<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:8c877ea7-dc33-3b90-8b07-8ca1b246221f" version="1" xmlns="http://cyclonedx.org/schema/bom/1.6">
  <metadata>
    <lifecycles>
      <lifecycle>
        <phase>build</phase>
      </lifecycle>
    </lifecycles>
    <tools>
      <components>
        <component type="library">
          <author>OWASP Foundation</author>
          <group>org.cyclonedx</group>
          <name>cyclonedx-maven-plugin</name>
          <version>2.9.1</version>
          <description>CycloneDX Maven plugin</description>
          <hashes>
            <hash alg="MD5">9c7a565cf28cce58557d0c621c5ea4b1</hash>
            <hash alg="SHA-1">be882d5a22050bfa9d19090b1420c188617d0e1c</hash>
            <hash alg="SHA-256">698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249</hash>
            <hash alg="SHA-512">c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0</hash>
            <hash alg="SHA-384">d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb</hash>
            <hash alg="SHA3-384">80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f</hash>
            <hash alg="SHA3-256">142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699</hash>
            <hash alg="SHA3-512">af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b</hash>
          </hashes>
        </component>
      </components>
    </tools>
    <component type="library" bom-ref="pkg:maven/io.dropwizard.metrics/metrics-jersey2@4.2.33?type=bundle">
      <group>io.dropwizard.metrics</group>
      <name>metrics-jersey2</name>
      <version>4.2.33</version>
      <description>A set of class providing Metrics integration for Jersey, the reference JAX-RS
        implementation.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.dropwizard.metrics/metrics-jersey2@4.2.33?type=bundle</purl>
      <externalReferences>
        <reference type="website">
          <url>https://metrics.dropwizard.io/metrics-jersey2</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/dropwizard/metrics/issues/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/dropwizard/metrics/metrics-jersey2/</url>
        </reference>
      </externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
      <property name="cdx:reproducible">enabled</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/io.dropwizard.metrics/metrics-core@4.2.33?type=jar">
      <group>io.dropwizard.metrics</group>
      <name>metrics-core</name>
      <version>4.2.33</version>
      <description>Metrics is a Java library which gives you unparalleled insight into what your code does in
        production. Metrics provides a powerful toolkit of ways to measure the behavior of critical
        components in your production environment.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">07e03dc5ac57b62c6f0343c57764eecb</hash>
        <hash alg="SHA-1">703e6a1d55238024576a3e0d253511bd4d9c02bb</hash>
        <hash alg="SHA-256">7ee5624bc5e671f3cdf8d7e59350c1de2d5b0a0db7278a311b811af7e080269f</hash>
        <hash alg="SHA-512">77830111c706e267dccf0a76ad10cbe833e234452fbb223bc5c0c0a4433480897b3b537c1b3a314bb121bf0f8839b26c1ffa15e1fe1497717f03a1ca7c46ca5d</hash>
        <hash alg="SHA-384">5f3cea5897854225ba3c7a51bd8f6accf6960927d61b696d3466d28d2e64e2f30682ed8da0cb39f50d0a7994663f5a4f</hash>
        <hash alg="SHA3-384">e2d1f6c61e04c501775aa15ed643eaa615df68cc9e5ab08c9ab790ee3d782c2c72423e863b6d27582004e5210c69659b</hash>
        <hash alg="SHA3-256">069331e590719cd76bc1047f206adb2d151cfb18ca98f91c694b18f34f047bb5</hash>
        <hash alg="SHA3-512">ce4314d7a4a8e3ad5dd3541ca02ee164651162c875e19579271377452caa7ce66e7f284b964a759093bd5545a80f0b80a2ed31474b57a1117f1d86bdfa02307c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.dropwizard.metrics/metrics-core@4.2.33?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://metrics.dropwizard.io/metrics-core</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/dropwizard/metrics/issues/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/dropwizard/metrics/metrics-core/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>1.7.36</version>
      <description>The slf4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">872da51f5de7f3923da4de871d57fd85</hash>
        <hash alg="SHA-1">6c62681a2f655b49963a5983b8b0950a6120ae14</hash>
        <hash alg="SHA-256">d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0</hash>
        <hash alg="SHA-512">f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b</hash>
        <hash alg="SHA-384">2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a</hash>
