{
  "bomFormat": "CycloneDX",
  "specVersion": "1.4",
  "serialNumber": "urn:uuid:d3e73690-05c1-4d82-add1-257f87399605",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "vendor": "OWASP Foundation",
        "name": "CycloneDX Maven plugin",
        "version": "2.9.1",
        "hashes": [
          {
            "alg": "MD5",
            "content": "9c7a565cf28cce58557d0c621c5ea4b1"
          },
          {
            "alg": "SHA-1",
            "content": "be882d5a22050bfa9d19090b1420c188617d0e1c"
          },
          {
            "alg": "SHA-256",
            "content": "698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249"
          },
          {
            "alg": "SHA-512",
            "content": "c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0"
          },
          {
            "alg": "SHA-384",
            "content": "d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb"
          },
          {
            "alg": "SHA3-384",
            "content": "80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f"
          },
          {
            "alg": "SHA3-256",
            "content": "142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699"
          },
          {
            "alg": "SHA3-512",
            "content": "af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b"
          }
        ]
      }
    ],
    "component": {
      "type": "application",
      "bom-ref": "pkg:maven/org.dependencytrack/apiserver@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "apiserver",
      "version": "5.7.0-alpha.9-SNAPSHOT",
      "description": "The Dependency-Track API Server",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/apiserver@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/apiserver/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver.git/apiserver",
          "type": "vcs"
        }
      ]
    }
  },
  "components": [
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/api@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "api",
      "version": "5.7.0-alpha.9-SNAPSHOT",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2a7a835bf424c5238cfb0dd655bb0763"
        },
        {
          "alg": "SHA-1",
          "content": "10c350477eb8488b662f916d410bd00ace9550f3"
        },
        {
          "alg": "SHA-256",
          "content": "8e7e380b529380274c2a787f1cc808ffa11f2d5cce81a54fb9e7ad4f7b475399"
        },
        {
          "alg": "SHA-512",
          "content": "0e5be9590d3a8f193e29f926fa6200bc3c285a947e4af6cea2a3f1b6301677818b2e62eedef388862ac458421baf71ae41441d758c0a21824b7c829a2ee59a8b"
        },
        {
          "alg": "SHA-384",
          "content": "3d514cc41eef7af6de559ee0a443b997c886c7ce2d609f0ab8d3c20f88c7a68552c07b015c3ca74fb30decd20cbe14c4"
        },
        {
          "alg": "SHA3-384",
          "content": "3ada12ce761e24dfc39d58af5246a49b2352d4995692d6b8d6303c7ac16ec545269b73f906911e1b808c72a7608bf6c9"
        },
        {
          "alg": "SHA3-256",
          "content": "959f8aa0af486cc48146ef9038d99ef59514daae22c125b9d53772de1867c2c5"
        },
        {
          "alg": "SHA3-512",
          "content": "96c592605ed81d306cfa19db028bc559f47e059930eef967192c757f197cf11aff57047bf14a4ac1bbd6a24cdb4b36580d05d0da7f6b1816b0d7c8ae539441ea"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/api@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/api/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver.git/api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/cache-api@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "cache-api",
      "version": "5.7.0-alpha.9-SNAPSHOT",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "388ecf4e9cd2bf7983afd0960d67e6e5"
        },
        {
          "alg": "SHA-1",
          "content": "fa7b2ba27c14467fb6fd80526f2ff2f5a1c240bc"
        },
        {
          "alg": "SHA-256",
          "content": "abda6fb3bc003d6efc0e2feb4afe054870241481cbb25becc7466c696fa34f44"
        },
        {
          "alg": "SHA-512",
          "content": "07308eb9c3bcfe6376772af7284a6ca70ecb56ae12d717be879111357fe4ec032cf752909a832f231a5cd88a6b9579f9eb1f7fe46e3e267f499889fefd365ead"
        },
        {
          "alg": "SHA-384",
          "content": "d3163ddda23340bf458f40fa172b8a3aa0e6108c6ac83df40a529d5ca3a1f4ea4e1127c456812ca40ce69326f8b33669"
        },
        {
          "alg": "SHA3-384",
          "content": "200cc90f578c3d91ce7b95f037fecf40062c2bf993f3e499d3c61264c816cf9b0b2da27dbce8e334489d43d2cf0c4bd3"
        },
        {
          "alg": "SHA3-256",
          "content": "b7bc350944e9429990340b55c5c2e6cde3188248278fff0eece23a2637d03345"
        },
        {
          "alg": "SHA3-512",
          "content": "ebd3ee7c0f55b2ec96c67473750869aa02e66ea0bdfbdd2867c6cbcfa329683b5ec31bb370d9c1d7b713aa68aa198278d82549be6baf91a70a2ace27a7d9ba16"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/cache-api@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/cache-parent/cache-api/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver.git/cache-parent/cache-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
      "group": "org.jspecify",
      "name": "jspecify",
      "version": "1.0.0",
      "description": "An artifact of well-named and well-specified annotations to power static analysis checks",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9133aba420d0ca3b001dbb6ae9992cf6"
        },
        {
          "alg": "SHA-1",
          "content": "7425a601c1c7ec76645a78d22b8c6a627edee507"
        },
        {
          "alg": "SHA-256",
          "content": "1fad6e6be7557781e4d33729d49ae1cdc8fdda6fe477bb0cc68ce351eafdfbab"
        },
        {
          "alg": "SHA-512",
          "content": "efded31ef5b342f09422935076e599789076431e93a746685c0607e7de5592719ba6aacde0be670b3f064d1e85630d58d5bce6b34aed2a288fdb34f745efb7bc"
        },
        {
          "alg": "SHA-384",
          "content": "814f860e5a44ead6c457676841eef471a8b87be31b84c60a8a4477a18a9cbcb6e3c2ae700969d5c5e52309d961e0537a"
        },
        {
          "alg": "SHA3-384",
          "content": "c8844e5b71e5ecfbb7366097ce34af2f5863d86d5ccc3f9ec384d8ade4b60ccc8124c7fc88664f1afd2b0962fc8775bf"
        },
        {
          "alg": "SHA3-256",
          "content": "4b4f08ad7606a3ac62997779484919a302267b26d26ee19125f8a7eea60e8a71"
        },
        {
          "alg": "SHA3-512",
          "content": "65c6845ebae981cb81b61107707ced39f5b377dae970b47606ef482aaf10e3729def0da40d9377c43abbfb483a5ceae039b0d51c129c50a6d36ad351a5d6b01e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
      "externalReferences": [
        {
          "url": "http://jspecify.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/jspecify/jspecify/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@3.1.1?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.eclipse.microprofile.config",
      "name": "microprofile-config-api",
      "version": "3.1.1",
      "description": "MicroProfile Config :: API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "22af9d6a9821440e2f3c5d8831816cea"
        },
        {
          "alg": "SHA-1",
          "content": "448885d7505256a6b21c578f5867c6a6f5706c32"
        },
        {
          "alg": "SHA-256",
          "content": "0d4eaa7e17730e153b1e0613104a989af7d7a0d4ba4d19c84c71862bff993773"
        },
        {
          "alg": "SHA-512",
          "content": "a3c70968b9723cfc13bcfa602fd7e56afdb2da684f865c546488cb79b050c9c3fdbe18138de561b6fcb308e3b8762cd8fe2bc53f3b22c29b0ee7faa8715bd0b6"
        },
        {
          "alg": "SHA-384",
          "content": "082cf193b5f1d2a9a477348bb94e43cf9c54f900791820240ae5496aacce205039866e95b7650eee38755f69dd823979"
        },
        {
          "alg": "SHA3-384",
          "content": "555999b1fc72bcf324b818e0ab1c83b982541de4dfbd313552069ced8367111de1c8665615d3a701a5d0478fa5442de2"
        },
        {
          "alg": "SHA3-256",
          "content": "2a1cbb68a81065b657699fc4ff7caedc30d3b55a3c0901057bb9084f24eff2db"
        },
        {
          "alg": "SHA3-512",
          "content": "c5f590d1c46457e8288a45b18494f5d7601a8de88755811b630b0ed5088c5ff06b1ea87318a2c1184218ec8c4391dc5288b825f1a949c1b1003c739c390694a9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@3.1.1?type=jar",
      "externalReferences": [
        {
          "url": "https://microprofile.io/project/eclipse/microprofile-config/microprofile-config-api",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.org/publish/publish-maven/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse/microprofile-config/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse/microprofile-config/microprofile-config-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/cache-provider-database@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "cache-provider-database",
      "version": "5.7.0-alpha.9-SNAPSHOT",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a8425631a4e424cdbba26d7b93dc49b1"
        },
        {
          "alg": "SHA-1",
          "content": "248a3fe60d8c384117922026e0989554d04fba5b"
        },
        {
          "alg": "SHA-256",
          "content": "66e316da89781fff990aec0664a74cc42e1d284b9398b215baea63046a4c82b0"
        },
        {
          "alg": "SHA-512",
          "content": "0e403324276fd45cbcbef002b3bb6f66ff8dcb7959e2aaf2f49d09247a5605edba78c7bdb9dfc82c51b2670ebca45279f37f7421ea1775a7b7628e5a667468c5"
        },
        {
          "alg": "SHA-384",
          "content": "1ca3bb19415f077dbfcdec6ada2425fab3178e6f32459ef3a6056814d7398885208128b9763f91062dbed5e1ca9b0fbe"
        },
        {
          "alg": "SHA3-384",
          "content": "5454b707babd481860bce0cecec4a5a8dec762499ae12af3686067f84c55631e624d9a5d046f355bc998b5074072eb0e"
        },
        {
          "alg": "SHA3-256",
          "content": "ae9d2288b8520ecae35773d0c0bb6ed10acdc8cce88ddf011d92c1e43fa65787"
        },
        {
          "alg": "SHA3-512",
          "content": "32e26d4ecdb8fef5c25e3126e3ba2882198f75e42749a10b53f3a2c08c42b05f343abf50d33374efbe503d7e6e13bec21fe74f300dd1383665240d9a755d67ba"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/cache-provider-database@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/cache-parent/cache-provider-database/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver.git/cache-parent/cache-provider-database",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/common-datasource@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "common-datasource",
      "version": "5.7.0-alpha.9-SNAPSHOT",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "88156a7c32cb5af098ae6edd2ecfe101"
        },
        {
          "alg": "SHA-1",
          "content": "8ac13f8c64acc944d400608e80a2dee090b98c1d"
        },
        {
          "alg": "SHA-256",
          "content": "921bf81da1b0cb423b3402483e0f9b250821083c1d5fbb193764991e04403bd2"
        },
        {
          "alg": "SHA-512",
          "content": "632eadfa90e998480369893909dd4f77fe692418c212a1e5427e3e0c444fc954b80b1b6f32e133662295c00efea0e25c8d74e5b361f937094b44b95deeb932ac"
        },
        {
          "alg": "SHA-384",
          "content": "90c6e093984054e951bcd538bf99820dfd8d417ed7a1d266e103517d66826314e9293ea866ae5fbbfffa766e6aa3823f"
        },
        {
          "alg": "SHA3-384",
          "content": "0018b9b2b7cfbf30e8e73fd11b0c26f945db6e61d1b66e73b591b79d20ae845b816615ea2c74edc233b2d4b3b89232a0"
        },
        {
          "alg": "SHA3-256",
          "content": "f62d7634c58993eff9ce2da6980f33524362cca5f99bef9f72b326e47fc9917e"
        },
        {
          "alg": "SHA3-512",
          "content": "838e1f996efb71b861c471f8d39fcb68c05cdc87bac78f57210468a0014cc5ee1de3e4e4748bd28bf19628dd93ae4683b823c5913e4725e8ecb536b4668c2aa2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/common-datasource@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/common-parent/common-datasource/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver.git/common-parent/common-datasource",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/common-health@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "common-health",
      "version": "5.7.0-alpha.9-SNAPSHOT",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5498f3ec5bb00c22d06eb9b64042a9b5"
        },
        {
          "alg": "SHA-1",
          "content": "6c8be932fbcfe74cd2739045100784b8ce2a055f"
        },
        {
          "alg": "SHA-256",
          "content": "802555e859af38095af8af33dedd29909cbb2113a3cd856f4f33079119aad032"
        },
        {
          "alg": "SHA-512",
          "content": "fb4d19f0b93e877dfcca56b29c7f9be7e1d4a8069794f15ab8d60324da4191efaa8976623d0944fe054f4f67e4b612de215e990c44ea4ea85290479181066a5f"
        },
        {
          "alg": "SHA-384",
          "content": "80fed6a8fdf2e6a54649c6f91746e476ac3be4f6cc36b10a0683a65b8240a7436cfd4c4f0737db2d0babfb21182eda9b"
        },
        {
          "alg": "SHA3-384",
          "content": "abbcba89e9d483380c7789be919fd64e0f580a037c8ade9d09a5e4d56dc7bda27e8b930fe71a2034da52f61ef4a9b126"
        },
        {
          "alg": "SHA3-256",
          "content": "d113dd3fa4da8cc0ee837f5e10204d8396c36320f991460b589e5bcf1d6385b9"
        },
        {
          "alg": "SHA3-512",
          "content": "545d2e8436522cf0c1e4c31267f6206e5906bf9918fc3a16e48040fd56d2f2457ba1fefe63e8df7509b36f1a65cae320e11528beff416254623aedfd0a225254"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/common-health@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/common-parent/common-health/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver.git/common-parent/common-health",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.smallrye.config/smallrye-config-core@3.17.2?type=jar",
      "group": "io.smallrye.config",
      "name": "smallrye-config-core",
      "version": "3.17.2",
      "description": "SmallRye Parent POM",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8dfe0e9e97017ff650e6a56bc77e8185"
        },
        {
          "alg": "SHA-1",
          "content": "5d229922e431122704af3248720b5efc37d37747"
        },
        {
          "alg": "SHA-256",
          "content": "092050099d3144bcc64b33165b3c2b7d25a519808d3c7618a6e1c1debcc0d832"
        },
        {
          "alg": "SHA-512",
          "content": "df4854aedb784e48e079dc3946a8553e0d3a6a6d5114eaf6e515907c1bc5ccbf0d3f8e64016791eb1cf60c7f6a18b01a07778e19eb5088a7cb1a72ce43793b53"
        },
        {
          "alg": "SHA-384",
          "content": "624bed2bba02a7fcd8f41d0e9ff634962ea4039f97753e0445a27f5adadbd3140a7340552258c76cbfb32fe4910b72c9"
        },
        {
          "alg": "SHA3-384",
          "content": "6d51de7f529195daabb370ba8cb7f56e0ec0a8e055c54c8256ae5bcfe1eac6e2a7b28a21fd537ce38a2815109c04b1ae"
        },
        {
          "alg": "SHA3-256",
          "content": "06806e0b49eba5371d38466309d246d1b3bce2121248c1f4222fbcac26f73635"
        },
        {
          "alg": "SHA3-512",
          "content": "38ee6abd59daa1c3427858b6858f434b2eae6301eb101071b3916b5ef7536e7a7510deed31ecbd123aa42f5110d2971a61f95970e248cedf7343434b1a1b0b18"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.smallrye.config/smallrye-config-core@3.17.2?type=jar",
      "externalReferences": [
        {
          "url": "https://smallrye.io",
          "type": "website"
        },
        {
          "url": "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/smallrye/smallrye-config/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/smallrye/smallrye-config/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-annotation@2.17.1?type=jar",
      "group": "io.smallrye.common",
      "name": "smallrye-common-annotation",
      "version": "2.17.1",
      "description": "Common utilities for SmallRye",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "875eb9fb98e95dd0c0c233ae6ee700a8"
        },
        {
          "alg": "SHA-1",
          "content": "7942e2e5e819833c515c89841fa0f75436fa8f56"
        },
        {
          "alg": "SHA-256",
          "content": "72ef4e4072ad87250823207ec197a5d3111b3fa276fa19d12bf5583debba1bdb"
        },
        {
          "alg": "SHA-512",
          "content": "50e4e5f3acf1bc7286460f7f741a32c6154a4e8405d88c5e866c3e7cac27db83321773262b900d04096a1d10c81498d12bc653050b6598a63d6b3aa97fa4cbc7"
        },
        {
          "alg": "SHA-384",
          "content": "94bc939b1080216d3d53e2710ab60085fd62bcdb482e865dadb80cd602040a56d5ced931a912aac3afda736d0fa3dddf"
        },
        {
          "alg": "SHA3-384",
          "content": "4d9c8aff0b4d8a1e27b5535c82117b3c40ba1b7e846685dd811cd04898da3800681cd491f4bbb6aea8cdd2a2ff7da319"
        },
        {
          "alg": "SHA3-256",
          "content": "6d533f30919c005c4755bcef101604ac766ce92a9b278322a9b6aee108e616d0"
        },
        {
          "alg": "SHA3-512",
          "content": "5b619c5ae43a8444b1fe2d81ee3be42c9f49826ad647d7c881ff7810d663d46d2b9dca12507451356496974d91f1f4986a860b5f4b00614c7b9a9974c8434973"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.smallrye.common/smallrye-common-annotation@2.17.1?type=jar",
      "externalReferences": [
        {
          "url": "http://smallrye.io",
          "type": "website"
        },
        {
          "url": "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/smallrye/smallrye-common/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/smallrye/smallrye-common/smallrye-common-annotation/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-expression@2.17.1?type=jar",
      "group": "io.smallrye.common",
      "name": "smallrye-common-expression",
      "version": "2.17.1",
      "description": "Common utilities for SmallRye",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d621994be30bd133132e15ccf7b000a5"
        },
        {
          "alg": "SHA-1",
          "content": "61dd85a3dfae09f1d84f7b8d2cd51d0d3187cd5f"
        },
        {
          "alg": "SHA-256",
          "content": "0f6949d555b2dae374f8e03be9b09a55baaa825c5445f7210cdc837f4546f4e2"
        },
        {
          "alg": "SHA-512",
          "content": "8181f6a146e2d8df72e7f3f81bf701e3fe701a7d78d0807d1a7e97d1951e8984bc93a546ef075627824145bb928e8e3a07dd42d4335f548b22383449e2101b87"
        },
        {
          "alg": "SHA-384",
          "content": "72cb4b0b0026ee41656b9780214a0da0a584e11c1cb009018fd09b36670a612e2983381d93fb549b86c98ce0cc5b1a7e"
        },
        {
          "alg": "SHA3-384",
          "content": "449ce0b2a82d690fdc6929ce28b904083c0ffe8bababa61d62a549d1c467de4eecaa6a5763a560ac4fad4f582b49c84c"
        },
        {
          "alg": "SHA3-256",
          "content": "2f16c2272f9269f180ee45b838407afa5b7b43365dd025518e9fb35f83822673"
        },
        {
          "alg": "SHA3-512",
          "content": "9eb0b8451608e00858eb5f0071fd0c8a1e90db8606527ba30d757b3091202f37702b6153622795ca6e6c2183684103da5cff56ad136f52d54e32b4a2694e0d77"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.smallrye.common/smallrye-common-expression@2.17.1?type=jar",
      "externalReferences": [
        {
          "url": "http://smallrye.io",
          "type": "website"
        },
        {
          "url": "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/smallrye/smallrye-common/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/smallrye/smallrye-common/smallrye-common-expression/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-function@2.17.1?type=jar",
      "group": "io.smallrye.common",
      "name": "smallrye-common-function",
      "version": "2.17.1",
      "description": "Common utilities for SmallRye",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "7b185d69509de5bb659c55935a16e322"
        },
        {
          "alg": "SHA-1",
          "content": "f2f3667b71610bcd31b4731200ecee674b6cd23b"
        },
        {
          "alg": "SHA-256",
          "content": "7f5a0c6011250474514585857e24ef01678627733b6e4f1e1eb10207b87cf1ba"
        },
        {
          "alg": "SHA-512",
          "content": "1ea389fc4658ba21784dee8fc7384ed2598a424f5a35e8bb6d4b26c6d463aaaf86d4f30697fc5aab39be1aadf7653999b9e003b9b8a16c8437f2b44b44ff04f8"
        },
        {
          "alg": "SHA-384",
          "content": "ee6839112e25e280160886e22809f469997cd2767efa7b01296de1e65e832c8055da1f0c3165df213bddffa2e5ce9e85"
        },
        {
          "alg": "SHA3-384",
          "content": "d9d667ffed68b0b261a7f1ebfc3a587bce570361df2c743ad480c8cc2dd0e424cedd2e910c0c8c910d13808a90026219"
        },
        {
          "alg": "SHA3-256",
          "content": "d7b18af3a566d3c466e88d7e1a97a55a3b7fa9ce671d5021def4abbf0db59fcb"
        },
        {
          "alg": "SHA3-512",
          "content": "ae5c16757650cf7f69c4c30b30ef56bc5d8bc6c4c88dc83e04f8821a18c07153affd13f13cdae9cccb5dcdd71e8085f49991fe6007892e03b45cf96c94dcf5e7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.smallrye.common/smallrye-common-function@2.17.1?type=jar",
      "externalReferences": [
        {
          "url": "http://smallrye.io",
          "type": "website"
        },
        {
          "url": "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/smallrye/smallrye-common/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/smallrye/smallrye-common/smallrye-common-function/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-constraint@2.17.1?type=jar",
      "group": "io.smallrye.common",
      "name": "smallrye-common-constraint",
      "version": "2.17.1",
      "description": "Common utilities for SmallRye",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "fc8967e4b3b79bd8eb7d578cfa9c6995"
        },
        {
          "alg": "SHA-1",
          "content": "c4dee9305ffae0adfea1b10fc4264b7423d57153"
        },
        {
          "alg": "SHA-256",
          "content": "b718529ced5882249ffeefa693710fa54178d1c7e7bcd938b4c0e75812fa2461"
        },
        {
          "alg": "SHA-512",
          "content": "f8b6c2d9f3aa963a4f294f9205b69eb70353157533bbf1a0a776c0d9b90678ea0c18e65eb6aa239ee1678e07317b35a174dbecf26bfcd8dda3ec2c364ae1fabf"
        },
        {
          "alg": "SHA-384",
          "content": "b24caca22febb9130e857a34105c1935592ed1f0053e04a6be942d330a01c953451b862d169ab0a7d3090b3ae69fea01"
        },
        {
          "alg": "SHA3-384",
          "content": "5ccc1b5329f1e32376fd87ad09e5d93f7ac69dac2e8775f194b2602efee8e523892360f3f8def3cbd9e857e718057be5"
        },
        {
          "alg": "SHA3-256",
          "content": "293a456739ea0a3d85f1948316e895b5f76c67cc0e94c0a654f585fd62fc0369"
        },
        {
          "alg": "SHA3-512",
          "content": "a63388b9fb34beb3f922a087546d7104dfe68d7231ebd030a90ad30fd28a45218eaed6624cd0b0d547e6ee4c15aa3520807e996ebef70761ee3f6605ec8e30eb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.smallrye.common/smallrye-common-constraint@2.17.1?type=jar",
      "externalReferences": [
        {
          "url": "http://smallrye.io",
          "type": "website"
        },
        {
          "url": "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/smallrye/smallrye-common/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/smallrye/smallrye-common/smallrye-common-constraint/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-classloader@2.17.1?type=jar",
      "group": "io.smallrye.common",
      "name": "smallrye-common-classloader",
      "version": "2.17.1",
      "description": "Common utilities for SmallRye",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2c65ea2786ac0905fbcc2a08e2a4936a"
        },
        {
          "alg": "SHA-1",
          "content": "2a01bb2271a304666fe32e5cfb66288b1248cc30"
        },
        {
          "alg": "SHA-256",
          "content": "76e5fb5cb65ac0711c03575b0f6a0b42f9717b19fdc5df1f0feb159adf8cf04c"
        },
        {
          "alg": "SHA-512",
          "content": "c1e47b7f34c33e06ecef7addbf46ef1a32be41c88020d5242b36c576fe83b8bd535cfd2c4d75b69b3d466a328867d84f732d2f52223189f47baf59905ccb03b8"
        },
        {
          "alg": "SHA-384",
          "content": "0a7074d8e9cd4f157c4f14284ece794aa9784d9e4468519bbf8632f76c05d85e784660fefbe4010f6de8ff8782ec489c"
        },
        {
          "alg": "SHA3-384",
          "content": "cb525639a17bf4c57d77de0f6e3a1e51a6a09d32ca56e59f3e759c9040c2a13533f2d8560b4e7ef428c0e7ee4bbbffdb"
        },
        {
          "alg": "SHA3-256",
          "content": "571e5e2fbfb43df62292c1ef3ff36eb94c69c2a267167f04dca668917e6434ad"
        },
        {
          "alg": "SHA3-512",
          "content": "c5d58d1de617e20dc424b3e3f7c5b67889dc433b16568463871ab9a8c9013c93086f1683cf94acbfb90f5421dfa0050b4180703d3b882f993c441f3659c6edcc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.smallrye.common/smallrye-common-classloader@2.17.1?type=jar",
      "externalReferences": [
        {
          "url": "http://smallrye.io",
          "type": "website"
        },
        {
          "url": "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/smallrye/smallrye-common/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/smallrye/smallrye-common/smallrye-common-classloader/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.ow2.asm/asm@9.9.1?type=jar",
      "publisher": "OW2",
      "group": "org.ow2.asm",
      "name": "asm",
      "version": "9.9.1",
      "description": "ASM, a very small and fast Java bytecode manipulation framework",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1888ad1f49038441bb2d12aa6dffe396"
        },
        {
          "alg": "SHA-1",
          "content": "2ceea6ab43bcae1979b2a6d85fc0ca429877e5ab"
        },
        {
          "alg": "SHA-256",
          "content": "6f3828a215c920059a5efa2fb55c233d6c54ec5cadca99ce1b1bdd10077c7ddd"
        },
        {
          "alg": "SHA-512",
          "content": "bb43eaca8777c7b2b4bce9fc19f9be5742a736a23415e271643c3e14d3d82f565f6de0e29ebac570ce66b3921ece1ebd4de06abeb633ae28c17891de56973807"
        },
        {
          "alg": "SHA-384",
          "content": "9448b1eeafccfe061a7533a633b3cf7445312f916d372a3b6bbae8747267b6d6a9387fd100aec22bc22160007a819fa9"
        },
        {
          "alg": "SHA3-384",
          "content": "b684b8c0bc4d7cb21245b2d9e20e103460686e80b16d2b4ea5452c82948ba74fc2bcb093f4ab1d6b010448da5dc12457"
        },
        {
          "alg": "SHA3-256",
          "content": "f59abda303b133b832ad3d81076241d924dce6304dce5a1a60f8d816797dbbc2"
        },
        {
          "alg": "SHA3-512",
          "content": "d42ab2d7dfb1e11b896a1aad31d945639b5aa85ac9b5c2e33fc2e9174c4333eaa018217b58147930fb8017c7f569a6390c242c0e500f5b70600a2100bd08035b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.ow2.asm/asm@9.9.1?type=jar",
      "externalReferences": [
        {
          "url": "http://asm.ow2.io/",
          "type": "website"
        },
        {
          "url": "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail.ow2.org/wws/arc/asm/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.smallrye.config/smallrye-config-common@3.17.2?type=jar",
      "group": "io.smallrye.config",
      "name": "smallrye-config-common",
      "version": "3.17.2",
      "description": "SmallRye Parent POM",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1e8c87c322bd69861c264a92ac5df535"
        },
        {
          "alg": "SHA-1",
          "content": "70173822b50f8434eb55721be902893bab07569d"
        },
        {
          "alg": "SHA-256",
          "content": "ebbb7b03044580440f63788cb743664749e7169b8eb382b3cfc44a4fb328bb85"
        },
        {
          "alg": "SHA-512",
          "content": "de913a6754e38e35d2f8fddabdd9837f93077fb69d9b8ab27e959d9dc415c6524c14e0cb7e1b99474cd918d3a5db3a84198fb59c3260f60921859454ac8c4d76"
        },
        {
          "alg": "SHA-384",
          "content": "22463a45f96aafab96471b9362029b5c7709de330f3e7b3cdbb7b6e8666f0c24c7412ebb6a693869af30eca069b1a767"
        },
        {
          "alg": "SHA3-384",
          "content": "a9d70c6c8e5aebc235f27189a759a42a5bfba487a62cb8e730f03f65c2401b38b551770869388085fed59b5a31db3911"
        },
        {
          "alg": "SHA3-256",
          "content": "056677973870ce3071d07aacedb98fb7462e9b7b93cd43ec061802754ea3c158"
        },
        {
          "alg": "SHA3-512",
          "content": "a5ca32c28b436d51acfa4931abdd4272661c54484bbc49e8595517b328fefbcc227c9ce0d3969f2af4cd8d95d202d8d68a495f202ae3cab8b4c95294667858b3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.smallrye.config/smallrye-config-common@3.17.2?type=jar",
      "externalReferences": [
        {
          "url": "https://smallrye.io",
          "type": "website"
        },
        {
          "url": "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/smallrye/smallrye-config/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/smallrye/smallrye-config/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.micrometer/micrometer-core@1.16.5?type=jar",
      "group": "io.micrometer",
      "name": "micrometer-core",
      "version": "1.16.5",
      "description": "Core module of Micrometer containing instrumentation API and implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "44ff087270426e6bca299885ea999367"
        },
        {
          "alg": "SHA-1",
          "content": "eed1add84bba09a75ac35733cb0ed6bf5a1d3cb7"
        },
        {
          "alg": "SHA-256",
          "content": "2908222d2eed9411d0d2a7a3725026cd6d8a8f7a3feab7009746009810248164"
        },
        {
          "alg": "SHA-512",
          "content": "a90744eb6d192be5d40999f52ad92cfc59709059d3f2399c88fec584eb9f1dc101c0590f970dd5242b5e818c7e304b9f8d9ec1090a934c5457cdf85409ae5975"
        },
        {
          "alg": "SHA-384",
          "content": "c2ad8beb07285a5694b11a350e362ad68b483b1a7935beaf5b9a0046e346b0045985461925c32e6db467a6b393321b5e"
        },
        {
          "alg": "SHA3-384",
          "content": "c8675bbfaf5ccde4854664eac4db5dd352c6ee8bea166344d071abc264d0f1600da8a57d0722604a72c482e07524bd52"
        },
        {
          "alg": "SHA3-256",
          "content": "f6600f78f4a789cc7b6beae805cc3e4024b7a322bd60f23741f1ecf82a6aca2c"
        },
        {
          "alg": "SHA3-512",
          "content": "fe6201e41677d9e1d4a08b2d8311e1bc8b33fd8f3ea10dfbf38297c3d30807b15da546a2e8fc878dc43cd91b328dae14bb3d52b3630f475bb26204538740b833"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.micrometer/micrometer-core@1.16.5?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/micrometer-metrics/micrometer",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.micrometer/micrometer-commons@1.16.5?type=jar",
      "group": "io.micrometer",
      "name": "micrometer-commons",
      "version": "1.16.5",
      "description": "Module containing common code",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "19fa8edce75d29d550c4ea726506d7e2"
        },
        {
          "alg": "SHA-1",
          "content": "f8c25a4e35d5049d41d8446b111b9891ae407881"
        },
        {
          "alg": "SHA-256",
          "content": "b0cc8c620453ef71e22d6c4ec5c496cc112f964b4e826b9f87182fc97512c8f9"
        },
        {
          "alg": "SHA-512",
          "content": "b0947e1514ef837efccfeb8ed9303d79a93e2959e297046ffa4dd395f5a8788ebf62e2d62bc3c7b2e9da843d80affcc2879e9421d2eeb72591930a5ff4ebc678"
        },
        {
          "alg": "SHA-384",
          "content": "9084f46234725f49bfaa6a7d1ebc964775726551bbf15a0e6a1afccdae213b5d265de8128dec1691795cfa3eccecec38"
        },
        {
          "alg": "SHA3-384",
          "content": "bea73a6c9ec78115e897ccacd52d271e12cba12db5efda8ea40152c603a66a27a136290f4e0d5917ebfc5b9a69754aaf"
        },
        {
          "alg": "SHA3-256",
          "content": "cdccf0e198f5b2e2fd8aae1b967eb42bfe2a3c51c3db717354a07b0974b8fb0c"
        },
        {
          "alg": "SHA3-512",
          "content": "695c2b337a85ba7d48adb21b22cd3b55ca31c6f7224f24495e7be94dfb91fb739c005f2fcc767839f5ab2c86ae5e2ebd909acaf6a996577d797e38f4f1e791a2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.micrometer/micrometer-commons@1.16.5?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/micrometer-metrics/micrometer",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.hdrhistogram/HdrHistogram@2.2.2?type=jar",
      "group": "org.hdrhistogram",
      "name": "HdrHistogram",
      "version": "2.2.2",
      "description": "HdrHistogram supports the recording and analyzing sampled data value counts across a configurable integer value range with configurable value precision within the range. Value precision is expressed as the number of significant digits in the value recording, and provides control over value quantization behavior across the value range and the subsequent value resolution at any given level.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "41f807bf0c681d6f692c408a6e217eaf"
        },
        {
          "alg": "SHA-1",
          "content": "7959933ebcc0f05b2eaa5af0a0c8689fa257b15c"
        },
        {
          "alg": "SHA-256",
          "content": "22d1d4316c4ec13a68b559e98c8256d69071593731da96136640f864fa14fad8"
        },
        {
          "alg": "SHA-512",
          "content": "fb28f1bc3a3d4430474ea87a0833d56dc3d1303c98918122d93c630ebdb0d1323bbf8feb9ffdc7dddd1908105858e6959bdfdd3889ca5803cecde93a974ab6b7"
        },
        {
          "alg": "SHA-384",
          "content": "fa19cf4674dee37cb5114689cccafeadbb7989e17768b814cb431806a0f69c7b37093b6e100430bd571a45d87a319758"
        },
        {
          "alg": "SHA3-384",
          "content": "fc0a9e2e5284bc2f911c5e2fdf9eec6cfa1973b6cfb1362822580d6c8768c73ebd1c8056b6e4e5302940f6b5ec4c74b7"
        },
        {
          "alg": "SHA3-256",
          "content": "79af553410abf4d3bbfa64374dfdf8777ce49d28b4c67a615e6d4a78e97d0498"
        },
        {
          "alg": "SHA3-512",
          "content": "5b2b1795ed1ea55b5a3566bb1f4170a4367b7893256809fdb428df9405857c8454196badf3681abaf536260ed6f293c096a3f3c9d72f0f04830e8fe71d49410a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "CC0-1.0"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.hdrhistogram/HdrHistogram@2.2.2?type=jar",
      "externalReferences": [
        {
          "url": "http://hdrhistogram.github.io/HdrHistogram/",
          "type": "website"
        },
        {
          "url": "https://github.com/HdrHistogram/HdrHistogram/issues",
          "type": "issue-tracker"
        },
        {
          "url": "scm:git:git://github.com/HdrHistogram/HdrHistogram.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.latencyutils/LatencyUtils@2.0.3?type=jar",
      "group": "org.latencyutils",
      "name": "LatencyUtils",
      "version": "2.0.3",
      "description": "LatencyUtils is a package that provides latency recording and reporting utilities.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2ad12e1ef7614cecfb0483fa9ac6da73"
        },
        {
          "alg": "SHA-1",
          "content": "769c0b82cb2421c8256300e907298a9410a2a3d3"
        },
        {
          "alg": "SHA-256",
          "content": "a32a9ffa06b2f4e01c5360f8f9df7bc5d9454a5d373cd8f361347fa5a57165ec"
        },
        {
          "alg": "SHA-512",
          "content": "bb81a42498c65389366205f4e07cee336920e2f05cc0daae213f2784b1d0ce9a908b038daec20478f23eb00b2bf704f96c5b00f63c99615193ab2a3cc4a9f890"
        },
        {
          "alg": "SHA-384",
          "content": "16ca4640dc9d848e6c6d15441897e1b5a9f27f34207b0bb456dd54d8f267b73b348092e548e78634144de44ba3515205"
        },
        {
          "alg": "SHA3-384",
          "content": "406c2b5c6f64b0c090568e479b5e6136a04a4e77f8eea65d32b4e2b01deebcdf6a0a851240cdb740c25b5a5e61e6c179"
        },
        {
          "alg": "SHA3-256",
          "content": "50ae828358301033542fd7c412e86ee318d5451f89a182e2a679aaf18099d26d"
        },
        {
          "alg": "SHA3-512",
          "content": "456c337b9fb385579aae707409ed6a04d08e5fc87b1a46733dca617c22c625bf253dc4747e0cdbf5e7d8b48102d2938cb482b6b688a79aab645a7459c592258f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "CC0-1.0"
          }
        }
      ],
      "purl": "pkg:maven/org.latencyutils/LatencyUtils@2.0.3?type=jar",
      "externalReferences": [
        {
          "url": "http://latencyutils.github.io/LatencyUtils/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/LatencyUtils/LatencyUtils/issues",
          "type": "issue-tracker"
        },
        {
          "url": "scm:git:git://github.com/LatencyUtils/LatencyUtils.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
      "publisher": "QOS.ch",
      "group": "org.slf4j",
      "name": "slf4j-api",
      "version": "2.0.18",
      "description": "The slf4j API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "fe2837bd49bfb76657419002fed20ca9"
        },
        {
          "alg": "SHA-1",
          "content": "78a9e7a37cd6360e0b818e86341b24123d28d4df"
        },
        {
          "alg": "SHA-256",
          "content": "44508fd1576500688c790b190acdd16fec4f8c79a3e0b900afd70503cf055f55"
        },
        {
          "alg": "SHA-512",
          "content": "539288fa0c96cea750d11293dbed4c562630587aa7cd88bbf76ad04390d1c40636506da48faa6453090c7e9baa6b690b9fbded55a7e2b4a91547eeea011f971a"
        },
        {
          "alg": "SHA-384",
          "content": "917885c7812289f5178f68e3c421153d55abd7fe5cc9a071ffdc5de48b7afc79c352c667a20a3ad0f3b4660952932513"
        },
        {
          "alg": "SHA3-384",
          "content": "d6898eb5dd2e5caa2185c6cd2804735802b3848a3041b82ef7faa7904b3eaf5ac382d43a70a71e22b77a929e10ae2aaf"
        },
        {
          "alg": "SHA3-256",
          "content": "6bbc9103bec05ef3280dd895d8c6267ccf8b940df03c9f5145cfaa77f6e9a41a"
        },
        {
          "alg": "SHA3-512",
          "content": "e2913e96e4b1c94e7cb5c46828d1afe68c5a7248293d5c16aaa9ab462ee8e0ff97dd3d1155d2a64f66ccd9bc1ac0c83476cc886b675004b2f84aaaf50e2b2af2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl": "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
      "externalReferences": [
        {
          "url": "http://www.slf4j.org",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/qos-ch/slf4j/slf4j-parent/slf4j-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/common-init@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "common-init",
      "version": "5.7.0-alpha.9-SNAPSHOT",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "450665294958ed3b74414bb3802eea77"
        },
        {
          "alg": "SHA-1",
          "content": "6267b1578c56f5a560294ab1d3f46149344135a0"
        },
        {
          "alg": "SHA-256",
          "content": "10d46a4e6b9655aa53b4c43b892d5caf1185f3eca20451eaa63c3991fafe626e"
        },
        {
          "alg": "SHA-512",
          "content": "3f19da0efdd4c5134093b5e3c79c334a20e13d5662ec012cce683240360fd888abfc47855d5e19b010118a6ebb8cda0fb416305c5ba76c08dd9f79a6d2deba34"
        },
        {
          "alg": "SHA-384",
          "content": "2c0941bd2311f5ff64ecfd94d27e733ae9803adbdc2244e885a9dfa7a293ba5edfe1531378f7bb6fd3a300b2a8c31652"
        },
        {
          "alg": "SHA3-384",
          "content": "959d9add74d5219af83bc62eb4d1f6a2d66e5b33b18d27497c2cf79e1d929aa4214ac5279a6d955202af69bed6db34d9"
        },
        {
          "alg": "SHA3-256",
          "content": "1cf6d191dcc939531b455aea639e64250fb0c817cfee55c7a0319a821b92fd7d"
        },
        {
          "alg": "SHA3-512",
          "content": "8f03ab7c358e837ec9c49ebb8e62d3c3edaaf48a06bcba82be5d7939b30bb95ac9f63b79fc72d7efaa15106e6071e6d7a4ff3f6b72d6e571a5338918a86ea811"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/common-init@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/common-parent/common-init/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver.git/common-parent/common-init",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.microprofile.health/microprofile-health-api@4.0.1?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.eclipse.microprofile.health",
      "name": "microprofile-health-api",
      "version": "4.0.1",
      "description": "MicroProfile Health :: API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1d023ee3b9b8545318fdeebe98d66d74"
        },
        {
          "alg": "SHA-1",
          "content": "395ea08f4f636696fb23b84a18ba81430cfebe7c"
        },
        {
          "alg": "SHA-256",
          "content": "b89ca4b6c4f7a044250d31c0673f6bc221e40fd669fc5871dbad5e5a0769ca47"
        },
        {
          "alg": "SHA-512",
          "content": "87ea9c7443bf0dbe0a3d38f3f7fd5287e24440f6285fcafdaade6312380fcce802bfe083646669207d11d36b660f05a6ef6e27ab03f3093905821d44024e5764"
        },
        {
          "alg": "SHA-384",
