713e73361787cc78e12ffb328e9b2afee4e0dc005418599680bcbcc3a2c9df78cc9f29ecb60651ad"
        },
        {
          "alg" : "SHA-384",
          "content" : "db3a6d27c738601cd0e9fa1cbb17877b4202818faf220edc53586887e202bbb80926e2aa8a2f0e711a8ed5d9461df354"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6502dad7f54a82be440ca937a7d5e0efa348ca0bbd55e7a1b0ebec46c41a37290b3b890659c7e5b9d6eb68db526184f1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5894aedda8b2fba0d8dea3a97c5d0099a0d7898e6e109f3d5f0d21ead9ed516d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d3a0cf9349b5644e82d5328a0a0124d1fabb742eca91f9e20de66f1e2530dbfe6d60db1f454abfad0ba49376a2b226e7859ce58786c3f3c8c2f94342f14bedd4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://central.sonatype.com/api/v1/publisher"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-databind/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-databind"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-annotations",
      "version" : "2.21",
      "description" : "Core annotations used for value types, used by Jackson data binding package.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e0d0c3e7300954f73e43c67d933aaea4"
        },
        {
          "alg" : "SHA-1",
          "content" : "b1bc1868bf02dc0bd6c7836257a036a331005309"
        },
        {
          "alg" : "SHA-256",
          "content" : "53ca085f4a150f703f49e1aabd935bd03b43e1ea3d55d135438292af22cef56b"
        },
        {
          "alg" : "SHA-512",
          "content" : "d832a99867acc2d5afb2596da760c50e6a6b54c1bbc8e6c4186f267a16e1d55c7a916ef8b034ad6b277c41e3342b91dcdc2e3dcea8bdccfe89e7c147894591be"
        },
        {
          "alg" : "SHA-384",
          "content" : "30b15d68f8da6f6c26aa9f6c95d09152b6c1a8092cd976cf600d63d1751509a73865f937e0ad97d8d55bf20f6a749b44"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5205b51f6ed689cf31b58b98a61ca9e17a439c15d669dcb408ec4d430e77ac9ac57d39d5ca1f9973e8d184f6dd57ec4f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d6782d188a72b2bb96e4b595343e783012b3f98c30f7b9950244c21739334509"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b648f1e9ffe818227d53fbde409e61858ac22d3f78705eaf08065587ed512c9b33b0f5e2222356bfb33fb2973bb5a3184e31d2a7099f8fc8d2fd23eb4612a4bf"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://central.sonatype.com/api/v1/publisher"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-annotations/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-annotations"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.0?type=jar",
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-core",
      "version" : "2.21.0",
      "description" : "Core Jackson processing abstractions (aka Streaming API), implementation for JSON",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "eeaf6f2d71789f1c04ba944aeaa8e18e"
        },
        {
          "alg" : "SHA-1",
          "content" : "1f7c3f82e6e2ef5def0a12d7dd754e26f0c0ae28"
        },
        {
          "alg" : "SHA-256",
          "content" : "e22604bcd9b24e462d5df102007cb06e1ed811e86f1ce6081ca62f385f2db87b"
        },
        {
          "alg" : "SHA-512",
          "content" : "4f00351e57ce480428216691c52c59a75ca824674d5c26ef902250cc3d012f22042c82eab9ca530c6328031b597239143e9e3b68c1c7a6cc6d49cef8cb420774"
        },
        {
          "alg" : "SHA-384",
          "content" : "e34dea00b650d09efa43d8ae8bb2660528857248032285b5d92aa6cd510a5d8916261b302859e00434553dac4ceeb1c3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b44c51c7594ca0f2ff72fa0c05395bdf308bb7be64a75cc9df9d09db312b98ace47cd49a87dd638ec41b040974f408c6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e9d2a765039b8bdda3c3abaabd4f3bd49b5c48aadfe42d28928276da5dc3916a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "41a8a4714d9f5a77541dba112960bd2b8719c9971a5e2bb2d8a219626df169e1cdf13344785d50b84887c316299397b39c2642f3669927baf50f930d67cae4fd"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson-core"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://central.sonatype.com/api/v1/publisher"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-core/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-compress",
      "version" : "1.28.0",
      "description" : "Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f33efe616d561f8281ef7bf9f2576ad0"
        },
        {
          "alg" : "SHA-1",
          "content" : "e482f2c7a88dac3c497e96aa420b6a769f59c8d7"
        },
        {
          "alg" : "SHA-256",
          "content" : "e1522945218456f3649a39bc4afd70ce4bd466221519dba7d378f2141a4642ca"
        },
        {
          "alg" : "SHA-512",