        <hash alg="SHA3-384">3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b</hash>
        <hash alg="SHA3-256">ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881</hash>
        <hash alg="SHA3-512">14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/license/mit/</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.slf4j.org</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/qos-ch/slf4j/slf4j-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.dropwizard.metrics/metrics-annotation@4.2.33?type=jar">
      <group>io.dropwizard.metrics</group>
      <name>metrics-annotation</name>
      <version>4.2.33</version>
      <description>A dependency-less package of just the annotations used by other Metrics modules.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">30411ecc4412100b4d7eb4e1bde2f3ef</hash>
        <hash alg="SHA-1">369ea30468f0ce00c4db45f1befce37f17a43f83</hash>
        <hash alg="SHA-256">6ea8d61941c08e0eec082bba62aa11db159c2577b51df112b49f1cc465ac9a1d</hash>
        <hash alg="SHA-512">9c1dc3145c34bec528f07dba60f102dffda5c17f31976217368052a1704da4aef39c6592f096ea56dc21a2e0b6993f9bf7502779c9a601b78f7ca6087eb4bb0f</hash>
        <hash alg="SHA-384">a05294a3ccf6c787cacbefaf1eed53618349870d58e4430acfbdd2cbdb5d68910b81fd1d1c47d597577e3897ead44097</hash>
        <hash alg="SHA3-384">6a6d66a5e5adb00f0fa6a3ba19738188ddb8743585695297cc8daa65b845621015e73b532f215e18226bcb25b6d52770</hash>
        <hash alg="SHA3-256">e7c7369993644fb1979880cd62510edfa001973414365aaa595106ef14650950</hash>
        <hash alg="SHA3-512">91088e05816d9df4a5aa4dcca960cc79677f1fd693b39129d058d7e42fe644cad76e4d1bb268c8101d0160a7b545714b8d03d219511c7f1c0a0d3ebff934d4f8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.dropwizard.metrics/metrics-annotation@4.2.33?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://metrics.dropwizard.io/metrics-annotation</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/dropwizard/metrics/issues/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/dropwizard/metrics/metrics-annotation/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.ws.rs</group>
      <name>jakarta.ws.rs-api</name>
      <version>2.1.6</version>
      <description>Jakarta RESTful Web Services API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c3892382aeb5c54085b22b1890511d29</hash>
        <hash alg="SHA-1">1dcb770bce80a490dff49729b99c7a60e9ecb122</hash>
        <hash alg="SHA-256">4cea299c846c8a6e6470cbfc2f7c391bc29b9caa2f9264ac1064ba91691f4adf</hash>
        <hash alg="SHA-512">c1e2655269b9a32f9c0aec9edf12bf6d8b397d8cbcf60e28dd21ab13ecc2738800ebe5c2d49ed3c50d4dac6617671f0fae873daf8ec116a16ef7f7f0a3bef7fa</hash>
        <hash alg="SHA-384">3fd05e2b167d927216d3b2fc9d1c5a70aa3911d075c2159f958ce755c6a41d93bd76f0ce79ccd22e5a60182aa91fdb07</hash>
        <hash alg="SHA3-384">3a110ff82d6a0dba4adf024a6425e68689416dd8f0e841f2bade574dfaebcbcfede410116530714b68ef9d32a318c286</hash>
        <hash alg="SHA3-256">794fe21a9e2634744c65b299a232756391316c0b71e440973575bcde78907c17</hash>
        <hash alg="SHA3-512">fe482041b54c5f7a40d670af73c0c0c0a562bf74f4bfd684f8aef56decfbc5230901768814f7d0b0ec600828fea39bb8621cd121f616778278a03f67fd497310</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-ee4j/jaxrs-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repo.eclipse.org/content/repositories/jax-rs-api-releases/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaxrs-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>jaxrs-dev@eclipse.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jaxrs-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.jersey.core/jersey-server@2.47?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.jersey.core</group>
      <name>jersey-server</name>
      <version>2.47</version>
      <description>Jersey core server implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">65b98d57563075271f5522fa4d2dd642</hash>
        <hash alg="SHA-1">788d996716be723de4a6b4178b3d25aa3eadeae8</hash>
        <hash alg="SHA-256">02199142e407616163ec4730842b36f8f2cd7112296719269ce173d6838894aa</hash>
        <hash alg="SHA-512">6230ee70d4fc32c6cbd362b40fbc854ac8fb974e739c819d3e5b54e469f1c55e3f7bf9f6d9698b63f00f5a599bedb66e8350eb92decced3c5a479119708d0277</hash>
        <hash alg="SHA-384">e64e86c66b21cc472a8ae7aeb93a09016814f0228c6a02f96c65c72411a9862e4b99580b77d27bd37df2c74486b5c4cb</hash>
        <hash alg="SHA3-384">62cb3237ef06d03ebb8546295360ac37ab673c27fc2e5b41038b6ad4fb8463b48a19828a5b33702d199e2195a2d2b395</hash>