          "content": "4ddaceabea79f53c70fd17c6140453a19d4a9dfc1c3e8910449ce32ddef4b9023dbccbd6dbfbad49b50316389df25c8c"
        },
        {
          "alg": "SHA3-384",
          "content": "893eef36f7b7edf98be7835597d06c81055887f7a59ea70550274032a5b7ebb1822600a185d626db36d38160d0632e6f"
        },
        {
          "alg": "SHA3-256",
          "content": "94ea43765310e56d62888eafd32d4595c1e8d91a4183ad3455f51f1b52a6d2eb"
        },
        {
          "alg": "SHA3-512",
          "content": "79ba68099a777dbd5e596d9697358bc122c53cd52cb5ba5ce3a2be1086abb1f45c2f7289540f1693c1950efe6189ff8f57a91f1d53915be3fa5abbb22597d15a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.microprofile.health/microprofile-health-api@4.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://microprofile.io/project/eclipse/microprofile-health/microprofile-health-api",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse/microprofile-health/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse/microprofile-health/microprofile-health-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/common-pagination@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "common-pagination",
      "version": "5.7.0-alpha.9-SNAPSHOT",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d7fe05d498a6abed58e3c58e5ffe52c7"
        },
        {
          "alg": "SHA-1",
          "content": "1f47d1bdcfe510d7739ca187ada95b56e6a35417"
        },
        {
          "alg": "SHA-256",
          "content": "30be213251d14d1f4c95f803ec0150407015c39e8f6924c3694514ee82ecc728"
        },
        {
          "alg": "SHA-512",
          "content": "70eb357312d9868b5e5cef66a54a991197d1f37c67ded536e8110e15c35a58eaa1ae620532edc40608b419b299fb9e4050ab299bb1a3e359026eb39c60f03b9a"
        },
        {
          "alg": "SHA-384",
          "content": "d6a23b6174d8e86d6a5795b689716204da50abd30f8c314ae592d9b04da2ef48ae1cb9ba98d004c866fe54a1a431b7b6"
        },
        {
          "alg": "SHA3-384",
          "content": "8f4c1aecb1bd0a17d494d196d3a867b8d7d85885c4118570c3dcef3f382310052cd02a700ed6a8a978557e5acb066d29"
        },
        {
          "alg": "SHA3-256",
          "content": "08c6125ca85266284f44ba48e2300487559216e7c39e371a005cdd6b41bee96f"
        },
        {
          "alg": "SHA3-512",
          "content": "eda3ceff117528abc6bcd1720e2c3892e61f762f438e4aee9935d22e1e7897a5c06162cfc8d83086f266b21ac8b6cf124e63b5ac0ed190e4325795fceb0c0478"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/common-pagination@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/common-parent/common-pagination/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver.git/common-parent/common-pagination",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-cbor@2.21.3?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.dataformat",
      "name": "jackson-dataformat-cbor",
      "version": "2.21.3",
      "description": "Support for reading and writing Concise Binary Object Representation ([CBOR](https://www.rfc-editor.org/info/rfc7049) encoded data using Jackson abstractions (streaming API, data binding, tree model)",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6bc762f2f1fca2bdf2a2c5fc7403a3cd"
        },
        {
          "alg": "SHA-1",
          "content": "418e133c66e74a1a8b4b1b50eb2560918064c040"
        },
        {
          "alg": "SHA-256",
          "content": "b2bd3a5cabc399d1b4ceaab39b5563f247b66ab5ec534f7fa5bd6dd5493a6e10"
        },
        {
          "alg": "SHA-512",
          "content": "d4220aa1077c45d8ddd11599ff393dc8fed8c7d18d6ab6e3e76fa813c2d6ecdf47c57101cefac8eab1af32a042dde4ddd063e3aac31617611d7ff3dc1934081d"
        },
        {
          "alg": "SHA-384",
          "content": "9029b218ff6899ebe7f737ec9946b24e9fd00044c47065ad8c6c71625cc87008ae667eb816be2845151eeba123454cdd"
        },
        {
          "alg": "SHA3-384",
          "content": "a3fcb307306d223ee8baa4a944be0fdc4a91a9e3e5cce93876666064c0cc926bc021dfdf4bfff39fb966c14d75722357"
        },
        {
          "alg": "SHA3-256",
          "content": "f5d4f678d62874e532fae35b4ed02efb94004a2793817b8115fd7f1c115ef644"
        },
        {
          "alg": "SHA3-512",
          "content": "08d8f65796cd2121d49b56dd5611ac7d98762b54ed51425ed4028888b0f66834909b18c72c1519664a6aef5be5971439d1fd1eeda8ffe4db86eb174f5c27ee99"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-cbor@2.21.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-dataformats-binary",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-dataformats-binary/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-dataformats-binary/jackson-dataformat-cbor",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/datanucleus-plugin@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "datanucleus-plugin",
      "version": "5.7.0-alpha.9-SNAPSHOT",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e31ee1adffd65df095c03fef7cf99d85"
        },
        {
          "alg": "SHA-1",
          "content": "cbf6e9393fa5d38c80c205fa5f2b551d47fd6e5c"
        },
        {
          "alg": "SHA-256",
          "content": "53e32d57718be37cbde5962ed2e3474df716f47701dd2c872c3c56f0073f329b"
        },
        {
          "alg": "SHA-512",
          "content": "0883f170682c35ba58f2ce7ed0a52d96e8883fee82f100a0f97b693f7332f0576b79d5be3bb6c54d5f130bde6cb0a602bb1638babf679302ec507e038d35ac5d"
        },
        {
          "alg": "SHA-384",
          "content": "66f8fa9d8ac82206b7ba32a63414be75da1d27db82c946d1ece5eca800633b426a32b79d02ca8a6ad485057871cefa0b"
        },
        {
          "alg": "SHA3-384",
          "content": "9ab88648ad846e8037e5683999a1b989d1f2d4cf7c23a1c22fad4fb9b52c2671b03fdc60ec3c6b5446e006a65968b340"
        },
        {
          "alg": "SHA3-256",
          "content": "f70641c4d3980634bdab2479b5217274c143aed1ea710f20455eb1ac196fb4d5"
        },
        {
          "alg": "SHA3-512",
          "content": "65b9acabd4b186f7f70b6ff8d571d3c17cae89ef65b8111f0ea7d52dfdc4b759ef1851c55fd45bf428a8f37a5a7146104484b1fcffab770721f43027ff3f62ee"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/datanucleus-plugin@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/support/datanucleus-plugin-parent/datanucleus-plugin/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver.git/support/datanucleus-plugin-parent/datanucleus-plugin",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.uuid/java-uuid-generator@5.2.0?type=jar",
      "publisher": "FasterXML.com",
      "group": "com.fasterxml.uuid",
      "name": "java-uuid-generator",
      "version": "5.2.0",
      "description": "Java UUID Generator (JUG) is a Java library for generating Universally Unique IDentifiers, UUIDs (see http://en.wikipedia.org/wiki/UUID). It can be used either as a component in a bigger application, or as a standalone command line tool. JUG generates UUIDs according to the IETF UUID draft specification. JUG supports 3 original official UUID generation methods as well as later additions (v6, v7)",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "285019a0ccc0e0a79cdfd2d667f73e26"
        },
        {
          "alg": "SHA-1",
          "content": "3ca5091c87cd327880f09447e62b86b8b93db256"
        },
        {
          "alg": "SHA-256",
          "content": "5724d6a0f27db90d45af884f4520bce581f29eebe21840d07cae22b670bb8ebb"
        },
        {
          "alg": "SHA-512",
          "content": "d1fdaa7adde071beae68363003cadb0ccaa5914cc8fb313f59a18c2b8ed5661551bee9a1f243863f1af506c45d2539bf37fab08ac4dc608bb5bf6a7acaa23362"
        },
        {
          "alg": "SHA-384",
          "content": "c8204e36cd512ef971631145329d8dfecdde1a64aea4a439b93297c24202b7eb1fab410fb5f953f356cc63e34c5cca0e"
        },
        {
          "alg": "SHA3-384",
          "content": "eff84b0cc59804a9c6ab03dc252c1164aa6f07475aa60130ba06b3a0a729a33682bbf06a127ab3993bc2ed7f88ee302a"
        },
        {
          "alg": "SHA3-256",
          "content": "5b299156e5e9eab6fa17995e44b3a20d9e9d904e5e3962b3da02dd9c0dff184a"
        },
        {
          "alg": "SHA3-512",
          "content": "d8448a2458b3d85d0cf16b14bc0f3f00bead80795b97934440f94f72f7cf015ec83136d26a8fc10c6c30e16aa76865fe5b0916a2e7f5b1c00e3031976f8ee826"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.uuid/java-uuid-generator@5.2.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/cowtowncoder/java-uuid-generator",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "http://github.com/cowtowncoder/java-uuid-generator/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/cowtowncoder/java-uuid-generator",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/migration@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "migration",
      "version": "5.7.0-alpha.9-SNAPSHOT",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "04ffc80ae2b4d4ab0096e56474ed2610"
        },
        {
          "alg": "SHA-1",
          "content": "4720285a20addd500d3965f7f2d0107c05190760"
        },
        {
          "alg": "SHA-256",
          "content": "609d7d00abbc3931afcc983f4f1451ccdc609356825651db68eaf66442ca0054"
        },
        {
          "alg": "SHA-512",
          "content": "af386c27387ed6c41bc09fcfc5a6a1c1db175b8e9b7294697cd6842b7150bf01be368f4660e31a77cc2c8647e33412469574b72f8442240e0d3445d7c2e37a45"
        },
        {
          "alg": "SHA-384",
          "content": "5ec56417617f836265bd41238ee6e9f3e630cfbb58071c993a376cee5bc60b7c5481387372dfec799596467413e84ac2"
        },
        {
          "alg": "SHA3-384",
          "content": "fde585931de5adecc6b8f63cdca84f94cd03aaf2c54dee0bb6e1b1a578cb3ba36f1f93372fb1957e21f2753311812833"
        },
        {
          "alg": "SHA3-256",
          "content": "a49042ed1a3ff7f2da6e6a066098defc301b0a7c77f5d3ada95b4121decf2284"
        },
        {
          "alg": "SHA3-512",
          "content": "fb0774b9843a61433f7ec0b6c26df98a9bdd0a48463a0706e9990dbfb2b9ac7fcae17242cad8f0c476429319244937d7529b3665a3a2a262f2dce0032574af74"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/migration@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/migration/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver.git/migration",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.flywaydb/flyway-core@12.6.0?type=jar",
      "group": "org.flywaydb",
      "name": "flyway-core",
      "version": "12.6.0",
      "description": "Flyway: Database Migrations Made Easy.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e68f0f25b5e8883518620b352ba136ef"
        },
        {
          "alg": "SHA-1",
          "content": "8988e677be97c80caf654fcb4a2850e8817ba1ac"
        },
        {
          "alg": "SHA-256",
          "content": "0f7a7e884341cd8eddfe0ef44c8fa5683baf0946768337f3dc23d6a8de1dfcc1"
        },
        {
          "alg": "SHA-512",
          "content": "d567b72f9d0556d7a728c2f7a14b1f9f3da4538373fcd8939bc1bcef5a829b3a2872193364cd6aa66677918f6261f8d3ad3f40d53cdec25fb63a68036528da27"
        },
        {
          "alg": "SHA-384",
          "content": "417802afca23b36ff16105841648717a58eb953d12bee185cda12009b247595aa8e71f42038022d2db61e46109af57be"
        },
        {
          "alg": "SHA3-384",
          "content": "d0bb6fdfbca6ebd739097994dbf5b507afaddfa1d93827b4abb9ff14ec03ba6e2bfb6eab5b16f8495a69eaf477442e9f"
        },
        {
          "alg": "SHA3-256",
          "content": "d535fcfbc500f00280b1caa0949533af1e43bcba495c61391236c47b24b756a0"
        },
        {
          "alg": "SHA3-512",
          "content": "e008da856b949ce9a7e1a170d71d0e1beff3c4ad837e9886e3a867631ac631482fa0f288a3504ec6416be501dfd3dbe4ad28012c01bac364e372525354fc60d3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.flywaydb/flyway-core@12.6.0?type=jar",
      "externalReferences": [
        {
          "url": "https://flywaydb.org/flyway-core",
          "type": "website"
        },
        {
          "url": "https://github.com/flyway/flyway/flyway-core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/tools.jackson.core/jackson-databind@3.1.1?type=jar",
      "publisher": "FasterXML",
      "group": "tools.jackson.core",
      "name": "jackson-databind",
      "version": "3.1.1",
      "description": "General data-binding functionality for Jackson: works on core streaming API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a2010f8f82d85fb80443485388efcf7b"
        },
        {
          "alg": "SHA-1",
          "content": "7c5ffe83238ded07ecd18d4d686febbd327929b2"
        },
        {
          "alg": "SHA-256",
          "content": "a80302c80cb02803e33d7b3301a0d619146d3191d285e6bbd39fa17d3aa5f24a"
        },
        {
          "alg": "SHA-512",
          "content": "636b575d41ee93a51b02d6750f672eb1d652fa0758499c3abef99f631738f60468b0e4b6b8662d103c84f1a99f8d93f3a757b3410ef70bc65b955ee3fe4dfa5e"
        },
        {
          "alg": "SHA-384",
          "content": "a51e0ad60d12619664a593135d62340901098458d932e02a6b9fd68a1df7cf346ac3c83715000fcb80312128ba0c9c80"
        },
        {
          "alg": "SHA3-384",
          "content": "3b533a15eb850094c536d3ddcddfb411ba5bab1af1f049fdbc2b67e1d00b15b9d78766874b7193b62ed2a6e388488db8"
        },
        {
          "alg": "SHA3-256",
          "content": "50aa91e758a72519a4639a4f396c118b7830731208905e39b7b681c4c2356a0a"
        },
        {
          "alg": "SHA3-512",
          "content": "b5cf6b169256abd7d1003ab5493066187d92f3eb32df7f1b6a3ec97696d1ab5598bf8a478355d331737b4b67a328ea0f34bc512b2e57c43097e9047dd9c8152a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/tools.jackson.core/jackson-databind@3.1.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-databind/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-databind",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/tools.jackson.core/jackson-core@3.1.1?type=jar",
      "publisher": "FasterXML",
      "group": "tools.jackson.core",
      "name": "jackson-core",
      "version": "3.1.1",
      "description": "Core Jackson processing abstractions (aka Streaming API), implementation for JSON",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9c844d1e60292bc51762f661d3ce3874"
        },
        {
          "alg": "SHA-1",
          "content": "8eb0e0a912e65328bddb0b25ff499cd0d2391007"
        },
        {
          "alg": "SHA-256",
          "content": "4cd270bee1a1aa34be18da78268f3879355b6ea09154beff496831785b6194c9"
        },
        {
          "alg": "SHA-512",
          "content": "2dbf82f140428312b8ac9e8b3b2e74843f6923d7cef563161dbfe4ea93fd52cdc4943347e0ab7f6e3ec419e933fe3ea724a5a45ac3ba7fe696f85f104779cb20"
        },
        {
          "alg": "SHA-384",
          "content": "82ddd83fc7f797540c2a02bee8726c9af3f11139c4454745f91ad9f668e25b8e7f05ce1d6d297e9c42ad77d60480a3ef"
        },
        {
          "alg": "SHA3-384",
          "content": "fec024ad8c23f7d05fa57f1b98365a7a117dfa8adeeb0eea791eac1798036ec0ec47acbcec833601e93c3a67172c96eb"
        },
        {
          "alg": "SHA3-256",
          "content": "66c3c0c38e6f6d5408fd707a6f3b83e905be34f7096f0b20e6aa6c67409ad131"
        },
        {
          "alg": "SHA3-512",
          "content": "a4aa1bb4695d451ff08d9c253c5eab187571302c2bbaefd79f26a531ff9a3f363ac2808eb020c69850ca7f862e43bc975f8345eda76e0bbf46c4b17378451927"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/tools.jackson.core/jackson-core@3.1.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-core",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-core/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/FasterXML/jackson-core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.flywaydb/flyway-database-postgresql@12.6.0?type=jar",
      "group": "org.flywaydb",
      "name": "flyway-database-postgresql",
      "version": "12.6.0",
      "description": "Flyway: Database Migrations Made Easy.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a3e24fa618801268fb9d703dd8099706"
        },
        {
          "alg": "SHA-1",
          "content": "b77ef520bc346744a5eef97ec0b06165f389a672"
        },
        {
          "alg": "SHA-256",
          "content": "ddadaa4ded894292cb742334509dd881c378ff32a7733c1f00416b45c7266223"
        },
        {
          "alg": "SHA-512",
          "content": "881c696d9d27d6a2db4890e4e907ed0170c1c2e672aa639949055507b4b7f1b1fc2160189f04683e7ac8ec4b16a066b0d5f1ad8ee27ba7321d7584a5a9538d0f"
        },
        {
          "alg": "SHA-384",
          "content": "4118e845c189b99e69fdc418689e6533447ca16ada4bc7573ee40bebd19994ca65eeac14c3995ad804126b8ae32e8302"
        },
        {
          "alg": "SHA3-384",
          "content": "8891581757a27e88820e5b3a2206182e2d51efa94093141eed9263baad83aceba9ce494715eff34673ebfe65ae9982d5"
        },
        {
          "alg": "SHA3-256",
          "content": "f902f16cc870bc67e9171148c5ac6625353e033d7b8868f4fe71b720857ad151"
        },
        {
          "alg": "SHA3-512",
          "content": "febfb65b10822af9eadf3d376a5232a390097db330ea190419c73bd211029e44e08693a557a32aff831975643b4aed33ca739628891d86b31133f693ce500144"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.flywaydb/flyway-database-postgresql@12.6.0?type=jar",
      "externalReferences": [
        {
          "url": "https://flywaydb.org/flyway-database-postgresql",
          "type": "website"
        },
        {
          "url": "https://github.com/flyway/flyway/flyway-database-postgresql",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/notification-api@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "notification-api",
      "version": "5.7.0-alpha.9-SNAPSHOT",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "98a61769ad6e88b4588df499db85d3c8"
        },
        {
          "alg": "SHA-1",
          "content": "015f112c362a418893aacbf35d18ea54d54c1a80"
        },
        {
          "alg": "SHA-256",
          "content": "22c60e65bf6f35ee41d0f217570bb58e26a6b71d891414b99da01f71646eac8b"
        },
        {
          "alg": "SHA-512",
          "content": "b3d4c6a4f8a3067c877b663de899670373a92084efdcd8815e2393f7dc45d76a1d66fb851d86cb879ea059a3e8903f9bdae599a142cdeeac22174272a8daeffb"
        },
        {
          "alg": "SHA-384",
          "content": "7fc2c76f065c643480e618183a77da9dadbd082d5e638de49b55a5bc117e1b2d8bd30bfe17053b45b820588be60ee992"
        },
        {
          "alg": "SHA3-384",
          "content": "b523e412abfcd0030aa096bb5a9b3e6512e6131e12d1ac74bbfaea59db8882d0a2f9b525a91c3dd9cabf795fda16700b"
        },
        {
          "alg": "SHA3-256",
          "content": "a17d601ebd0e43f87b41a64e55909a372eb94ad63534af72e873408ab08023c0"
        },
        {
          "alg": "SHA3-512",
          "content": "99ec6d1ef4a5338408c9424e98e74aaaa6e76851990954b8cc192896ce727322af5395bf5e4b949b4bcb461ab6c1364b817eedeab845bf3530b0de8298d8dc93"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/notification-api@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/notification-parent/notification-api/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver.git/notification-parent/notification-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.protobuf/protobuf-java@4.34.1?type=jar",
      "group": "com.google.protobuf",
      "name": "protobuf-java",
      "version": "4.34.1",
      "description": "Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an efficient yet extensible format.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "00ddb3042ac6e2ca519d6713fcd9d690"
        },
        {
          "alg": "SHA-1",
          "content": "e3b07cd3be66ec918b9fa4db9863c86d5eeea891"
        },
        {
          "alg": "SHA-256",
          "content": "ae0459030b54a6f3058ad349aa01fc2edcbb2d4a84b73699675bbd125df2e96d"
        },
        {
          "alg": "SHA-512",
          "content": "9798283dbf73934a484c81d951b9ad7fbee2f6ac903e35ff9ed878aa7dbb1aa02cc96971d66ead91831e0c73a567732cdecbe4a0fcd3e056d9591c0e68df76bc"
        },
        {
          "alg": "SHA-384",
          "content": "df76bff27ffaecaf3ec90583dd7d5573b229757740add69c59d445dbf3fb1ec5071f7be5d0324cc56a7ceaeebea22880"
        },
        {
          "alg": "SHA3-384",
          "content": "f69ac83aadfb7bafd42f90218b355cdffff27273bcf8a467ac67ee05046751e3c9fcc0f97989748ee5a63834d3b7352d"
        },
        {
          "alg": "SHA3-256",
          "content": "a965e7082e70fb3c7497a953cc9a7fe763df464ba2bedb35e7bf1e581069eb82"
        },
        {
          "alg": "SHA3-512",
          "content": "e51310299046910ec4cafe4f887268b454c9b36ee6bb106122cdfb295a90c1cd58c17ba511613b431ad3a8fe0b0ef7d9ddb2b7817b56d65f33623e643c1d8c9c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.google.protobuf/protobuf-java@4.34.1?type=jar",
      "externalReferences": [
        {
          "url": "https://developers.google.com/protocol-buffers/protobuf-java/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/protocolbuffers/protobuf/protobuf-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/notification-publishing@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "notification-publishing",
      "version": "5.7.0-alpha.9-SNAPSHOT",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d803642adf6b29cf57473db70c76edd2"
        },
        {
          "alg": "SHA-1",
          "content": "5cbea21c48f7291ccf0b58115373b35f2a56961d"
        },
        {
          "alg": "SHA-256",
          "content": "eb8061f1fab52d441ac35e11363243027eba5bf9d4b27399a414566ff18962a2"
        },
        {
          "alg": "SHA-512",
          "content": "3ba2796568fb6262470707cf3499bc0b52c45e6cae6f36478347956cb84526190adac66c7a6888a07c20c411c04b8b9dd8f98ff627cad50a01054bb44f0d2154"
        },
        {
          "alg": "SHA-384",
          "content": "7b1e7fb6c544b0244b148529de1a2c4644dbcf88472561d04af504d73af0d2ad84d56907deecfeed98799dad9833ea61"
        },
        {
          "alg": "SHA3-384",
          "content": "f1364013653f3e1bbd3520ff0ddf9e27a14e55499fec116b33e7a7fd44479500212c5c74f35d1792e451d011e5ee8c8e"
        },
        {
          "alg": "SHA3-256",
          "content": "02f2115c40c7ffed015869c1ac8b91762f2739f6916c3a4ad29f8af0c0766491"
        },
        {
          "alg": "SHA3-512",
          "content": "95afae256731b6461d0b3ae4ea4d345c7bcc668645e37a02d42e008adab2b9e1dda272daa8275d764f828d2ac9cba07dc02af6bf3ae5c9e95374c37cbacfc8ba"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/notification-publishing@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/notification-parent/notification-publishing/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver.git/notification-parent/notification-publishing",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.angus/angus-mail@2.0.5?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.eclipse.angus",
      "name": "angus-mail",
      "version": "2.0.5",
      "description": "Angus Mail Provider",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e965a2653568c0138457b4c6fc9e5d77"
        },
        {
          "alg": "SHA-1",
          "content": "427f6d52ec0782f7efaca0c0732042e347a6cb4f"
        },
        {
          "alg": "SHA-256",
          "content": "b4d8c30d35f455def6c7a05fe595a1e62ea2b80cac3efec1e9ccf4118b23168a"
        },
        {
          "alg": "SHA-512",
          "content": "500985e3045a7640049aa1ebb008d675983f537150605f192d2746ca2aa8c7a1b5231f782f950dfd968cc8ca26c32c6e93008cc7de309c5da4b17af0139baff7"
        },
        {
          "alg": "SHA-384",
          "content": "35c797fdc52800ccfbd36d7574c0919fbba1f820eafb1d236271eefb07266360c1b87c07c089f97c07d12a634e54037c"
        },
        {
          "alg": "SHA3-384",
          "content": "9a10dd9cf09af51c29d178d2dd87c6a796121753c91ca13b8c51843b8ed737803090fa93f41ec8689469550941e12473"
        },
        {
          "alg": "SHA3-256",
          "content": "7ac45dd92d65996c4de11701bf1a1130e393a3e33b4bc02af69bf627e54b122e"
        },
        {
          "alg": "SHA3-512",
          "content": "b45eb356f855b9777cfdf6be94c6797c33e86fe28e8e2e7fe7311e661f07d162e8c4e46a2f3dd67b7c0f8261ab5610c85f4f62cc874e64ee2a76eca3501e2e2d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.angus/angus-mail@2.0.5?type=jar",
      "externalReferences": [
        {
          "url": "http://eclipse-ee4j.github.io/angus-mail/angus-mail",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/angus-mail/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/angus-mail/angus-mail",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.mail/jakarta.mail-api@2.1.3?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.mail",
      "name": "jakarta.mail-api",
      "version": "2.1.3",
      "description": "Jakarta Mail API 2.1 Specification API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "288a687deb06b87602ce14cd03dddff4"
        },
        {
          "alg": "SHA-1",
          "content": "a327aa5f514ba86e80d54584417d7376ed2bde0e"
        },
        {
          "alg": "SHA-256",
          "content": "8051b58d75f982f9a5b963b3765426e824b2a64865ef0af17205e455b98db05c"
        },
        {
          "alg": "SHA-512",
          "content": "841a9784cfcfa1723d1c634b094280fabe6ecfdf640513a76a6a39b1ad29d59c1207c086cd66ec8e7f161ffaacd9e1dad12828ac4c57583e9d8593f12ae6460d"
        },
        {
          "alg": "SHA-384",
          "content": "dd18dbcf72559ea405946a6d73dc60e672b3bc222e32944b2bf51e81cd41348ad7873b5b2a9d86f0440b44bcd6e45176"
        },
        {
          "alg": "SHA3-384",
          "content": "c02d8861b3c9fee8f18bfcb41947d2a83eeaed4ea9d1bb8784525c7fedd2ccab6b704663ff5a452c78537d1b79fd960a"
        },
        {
          "alg": "SHA3-256",
          "content": "c10cb31acf35574a203d85427d81e36162edc44b9f6cd9b422c19144b8e7ae4b"
        },
        {
          "alg": "SHA3-512",
          "content": "4034e1d5280fde464902035e7491e997ffec62a327844deec6f7e64b7b2d8d1d9fe505f10691caf7223ec06e6d27ac263ae1341582a5c48adad1c7635c13f0d5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.mail/jakarta.mail-api@2.1.3?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j/jakarta.mail-api",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jakartaee/mail-api/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jakartaee/mail-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.angus/angus-activation@2.0.3?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.eclipse.angus",
      "name": "angus-activation",
      "version": "2.0.3",
      "description": "Angus Activation Registries Implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ad20392145690b36b4f950fe31a31a2a"
        },
        {
          "alg": "SHA-1",
          "content": "7f80607ea5014fef0b1779e6c33d63a88a45a563"
        },
        {
          "alg": "SHA-256",
          "content": "a6bd35c538cf90fff941ad6258c40c08fca0b5c9c3f536c657114f27ce0527a7"
        },
        {
          "alg": "SHA-512",
          "content": "efb987b781f665589b2a524d86826ffcf37eaf105b2f823be124fded85bd118098c0749b5d268373d00b1d3b8bf0f89f86670444f9990b91948704a7052376e1"
        },
        {
          "alg": "SHA-384",
          "content": "4086b356cdf168e28a09dfa2ee9cd54926491438d556e4608508ae6a895929adf63f3a259779c83624a9bb1f886efb6d"
        },
        {
          "alg": "SHA3-384",
          "content": "7b79721ec0b28964fad4bf56ffc3be67d81b62e45a4ac703917094e281c125834b9bebcc0623176d4904c5b50c94450e"
        },
        {
          "alg": "SHA3-256",
          "content": "aecadbd33e92abf894ae28c8cc609f5f85e8af736621c44fb71b84ca34e91247"
        },
        {
          "alg": "SHA3-512",
          "content": "ebdc07c3b3cf0817f6d9ee54bb23461657f213648b70f6c7f634a1028cdf1522d5b5a7e2168130f72afa112f36cb08858d1c94bb67b40a0f051f567b4d696d1e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.angus/angus-activation@2.0.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/angus-activation/angus-activation",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/angus-activation/issues/",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/angus-activation/angus-activation",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.2.4?type=jar",
      "group": "com.github.ben-manes.caffeine",
      "name": "caffeine",
      "version": "3.2.4",
      "description": "A high performance caching library",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "04d655feb58be297a86fa2814a1f1ef8"
        },
        {
          "alg": "SHA-1",
          "content": "c63b303adf59c733d2a96125ad6670e938a2c15d"
        },
        {
          "alg": "SHA-256",
          "content": "9d9d2cfd681fd9272ded3d27c9930db12f89f732345975aa113ebc223bbf1224"
        },
        {
          "alg": "SHA-512",
          "content": "6923d1b826e3723a9d58b092626045bdbac48dd91e758b3b78164de31105035343145d14c20a00b62658b7d1dff2a5cfb7475b200cc630dcd967c4732c2628ee"
        },
        {
          "alg": "SHA-384",
          "content": "dd9a4951638126227d1a27ed4689391783f42f55a6e863d5022dd9f864e0cf174bc9e6267b3f7f3d6ca4a03399d38c28"
        },
        {
          "alg": "SHA3-384",
          "content": "f84911ac6299bccc137471d1ea3ca870ca0d0604e47e475ef19ee1850bcd5d98e1a13b6ae493096a4349dcaef94abcf7"
        },
        {
          "alg": "SHA3-256",
          "content": "745b6815303fc9a89f385e7d17120b1d3d5987b5af03870d72d077c2d060f038"
        },
        {
          "alg": "SHA3-512",
          "content": "cb5ea47d93b8bd42d4df7d1727c0870479acadd423c284843bd95fdc1f4becf328943adad501a253d91d369bb3b6ec9858ebca4d272008e655afe89a037a0c96"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.2.4?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/ben-manes/caffeine",
          "type": "website"
        },
        {
          "url": "https://github.com/ben-manes/caffeine",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-databind",
      "version": "2.21.3",
      "description": "General data-binding functionality for Jackson: works on core streaming API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0ae595293418fd4dd9c4527d4abc5610"
        },
        {
          "alg": "SHA-1",
          "content": "aa7ccec161c275f3e6332666ab758916f3120714"
        },
        {
          "alg": "SHA-256",
          "content": "f397563d8e67630c10cab8c2334ca0e55af832fa3ebde160a379c2c96d43bf25"
        },
        {
          "alg": "SHA-512",
          "content": "bf9df0232bd26b6f00b2227fad26cee40ef31e8e12e521ee1afe89dcea61ddb2b27cbc0d1f0679d1746cc35cc361e531c84324db68d43eaa60f15933bbbcf0ab"
        },
        {
          "alg": "SHA-384",
          "content": "47cf817512cd1482eeaa54ae68e62d3b13eafa11546d99ee933de28a9514f4a41e967fa378b40b17746bc98a26f7b387"
        },
        {
          "alg": "SHA3-384",
          "content": "d0a2f03bf3223f5ad6d84541f1027f56045689ec54dc8c594db9dc11d50c041d8487b1abcaf107b05da886f2b988c628"
        },
        {
          "alg": "SHA3-256",
          "content": "f506e6ef4e26c5720065231dc654a0a99beb2e195e98e32fb5ad02ab4386e20b"
        },
        {
          "alg": "SHA3-512",
          "content": "a73c9798fa53f62bec6ca46cf8ad264d78b0a41ab9089ad8b8f4bfb8034d8eea8081bbcf3e2a9a3ac5ea018c13710098c6b1af033c088cec2385ccd62c1b84c0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-databind/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-databind",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.kafka/kafka-clients@4.2.0?type=jar",
      "group": "org.apache.kafka",
      "name": "kafka-clients",
      "version": "4.2.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e9e925cdeb808a2e7bd50e12d21f91c4"
        },
        {
          "alg": "SHA-1",
          "content": "6b0c4e8cf3f04aa1b0b5a524d66e2a7297c24049"
        },
        {
          "alg": "SHA-256",
          "content": "bcf39f152c5553c2501a491fc4a73c5b0330741e8eed96a481323b8ee89738af"
        },
        {
          "alg": "SHA-512",
          "content": "3aba94e85908e5fd9c2aea7a78b97ebc978c4b70147c0e8eee4d1257edb01534e4f0cedc47727082b089f4f46becbc90d3c0fe53e4ff8a72128960c17668bcdd"
        },
        {
          "alg": "SHA-384",
          "content": "b20bb6e2550a42c2598c169e89632886b0a89d7ee63476c95003f1853712e03d2198529afc57a42efed1a7115981f2a1"
        },
        {
          "alg": "SHA3-384",
          "content": "964ca1bef2792bf79b5c719c93a697fcc6807756d19ac8daccee37ac9ab3765ee838800cc6d139f01563799b49f3ba9f"
        },
        {
          "alg": "SHA3-256",
          "content": "9751a607e3218154ea9f40500497f7c8ace609655972cef95d37b8e39945db8f"
        },
        {
          "alg": "SHA3-512",
          "content": "95eb98524eaad0c9128fb0d472f43dc4734e14328ad5e627c0027aca8b1b6c063c1cb5b2f65c792169a02be52c730dc16efb246c11bbbb294221f56a7037bab8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.kafka/kafka-clients@4.2.0?type=jar",
      "externalReferences": [
        {
          "url": "https://kafka.apache.org",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/at.yawk.lz4/lz4-java@1.10.1?type=jar",
      "group": "at.yawk.lz4",
      "name": "lz4-java",
      "version": "1.10.1",
      "description": "Java bindings and pure Java implementations of LZ4 and XXHash",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8ea4d77e6a652da0162a69b6aea6e4a9"
        },
        {
          "alg": "SHA-1",
          "content": "f541d7f910fe3d76f38f799c507c48cc81b12ecb"
        },
        {
          "alg": "SHA-256",
          "content": "a58a84c4271e50df4c96ed916ccb7e48a869f8ed9cdcda1ad5d3d4c33b0214a3"
        },
        {
          "alg": "SHA-512",
          "content": "6930598c1c27a247de88a0db74aa14e90d7837832b61042edde7f954f55c8382b505aa35a21d3e69a3dc333b013866a98a7c3570c34aeea3ab1c1ef1c05d0048"
        },
        {
          "alg": "SHA-384",
          "content": "f266dbead14988f5b05d11628bb55b5266c6e1d10578356f9a25967310c301d20fab78d46d6dfe8a31b641c2844ba2f9"
        },
        {
          "alg": "SHA3-384",
          "content": "a35fd2201de77821293560ca5dcbbc4f831ee0a1ae056b0511847370091402c1433fd7e0ff18d4fc26f217b613d6f0e9"
        },
        {
          "alg": "SHA3-256",
          "content": "cd5bc0d64595fc34b50d830be6d61a5e537389368a9c50136d76100ff17c9727"
        },
        {
          "alg": "SHA3-512",
          "content": "d3da038eca828202ecccc8ccb0ba3355839723369ebf9e42ab0ed9d564671bad25b3559decf20673381a30c43da7b70af0a440d155021932cd6b1dc39bb43da5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/at.yawk.lz4/lz4-java@1.10.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/yawkat/lz4-java",
          "type": "website"
        },
        {
          "url": "https://github.com/yawkat/lz4-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/notification-templating@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "notification-templating",
      "version": "5.7.0-alpha.9-SNAPSHOT",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "dddad00e2ea2f1c1b559834cce3cbd28"
        },
        {
          "alg": "SHA-1",
          "content": "d77dc86f7f35062e4d7c5d9cac1cc27beae2a5b3"
        },
        {
          "alg": "SHA-256",
          "content": "d7295f8f830caa6624acccc1942fe59aefdf9bbb00759cbf605520fd6e01a86e"
        },
        {
          "alg": "SHA-512",
          "content": "4fdc8c35635620721fc302f991a790e3b7110a6b41c2532934acb1036c08b194d10e3b27091122c18de85f2b1600891efa16aeca20189301aec645bd1e1a1f91"
        },
        {
          "alg": "SHA-384",
          "content": "a35ab69e37e209af40e489a4f58e15758cbd633bad31290ea4561105ecbd19559b8ec95e31f8710550b015f3e5483544"
        },
        {
          "alg": "SHA3-384",
          "content": "7b2625356bbd86d8aa0167e1315170f15483c7d552c9d51473e5ea4fe9bf220f2a6feed6b0e01a8564431db65d2f2d5f"
        },
        {
          "alg": "SHA3-256",
          "content": "161a6b5dbf1b6f39ea0b1aa810f391228b3d0f824e07508c07489217c6a25f82"
        },
        {
          "alg": "SHA3-512",
          "content": "1415698e214b62665b2010d450a2ad198c59590a34d1df0e04bb8d6889b62e043408e9f7cd5ce229c359eed1ed1b6efdf220eda2d7c35fb280ed15747ea33969"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/notification-templating@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/notification-parent/notification-templating/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver.git/notification-parent/notification-templating",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/plugin-api@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "plugin-api",
      "version": "5.7.0-alpha.9-SNAPSHOT",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "17bbc6b1fb46612eff53c1fa0cb3f4fb"
        },
        {
          "alg": "SHA-1",
          "content": "5e308c784c6070c34cf962e6c64ba8ceebe0b39d"
        },
        {
          "alg": "SHA-256",
          "content": "84bdcfd6e2d10819dbd93ae5eaa6d15c7fe7c0d7bc9c103a53c76fc7f69c9655"
        },
        {
          "alg": "SHA-512",
          "content": "5e0d6338094b675fa04413d0608f4a9719c7e39de8338a11502d07b61788cff06f0704d4f96f5c73912fe9841f431b94778edbfa0a96685affc054621991e176"
        },
        {
          "alg": "SHA-384",
          "content": "6e06b25431cc25f43e818cda902ee41119aea93b24bc79c9fa10006153e248dd0792370a3689766322cf4b8ad7b42f7a"
        },
        {
          "alg": "SHA3-384",
          "content": "eb4778c63cd187e7cfad919f5be7259c380c699d6d579de4cde354d8bbb9e604b32597cc4f300687486457936ad587d1"
        },
        {
          "alg": "SHA3-256",
          "content": "1e1995ad52911986f30696f6babf7368bed527ccf66b217fe46003a117e9c979"
        },
        {
          "alg": "SHA3-512",
          "content": "411cee4cc516e76da737916154a87dac550f46f4dd02ce348c25a24f10a5c8ccc3a50ae45ce3d4e6ae754555c0c9878765ca5e930e8a199684b8531fbe3a9839"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/plugin-api@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/plugin-parent/plugin-api/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver.git/plugin-parent/plugin-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/plugin-config@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "plugin-config",
      "version": "5.7.0-alpha.9-SNAPSHOT",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "064c8220b65f15c6514e48f078ebe6ba"
        },
        {
          "alg": "SHA-1",
          "content": "7c23c4ff90e7df27bb23cd163bd70936a0e41fc4"
        },
        {
          "alg": "SHA-256",
          "content": "5c93b156922a36cf6e830d578b2d5aadb459dba644d883dc78cece89217c4578"
        },
        {
          "alg": "SHA-512",
          "content": "e572527eb79e051c9e7db30cc0fed8db3f2ffde05cb45a06d044cd1715b67c7ceea1d714baa428f7758089f844d88b2b5d4b41af3b8c107d88959a4ce709a9e1"
        },
        {
          "alg": "SHA-384",
          "content": "a9b4a349f443f8fdf4368000b536d9c50bebbe90ecfe1c8da3f585b10e50c232c59d9c2ce8ca43d08c8e4bc1c1d8578d"
        },
        {
          "alg": "SHA3-384",
          "content": "8c3c7d06ee6b816a874bc042437bb942d7650107531495d9eb96954478ba32710f04287cbc47810ecb8fbdaaa969c944"
        },
        {
          "alg": "SHA3-256",
          "content": "fe0758466307ac8b780ed613e14272f0e625e22f38225e155f04f82200cb5a8e"
        },
        {
          "alg": "SHA3-512",
          "content": "237b40b5c052df5d2ce27f03dbe8f34613b204bfb4ea43e244df036c43a12a87875bd13c17b6f5055aa6bcb5b69899f8130cd42e930997fbf29d52b648aca49e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/plugin-config@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/plugin-parent/plugin-config/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver.git/plugin-parent/plugin-config",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.networknt/json-schema-validator@1.5.9?type=jar",
      "group": "com.networknt",
      "name": "json-schema-validator",
      "version": "1.5.9",
      "description": "A json schema validator that supports draft v4, v6, v7, v2019-09 and v2020-12",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "84622292ac5001bac8f16dc5002a8b94"
        },
        {
          "alg": "SHA-1",
          "content": "6a2f9fe324b9dc8d8e0c3d7b435f7ae99595a556"
        },
        {
          "alg": "SHA-256",
          "content": "e0b8baeb78fd1ba027454ee3974d8a02f54447eaa510d3052820a7d2160d9ae4"
        },
        {
          "alg": "SHA-512",
          "content": "5ba210c135717a6ed043e0889d96f6381b3668f9e2a011bd0def8138ad327813f792259858ae5ed192cb8ec0645308113769aa8ebee903db1ccd82e98cb3009d"
        },
        {
          "alg": "SHA-384",
          "content": "21a4f4fb586959241ce92ad788cb4326d62232aafcddf6953ef7769efa5c6936487ffea51693ff44206f4d66c83ee753"
        },
        {
          "alg": "SHA3-384",
          "content": "36bb0b96a34254780e991440e879c1f44a0a62362e115a5c761df0ec1c8f2a9f64a7421ea3cb50a589ae501619fd3942"
        },