          "content" : "f1f140f4f40ab3cf3265919db9dbb95a631a29aa784e305f291de4e68876bb711d9217d62d7937cddddd393982decdf71a608b4b3ab7f4e6375cf28af2893d7f"
        },
        {
          "alg" : "SHA-384",
          "content" : "afe6a8fc8e7486c4ecce95276bb1467763d7ff7d941c7bcff8661bbbd4bff442fd0899ff7a11bc540cda86818ee4a8f0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6afb636ad0805e522913cfd91c8293c485b7f4eff5e45dd3a17a716c3f4b8ab8969e9c00927559a5fb762cba1fdb3d3f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4420e0b462b5dcc45077e95e012a82a5ae17659e5abe8a685fa086dab6995298"
        },
        {
          "alg" : "SHA3-512",
          "content" : "23e37d13c8ee6c7369e407c29d1f9ee1bb44eca9f09a6f9742f6b4cf3d38dd7a0509fe0142536cd8087b68a76e71d819105af2c23f2aeed08acc58eb93cf7e61"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-compress/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-compress/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/COMPRESS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-compress.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.19.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-codec",
      "name" : "commons-codec",
      "version" : "1.19.0",
      "description" : "The Apache Commons Codec component contains encoders and decoders for formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e46fa78c69544eb6239c4e8447e72544"
        },
        {
          "alg" : "SHA-1",
          "content" : "8c0dbe3ae883fceda9b50a6c76e745e548073388"
        },
        {
          "alg" : "SHA-256",
          "content" : "5c3881e4f556855e9c532927ee0c9dfde94cc66760d5805c031a59887070af5f"
        },
        {
          "alg" : "SHA-512",
          "content" : "d98a7a1cfcc08aa9cce4f7778e3f37ecb99da7b1da01944e5fa8faf06fbf9f969f2efb0b416832f419d53085250f711c071f1dac9fa0968483c37034198367fb"
        },
        {
          "alg" : "SHA-384",
          "content" : "f0edec3cd84b2320e6930380d3fe13335d33f041470d27fb93789db0c696ec01dda21b471f0015bf70bffffcbfdb67c0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ce771ef9f0df326a34ab37e70f710801bb18d545aca0ee492db62770db323ab8a0b5082123ca4826f3d3182748537cfc"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8296db95bb2fac86a0eb68e61e9730084f4272ad6a4a4327a5259c631840e98e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "05da2f8674a257c5d8a1137cadbda71d2635f22237450bf2cbc980380a56905247bea38049c8cd80e60077be2be73b1eae6b466c228e4277763a54979cf856fb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-codec/commons-codec@1.19.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-codec/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-cli/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CODEC"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/commons-codec"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
      "group" : "org.jspecify",
      "name" : "jspecify",
      "version" : "1.0.0",
      "description" : "An artifact of well-named and well-specified annotations to power static analysis checks",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9133aba420d0ca3b001dbb6ae9992cf6"
        },
        {
          "alg" : "SHA-1",
          "content" : "7425a601c1c7ec76645a78d22b8c6a627edee507"
        },
        {
          "alg" : "SHA-256",
          "content" : "1fad6e6be7557781e4d33729d49ae1cdc8fdda6fe477bb0cc68ce351eafdfbab"
        },
        {
          "alg" : "SHA-512",
          "content" : "efded31ef5b342f09422935076e599789076431e93a746685c0607e7de5592719ba6aacde0be670b3f064d1e85630d58d5bce6b34aed2a288fdb34f745efb7bc"
        },
        {
          "alg" : "SHA-384",
          "content" : "814f860e5a44ead6c457676841eef471a8b87be31b84c60a8a4477a18a9cbcb6e3c2ae700969d5c5e52309d961e0537a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c8844e5b71e5ecfbb7366097ce34af2f5863d86d5ccc3f9ec384d8ade4b60ccc8124c7fc88664f1afd2b0962fc8775bf"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4b4f08ad7606a3ac62997779484919a302267b26d26ee19125f8a7eea60e8a71"
        },
        {
          "alg" : "SHA3-512",
          "content" : "65c6845ebae981cb81b61107707ced39f5b377dae970b47606ef482aaf10e3729def0da40d9377c43abbfb483a5ceae039b0d51c129c50a6d36ad351a5d6b01e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jspecify.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jspecify/jspecify/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.shared/maven-invoker@3.3.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.shared",
      "name" : "maven-invoker",
      "version" : "3.3.0",
      "description" : "A component to programmatically invoke Maven.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "adb05ae23cfc780b9dd6899870840378"