        <hash alg="SHA3-256">603c57217587714260953c2807a5ffb0a44de60bc412bc449c7ad48b20aa3416</hash>
        <hash alg="SHA3-512">f59d2226feb51005f114fc59f8d3377a5ba252f77aab8cd44473cbb00cd3cc7105e3d55dc5f1299cc2f36833f1d361bcf6f70735853dd2b00a11cc2fed34b592</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <name>The GNU General Public License (GPL), Version 2, With Classpath Exception</name>
          <url>https://www.gnu.org/software/classpath/license.html</url>
        </license>
        <license>
          <name>Apache License, 2.0</name>
          <url>http://www.apache.org/licenses/LICENSE-2.0.html</url>
        </license>
        <license>
          <name>Modified BSD</name>
          <url>https://asm.ow2.io/license.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.jersey.core/jersey-server@2.47?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://projects.eclipse.org/projects/ee4j.jersey/jersey-server</url>
        </reference>
        <reference type="build-system">
          <url>http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jersey/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jersey/jersey-server</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.jersey.core/jersey-common@2.47?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.jersey.core</group>
      <name>jersey-common</name>
      <version>2.47</version>
      <description>Jersey core common packages</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">484436ca30f12ad475dcfcb047c1794e</hash>
        <hash alg="SHA-1">47204b141613d84bd9ca01f479f2a850f5157711</hash>
        <hash alg="SHA-256">eea8da0d057bd15b7a1d198f4ac2a2b966368e63bd1c0d566527c02619be54de</hash>
        <hash alg="SHA-512">60d46e73fadd2d52c0ae317fdf632a09f6c76c3dcc1666830518436b2acf8dfde41a4205957d1c47ea62e5c2c66370a08995f121fc7d7cdd11898355b208e449</hash>
        <hash alg="SHA-384">179de7271c9412d6d56dd0081f78daf0480a71d07d352e1df2a7cc7ba62d8d80c8a715f1e60db8a95c456952454c2242</hash>
        <hash alg="SHA3-384">8504a05e8d2618d72e76b33427c414d7769dd40f9cb5e45e589f9b455be2033339b77fdc66c1f076a248ed575ee5d996</hash>
        <hash alg="SHA3-256">548fa2492367b4a52d8000dfbae44071ac798482e1d1317aaa272253d3e2e069</hash>
        <hash alg="SHA3-512">5410bfe70d994cee8a9222f7240210c88520ad226cc4f427264a11b53bdb597e87e558598bb0a4116c46de636d5e5d82e9add9d6da0428a98da32152401d7fde</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <name>The GNU General Public License (GPL), Version 2, With Classpath Exception</name>
          <url>https://www.gnu.org/software/classpath/license.html</url>
        </license>
        <license>
          <name>Apache License, 2.0</name>
          <url>http://www.apache.org/licenses/LICENSE-2.0.html</url>
        </license>
        <license>
          <name>Public Domain</name>
          <url>https://creativecommons.org/publicdomain/zero/1.0/</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.jersey.core/jersey-common@2.47?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://projects.eclipse.org/projects/ee4j.jersey/jersey-common</url>
        </reference>
        <reference type="build-system">
          <url>http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jersey/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jersey/jersey-common</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.hk2/osgi-resource-locator@1.0.3?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.hk2</group>
      <name>osgi-resource-locator</name>
      <version>1.0.3</version>
      <description>Used by various API providers that rely on META-INF/services mechanism to locate providers.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e7e82b82118c5387ae45f7bf3892909b</hash>
        <hash alg="SHA-1">de3b21279df7e755e38275137539be5e2c80dd58</hash>
        <hash alg="SHA-256">aab5d7849f7cfcda2cc7c541ba1bd365151d42276f151c825387245dfde3dd74</hash>
        <hash alg="SHA-512">4d84983a9b1c72f58661b576c78ca456a2106602c2ad211cd7e72d94464c8774173b34a35629c507c7c84c982f1de0c9bf48352458e8480be5f874d20d6e69a3</hash>
        <hash alg="SHA-384">9f92002296c66cc8996d459b95a9c531ec71b98a8b819121abbc7d636a6c4ace04c88878ba6917f71650280a880d1ce2</hash>
        <hash alg="SHA3-384">b27581d003ce715fba7e2958dbe73b64330b8586d94dd2f4b80b3d4861fd36415af6c2fe1005a798a7bd4f706d77e3d1</hash>
        <hash alg="SHA3-256">cf90e96adac2f1167ff71267db4a91c75d824f8a4b0359d2ab7d50b1c87c3952</hash>