        {
          "alg": "SHA3-256",
          "content": "c97a2638d46c235056bacfe90d8e0b88a823a5622e88b608a31f481f3adb9ccf"
        },
        {
          "alg": "SHA3-512",
          "content": "08b256bb3ac49102d87c0e635d025699154bfa7785916d591173af6ec14dfde885e34500a7bd13159a00a7fe78dc859aefa9dc930d0719a64ea08209ccffb20a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.networknt/json-schema-validator@1.5.9?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/networknt/json-schema-validator",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/networknt/json-schema-validator/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/networknt/json-schema-validator.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.ethlo.time/itu@1.14.0?type=jar",
      "group": "com.ethlo.time",
      "name": "itu",
      "version": "1.14.0",
      "description": "Extremely fast date-time parser and formatter - RFC 3339 (ISO 8601 profile) and W3C format",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e537d0a2bc8066726f7e4654c253cf84"
        },
        {
          "alg": "SHA-1",
          "content": "c0f9f9d4f4404787e992ab3af5ae95f2fad79e47"
        },
        {
          "alg": "SHA-256",
          "content": "5cf40ab0cc77828ab2b875b1f3ecd71c8295d7721933476abc2e08fddcea164a"
        },
        {
          "alg": "SHA-512",
          "content": "aa69a6af3a7123eb41425bbaf6834e16dc3323172709e2338b8a21b970fd21333d996515f42da4aa0225251e30542ad7d9c8332bdf7d62ed96b42fadc8a1520d"
        },
        {
          "alg": "SHA-384",
          "content": "8d201334c39b68d13d66fc9df2440fa848b055a9b901e1c630ff66a47e70c8816484d106ae18c642d4257034f33e55f2"
        },
        {
          "alg": "SHA3-384",
          "content": "033715e1422cb3f22c1073bc7b058fd16d1436c6314f49f13480d81c86b656cb77a4d852cbba35542bc8f2ce49244ba6"
        },
        {
          "alg": "SHA3-256",
          "content": "f18d275dd2a0038a82432e06bb9f396151310136e3a316a869ef54d7fae834c5"
        },
        {
          "alg": "SHA3-512",
          "content": "8a51b3c6144eb2e363f8804da316d9e3dc246be07af4c0bb55e9540c2a0deb5eb9beb825120d3d203e3a561fd8a605ad64f3af5d233725e1b9c7e06232deaea9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.ethlo.time/itu@1.14.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/ethlo/itu",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/ethlo/itu",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/plugin-runtime@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "plugin-runtime",
      "version": "5.7.0-alpha.9-SNAPSHOT",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "504564802a0687d06f1c9af7c49b903b"
        },
        {
          "alg": "SHA-1",
          "content": "6d8f6083991b35c94a25dc54fa548956048e3b4d"
        },
        {
          "alg": "SHA-256",
          "content": "1dab8a3c5957c8ee1a00db23f8ee8678b35d00ae635aa6246cd14eb35df6b992"
        },
        {
          "alg": "SHA-512",
          "content": "454f33ab5536e11247b4025e5bde3d95c45a70dd0cb7ee5203ed269467252f750064b1187049f2c3be25273360c8357e8a6f71c85d582c08533a7e8bc2f9b580"
        },
        {
          "alg": "SHA-384",
          "content": "fbd6c7e65321cb1c462115abe8defe3eeec85ca15f7f25d5498cbdd5b940eebf8a95ea2c3f419972cc0c6194d52509f6"
        },
        {
          "alg": "SHA3-384",
          "content": "f350c30dda81100edbd37ddd2d4a673d7367866eb4bdd13414d65d3dec942ab6748984a6b888b002b940402ec7d14432"
        },
        {
          "alg": "SHA3-256",
          "content": "c053f9b4e0425b239e75c636e2bbecee16925ee76d9e2b0234539c32c0f9f0d6"
        },
        {
          "alg": "SHA3-512",
          "content": "f4aa82f962f3521e98e882429bc698b5b3c22b2521ef4fcadfa4cf4548630c80d4f2cacb925cfb217304c150d6776f3670db34578573e52b72eccad90801c49f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/plugin-runtime@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/plugin-parent/plugin-runtime/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver.git/plugin-parent/plugin-runtime",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/common-config@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "common-config",
      "version": "5.7.0-alpha.9-SNAPSHOT",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "847a605f66428f2e3782eba6f11e643d"
        },
        {
          "alg": "SHA-1",
          "content": "0653b35be95db40cc48adb0ac723f334d6e7b91e"
        },
        {
          "alg": "SHA-256",
          "content": "3368c378176fd142a55074b4d425f7b00dbcbbff5f1de1bfb744f217125a621b"
        },
        {
          "alg": "SHA-512",
          "content": "f1a0e2b766ca6bbf9624dc02b21b47d89073aa44b4a12f8e1cec128d9c201a1a9599e73a97b69ac637d484a74d2a258a73e4bfa5b20a22e696383b7683009bbb"
        },
        {
          "alg": "SHA-384",
          "content": "452475fba549751b4fa6d5b40ad3c05dbdeabf67b33afa61c33cb4cbc0cd3e339f236fb0883703287f7539c26d4beba3"
        },
        {
          "alg": "SHA3-384",
          "content": "dffdbb2e291fa9f4d1f535f32834b7688d0a6d4a1d43346f497dac6935044b10368f13e86c597bb2644abb5ca2567b9e"
        },
        {
          "alg": "SHA3-256",
          "content": "55c56d42004d15ab71dcff21e1fb39a77489a5f18d3b37c2d29621aef161a825"
        },
        {
          "alg": "SHA3-512",
          "content": "26e70af15a6ad453144c8926d065b741c05ff065d2c2041a479a2373fa2e9c8bfa4fa6317c0019394a81cf74185483f41ba3f2df0d0c14dc823bab569d0c3e57"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/common-config@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/common-parent/common-config/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver.git/common-parent/common-config",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/smallrye-config-secret-handler-file@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "smallrye-config-secret-handler-file",
      "version": "5.7.0-alpha.9-SNAPSHOT",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a1e72f7626acf77c61b0720c5f26ac63"
        },
        {
          "alg": "SHA-1",
          "content": "752b3665a9883724ff234c1e69e950f919cd76d3"
        },
        {
          "alg": "SHA-256",
          "content": "b69ed1a5f081762d8f039fba1c7b0a497de5fcf5f37309fcf8b9e28ca899f08e"
        },
        {
          "alg": "SHA-512",
          "content": "38cc3372a65e5df11b8f6781bb0e733e40b45fcd20fc0281f5d351491863284740548aa457fa712f9e320b91777ae261a384c5d389128006613d3c9a09eb2834"
        },
        {
          "alg": "SHA-384",
          "content": "623885a45e1196724c975149b0dac023fe71c4bb2bb25709c7af5d79b2066c8097a372ede2467ac2c3505730835b0bfe"
        },
        {
          "alg": "SHA3-384",
          "content": "2725af1c7039d8f71c12cc61b732db076e413c659ff12154dbf614e29f609df2277ee1ffe4ae96e0b7a635108e6d7387"
        },
        {
          "alg": "SHA3-256",
          "content": "4a077ae0f02862393d8aafcedf908e6a834f7f7573d3b37ff4f73c922671d39f"
        },
        {
          "alg": "SHA3-512",
          "content": "0c4499f5f1732ae9edd38207891339d2ae330889a7a2b5bf493629638e4bf2a7db582aba3584a74c5f4e1f52d125f87729ba765f37190fe36c25e2dfdfd12e42"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/smallrye-config-secret-handler-file@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/support/smallrye-config-secret-handler-file/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver.git/support/smallrye-config-secret-handler-file",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/proto@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "proto",
      "version": "5.7.0-alpha.9-SNAPSHOT",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "49e488e00bded70e2c66d89647a434b4"
        },
        {
          "alg": "SHA-1",
          "content": "d697c9e973a671f1819e68964b5755fcf60f834e"
        },
        {
          "alg": "SHA-256",
          "content": "9dba7e2792d8975fe49b5f3511b8f83d495a4dbe6126b5dc9d8aa29d0e7439ef"
        },
        {
          "alg": "SHA-512",
          "content": "a5dc01df761c79c86df7fdf56687674ef81fd64cc16fd9701ad259c04492f6d3358dad00527ac51401bdcf793b62d0206abf93d4e11949c45ea2d09e4de2bb19"
        },
        {
          "alg": "SHA-384",
          "content": "ba3f2cbe0379a279970adf5908fb1c75b27cb2f4bdb28147611767c80f5da7211fcd25c7f5f3513ef99ea6361ef8f0b5"
        },
        {
          "alg": "SHA3-384",
          "content": "04edf469332d250f371e850044d2a360bd5b26cc509554cc073c6c501f627101256c663c8b319e4f94e2b943970d4888"
        },
        {
          "alg": "SHA3-256",
          "content": "4e97a593ac17f530b00b6247dc8e4290003ab0eb22369217439163d6880c6704"
        },
        {
          "alg": "SHA3-512",
          "content": "01af612f727ff80670ea32e353e2289c0f79957409d07720de91a945d5dff59ef150067bc768cb2c9d943c24229e164fdd2e8de7130ca8eca08b0c1d9e564ec1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/proto@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/proto/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver.git/proto",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/cyclonedx-proto@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "cyclonedx-proto",
      "version": "5.7.0-alpha.9-SNAPSHOT",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "13022d39ff159bccd2861ecadab7da42"
        },
        {
          "alg": "SHA-1",
          "content": "054933631ecdbe71bd677584fb297f98aa129aa1"
        },
        {
          "alg": "SHA-256",
          "content": "1336c743a8d82ea83d8ebc679351e2ac00cca65a65aae04e97df2b5e96a2d143"
        },
        {
          "alg": "SHA-512",
          "content": "1aa253f7645958247358d6babb07287654ed4d9d6f975de5003c6e93b77d3ad96b74d7d80272e6056a7e5aef2ce5ba2359fb6796f64714eec6e2be5d9276a768"
        },
        {
          "alg": "SHA-384",
          "content": "2ff8b9f6b37ad79ebf13b8c8843abb1ce05b5a82952d4d435922c447dab901e82c9f52f7c914ab5af5d266492b6108d0"
        },
        {
          "alg": "SHA3-384",
          "content": "6e397e2ca46c0932e80357e6630883c8f0f077b887d286afc4fdee74ddf199b673a9fa49ed3640033248ee4cb3edd615"
        },
        {
          "alg": "SHA3-256",
          "content": "384429882ec5d50d5b4ebc816e3d3f6c9ee0ac4bb54bfe5829fff7fed213b1d5"
        },
        {
          "alg": "SHA3-512",
          "content": "7eda5b2b46aedec9995009db0b13fa6352a924d69d48ecf72bfca35637fd85fd287d148da714616c0cf9d5796c3923b3f07bf04266e1f9a44d561407622f29a3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/cyclonedx-proto@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/support/cyclonedx-proto/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver.git/support/cyclonedx-proto",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/secret-management@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "secret-management",
      "version": "5.7.0-alpha.9-SNAPSHOT",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f18bab66eec9f5bf68a92c6f878c1902"
        },
        {
          "alg": "SHA-1",
          "content": "6e976238168062260f22b379f082e93ebe9ad13f"
        },
        {
          "alg": "SHA-256",
          "content": "6090f309fe71b3f7392be8ce823275b9a0dd8d77e59aaeb05a6da4d7ddbf8f40"
        },
        {
          "alg": "SHA-512",
          "content": "015bd3c0572ce31099ac01bdb7159ce32c40082e37c2b12f483ada5c55761a0a1c3afaecf363e9876d5614a5432e60afadd8c672e681f17341e18711ceae1c7e"
        },
        {
          "alg": "SHA-384",
          "content": "60551052be5ca20db69bc1992203ecf5155049b09543c087c757198d4c2b3a8cee822c2c7333e5604e49eb7f5f685cd8"
        },
        {
          "alg": "SHA3-384",
          "content": "e42b5954de397760abb02b3818621fbd76cb9ebd39464b0defd31f44e13f76c1adfc57bf64c6ab37c028e36b03fc0104"
        },
        {
          "alg": "SHA3-256",
          "content": "821211ee75de3b6393dd53744a91026e7635dbe558b9061baa2022113eed9e84"
        },
        {
          "alg": "SHA3-512",
          "content": "e32af8f38f0a0cd148de6664131910ca3714e0e8ead4ba41c874e954d2531998158e5046e411db5abbe30bb7c3d1f3a7f8c15dc7761e362444270d6bd93d4b59"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/secret-management@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/secret-management/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver.git/secret-management",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.crypto.tink/tink@1.21.0?type=jar",
      "group": "com.google.crypto.tink",
      "name": "tink",
      "version": "1.21.0",
      "description": "Tink is a small cryptographic library that provides a safe, simple, agile and fast way to accomplish some common cryptographic tasks.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f710f7b1331937bfdda94cc0a1e8653d"
        },
        {
          "alg": "SHA-1",
          "content": "cfb40763a9dc2e0cd887bbb3b1a0002dfa1216d5"
        },
        {
          "alg": "SHA-256",
          "content": "065086dbbd61c95529f782966c3462838cc8a801ba78420223aa319175a444ff"
        },
        {
          "alg": "SHA-512",
          "content": "d2683a4fd5af1f0bbf5ef97d16e10c7bcb7a58aaa75dcc0ebc25e8cce68296b728deb6ae2ca0d0569b088cd1b98efb9d5ede4475761fc53c40b77939ff9da6d1"
        },
        {
          "alg": "SHA-384",
          "content": "7192392f6593290a578b78ca2b4cbc31b2ec456aa8e80bae52817abdc434ea19079473c220d57867ad30d39cf0f61ac9"
        },
        {
          "alg": "SHA3-384",
          "content": "6376978f10ec2a1ccf7cd2434fca6823e2145561bc53329ff3fb7f596f69b59f13c98d3fea225d165902d920283b3dd7"
        },
        {
          "alg": "SHA3-256",
          "content": "9e4f60fb275e64c2f8e883cc088dd9f976d59d435cf936c22b27ae2cf1e4c7bc"
        },
        {
          "alg": "SHA3-512",
          "content": "35f13efd45722d54899a5dc3cd58500128a9140f6a9d253fa8af41fe138296642d3923299a58594cb07907dde214d3538719ab0d8c0785aa76d7d29e95ccfa4b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.crypto.tink/tink@1.21.0?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/tink-crypto/tink-java",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/tink-crypto/tink-java/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://groups.google.com/group/tink-users",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/tink-crypto/tink-java.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-analysis-api@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-analysis-api",
      "version": "5.7.0-alpha.9-SNAPSHOT",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "fe2f0cf62c0c2fbb94155e47b4d293a4"
        },
        {
          "alg": "SHA-1",
          "content": "eb66b7a6ef7951dcdde060ec50dec28c0e8a8d1a"
        },
        {
          "alg": "SHA-256",
          "content": "bb9475b7d5c9da8819bec45655f6e90c7d256fa2c500b4684cd89a46351f9745"
        },
        {
          "alg": "SHA-512",
          "content": "90ca8b543df0f87063f1ec70b9a4f8a2e5c0c6d97a799df83caeced3b9e1eb582cd99b322b3c969d40d2a84e4189b2b06525f07334a64429e5e1fb2d88784de3"
        },
        {
          "alg": "SHA-384",
          "content": "95dbe37eff48a43a940187d734225fc2deced4522b56925266e2d1c03cc27f108de16b001434bd4347bed61cded66f1d"
        },
        {
          "alg": "SHA3-384",
          "content": "187d4d99553e38e59da9f503cb7d0e540f1f7a6ae7a8feed8a07d52d4cf9900330e5500ad067e84d5ece5cf7e04b6a58"
        },
        {
          "alg": "SHA3-256",
          "content": "f749d8f3069d356b64913cdc0d4d6280edb13c759eff0396bfc7b7551e7f70ab"
        },
        {
          "alg": "SHA3-512",
          "content": "45c3993fdf0a74d19c5af29ef63ff6a1e99b5b5064ec17629a2b4787ab26b97918f42d17d2bdaf52aadd9b42310c31956716e49f8967eaab36dbe3ded6116471"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-analysis-api@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-analysis-parent/vuln-analysis-api/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver.git/vuln-analysis-parent/vuln-analysis-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-analyzer-internal@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-analyzer-internal",
      "version": "5.7.0-alpha.9-SNAPSHOT",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a61378db10faff1fc93ae8591020154b"
        },
        {
          "alg": "SHA-1",
          "content": "61f55e1b2233643b98296e6f3e2bb2ed5817e4f9"
        },
        {
          "alg": "SHA-256",
          "content": "94362d25e6882c1d6bd9656588ee7b9b8a47141469294c5a5cd5f7f4e0e667e8"
        },
        {
          "alg": "SHA-512",
          "content": "807bcc601ade4481b9d4f8ebd6300fe5fbacf1a42f9b732ff362ebdc414210ddb20bcb2dc03e906e4e5b65cdea19a34fc96230aab5596d3efe577b6dead0032b"
        },
        {
          "alg": "SHA-384",
          "content": "1ad3605ce979631150ec973d32f3dc55557ff1975edb08f22def92bccaa7bdc13db97e03f011dc8dff850de1a3e9502f"
        },
        {
          "alg": "SHA3-384",
          "content": "47b369c39fc3c2c27c864df91954583f4e62284e5a4418fb2b23ae019e33aa57ac9605c034c606a8f980c2aceda3fd93"
        },
        {
          "alg": "SHA3-256",
          "content": "2192ceae2c5500a29a30950ed76acc50cc49d9a5353d8faafe93ef5c40c6c3e1"
        },
        {
          "alg": "SHA3-512",
          "content": "c98d00275f431ef5269c4df09ee5170a1bf1e2916579ff453c52ad827644395600139351ecbeb24d79bdd24b3c22d1be1373e9f8bd44bce27b2cab52de553f37"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-analyzer-internal@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-analysis-parent/vuln-analyzer-internal/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver.git/vuln-analysis-parent/vuln-analyzer-internal",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/os-distro-metadata@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "os-distro-metadata",
      "version": "5.7.0-alpha.9-SNAPSHOT",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d911ae803c8c30edd15aca6d749f0224"
        },
        {
          "alg": "SHA-1",
          "content": "f6e5c86b0670bf397ed57bc9994c0b0067afbad9"
        },
        {
          "alg": "SHA-256",
          "content": "a5e9298036af57415ce93d7f8afb0b59127e76f7de0988ae23590b9329854e83"
        },
        {
          "alg": "SHA-512",
          "content": "b23962b42bb87f3be410b23d8f659d081d2b1f3df6865447423bd4e839a1f61b335f4da27bfe8ab4dd11a8b186eb480a56666ef6301c05b03f48ab3fb62e2fa2"
        },
        {
          "alg": "SHA-384",
          "content": "1c4466d08cd03c4faaf22b320402ff058b418ca0192421234f779b28569614350fb318280d8f0fc9b74e9adfaa80be49"
        },
        {
          "alg": "SHA3-384",
          "content": "c1b5fa9d238a474d7a7ea43eb5311c7b6491eec78d186a7aa6198efb57227b007de1a66db3152f28dc1fdf3fb55ec470"
        },
        {
          "alg": "SHA3-256",
          "content": "70bb0ff5ac3616fbb71c9afe038053eb3a9e8a9ecfa8326a6c817cf8e80b17d8"
        },
        {
          "alg": "SHA3-512",
          "content": "8e1ed0bd430a5ddb4c8958b4d50efc9a3c837e94def08cf931e9303435b6010d312dacdc9b4275f001f546fd36fa9f8425dc5adbc5c1164274d4f33390e2efc3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/os-distro-metadata@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/support/os-distro-metadata/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver.git/support/os-distro-metadata",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/package-metadata-api@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "package-metadata-api",
      "version": "5.7.0-alpha.9-SNAPSHOT",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ccef1896b31878cbeeb0ccedb2592bf3"
        },
        {
          "alg": "SHA-1",
          "content": "aa52982f48aaccc607ad744c39a293120328956d"
        },
        {
          "alg": "SHA-256",
          "content": "34072eac14326cca02e90605b13a2c86813edad8722681623ca0ddfdc082edad"
        },
        {
          "alg": "SHA-512",
          "content": "af8d8108d3408915c80b71325fa32729081783c0bafd2cf99bd81baa2b51c42baf837f0176e396d34388492420f4140ed7c9b3cbcced984bbfc13f0fff97f28a"
        },
        {
          "alg": "SHA-384",
          "content": "66ce24196f58ce73e9c4ba807d02fbc859c2c5594a7e228e308a620a3a94846a4fe6f99bd6fd8c272e4024e7142c3d06"
        },
        {
          "alg": "SHA3-384",
          "content": "91a159f65357511f49622c4caa2afff34466c58e5782e72db8f8f45f1221ae7ab4f972d95302b202ee73c58f9fecc231"
        },
        {
          "alg": "SHA3-256",
          "content": "915df5d9dd23adbfec59734b986eee6e881efc517c35a68412b51c2167bde9f6"
        },
        {
          "alg": "SHA3-512",
          "content": "06c07c5fc1ac835c2d2eca904b5f79490998ece551acc4f1e2892a5cce66961daaf0f6014195339aa0a8105c6c658b048a07c40f70b29edd743bcb0583af11e3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/package-metadata-api@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/package-metadata-parent/package-metadata-api/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver.git/package-metadata-parent/package-metadata-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/package-metadata-resolution@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "package-metadata-resolution",
      "version": "5.7.0-alpha.9-SNAPSHOT",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "57fa04e20b8866deb0c989305779d704"
        },
        {
          "alg": "SHA-1",
          "content": "bcd7afa68f3bcff804014c2eda74fdcaab0d229e"
        },
        {
          "alg": "SHA-256",
          "content": "27b89fd0891f725993fa57e80a48ecd75baf50966c0a140608156c39de58c9fb"
        },
        {
          "alg": "SHA-512",
          "content": "3ac6efb64754ebe724e0d8058d037fb234f843bfb48fc85bca0382e9d51f41aa218e81ce31973237a4cc029d46fee46d36fca959524dfa00f0351e4a705c73cd"
        },
        {
          "alg": "SHA-384",
          "content": "416bba5bc0bf55fc7c613c3d3d08d0f8745eced96b25651945b99749455d99a63484de10e97f3a2e7074431ccfdfd018"
        },
        {
          "alg": "SHA3-384",
          "content": "ae8654fbb5f5a556ab219bb94371d288b95323236ea9c3f02b825c90ae66c669ff9401c4dbf25998c7b8df56bac2596a"
        },
        {
          "alg": "SHA3-256",
          "content": "6fcc31057f1d407cfab3cea24febb768bfe8763fda33ae9e8687c81c9d602b1f"
        },
        {
          "alg": "SHA3-512",
          "content": "eb7c3ed3cd74496456e73eacc577fa7d289b4d3c03a39a770f5ffc2fd3036be333e155622d22eff0d390755d72b7aee9f57b04027bdae3de0fd81e011ab34473"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/package-metadata-resolution@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/package-metadata-parent/package-metadata-resolution/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver.git/package-metadata-parent/package-metadata-resolution",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.brotli/dec@0.1.2?type=jar",
      "group": "org.brotli",
      "name": "dec",
      "version": "0.1.2",
      "description": "Brotli is a generic-purpose lossless compression algorithm.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4b1cd14cf29733941cc536b27e6aedfa"
        },
        {
          "alg": "SHA-1",
          "content": "0c26a897ae0d524809eef1c786cc6183b4ddcc3b"
        },
        {
          "alg": "SHA-256",
          "content": "615c0c3efef990d77831104475fba6a1f7971388691d4bad1471ad84101f6d52"
        },
        {
          "alg": "SHA-512",
          "content": "d4cd2b33f7c358012ff01db6a13ebfe1e8051a580698bffcd942c47451012cf53ce49a400b1c8bf7502b01e631d79d7c6417202a145622572d79fd145ccde61a"
        },
        {
          "alg": "SHA-384",
          "content": "d6b8ad9d0ee6baf8c3a29c1dc2911eaf207352e2c7de893a0185e987e7eae87827890c1d4dbf31c46f25846fbcdc08bb"
        },
        {
          "alg": "SHA3-384",
          "content": "d16c32130bf6b168ff4c8a3dedf1b17787f8d6f0eab9de21e51ed3ab1e7d85925dd02315972f6ca3a4493357aad545cb"
        },
        {
          "alg": "SHA3-256",
          "content": "962dc76a5c487de8d34308860ab65927bf91f50ccb12f37bffb036a7a05145a4"
        },
        {
          "alg": "SHA3-512",
          "content": "a82a3f79b57d30613606ca51dc432b097fa75aab5c87fb45eabec6d80ddeff1b329100b325bb07005aebaec166952c4599a863d4bfd5a684bad21103a2046311"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl": "pkg:maven/org.brotli/dec@0.1.2?type=jar",
      "externalReferences": [
        {
          "url": "http://brotli.org/dec",
          "type": "website"
        },
        {
          "url": "https://github.com/google/brotli/dec",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-analyzer-oss-index@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-analyzer-oss-index",
      "version": "5.7.0-alpha.9-SNAPSHOT",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "25d03b69ac832515dc739a815377f7c8"
        },
        {
          "alg": "SHA-1",
          "content": "403d026f4d1ca8fed9bd488726ff9dba159d6254"
        },
        {
          "alg": "SHA-256",
          "content": "fb65009a84a5fb04357df0b8d20c6713e77c717ec02cf2f13087d2de626bd0ae"
        },
        {
          "alg": "SHA-512",
          "content": "e357379d5537cdd2c6cbdec3861ca9e98f1b5be55f4e8213812d2bc1aad3c70f9de75e03d320f7a75056f5602a4dac7607270425221cb3862b5e27a464b0a640"
        },
        {
          "alg": "SHA-384",
          "content": "cc1d1d616b8e6d99014c256640a45a727c3fe83bf0304cb39742f19f377d96005363f0bdc1919f993267209fcf8a7194"
        },
        {
          "alg": "SHA3-384",
          "content": "8ca0597d996abb96da3371e38835400e1000a3082a7fd8f4dca8f7649ad2b22ae301537f33f387708990c785f7501caf"
        },
        {
          "alg": "SHA3-256",
          "content": "72f08b1da045ddd8a48d6254ef43650753f750500537ca38e54a4e7b058117ce"
        },
        {
          "alg": "SHA3-512",
          "content": "c80c60ea9f406d87386ff245954bb4ec990c6d33bd227420e2fa1f58f2ecb586c7931e5bc2497ec1e9d4a0d057273c4794f4f697d1c6c5e22b5d8758a035d721"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-analyzer-oss-index@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-analysis-parent/vuln-analyzer-oss-index/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver.git/vuln-analysis-parent/vuln-analyzer-oss-index",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-analyzer-snyk@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-analyzer-snyk",
      "version": "5.7.0-alpha.9-SNAPSHOT",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "11b43ab1bd490c24298b3a4f31453ff9"
        },
        {
          "alg": "SHA-1",
          "content": "a383094fe32e10cdc7ea477d9bbfd7f3564c5dad"
        },
        {
          "alg": "SHA-256",
          "content": "5c0a3c96cdfe77de05685b47b4bf18d8bd4a43e50cb9a575cf11219238cd9811"
        },
        {
          "alg": "SHA-512",
          "content": "774fcc392bfeef4638a3dac8c3672fca6cfc6a3112965756e3c6befb324242ea83108eccc1069143a3b3f5b30a341bfd92fe3722f2836bba3c08822913f47966"
        },
        {
          "alg": "SHA-384",
          "content": "4e3cb73547e0bf1a3a888b096ef113c8b410c33e0a5b12036116aed2dce2886c01cfada365043fd55fdf3bd521a2972d"
        },
        {
          "alg": "SHA3-384",
          "content": "6be0bce2e47b090d1f85416e5628e6b21350fbce4f629b580c46d4a41c36b78d92563a3bd7f953dbb4220fa42884713f"
        },
        {
          "alg": "SHA3-256",
          "content": "9bbce61edf2c780713944615b98fbb7f4b8c0420e3cb1dad60c956c25b1fa23a"
        },
        {
          "alg": "SHA3-512",
          "content": "438d6bdbd1c0147a8874e48de30bfc5a2d8954c038da6dea93744cd8239ebf6020e1d22f65fba53ea2d18a5233a126fa83054cafad86ffd0700df1ec815e7910"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-analyzer-snyk@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-analysis-parent/vuln-analyzer-snyk/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver.git/vuln-analysis-parent/vuln-analyzer-snyk",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-analyzer-trivy@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-analyzer-trivy",
      "version": "5.7.0-alpha.9-SNAPSHOT",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0d6543f52cfc2af269e4bbbaad65306b"
        },
        {
          "alg": "SHA-1",
          "content": "0648001e5e4a1f9352388abc303a103735143a25"
        },
        {
          "alg": "SHA-256",
          "content": "97e275756224ae78ca263a0901adc7a5e210d1c043808fae9eb021fd9df47e1c"
        },
        {
          "alg": "SHA-512",
          "content": "d07637d9153d9f4131aef0fb918c8aa0870cbeb842e7a0b244a051b5c2c8342c0770e5d6d7b73015abda00c57e1345205117a98c7497a37fee206b81f60195c3"
        },
        {
          "alg": "SHA-384",
          "content": "6d1c22c465b14e464c398f6886dd31b69ac61614206262be2c8aaf0c242e95221a0857c4428de50692fc4752471c9f01"
        },
        {
          "alg": "SHA3-384",
          "content": "f55cd5c576e10f4383f48a132e6d612e62d634f364f572f7cee8b2d782cb7bed9841083761427cc8b089afa4b07b14fe"
        },
        {
          "alg": "SHA3-256",
          "content": "b34e2f653ebd0e1616f6de21c39c3b85cd9e73b8f51ab195c9c1054158142f4b"
        },
        {
          "alg": "SHA3-512",
          "content": "0d2fda45a3523c0fda2d8b6e33676f2e3ea776119cc2e04f313dae22bbd4d61643b49b51d44944a2de616169be8ce01b27a7e134bfdd01deb4034ecd2f0d1e6c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-analyzer-trivy@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-analysis-parent/vuln-analyzer-trivy/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver.git/vuln-analysis-parent/vuln-analyzer-trivy",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-analyzer-vuln-db@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-analyzer-vuln-db",
      "version": "5.7.0-alpha.9-SNAPSHOT",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d42efbda0cb8ae144a476975529908e3"
        },
        {
          "alg": "SHA-1",
          "content": "2a84f4d8447b6d26a90844f04a06656b73c8f250"
        },
        {
          "alg": "SHA-256",
          "content": "2558d3f915b4530dedcd6f5b1dca5aee7fa8d80c3331911ebb2191f123a8a7f0"
        },
        {
          "alg": "SHA-512",
          "content": "c42cb52f2bc895c706724cfd0200d5b57c86203c06ae0284a861db58bbea0065221b9d5896705b8bfb2b5d3675d0c49faa92623c2211d84099a001016b78c430"
        },
        {
          "alg": "SHA-384",
          "content": "7cbf7a885b150821a273c87b04f475e837f7aa25aba9cee25c833e2409bdf6a4f6ed8f0924c0b54ca7bacc1ebe98c2e0"
        },
        {
          "alg": "SHA3-384",
          "content": "c4eb0f484ab2fea37495d941e009745dcd127f989886a08074c1941fb0555cde84c45a215bd5f752d09739d64a61e1c5"
        },
        {
          "alg": "SHA3-256",
          "content": "f5fe280125ff8fceffda8776cb5a949c622a5967cc5d30509aa45e71b16a13c2"
        },
        {
          "alg": "SHA3-512",
          "content": "f81705c6afa1ea5380bbe7537fa67b4d623599e1b33e551e9c3c0477ebddd46056660308f2d61d9779cab64cebb633abe156dae566ed8641faed1daec7be20b3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-analyzer-vuln-db@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-analysis-parent/vuln-analyzer-vuln-db/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver.git/vuln-analysis-parent/vuln-analyzer-vuln-db",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/dex-engine@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "dex-engine",
      "version": "5.7.0-alpha.9-SNAPSHOT",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1bc64b3291189f072b384247a604e55d"
        },
        {
          "alg": "SHA-1",
          "content": "fc0f619bcd2fb1d192eeb527a49296c121732508"
        },
        {
          "alg": "SHA-256",
          "content": "5da03206293054740f425a7c7f664767ab29ececc1c83e2706ad687c7b305aa6"
        },
        {
          "alg": "SHA-512",
          "content": "1a3a2ebcc9dd951fe4b5bd4458e1ab87353dfa881c3e7fe179557ffc07bb88537c8aac0a34f08aea3dca2ebf138d7044d92d973afe7bd8c55ae6039178dc81e1"
        },
        {
          "alg": "SHA-384",
          "content": "faf286fc67337c1beace6cccd78e8b07983b698a85ea872f0cfd500d108121b0367947e9fce01c871da02c31024d2bf5"
        },
        {
          "alg": "SHA3-384",
          "content": "9d7dfbce0f041ee2e638ca0a4957247b2bc3edb374168a0e0ff091b404f1e119959ffd30911dedb8fca61904039b97e7"
        },
        {
          "alg": "SHA3-256",
          "content": "7707f1e3066cd23354fbd494f556b2ebf9d4c7af3718cc5425e09ee3848529f7"
        },
        {
          "alg": "SHA3-512",
          "content": "1b8ffa2efded08ae45b0e8a1e2479f97785c72fb0b7bb4af0c2c6723248d05b4db91d46bb3ea20034faa3d271661b827b3435308fe8b5ea8e6a8bd53cb1965cc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/dex-engine@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/dex-parent/dex-engine/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver.git/dex-parent/dex-engine",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/dex-api@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "dex-api",
      "version": "5.7.0-alpha.9-SNAPSHOT",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "17f440b159a88add3cdc5dfd35f94d6a"
        },
        {
          "alg": "SHA-1",
          "content": "6ee278ac15f305ce656b9973dda67f4576bb5fd0"
        },
        {
          "alg": "SHA-256",
          "content": "486b953a990a0fb08e0d2c35f64dc0943ac7c809e4cb4c2dfe37b57b1c662e66"
        },
        {
          "alg": "SHA-512",
          "content": "8da10d02a87c5c5e9a01541b36c62fbfffe4c1fbc152fdcd4a7d0245f97b545d78963e75e11ef67173d24403359f4f8d2fc1a00e44d6b823789767360e0108e1"
        },
        {
          "alg": "SHA-384",
          "content": "bd5fe1ce6ea03f89f4eb3e176cd26c61ea9d0d4d336c2d37004f99a226ab8d135df0d8af1fcfebfada1647e4c3d330dd"
        },
        {
          "alg": "SHA3-384",
          "content": "5e94240bc51780be91c35b8ecbe89cf3d12750d9044b0769d69254a80853876142b09877c696b524609d9b294ebf13de"
        },
        {
          "alg": "SHA3-256",
          "content": "2dde2e3cfe48f58bd27fff4c011e50b0e462fba64a756171790c4f4bc2dac9c2"
        },
        {
          "alg": "SHA3-512",
          "content": "49db3615d0dd38591f870b90b20f7a8541907391cb2b09696cc4371b2fdcb469bef199759b1c5bc681e4baaca8c8be256616ea04cd392613e6474509114b1839"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/dex-api@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/dex-parent/dex-api/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver.git/dex-parent/dex-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/dex-engine-api@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "dex-engine-api",
      "version": "5.7.0-alpha.9-SNAPSHOT",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a6d8cd274c9bcb63b6fea086b3edae1e"
        },
        {
          "alg": "SHA-1",
          "content": "33326544966a9308fc2d864964f19ab6f84c88d1"
        },
        {
          "alg": "SHA-256",
          "content": "5672f7ac00c08d135cf4aabb3a4018cae29bbf133053545922068b73402a0889"
        },
        {
          "alg": "SHA-512",
          "content": "9a46e8ead3d5b4948d3cd5f86d21d9305f7af95b7007efa443e4d6bcff0f6069ecea9547afe1f54e71de1e30a2b623ced9c0d5323b9a8d84adaac40ff22c9d5a"
        },
        {
          "alg": "SHA-384",
          "content": "781ab6a539ad831bfecdfd9dea0f79c5c836f279e191f2e4ac45f50ec51fcc7cd4a13ac58c4d24aec2059c620d565f18"
        },
        {
          "alg": "SHA3-384",
          "content": "d5a546e3a355bd2a15567fabb99ccdfaa5a76cb61251f16bbf2a9e2eecefbc568cb170598522d0eb6ddc97fde041d881"
        },
        {
          "alg": "SHA3-256",
          "content": "7f93663d6dc014498508ac0842523c993f86de30b7c72cc6597ba0f98906fd70"
        },
        {
          "alg": "SHA3-512",
          "content": "c812e033fc0473e6aeed0c212ddf07805e5188e2172af88ded114f81a8d76c2f38686a8571da5f9d63141847548db9802b3b5ee20bcb98446b13b9fab5ef0c62"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/dex-engine-api@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/dex-parent/dex-engine-api/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver.git/dex-parent/dex-engine-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/dex-engine-migration@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "dex-engine-migration",
      "version": "5.7.0-alpha.9-SNAPSHOT",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9847d08d0d1f61a30ed0a5eabb441353"
        },
        {
          "alg": "SHA-1",
          "content": "3039aecf9c595be9d09d0c16eb6cb65c1618172e"
        },
        {
          "alg": "SHA-256",
          "content": "34668f17e0da2fbf6ba65c2dcf95f86b46332aba88b34b49cba1e6e084c4b077"
        },
        {
          "alg": "SHA-512",
          "content": "f46af5371f09f15122e01d553e5a960a70598d32f0a55f73a944cfab572239d38c1bdc9e9d37c3e72a0a8be85ebd77c7ab104ed5033b345063012d25788330f7"
        },
        {
          "alg": "SHA-384",
          "content": "5f399a190da2be4d0483997031341ff2fb9b5011266db3e5e23baa3fdcffeb1d89aa80c95cfca811b04fdc27b662b347"
        },
        {
          "alg": "SHA3-384",
          "content": "27863ffa39d9460f4e03d95ad9a35af2d1fe85e8be9e34781bd4fe94302029d63d2d35b643a49aae9a4d16f1be18e163"
        },
        {
          "alg": "SHA3-256",
          "content": "cceec8865d3d084fd9d27a1285c672d8671abf374e261f93f39f9bfada398cef"
        },
        {
          "alg": "SHA3-512",
          "content": "97529273558288519c2928903f289e1eb42e1876a7f2261f33d8f879be81a3d035e7f19d4d5a459a3f48c95a6d2524a8bec219367c90fd139962b639f8d56958"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/dex-engine-migration@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/dex-parent/dex-engine-migration/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver.git/dex-parent/dex-engine-migration",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-circuitbreaker@2.4.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-circuitbreaker",
      "version": "2.4.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5e142f710747b6d4746413aca6757222"
        },
        {
          "alg": "SHA-1",
          "content": "10b06bc2b679f5682f5528b0058ba1a166734db5"
        },
        {
          "alg": "SHA-256",
          "content": "31ab1d15570357271b8c28d82b2f412c5f36a81ac253145aa32177c4f087efdc"
        },
        {
          "alg": "SHA-512",
          "content": "b5d23f8ddabb8d22585e93db1d5ed0b11cb2807c1279b45c74988eaf621e87324cd9a74deaad8b17c6b5a7219f2a17b32550be478c0621cb9fea762f3f5d867c"
        },
        {
          "alg": "SHA-384",
          "content": "826513581ccb029b95c9fb4b579035131a3166e6d99381b7084875fe2997545dfc41956f9449f3f4963d233b71f9d647"
        },
        {
          "alg": "SHA3-384",
          "content": "6f25185fccf89be43a7aef0349ce69a272ef09bc179d8394932bf473cd17650d143cdc6a24a3aaeb77bb806be018b630"
        },
        {
          "alg": "SHA3-256",
          "content": "6de361abc2ecbde73d99917ee11cc808c12f72f4a4c0da8682835675da985f4b"
        },
        {
          "alg": "SHA3-512",
          "content": "3baa1529e89d34844eab621f170ff4ea78771f15bdda9a5ff50ae1095b3d1c579b4ca45bc169c654f8934118325bd82ea6cdb3977d06d76218b2c128591b9a44"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-circuitbreaker@2.4.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-core@2.4.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-core",
      "version": "2.4.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "876d87ec308d8636105e17577dc32ec0"
        },
        {
          "alg": "SHA-1",
          "content": "917315545f2ae0221ef3d6c27337b9ba6cba2702"
        },
        {
          "alg": "SHA-256",
          "content": "a15d25c4709a4c12432cd0a4f620e37a00a82dbe112f5d1a7a68b31325ffc978"
        },
        {
          "alg": "SHA-512",
          "content": "0b297e68f9e4542a724d507697c5476568dc8459156e70dc2e4b3fa812be7a6d070c603a58ba9eb1e2331df78479da71a44ada6a4d303f6f0ab224cb24bb2f07"
        },
        {
          "alg": "SHA-384",
          "content": "73498053467091de64ba6cdb62948e268afba62386a03fabcee6aafcfde6ed152bcec726c1f7d78d5b9ee7a1c34008fe"
        },
        {
          "alg": "SHA3-384",
          "content": "d1adb2a7e58982ff23beafd2aebfd2b3769d37caa965a1542d8d1c6d3cc1499117d874fa2e95c8e4b1c98033ecc37656"
        },
        {
          "alg": "SHA3-256",
          "content": "db568c467b698f1e695e75982105fbce261f91ba528539cc3ff10c67e81562b5"
        },
        {
          "alg": "SHA3-512",
          "content": "635fd7c97582d1deaf7b3fc74ff38d796656fd110e881d3cf793aafd30d73e649a25e58f7575bf8ce54e85291061871c21bbf31c19db937902b31a5de27f0054"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-core@2.4.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/file-storage-api@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "file-storage-api",
      "version": "5.7.0-alpha.9-SNAPSHOT",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "60250e2f37fcb55234b4eec83745b4f2"