        },
        {
          "alg" : "SHA-1",
          "content" : "a4b04e28abf90c3528868545176c5fcd6dcfa06a"
        },
        {
          "alg" : "SHA-256",
          "content" : "f9785c3bcf4ceec8208b05199adf473115e4e49ea66e60b2b533beb743c67a2a"
        },
        {
          "alg" : "SHA-512",
          "content" : "4713a1b47d73c5458cddf7d992bd9b826a21a70d8eccc8718033f11c83dc3d52c966964e9828459f7682244d93f8ac72337e750c295cbbf9216ba9aa7f117d68"
        },
        {
          "alg" : "SHA-384",
          "content" : "4a9b2803a1fa26ec58e883beec834c7650aa23c7c2615a4fd9148fdf660bbc78c357ed4fed44fd649e46de053c3f6380"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f4ddcb6fc140ca5797ff4e05404e5beb0c2a241fe4ee2033ca1fc0ca7d38728258133ae45a920b0656d85b8e0cc12313"
        },
        {
          "alg" : "SHA3-256",
          "content" : "feeb602f8d473b4bbf663d93a110ff22f444e8cc133df73b3dc612bfb47a203a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a11746d4b1fcf4e46df2c960630fb74ce271a1867915b113a48534bc0deb8ce409df9c72b1231539f2aee4e0646fbad57e0943a3bfdf646e5de29eec4d1ca989"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.shared/maven-invoker@3.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/shared/maven-invoker/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-invoker/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/issues/?jql=project%20%3D%20MSHARED%20AND%20component%20%3D%20maven-invoker"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-invoker/tree/maven-invoker-3.3.0"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.4.2?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.shared",
      "name" : "maven-shared-utils",
      "version" : "3.4.2",
      "description" : "Shared utilities for use by Maven core and plugins",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "53a038f77a81cb5816ad2b1c7daa8711"
        },
        {
          "alg" : "SHA-1",
          "content" : "bfa28296272a5915b08de9f11f34a94b0a818fd0"
        },
        {
          "alg" : "SHA-256",
          "content" : "b613357e1bad4dfc1dead801691c9460f9585fe7c6b466bc25186212d7d18487"
        },
        {
          "alg" : "SHA-512",
          "content" : "71db8a485a6436cb305276ea9d748f578e1a8ffa1346c8570f7038684ce53d320584174634aeffa1b51629af0171a2d6572854eb07236a83236ad1d9949988e9"
        },
        {
          "alg" : "SHA-384",
          "content" : "8f7e2c449282244fea3151ac0c956b42bb7ae6cb2397ca8b18952aea802d33cccad6e08a5f515fc34e52bacfece18862"
        },
        {
          "alg" : "SHA3-384",
          "content" : "72ec6c2c5de8cd074bd59dbb8215005bedc9de58795484ec2792fa867eaf13547aaca81daaf06f1ec117d29b21e70cd0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5cf6de29555bde0317d641e8a7afd7d1ed84dddff92c80f8493b4a2873d26c41"
        },
        {
          "alg" : "SHA3-512",
          "content" : "836acb2525ddc3b352da7db824e00c0831b25f46cb32a77c1e578b39978621e3c47da3554a901749af15b3981620875a4c4492f421a1833d8eb8e50c4804eff8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.4.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/shared/maven-shared-utils/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-shared-utils/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/issues/?jql=project%20%3D%20MSHARED%20AND%20component%20%3D%20maven-shared-utils"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-shared-utils/tree/maven-shared-utils-3.4.2"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.inject/javax.inject@1?type=jar",
      "group" : "javax.inject",
      "name" : "javax.inject",
      "version" : "1",
      "description" : "The javax.inject API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "289075e48b909e9e74e6c915b3631d2e"
        },
        {
          "alg" : "SHA-1",
          "content" : "6975da39a7040257bd51d21a231b76c915872d38"
        },
        {
          "alg" : "SHA-256",
          "content" : "91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff"
        },
        {
          "alg" : "SHA-512",
          "content" : "e126b7ccf3e42fd1984a0beef1004a7269a337c202e59e04e8e2af714280d2f2d8d2ba5e6f59481b8dcd34aaf35c966a688d0b48ec7e96f102c274dc0d3b381e"
        },
        {
          "alg" : "SHA-384",
          "content" : "ac04c9f03ccbe35a25deb8b50280a0ca01dbe6aff0dd795d55af6112bfe3cd5817eb82f32fb18378d86cd64b07597190"
        },
        {
          "alg" : "SHA3-384",