        <hash alg="SHA3-512">75f9ff6c3ab03f4471ac04789c181b75edf4c5dbf985a5616b2c979de59aa478b02593036f740a6c7bb71afcb145c131a3ff3e5a6a53336abab22f2cc9825772</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.hk2/osgi-resource-locator@1.0.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://projects.eclipse.org/projects/ee4j/osgi-resource-locator</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/ee4j/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/glassfish-hk2-extra</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.annotation</group>
      <name>jakarta.annotation-api</name>
      <version>1.3.5</version>
      <description>Jakarta Annotations API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8b165cf58df5f8c2a222f637c0a07c97</hash>
        <hash alg="SHA-1">59eb84ee0d616332ff44aba065f3888cf002cd2d</hash>
        <hash alg="SHA-256">85fb03fc054cdf4efca8efd9b6712bbb418e1ab98241c4539c8585bbc23e1b8a</hash>
        <hash alg="SHA-512">d1acff146c0f9ea923a9325ad4c22ba2052ec474341ab8392abab7e8abd3ca010db2400ff9b5849fc4f1fa5c0a18830eb104da07a13bd26b4f0a43d167935878</hash>
        <hash alg="SHA-384">004a4bde333c0575f72df1cb9cf95ee0c6c7f738a6f0f723a5ec545aaa1664abeb82f01627708a1377e3136754fb7859</hash>
        <hash alg="SHA3-384">abcc5b1fbad59b3e9b6d2d6195ec11d6254f689116c534a964724b61f815cca60ba3a2c1489933403f3f78dc54fd20a6</hash>
        <hash alg="SHA3-256">3d3ef16365e7a0357d82f874fa26b2b0a146cf7bf98a351c65ef1586444fa009</hash>
        <hash alg="SHA3-512">88625a8811be514851209291344df32478b527bc7838ddee58752269bf2457ae8f4e6b6a0d0b5c18522e287ba6df1def0cb19dee2b85e01ee21f0b48ac2630d3</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://projects.eclipse.org/projects/ee4j.ca</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/common-annotations-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/ca-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/common-annotations-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar">
      <publisher>Oracle Corporation</publisher>
      <group>org.glassfish.hk2.external</group>
      <name>jakarta.inject</name>
      <version>2.6.1</version>
      <description>Injection API (JSR 330) version ${javax.inject.version} repackaged as OSGi bundle</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4d7c80a1e3cd54531af03bef4537f7af</hash>
        <hash alg="SHA-1">8096ebf722902e75fbd4f532a751e514f02e1eb7</hash>
        <hash alg="SHA-256">5e88c123b3e41bca788b2683118867d9b6dec714247ea91c588aed46a36ee24f</hash>
        <hash alg="SHA-512">7fc8196ad9ee03a831dfff85c945e416c3906071a7aa8ebf6ab8b7008dfec0adccc1f1dca53ed6768ac5676cd4b3c43471674f97ff73e1f61f5a427aaed68e05</hash>
        <hash alg="SHA-384">6b3ea9eeec5cbbc1fb3e6c89160af67b82ffbd68948dd4790e3fe3ce2fc495c063698a7d6a1998d5db51abafe3915e19</hash>
        <hash alg="SHA3-384">b551e00861151233789c03cec07e162d90d1f377fb8f26d413f7015152188183d636e2837ceca131096c43511e618efa</hash>
        <hash alg="SHA3-256">67f3b5a4b3006d07a33ccdbbb70f312c94d2d8cdd32598d471b079470574ab6d</hash>
        <hash alg="SHA3-512">a0b6c00df7f5b53f549193a7e6a26d632847957ad296aef2ee75a23a5ebdec970f793511641e6c63677b481c47ca67f4039a5ee5f4bb532a46093a201782198d</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-ee4j/glassfish-hk2/external/jakarta.inject</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/glassfish-hk2/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/glassfish-hk2/external/jakarta.inject</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.validation</group>
      <name>jakarta.validation-api</name>
      <version>2.0.2</version>
      <description>Jakarta Bean Validation API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">77501d529c1928c9bac2500cc9f93fb0</hash>
        <hash alg="SHA-1">5eacc6522521f7eacb081f95cee1e231648461e7</hash>
        <hash alg="SHA-256">b42d42428f3d922c892a909fa043287d577c0c5b165ad9b7d568cebf87fc9ea4</hash>
        <hash alg="SHA-512">3ca8556b80ca809b3a43fac31469702bbad62a00e63b11a304dad1e372d9f6c128357463a4c70c423055941c7e2e417f87a9474a204d189c8e4b62f42047c8eb</hash>
        <hash alg="SHA-384">6ae3963fd6a5e83b068a8344b88f6bfbd26d29cee64193025bc5e98195678e49826463da27a7a1c15cd83b2149d57a94</hash>
        <hash alg="SHA3-384">55a570386718064b422f9ebc0c0c07f0b37259e44a14c9a16c20e945402339b1d01b7d6969ef40d6b5baf5bce3e1161d</hash>
        <hash alg="SHA3-256">1ff48fdabab86a398b25e491e6ba4fd9b62d597314202628a3cfedf723c17f21</hash>