        },
        {
          "alg": "SHA-1",
          "content": "4c938acdaecffc6aef9e6be765fa69b525cf7a84"
        },
        {
          "alg": "SHA-256",
          "content": "60eb49b1ba8b67305b5dbc27a578665d6d178bd74f89da9a2999109402af05c4"
        },
        {
          "alg": "SHA-512",
          "content": "8e455159150cbc7a613ab35acca75e46872ede5f24489b5b998c868504a1bce658315ae72b27c69dc65fdc28de5027f021a16e42dc711e060fa193efb545a7b5"
        },
        {
          "alg": "SHA-384",
          "content": "1feed4c2bc2aa9f74b8a9becef3a36404b98af78a00a094c044b8da291cebd73f829135681452ab3d47492cc45e34822"
        },
        {
          "alg": "SHA3-384",
          "content": "7013d305b38c68751d59e53b12112ba1ea6c2f90b850cb918c3084e7642bc1cf877fb33a373caf75153cfd0af2dac193"
        },
        {
          "alg": "SHA3-256",
          "content": "e8ce34876050ead3c02fdf49dd2dd7fc00da13a26d58919d67f279b87aa4004b"
        },
        {
          "alg": "SHA3-512",
          "content": "3fc386aecec16c480ea2db773c77e7ec2b52b61a0b3699684951e456689cc8291155bf055b41993e6c76cdef548ee7037a48395f3a4d8ba31284bfeeecf897e2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/file-storage-api@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/file-storage-parent/file-storage-api/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver.git/file-storage-parent/file-storage-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/file-storage-provider-local@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "file-storage-provider-local",
      "version": "5.7.0-alpha.9-SNAPSHOT",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "3efa95e5cdefec2a806142d6f30fec8b"
        },
        {
          "alg": "SHA-1",
          "content": "20eeb618ab20516120b9d4eb647b48ab402d3b35"
        },
        {
          "alg": "SHA-256",
          "content": "5a4e2cf266dab35947325105ac508a6cdfa787bc81d4b3a5bc0b2ee891ff495b"
        },
        {
          "alg": "SHA-512",
          "content": "037244a56e65e3f75ef48c2b5db2a8e9447fe79951fccfef30e68941de10f999fed18c3cd399ea75605fd1be7f6337f040d0eaadbf515df571d5c76d370f322e"
        },
        {
          "alg": "SHA-384",
          "content": "81db10f56c0149492662460b70f70a588d705cf4093468c55df27f47b6e2a3b8efc2927da17cff55d0396499fbb36c40"
        },
        {
          "alg": "SHA3-384",
          "content": "3f5555e60c9a470c398f2f7a0eec25e4bde122fa82f45c190880aa4f4c89879bce99713f5e25ea1962ede56f03575d3d"
        },
        {
          "alg": "SHA3-256",
          "content": "70f2bcd0956c49a121a1d87578ba8e4b4e3e7c194f5313d5e39354bea62f7302"
        },
        {
          "alg": "SHA3-512",
          "content": "2803456d2ae88e6469c121118c3be239e7a0b26c22bae5c2664d138eff8564b921ae1feaf7bdc831ed5e1a49c0d6fab3975d94831e5d82490bfe9e803f9318c0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/file-storage-provider-local@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/file-storage-parent/file-storage-provider-local/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver.git/file-storage-parent/file-storage-provider-local",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.luben/zstd-jni@1.5.7-8?type=jar",
      "publisher": "com.github.luben",
      "group": "com.github.luben",
      "name": "zstd-jni",
      "version": "1.5.7-8",
      "description": "JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "92c0dd78fd86fcfe232b97f4ec0cd41c"
        },
        {
          "alg": "SHA-1",
          "content": "beef8465018352b8adbcfcfafb9db098cfd11cb1"
        },
        {
          "alg": "SHA-256",
          "content": "69c9ef4e2ec232fae8febfb3280bec567bdfb7406627174b1a3c163031e29367"
        },
        {
          "alg": "SHA-512",
          "content": "d877daaf7c60502e37f365a56bc6f041a3fb07ada7650b2ff850be6b54c83d6c9f5032874b258f83d6b420ecb740a5fe06e8efa3776bbd0191be3e3bda32a181"
        },
        {
          "alg": "SHA-384",
          "content": "0014c08890d4f59a079c290bb1ec330362595fb824f12c53bf847a7675c505cff690e80d18affadafa74c9b0c1118775"
        },
        {
          "alg": "SHA3-384",
          "content": "981e91f8b447b9b28d5510ea541529c960e82695ebe881739ad8369928f8028a060e4b7da4c6810011fb301dd92bb8a1"
        },
        {
          "alg": "SHA3-256",
          "content": "795bcfc610807aa7539befdad44444286ae9dc9f1a5fd63e24e1ece18ee25c04"
        },
        {
          "alg": "SHA3-512",
          "content": "36389a1210e25127f147395ea6678b3777c345658d1f19542534b613f08481b516a07e28e7d98bcf31a32930a3d132dab70a451a8656a72352f75b5d2a924223"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.github.luben/zstd-jni@1.5.7-8?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/luben/zstd-jni",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/file-storage-provider-memory@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "file-storage-provider-memory",
      "version": "5.7.0-alpha.9-SNAPSHOT",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9e6c4115247d81be9eb39abcd6f612ab"
        },
        {
          "alg": "SHA-1",
          "content": "02b022bb0ee7e412152c729c28085419abfd6751"
        },
        {
          "alg": "SHA-256",
          "content": "06f3c1c07990bd51fb34919a09d992494554fa0295910403e4fab8f39e2bc947"
        },
        {
          "alg": "SHA-512",
          "content": "5836309eab61cc464f9ec491e9b13afb765946d4bda13cac4dca0031a0c06f53c5fd4fe667c4890812742ff7972cae93d5feb2684eb07bb9858e94c416be1201"
        },
        {
          "alg": "SHA-384",
          "content": "07e59069e37b785e518b978fc7e5554ad1d0964e678b56a46c3cede88984723e9c3c9d10350413aff027de7f2b6b7b22"
        },
        {
          "alg": "SHA3-384",
          "content": "c6c79a60c6244b803e81f2b6885392629281b0ec10b1ce79e9d659a2ab7ffd7d2e3c229125f31ac0755800974f269ed3"
        },
        {
          "alg": "SHA3-256",
          "content": "b77ec90c066acff8352bcb99730b9b9c87cfcd5a6f2cc3767d8686f7a2416d3a"
        },
        {
          "alg": "SHA3-512",
          "content": "65e2adfbfa4bcf3005724b6bf50a1254f69105f5197c7e9cbf88c4ffead7f602a79cc04e1701f71d2a48fede2394df2119bae899c9f20dd504f89479e131c4e6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/file-storage-provider-memory@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/file-storage-parent/file-storage-provider-memory/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver.git/file-storage-parent/file-storage-provider-memory",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/file-storage-provider-s3@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "file-storage-provider-s3",
      "version": "5.7.0-alpha.9-SNAPSHOT",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "3d007a9cd2cf57691f556c35e54524f9"
        },
        {
          "alg": "SHA-1",
          "content": "1c93906b124e8a99c380c2480dab80e26863542c"
        },
        {
          "alg": "SHA-256",
          "content": "fd19ba34571041f45933b100988830d3ba97f6f6e97c8b4ae7ea84f70adbbdf2"
        },
        {
          "alg": "SHA-512",
          "content": "4aecc008f151fe51e7e29646de58eed646c32d6a8bc8dd6309f5d7a2c9dcb4cc0ece33e7998648eed9144b67d9ae1881e966d530e3a787867eb1e64b90fed76d"
        },
        {
          "alg": "SHA-384",
          "content": "b019823924120fbba80db25a530d1b0298d3cbda53dc0e5ad3aa815c6d114ce62d55a9b1981537a4313bfa3fe71c1d1e"
        },
        {
          "alg": "SHA3-384",
          "content": "aaad606f5e6bc04ef4dc29dd82b799a4ea78e09dfc4007e662bad9948eca62a2f335058feb0aeefa17ed499d3d2e8885"
        },
        {
          "alg": "SHA3-256",
          "content": "c21348876a3233acb6414147a832ba9209c08686932127b70e5e8d7f6a74efcd"
        },
        {
          "alg": "SHA3-512",
          "content": "48a6713ae2fa581644d2a4d2d7e6fb30401d4b74de4f91080c2d1a53a75129f74ac018e347a5c2472d1228bb4d3f508bba5c5cc949f29666e896ce319f2a3bd2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/file-storage-provider-s3@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/file-storage-parent/file-storage-provider-s3/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver.git/file-storage-parent/file-storage-provider-s3",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-data-source-api@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-data-source-api",
      "version": "5.7.0-alpha.9-SNAPSHOT",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "eb1262d7edb042294d199d1ea30ddced"
        },
        {
          "alg": "SHA-1",
          "content": "8d276bf8e801c108c551f45b641e0d6c6ef5317b"
        },
        {
          "alg": "SHA-256",
          "content": "7562a2569d1752aae84b594ff32c0073b593e1777de629a63e5c22518ce5761d"
        },
        {
          "alg": "SHA-512",
          "content": "254b6435b2a683210c4f46e654f2303f817eb3cdbe04533448d5fc9760b43bd04ef48cd927b8bd055d8cd84961fccf290c3f3921d26198507495c64e8191ce0e"
        },
        {
          "alg": "SHA-384",
          "content": "64c2dfa46967732cc4396159888a26b51e6e740cf8c722a30c888687a778624ca62a9bd47e7caef60754eb4b1c898711"
        },
        {
          "alg": "SHA3-384",
          "content": "59fc34c47d4e0a1dd02dc55d79b6c597aaf6185fcd8dce959235d8991ac90049e07089b8f64a7f6b7c1cd728c405fa2f"
        },
        {
          "alg": "SHA3-256",
          "content": "192e378f5de80d4aab07b80ef3542222a4b4709533b940d09e66f9ab6798c1b2"
        },
        {
          "alg": "SHA3-512",
          "content": "fb1033b3bfca8b85035ce7e6a4cbf79eba136ffb0fdd1ce35e085a68a4529250ee53b1b6f99e1cd669820e5c345f499b5bbd79cbe185aaaf8d4ac5c819a68abf"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-data-source-api@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-data-source-parent/vuln-data-source-api/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver.git/vuln-data-source-parent/vuln-data-source-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-data-source-github@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-data-source-github",
      "version": "5.7.0-alpha.9-SNAPSHOT",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "79179939237417ef4bb6168284a7686e"
        },
        {
          "alg": "SHA-1",
          "content": "178a2a73fcc089182e5115edb829d52a2b980f68"
        },
        {
          "alg": "SHA-256",
          "content": "3d98e0b43ecdb874a05355a3abb9f0544535c99bdbbc35efaaa4818e156d0a11"
        },
        {
          "alg": "SHA-512",
          "content": "c26064ffc96b2c85290d2d964ce8d0bc669bb8e71fe941107866a392e23aa231a72ee8bb5a7c348b2395c41eb208a7f6eded481b1e8491b48a9268da3ee105ef"
        },
        {
          "alg": "SHA-384",
          "content": "6b2446ec99eb0058d4687b5236934e89fdfa05c3cbc101a4b716d5b3c74d95b844bbee2f06915e567f5e9685f81b9a04"
        },
        {
          "alg": "SHA3-384",
          "content": "ec32cc29869e1655e546ae5c2c225c51fe9ab43d0e2cbd22decf4e1de2405146e55c330a1cb3ac4fb09a7c80454a7ba5"
        },
        {
          "alg": "SHA3-256",
          "content": "ab7da5ff0e3d687688fb5ed5425b2d8f592f65b8df41b6c2771f3af41cd3c07f"
        },
        {
          "alg": "SHA3-512",
          "content": "a78f19934c72e11fb7fb2fa0b0fecdf912478015666f04850e270441edb3df125b8a7cf9311f587738fa550fe9dee6521b824a3531b22deffeb09bdc32136729"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-data-source-github@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-data-source-parent/vuln-data-source-github/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver.git/vuln-data-source-parent/vuln-data-source-github",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.commons",
      "name": "commons-lang3",
      "version": "3.20.0",
      "description": "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang\u0027s hierarchy, or are considered to be so standard as to justify existence in java.lang. The code is tested using the latest revision of the JDK for supported LTS releases: 8, 11, 17, 21 and 25 currently. See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml Please ensure your build environment is up-to-date and kindly report any build issues.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4b29562ded527aa074e1d44f8646dac5"
        },
        {
          "alg": "SHA-1",
          "content": "65897b3e5731220962e659e001904af3c3cbeba9"
        },
        {
          "alg": "SHA-256",
          "content": "69e5c9fa35da7a51a5fd2099dfe56a2d8d32cf233e2f6d770e796146440263f4"
        },
        {
          "alg": "SHA-512",
          "content": "1c72db334ea44f932c35e602b78907865f5bab43e30c871c9be67c8184eaa778f32d7bc3ab525d5921cd28619d3f9babfd483f17de54f007ee07db2e074b0307"
        },
        {
          "alg": "SHA-384",
          "content": "77dd27c4d5e9372c002bd6878d2cfaaec3cf46dd57d65de63d7f2e09351344531cfa81a537b56628ac6db18adee7e484"
        },
        {
          "alg": "SHA3-384",
          "content": "3456de40eef224b3ad195d2f218dd28eacb0da07607aee7ead94bd8d54bd8311d51c28d4066db4bf8b69a2df48c415f5"
        },
        {
          "alg": "SHA3-256",
          "content": "36e3f71352fa14bc580db45a05b09b063392c6d39acf9e24ffa6a67bbc07a336"
        },
        {
          "alg": "SHA3-512",
          "content": "6ecbc05bb5cd3f7537078b0cf51b0a5f7189dfa60c22e5ec0d6b9e2fd3f7fa7566770b5da87e0c9929f48769933c3e3a473fd5cc7231672fca36ab1fee1f8670"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
      "externalReferences": [
        {
          "url": "https://commons.apache.org/proper/commons-lang/",
          "type": "website"
        },
        {
          "url": "https://github.com/apache/commons-lang/actions",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/LANG",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/commons-user/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitbox.apache.org/repos/asf/commons-lang.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.6.1?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents.client5",
      "name": "httpclient5",
      "version": "5.6.1",
      "description": "Apache HttpComponents Client",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ab01ab53ec62de3b50ed071dcaba3bfd"
        },
        {
          "alg": "SHA-1",
          "content": "b418ba210ace28adf920f1decf64d673953d07cf"
        },
        {
          "alg": "SHA-256",
          "content": "1e3d8444c3c27772e4b9d42a790f06b3345a8ece4fd16d00981f2f2460e1e772"
        },
        {
          "alg": "SHA-512",
          "content": "2835c56a960c5c926cdd69183d55f9bf84fe3a076247ada8b5849374ac85fafbe39551441eac66f3d7f45652531a9b5beee33dbbd59ae216039d2970d49df772"
        },
        {
          "alg": "SHA-384",
          "content": "4e055f538e0e8748c30e58a6496786a0bda8696a132b9d3c15e11205e3814152b9d3a3ec638e27ba8d30eea80a418fd6"
        },
        {
          "alg": "SHA3-384",
          "content": "5b8306f67927298d10c658777e7e9ee70e52e6120982148f823bf6e63145edafa717b5738a45d516e87be0f19cb87282"
        },
        {
          "alg": "SHA3-256",
          "content": "9e05e2adb777099009635ed79c944bb7aa4a96f466b714c3441c5eaafcfd963e"
        },
        {
          "alg": "SHA3-512",
          "content": "50d4343a5e9d892ae23480079d8de24b45751ac4555b503e2cee2e791d7028c4a7f183b545c216fb66598f79e7f054ac37a87c4af978b7fe337bccf566ee0895"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.6.1?type=jar",
      "externalReferences": [
        {
          "url": "https://hc.apache.org/httpcomponents-client-5.5.x/5.6.1/httpclient5/",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/HTTPCLIENT",
          "type": "issue-tracker"
        },
        {
          "url": "https://lists.apache.org/list.html?httpclient-users@hc.apache.org",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/httpcomponents-client/tree/5.6.1/httpclient5",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.4?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents.core5",
      "name": "httpcore5",
      "version": "5.4",
      "description": "Apache HttpComponents HTTP/1.1 core components",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "584964cc15b7390de975e97e8eb2e6e1"
        },
        {
          "alg": "SHA-1",
          "content": "e40011ec0dae056466399f8e414ede4772001621"
        },
        {
          "alg": "SHA-256",
          "content": "cec2981fa7f520efb63f0787c24f10af2679e31f9f75c448c4dde40a3ae8100d"
        },
        {
          "alg": "SHA-512",
          "content": "5d0dc9ea175373a6bbf76e48246bb3f4d3c43a4ca1cc4db0a10970736a30d3fd72996cce5fe07d675eabb0cad4da1e2fd6b3100d31e7d9d4507c617fc1bbe425"
        },
        {
          "alg": "SHA-384",
          "content": "7a9cf59bf40074c84dc395cd6dc91c2b2da630a2932eff8d42567bd870f0fc94f9605ea6c0725a83a7faf03f8d967305"
        },
        {
          "alg": "SHA3-384",
          "content": "2acb353316cbf3d0649e7c2f0765591f3ab9bab2f3a4aa1029f86a15338e7806a9ec41b101fa06b7fb29111d807eb33d"
        },
        {
          "alg": "SHA3-256",
          "content": "47dea1de78d259c1fb903bac72dd61acce885fbe2ab8e6b6d4f6e2439710699e"
        },
        {
          "alg": "SHA3-512",
          "content": "37c162c8a37107846e5950b2b15168d3b5677a4338dbc37b2f178f6fb5d5ad21c5cd81a6178054efe007d8fd088c42e8b2398df3e8d636d973a5035a01306808"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.4?type=jar",
      "externalReferences": [
        {
          "url": "https://hc.apache.org/httpcomponents-core-5.4.x/5.4/httpcore5/",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/HTTPCORE",
          "type": "issue-tracker"
        },
        {
          "url": "https://lists.apache.org/list.html?httpclient-users@hc.apache.org",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/httpcomponents-core/tree/5.4/httpcore5",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.4?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents.core5",
      "name": "httpcore5-h2",
      "version": "5.4",
      "description": "Apache HttpComponents HTTP/2 Core Components",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a027e88d219ee744ddcdb32ed1e69633"
        },
        {
          "alg": "SHA-1",
          "content": "83cdd62ef3140664f46be59c2c2727141d1c5a32"
        },
        {
          "alg": "SHA-256",
          "content": "2e0f4ace15db2d1609c2b06eca6012e7582afe4a99ad8d15073f62dd8edb3460"
        },
        {
          "alg": "SHA-512",
          "content": "d9fed54460b52b68fc91502b1e7a0723cd97740455574b101929d6c77818f81340077fed7748a2b76a6d95e2dda711717caecf72f0f4d6331736fbad88ae66af"
        },
        {
          "alg": "SHA-384",
          "content": "e97a8a3cf311231461998c8b89ab037b08d6331283f12ee85bb82165f6977f21d9d56e1224bec7bc1cac73c92ef7a457"
        },
        {
          "alg": "SHA3-384",
          "content": "35bd22b763e02311f7419615c46e11ee029b3437127a573942e2441938ef0856c30853e8490e5ad3844d4c3920fd7752"
        },
        {
          "alg": "SHA3-256",
          "content": "bed09b6e99b25b6780b0ab0d2faa960ca7799e6b33a02ebac47adff6f70c441d"
        },
        {
          "alg": "SHA3-512",
          "content": "e812bcd3945a5559b676ead01c01a4f710ffc3c03fe4ee1e3332af960e58c1f4f87387242b9cd7c445a059a799c505f8ae5d397dacea722b020b6ed12064407c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.4?type=jar",
      "externalReferences": [
        {
          "url": "https://hc.apache.org/httpcomponents-core-5.4.x/5.4/httpcore5-h2/",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/HTTPCORE",
          "type": "issue-tracker"
        },
        {
          "url": "https://lists.apache.org/list.html?httpclient-users@hc.apache.org",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/httpcomponents-core/tree/5.4/httpcore5-h2",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-annotations",
      "version": "2.21",
      "description": "Core annotations used for value types, used by Jackson data binding package.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e0d0c3e7300954f73e43c67d933aaea4"
        },
        {
          "alg": "SHA-1",
          "content": "b1bc1868bf02dc0bd6c7836257a036a331005309"
        },
        {
          "alg": "SHA-256",
          "content": "53ca085f4a150f703f49e1aabd935bd03b43e1ea3d55d135438292af22cef56b"
        },
        {
          "alg": "SHA-512",
          "content": "d832a99867acc2d5afb2596da760c50e6a6b54c1bbc8e6c4186f267a16e1d55c7a916ef8b034ad6b277c41e3342b91dcdc2e3dcea8bdccfe89e7c147894591be"
        },
        {
          "alg": "SHA-384",
          "content": "30b15d68f8da6f6c26aa9f6c95d09152b6c1a8092cd976cf600d63d1751509a73865f937e0ad97d8d55bf20f6a749b44"
        },
        {
          "alg": "SHA3-384",
          "content": "5205b51f6ed689cf31b58b98a61ca9e17a439c15d669dcb408ec4d430e77ac9ac57d39d5ca1f9973e8d184f6dd57ec4f"
        },
        {
          "alg": "SHA3-256",
          "content": "d6782d188a72b2bb96e4b595343e783012b3f98c30f7b9950244c21739334509"
        },
        {
          "alg": "SHA3-512",
          "content": "b648f1e9ffe818227d53fbde409e61858ac22d3f78705eaf08065587ed512c9b33b0f5e2222356bfb33fb2973bb5a3184e31d2a7099f8fc8d2fd23eb4612a4bf"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-annotations/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-annotations",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.jeremylong/open-vulnerability-clients@9.0.5?type=jar",
      "group": "io.github.jeremylong",
      "name": "open-vulnerability-clients",
      "version": "9.0.5",
      "description": "Clients for vulnerability sources",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ffb30f5216c160cf97b59ac846e885f1"
        },
        {
          "alg": "SHA-1",
          "content": "f88ff671b4f4c0d7bf69169ae119887e933cacc3"
        },
        {
          "alg": "SHA-256",
          "content": "4c74763f5f251702d8e842529ce929bbba0c961348d37a28477e327a589f4f52"
        },
        {
          "alg": "SHA-512",
          "content": "b4857ac81fc948f722fd96f60619786149f86091a980277a40085fc5a9d7fb0e24e01189771b95ae5ea5cf17c2fa7e3b1bad3fb9b5b0a71e69796ffd78d347d6"
        },
        {
          "alg": "SHA-384",
          "content": "a4cfcbf7285c7abec9e8d2422544ad616e267f4aaffa478f8e38657897ab01f3c91b14c1b204ac623f1f1c597675af96"
        },
        {
          "alg": "SHA3-384",
          "content": "cc521bb2f13e0b64806d5605fd74b82dc7c9e90868480c5964040910661d44d3ac261eb09a82efa767b29065c5f850a6"
        },
        {
          "alg": "SHA3-256",
          "content": "2439eb9af7871a4faac10ebdb1dc87ef8258a7ea5b877532744425622277ea72"
        },
        {
          "alg": "SHA3-512",
          "content": "8483ed16d094534223784fda547ec076fbf7b8ca636bb0d5db2d1bbffc5b08b7455ad9caa3cbe23b7e42115855ac23e5d368d1716207d4bd54693f5eff1bfb3b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.jeremylong/open-vulnerability-clients@9.0.5?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/jeremylong/open-vulnerability-clients/",
          "type": "website"
        },
        {
          "url": "https://github.com/jeremylong/open-vulnerability-clients",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.httpcomponents.client5/httpclient5-cache@5.6?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents.client5",
      "name": "httpclient5-cache",
      "version": "5.6",
      "description": "Apache HttpComponents HttpClient Cache",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8cec7f04887daf5db87b49a75037297f"
        },
        {
          "alg": "SHA-1",
          "content": "161f12ce409b84c92bd092a8e7509f57f0a5f31f"
        },
        {
          "alg": "SHA-256",
          "content": "1cceca0cad38592e30126b0655b050a737e92e48be70c3959cdc95347d0cb06a"
        },
        {
          "alg": "SHA-512",
          "content": "d411f5a9cbc53b3d50d7ac48410a34006d4b050793704ce1c5b415b212f81ab1018d2eec148b1a323723436f4cdcdb524c5f2872d8ba0cb52533f903a4d1c6e4"
        },
        {
          "alg": "SHA-384",
          "content": "549438ced92f3dcb0251284ccccda096ef41ac810bcbd5be9105b8730e8bb04ce453ea142470f2c8c31bf4f66a1e6013"
        },
        {
          "alg": "SHA3-384",
          "content": "66f328ef55cb03b58061a4e08be71d6b23745e786b31913b2d4fd66110819d7b5e01768cf3f09595e40186f08ce534df"
        },
        {
          "alg": "SHA3-256",
          "content": "0c389088e726c03bc80b25b0de1da4e409c82f7a4fe595f6b351b6923a99e16b"
        },
        {
          "alg": "SHA3-512",
          "content": "fdfeeebc941420b249284e2938bc786cf01446a33de542847f88176ec6e63c7f7f3b01a2841c364e1189254e608b260948fed01e7d9c57c9adf3a6e50ab12d8e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents.client5/httpclient5-cache@5.6?type=jar",
      "externalReferences": [
        {
          "url": "https://hc.apache.org/httpcomponents-client-5.5.x/5.6/httpclient5-cache/",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/HTTPCLIENT",
          "type": "issue-tracker"
        },
        {
          "url": "https://lists.apache.org/list.html?httpclient-users@hc.apache.org",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/httpcomponents-client/tree/5.6/httpclient5-cache",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.samskivert/jmustache@1.16?type=jar",
      "group": "com.samskivert",
      "name": "jmustache",
      "version": "1.16",
      "description": "A Java implementation of the Mustache templating language.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "7eff40c29c2fdf3faac3db921f07dc80"
        },
        {
          "alg": "SHA-1",
          "content": "979c7145a406b83bf28da32531f88a34c2d2919c"
        },
        {
          "alg": "SHA-256",
          "content": "3d4b984abd66908f05b38c9c892325cd4785d01ff33922569ff9b90c9ebfc475"
        },
        {
          "alg": "SHA-512",
          "content": "f245f8b979cf63fb4ad762e586a27468fa91b751aecf94f9f1dce32f551dec30c4b2dd881ea8b9b6a7eea3e9dfb34ceb96204d358bbb62120233416a4df382e1"
        },
        {
          "alg": "SHA-384",
          "content": "f53c07c96c4a4e8f9b424b17bbb152cc540dea8174db43b9bf5a12357d5207e5b8c0de506d83703fb46cfab13051c142"
        },
        {
          "alg": "SHA3-384",
          "content": "ac74164c34a0b40bf8e2d2c9f737bbae1b5c9c2c3a342487ca8271888379be51c5a0e3f45d1db57538eaed470bd7722f"
        },
        {
          "alg": "SHA3-256",
          "content": "2fdfe84999fe4930c399d5f78b678907881eea246fa30fd97f42f31ec90a2a8d"
        },
        {
          "alg": "SHA3-512",
          "content": "e213ee1cc34d3fde03785ac05a5df09c4b462fb1b1d0f02dff41e7b53522005df2e38b303bc193cff9203ab7f8a50764e1dea967035a454cf1988c056a615d57"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "The (New) BSD License",
            "url": "http://www.opensource.org/licenses/bsd-license.php"
          }
        }
      ],
      "purl": "pkg:maven/com.samskivert/jmustache@1.16?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/samskivert/jmustache",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "http://github.com/samskivert/jmustache/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/samskivert/jmustache",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-data-source-nvd@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-data-source-nvd",
      "version": "5.7.0-alpha.9-SNAPSHOT",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "65575da966f02a09c0b4b079d143b520"
        },
        {
          "alg": "SHA-1",
          "content": "80e666eefff3dca26540504ae73b2a4d715e20b8"
        },
        {
          "alg": "SHA-256",
          "content": "9d9a6d910922527d17b6768eee15bdde783fb4e6eadf30f81c73242e367bd415"
        },
        {
          "alg": "SHA-512",
          "content": "131456bcef3a9aa42d40bbd6188dcda1f7f8713eb394cc554db72eb7125e8b695496095c1928c5bde1f96530145a3607ca075f1aa3c827afc75f497af54fc0f4"
        },
        {
          "alg": "SHA-384",
          "content": "5a15867473c2c0fd80e8d19025b065a7462250fce4c45da22de8d87d8f66d23fca61e786d919b05667ad12e09d1398ac"
        },
        {
          "alg": "SHA3-384",
          "content": "03842de927555b7fdcaf31ca60977c1a0ed61fa1fd99084d72e9673158ef1b91722941dd1c9e72f2f8280ab26885079b"
        },
        {
          "alg": "SHA3-256",
          "content": "f12efce7a850d2ee12162d035d0f882a9772e68823a5741f9a0ae28efac9cbba"
        },
        {
          "alg": "SHA3-512",
          "content": "a82de31fff2ae4cb56ef8128a8dd49f350b51e0b017082a0797aef5fafce90162398f37b849a58052753649e1db3d2663e85357f7da603eec08716f230b18b29"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-data-source-nvd@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-data-source-parent/vuln-data-source-nvd/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver.git/vuln-data-source-parent/vuln-data-source-nvd",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/vuln-data-source-osv@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "vuln-data-source-osv",
      "version": "5.7.0-alpha.9-SNAPSHOT",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c9005b91232f2990df63019be240ba4d"
        },
        {
          "alg": "SHA-1",
          "content": "a45f29320867711808eb6ef42dd9c2a4fc2e8496"
        },
        {
          "alg": "SHA-256",
          "content": "ee269e4977f7cf38b5c5121df29d049cbda818c7379063ca435e58f02d10bae6"
        },
        {
          "alg": "SHA-512",
          "content": "c38c1a6c581047d97fc4886c2df6db7751f6f4aba2aa1da3b27fd00648283562aff81f5a72f8660479c18e0fed66d3e7e619e98bd3d4a23631835c333650111b"
        },
        {
          "alg": "SHA-384",
          "content": "ff75cf902a683aeb8bbe2222e2a8bd5ed3ffd3cf9759b82695d1db13d4e2b700e82552fe572e0e54d6ec3467e94e6b6d"
        },
        {
          "alg": "SHA3-384",
          "content": "77d1a151a5d39e1bfd4e9d29fe5ca9ac82d04cea1b92e952eaeb8678089cfd649f237f5af8765c239f2c5f36979a8c59"
        },
        {
          "alg": "SHA3-256",
          "content": "68a9f63bd50dcf6fc3369aaf8921ae5c778b42ec4a04fde14bccfd489d691895"
        },
        {
          "alg": "SHA3-512",
          "content": "27bec7f079ba27ef1a5245949a5bc552ca3fbf08d4e2bdbb636e06f854a0e010da6a174f3d9eab6158c6ccce81df97cc68c167c71457037fcb5f99b387bc7b95"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/vuln-data-source-osv@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/vuln-data-source-parent/vuln-data-source-osv/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver.git/vuln-data-source-parent/vuln-data-source-osv",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/alpine-common@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "alpine-common",
      "version": "5.7.0-alpha.9-SNAPSHOT",
      "description": "An opinionated scaffolding library that jumpstarts Java projects with an API-first design, secure defaults, and minimal dependencies.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "bf0f19984f9070ddf6ebc30863acd2ed"
        },
        {
          "alg": "SHA-1",
          "content": "9e0b22382dd1c7089874afc05160a8d53cc2c69d"
        },
        {
          "alg": "SHA-256",
          "content": "c85451d60d00902d0b67b4772ff9ec5acac3bb375e4d3fe6514ed639a5dfec2d"
        },
        {
          "alg": "SHA-512",
          "content": "2deae48d0693cdb0bd11d131a6e844d635f3b7f67abd42d771e6bca5faeb8bbd833509bdda129436261501f82e7d790b1b38c840cc2795d00606a4b8ba89e526"
        },
        {
          "alg": "SHA-384",
          "content": "fde5b5db7d1b952953239605e37d02ad966e9d3cf9f72de0f5d4fc7faf1f12332347e910d081ae86c7d8a30ee6c9875e"
        },
        {
          "alg": "SHA3-384",
          "content": "437fc362cdc03e7f3e1712e967aa0430b631a1961806f6a625c27aefae685b7104dbab2e6aa6fb6dfabb74eef83ddfa6"
        },
        {
          "alg": "SHA3-256",
          "content": "acc8fea77c9812e0ee62a3fba66e29244ae9412e7e30e44db4f62c53c2a42976"
        },
        {
          "alg": "SHA3-512",
          "content": "f844512130b65561bc59f73e35058d53641b955ac5e98a463d2f67bba3f5563128e787c92379ce3e8846e9ffb62a27697d2d702d22624ba84b81725dec377896"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/alpine-common@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/Alpine/alpine-common",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver.git/alpine-parent/alpine-common",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/alpine-model@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "alpine-model",
      "version": "5.7.0-alpha.9-SNAPSHOT",
      "description": "An opinionated scaffolding library that jumpstarts Java projects with an API-first design, secure defaults, and minimal dependencies.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a755c5c0e81a0b71f37bb4b62c4355b6"
        },
        {
          "alg": "SHA-1",
          "content": "eea8a20e47e9de8783ed115d1aa1e1bf4cf95570"
        },
        {
          "alg": "SHA-256",
          "content": "8eb85892af883c6f6be257a0cc181f7d0ff7cde20806456355900cd3d9478d66"
        },
        {
          "alg": "SHA-512",
          "content": "969e176a2f95dabf04a46dc32fcfe89e3cf1be12bca793e67a57b0617efb4544f0f1258369233b23134da6f7a2cf72e90441e6f8421684a192c5647c12fe9c96"
        },
        {
          "alg": "SHA-384",
          "content": "c9885d46606945821077735812a18ce11cc182523f813a7365bebd6b1f96a74f0503ca8ca4be28471053687872fbe63b"
        },
        {
          "alg": "SHA3-384",
          "content": "8bbdb918e79dc0e920fd58a13b07219c4362957b65bd58007a032b2d14bb4f103317a535f4aa30827e3adc6941220407"
        },
        {
          "alg": "SHA3-256",
          "content": "e0b980f3e04e58751e64778884f765fae1df662494db9e63fcd930d7af5d30e2"
        },
        {
          "alg": "SHA3-512",
          "content": "f202b8ca4ba45b7e6eccbc5c34dc835e36b38b4ea56471c6255c7f6ddc51a848cb34ae6fa3c84e9efd9dcd122d9540d37b9df769fd94d8402af5cd12f8285752"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/alpine-model@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/Alpine/alpine-model",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver.git/alpine-parent/alpine-model",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.datanucleus/datanucleus-api-jdo@6.0.5?type=jar",
      "group": "org.datanucleus",
      "name": "datanucleus-api-jdo",
      "version": "6.0.5",
      "description": "Plugin providing DataNucleus implementation of the JDO API.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9b7448a21838cae99a8b9f3875d93a08"
        },
        {
          "alg": "SHA-1",
          "content": "30f49348795e1d2e9a8e1613e9dbc6c3f851f1ca"
        },
        {
          "alg": "SHA-256",
          "content": "423ea8da36763d6c17d55434477b7ab2339d3cef5acf67dd30198ef1dd0ed477"
        },
        {
          "alg": "SHA-512",
          "content": "5262a518ccc344692af86a30d51e4d1d9ee2b3167dc16657b37e8cfb2affc3fd73db4df9df5463e4a25097d9eff27c9f305407239e19381cd32c0c7f9f01aaab"
        },
        {
          "alg": "SHA-384",
          "content": "96e3ee21e3958259fcbc3bcd8af53d0814415f027a73bb1a1025c9112406564e65eaff74c874f02d994e6239562a7202"
        },
        {
          "alg": "SHA3-384",
          "content": "8c88668e57a4ccf381e6fb3a9859e8fe15376bd9a0fd4d9b9d771c9f7712459e97edc219dcdf008971f0d06363592d09"
        },
        {
          "alg": "SHA3-256",
          "content": "54562d403842a670b5f4cfa2a272bbb05789bd39f278b52732f1df540c7e33b3"
        },
        {
          "alg": "SHA3-512",
          "content": "55accaf6c0e8a6082d09619351596707df28223929dd313bbfe25abd1f8693c2eb195c0dada149f11dd0aecdfca724edfd67de84152e0a2aa8c39383fbc8b8d2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.datanucleus/datanucleus-api-jdo@6.0.5?type=jar",
      "externalReferences": [
        {
          "url": "http://www.datanucleus.org/#/datanucleus-api-jdo",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/datanucleus/datanucleus-api-jdo",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.datanucleus/datanucleus-core@6.0.11?type=jar",
      "group": "org.datanucleus",
      "name": "datanucleus-core",
      "version": "6.0.11",
      "description": "DataNucleus Core provides the primary components of a heterogenous Java persistence solution. It supports persistence API\u0027s being layered on top of the core functionality.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2493fed928c1eade5a38f4016f1ba7c0"
        },
        {
          "alg": "SHA-1",
          "content": "87fae77204b7032165d6cfb468cb5dafacf39200"
        },
        {
          "alg": "SHA-256",
          "content": "2e2a23d21100e82a8bd0822eebe8bb9f39a8e3ea1ba5e2bb068c24cb0515bd08"
        },
        {
          "alg": "SHA-512",
          "content": "969e5e8b3330e1bd675af05d106f0081dbef25bfea99689a6a051eac96e81907dc8d42e574b464b33fe467c5024a282416f114946ed4374510b4abe7897027d3"
        },
        {
          "alg": "SHA-384",
          "content": "286413cbd9c681561bf5c7d83839893879a9476a0a2a9b60e60d6e161a665e92bef6db57cd9e18b4d13a6ed2a75bbe73"
        },
        {
          "alg": "SHA3-384",
          "content": "afcc830fdadc3c4b7130921ad521f4e0a7fe23b57614ac61f4c2a1d9eae47b56e6a0df82d1ebef82c1cbe1d2244c547d"
        },
        {
          "alg": "SHA3-256",
          "content": "02b169414ef4c5a9d7c79e6e98e86e21071054f035ce4a1ca8fde85aa5f726ef"
        },
        {
          "alg": "SHA3-512",
          "content": "1de064ff2de6452618e7a9f3bc83e91228105722697597e4dc0b836349d21c3d71ff6ee4613433f7da795efba9b56be7bfa3c6854a02587271cd7d4a6001bdb5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.datanucleus/datanucleus-core@6.0.11?type=jar",
      "externalReferences": [
        {
          "url": "http://www.datanucleus.org/#/datanucleus-core",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/datanucleus/datanucleus-core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.datanucleus/javax.jdo@3.2.1?type=jar",
      "group": "org.datanucleus",
      "name": "javax.jdo",
      "version": "3.2.1",
      "description": "The Java Data Objects API (JDO) : a standard interface-based Java model abstraction of persistence, developed by the JCP.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "79f1e95e6d7f1eb191edce207ac6ecd8"
        },
        {
          "alg": "SHA-1",
          "content": "e8d1af5779f95d3c85b641184b605725762a36c3"
        },
        {
          "alg": "SHA-256",
          "content": "61646f544baf75fc7a305410443c5f5f7d219fa7a2cabe3b782950a350ca5d3f"
        },
        {
          "alg": "SHA-512",
          "content": "29580963b5478646b0f3b47ae3387d0bdb5bd86da37afceef6841c32b9db3a4407186fc257855c5c47efbbf1f1bfbff0b45b6ad45101b6dfbed7946a9251fe43"
        },
        {
          "alg": "SHA-384",
          "content": "1845d95a87e9fb954ff3e0c80a0dae62eca817abb3f727d65edc9296a0992e60a7fa57db0a72858afaf9e2d872f6435f"
        },
        {
          "alg": "SHA3-384",
          "content": "e4f04e5be64a1a58ef475cf5b155e6169307dd9636cd4fe6661dd394fe28a0a9ee9dee426291bff62d66885ae35ab2c8"
        },
        {
          "alg": "SHA3-256",
          "content": "3703404351c56d4a658de2012266838fea9741cceb09e7304b4c323e33d88ca3"
        },
        {
          "alg": "SHA3-512",
          "content": "da4b8c30667d67651469ed1a750004a3afbaad1ce8c6697ac29889fd2e78dadbcde07d414161e42bc972017afe83e690329d4ede5e94a67553377ee7c2a7929a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.datanucleus/javax.jdo@3.2.1?type=jar",
      "externalReferences": [
        {
          "url": "http://www.datanucleus.org/#/javax.jdo",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/datanucleus/javax.jdo",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/javax.transaction/javax.transaction-api@1.3?type=jar",
      "publisher": "GlassFish Community",
      "group": "javax.transaction",
      "name": "javax.transaction-api",
      "version": "1.3",
      "description": "Project GlassFish Java Transaction API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6e9cb1684621821248b6823143ae26c0"
        },
        {
          "alg": "SHA-1",
          "content": "e006adf5cf3cca2181d16bd640ecb80148ec0fce"
        },
        {
          "alg": "SHA-256",
          "content": "603df5e4fc1eeae8f5e5d363a8be6c1fa47d0df1df8739a05cbcb9fafd6df2da"
        },
        {
          "alg": "SHA-512",
          "content": "3497cf77352aa1317c70ad1d28e8e7da51337d844c8227a35707209c750ba6f5d644a4ffdbdb10e5fbde204003aa43ff80e9e2ff3164584a7a34d8292266b2bc"
        },
        {
          "alg": "SHA-384",
          "content": "7044d8d5829a777d85e1a987c3e346eb535dd321366bdf32a9e8ed4f52facd0610ac2f3f58b4a1b001893f01fddc5eae"
        },
        {
          "alg": "SHA3-384",
          "content": "d0c1807001e02ce47320be657be055b4777b8b5673c22a78b0574955f7a6105dacc42b46b86ab967dc382cf332da59d8"