          "content" : "fca090ecb1edeacb9fe865dc515cd1d109b323cd742d4a9733ff199a96ee96e0db4f924079520b9c189ef750f255475d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5b0054e39e522de0e0ffc4034d12f72270291fb24d94d5ffc9c4d69c25035fc6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fb290f5a70b1efc1dff12f40a0b2d7b94019f66da42e78010c0b8e61f222c4f267b67e356a9e9c346eb801e5515e36243888f280c5cb95c2dd69016a30cadeb9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/javax.inject/javax.inject@1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://code.google.com/p/atinject/"
        },
        {
          "type" : "vcs",
          "url" : "http://code.google.com/p/atinject/source/checkout"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/fr.inria.gforge.spoon/spoon-javadoc@11.3.1-beta-5?type=jar",
      "publisher" : "Inria",
      "group" : "fr.inria.gforge.spoon",
      "name" : "spoon-javadoc",
      "version" : "11.3.1-beta-5",
      "description" : "A javadoc parser for the java source code analysis tool spoon.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9cb5328ad5afa6f67daea7793e79645c"
        },
        {
          "alg" : "SHA-1",
          "content" : "44e3e9e8cf989215c2e43d0930a512542e50e8b2"
        },
        {
          "alg" : "SHA-256",
          "content" : "1fca285b3d7238006faaccadc9da055fb0cb568d4bc852dde20dcb5ca6b3f25e"
        },
        {
          "alg" : "SHA-512",
          "content" : "5c6d046f504fadf1453e245efeff80a3dd4df66b7f329e3c69453406e17dcb96b4a896a763747222d9d5a96d597e713a3cac07e302abd2c66efd7342806845d9"
        },
        {
          "alg" : "SHA-384",
          "content" : "3ad124e621bae9ae572048028a1521c346ee33bcea390297dcd75945c72be1dc9182385a0582fca4df6e0816fb8f0fed"
        },
        {
          "alg" : "SHA3-384",
          "content" : "78a08b6628ea6f7550893de184bf17169f1fab4e287fb6ea5e2b8f6f5380de298ce87e5d7c8fbe229b18d605ddf54704"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8dc75ee954c173391f22d3bd520bad00b9b2ffc385382eded5c960d3d181f952"
        },
        {
          "alg" : "SHA3-512",
          "content" : "10e02d5f8b55552a70bb01e41ccf73d74d5034db2d53f6f5ff4e0a27afe734e5061387564fe9a678257724a7f5826bd17e34c0b45e72564d888d79ec6232afa0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CECILL-C",
            "url" : "http://www.cecill.info/licences/Licence_CeCILL-C_V1-en.html"
          }
        },
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/fr.inria.gforge.spoon/spoon-javadoc@11.3.1-beta-5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://spoon.gforge.inria.fr/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/INRIA/spoon/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/INRIA/spoon/tree/v11.3.1-beta-5/spoon-javadoc"
        }
      ]
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/fr.inria.gforge.spoon/spoon-core@11.3.1-beta-5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jdt/org.eclipse.jdt.core@3.44.0?type=jar",
        "pkg:maven/com.martiansoftware/jsap@2.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
        "pkg:maven/commons-io/commons-io@2.21.0?type=jar",
        "pkg:maven/org.apache.maven/maven-model@3.6.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.0?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.apache.maven.shared/maven-invoker@3.3.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jdt/org.eclipse.jdt.core@3.44.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jdt/ecj@3.44.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jdt/ecj@3.44.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.martiansoftware/jsap@2.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-io/commons-io@2.21.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-model@3.6.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@3.1.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-utils@3.1.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.0?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-codec/commons-codec@1.19.0?type=jar",
        "pkg:maven/commons-io/commons-io@2.21.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-codec/commons-codec@1.19.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.shared/maven-invoker@3.3.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.4.2?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.4.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
        "pkg:maven/commons-io/commons-io@2.21.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/javax.inject/javax.inject@1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/fr.inria.gforge.spoon/spoon-javadoc@11.3.1-beta-5?type=jar",
      "dependsOn" : [
        "pkg:maven/fr.inria.gforge.spoon/spoon-core@11.3.1-beta-5?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/fr.inria.gforge.spoon/spoon-pom@11.3.1-beta-5?type=pom",
      "dependsOn" : [ ]
    }
  ]
}