        <hash alg="SHA3-512">c23bb0b43fb0c39d4c9d2cce0cd38334fa7c253130f0bda3007d9f7d2dd451c0896ff4265ee2cc35024fad282f9ccaa398c19874775d9cabbb786843fae155d7</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://beanvalidation.org</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://hibernate.atlassian.net/projects/BVAL/</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/beanvalidation-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.jersey.core/jersey-client@2.47?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.jersey.core</group>
      <name>jersey-client</name>
      <version>2.47</version>
      <description>Jersey core client implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">31db34a0401cb185421c4414c83ea7f6</hash>
        <hash alg="SHA-1">0d215bf45093a0d834de7da6d5cbcacbe4214c69</hash>
        <hash alg="SHA-256">52764b5eb0eec1dcacf1a710e966f84f2e425ba09da07bc4628bc1071b6f81db</hash>
        <hash alg="SHA-512">093ecef4f707556e61021406c842d39c3f1109f3956cd641435656764aaae40f3d0f7eb0a02a31f841e9b68560bbdb34093370215b2a16ed45749f469b528147</hash>
        <hash alg="SHA-384">ab27f15bb7eea6f9d20178b4e69d87282d18a25c8bffe22e26de3aafe894b22c03855eb545e4902b99c84f3daee7b274</hash>
        <hash alg="SHA3-384">75be65049e1bf83eeb4980eb466add6533840fe42a596692edf041711ff0de4bfd78a1343a9a91cb8a7091a105d9e2fb</hash>
        <hash alg="SHA3-256">343c5a8ca268880215c762f421c1bfe1d6db58da2e80892c92ae9feef3e07291</hash>
        <hash alg="SHA3-512">b3eb58dadc3237636d24d6c3404adf3e9e64134813f7b0b006e75540a4be22c8ccae580350ca47fc59df8e360b81ced877bcb7e967d82b0a5912a2214eec2833</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
        <license>
          <id>BSD-3-Clause</id>
        </license>
        <license>
          <id>BSD-2-Clause</id>
        </license>
        <license>
          <name>Apache License, 2.0</name>
          <url>http://www.apache.org/licenses/LICENSE-2.0.html</url>
        </license>
        <license>
          <name>Public Domain</name>
          <url>https://creativecommons.org/publicdomain/zero/1.0/</url>
        </license>
        <license>
          <name>Modified BSD</name>
          <url>https://asm.ow2.io/license.html</url>
        </license>
        <license>
          <name>jQuery license</name>
          <url>jquery.org/license</url>
        </license>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/license/mit/</url>
        </license>
        <license>
          <name>W3C license</name>
          <url>https://www.w3.org/Consortium/Legal/copyright-documents-19990405</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.jersey.core/jersey-client@2.47?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://projects.eclipse.org/projects/ee4j.jersey/jersey-client</url>
        </reference>
        <reference type="build-system">
          <url>http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jersey/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jersey/jersey-client</url>
        </reference>
      </externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-jersey2@4.2.33?type=bundle">
      <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@4.2.33?type=jar"/>
      <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-annotation@4.2.33?type=jar"/>
      <dependency ref="pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.jersey.core/jersey-server@2.47?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@4.2.33?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-annotation@4.2.33?type=jar"/>
    <dependency ref="pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar"/>
    <dependency ref="pkg:maven/org.glassfish.jersey.core/jersey-server@2.47?type=jar">
      <dependency ref="pkg:maven/org.glassfish.jersey.core/jersey-common@2.47?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.jersey.core/jersey-client@2.47?type=jar"/>
      <dependency ref="pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar"/>
      <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar"/>
      <dependency ref="pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.glassfish.jersey.core/jersey-common@2.47?type=jar">
      <dependency ref="pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar"/>
      <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.hk2/osgi-resource-locator@1.0.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar"/>
    <dependency ref="pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar"/>
    <dependency ref="pkg:maven/org.glassfish.hk2/osgi-resource-locator@1.0.3?type=jar"/>
    <dependency ref="pkg:maven/org.glassfish.jersey.core/jersey-client@2.47?type=jar">
      <dependency ref="pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.jersey.core/jersey-common@2.47?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2?type=jar"/>
  </dependencies>
</bom>