        },
        {
          "alg": "SHA3-256",
          "content": "c7c48884317a2d0e1596f201763acbca4ef76462af9172fd5e68aca3465303e1"
        },
        {
          "alg": "SHA3-512",
          "content": "bf053d4fe995cb5c1d6c01320fc73530017ee364de6ae21eb98fa0372b2aa6eff2fa4ac2d9cd5f692c930ee573c2f6226441918123fcfc48b5b4a126d350928c"
        }
      ],
      "licenses": [
        {
          "expression": "(CDDL-1.0 OR GPL-2.0-with-classpath-exception)"
        }
      ],
      "purl": "pkg:maven/javax.transaction/javax.transaction-api@1.3?type=jar",
      "externalReferences": [
        {
          "url": "http://jta-spec.java.net",
          "type": "website"
        },
        {
          "url": "https://maven.java.net/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/javaee/javax.transaction/issues",
          "type": "issue-tracker"
        },
        {
          "url": "javaee-spec@javaee.groups.io",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/javaee/javax.transaction",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.corba/glassfish-corba-omgapi@4.2.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.corba",
      "name": "glassfish-corba-omgapi",
      "version": "4.2.2",
      "description": "A CORBA ORB for Glassfish",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b2eb806fc90b71d6d15391a1c887ae1f"
        },
        {
          "alg": "SHA-1",
          "content": "6e0f5735a51bda8f72dda0e58ba766d16678c7b8"
        },
        {
          "alg": "SHA-256",
          "content": "2d964250e13aa77b5e687669ef4981d44c7b92496b28e439e5fbcc5c7882e0f5"
        },
        {
          "alg": "SHA-512",
          "content": "0e99c7e659bf2613d0436805476c5ed265afbd35648f6367bcd8227c0052b024b675f4c9eb3ec590e24c8f0b989d0392a4c53ec3cb1ce666a7ae566489841482"
        },
        {
          "alg": "SHA-384",
          "content": "253cd42b07fd905e5c5651a0d78d1b33cac48abfdfa8fc2592e982c4e385481ccead57d8bcbe32407f498de1e26f3558"
        },
        {
          "alg": "SHA3-384",
          "content": "cf14029429a406ec32481ac73a7580a4e34f1216f7f85ea29cb35dba8b8ca1e20b59b81b66778ac5b16a3975fcf6f2d8"
        },
        {
          "alg": "SHA3-256",
          "content": "76b8b17d5659c5638709d866cb78ee75b78cbaf53beb649f4ec1b15a47c65347"
        },
        {
          "alg": "SHA3-512",
          "content": "2d8b9be6f6a7149663107ade523c8e274b1f24710132ae09d09591632ceb108296f26214f9c9ce4cec40f074bf97f715284d136cb01ce886e8745b38eb5b3f48"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.corba/glassfish-corba-omgapi@4.2.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/proposals/eclipse-orb/glassfish-corba-omgapi",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/orb/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/orb-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/orb/glassfish-corba-omgapi",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.ext/jersey-bean-validation@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.ext",
      "name": "jersey-bean-validation",
      "version": "4.0.2",
      "description": "Jersey extension module providing support for Bean Validation (JSR-349) API.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "254cf1628fdd8561cab876a729c98564"
        },
        {
          "alg": "SHA-1",
          "content": "db93aaf2cd038fbb77f0184b1df866782592e2df"
        },
        {
          "alg": "SHA-256",
          "content": "e92fa0ab1e4882e9c749b09ec7f5019ec3f165bdcef3888f0a1988c1da7347ae"
        },
        {
          "alg": "SHA-512",
          "content": "d127fdeba362dcb5677ee4d68bfd7e53b2636087de4769cff73c43553a5b39a6588b83d971147fa6c73af18fc2946c0c7349af221523a162c30094c7dcb5ecc9"
        },
        {
          "alg": "SHA-384",
          "content": "bb1940e39ab4580e898c652b4cc3b74560ac7eecaf97e4e06f0023ff0193d288f4407625ee713ede5604163b97515441"
        },
        {
          "alg": "SHA3-384",
          "content": "ac63c81e85bd6cd0dd05b6185b99c79552a57ac696d49b4f4abeb97b86c01572c07483e6acc9a81ef244c3fb086b39d3"
        },
        {
          "alg": "SHA3-256",
          "content": "10b67f4c5c7790e224b48885ca67c27802468a8505bc7ab039041322b27637c4"
        },
        {
          "alg": "SHA3-512",
          "content": "e2628bac3fbd61793d403f4cf5e93ca5a1c8e1c2a9210c4a1b02ed8bc314f7c06ef4bf340b0bd0b62a15f2999552016f3aa5b68cd00e2cbd6f14afbfc1545e08"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.ext/jersey-bean-validation@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-bean-validation",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "http://localhost",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/project/jersey-bean-validation",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.inject",
      "name": "jakarta.inject-api",
      "version": "2.0.1",
      "description": "Jakarta Dependency Injection",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "72003bf6efcc8455d414bbd7da86c11c"
        },
        {
          "alg": "SHA-1",
          "content": "4c28afe1991a941d7702fe1362c365f0a8641d1e"
        },
        {
          "alg": "SHA-256",
          "content": "f7dc98062fccf14126abb751b64fab12c312566e8cbdc8483598bffcea93af7c"
        },
        {
          "alg": "SHA-512",
          "content": "f186b2ada470abba1cc3b4f8c4373d940fb7c71a051b2c26f7c204ad4dfb69235fbf3f9c33da36d744cb90f52d921c51d76c0ff263bacb35eafb66cab83dc47d"
        },
        {
          "alg": "SHA-384",
          "content": "405bd297a73901f013d48a0da028d04d400f3e61f4997c0e7297eb08120670a0e242e0002db8f130c33ab16cb02feb2d"
        },
        {
          "alg": "SHA3-384",
          "content": "4db7e54434d0a208c876868f5595b808f2728c0455feaa752ab7b569a2186fc37cb891c9aa0076de3d08f6da6ff06eba"
        },
        {
          "alg": "SHA3-256",
          "content": "3a5aba9f1ff1a130b76af886123eb375fa578498490df3dc60bb7ce7d59e9404"
        },
        {
          "alg": "SHA3-512",
          "content": "00bba8efc2d6e7f0a509b321868d75f1aaf0681a750d089d913bde8424ab7bb88aadf49de6e291e352523e4f8c117b1b48033ff31d4d665dcc43c4c6ea000ba9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/injection-api",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/ee4j/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/injection-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.validation/jakarta.validation-api@3.1.1?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.validation",
      "name": "jakarta.validation-api",
      "version": "3.1.1",
      "description": "Jakarta Validation API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "93ce96e77734f4280157edeffcae44e8"
        },
        {
          "alg": "SHA-1",
          "content": "ec8622148afc5564235d17af80ea80288d0e7f92"
        },
        {
          "alg": "SHA-256",
          "content": "63ce00156388c365f3ac1be71fcfaf114682fc0c452020b5df6e7ec236e142ab"
        },
        {
          "alg": "SHA-512",
          "content": "02483f9d631538a71f436982ed3842c5d054781ec58350ba33fd0e0db92db531caa17abd2e7aa25a062ba4cd5e85b63a27b615041df236ffb979a73fdd121e18"
        },
        {
          "alg": "SHA-384",
          "content": "8e4a235fb69ebf7327fe8947b0be32c76ae8ebb748d0b3195efb87cd1d57ea92402403a59e2c4312a11a3a2300bbb4d6"
        },
        {
          "alg": "SHA3-384",
          "content": "7f52280ddd46c87e00c6b10f708aa77d571e68942651ada952b4b9e58805a0216394a31a4666c88908af0a6408c9b64d"
        },
        {
          "alg": "SHA3-256",
          "content": "21e404a7897b223e9324f7b709c3038f4ca01599896a0e166cee4eb714b9e600"
        },
        {
          "alg": "SHA3-512",
          "content": "6bc15a9beecdbdb881c1ed5d7682156417db766898a14e205a496b8d7e0e552a4e4c2303727b1c4dbc2391d62257b1b9a9504827dc6b8ceff149225d94bf10a9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.validation/jakarta.validation-api@3.1.1?type=jar",
      "externalReferences": [
        {
          "url": "https://beanvalidation.org",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://hibernate.atlassian.net/projects/BVAL/",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jakartaee/validation",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.hibernate.validator/hibernate-validator@8.0.2.Final?type=jar",
      "group": "org.hibernate.validator",
      "name": "hibernate-validator",
      "version": "8.0.2.Final",
      "description": "Hibernate\u0027s Jakarta Bean Validation reference implementation.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1adda123292ba2627d03a696d8c7e76a"
        },
        {
          "alg": "SHA-1",
          "content": "220e64815dd87535525331de20570017f899eb13"
        },
        {
          "alg": "SHA-256",
          "content": "2f2224a5a19bdcfa73540e9ff5c971b6c425ad80415876f305259fe873a15b2f"
        },
        {
          "alg": "SHA-512",
          "content": "3b4c68e41a245050addba3d5a856fad838e6a27fb0b8c13d34200274e13e0b3aa04c3f3d3cd883ceed880f0683093022625ed4db9522fc557782b8ad9668902d"
        },
        {
          "alg": "SHA-384",
          "content": "4addce04dd4599547dd81a02bb38426087edc11fc929ddc04790536264aa4bd4a62337b0f91604fe47b2b898039828f7"
        },
        {
          "alg": "SHA3-384",
          "content": "bcd829d013c6bb110a5d9dee2b4249678e41d670c9a7beb8b0c7ac52b7fae90be75997ef54a17900e8ef42e7afc171de"
        },
        {
          "alg": "SHA3-256",
          "content": "a1ff9dd13a537d46735504b4b3074277102c31f1b13eef40ba65537c25e1a9e6"
        },
        {
          "alg": "SHA3-512",
          "content": "db82be4ff0ca253beac177cf9fe474e3d448081a439e85e949f8f1d3a857b41c249c1bbebad1219b45a4ed580284b444c0aade591e907457e2d43fdc3f56cb60"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.hibernate.validator/hibernate-validator@8.0.2.Final?type=jar",
      "externalReferences": [
        {
          "url": "http://hibernate.org/validator/hibernate-validator",
          "type": "website"
        },
        {
          "url": "http://ci.hibernate.org/view/Validator/",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://hibernate.atlassian.net/projects/HV/summary",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/hibernate/hibernate-validator/hibernate-validator",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml/classmate@1.5.1?type=jar",
      "publisher": "fasterxml.com",
      "group": "com.fasterxml",
      "name": "classmate",
      "version": "1.5.1",
      "description": "Library for introspecting types with full generic information including resolving of field and method types.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e91fcd30ba329fd1b0b6dc5321fd067c"
        },
        {
          "alg": "SHA-1",
          "content": "3fe0bed568c62df5e89f4f174c101eab25345b6c"
        },
        {
          "alg": "SHA-256",
          "content": "aab4de3006808c09d25dd4ff4a3611cfb63c95463cfd99e73d2e1680d229a33b"
        },
        {
          "alg": "SHA-512",
          "content": "7fc4764eb65227f5ba614698a5cf2f9430133f42ec6e2ae53b4c724ee53f258541a0109fe0659e0b9e45729b46c95c00227e696b8d1addcd772c85f877658c9a"
        },
        {
          "alg": "SHA-384",
          "content": "28b4780b2353ebc08dbc02c9a343527a9062a0455bfb4ab135cb639c03e5dfd9c2250a835c44d5f17d275667c2009694"
        },
        {
          "alg": "SHA3-384",
          "content": "b194ace8f1f49f410286bd859866678b95a1b2c6f73e41f48291eb7438dffea57aaa9b177459038b6997771ce4d1cee1"
        },
        {
          "alg": "SHA3-256",
          "content": "50234c94efed4c816eb77bd2f70b869c9f89ddf8ee73dc25e354f4d0b81b3e1f"
        },
        {
          "alg": "SHA3-512",
          "content": "9886421726066b313a62283a6811b76d904ea1c1e9b7b2d850cb47afa189b03cdef053c8f7f6b79e77f2269c45f8cc2ed75c3389e96594b50987fef311d5a25f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml/classmate@1.5.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/java-classmate",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/classmate/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/java-classmate",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jboss.logging/jboss-logging@3.6.1.Final?type=jar",
      "publisher": "JBoss by Red Hat",
      "group": "org.jboss.logging",
      "name": "jboss-logging",
      "version": "3.6.1.Final",
      "description": "The JBoss Logging Framework",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "acab989faf62db02c092448e95614fab"
        },
        {
          "alg": "SHA-1",
          "content": "886afbb445b4016a37c8960a7aef6ebd769ce7e5"
        },
        {
          "alg": "SHA-256",
          "content": "5e08a4b092dc85b337f0910a740571d8720cfa565fabd880a8caf94a657ca416"
        },
        {
          "alg": "SHA-512",
          "content": "3dee7fadc04407538248def38fd0ae885c2aa454e2a38ecaaf7ef74abc1505f4efcd3e1a4e024c9f28d37fabb663c19cc3f29b7641b3094d5a504e93730c4a22"
        },
        {
          "alg": "SHA-384",
          "content": "26b1ba129bd9cd1777ba90da087d343698b1f7fa48b855ce0a1030afc1c7ae81433f75e7b8293eb42fc063ce35386280"
        },
        {
          "alg": "SHA3-384",
          "content": "7fbed126ae79578a4136d769f31d9d879e14cd0f0b78ec91515be7cfce5fea7f1c1ca10bf752d19edd5511d3d4ef5254"
        },
        {
          "alg": "SHA3-256",
          "content": "0de02a61df5dc9fbb8e9a344a8744356f3e867b4567ca2baa0bbf16a8763de01"
        },
        {
          "alg": "SHA3-512",
          "content": "2c7b522c04afab22900222f287da17c1526b3b3fd6a9376298613112918afb050af3d8ead2239be3e7dc3337ae74a636bf1963a1bc56426996b0f7283681bb3c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jboss.logging/jboss-logging@3.6.1.Final?type=jar",
      "externalReferences": [
        {
          "url": "http://www.jboss.org",
          "type": "website"
        },
        {
          "url": "https://issues.redhat.com/",
          "type": "issue-tracker"
        },
        {
          "url": "http://lists.jboss.org/pipermail/jboss-user/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jboss-logging/jboss-logging/tree/main/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.el/jakarta.el-api@6.0.1?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.el",
      "name": "jakarta.el-api",
      "version": "6.0.1",
      "description": "Jakarta Expression Language defines an expression language for Java applications",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a98f097e059552a75748fcdd067e5c16"
        },
        {
          "alg": "SHA-1",
          "content": "c7c4a2eb1e40e0ff45ab5e2e52bd77d8c7a75176"
        },
        {
          "alg": "SHA-256",
          "content": "7e84b5bed49de32b79cc5e85d90b6f5adb1a953ac67283adbb41c1e297f9c605"
        },
        {
          "alg": "SHA-512",
          "content": "fbab7bdf18e9bfb316b519a8c3b3d1f2e769e3f318b72e46cf33621f2942b84eede9b97970ff46fe29b54f8d61cb0df9e584d371f10e56bf0050d7727eb0ee23"
        },
        {
          "alg": "SHA-384",
          "content": "8c9c0712f90e359567fb2f080a18d38227ebd3096730980aeec86ee290b79f79cb4cf9888f72944ac240c01330828344"
        },
        {
          "alg": "SHA3-384",
          "content": "3c82d728737f09f400956a25664b008a307a359f33084ae9304ecf850b2b8448b27a7f017a6630299b7bd7ea4dddc239"
        },
        {
          "alg": "SHA3-256",
          "content": "2e870db1b8d460705534cba4ccd57b2d8247db1ff9bba831e2b2aef28261b4ea"
        },
        {
          "alg": "SHA3-512",
          "content": "d7eba15a92c49d1061ed4ac4c6a298dcd5b17896d8de214d5ad560624c2e2c855e9846626821754c47b898dea656ab516138d0ef607d5faf7c1dbed8c660ee6f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "name": "GNU General Public License, version 2 with the GNU Classpath Exception",
            "url": "https://www.gnu.org/software/classpath/license.html"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.el/jakarta.el-api@6.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.el",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/el-ri/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/el-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/el-ri",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.expressly/expressly@5.0.0?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.expressly",
      "name": "expressly",
      "version": "5.0.0",
      "description": "Jakarta Expression Language Implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d4448c69fe69ebca37b2c76e62e385c3"
        },
        {
          "alg": "SHA-1",
          "content": "78637fec7db6414c3ad32f3aa9e5d6610a299e5b"
        },
        {
          "alg": "SHA-256",
          "content": "b0c872737bb8381921b304d0952854666d1ba320b9b3c5bf4d70a09a86b61524"
        },
        {
          "alg": "SHA-512",
          "content": "8abd592d1fd70ef7fac5d0c1debe59dddea59dd82262bae016b44c506ceb68bb0619f464a07e553cc6885d527e1b8b8571e8975ca040c7864baba2349f30b725"
        },
        {
          "alg": "SHA-384",
          "content": "dc233d0838d2912d2473b8b6f5988145f4116dc2b139ea0378e78f260ed4c7609c954875c21fa579c4901f3202b3ca61"
        },
        {
          "alg": "SHA3-384",
          "content": "d946ffea99369b9933d07076f88a605a8b724edbc1d771ec92db145e6a68e447ac261efd9a4cdb74dce38827f75bd7d4"
        },
        {
          "alg": "SHA3-256",
          "content": "a46f1d62e482167ead93bc3f1261852cbd968e8fc7b68b399685d0bf6eb095d7"
        },
        {
          "alg": "SHA3-512",
          "content": "5e23912f838fe9487d5c0ab44d806e05f1754df1d18f1f7231a32975a73d7747edab4166903b5cbdc6ef002efc4a768b10baa4d7dabcb1c29bca61e9ab923347"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "name": "GNU General Public License, version 2 with the GNU Classpath Exception",
            "url": "https://www.gnu.org/software/classpath/license.html"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.expressly/expressly@5.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.expressly",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/expressly-ri/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/expressly-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/expressly-ri",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/alpine-infra@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "alpine-infra",
      "version": "5.7.0-alpha.9-SNAPSHOT",
      "description": "An opinionated scaffolding library that jumpstarts Java projects with an API-first design, secure defaults, and minimal dependencies.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "af79b13ea400f7ce8a4dd7cd94594eaf"
        },
        {
          "alg": "SHA-1",
          "content": "51a7c76a5afb49a734f838b692aaaa04af70cf73"
        },
        {
          "alg": "SHA-256",
          "content": "55bf1b589c5935814f7744c1ad96d54dce8a10856e3349d4081fdaa54ba1a7c3"
        },
        {
          "alg": "SHA-512",
          "content": "22c9c4485957a4b26f8d708d5bda58d370e2bef81f3fc09045a68cc3ffed7206c91e2b9801c966a34f987a5d32604dfd5f76f2e6dbb9a7441a3e0337862de506"
        },
        {
          "alg": "SHA-384",
          "content": "5272e24616640da8eac684260e9b7b071d883a0c2359f1e4b3f8333f10f18cd70524a65aeb7b4e90db3936e38ce28cbe"
        },
        {
          "alg": "SHA3-384",
          "content": "05a5c304b5a52b84f5ee69c7e6ec8ecd3b6d0655da23b6b019e7717731594f22c412d17f714360b8d81e6d3cb8f16b86"
        },
        {
          "alg": "SHA3-256",
          "content": "4849ff75ecbcca41d5be988745540641ecb5e23e196f83302d3f3b4ecbba9308"
        },
        {
          "alg": "SHA3-512",
          "content": "adb7b85081e710178b65f0c0bb78bd3e593b4e1fcb28717374bff638dc51b94e37f907d68a99fa52bde3ae173b63cd183f3759a7ca5771ca238403bed278fa7b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/alpine-infra@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/Alpine/alpine-infra",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver.git/alpine-parent/alpine-infra",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.commons",
      "name": "commons-collections4",
      "version": "4.5.0",
      "description": "The Apache Commons Collections package contains types that extend and augment the Java Collections Framework.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d564105594035b363b193d8ce3c18b98"
        },
        {
          "alg": "SHA-1",
          "content": "e5cf89f0c6e132fc970bd9a465fdcb8dbe94f75a"
        },
        {
          "alg": "SHA-256",
          "content": "00f93263c267be201b8ae521b44a7137271b16688435340bf629db1bac0a5845"
        },
        {
          "alg": "SHA-512",
          "content": "ee43c513ac9dcbd7dd23b5cbb4ea5f65a2e10cdfbb403d080b87e778b3b45062315522297c41eca514a9a946228ad7650f0a572d5b78effb8260dd8084131988"
        },
        {
          "alg": "SHA-384",
          "content": "73db8eb3e79569b3fa62aefdce413e6ea250b9853953cb75b9d5ce0f2f35b59b6e86ef708326a608ff20d95bdade8522"
        },
        {
          "alg": "SHA3-384",
          "content": "7a9c035fa846cdcebd4331eb86ed31a67595518299a8bee54597c1eb663aee63214553a561a510b929035266c2a4800b"
        },
        {
          "alg": "SHA3-256",
          "content": "614c41bfd8f9c6c1c1e5667c5be45587c3021b780937ad62f54d17051f425086"
        },
        {
          "alg": "SHA3-512",
          "content": "3cfd12ec2d03ed29b682123cedae422a4c6dc459034a7e0ab5f00ccd422cb9a2ec423a08b953119c426569b888157a6d80aa0e0c63debea50c5c54c481e2eff5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar",
      "externalReferences": [
        {
          "url": "https://commons.apache.org/proper/commons-collections/",
          "type": "website"
        },
        {
          "url": "https://github.com/apache/commons-parent/actions",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/COLLECTIONS",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/commons-user/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitbox.apache.org/repos/asf?p=commons-collections.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.datanucleus/datanucleus-rdbms@6.0.11?type=jar",
      "group": "org.datanucleus",
      "name": "datanucleus-rdbms",
      "version": "6.0.11",
      "description": "Plugin for DataNucleus providing persistence to RDBMS datastores.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "33a96bd9a1e242d31cc0929562e3af04"
        },
        {
          "alg": "SHA-1",
          "content": "52d9d3d77483021736ee88ee7f53d2447cb1049e"
        },
        {
          "alg": "SHA-256",
          "content": "a9271d3c793bdd73ab6444346d6036982929529cdcb874dbd8fad1e90de04338"
        },
        {
          "alg": "SHA-512",
          "content": "fe93c578f598f5282e637b542e7dd44061b59ea6e9f00fc6df595c9f26ff567daccf7ec7359e3a120e5a4090b8b7f4ff36e991210507123d6e3477f0aae24984"
        },
        {
          "alg": "SHA-384",
          "content": "f80c7aa7375f1317172236773e4ba02a67c45b788566977278d8125fe4226ffd60604c4fe5ad2b82aa97122f15ed8e7d"
        },
        {
          "alg": "SHA3-384",
          "content": "0583f548e429a4412a87e6423ec0d334aca631470b3e7a355d192e39a68c64e68d59fbff11552eefc7b7cb2153fcc2a3"
        },
        {
          "alg": "SHA3-256",
          "content": "8cb46d03fdee2bc0f022e5d724c1b7affcd378e5bd4c72c0779e80f35fe40b47"
        },
        {
          "alg": "SHA3-512",
          "content": "e630592197b25c46cf137b4146e884b18b6b4793ed4a4a32f6169ab51f64775a5eabdbccd3bb3e2dc87526330bc4cf0b0b8a661e457a32ca565d10f3b2759af8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.datanucleus/datanucleus-rdbms@6.0.11?type=jar",
      "externalReferences": [
        {
          "url": "http://www.datanucleus.org/#/datanucleus-rdbms",
          "type": "website"
        },
        {
          "url": "https://github.com/datanucleus/datanucleus-rdbms",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.zaxxer/HikariCP@7.0.2?type=jar",
      "publisher": "Zaxxer.com",
      "group": "com.zaxxer",
      "name": "HikariCP",
      "version": "7.0.2",
      "description": "Ultimate JDBC Connection Pool",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c36937c742c20cbdc7bcb47019e33151"
        },
        {
          "alg": "SHA-1",
          "content": "c2b43c946b86a14a96342379e22b004c56c6166d"
        },
        {
          "alg": "SHA-256",
          "content": "f1e612fa27345be3107a85431e8a8aeb205c15364ab2f2d411e40a9d7bb08095"
        },
        {
          "alg": "SHA-512",
          "content": "fab69440ecf96687ac9cd69d19503a824f7bec74d97329ee6f8568981200799a1503df5517b9e0322a8d139fc71d6af193314890716ff8f0fd52163dad6f0c6c"
        },
        {
          "alg": "SHA-384",
          "content": "b14c735ebeeb00e113c159cbc22b579ebe9676949a0c50f478bdc54daad8370d13954fc8df7b751ce6b3ab978fbfc43c"
        },
        {
          "alg": "SHA3-384",
          "content": "ecbcb443c087f455cc0e15f65736f9559a79e6375c4686830ede2e653d9dc79c36bb99b537f242f0f8a8acf3d5f22d56"
        },
        {
          "alg": "SHA3-256",
          "content": "3ff38f8630222d165d6ac18696a780e19d8e70019210a59a1dbff293de0b2db2"
        },
        {
          "alg": "SHA3-512",
          "content": "7ca91f467a107c528c8da8ea75a3503d8aa88fc4ac521e2d5d0359c28c4f8997bf472bc0445089a77f1a0efa0513fd9304de9bfd6ed4b14288b87461046b2e1b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.zaxxer/HikariCP@7.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/brettwooldridge/HikariCP",
          "type": "website"
        },
        {
          "url": "https://github.com/brettwooldridge/HikariCP/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/brettwooldridge/HikariCP",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/alpine-server@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "alpine-server",
      "version": "5.7.0-alpha.9-SNAPSHOT",
      "description": "An opinionated scaffolding library that jumpstarts Java projects with an API-first design, secure defaults, and minimal dependencies.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a482927e35161a06758469186566baee"
        },
        {
          "alg": "SHA-1",
          "content": "de6256137f71917e2d175fedacad554ee1b579a2"
        },
        {
          "alg": "SHA-256",
          "content": "0be2943166336cf910c83d7be75f1b96c625635728bac9737acdc1a7cbd55619"
        },
        {
          "alg": "SHA-512",
          "content": "1a12e5d04ba9a89ebcdca8d322f85ce8d577e63e6890b608df0e0b6ecaba09a26b3131f91a03192abd86191e9fe6f41f3e8e121a4137ec8c69def336daa0db1d"
        },
        {
          "alg": "SHA-384",
          "content": "83ae6720b05f52f2baeeed23bcda9df3007c521e6b3b34c51fe80a0eadd0d3ba626d6dcce09093f66c7f4738ee22a0f2"
        },
        {
          "alg": "SHA3-384",
          "content": "c189a30cbddc9eb31f85fe3d70add16193c631aaeacf6eff81e4c99c96bb4790f614b87fdae4f8d2b66391e8982e3d37"
        },
        {
          "alg": "SHA3-256",
          "content": "51bbf56c0ee068ae84cd3784128cee407e63ef1e25200bd0b046cee5323f9f70"
        },
        {
          "alg": "SHA3-512",
          "content": "38a538ee0f9b2f6e89e829c88827c6b3798dc3140928be32bd7445baab8f97b63e4e2956d01eaf2008f68a9114ebf412d1c43003a4fe2768304ab5b2cccd9a84"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/alpine-server@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/Alpine/alpine-server",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver.git/alpine-parent/alpine-server",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/commons-io/commons-io@2.22.0?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "commons-io",
      "name": "commons-io",
      "version": "2.22.0",
      "description": "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f91d54bd47c42456b4a5ae62eed85565"
        },
        {
          "alg": "SHA-1",
          "content": "5b1e18bc0ad651ed878029d83f88d9c8189fd51e"
        },
        {
          "alg": "SHA-256",
          "content": "2b9a7b1f726fb86216dbd2c8321eabe0221dbd5b1be81c18e1cb53811b104758"
        },
        {
          "alg": "SHA-512",
          "content": "fca0b4ae70e531bee74413e0b865981aa8b60a9390f789b63997203dae67be65362e95a0c35b9d4b072fbb0810114783415dd22b92fb42e5594b10992f632bc5"
        },
        {
          "alg": "SHA-384",
          "content": "e1fbf3729c4d2d77b036d90234d9e2ed3fe0c2f5379d333a695c1cb0037f63d288c8b62de05022da0f612da65835fee0"
        },
        {
          "alg": "SHA3-384",
          "content": "02acc6e7f614d8684e7104a52123573152a2e1b651bc6a5be12d4b58861c757d6c56f51105bb97c92309d126059232ea"
        },
        {
          "alg": "SHA3-256",
          "content": "134157813629f4d9b97044602e1fa2f61c14c3be1f641490b3e06ac941ff3315"
        },
        {
          "alg": "SHA3-512",
          "content": "47832f3b7abe375f3b0ed169996d9776b2a0007b073ab3f06438dce67be9bda45e8aac84737cc639ada4424b13c7614d8c9fcb23779868f7421414777cc0946a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/commons-io/commons-io@2.22.0?type=jar",
      "externalReferences": [
        {
          "url": "https://commons.apache.org/proper/commons-io/",
          "type": "website"
        },
        {
          "url": "https://github.com/apache/commons-io/actions",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/IO",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/commons-user/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitbox.apache.org/repos/asf?p=commons-io.git/commons-io",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.containers",
      "name": "jersey-container-servlet",
      "version": "4.0.2",
      "description": "Jersey core Servlet 3.x implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "25818f2d34a03809a4e2a1a4949aa3c5"
        },
        {
          "alg": "SHA-1",
          "content": "e49f6b43e8f35fc42d78aadebf9ce675be83eb2a"
        },
        {
          "alg": "SHA-256",
          "content": "9317b4c9cc8f86906fe6f64b2ae613d7b586d7fb396cd13eaf615a2d5bb142ae"
        },
        {
          "alg": "SHA-512",
          "content": "f881cd95bd25fae560bf52771a3e869cfe732c5ac99aae1645a014da92a2f5db7b6e2353dfdfa595e3f39aa85a1516a0b45b71b33d226d5af8fb1aaca3a9492b"
        },
        {
          "alg": "SHA-384",
          "content": "a71eea737f5a1a65ba648fe4e315f5f7a5731649199fa4c925146592639642ee48b15939f30277c8b27022294394dc1a"
        },
        {
          "alg": "SHA3-384",
          "content": "b4ca6ab8e6eb625bbafe472a8c5be3aa3b93e296345243e4ef5f8a29b37a517954b41829a7d9a214bdc0c02976d3a48a"
        },
        {
          "alg": "SHA3-256",
          "content": "49b2b2914f513aa873f17692bb67b324c9109ce9b8ea95db11e2c92101c4e4fa"
        },
        {
          "alg": "SHA3-512",
          "content": "887968d759326a48839b736ed1f44cc444f6c6e2895219c4886323eb417ae8ef824e4d87b9739906e84fd101073be0eddb2b0e1e2b9a66f19cb7ef37b86bd193"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-container-servlet",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "http://localhost",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/project/jersey-container-servlet",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.media/jersey-media-json-jackson@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.media",
      "name": "jersey-media-json-jackson",
      "version": "4.0.2",
      "description": "Jersey JSON Jackson (2.x) entity providers support module.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "35bc0ebd87e351b294c4c2d80a49637d"
        },
        {
          "alg": "SHA-1",
          "content": "49a43c8e343340e8a91671d14a4e71bf6bcca832"
        },
        {
          "alg": "SHA-256",
          "content": "efa2fdad26e994adde4f827c11e44ab5fd3cf3c3e0aa4f99e8eefd1b83449fa7"
        },
        {
          "alg": "SHA-512",
          "content": "c57f5a439c0fec721d8776afe4947d004bb77a3beae809bf71cfe621f6a3aad3342450529a0e0d0696dce691bf3ab35c167829aa60829db903f5b5b73998b5ba"
        },
        {
          "alg": "SHA-384",
          "content": "f324740990411a83622cd12bdefb3e89cfb02c4ea703f4b6a693033b906f0c51b36ff28bb6ff38e5de1553b8e56b8e09"
        },
        {
          "alg": "SHA3-384",
          "content": "67024bf3a7e0eb78074482c54a6bb8edde46152a8421b0018948592358b548c653049d1cfea3c46d2f2e6a43696d260c"
        },
        {
          "alg": "SHA3-256",
          "content": "929d16ec5a727e2fb44e970048f7b9afb15af7e3cfe8ae6927faf9214ce1bc9e"
        },
        {
          "alg": "SHA3-512",
          "content": "9e21c8523d65bb618302f96ab10914fe217e60d18ec6ef3ebea51fdccd8c0fe8c5e6b159a59d257134448c152dde8496e4b23e054d55254465f0797fa5e1a703"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "name": "The GNU General Public License (GPL), Version 2, With Classpath Exception",
            "url": "https://www.gnu.org/software/classpath/license.html"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.media/jersey-media-json-jackson@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-media-json-jackson",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "http://localhost",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/project/jersey-media-json-jackson",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.ext/jersey-entity-filtering@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.ext",
      "name": "jersey-entity-filtering",
      "version": "4.0.2",
      "description": "Jersey extension module providing support for Entity Data Filtering.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6a9d18c10c375eaf87da84354bdbea31"
        },
        {
          "alg": "SHA-1",
          "content": "ebe669571bf00ea4030cfd17c3593ad1d334662d"
        },
        {
          "alg": "SHA-256",
          "content": "633afbf5f3c1ae53aeffbec1f486a878446f19ec8df42b2f795cb06620d1db90"
        },
        {
          "alg": "SHA-512",
          "content": "db48c6417f847d2f51b41d15315c6e73ed3a50e8b3f3b767f05c3f50827bc64359a9132a76283913ea753e840bfb96b0aa602e92b8b8818cb80d47fed11eb4f9"
        },
        {
          "alg": "SHA-384",
          "content": "c290248a96e5ccbc7bda48f0ac8312f829c801921aa1614066595b0f7395af94d67732bb4684834db85c1fa59db96d76"
        },
        {
          "alg": "SHA3-384",
          "content": "53d6d7c09162840e7bed9f1fb7a4bbf761c641b9701d8d562b3233e866cb424887120e7933dbcaea37d9951b67579773"
        },
        {
          "alg": "SHA3-256",
          "content": "189e43a565898a7fa96814e1c2430033a3e85f053958dc5c9c803e26385f899c"
        },
        {
          "alg": "SHA3-512",
          "content": "8789df3ed80682cc9bcdc0706c967a6749490a7b00f2a017fb9c5f1a500a14f2ddd2ff3596a95c0e44d86b156eb1be4b75a4b8bdb44aa4087323b6908716fd09"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.ext/jersey-entity-filtering@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-entity-filtering",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "http://localhost",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/project/jersey-entity-filtering",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.module/jackson-module-jakarta-xmlbind-annotations@2.21.3?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.module",
      "name": "jackson-module-jakarta-xmlbind-annotations",
      "version": "2.21.3",
      "description": "Support for using Jakarta XML Bind (aka JAXB 3.0) annotations as an alternative to \u0022native\u0022 Jackson annotations, for configuring data-binding.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9651f3099857d4cdbd9fd2e3af0dc2b3"
        },
        {
          "alg": "SHA-1",
          "content": "5464ed68549201b60eeeacbe4fdfe7ff2f3b3a7d"
        },
        {
          "alg": "SHA-256",
          "content": "3bb8a3bf2a6637f036d4881971f1417de3e31d300f0154d5865bcdd34411d983"
        },
        {
          "alg": "SHA-512",
          "content": "4075d97567801fb3f218c3438f2ab8a66909d2be14e9cbe50e5db3c586957a708427522c09fd84afadeaf260bec1350dc534424824108d59f6c71272ccc7f363"
        },
        {
          "alg": "SHA-384",
          "content": "2b3de6918a402917d363368fdbac8adadc842744e7fb953355f58d3294fac255afbe4759bb5de9b260f0ffbc7dab8a07"
        },
        {
          "alg": "SHA3-384",
          "content": "76abb8f3320dc76f9beb931e38bcf28df9c4e722fa18930fef836f2c9fccac71fabdd1957a60ecbc1e0584c541bb0433"
        },
        {
          "alg": "SHA3-256",
          "content": "d907fa96ee0da35bd1fd84db0f6171098e88619371312e2ee2cb832e9e2fe41f"
        },
        {
          "alg": "SHA3-512",
          "content": "75955ddddc6d47be64703b11cd99bcf3450dcfc2473f6d040166183768c204e5cae287660c60db666135ccc10dbf1aa33c96d6873d1e68b672d6b0d358286e0c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.module/jackson-module-jakarta-xmlbind-annotations@2.21.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-modules-base",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-modules-base/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-modules-base/jackson-module-jakarta-xmlbind-annotations",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.xml.bind",
      "name": "jakarta.xml.bind-api",
      "version": "4.0.2",
      "description": "Jakarta XML Binding API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0c8f9991081def819435c3ff36e4d93f"
        },
        {
          "alg": "SHA-1",
          "content": "6cd5a999b834b63238005b7144136379dc36cad2"
        },
        {
          "alg": "SHA-256",
          "content": "0d6bcfe47763e85047acf7c398336dc84ff85ebcad0a7cb6f3b9d3e981245406"
        },
        {
          "alg": "SHA-512",
          "content": "2e57ce867ae3592959243ab9d7d064b09d9587933c98f89f5d5eeb8fe70556a53fea6db91520a2e086555684e8917f4001741bd8ffb07d26c59fe95c13d71fa0"
        },
        {
          "alg": "SHA-384",
          "content": "7ac5da337fccfa426b48691febed0d874a8e9a6a230bb7a53169f902e5b499778106f7b710afbe133dbd7bfacca693a0"
        },
        {
          "alg": "SHA3-384",
          "content": "fc952425a51459a5d18dc7b6315625c55889e1b92e700450c84205506e5107ca4c7c8bc449190220bf471db3dcbf9c8a"
        },
        {
          "alg": "SHA3-256",
          "content": "a78dd7c5883b16cf899495930e653650005c71b4d9b509e56cac4665778d715e"
        },
        {
          "alg": "SHA3-512",
          "content": "bdf9db79b8ade9421c3f5fc497ebe13a552be5852d99cedfa38bb6c760c8bf190f88204ab6e02442db5fb24378afc6112297c5a582d4e721de71285405a6429d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/jakartaee/jaxb-api/jakarta.xml.bind-api",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jakartaee/jaxb-api/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jaxb-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jakartaee/jaxb-api.git/jakarta.xml.bind-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.media/jersey-media-multipart@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.media",
      "name": "jersey-media-multipart",
      "version": "4.0.2",
      "description": "Jersey Multipart entity providers support module.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "aae6111826bc8092f33c8e80de9c120d"
        },
        {
          "alg": "SHA-1",
          "content": "f5400fc442af3cdcc46f0204f2b6072402aaca9d"
        },
        {
          "alg": "SHA-256",
          "content": "b9bbd74fa5337753c1f96e2ef1e9ab5c7ab1ad3b8fe1c4f719a311e8f3821aed"
        },
        {
          "alg": "SHA-512",
          "content": "75a380ec7fee2a1a04327cc765ea6a52e1b70da3a91dc921cbc221085b1541e68e40d5c743a6227c86d2d74a65cfe68b05ec1fbce42ac739f6a5e4498c8dcdd6"
        },
        {
          "alg": "SHA-384",
          "content": "f09f5dcd92f1960593f1909c13813774658f735e8a875502c9061c51cc6a78d5195d1973ea346809d837d25e3dff2ee4"
        },
        {
          "alg": "SHA3-384",
          "content": "07030c4ab91f627b75f8d93460e45e4966db068a6a06fc2108a2cde14360685717d4669d0311885687d787085e79c97a"
        },
        {
          "alg": "SHA3-256",
          "content": "d4110cad7c9d2fb29775aa789b662dfda3b70755706d90815eaaf0ee0c3f5d4d"
        },
        {
          "alg": "SHA3-512",
          "content": "ecd7b48b0e3069d4441f9a9f357552ba7f15a952fab0d71e52bfac349c04492c80687f849b88d2b22b85ee1dc902d56a9b7cf1c20d9c0440bfea5113798d290c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.media/jersey-media-multipart@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-media-multipart",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "http://localhost",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/project/jersey-media-multipart",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jvnet.mimepull/mimepull@1.9.15?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.jvnet.mimepull",
      "name": "mimepull",
      "version": "1.9.15",
      "description": "Provides a streaming API to access attachments parts in a MIME message.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "fdc35a1eae84c5a60c95d617551d4a06"
        },
        {
          "alg": "SHA-1",
          "content": "60f9a7991ad9ec1a280db8deea216a91c10aae74"
        },
        {
          "alg": "SHA-256",
          "content": "b9f586bf8844b14a33e75fe7a4b94896dc80d80b732d128777e287af14c836fa"
        },
        {
          "alg": "SHA-512",
          "content": "d80e7f2550272edefe8eebace17c8b836d72602bfff67007c6463d4c7b02a36b97467f23d358601d97882160533ed110da938082994434e2312fb0c4e0f2a19e"
        },
        {
          "alg": "SHA-384",
          "content": "dea380fc137e9784a6c6d114c0a12d4a415baa21e2ce188b952ee1bfa59baaa53e133a0c5fcde9ff1abdbf4dbe93a58b"
        },
        {
          "alg": "SHA3-384",
          "content": "c4d8fc6eff8b9325c07f037484d49e1a52ad580237ba247eec92617e15be03501862b7f64b334919077e124bb94975c5"
        },
        {
          "alg": "SHA3-256",
          "content": "648e6b07265e79912cf8191efdaf316a7f2d317e79d7e4e9b7e323556da74fac"
        },
        {
          "alg": "SHA3-512",
          "content": "14672a4a8dd2a5fe1d437a1204de922eb668ff76c72dae0acc4438fa54eb25a2f6232c75038a391428544b3e77a0a6290d84a99b9c60ea7ce743561ca9b4e1ba"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.jvnet.mimepull/mimepull@1.9.15?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/metro-mimepull",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/metro-mimepull/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/metro-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/metro-mimepull",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.inject",
      "name": "jersey-hk2",
      "version": "4.0.2",
      "description": "HK2 InjectionManager implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "295f464e22b0303c2c5dc23888194042"
        },
        {
          "alg": "SHA-1",
          "content": "8283989a7a36b51f31c5f35b354881d106bee6b3"
        },
        {
          "alg": "SHA-256",
          "content": "5df758fc55d0d7cdb431b4c9ab50fbf613965ce0a7898d1a923d957e3a93df2c"
        },
        {
          "alg": "SHA-512",
          "content": "846c8d018bb0059eda93b8b1f464f7bf14d284b36d871df0233b6655486344168373a31b8a778891d2de0d8e4141446e04b0845b21bce793ce728c0d93bda512"
        },
        {
          "alg": "SHA-384",
          "content": "1b3d5da027e60c1cd2d0c97069350cef3e42b45b4814976ce8185dcf57b1dac907375835f8a34f25f59fdcd0c394e4fb"
        },
        {
          "alg": "SHA3-384",
          "content": "fd5e03a684c044960e176577371ce74cadabc5673d558f96a7d1dff56b59bef6809a897913c99660bcdcc8c27fe43be4"
        },
        {
          "alg": "SHA3-256",
          "content": "b9c053c2b3cd0fe0c1bd0c8b78ac4a7a1b97ce5c80f7722483b70d40c1cfb476"
        },
        {
          "alg": "SHA3-512",
          "content": "087e8d0583f2db5c0b877188d8bd85e15af42e0e6bdb10e5363639a8e721cf128874fdeaead7ad5d2b5c6b2e2741708d4bddd3638c7f27275b11c3a96095c2ef"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-hk2",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "http://localhost",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/project/jersey-hk2",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.hk2/hk2-locator@4.0.0-M3?type=jar",
      "publisher": "Oracle Corporation",
      "group": "org.glassfish.hk2",
      "name": "hk2-locator",
      "version": "4.0.0-M3",
      "description": "ServiceLocator Default Implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b4208d604d4c23e3acae9f6300aafd4c"
        },
        {
          "alg": "SHA-1",
          "content": "64a198be0ce5a86c6e6e439188fc4e7187416588"
        },
        {
          "alg": "SHA-256",
          "content": "290027395d95bfcbb5f40c992376a6f21c75bf63c9c8d4df3cfc034ba1a85ded"
        },
        {
          "alg": "SHA-512",
          "content": "cb3280c9af78f7fa19cf537448bb28be7e1981733fbf2bc1e86823288539def8c856cb915c921c9cd6ef490b39bb93aba998eb35ed967aa3c0a11d7a65b05cad"
        },
        {
          "alg": "SHA-384",
          "content": "a0a74b0787b7240632ac04fb635bfb8cdb8ce7529ebeca5a03f3157ee5ccdd902ce83300995eff2e44ff5d58e0ed330b"
        },
        {
          "alg": "SHA3-384",
          "content": "f260e2b328e7be64987ac4b2f72b7f627eac5dbfb318ae40ae5c7cd08a5cb4a8e2b60cd2e5863bfb54782200563a7f6c"
        },
        {
          "alg": "SHA3-256",
          "content": "a3bd95277a4f2f33a9e8b0fec11ef6b7e7e57efe6454bb35a8b9a9474c7d8818"
        },
        {
          "alg": "SHA3-512",
          "content": "1a4eb5c85a9346ee214f5f9afc1a9fa5bc9b0d8bcf4261370a6dc6efd595b3a3ff50ad89eb85a4c6693ebf86590d362d58fbffdc5c399c7746524caef25ad24b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.hk2/hk2-locator@4.0.0-M3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/hk2-locator",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/hk2-locator",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@4.0.0-M3?type=jar",
      "publisher": "Oracle Corporation",
      "group": "org.glassfish.hk2.external",
      "name": "aopalliance-repackaged",
      "version": "4.0.0-M3",
      "description": "Dependency Injection Kernel",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "265ded5507ff1db7cd2184d4846fc85b"
        },
        {
          "alg": "SHA-1",
          "content": "71779579326f1648524a86fdee77bdf1d2d45336"
        },
        {
          "alg": "SHA-256",
          "content": "65c0abb946d2ab3a1237c610f24bf15f04696151e9cafbe1afa6cee52fbed5ed"
        },
        {
          "alg": "SHA-512",
          "content": "e45784cc801cef6726c4c74ba6158f34de84b6ee7b3c4823be16b9a53aee22f0b251c8c0144953c8c09d4e8169c2134a1530baece93169efbb33c0c118af7de5"
        },
        {
          "alg": "SHA-384",
          "content": "de80c2803aafdedaddb185277ca9946c5ea24e8f3f10f172abedf8cf9fd2de61d4ac022ae466cbe9fc54ffff3a43acd8"
        },
        {
          "alg": "SHA3-384",
          "content": "af3ce290b4aecad2cf4f5b163a484013732d2891b640b927169e9dfdaec19254404b5ce9a0162842a1d915024fa5752a"
        },
        {
          "alg": "SHA3-256",
          "content": "9043468d2fa46fd4b156845bcfa8a5ed350dcab0929a970aa2d4f885c62f69c6"
        },
        {
          "alg": "SHA3-512",
          "content": "88722b8a289ecbe9753c9801ffadc909089879b4c3d71edd4ec298eb5d6fddb5a6bd0d56fa01ae6fad5f9826460d0809a6d0f4aabc009a1d2d4377f03fb507ed"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@4.0.0-M3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/external/aopalliance-repackaged",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/external/aopalliance-repackaged",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.hk2/hk2-api@4.0.0-M3?type=jar",
      "publisher": "Oracle Corporation",
      "group": "org.glassfish.hk2",
      "name": "hk2-api",
      "version": "4.0.0-M3",
      "description": "HK2 API module",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4a7799f8b0c76121478fdbfd3fa481cb"
        },
        {
          "alg": "SHA-1",
          "content": "4b9520d9c4ecdc8b688a50968c19b54b55fc1274"
        },
        {
          "alg": "SHA-256",
          "content": "66f859916e6a7de3622973acf7f672a895c9bac81622080dfbb95ac9b021b1f8"
        },
        {
          "alg": "SHA-512",
          "content": "f202d82a2493430495b7c0d2006f21b3435f5367b6e24f7ef41736c2fb0d551a8ab4a269808dec7f8c8df8b3bb62fc05f148740ca5b4f642becac6216971ba12"
        },
        {
          "alg": "SHA-384",
          "content": "be02adf52ba9a8cfc1fa5792b4b2ede0a577e8f55d7589740c563ddd3c6fcbabf9ed9d9a310f5f8ac4aac91b09cecc58"
        },
        {
          "alg": "SHA3-384",
          "content": "0c5d90d77991c80953945914bbc2cf22420765396edf899863f16dc50527cb251c04c8e3ee6b68a44e657ce76a97c7e3"
        },
        {
          "alg": "SHA3-256",
          "content": "25692ba0b74506800453bed8bc69f98b6b8ebe75cf78984cb5af1047a0e3f028"
        },
        {
          "alg": "SHA3-512",
          "content": "e4d89788416d7f29a91758f03715fc3bc5c85023bc0e0f2093852d72c0437308bb53e71c5710f6e8f0841a1eaece0af1351ea0bce5ca075f9b2c19af8508b9d6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.hk2/hk2-api@4.0.0-M3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/hk2-api",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/hk2-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.hk2/hk2-utils@4.0.0-M3?type=jar",
      "publisher": "Oracle Corporation",
      "group": "org.glassfish.hk2",
      "name": "hk2-utils",
      "version": "4.0.0-M3",
      "description": "HK2 Implementation Utilities",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8bc6984bd681f30286f4d95ee8795b61"
        },
        {
          "alg": "SHA-1",
          "content": "d0017a4fffdb8184582d579c15e4d90765e4d11b"
        },
        {
          "alg": "SHA-256",
          "content": "ba7087827fe89af3d824fc26556c985ce9afa0cc30faa24e8b65145ca0fefcf1"
        },
        {
          "alg": "SHA-512",
          "content": "b39a525b64d012ae99e09809ecd906bab9fc98baf027005b86f964b2baf2ca455e4fca655bca1b147ddc8225b0f6abda32859beed920d59f813bf4c3a5de7a43"
        },
        {
          "alg": "SHA-384",
          "content": "08d57c36622c3cfd6471b0552653aea5194d491e7cef0a8946ebc7c26195e640c6fe54c5db4829e71f5a213294fc5a6c"
        },
        {
          "alg": "SHA3-384",
          "content": "b5d5b9bb24d31585a42052571cb6cad2b10035a3439ec6f66689dff03034cab04d81a3b0187c3917158f1e6332ae75e5"
        },
        {
          "alg": "SHA3-256",
          "content": "0d635ee61147b0fcf9ec3208926e86e14752e390f45ec26828d427a12b0cf15e"
        },
        {
          "alg": "SHA3-512",
          "content": "5280173e2349d1490362b2b320cbbd17e56f751d995ac20e2867de2c7955118c3d12f852c784e0e8dce21854c534a0c1721245e8b4ab1d96a97788a3dc006372"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.hk2/hk2-utils@4.0.0-M3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/hk2-utils",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/hk2-utils",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.javassist/javassist@3.30.2-GA?type=jar",
      "publisher": "Shigeru Chiba, www.javassist.org",
      "group": "org.javassist",
      "name": "javassist",
      "version": "3.30.2-GA",
      "description": "Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation simple. It is a class library for editing bytecodes in Java.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f5b827b8ddec0629cc7a6d7dafc45999"
        },
        {
          "alg": "SHA-1",
          "content": "284580b5e42dfa1b8267058566435d9e93fae7f7"
        },
        {
          "alg": "SHA-256",
          "content": "eba37290994b5e4868f3af98ff113f6244a6b099385d9ad46881307d3cb01aaf"
        },
        {
          "alg": "SHA-512",
          "content": "046c5b87732ef28540c56f88891238e49ac15fcc23e1f13e0b12de816831ba3de54e68a727b6163877a7b19b13f1362c0e6affa2664af1fdac5748632ed7a09e"
        },
        {
          "alg": "SHA-384",
          "content": "d1dfb87ac4d7797ea07098b7814190eed3aa16e86dd792916ff7f86c30ad456dd153f9ae4e77f13cee03e23dd3cfb24b"
        },
        {
          "alg": "SHA3-384",
          "content": "f70abfcb1b0d9e7903171bf52fe34b33ceffa9c53b697fabac9f2d3e02b8621446f7b2471d44e2cb70862e559b4d36b2"
        },
        {
          "alg": "SHA3-256",
          "content": "cf3f1d9150d71a6f23a749c24d355accb133991a9272110c5fa0ccff73220367"
        },
        {
          "alg": "SHA3-512",
          "content": "e294c989c20271f42a4bf0c63cbb691cb2fa284088c8a846983aa0e4948b4325131b8829b210214f539d30eb4e20b14c06f4b164208488719512739d78dfd454"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MPL-1.1"
          }
        },
        {
          "license": {
            "id": "LGPL-2.1-only"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.javassist/javassist@3.30.2-GA?type=jar",
      "externalReferences": [
        {
          "url": "https://www.javassist.org/",
          "type": "website"
        },
        {
          "url": "https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://jira.jboss.org/jira/browse/JASSIST/",
          "type": "issue-tracker"
        },
        {
          "url": "scm:git:git@github.com:jboss-javassist/javassist.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.annotation",
      "name": "jakarta.annotation-api",
      "version": "3.0.0",
      "description": "Jakarta Annotations API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "7faffaab962918da4cf5ddfd76609dd2"
        },
        {
          "alg": "SHA-1",
          "content": "54f928fadec906a99d558536756d171917b9d936"
        },
        {
          "alg": "SHA-256",
          "content": "b01f55552284cfb149411e64eabca75e942d26d2e1786b32914250e4330afaa2"
        },
        {
          "alg": "SHA-512",
          "content": "2bd5a16684c4e8144897ba6dc467628d1b8a85326235240e4c20101b6df3681d23aeebc30ca99e395ec848f33cb5244085031b2a0fbce746c8ede7148a5e7c1d"
        },
        {
          "alg": "SHA-384",
          "content": "1a12cb78019d310eb08314f863c2a0e48aa2845bde844f8204e653ec50713bf135cc58cce882e14ef631327952b5ad99"
        },
        {
          "alg": "SHA3-384",
          "content": "a0dd7dd32e8dc5ed679589f6066f16593b52334b9947a71381aeab44b3cbe295ec24dfef4fbfa5514ba24ea60fe042a9"
        },
        {
          "alg": "SHA3-256",
          "content": "6ae915a05b483f75c51f3a109cf368842d186b2996758b8a106377a7a9485c12"
        },
        {
          "alg": "SHA3-512",
          "content": "52f611aa0a98812e525be2b9d5a5712aef660598cff64282dbd9afc237560f442ab745fc95c919216f9cb4197c224ba6c7317282962c638fee956925bfa031c0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.ca",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jakartaee/common-annotations-api/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/ca-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jakartaee/common-annotations-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.json/jakarta.json-api@2.1.3?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.json",
      "name": "jakarta.json-api",
      "version": "2.1.3",
      "description": "Jakarta JSON Processing defines a Java(R) based framework for parsing, generating, transforming, and querying JSON documents.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "596997520702889d4afef9cffbd4b71a"
        },
        {
          "alg": "SHA-1",
          "content": "4febd83e1d9d1561d078af460ecd19532383735c"
        },
        {
          "alg": "SHA-256",
          "content": "bc934142805ea1d794f1440563965a3861a2a9fb7414ecd3fe44f26500734414"
        },
        {
          "alg": "SHA-512",
          "content": "5a6566f0ceaa8b0ca40ae643942c0d46acd118a3b4d85af5f3a977e738465e8c8d4bc977f0c3e4b51f4471e408c28f66dbc0b19adf61237f6f6f7fa1d0dacc31"
        },
        {
          "alg": "SHA-384",
          "content": "1a17b8a416692ba0e485d7290782b2b5c4de8cb65c2043f221381deee668953655c221dc3efa29d3c65c8b2c1fab173f"
        },
        {
          "alg": "SHA3-384",
          "content": "4c009f9fec6b1e14b2c675ee7addb49ebd047d71d7aaf31601ccea3ffe4af1d82838a3452b0e5d7c2814e27861cd3ffd"
        },
        {
          "alg": "SHA3-256",
          "content": "5b839f4645dbac0d1bc76a91e168a52574c2bb6de0b7e92cd14aafd0ad6a28b0"
        },
        {
          "alg": "SHA3-512",
          "content": "fedcd8618f44ab0b771bef7d2fcb61d49021eb2e592d8d3058d3f57e7fe0ed1a9239cac859fe534dd0629aaf577fb8f77841412dbb3ae58b8d8cd0754da2ec48"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "name": "GNU General Public License, version 2 with the GNU Classpath Exception",
            "url": "https://projects.eclipse.org/license/secondary-gpl-2.0-cp"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.json/jakarta.json-api@2.1.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/jsonp",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/ee4j/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jsonp",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.parsson/jakarta.json@1.1.7?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.eclipse.parsson",
      "name": "jakarta.json",
      "version": "1.1.7",
      "description": "Default provider for Jakarta JSON Processing",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "68b696da0b95318047ff3a2403bfd86d"
        },
        {
          "alg": "SHA-1",
          "content": "91a668f91f296fe82c6a25cb0175b733e9e05fe7"
        },
        {
          "alg": "SHA-256",
          "content": "5905f52283a7491e06ba58556103d45c3199a42602abcd36d510ceda65490ff0"
        },
        {
          "alg": "SHA-512",
          "content": "32d57ea7b52edd91967e13f2812ddea03785d3b2b75f1a35e7567ece81b95b015ce9372fe044d8cdfe5a2cfe27df5a124cb653f5750332a7a9f583c9c429e076"
        },
        {
          "alg": "SHA-384",
          "content": "9b41d27f58cd2f3f787a7ff744f366b5cfe2f23892983bee8305a45c75c846da935155e67132b16e510261c6573611ec"
        },
        {
          "alg": "SHA3-384",
          "content": "2fa091c2f4c818e1296eb3652b212a866c86a804e003cfa81f7c2a328e38b4cfeea3601899321ea3a23671bc8dd5c032"
        },
        {
          "alg": "SHA3-256",
          "content": "6c61679b2f56bf5921c12244452f1dd2a555f73888258f66b8af026f71bfcd87"
        },
        {
          "alg": "SHA3-512",
          "content": "a39ffc271743b687342ef32a2b5be3f5cbfe97b6a09b9832ce5262008af6f77e7fd2f249f141a6ffc295f9e02a444f090dc5187db8b8744d0c32ece338e261c7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "name": "GNU General Public License, version 2 with the GNU Classpath Exception",
            "url": "https://projects.eclipse.org/license/secondary-gpl-2.0-cp"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.parsson/jakarta.json@1.1.7?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/parsson/parsson-bundles/jakarta.json",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/ee4j/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/parsson/parsson-bundles/jakarta.json",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.mindrot/jbcrypt@0.4?type=jar",
      "group": "org.mindrot",
      "name": "jbcrypt",
      "version": "0.4",
      "description": "OpenBSD-style Blowfish password hashing for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d2b39d874e0d512f85386a72b0083682"
        },
        {
          "alg": "SHA-1",
          "content": "af7e61017f73abb18ac4e036954f9f28c6366c07"
        },
        {
          "alg": "SHA-256",
          "content": "e183f6f59404fc1e12073cfea4ace7ea103c900463cd21fb609a7c617ecdf624"
        },
        {
          "alg": "SHA-512",
          "content": "95ffe1f6593f83da047ff289a52b5ef73adcaca4a9a990a47744fbd50a52fce39958c17ed393e95d64093b2acbcaba39ba0b5b983a2e0ad98ce5c6e9282a67cd"
        },
        {
          "alg": "SHA-384",
          "content": "66a24af2134e6fcee1f4232c2c4bab43ab97d0c8ffbbc009f9bb0e5ef2a7d8795a6da3c6b47c583675b98036958aa729"
        },
        {
          "alg": "SHA3-384",
          "content": "33cf5e13897f25c525017888e7fcd2faf9a0f25135be03a65dd154feb11455e33c1df31963470b2ecaaba5267f6ad652"
        },
        {
          "alg": "SHA3-256",
          "content": "a347c842385e1d76780f9afe2200a7b9815bcd873b2a9fdd2652d0b0a5e0d324"
        },
        {
          "alg": "SHA3-512",
          "content": "5a71c6f1fde98865302e8c9ee6c99ace9efa220c0193bcdd56423015d1c73e54bd65f19a9a3ba3199b242589eb9ccc96b1d6c0d413387f8e8fbed7c691fc8790"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://www.isc.org/licenses/"
          }
        }
      ],
      "purl": "pkg:maven/org.mindrot/jbcrypt@0.4?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/djmdjm/jBCrypt",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/djmdjm/jBCrypt.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.nimbusds/oauth2-oidc-sdk@11.37.1?type=jar",
      "publisher": "Connect2id Ltd.",
      "group": "com.nimbusds",
      "name": "oauth2-oidc-sdk",
      "version": "11.37.1",
      "description": "OAuth 2.0 SDK with OpenID Connection extensions for developing client and server applications.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "813eb326525cf57ee0a433ed6ffeaf04"
        },
        {
          "alg": "SHA-1",
          "content": "c59f93d816c9d18e1afcd72ca511cd1f3314bb2e"
        },
        {
          "alg": "SHA-256",
          "content": "fed41210e02419e0806166388c1ad56a99b7705cb02ffd4fa22d361fc7393373"
        },
        {
          "alg": "SHA-512",
          "content": "7cd75898e55cf85e5e1ef302ee4df24a15bcbaae65820610872ad1f65e7b882b105a9d7555cb9d546b7762285e2c9cd7a956d2f19a46756f8d5ff45329d81068"
        },
        {
          "alg": "SHA-384",
          "content": "3955806372a39cc9f01b13979af34c2510e31b7e7dd11f24e5a258f9572744b5c0c110b2e61cc6b0ea796dac536c7b93"
        },
        {
          "alg": "SHA3-384",
          "content": "398468d7252a397e91009f1b4c4cd4bbe40af41c48ec5d14e0953ac81ebf3871e33483e391136bd85682ac6e2b8af040"
        },
        {
          "alg": "SHA3-256",
          "content": "bc8ddf1feacfb3ca4d5e6c63d8e13df6e9527255388264149c38b7d7111bc6e2"
        },
        {
          "alg": "SHA3-512",
          "content": "bb0211bc8414ce961dac8e08b957ccb259e9caf10f62d2e66350f39f3d6e056b53a5f0a8f6b7c295a6c80ef4b29329945d66870a282e3a3dbc8c75eab0ca161e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.nimbusds/oauth2-oidc-sdk@11.37.1?type=jar",
      "externalReferences": [
        {
          "url": "https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar",
      "group": "com.github.stephenc.jcip",
      "name": "jcip-annotations",
      "version": "1.0-1",
      "description": "A clean room implementation of the JCIP Annotations based entirely on the specification provided by the javadocs.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d62dbfa8789378457ada685e2f614846"
        },
        {
          "alg": "SHA-1",
          "content": "ef31541dd28ae2cefdd17c7ebf352d93e9058c63"
        },
        {
          "alg": "SHA-256",
          "content": "4fccff8382aafc589962c4edb262f6aa595e34f1e11e61057d1c6a96e8fc7323"
        },
        {
          "alg": "SHA-512",
          "content": "02fcd16a30d0e68b3e9e4899731181c6abb7117baa15c096ca940e01dde08bb86101cbeae552c497f8a90d923b5fa2f2b6f3850baf8dc94dbd399887924a9069"
        },
        {
          "alg": "SHA-384",
          "content": "88b0ecfde391a3d8468349c70e1539569768dfac3233dfe0b4660904df04e6c6bf26ed9c0784b9b22c122c3448e2a6b6"
        },
        {
          "alg": "SHA3-384",
          "content": "487b53f48b55b98a61ae60abedc43543887944867aa6bcb78d5ed46e2d0d7c19510c5fcadc362d939313feafdcfc55e1"
        },
        {
          "alg": "SHA3-256",
          "content": "3e79c8f58865d2d58a5311a8bb45772007f07e7f3ed2780784d1e4382dc934d0"
        },
        {
          "alg": "SHA3-512",
          "content": "ff32665e1b6d8176ccc7e8c836ca7343c2603dab053e42d79b4258d51a14ff63933c67d24034169ac91e11ebda21cc2c84a2a540072e656d2a8e6fcea7808421"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar",
      "externalReferences": [
        {
          "url": "http://stephenc.github.com/jcip-annotations",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "http://github.com/stephenc/jcip-annotations/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/stephenc/jcip-annotations/tree/master/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.nimbusds/content-type@2.3?type=jar",
      "publisher": "Connect2id Ltd.",
      "group": "com.nimbusds",
      "name": "content-type",
      "version": "2.3",
      "description": "Java library for Content (Media) Type representation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f0fc0d6be73e838863e2197c03a27c3f"
        },
        {
          "alg": "SHA-1",
          "content": "e3aa0be212d7a42839a8f3f506f5b990bcce0222"
        },
        {
          "alg": "SHA-256",
          "content": "60349793e006fba96b532cb0c21e10e969fe0db8d87f91c3b9eaf82ba2998895"
        },
        {
          "alg": "SHA-512",
          "content": "58f7fe3b4303cecd6eac73c3345af71536479ce4bc38c88153bdcf6176a7cf5a0875420ea4a6024b4e734b78de08a8e544014b435cb63416c759b957ad3818e4"
        },
        {
          "alg": "SHA-384",
          "content": "9dbe31f543aaf807093fe1dd18a0ed33346252e2f6fce598e1b193b9d73fcebf79608fce6a620ede8ea7adf45f1a7422"
        },
        {
          "alg": "SHA3-384",
          "content": "67b8b5d051230739ee85678006758450cd6510c5fb9a6b3134d43f644c2d70bc6dc3cff6133b132b5b158a1f346880a9"
        },
        {
          "alg": "SHA3-256",
          "content": "b8046b3dd12321400b4643ff0c47ea5c1e77d6252177bdd8be6f0e0b234c80bf"
        },
        {
          "alg": "SHA3-512",
          "content": "734a6a5a383aac8dcfaca09c8e37637f74334ce2d5c050b519277ad7c20f065fad44b5a6417cdc32d6cd43f80c0e1e0c37d9daa9279651facb6c38cb88376396"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.nimbusds/content-type@2.3?type=jar",
      "externalReferences": [
        {
          "url": "https://bitbucket.org/connect2id/nimbus-content-type",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://bitbucket.org/connect2id/nimbus-content-type",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/net.minidev/json-smart@2.5.2?type=jar",
      "publisher": "Chemouni Uriel",
      "group": "net.minidev",
      "name": "json-smart",
      "version": "2.5.2",
      "description": "JSON (JavaScript Object Notation) is a lightweight data-interchange format. It is easy for humans to read and write. It is easy for machines to parse and generate. It is based on a subset of the JavaScript Programming Language, Standard ECMA-262 3rd Edition - December 1999. JSON is a text format that is completely language independent but uses conventions that are familiar to programmers of the C-family of languages, including C, C\u002B\u002B, C#, Java, JavaScript, Perl, Python, and many others. These properties make JSON an ideal data-interchange language.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e3ad34c55c0d2627255f79f4411c6bdd"
        },
        {
          "alg": "SHA-1",
          "content": "95d166b18f95907be0f46cdb9e1c0695eed03387"
        },
        {
          "alg": "SHA-256",
          "content": "4fbdedb0105cedc7f766b95c297d2e88fb6a560da48f3bbaa0cc538ea8b7bf71"
        },
        {
          "alg": "SHA-512",
          "content": "087931c6f254c7e54ff75b6e94983d062b62b68356a988a5ed276819bcb4fafbad2f0bbc363e16c8daa09ed8189241f08eff6e8e5f5f3ddc770b541d96fc8e2d"
        },
        {
          "alg": "SHA-384",
          "content": "25562d80d717cde53ae3c8049f14fb74a85c86ef14ece2e8136b604edbd3a67df8a46628dc36e6a07dcf5949d9ce1451"
        },
        {
          "alg": "SHA3-384",
          "content": "3aaa1b156a994fa858f7e46c1ebedebe9063e9afbd72c9ca886dd41f3c4ca8dcdd6dd457daa5ed167929d3741aed075c"
        },
        {
          "alg": "SHA3-256",
          "content": "e387c386e5f81247ea4add698626d06e8a2c2fe5768b7440a0fd6fb56ad99d75"
        },
        {
          "alg": "SHA3-512",
          "content": "aa2a4c9daa3bff63615ed483e9faa978b0131758c541a9591e6da8186af73d32f73a38e954272f2f0aa1606b38555f6471ea232eebc146a4fb83151bbae60484"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/net.minidev/json-smart@2.5.2?type=jar",
      "externalReferences": [
        {
          "url": "https://urielch.github.io/",
          "type": "website"
        },
        {
          "url": "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/netplex/json-smart-v2",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/net.minidev/accessors-smart@2.5.2?type=jar",
      "publisher": "Chemouni Uriel",
      "group": "net.minidev",
      "name": "accessors-smart",
      "version": "2.5.2",
      "description": "Java reflect give poor performance on getter setter an constructor calls, accessors-smart use ASM to speed up those calls.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "24191e0bb215c72902e89f46dde839e1"
        },
        {
          "alg": "SHA-1",
          "content": "ce16fd235cfee48e67eda33e684423bba09f7d07"
        },
        {
          "alg": "SHA-256",
          "content": "9b8a7bc43861d6156c021166d941fb7dddbe4463e2fa5ee88077e4b01452a836"
        },
        {
          "alg": "SHA-512",
          "content": "3bbd29761622714ac61dbe02b8351188573f819bdabfb4025196a3f1561bfe52cc308af9208184f7339c66988e7f8ad323c5cd7b0fa8463321b6bb03e4a9181e"
        },
        {
          "alg": "SHA-384",
          "content": "9640df1f3b1bc02ca025e990776727ca3265de08db88e9d08072567e08cb4c1083e8a1644f053caeb4f21fdd2e48ec4b"
        },
        {
          "alg": "SHA3-384",
          "content": "90e220e6dfb5c39a208c3395aa525de2a59ff4525de57a5a496d683be3fc0c58f8ce38411e875434aa3042394dc46e24"
        },
        {
          "alg": "SHA3-256",
          "content": "fa935f2190565214b4fce84be12d4f9b052e9bbf5b1116fa82bcc7f9d7f4c301"
        },
        {
          "alg": "SHA3-512",
          "content": "da0fe2eb9ce26fd44decb2d735fb04597b31225e9c6b76b4678db29ec48292fccc9fcbcc72c5f3b7854aeef9d797da2016b61dd86802c07e1c6f6e4afea872ad"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/net.minidev/accessors-smart@2.5.2?type=jar",
      "externalReferences": [
        {
          "url": "https://urielch.github.io/",
          "type": "website"
        },
        {
          "url": "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/netplex/json-smart-v2",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.nimbusds/lang-tag@1.7?type=jar",
      "publisher": "Connect2id Ltd.",
      "group": "com.nimbusds",
      "name": "lang-tag",
      "version": "1.7",
      "description": "Java implementation of \u0022Tags for Identifying Languages\u0022 (RFC 5646)",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "31b8a4f76fdbf21f1d667f9d6618e0b2"
        },
        {
          "alg": "SHA-1",
          "content": "97c73ecd70bc7e8eefb26c5eea84f251a63f1031"
        },
        {
          "alg": "SHA-256",
          "content": "e8c1c594e2425bdbea2d860de55c69b69fc5d59454452449a0f0913c2a5b8a31"
        },
        {
          "alg": "SHA-512",
          "content": "494267766c974ce16a99cb221953edc91fde8db0c920230758ecea0ea9d3006e95d86ad46f7a9d61b810d85b0fa6da9a3ce2b507cdbe4be320c499eaea93666b"
        },
        {
          "alg": "SHA-384",
          "content": "fdc2cde39a1b07a2542cbc07222afd6292ae19cb1f9ae008476f7ec1b8ebe1e3e84aca08e47e1ef81887a23ac5267d00"
        },
        {
          "alg": "SHA3-384",
          "content": "b0e673087533f60173a11a55b0fde554c0830e7b3b6609e1ea6546de19fc9a97fbfe6eee73580d09b2de66989d0603c7"
        },
        {
          "alg": "SHA3-256",
          "content": "ea208d4eb55212ce9835a9be60396861b0fc33f4161efee3736c3e7159acb9f7"
        },
        {
          "alg": "SHA3-512",
          "content": "450f819981d73711c30d838261ff55a7f1988c8b965c786708dc27fbd10a2018cfde82b8fee5d7d1022eacf085dfdabe22d9de92462eba80e2c15a116c3c73ed"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.nimbusds/lang-tag@1.7?type=jar",
      "externalReferences": [
        {
          "url": "https://bitbucket.org/connect2id/nimbus-language-tags",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://bitbucket.org/connect2id/nimbus-language-tags.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.nimbusds/nimbus-jose-jwt@10.9?type=jar",
      "publisher": "Connect2id Ltd.",
      "group": "com.nimbusds",
      "name": "nimbus-jose-jwt",
      "version": "10.9",
      "description": "Java library for Javascript Object Signing and Encryption (JOSE) and JSON Web Tokens (JWT)",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5982206678d76d60ec3744d907de7f31"
        },
        {
          "alg": "SHA-1",
          "content": "59fa8df26e59665566d9795036e005d149d1fcf3"
        },
        {
          "alg": "SHA-256",
          "content": "64d613d91140bad0dab8f0c41960f919ec8705a9ced9418146598b4b3ae71349"
        },
        {
          "alg": "SHA-512",
          "content": "da670966aeb3c1413a425f6856756c40bcab38a8e65927d115543d9c8b1c9a5ff9897510d29727582728259236421a5e8c60d796f1b71c6453581277e9310aa7"
        },
        {
          "alg": "SHA-384",
          "content": "a6afedef07c724327a21571fd1da8137857494be216763086d79dec4d16932cc5bc9066f9f673aa35d38bd5a79f7694d"
        },
        {
          "alg": "SHA3-384",
          "content": "545e24068e9b805a82915a6009d1316ed5f291ac9fad79f7f425ef58d0777cf732cfd0e609271ea781cecce591a94276"
        },
        {
          "alg": "SHA3-256",
          "content": "d954694ccd716ed8c4ea24933a76fb31e30861e37ca198dfb4d007996b9801f6"
        },
        {
          "alg": "SHA3-512",
          "content": "37ef2eb4ebbdfc6cb400e376c36de141fc5dc9a6d83c259866d336c2ed97c1ffd0dbf005b293ebf53ce70a9aca7ea4329de26df9be3ed30eefd79b9c74f8e854"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.nimbusds/nimbus-jose-jwt@10.9?type=jar",
      "externalReferences": [
        {
          "url": "https://bitbucket.org/connect2id/nimbus-jose-jwt",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://bitbucket.org/connect2id/nimbus-jose-jwt",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-base@2.21.3?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.jakarta.rs",
      "name": "jackson-jakarta-rs-base",
      "version": "2.21.3",
      "description": "Pile of code that is shared by all Jackson-based Jakarta-RS providers.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c446e2d1cd311b0635ea9bc0dc9d6cc2"
        },
        {
          "alg": "SHA-1",
          "content": "ee9631cf82c7fc636f7d8acce6fd256ddc459092"
        },
        {
          "alg": "SHA-256",
          "content": "ea1e80963511a61ecfdb48bab893795cdcdcd4dd90cb05d7c8d6c55189032a3a"
        },
        {
          "alg": "SHA-512",
          "content": "89a48b66224af43fba046abac3c801d77417f476f97b2029e0a05d633a5a0ac416d35bc861ab5a777c4660832639a733e53447abfd886dc7f49b2ba4d4c12fc8"
        },
        {
          "alg": "SHA-384",
          "content": "9159e8db627775902f370d4c04c65a2da9bebfac4f927a825218c8e02dd95238d6198b86e3b92c16afc51e16b9978e10"
        },
        {
          "alg": "SHA3-384",
          "content": "fac1f88fb6ef4104d69a4f035df9841585a8ec5c164c6c8ddbe6dd5288f09478624a4367699e4736c1e03011adc7558e"
        },
        {
          "alg": "SHA3-256",
          "content": "88da7cb68646a01c2547d8d3957316ec5bfdf6b9c0e54ebc724ffde173cdfc9c"
        },
        {
          "alg": "SHA3-512",
          "content": "0b8ac6f7839d9f6af0fd387ed41c972ff0a7b105525bac2e2c386f65659710404fcefaa9c54b0c6a01d1a97319837c48195749cfaa186c1d2c5ef9e7c8fac3dd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-base@2.21.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-jakarta-rs-providers/jackson-jakarta-rs-base",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-jakarta-rs-base/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-jakarta-rs-providers/jackson-jakarta-rs-base",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-json-provider@2.21.3?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.jakarta.rs",
      "name": "jackson-jakarta-rs-json-provider",
      "version": "2.21.3",
      "description": "Functionality to handle JSON input/output for Jakarta-RS implementations (like Jersey and RESTeasy) using standard Jackson data binding.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "daea0ba7d06a82ac0e65acb0b5d16ae7"
        },
        {
          "alg": "SHA-1",
          "content": "662c4ad495411a79f6b18dfc5e9e172350fd168b"
        },
        {
          "alg": "SHA-256",
          "content": "8275308b37a6c4f9b0f4b0b599255a1eaf9b3e3c4a5248e1c9a311b7e4d254bf"
        },
        {
          "alg": "SHA-512",
          "content": "7016e4eb734fc6e827788345b332a96c0427c2086d183b0249c30da2b793465514603c114bad8d943e358211d677067d839cbf74718358cc7cad03754f18416a"
        },
        {
          "alg": "SHA-384",
          "content": "ba6d33c1e6383490ea4039cbbccd510c8b0c6aa65cef3702878bab4d92c7681158a72157d23e8be5d2cc626b62950f8d"
        },
        {
          "alg": "SHA3-384",
          "content": "44e13412c1c755d886db09605f55df7e3defafaf32df9d1f15732fbec92997aea32ab854c910440998ebf39ba76b69bc"
        },
        {
          "alg": "SHA3-256",
          "content": "7793a25a88e1cbf3735689dc044ef93933c523256cf3965b16312ab8e1a0a383"
        },
        {
          "alg": "SHA3-512",
          "content": "da340c3b64c21ac2462e37186678e19c57106a072125fcafb7cce8bc71294990e71e4805784d501bbe1bbad48ef3b0318a56f6a4ffe59b74fb61fee733dfa8cf"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-json-provider@2.21.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-jakarta-rs-providers/jackson-jakarta-rs-json-provider",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-jakarta-rs-json-provider/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-jakarta-rs-providers/jackson-jakarta-rs-json-provider",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.21.3?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.datatype",
      "name": "jackson-datatype-jdk8",
      "version": "2.21.3",
      "description": "Add-on module for Jackson (https://github.com/FasterXML/jackson) to support JDK 8 data types.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6442b75807cc5c1fc96fa4f7bb2dde25"
        },
        {
          "alg": "SHA-1",
          "content": "d43500553adcacf036f24eeb8c91f2a222b7176c"
        },
        {
          "alg": "SHA-256",
          "content": "33d1960d9b50cf79dc7d891cf239415fac8a7bcb2d40b786a089f5bb92b51252"
        },
        {
          "alg": "SHA-512",
          "content": "a9dee111eef296ae8b920fda1b7ee2a152508c3015dc98ded1901230a4814774941f386dc57d8fb6c8d45d9598d443d3e99bae095c72466140f913c7c0e37a79"
        },
        {
          "alg": "SHA-384",
          "content": "0bc18619785f21f7b6ad96a825a2960d0aab55303c44ba43d7707d1f85f5b166bd1424e81ac5438721286b0be35d654e"
        },
        {
          "alg": "SHA3-384",
          "content": "cb4b8bd80cad71179fa0410b5108f97f0ce2e60f25c6db8598da9fed2728abfe035ddd1b0728a02929e22aeebfce8aae"
        },
        {
          "alg": "SHA3-256",
          "content": "abcfb90b26dcc7099a883cd35d1d46b695513f7ee17dfbd35599c3bcbf538728"
        },
        {
          "alg": "SHA3-512",
          "content": "e2a5831b732ba21501b58b02d2bbacf4d01dde54d0cb7755007da700139c647bb09a6e10040da232c4fc448176b0cd5b58913d2b358582332b7324d2f847cc66"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.21.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jdk8",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-modules-java8/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jdk8",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/ch.qos.logback/logback-classic@1.5.32?type=jar",
      "publisher": "QOS.ch",
      "group": "ch.qos.logback",
      "name": "logback-classic",
      "version": "1.5.32",
      "description": "logback-classic module",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "cc1b628dcb1f44089d0decf8a4cf9009"
        },
        {
          "alg": "SHA-1",
          "content": "2b1042c50f508f2eb402bd4d22ccbdf94cc37d2e"
        },
        {
          "alg": "SHA-256",
          "content": "2d4cf592db78be2de4d6140434c2fec170dcb16a09e8c8b7b207dbf5e31b848a"
        },
        {
          "alg": "SHA-512",
          "content": "6f28dbc23ce773773fdd73801aaa9491c3300fa0888efdbc48909a60f191df4536328d2aeb6f0e91f05275bfd55b2b220ed2c30ce5ed4f31012f42eb11d79d7c"
        },
        {
          "alg": "SHA-384",
          "content": "aa437c8f4b8a66d0e072a1c41cd7f747631554b565246b7e250e392984195d2b284307070728b0aef32d9e85736a3508"
        },
        {
          "alg": "SHA3-384",
          "content": "72f659c00d07f50367b08b21cc16679ddd3c8945d3fdab1ccbeeda930cc71d873837e56dcdc4cbf0b3d546a75889c58e"
        },
        {
          "alg": "SHA3-256",
          "content": "84cbb3d39ed018e0aeded02e37f4e6d4646aa7555134c7f071e7f2f6457cb35e"
        },
        {
          "alg": "SHA3-512",
          "content": "414f83d924ed37fbd89b1ac08f3357dbfa9ed7051871c427918f7c5c868826e60ff4a27a954554463137d15f8aef7a6d7e142b8b6aedfa4131ce2124dde1bdc7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "name": "GNU Lesser General Public License",
            "url": "https://www.gnu.org/licenses/old-licenses/lgpl-2.1.html"
          }
        }
      ],
      "purl": "pkg:maven/ch.qos.logback/logback-classic@1.5.32?type=jar",
      "externalReferences": [
        {
          "url": "http://logback.qos.ch/logback-classic",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/qos-ch/logback/logback-classic",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/ch.qos.logback/logback-core@1.5.32?type=jar",
      "publisher": "QOS.ch",
      "group": "ch.qos.logback",
      "name": "logback-core",
      "version": "1.5.32",
      "description": "logback-core module",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "053d4a28d6ba4c9b6247c6fd859ca64f"
        },
        {
          "alg": "SHA-1",
          "content": "fdfb3ff9a842303d4a95207294a6c6bc64e2605d"
        },
        {
          "alg": "SHA-256",
          "content": "6a904d5778d0e361a9692f9cbe68b1b0620ae0f3eda2ec2ed09102755bf036c4"
        },
        {
          "alg": "SHA-512",
          "content": "7e118f88ff9f6bdd2854a4218c4d8e2a1a031eb0cbff7eb2b181fc162d5004b6d89e7b4586616fffd922b4b7a432395892b9caa04916b114a87b518a1abd5157"
        },
        {
          "alg": "SHA-384",
          "content": "b6ae51522d03a94d9dd33fdae4dbd81d9567c2e9191d7dafe20bc711148aaf77c0eaaae64bf3c9cf9a33aebf0755644d"
        },
        {
          "alg": "SHA3-384",
          "content": "2c899f38f50f14529a3710c703a430bfaeefdded4acc6d48caa8ee680d2e6f7f1ffae3911f059007fbba4c7ce57748a4"
        },
        {
          "alg": "SHA3-256",
          "content": "8369c927a69ba6d40db79c3156b17f4a24c31f3ff24c2f67f325e903310fc935"
        },
        {
          "alg": "SHA3-512",
          "content": "9d952bde380b128f5446eb2d040b73f44f019f50f05d31e08e1aac645c6014067b0787aa3362188a7babf74a976d5e58cd6cfeb3dfc7bdc3259ac50d0e3fcd96"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "name": "GNU Lesser General Public License",
            "url": "https://www.gnu.org/licenses/old-licenses/lgpl-2.1.html"
          }
        }
      ],
      "purl": "pkg:maven/ch.qos.logback/logback-core@1.5.32?type=jar",
      "externalReferences": [
        {
          "url": "http://logback.qos.ch/logback-core",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/qos-ch/logback/logback-core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.owasp/security-logging-common@1.1.7?type=jar",
      "group": "org.owasp",
      "name": "security-logging-common",
      "version": "1.1.7",
      "description": "The OWASP Security Logging project provides developers and ops personnel with APIs for logging security-related events.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9f11b84aefd2f2dcf48f8443a6213619"
        },
        {
          "alg": "SHA-1",
          "content": "4717c0c2225a2aad898b2fbdf717ec6e034d48f8"
        },
        {
          "alg": "SHA-256",
          "content": "ef9c6e4fefcf8ffcee7590239a8e8c56b192fc71c183fd8a943cf177e01b07eb"
        },
        {
          "alg": "SHA-512",
          "content": "d30fa0cce5b75758289a255946f165418786d96c5de3dbb12084d6da6bb75e556e43e002050ea114e3adb0ca15dc16e28b6218f5b2fcf993eadcb37076fb522a"
        },
        {
          "alg": "SHA-384",
          "content": "f10fbb5250849634a79477a536eb7f4a07aa66d5d1234e18caf5dbd2ab9473a4e26baa4fe381af9240eb6f9471cbb937"
        },
        {
          "alg": "SHA3-384",
          "content": "fee72e5c1e41740264f6d0f1fcfd72731c92df25af3d529509a006ce8330430390ab1139b8798c8cd6b78bcc0656d4e4"
        },
        {
          "alg": "SHA3-256",
          "content": "2c7bf9e688071240437f106b05955c298c9ee42f6c119cd918460af5a3a82a48"
        },
        {
          "alg": "SHA3-512",
          "content": "0ff1a2d6da110ca1a1713b052bab481bf052033e9cef7362a69a30e485d4a8ae8ba78ecd02278f4f81558d9cd2f12402108f82668754eade77fde3670433740c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.owasp/security-logging-common@1.1.7?type=jar",
      "externalReferences": [
        {
          "url": "https://www.owasp.org/index.php/OWASP_Security_Logging_Project",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/javabeanz/owasp-security-logging",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.owasp/security-logging-logback@1.1.7?type=jar",
      "group": "org.owasp",
      "name": "security-logging-logback",
      "version": "1.1.7",
      "description": "The OWASP Security Logging project provides developers and ops personnel with APIs for logging security-related events.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c1148e1a96d53351f39b407185a59e06"
        },
        {
          "alg": "SHA-1",
          "content": "e609fe8531b96fcd559c9e146342aa3a56d16231"
        },
        {
          "alg": "SHA-256",
          "content": "100f5e85cbf9cf395983d85355cc17ed1d19d77176d93c58a14f339e62382168"
        },
        {
          "alg": "SHA-512",
          "content": "9bdb7df787ae5264e509082aa3b6f865ec543801587270eb582c3cb430a15f019c24a25e5a1d4df462a2dec0e6e82ce636807b055d5e72b73d67d90805e9e5d1"
        },
        {
          "alg": "SHA-384",
          "content": "8502c6a84746dfd8b9960d599cd476dd3b2c0017b2e8eba169411f7adbfea4236323ada03cb7e005812456976e673a7b"
        },
        {
          "alg": "SHA3-384",
          "content": "283c28b7760973dc0195fcd2127294c4c77a2a8c95bcc597401f00ffbd8c5367788ae9c9b6874deac178526fe93c1265"
        },
        {
          "alg": "SHA3-256",
          "content": "5a2f21e6fe6fe4bc45c439d7dbb5a16d07cc56ecf15b10a60125ee777bac1122"
        },
        {
          "alg": "SHA3-512",
          "content": "f2fa575c8838d7dcb5d11678cff9afaeb65d3bb227f501cf86541e4131c7a3cb72921d8ff8d28f91f7a6d5d3ac08d579f1fba73e8a7627c7a46371ed0a62fad9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.owasp/security-logging-logback@1.1.7?type=jar",
      "externalReferences": [
        {
          "url": "https://www.owasp.org/index.php/OWASP_Security_Logging_Project",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/javabeanz/owasp-security-logging",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/net.logstash.logback/logstash-logback-encoder@8.1?type=jar",
      "group": "net.logstash.logback",
      "name": "logstash-logback-encoder",
      "version": "8.1",
      "description": "Provides logback encoders, layouts, and appenders to log in JSON and other formats supported by Jackson",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "08a18cd6a4737221773acc1d2a5c9e3a"
        },
        {
          "alg": "SHA-1",
          "content": "aca81cdb03c48f4e0213d3e351ab1befafa9991e"
        },
        {
          "alg": "SHA-256",
          "content": "2716cb6a3e83ec2f296395b8752063f502d10a90de1a88f711f06ae5b6ecefb7"
        },
        {
          "alg": "SHA-512",
          "content": "71c73ef76d1f1562a54ba2f0fe8335f5e5a4938dc7896bcb58abd8a2b466e8c46640361d63ea475a5d37b12334335fd3e2827eda54fd17b0384027d955cdec7b"
        },
        {
          "alg": "SHA-384",
          "content": "5c332ad34b65c15869217e79c5e505502df624b0e76f47a7a9eba4d323a1ca4ea34dabb1ef75de489b329e2f94deba1d"
        },
        {
          "alg": "SHA3-384",
          "content": "cd44829a3e71f245a300f9b5a6d9b1e7838835b5f16dcb3d5c01c3cdcf23f76693abe517014bb5318d528e74a0ea150e"
        },
        {
          "alg": "SHA3-256",
          "content": "a5fd0008198d89b57aff757173ea60f1aa0e3cc2ea4ff043b2a73c5bf200244e"
        },
        {
          "alg": "SHA3-512",
          "content": "e3769fe9dbdc066f346b3f38cd3738d6d19bc5a0551164bb7593bf3dfa2deeb338d24ae664fda0b7f20510127fddb9875b4621b8f63cf76c851369711ea4e79a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl": "pkg:maven/net.logstash.logback/logstash-logback-encoder@8.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/logfellow/logstash-logback-encoder",
          "type": "website"
        },
        {
          "url": "https://github.com/logfellow/logstash-logback-encoder",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/dev.cel/cel@0.12.0?type=jar",
      "group": "dev.cel",
      "name": "cel",
      "version": "0.12.0",
      "description": "Common Expression Language for Java. This include both the compilation and runtime packages.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "89d5b08a3165d143c5690ba27e7a9ec5"
        },
        {
          "alg": "SHA-1",
          "content": "7f7f4e781912ab3128d57e1ac17d8d040db28938"
        },
        {
          "alg": "SHA-256",
          "content": "b5b1b42bf04d1904e48dc0e81d3fb0baf7e5df771727fd706e6391fbbe717e7a"
        },
        {
          "alg": "SHA-512",
          "content": "2d36cd476846d17120aa40d6e86481b07d3972fb3820ef9e2ede622f98ac81ab584fa783745cb7834f2b6c8881be995a74c0aedbf0ef6746ee8faeff5701154b"
        },
        {
          "alg": "SHA-384",
          "content": "ac118ada3e8e9bdb1510c8fdcebeb52892d662868b761e7504c22ad2fd8d36413e3ea051cbaeaa04df092188343f0f3f"
        },
        {
          "alg": "SHA3-384",
          "content": "c0c642e5ace124bb08886bd03382db4434b025c5d3d149bb9167b5dc361a714c8769c429299266410cf3e3591d07dab6"
        },
        {
          "alg": "SHA3-256",
          "content": "2be74b8c66ac28ebbf804e4f0e1fcb1265b3df5f286a7ae230585cb068638f03"
        },
        {
          "alg": "SHA3-512",
          "content": "95be1f7acbb99be12d6846f0e81c6bfc3ce3e34c3d8223ee0bc9925bb66bcccf6d6c630c10091b64d0a29bfe19852894f8b9720ed4122e9195b6f11b7a76e7fc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/dev.cel/cel@0.12.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/cel-java",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/google/cel-java/tree/main",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.0?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.auto.value",
      "name": "auto-value-annotations",
      "version": "1.11.0",
      "description": "Immutable value-type code generation for Java 8\u002B.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8fc3c2d0bbdef8927f08a5c7c829a768"
        },
        {
          "alg": "SHA-1",
          "content": "f0d047931d07cfbc6fa4079854f181ff62891d6f"
        },
        {
          "alg": "SHA-256",
          "content": "5a055ce4255333b3346e1a8703da5bf8ff049532286fdcd31712d624abe111dd"
        },
        {
          "alg": "SHA-512",
          "content": "339742a85491c0fe529e97668cd86d9c3a7a80061d226e1a51eae45fb9c466e10ee2a4d4fc3b502b96aa473ac4e03850aef8a3b744d3972a934b279ceb80816e"
        },
        {
          "alg": "SHA-384",
          "content": "626c76525b939a087be13919b760b447ef6b8668004634650e9c98105c7b31412c205e022a8ba15ea7bc1c7061a6367c"
        },
        {
          "alg": "SHA3-384",
          "content": "f5c85d8934f52d108217ce20c0641c7692023c657049e40b4916185cd3f9d4386f4404dbc13a0694c9bb13fdf9b687e5"
        },
        {
          "alg": "SHA3-256",
          "content": "549eac3adc58ec5271c45ff9390bbfc0b30c3af27a8d74392ca0a46c19062ed7"
        },
        {
          "alg": "SHA3-512",
          "content": "9f65f28e7b022ea782b45939fd1170d6d0a175f639ca8cf66363f87390b642046da5d5bb0c8adc679b6b9533c9d8cd4b4dfefb7f09d6fb5028219c96fb37d508"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/auto/tree/main/value",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "http://github.com/google/auto/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/google/auto",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
      "group": "com.google.guava",
      "name": "guava",
      "version": "33.5.0-jre",
      "description": "Guava is a suite of core and expanded libraries that include utility classes, Google\u0027s collections, I/O classes, and much more.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d9fbf39a41a5bab891348f07668e18c5"
        },
        {
          "alg": "SHA-1",
          "content": "8699de25f2f979108d6c1b804a7ba38cda1116bc"
        },
        {
          "alg": "SHA-256",
          "content": "1e301f0c52ac248b0b14fdc3d12283c77252d4d6f48521d572e7d8c4c2cc4ac7"
        },
        {
          "alg": "SHA-512",
          "content": "994a4dbcbd8e528ad3b4a7acf49b631a40dcebb03d9a8f5e1d3b74351f805f77774e9a19f7233e42036cb415b7838710f207ac1e18335e4a219b7f99ea22a44f"
        },
        {
          "alg": "SHA-384",
          "content": "9dabff6e543ead881b20d38a533e9151aaa83999239cf0ace3e712cf678e7976c3a50d79e3f3c57afc05a3b9ff14ad90"
        },
        {
          "alg": "SHA3-384",
          "content": "9f65d4d942113facb2eb25229c1530b79dd3b8994574034b8d4a1c2b39ed8ee5bb4d415ec690d3d87cee0d8cb2283564"
        },
        {
          "alg": "SHA3-256",
          "content": "fedafab2279bdf6eff66314fc61b056e92312695678e66dc1e25fe1d18af5a36"
        },
        {
          "alg": "SHA3-512",
          "content": "e64f3c49f9030358554bb0b8abdff729394988f1e3247b05a86302014eeff4a2855acf46d9bf1c683cbecc33a24173a20a103d3c82c94f8cabd6676a01b40fb6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/guava",
          "type": "website"
        },
        {
          "url": "https://github.com/google/guava/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/google/guava/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/google/guava/guava",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar",
      "group": "com.google.guava",
      "name": "failureaccess",
      "version": "1.0.3",
      "description": "Contains com.google.common.util.concurrent.internal.InternalFutureFailureAccess and InternalFutures. Most users will never need to use this artifact. Its classes are conceptually a part of Guava, but they\u0027re in this separate artifact so that Android libraries can use them without pulling in all of Guava (just as they can use ListenableFuture by depending on the listenablefuture artifact).",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "29a782e90f6b37218b18bb880d2a8f4a"
        },
        {
          "alg": "SHA-1",
          "content": "aeaffd00d57023a2c947393ed251f0354f0985fc"
        },
        {
          "alg": "SHA-256",
          "content": "cbfc3906b19b8f55dd7cfd6dfe0aa4532e834250d7f080bd8d211a3e246b59cb"
        },
        {
          "alg": "SHA-512",
          "content": "72be228e7805da5623e42bf024ded7d9147023c66b22f4dbd04ac6898201af46ee82e1f92ea51eb0595f1b49151c4b8ecb862653d4906c17609c42544ee97abf"
        },
        {
          "alg": "SHA-384",
          "content": "9dd1a2a08efda311604992d3e7cee64873bc8c64de3b423b1b3a3dcc1f7f0810bb03901fbfe39a5f835accb0646f4ad8"
        },
        {
          "alg": "SHA3-384",
          "content": "ffd67766c165ee77e96824e06de2c19864a6e61f785b2085eb825f308f173d71f2555559d90d910f33f3367378ace0e3"
        },
        {
          "alg": "SHA3-256",
          "content": "08a77b528a72ca412b36e4004692705ebfd75cfb4897c88632d367d08a34b09f"
        },
        {
          "alg": "SHA3-512",
          "content": "7cba6c266babbe8272f029eea6e2cbddadee96eb1a16916a6eb2441a55837867ce717385d4388735fd83f2f6555931077c0ebda011a1ee9a37ac38c8c0c43a65"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/guava/failureaccess",
          "type": "website"
        },
        {
          "url": "https://github.com/google/guava/actions",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/google/guava/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/google/guava/failureaccess",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "group": "com.google.guava",
      "name": "listenablefuture",
      "version": "9999.0-empty-to-avoid-conflict-with-guava",
      "description": "An empty artifact that Guava depends on to signal that it is providing ListenableFuture -- but is also available in a second \u0022version\u0022 that contains com.google.common.util.concurrent.ListenableFuture class, without any other Guava classes. The idea is: - If users want only ListenableFuture, they depend on listenablefuture-1.0. - If users want all of Guava, they depend on guava, which, as of Guava 27.0, depends on listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-... version number is enough for some build systems (notably, Gradle) to select that empty artifact over the \u0022real\u0022 listenablefuture-1.0 -- avoiding a conflict with the copy of ListenableFuture in guava itself. If users are using an older version of Guava or a build system other than Gradle, they may see class conflicts. If so, they can solve them by manually excluding the listenablefuture artifact or manually forcing their build systems to use 9999.0-....",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d094c22570d65e132c19cea5d352e381"
        },
        {
          "alg": "SHA-1",
          "content": "b421526c5f297295adef1c886e5246c39d4ac629"
        },
        {
          "alg": "SHA-256",
          "content": "b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99"
        },
        {
          "alg": "SHA-512",
          "content": "c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f"
        },
        {
          "alg": "SHA-384",
          "content": "caff9b74079f95832ca7f6029346b34b606051cc8c5a4389fac263511d277ada0c55f28b0d43011055b268c6eb7184d5"
        },
        {
          "alg": "SHA3-384",
          "content": "e939f08df0545847ea0d3e4b04a114b08499ad069ba8ec9461d1779f87a56e0c37273630a0f4c14e78c348d3ac7eb97f"
        },
        {
          "alg": "SHA3-256",
          "content": "1f0a8b1177773b3a8ace839df5eed63cbf56b24a38714898a6e4ed065c42559f"
        },
        {
          "alg": "SHA3-512",
          "content": "6b495ecc2a18b17365cb08d124a0da47f04bcdde81927b5245edf3edd8e498c3c3fb92ce6a4127f660bac851bb1d3e4510e5c20d03be47ce99dc296d360db285"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/guava/listenablefuture",
          "type": "website"
        },
        {
          "url": "https://travis-ci.org/google/guava",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/google/guava/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/google/guava/listenablefuture",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar",
      "group": "com.google.j2objc",
      "name": "j2objc-annotations",
      "version": "3.1",
      "description": "A set of annotations that provide additional information to the J2ObjC translator to modify the result of translation.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "abe8bd3abff622b9a8b15c3a737aa741"
        },
        {
          "alg": "SHA-1",
          "content": "a892ca9507839bbdb900d64310ac98256cab992f"
        },
        {
          "alg": "SHA-256",
          "content": "84d3a150518485f8140ea99b8a985656749629f6433c92b80c75b36aba3b099b"
        },
        {
          "alg": "SHA-512",
          "content": "34ee5aad57b0b507e89c897306f73043f80fa0eb02b453e54d9052feb0808a0d2ed835d888946211921d2bf733780b19ff636479ce19b9f48814ba6008733ce1"
        },
        {
          "alg": "SHA-384",
          "content": "7b760a346a586d6a3fa4477807e2f02f091e61898fc9a6ff449e43c55b6465fbbc17720663183c84c41d4d8814085e51"
        },
        {
          "alg": "SHA3-384",
          "content": "a2166c1c08f947c0e60aa7c9167602942e7bac37ba45863d34c0132a1f352e7807a382588d350b93bdbbbbe315a3573f"
        },
        {
          "alg": "SHA3-256",
          "content": "3d4d3b8bfd2ad13351a53610aa4bf1c5a69d2bde4272c281003120ed9bcddb8c"
        },
        {
          "alg": "SHA3-512",
          "content": "0a574b379a3f8022f0b88252c87d0e6b6cfa434fdb981efd1b24387025a962d7ac4e90161e8bd048df142bf52f4fc41e4a0c1d45e4eeb872c5954aad552988e9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/j2objc/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "http://github.com/google/j2objc",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.re2j/re2j@1.8?type=jar",
      "group": "com.google.re2j",
      "name": "re2j",
      "version": "1.8",
      "description": "Linear time regular expressions for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4240e655caa938c61ddbec8b92bfb061"
        },
        {
          "alg": "SHA-1",
          "content": "12c25e923e9e4fb1575a7640a2698745c6f19a94"
        },
        {
          "alg": "SHA-256",
          "content": "7b52c72156dd7f98b3237a5b35c1d34fba381b21048c89208913ad80a45dfbd7"
        },
        {
          "alg": "SHA-512",
          "content": "f556b098dc29ed8fbfa7ecd343b457c49c4deda80dc495ed164297a415328c20d7c89b17cb240f6d2f92607828db52e4f13b66b11277e33e6ebc34a97832da86"
        },
        {
          "alg": "SHA-384",
          "content": "beef5588c374be01cb9cb1c7854e2741827444ce6908c73e4494fb6c7b14fda4a8424f257c1cf900957dd7928e7247d4"
        },
        {
          "alg": "SHA3-384",
          "content": "580230a2224e63cbbe5dd3742935e8ff51333b9e38510203b7ab22070b903dbbc8d720a820db3a01b65cb06983632f7d"
        },
        {
          "alg": "SHA3-256",
          "content": "1346abb0ccffe538d735667ba664b4ee2eaec5c30f2052115d34b16fb0fb350b"
        },
        {
          "alg": "SHA3-512",
          "content": "68b26bddbacc2d72fde5db285549bdefc62206adbf285b58cd5b49f7a20ce1e2545a031c021b5d4402ff068170f4ce1fb90b618b5ed1e1f3b7a1b694f5ddf5ec"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "Go License",
            "url": "https://golang.org/LICENSE"
          }
        }
      ],
      "purl": "pkg:maven/com.google.re2j/re2j@1.8?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/google/re2j",
          "type": "website"
        },
        {
          "url": "https://github.com/google/re2j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/dev.cel/common@0.12.0?type=jar",
      "group": "dev.cel",
      "name": "common",
      "version": "0.12.0",
      "description": "Common dependencies for Common Expression Language for Java.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a602e911e94edc327f33eed4385849e1"
        },
        {
          "alg": "SHA-1",
          "content": "931be4d02eb25e751045fd9812581936661cacf5"
        },
        {
          "alg": "SHA-256",
          "content": "1f6c14331eab3a1263418100567cfaefcc73ae70652509777587e1a151b0113f"
        },
        {
          "alg": "SHA-512",
          "content": "03439c03967a085650bbc25b8bc48a03071acf69810cef64f229cf1a82c77bf333a400b6907a117e7e72f5faad5f6acb1cc36f658ddd545634b628ab2bea7c23"
        },
        {
          "alg": "SHA-384",
          "content": "58a464b766f745ecac74c52c22be5f973b04b2ab22cc45e96accec58a86a2e781bc5725705fb4d74cb6ddc0116c5715b"
        },
        {
          "alg": "SHA3-384",
          "content": "f50bb1d49848be1165b3a0b0480264b4e7a99e731b02cfb79ca0e96567dcb8e44e5b2f4f16583282122d409e571d792d"
        },
        {
          "alg": "SHA3-256",
          "content": "a2dd49dd6d0617b10bf5cf961c070c7f8c382aa980f09966b9164dd197a95c4c"
        },
        {
          "alg": "SHA3-512",
          "content": "0167e157252e2969e10acd9338f18d09c4fb96159c56b5af8b2b4f8231dfdf95783fb9a06cd1b1fde1c6fa4b3b1fb1639fe7450bd28b7ecf36115878b342453a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/dev.cel/common@0.12.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/cel-java",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/google/cel-java/tree/main",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/dev.cel/compiler@0.12.0?type=jar",
      "group": "dev.cel",
      "name": "compiler",
      "version": "0.12.0",
      "description": "Common Expression Language Compiler for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "73414fa5fe27b1600ec4afc3f700a07f"
        },
        {
          "alg": "SHA-1",
          "content": "69050283ff625d68e669f62954df1855e04b8fe5"
        },
        {
          "alg": "SHA-256",
          "content": "cbec53df246dc764ea9c502dcbe3ce6f3b9b4aaaae4a13dd69893d211bcc4d40"
        },
        {
          "alg": "SHA-512",
          "content": "f81e3ffbe8385c99acb364b162ed1446eb12246eaff2db138b9873bd498f75db18e6b2238cd9dbd2e392a99884c7cd035f736b578e00ea62a0145c12a015c479"
        },
        {
          "alg": "SHA-384",
          "content": "430f6317452abd3da7a2911d8bc6fd9dc96ff0860d281556d0ae4365f55cbfe791a22c3d3eb82e97fe1b1ede48e3c140"
        },
        {
          "alg": "SHA3-384",
          "content": "c3e53be8a97b35e04cd9027b02e692e2a257e86a36f8b9a348bb8dbc0b5e799d743ae2b0f4280937b9f5d6db5ec91ac3"
        },
        {
          "alg": "SHA3-256",
          "content": "a5aa7fa556f689653b8f3d367087ffb2cc3f72008fd334265c88ccdbc4286a45"
        },
        {
          "alg": "SHA3-512",
          "content": "9865565f4279076cfb8070d913a9221d84ea4181f1eebecfd6e122b234ddf7bd0c32478fb180e51d138ac90528d11629db821cab1f5d3029b2006b23a5a6dfa7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/dev.cel/compiler@0.12.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/cel-java",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/google/cel-java/tree/main",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/dev.cel/protobuf@0.12.0?type=jar",
      "group": "dev.cel",
      "name": "protobuf",
      "version": "0.12.0",
      "description": "Common Expression Language Adapter for converting canonical cel.expr protobuf definitions",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ec7a1682a109ef7874fed038ec9d7aa4"
        },
        {
          "alg": "SHA-1",
          "content": "02b2080dba5dcf5016d1eecbe76723f80ca64ffc"
        },
        {
          "alg": "SHA-256",
          "content": "d343b22e4d1507c636fca5d61c8272f2394a3fd0c1e1729568a8f575a9002143"
        },
        {
          "alg": "SHA-512",
          "content": "9e5d876a7abfe0d7d1fbbc03cd2b3a79fc87469b75de37c4b23b792f505e196c6c5afbec05353d6cc5be7548ce54b91ecb809ce5d99df7ba7e9162507c1f772b"
        },
        {
          "alg": "SHA-384",
          "content": "5d698cda243836a4764ec87e4813fc2788e34b4fd2efd23ea9bcd128998578333a43602620f57ea67a3e1f026cef1664"
        },
        {
          "alg": "SHA3-384",
          "content": "30f7375ab08fa2fe5bbc8b823fe2e1fc0b6adc7f93edcd71649a56aba3052b3a6edd5f34d7dcdbdd14234f4c4b27f47a"
        },
        {
          "alg": "SHA3-256",
          "content": "898a10881463dafebac86e9537a4c81efb6b5465bafcb9fe7c1f4289f5ebee58"
        },
        {
          "alg": "SHA3-512",
          "content": "fcf5bc79d2e1e5d6ca908365fb5ac539237928a04e62bf6537f494302c86e2bb0f968c488efe8f178049f2bf2e9dd88c09e5aa7b65edb778ca61fb2bce8bb6e2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/dev.cel/protobuf@0.12.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/cel-java",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/google/cel-java/tree/main",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/dev.cel/runtime@0.12.0?type=jar",
      "group": "dev.cel",
      "name": "runtime",
      "version": "0.12.0",
      "description": "Common Expression Language Runtime for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "26eaa6240a727e3b6ce060137b5646bb"
        },
        {
          "alg": "SHA-1",
          "content": "8a6bf210f58df45c96edc9a3c8320e035e1c0e62"
        },
        {
          "alg": "SHA-256",
          "content": "ceaaad9097be13ee6e7d96c1cba0e02207633435314da6624820f5ac600b7fad"
        },
        {
          "alg": "SHA-512",
          "content": "707d57da5bed4219504fcfc93e07d3836cef01200d4162b90b93a2f93885c077d2cb39d479d6938b1e2a42ea5b2fafa2fa4f2648458a332d5a25c36b62c20e92"
        },
        {
          "alg": "SHA-384",
          "content": "54475320a3bc95ba941d22c9eb3dcb826deb50b11576d761035aeebb52b31b605abde9f201f68f4d99131d073d8cb8c8"
        },
        {
          "alg": "SHA3-384",
          "content": "94cb0728d4e5dbcd996d72deeff70bae4d3743c7e9c538a1e31855db3b5676c9e2db326dc956f16ee4f48724a34e5b02"
        },
        {
          "alg": "SHA3-256",
          "content": "a5c3cd7f3f28c97551d34f66ee95084c77db4114a0ff4514cb08fbff080f4249"
        },
        {
          "alg": "SHA3-512",
          "content": "f668058350bba0a7edc073efd14c1e0d2746056b2c35c9897d8522f853f963973d7123d78efbb3bbf298f132f3d15ca1ba0822a93b97d79289bf072e9910b835"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/dev.cel/runtime@0.12.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/cel-java",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/google/cel-java/tree/main",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/dev.cel/v1alpha1@0.12.0?type=jar",
      "group": "dev.cel",
      "name": "v1alpha1",
      "version": "0.12.0",
      "description": "Common Expression Language Utility for supporting v1alpha1 protobuf definitions",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8e09c5e79de99fafa3893d9bc1f12d13"
        },
        {
          "alg": "SHA-1",
          "content": "4e7c13ddf4e23c44b67e1c8041044be927be47a5"
        },
        {
          "alg": "SHA-256",
          "content": "429a705bc974d06c63fc14f4d7be7d23e5e7825d6fe76ab657bad2a2d9791c77"
        },
        {
          "alg": "SHA-512",
          "content": "efaa8638137267a26e11668936a53b58716f71437cf1a1d057d6432a53e5c273c4c17fc656d2b47aa0e4c6ba56ef9896aa8d54b156688c6b25ec4fe3dafda8ad"
        },
        {
          "alg": "SHA-384",
          "content": "b4e1fc34a8ac52f90779970b6b1d40877978396c29de475aeb16853ffcc65526949bf9a3c5593284a82335ad60b25e75"
        },
        {
          "alg": "SHA3-384",
          "content": "b86559a1571b69592384cdde36a0ee23a1599270002d6488d3401e05e4f569b616c44a59bfa69b55d39e28aca8aaf406"
        },
        {
          "alg": "SHA3-256",
          "content": "6891df0f460647f9d1f20e2cf708602d76027b5d089cc777d437adc77b1bfda6"
        },
        {
          "alg": "SHA3-512",
          "content": "5e148f912d1a9e89b0bdd836b0ada4f5145792d39632c19589fe172e9251a09d3f1115a8a20fdea837087b6eb6dc77c5ae6c7378cf75c6ae5d927ca43b5a1b85"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/dev.cel/v1alpha1@0.12.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/cel-java",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/google/cel-java/tree/main",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.antlr/antlr4-runtime@4.13.2?type=jar",
      "publisher": "ANTLR",
      "group": "org.antlr",
      "name": "antlr4-runtime",
      "version": "4.13.2",
      "description": "The ANTLR 4 Runtime",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "eecf1908f0cfff10f8bb82878b5ca401"
        },
        {
          "alg": "SHA-1",
          "content": "fc3db6d844df652a3d5db31c87fa12757f13691d"
        },
        {
          "alg": "SHA-256",
          "content": "dd3e8a13a2d669bf84fb8d834de35ce4875f27157698d206241ec8488aadcaf7"
        },
        {
          "alg": "SHA-512",
          "content": "1c3e47b6b5dc40ca13927a7ae2ed187f470b8f406cea325e73c7a18af8e07b9ada0484312dd611f225f030b5585924932c702fd9326c143a626e271682b2b95e"
        },
        {
          "alg": "SHA-384",
          "content": "f49c2395e16fe71fa35622bcca225c0910609ef09626207ce4522c73c760fd232489489ea88d54c88fc21b05a03031e0"
        },
        {
          "alg": "SHA3-384",
          "content": "322345326586e3f8954e80efa80b510228a7eb06f6d7283177f04809c15aad1722c700897c8c8f405955946b63808bc0"
        },
        {
          "alg": "SHA3-256",
          "content": "2d39db66ce6dc530c7796f75d646f4d8316586e2acd0756524c25b238eb71618"
        },
        {
          "alg": "SHA3-512",
          "content": "a4cdaec49dff4a6963a0db56712a837db7300de7145335b915ffc2234b0d53d6f9fd4b1d6e82c4350e22fee9390ca643cfbf7f51ff47a11bc44561b6686be32b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.antlr/antlr4-runtime@4.13.2?type=jar",
      "externalReferences": [
        {
          "url": "https://www.antlr.org/antlr4-runtime/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/antlr/antlr4/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://groups.google.com/forum/?fromgroups#!forum/antlr-discussion",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/antlr/antlr4/tree/master/antlr4-runtime",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.threeten/threeten-extra@1.8.0?type=jar",
      "publisher": "ThreeTen.org",
      "group": "org.threeten",
      "name": "threeten-extra",
      "version": "1.8.0",
      "description": "Additional functionality that enhances JSR-310 dates and times in Java SE 8 and later",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4af91264b2e3d26f4c41f055f7ce02f8"
        },
        {
          "alg": "SHA-1",
          "content": "d3b1ac7e361b642132e529f562622aac7dfea752"
        },
        {
          "alg": "SHA-256",
          "content": "51e4d21edc4e9447f7760c050e0baee75d7d973f387ba605a17abdc4d24fd6d8"
        },
        {
          "alg": "SHA-512",
          "content": "b60d18135450dbca9660097f6f726676940c1925343e0ce9547e57e68beb321ecd5df73710332113e1ea3aba71fb5ceb0483cc8f41806a3c6ef075d3c690aae6"
        },
        {
          "alg": "SHA-384",
          "content": "b6e8c6861fe876ac0fc34f97b4966c8816d94ab566cfe8458709b48825cf600fcec4d845de35a3d518d4c28e160b665b"
        },
        {
          "alg": "SHA3-384",
          "content": "1eaf035067146399ff4698dfe6f418e2f812d203b7b8b9b2bb7afaa34b4d380bbc06d8836456e732111ea2c35820d09a"
        },
        {
          "alg": "SHA3-256",
          "content": "981ad37d8273108f1bd1de37f7bca594b8ef49ab33dfbbc2e84c647aba733ead"
        },
        {
          "alg": "SHA3-512",
          "content": "7b528b1f6d625f647f63fc7117c006dce4c08c5f447151c34b1acfa9bd8062c2c31f2e579a38024dad6f86d9f3e7f0cc4a3ea0e9c011926b49413515045a291d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.threeten/threeten-extra@1.8.0?type=jar",
      "externalReferences": [
        {
          "url": "https://www.threeten.org/threeten-extra",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/content/repositories/threeten-releases",
          "type": "distribution"
        },
        {
          "url": "https://github.com/ThreeTen/threeten-extra/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/ThreeTen/threeten-extra",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.yaml/snakeyaml@2.5?type=jar",
      "group": "org.yaml",
      "name": "snakeyaml",
      "version": "2.5",
      "description": "YAML 1.1 parser and emitter for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8d3b7581db5c7620db55183f33a4f2ad"
        },
        {
          "alg": "SHA-1",
          "content": "2d53ddec134280cb384c1e35d094e5f71c1f2316"
        },
        {
          "alg": "SHA-256",
          "content": "e6682acf1ace77508ef13649cbf4f8d09d2cf5457bdb61d25ffb6ac0233d78dd"
        },
        {
          "alg": "SHA-512",
          "content": "a69bea3ae0ed31b12d9fa23bf1cd3fb71bae88e231d9657f0291e3000ae17a1df50709e072134f9155158f488eba67a3f8daf879462499f07b07d9239e78933e"
        },
        {
          "alg": "SHA-384",
          "content": "2fa12e4330d6da0a693a13588c8cdeff562c1bd1dc32e043d402ca1fc72d87a30dcc7bb31f9b582df3fe018eb6c6a3bb"
        },
        {
          "alg": "SHA3-384",
          "content": "8c5037c75bb2f464829ba38126a4773c88951705effc2b14289f3bbdef05bb598f10e4d9603dcd1b58efd7cb68d996a2"
        },
        {
          "alg": "SHA3-256",
          "content": "3aa9329b0eab5185331e526a011c74b45b4c4a506214e6c3ec2d2038c51cc261"
        },
        {
          "alg": "SHA3-512",
          "content": "f80ff702aee20a5150a11818985d659fffb1d5238e331aca2048524649e0270e5bca0186ce7caf04ecf85fd95c95c6b9d8ed1f362ed399fef624eb94b70dc6de"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.yaml/snakeyaml@2.5?type=jar",
      "externalReferences": [
        {
          "url": "https://bitbucket.org/snakeyaml/snakeyaml",
          "type": "website"
        },
        {
          "url": "https://bitbucket.org/snakeyaml/snakeyaml/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://bitbucket.org/snakeyaml/snakeyaml/src",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/dev.cel/extensions@0.4.1?type=jar",
      "group": "dev.cel",
      "name": "extensions",
      "version": "0.4.1",
      "description": "Common Expression Language Extensions for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a70eab4afa038505e57783b72666eb1c"
        },
        {
          "alg": "SHA-1",
          "content": "433df034d55c456425a3c96165d650bc583fe2e0"
        },
        {
          "alg": "SHA-256",
          "content": "291835f64786e5b973ae289b77ddc5bfacf4c85d5f67861cab65e0c59bb6742c"
        },
        {
          "alg": "SHA-512",
          "content": "1fd37f3929287fd365e58713d1512244f12079874b4498e033c3df542d89b5881a379554aa55d5270c9abf42509d7fdf4a3c9dda4b6bd8756eccc96f1360c666"
        },
        {
          "alg": "SHA-384",
          "content": "f8a4ca7ce0726ebc7cef49f394090da5de40c4b330f97a6389606faf64885d12247dff049bff4e4b18ebb6b052b85ea6"
        },
        {
          "alg": "SHA3-384",
          "content": "9431fa635ec7721498c93401cad4d5a70e4b872396a60e407a0041eb2dd32ce5d94de269843cf71bd6257b860f28dbcc"
        },
        {
          "alg": "SHA3-256",
          "content": "579c399929539362444428bf48b7935de926d454bad990de27dee3844df40565"
        },
        {
          "alg": "SHA3-512",
          "content": "10bfaf33daa8618a7771845a167f294dcf7c2caa90081b21c11da08a6b2cb4f443e9ea06e675cb93a7a635eb31db05a2e31dcde9f92c8ff013c191e6cec0e879"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/dev.cel/extensions@0.4.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/cel-java",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/google/cel-java/tree/main",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.metaeffekt.core/ae-security@0.154.0?type=jar",
      "publisher": "metaeffekt GmbH",
      "group": "org.metaeffekt.core",
      "name": "ae-security",
      "version": "0.154.0",
      "description": "Core project with fundamental runtime and build support.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1aec7db8aed46d5d01321f4bf322dba0"
        },
        {
          "alg": "SHA-1",
          "content": "7f0ff90633fe7d54ac0ec7d33607c99a937d105a"
        },
        {
          "alg": "SHA-256",
          "content": "00eed930c9213f71e95797d90d57df6ee32e845902d72d07e9f3cb173df9cd68"
        },
        {
          "alg": "SHA-512",
          "content": "c161ad9cf0faac39fb687a9ccc827c9c2c2ff4b444d7de34b1470077a7b06d64e67f03abe8cc995040f951bdf3b75b5b0a7af85c04ec0eb189460266d2c105b1"
        },
        {
          "alg": "SHA-384",
          "content": "b24e3a5da390781aac540d72d2d35d8fba20ef1618f603b39f98508804e6596c8d471958926d988f4c2d436fb605c45d"
        },
        {
          "alg": "SHA3-384",
          "content": "c4d0cae27de219aef03e3191b45c5cd4c7bef27fc81f37d06cf1c70079cdaf5facbcfdd8e98c96e9bf1035f9357e1f72"
        },
        {
          "alg": "SHA3-256",
          "content": "e444465bc067941d00dc25338ea0e782a6149d41ab5243a409c861938c06c366"
        },
        {
          "alg": "SHA3-512",
          "content": "e2ac4829ad4add60d5cf5197c76a72e17cd9f0e20f9b8ae90c5615b63f46df71b80aa4f20404ee2f653c987ea7c4569c15f78ba5478ccde35b163e9574828378"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.metaeffekt.core/ae-security@0.154.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/org-metaeffekt/metaeffekt-core/ae-core-poms/ae-core-plugin-management-pom/ae-libraries/ae-security",
          "type": "website"
        },
        {
          "url": "https://github.com/org-metaeffekt/metaeffekt-core.git/ae-core-poms/ae-core-plugin-management-pom/ae-libraries/ae-security",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.18?type=jar",
      "publisher": "QOS.ch",
      "group": "org.slf4j",
      "name": "jcl-over-slf4j",
      "version": "2.0.18",
      "description": "JCL 1.2 implemented over SLF4J",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "889b3b36f33843d83ba84f7355c2150d"
        },
        {
          "alg": "SHA-1",
          "content": "fb36c10c70e27bb427bb3cec86ac30bb83f667c7"
        },
        {
          "alg": "SHA-256",
          "content": "ec5c36d57d2dbe100f84878f944575cb7871da32c7a115b8d7e0721277045d67"
        },
        {
          "alg": "SHA-512",
          "content": "6a2d26ab6873b25bab037f5620ce5a4a1c35cf79e89a09ff900d873877231bf117e35e9dfd05912c36be0b4a89a739c84ba20231fd0f74c1fcf14126c8846248"
        },
        {
          "alg": "SHA-384",
          "content": "6c8413069e3d41c85ff74f94e0ea01553b2edaf8b589b390c6b3d935d4a6e256720ded91d98a5aeadb67920bc8c10f35"
        },
        {
          "alg": "SHA3-384",
          "content": "6fc21de57edba60d2f58e7907e051f70efc9d20729190d2dd0453a6bde313d764a96e1e392fe50042e09c2a1221067fb"
        },
        {
          "alg": "SHA3-256",
          "content": "4c3fbe65804bd4e70d9698c553819bd9866eec21b8ba4a4d01b89f4e8895ff24"
        },
        {
          "alg": "SHA3-512",
          "content": "d4fa671a7f0365d0dbe49b42fd5f354a6af2d22dbbcc7c1f5afbdba084845ea0aeabc112b89379988c7dcf57ab36350a39e436ddc45895ddf29f48082485c5b3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.18?type=jar",
      "externalReferences": [
        {
          "url": "http://www.slf4j.org",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/qos-ch/slf4j/slf4j-parent/jcl-over-slf4j",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.json/json@20231013?type=jar",
      "group": "org.json",
      "name": "json",
      "version": "20231013",
      "description": "JSON is a light-weight, language independent, data interchange format. See http://www.JSON.org/ The files in this package implement JSON encoders/decoders in Java. It also includes the capability to convert between JSON and XML, HTTP headers, Cookies, and CDL. This is a reference implementation. There are a large number of JSON packages in Java. Perhaps someday the Java community will standardize on one. Until then, choose carefully.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1a0702c57783ce9e948252c34644f328"
        },
        {
          "alg": "SHA-1",
          "content": "e22e0c040fe16f04ffdb85d851d77b07fc05ea52"
        },
        {
          "alg": "SHA-256",
          "content": "0f18192df289114e17aa1a0d0a7f8372cc9f5c7e4f7e39adcf8906fe714fa7d3"
        },
        {
          "alg": "SHA-512",
          "content": "a5cdd1ed984448d6538746429f2d1a0ec8f64f93af0e84870ce898a9f07a81d11bf27d2ee081471975772efc8a0d3d5e05541197a532066e9edb09ad032d31a3"
        },
        {
          "alg": "SHA-384",
          "content": "5d2629c7fa21af332369d9feb30dca6bbc76378615252fd5fc8a9bd55deba17951a45ae3384672f317b12a5d25a285bc"
        },
        {
          "alg": "SHA3-384",
          "content": "b96f3dc5d35e439d33e31522538d5d91cb8d88f12d19071a66ab31722c46fbb9c945f3894942203f4dd945df93bc3d91"
        },
        {
          "alg": "SHA3-256",
          "content": "69c7a6f7873b85a74ec9547b081d217a7407deac8d0912ac4906c0eb2c2f87f5"
        },
        {
          "alg": "SHA3-512",
          "content": "fd2bcc534d0bcd4b1cf3337e1f5f8073d5693f3e65d789203312a166f91874d7c31ea1715de9eaea3e0437639591ae4157ceef4b76354e6681f34bc034a06d7a"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "Public Domain",
            "url": "https://github.com/stleary/JSON-java/blob/master/LICENSE"
          }
        }
      ],
      "purl": "pkg:maven/org.json/json@20231013?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/douglascrockford/JSON-java",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/douglascrockford/JSON-java.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.dependencytrack/jdbi-support@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "jdbi-support",
      "version": "5.7.0-alpha.9-SNAPSHOT",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "932009b8fb1ca716de45285c519a576d"
        },
        {
          "alg": "SHA-1",
          "content": "c7d66556044137b248737601f7b06d83acff6288"
        },
        {
          "alg": "SHA-256",
          "content": "0a3cc75561d1b96bd604c17c9b1c3a78841126b66bfa7ef30bc7d9a98854c2cf"
        },
        {
          "alg": "SHA-512",
          "content": "607f1ae2a75a21f7ab4c99254deaeae93a810ac96b47ec156576164a0a1ab415a04abf9d875d84bd41a659a262c1045f89b35c78506cb5ad05ddb7f05147b23f"
        },
        {
          "alg": "SHA-384",
          "content": "17a0d91ed130bcc04a4e692c0fa978bf9cb0d5d390870fd2605097258b150e3f5d6af646b429ef10b385c007e1f47409"
        },
        {
          "alg": "SHA3-384",
          "content": "c3b84e0d5369620119360e03da0006786e2377a72d943ddc52d25cd1c14cb6043ccb6990f24305247116384faa399f52"
        },
        {
          "alg": "SHA3-256",
          "content": "969b5739efdcabe5f594ca01de8894983c623f05f7a3c8a55e4d13832945d8e3"
        },
        {
          "alg": "SHA3-512",
          "content": "531e846187c62d6a80787cdbcd8ba5ab22f9adf8a588ccbc476762752377ec49eb2fc4f7b8f442e51f794c75944df946e68f012d43131ebae47f22ada7c53a53"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/jdbi-support@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/support/jdbi-support/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver.git/support/jdbi-support",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jdbi/jdbi3-core@3.53.0?type=jar",
      "group": "org.jdbi",
      "name": "jdbi3-core",
      "version": "3.53.0",
      "description": "The Jdbi core API. Jdbi 3 is designed to provide convenient tabular data access in Java(tm) and other JVM based languages. It uses the Java collections framework for query results, provides a convenient means of externalizing SQL statements, and named parameter support for any database that supports JDBC.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8ac1babb7fc3bba8de01e4c9d6ee685a"
        },
        {
          "alg": "SHA-1",
          "content": "7e741ad5776099dd8d6e4acbae65ff9d7e6d7e66"
        },
        {
          "alg": "SHA-256",
          "content": "df512225aaccd0c15a9ace972e9f98c514daac66efeb00843dbcad299c98c186"
        },
        {
          "alg": "SHA-512",
          "content": "18dc20c0d1ad1c6d6969eb53a3618d49d2ebbbdbac4ba450133707186363694de8abbc5c891b52bd153ccc67943fb918202f0db13f04c9014268ce154e0ba3ef"
        },
        {
          "alg": "SHA-384",
          "content": "5ce4e784ccc1f1e8bf6a8771bad339890a50b6a1ee3d271d75f4f990e12192f4e6062f975442c64f29d759375d1c4f56"
        },
        {
          "alg": "SHA3-384",
          "content": "874187451f7430753341ec0c41dd8b2ad69c04aa1660fdd89bbd912eaf7cbdb5b4e6d84542a0a356754c48aa2447bfdf"
        },
        {
          "alg": "SHA3-256",
          "content": "b2581cddb37a86d11ad87f43ac62ba64869b38981aeb195c24cc2ccb242758df"
        },
        {
          "alg": "SHA3-512",
          "content": "8dabd1b8f36c17457564970444f1679a47a16038f8de67a58a344b2c4edd6cf4a620c9038723aef62780edbcbd9b9456161922367fe7580f8552e2b18d1e2800"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jdbi/jdbi3-core@3.53.0?type=jar",
      "externalReferences": [
        {
          "url": "https://jdbi.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/jdbi/jdbi/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.leangen.geantyref/geantyref@2.0.1?type=jar",
      "group": "io.leangen.geantyref",
      "name": "geantyref",
      "version": "2.0.1",
      "description": "Generic type reflection library with support for AnnotatedType",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "08dce47c87ec3228628a42cb3eb8c181"
        },
        {
          "alg": "SHA-1",
          "content": "81253383ac75126142f97781d22d19de2532bf76"
        },
        {
          "alg": "SHA-256",
          "content": "386b535c079be7d65ddbe0ad9c00955155b7862225aa92b4c6553ab2b1ea95f9"
        },
        {
          "alg": "SHA-512",
          "content": "c6655ef00ede5d9bb17d4e7556200acaeb5babd67295e9f72e26e8ea48fd50978cc147156e35feada204163163292ad3a0daf0d6b1366c9e933f13a1b4a9eb2f"
        },
        {
          "alg": "SHA-384",
          "content": "3b97009b3b70156fcd3f39a8365e562d481fed54d779e6f60a82bdb0736ee7701edd0c69f58409154dc1823895e7da05"
        },
        {
          "alg": "SHA3-384",
          "content": "36cfd6a2d9d4f0df12e9c688b1981f494f4b77f6f05dc57af69f03ab2d7f9d5628f9b90ad324dbadc2ffc210a74d25aa"
        },
        {
          "alg": "SHA3-256",
          "content": "414a37fe9755beb446609dbc43f2eb702a0789ef5d046baff144596774e189ac"
        },
        {
          "alg": "SHA3-512",
          "content": "6a2ecd82a48dc5272720726298d21a8548c46df8b52f9dea1c97c38e77372fb620ca5c5fbed1b9ea7234f7328c47ba9642366d63f0d3f0340c33faf1f5f7de76"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.leangen.geantyref/geantyref@2.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/leangen/geantyref",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/leangen/geantyref/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/leangen/geantyref",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jdbi/jdbi3-jackson2@3.53.0?type=jar",
      "group": "org.jdbi",
      "name": "jdbi3-jackson2",
      "version": "3.53.0",
      "description": "Use Jackson 2.x for JSON column serialization/deserialization.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c1ef0ceea863f2edd1ad8bf8e4d98a96"
        },
        {
          "alg": "SHA-1",
          "content": "943b0e66bc23fc183bd3cbb8b414214e1a2d0a37"
        },
        {
          "alg": "SHA-256",
          "content": "832a3a28beb109f04905d2bb65410cf6e4ca5770afb1757f2f8f2925f6e9ca5c"
        },
        {
          "alg": "SHA-512",
          "content": "4a4b38e37823b0e400356a40002dab960aee26ebb2bbe2884ca620c44640eabd3540bf95914bc7700122988ace5a6f01ee3a5d97be54633e25a7f0d3d33eb437"
        },
        {
          "alg": "SHA-384",
          "content": "7efdcd7f42ee0d1d6cbe3e0f290fd4a7a37c745b6e5c66f99782651d155b2d6f36e5355ad782d1da12d572bf32db76c5"
        },
        {
          "alg": "SHA3-384",
          "content": "abafb0139141924de3e66c04ba34a3c532ee039c798427da3297f20bfb8393f80eeb7f24ae03fbf5fc78de2b903f4d00"
        },
        {
          "alg": "SHA3-256",
          "content": "cb59d59ce8799f6835d9579a9d8fdcb5e744809d214f7fc09557216bc3a33eba"
        },
        {
          "alg": "SHA3-512",
          "content": "487685261f6c5215625afc7e0d0cc8670c3efd955f06e28f71a4fc0f8d78625a3d51fb7dac61fb93a03dcc3a9236c1f991e507163ba8af8eb8e8d37baa220ea0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jdbi/jdbi3-jackson2@3.53.0?type=jar",
      "externalReferences": [
        {
          "url": "https://jdbi.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/jdbi/jdbi/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jdbi/jdbi3-json@3.53.0?type=jar",
      "group": "org.jdbi",
      "name": "jdbi3-json",
      "version": "3.53.0",
      "description": "Support for JSON column types. In addition to this module, a serialization module (jackson2, gson2, moshi) is required.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "fc4f71df06a55fd90819feb1e009b4ed"
        },
        {
          "alg": "SHA-1",
          "content": "2ab09661d0f934df39138358ad9cb2fa8a7026f6"
        },
        {
          "alg": "SHA-256",
          "content": "fb703e53cba842cb8e1b972de6e032b6a4c27b6f4696899c7b2186a2cdee5237"
        },
        {
          "alg": "SHA-512",
          "content": "4338faf434467ebb0e17aa95b852e2b148cd4f92ea0775a91078ad67cc7afd30a7cfc9e3dd69fecdcc23388c562f1ad4ee14869dcb3ffd2ed0241aaeec17eac5"
        },
        {
          "alg": "SHA-384",
          "content": "a4c58911e3a1288995ed3d11a6a41db228f2ef77fadd1cc1c0eb9453c6fa41adaa7a2060eb181d6ce0368a34fa7fbb03"
        },
        {
          "alg": "SHA3-384",
          "content": "b11d9fd3e84ee757d4f55d96cfe82132a93f10edd3868197d9cf057bea103ccf82e60e572ba9821a592d0d1b152f9e73"
        },
        {
          "alg": "SHA3-256",
          "content": "401f591c326465726938d84e2ee728436405b4334418c590af84811f772b0591"
        },
        {
          "alg": "SHA3-512",
          "content": "d60be8ff248eb66c7133308b02e524f94735c5b96cbfae3a348ab734b9403d6f8d3821e02f90421911c44781ba795df17c56c2921d63629df9138348be06adbf"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jdbi/jdbi3-json@3.53.0?type=jar",
      "externalReferences": [
        {
          "url": "https://jdbi.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/jdbi/jdbi/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.3?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-core",
      "version": "2.21.3",
      "description": "Core Jackson processing abstractions (aka Streaming API), implementation for JSON",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "513c4f2160300c336a02bb13592d0d98"
        },
        {
          "alg": "SHA-1",
          "content": "3358e9345dd0f2537c47bee152c0377df6c81ad5"
        },
        {
          "alg": "SHA-256",
          "content": "baf8b739e9d9b93bcdb33f25046bfdb8dbd74c97de2a8698539fbe0c7eeac0bb"
        },
        {
          "alg": "SHA-512",
          "content": "3b1140a023f12df08e891aa1d623d01c79d1932d310cc90907603103abf1d5b1b288eba45c45a3fd292f44642d042c541ec50a17be4c6c8ec6a2e6cc6a1644d6"
        },
        {
          "alg": "SHA-384",
          "content": "7a6d40916c50e4c8f3471cf21ef9d123c38757387e98c5c209fac558b976e8628f343f1629a7903ebc428a724581e639"
        },
        {
          "alg": "SHA3-384",
          "content": "d090d6e06798b7ad7db8aa5a481d36ef8bccb38c1b026af34936d5182963e4a30db88e15ccbf3a24a45cdfd613d03d10"
        },
        {
          "alg": "SHA3-256",
          "content": "04754d7de00152f4923b4053603280bc5d88117a6e4e4257809f705b4014a321"
        },
        {
          "alg": "SHA3-512",
          "content": "56e4801e9037f7ec12ae63ac581a71cac68e2eada3723f0a834af65ff18c852350fe13486ea4458c314861455c58d79f0329eab32f9e35778ee330f879a43c22"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-core",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-core/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jdbi/jdbi3-sqlobject@3.53.0?type=jar",
      "group": "org.jdbi",
      "name": "jdbi3-sqlobject",
      "version": "3.53.0",
      "description": "SqlObject is a declarative, annotation-driven API for database access. It complements the core API. Jdbi 3 is designed to provide convenient tabular data access in Java(tm) and other JVM based languages. It uses the Java collections framework for query results, provides a convenient means of externalizing SQL statements, and named parameter support for any database that supports JDBC.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f2a385634641574a970a4576cff2f8f4"
        },
        {
          "alg": "SHA-1",
          "content": "2f03470cca31e2493287a999d8d05e6a0faebe6d"
        },
        {
          "alg": "SHA-256",
          "content": "b4acea22cd809b3797b4274fd88bc816157b375fc002c75310d44636dff439ec"
        },
        {
          "alg": "SHA-512",
          "content": "df3ea8759216145ef7d2bbf30fba976b3de327210b603fbcee6aca228d286959f3186065f856e6997050d8f72f5a18a9f7239bee555376b1b2029b75b94aaab3"
        },
        {
          "alg": "SHA-384",
          "content": "a6942dd295d97ab1b87cd9dde32a68ad73f92c23c931278751bca2ba4ae8807cc4c25e0a3e964587c69fb00325a4690b"
        },
        {
          "alg": "SHA3-384",
          "content": "253e70135d432deda7b0d9f27d79a936d3f3129aab2b733f945d2af4262aa69c420fda0291d26aa2e0502925d4b92267"
        },
        {
          "alg": "SHA3-256",
          "content": "ba096715e629c7c3b38f1e762b3feeb6257bb23a01de4c4bbaf54fbc1503f9f8"
        },
        {
          "alg": "SHA3-512",
          "content": "a1100f0f3277e18245d3189a7583768984398df42a05bcf71ca79c1099e852932d19a690481ed6e05ff6e41e7767849769f7be97ceab62db1f3381620f48b034"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jdbi/jdbi3-sqlobject@3.53.0?type=jar",
      "externalReferences": [
        {
          "url": "https://jdbi.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/jdbi/jdbi/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jdbi/jdbi3-postgres@3.53.0?type=jar",
      "group": "org.jdbi",
      "name": "jdbi3-postgres",
      "version": "3.53.0",
      "description": "Support for additional PostgreSQL features and data types.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a8d4950c846c951defdd4ab803940f9c"
        },
        {
          "alg": "SHA-1",
          "content": "64dc8ae4b30b0d3482848a0969727cb62ecc08b0"
        },
        {
          "alg": "SHA-256",
          "content": "4b0bdf1b2d179af5152080e9dc5f6f35407ec1622b1364fa81c58078ffa75d24"
        },
        {
          "alg": "SHA-512",
          "content": "19561efcc24661e0d49935b007cb994a6e3acd554a8f79ded17302d219f9adea7852d3263ca3bf0cc445a45800a0a1053f0cfa903108316706892497e577edcb"
        },
        {
          "alg": "SHA-384",
          "content": "bc2446c10e04a24fea6c889656f9566f08ce227281498e3bc02941881595490a86f97b5a1a98c060d5c4eea3ff71944c"
        },
        {
          "alg": "SHA3-384",
          "content": "52e588ad39be6a8c2845309ac546915f0c268eb41364359b50741d5c78e14dceecfab5303f4f20f4d94931ca2d520518"
        },
        {
          "alg": "SHA3-256",
          "content": "ff00895ffdbb0a789014e7efc098fa18d9b0fac566fe920dd55d59571e127d60"
        },
        {
          "alg": "SHA3-512",
          "content": "b7789d279d224c1e878b5188eeb120554a0cecd517210d13ea655ad7d7d4607d79b8ca3f6aaf63c2b259bc66dafae54ddbb3995f4acad76c657a6887ccee1ccd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jdbi/jdbi3-postgres@3.53.0?type=jar",
      "externalReferences": [
        {
          "url": "https://jdbi.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/jdbi/jdbi/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jdbi/jdbi3-freemarker@3.53.0?type=jar",
      "group": "org.jdbi",
      "name": "jdbi3-freemarker",
      "version": "3.53.0",
      "description": "Use Apache Freemarker for query templating.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "cdc2b3782e6c4213a303bfcbf3bdd7e9"
        },
        {
          "alg": "SHA-1",
          "content": "2f0f83b1b984c4167f20fca099fb83501b9f6acf"
        },
        {
          "alg": "SHA-256",
          "content": "6521f7b389cc8edee05f33de7d13771dddb641bf8b2958bf18141199f129e948"
        },
        {
          "alg": "SHA-512",
          "content": "6c7f36af0ab516156423656f39f2a90e5f4351b5ba2f035cd4517f721156ecc36208e6c43fd8a0310413efd56a90a5f52e3f5dafe2d1ad1af1c11bdf2a972e15"
        },
        {
          "alg": "SHA-384",
          "content": "e93385a993b21cd5baf50734536274660741caf5950a81507b125508ba6ecdd73c04a5f9bb9703291a5221c24a44259c"
        },
        {
          "alg": "SHA3-384",
          "content": "667a7dc420d333ad65ec1287c74ff67d9fc778a0216f590f6e0307fcb228baeacc8324ca3d11c3061d93e8feb3dee803"
        },
        {
          "alg": "SHA3-256",
          "content": "1031a9edca6b079ab02e973dbd4d2aa387497e72d8626a056c98ebbffec32ea7"
        },
        {
          "alg": "SHA3-512",
          "content": "d9f97f40c5bd525e2ae16c0046a25f465e30fd791d1fe394f59c0313c58fca5f4c498c0ef4798cb53fc6cc9ec9940d6cccb8a1960eb47d1e94e64a76a9f01d1a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jdbi/jdbi3-freemarker@3.53.0?type=jar",
      "externalReferences": [
        {
          "url": "https://jdbi.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/jdbi/jdbi/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.freemarker/freemarker@2.3.34?type=jar",
      "publisher": "Apache Software Foundation",
      "group": "org.freemarker",
      "name": "freemarker",
      "version": "2.3.34",
      "description": "FreeMarker is a \u0022template engine\u0022; a generic tool to generate text output based on templates.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1704fd3c579385ca5fd0ebcdf50df73c"
        },
        {
          "alg": "SHA-1",
          "content": "c2fa47a1c3b6dcdfca90e952e51211967a4baa54"
        },
        {
          "alg": "SHA-256",
          "content": "9a9fb91cd64199232eb1ca9766148a5d30ef8944be5fac051018f96c70c8f6a3"
        },
        {
          "alg": "SHA-512",
          "content": "58bc6e157452f6b3a70a7d1bcfb89013e7204e716e267386014f6834fb66a56333fe4b538ef25b651913ab585bfa5c8fa010159d96ab952de42a82edb9552fca"
        },
        {
          "alg": "SHA-384",
          "content": "3def74003978738e770a121746f2fd5b3f179f117050fac529ba9a6eee104ac7d20f74a1e815f97a5bf451b3f36f0ed1"
        },
        {
          "alg": "SHA3-384",
          "content": "5636e107cd5406439d57e41ebcfa3cb068e32639941f1b7d780efb5acdb50ee99f7966b9174c52e9cfb27de22666fec6"
        },
        {
          "alg": "SHA3-256",
          "content": "22113afa6de5d146e0be2840ffd3103323b87849f020b06f24d9a70f3dfd3571"
        },
        {
          "alg": "SHA3-512",
          "content": "69c49e3ffb693fbeb98515f578c5a1bf1a6f81baf04efb21d8b2cdcbe93d59eff28f3e6d82a785c9c5b27222fc6f1bfa16a33bc08c92ea792a26a5d1b6068df9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.freemarker/freemarker@2.3.34?type=jar",
      "externalReferences": [
        {
          "url": "https://freemarker.apache.org/",
          "type": "website"
        },
        {
          "url": "https://issues.apache.org/jira/browse/FREEMARKER/",
          "type": "issue-tracker"
        },
        {
          "url": "http://mail-archives.apache.org/mod_mbox/freemarker-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://git-wip-us.apache.org/repos/asf?p=freemarker.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.ext/jersey-micrometer@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.ext",
      "name": "jersey-micrometer",
      "version": "4.0.2",
      "description": "Jersey extension modules providing utilities, filters as well as integrations with external frameworks (Guice, Spring, Freemarker, etc.) and languages (Scala, Groovy, etc.). NOTE: Jersey security extensions have their own dedicated security umbrella project.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "3f236652b18c85dd1d3d42be134e5304"
        },
        {
          "alg": "SHA-1",
          "content": "f32a752d69e3ac4c4b02181bb24a8eb596437fbc"
        },
        {
          "alg": "SHA-256",
          "content": "703dd4ec1ca66d0cfe0e8a4ae5fb804b496f5160c68b881ff4730e8d63370a78"
        },
        {
          "alg": "SHA-512",
          "content": "9898a4196b1f282023471a6dabc1fb0a10e6cd614c6ff721cb0ac59eee3950e4badf532db999fca3da25df2d3880cec470112aa327bd446cea58596b79069786"
        },
        {
          "alg": "SHA-384",
          "content": "8016c540b330bffd9bfdcfe67ffa70634924af42be3caa10a03d7a652da7b2553397ad3f0db07089f3387236eaed152e"
        },
        {
          "alg": "SHA3-384",
          "content": "7a17537bf467022f7578410aefcbf826e5272cbe889956f18927806ad1bf5ea329c1541d802258bdc385480f2b6d3433"
        },
        {
          "alg": "SHA3-256",
          "content": "5816cc53154fac6d0726fc11d948884007d8bf2abbe7fdb7606ad128b887fa19"
        },
        {
          "alg": "SHA3-512",
          "content": "56c27796e3961ec83ae7154bc9c3a16970530b7607728394b8eba41c256b248726d90264e0597b67c0affa868c1562e71a14f0e448bf54958e2edebdf6839037"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.ext/jersey-micrometer@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-micrometer",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "http://localhost",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/project/jersey-micrometer",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.core",
      "name": "jersey-common",
      "version": "4.0.2",
      "description": "Jersey core common packages",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "727c798720203d12c8e41bbefcd3e66d"
        },
        {
          "alg": "SHA-1",
          "content": "0f45e98ad8798ee80a3904d32fffdab62c1cbbd6"
        },
        {
          "alg": "SHA-256",
          "content": "83466815c46d8f813509411986a22d1d3a2abe572b15b03078f98bc020154538"
        },
        {
          "alg": "SHA-512",
          "content": "8deadb5f070eea6d25523d8e634394f13183124aa673e5b08751371c558c49bb428452d07c74cfb477f7da53e3827818bb0ff3715fa97a19b515976a9d9fd65a"
        },
        {
          "alg": "SHA-384",
          "content": "fe3592ead798bfbe2d28093e589f2f73d73314e134f49e186ebf338c6f4ca030def8b982fc0b5fc6f9dc0c4d090d6cf7"
        },
        {
          "alg": "SHA3-384",
          "content": "17afad77ae4b187499349ffdaa877b80cf51da0e573407ab3ff550ff8f4e44f60de4861cce0a8c7ffc9f02edd688e5b9"
        },
        {
          "alg": "SHA3-256",
          "content": "5920f7c36054a487d8a66a8541fd69cf60fb01d96f6c9da1f05a52f6fbd56d50"
        },
        {
          "alg": "SHA3-512",
          "content": "fd0dc5c6ba36eae0cfaac1f2cc02676c87cf899bff7f21d3f367499a7695dab26aaa122a9a442156cd86b86dfd8a158bbaa832bfd1be89b2b902bddde043e7cb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "name": "The GNU General Public License (GPL), Version 2, With Classpath Exception",
            "url": "https://www.gnu.org/software/classpath/license.html"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/jersey-common",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "http://localhost",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/jersey-common",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.hk2/osgi-resource-locator@3.0.0?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.hk2",
      "name": "osgi-resource-locator",
      "version": "3.0.0",
      "description": "Eclipse Enterprise for Java (EE4J) is an open source initiative to create standard APIs, implementations of those APIs, and technology compatibility kits for Java runtimes that enable development, deployment, and management of server-side and cloud-native applications.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "de9e96f2606a6f86def8659e9762c163"
        },
        {
          "alg": "SHA-1",
          "content": "5483c94aa9a7e16319abaec0a6c74c999678feac"
        },
        {
          "alg": "SHA-256",
          "content": "a1866ccfddaa29f18da5d39df662894ab2dd9902994a5000e7644f6cc1e37e55"
        },
        {
          "alg": "SHA-512",
          "content": "ff7e7fc1656bd6f938f69186aa6be1379aacdd4ba9724735c7613d76edf4496d5ff74589bbb83d42c98a22620c6eaa17319d77f878f206744be3e8677f3cba09"
        },
        {
          "alg": "SHA-384",
          "content": "65739334c0f2f3f877a4a14b4d8009711f05d37d9ab4ad3e89560c0a7635011e3dc24ab3ee31ad3f19396bc320d9962b"
        },
        {
          "alg": "SHA3-384",
          "content": "dc6237482f129cb62e8bc16233174d36d76c114b2a51de64505374105a7099454143d18e4e2700e34f6aa497740dcbc4"
        },
        {
          "alg": "SHA3-256",
          "content": "b02549e92eb21dc206488d6d7cade6f94867c537646c9ab3009fd4c119a73c2c"
        },
        {
          "alg": "SHA3-512",
          "content": "d0ed41c9b5d0fe75a12d8dbfa65df17e6d2380c25e52436929d9eaa8154f474e66447e518dbee445c4c94660882a20f509b6f69aff8081805802b7a34d518f1c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.hk2/osgi-resource-locator@3.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j/hk2-extra-parent/osgi-resource-locator",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/ee4j/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2-extra/osgi-resource-locator",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.core",
      "name": "jersey-server",
      "version": "4.0.2",
      "description": "Jersey core server implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d938a53dc417de9bc60f3158068dd1c4"
        },
        {
          "alg": "SHA-1",
          "content": "5b684689d7d36001b883eca81b00e4597f31f414"
        },
        {
          "alg": "SHA-256",
          "content": "c92030c36d6b72cea53464f954e23260ed1ad3559cbb653264497d83882a9aba"
        },
        {
          "alg": "SHA-512",
          "content": "df351826bf9b32dc4f76293029f9202b9141d939532e839afe1bfa504137644ef5156874eefa299db2f7e17fa204e2f7a390b87a3f3ad62282db622078546cd4"
        },
        {
          "alg": "SHA-384",
          "content": "4e00f26790de2a10b90285f7bc3ff0b094c8fb3c1870ef556920f698dcdb61809d2929448c044a686520256e007645d6"
        },
        {
          "alg": "SHA3-384",
          "content": "152cdbab19536c2c3f3d3189e58143253e4cbf35146314097da457cefacf0b96dc6aba4eb3c37195baa87fb8550f1744"
        },
        {
          "alg": "SHA3-256",
          "content": "71d88e8db96d993601980beeaf55d28e5bbbac8ba3438bd6e409ee8fed7e51dd"
        },
        {
          "alg": "SHA3-512",
          "content": "555f64a84060dd85c5ed5df97221e2a5d38d465f58a1cd60f33ad602163d858f6d08b44cf2a3e40b466db2b839e5c1a902b6ad1997edc04ea993fa15cf10c2c5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "name": "The GNU General Public License (GPL), Version 2, With Classpath Exception",
            "url": "https://www.gnu.org/software/classpath/license.html"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/jersey-server",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "http://localhost",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/jersey-server",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.core/jersey-client@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.core",
      "name": "jersey-client",
      "version": "4.0.2",
      "description": "Jersey core client implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9c61cbd9c4fc6749f0dc2338ea0eb870"
        },
        {
          "alg": "SHA-1",
          "content": "15a14c04c458dc9eafc12af7d33ed43fd78dab04"
        },
        {
          "alg": "SHA-256",
          "content": "91fd986ee7c7fa468b2f601d7a2cdf9bfad6ce4fa0fbf5d4f7e6d0c07c12a023"
        },
        {
          "alg": "SHA-512",
          "content": "3121c7fa53d914bb2af504ca183b245bc3184fb080f1d1b2cc0721c733be3e6c4b8cda1c4860ce0646ccd921ea83f6d145af529fa595fe6aacb4bc14644b7250"
        },
        {
          "alg": "SHA-384",
          "content": "754112b2b37246559223abb5d8cf6828ef82507b732c2abe2bdbf28c343cd1815266ddfedb7e8a16797547cda70cd053"
        },
        {
          "alg": "SHA3-384",
          "content": "334b0e0352e584761bedab51a1220f6d1ba8d4cd4221a9cc6fd1ce90d528e5f00c1fe716bdf06b9babb8f757f0740ea0"
        },
        {
          "alg": "SHA3-256",
          "content": "4ea8a1ec58dfa91a85277f085b64b3d5c979984bb50ebe60900b335f21f5ebf5"
        },
        {
          "alg": "SHA3-512",
          "content": "808a3272d41658fcfe831cc2b482968d3962544ffcf8d00d45096f80bfb37b4415b6cb72e1f608f42f04a397ba843f677a8970fcb18267aede08b1c8ad20c928"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.core/jersey-client@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/jersey-client",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "http://localhost",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/jersey-client",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.ws.rs",
      "name": "jakarta.ws.rs-api",
      "version": "4.0.0",
      "description": "Jakarta RESTful Web Services",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9b7cc90c000f193157d60d95caf45972"
        },
        {
          "alg": "SHA-1",
          "content": "c27a67f84ca491efcb3fa68f4df926e8a110069e"
        },
        {
          "alg": "SHA-256",
          "content": "6368b126cbcf34e694bb9ba5b9fe3e5040b7acea7ce622e636d698bb085fd2a6"
        },
        {
          "alg": "SHA-512",
          "content": "e423f90e5f20d133986c60c3fc2f63cfc74531d51b57bf38942cf8e603d8c6817005708117b0bb07e242eae3ba6e1cf23c6ded8fb2776274a9382505ea726ac1"
        },
        {
          "alg": "SHA-384",
          "content": "494b2962ad17d9477d58125cd99d4c0e52e58e10b7ad81e66196649da6651a3187d1ccf64e642083d0a6e54c70f07401"
        },
        {
          "alg": "SHA3-384",
          "content": "1803d40582c05b6956cfeb2cfc7b39c03f2211d4d8511b2b9df2fc4c5830f5a1f8e05d86731f4b168caa3a78bae28d69"
        },
        {
          "alg": "SHA3-256",
          "content": "5e91619ebc4cc811f1639acf926dc4935ac38808d5d834b6d6f26784d7299e9b"
        },
        {
          "alg": "SHA3-512",
          "content": "48c8ed0acd56c83a0d9413bdaa950c92345ac0f36491745e8675b96909c35311fcb05bd80839d0d1247eb5b373754ce5d922d99d06cd1ef9f6063a491e51d671"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception",
            "url": "https://www.gnu.org/software/classpath/license.html"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/jakartaee/rest/jakarta.ws.rs-api",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jakartaee/rest/issues",
          "type": "issue-tracker"
        },
        {
          "url": "jaxrs-dev@eclipse.org",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jakartaee/rest/jakarta.ws.rs-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/us.springett/owasp-risk-rating-calculator@1.0.1?type=jar",
      "group": "us.springett",
      "name": "owasp-risk-rating-calculator",
      "version": "1.0.1",
      "description": "A Java library for calculating OWASP Risk Rating scores",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f387d7ce91df7f1b56224b972b916ebe"
        },
        {
          "alg": "SHA-1",
          "content": "f4ae15b14d7a4c3686f6a8a8a93e30560472b1f8"
        },
        {
          "alg": "SHA-256",
          "content": "9b66d91d1ff61f99e320466ff451555696f139147260528591ff1718c5605d1c"
        },
        {
          "alg": "SHA-512",
          "content": "449331aaabc401a7c7ac42c6bba06d17a2c2dc8def07961b93de7bde8fb9f54aa2541cbab7e541b6fa1552977d46e5367a78277cffbafc60873bb7042facff65"
        },
        {
          "alg": "SHA-384",
          "content": "e83afc9976cfcb5419768fdba983815bf755101fef34df693b6033094e12a29d23127148edef4ba6db3573e0b2bb3871"
        },
        {
          "alg": "SHA3-384",
          "content": "07bed3d3cc524090d01da7711e684d7c645e9225e38225ca92da6f58f3ae86c9d9f2e1a45ad923f9345abecb609c0be1"
        },
        {
          "alg": "SHA3-256",
          "content": "153dbb661c502fd174cdbb735a0a89f69555365e165dd6a91d7c765226b9947a"
        },
        {
          "alg": "SHA3-512",
          "content": "6c6bb8298f8f3337395693f4963d08d21d7f76e6ef8802773e37efc64b1b25a6f8ec77169f730591f429cfa5ac5f6a1b2ef0948af67fa49f19cf7ba8a0223f25"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/us.springett/owasp-risk-rating-calculator@1.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/owasp-risk-rating-calculator",
          "type": "website"
        },
        {
          "url": "https://travis-ci.org/stevespringett/owasp-risk-rating-calculator",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/stevespringett/owasp-risk-rating-calculator/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/stevespringett/owasp-risk-rating-calculator.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/us.springett/cpe-parser@3.0.1?type=jar",
      "group": "us.springett",
      "name": "cpe-parser",
      "version": "3.0.1",
      "description": "A utility for validating and parsing Common Platform Enumeration (CPE) v2.2 and v2.3 as originally defined by MITRE and maintained by NIST.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "753b3f9a2223c44111f7098ff8a65e3f"
        },
        {
          "alg": "SHA-1",
          "content": "377c4cdca1c3c800dd1ff77d6b5cece16dbf1852"
        },
        {
          "alg": "SHA-256",
          "content": "f98a50dce0a381e08f0f0ac067801c7f4c51dc7f8f1fe7a3c9960c684a809705"
        },
        {
          "alg": "SHA-512",
          "content": "241e1a559ac01966f74e820d0af3fb4f79ec41b76590f26198929790a35579f5663d3d8f97b98e841665f57eb5bc6c51370969f0db34c99c3293c6d98093d9c2"
        },
        {
          "alg": "SHA-384",
          "content": "92929bc29a157cbe13d424875e5a66eacd52b2e20a412306ae48a43076123dca75f1cf0d6d075e140cec34e4bf7a5e25"
        },
        {
          "alg": "SHA3-384",
          "content": "bf36fd4e57aa02054d12018926b7fdb8f89b1fa669b1b4c7ff8327c3203c86843c53825facedd34b86c6d95455ce1907"
        },
        {
          "alg": "SHA3-256",
          "content": "064ece86c096355ca9a06fb4942fb3abac3555e8213653fce7ed1f7767b5531d"
        },
        {
          "alg": "SHA3-512",
          "content": "2f005c9caa28acb5a4f9d521a4b847316f949f9f377bbad4cf25ba485127104717bab5e2382238c4f7349d598eb4de073f08dea0838990d32b6d1f2741b33fc5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/us.springett/cpe-parser@3.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/CPE-Parser",
          "type": "website"
        },
        {
          "url": "https://github.com/stevespringett/CPE-Parser/actions/workflows/maven.yml",
          "type": "build-system"
        },
        {
          "url": "https://github.com/stevespringett/CPE-Parser/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/stevespringett/CPE-Parser.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.cyclonedx/cyclonedx-core-java@12.1.0?type=jar",
      "publisher": "OWASP Foundation",
      "group": "org.cyclonedx",
      "name": "cyclonedx-core-java",
      "version": "12.1.0",
      "description": "The CycloneDX core module provides a model representation of the BOM along with utilities to assist in creating, parsing, and validating BOMs.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "dabcf66c24dc633f2d7b88a69beeb16d"
        },
        {
          "alg": "SHA-1",
          "content": "449f227a8e1603880fff41789a8c1d3a090b42ec"
        },
        {
          "alg": "SHA-256",
          "content": "9f7c0dba25f5c02eccf3d79dea9566f1794e3e357655286c4831480952ab4788"
        },
        {
          "alg": "SHA-512",
          "content": "9691c6928c7681ec3b733b02febd2b95c1727d8fb8d25fe5dc116d0bbba33bfff688bcaf38b709d605516924bcc3156b404d699c94ca119682e362f8fcda4926"
        },
        {
          "alg": "SHA-384",
          "content": "57f1d23616aae2409e17165c172f290349a51a088189e37751460b97dc08e20028bd52121d9b4a97a98cf3d5b8245079"
        },
        {
          "alg": "SHA3-384",
          "content": "e7f119b0488c8f78e2afb47c253e6c39c5f1cc80beaa0c6c44924654362a0d475b885a4605253c0b8a3ca4ec1587d60e"
        },
        {
          "alg": "SHA3-256",
          "content": "f34c7330ac0e58fadd1c82c0f0cdc21984840b63f07fea340a7b8f2acdae3701"
        },
        {
          "alg": "SHA3-512",
          "content": "3fa4373bd6178acba5a6da96c137108ca1ece1fb916c2a804da935c5febd38cc02684284126884b925759a2d8aeff3c4611caca3a24e201630ef9b76567f4ce8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.cyclonedx/cyclonedx-core-java@12.1.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/CycloneDX/cyclonedx-core-java",
          "type": "website"
        },
        {
          "url": "https://github.com/CycloneDX/cyclonedx-core-java/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/CycloneDX/cyclonedx-core-java/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/commons-codec/commons-codec@1.21.0?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "commons-codec",
      "name": "commons-codec",
      "version": "1.21.0",
      "description": "The Apache Commons Codec component contains encoders and decoders for formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c49977029838babaf8a71485aa9aaef8"
        },
        {
          "alg": "SHA-1",
          "content": "d95f998db5f89900fe895daf6cd2cddcb2f1d64b"
        },
        {
          "alg": "SHA-256",
          "content": "4da851cb6abfb98bfe9eb77c5e5fc47f5414fa28b94e21b7fd9a646705dc167f"
        },
        {
          "alg": "SHA-512",
          "content": "3ceb4aa588d0b918e46b1ddda9ff41b5a765985bf66542d2728458fc3f83b9dedfd972ff5d919cf6f456fbaa9f8c4e5f0c0913848ec3a471c316374e683b1f2a"
        },
        {
          "alg": "SHA-384",
          "content": "05786582b0a85264688ad5b49ad6da09db1cdfe6301cf31ddea48f97f45b13ff25d9e3def1702890457fd5bbbd00f793"
        },
        {
          "alg": "SHA3-384",
          "content": "805bda170837bbedbecc5c63a5defc6a348777952906d8e6f33544866e86aa25c9d28f3b351e981d0fa49bb16e07884c"
        },
        {
          "alg": "SHA3-256",
          "content": "cbc2eafcba305c08e852133d0881d209799c4dc83d587869eed5f281d6bed4f3"
        },
        {
          "alg": "SHA3-512",
          "content": "244e6a342d4b5a6e7d077426427979f26320be305f1cb33d933672c926ea3a96fe4f284c9f592970f604928209fe0e149613b64990202d595bce01a669de418b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/commons-codec/commons-codec@1.21.0?type=jar",
      "externalReferences": [
        {
          "url": "https://commons.apache.org/proper/commons-codec/",
          "type": "website"
        },
        {
          "url": "https://github.com/apache/commons-codec/actions",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/CODEC",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/commons-user/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/commons-codec",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.21.3?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.dataformat",
      "name": "jackson-dataformat-xml",
      "version": "2.21.3",
      "description": "Data format extension for Jackson to offer alternative support for serializing POJOs as XML and deserializing XML as POJOs.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "10109a3b4a1798ab10551ee081d1a86c"
        },
        {
          "alg": "SHA-1",
          "content": "e3bdcc80b645f1c8780b3b3583787f6019540fee"
        },
        {
          "alg": "SHA-256",
          "content": "a434f465462c7c5f471e965f4a7d1eaddee957cbf674f8f2c578ab2295f8939d"
        },
        {
          "alg": "SHA-512",
          "content": "4401ef078cb23d300dc7d9b467f17165b7c12a9b968f626e1d54892863e5ed0fb989dfdb167959971c898bfebd8af356df7594199673a610cfba8410bd420348"
        },
        {
          "alg": "SHA-384",
          "content": "837909513f29b0f90c47b9dae8b833a8b18bc74e4833cc4b27e0d846cb1b4b471357be99b61264970c4d4519c97b9ea9"
        },
        {
          "alg": "SHA3-384",
          "content": "4edc2c593630006b54682fed4846c0edaf26422190e1b867f05928612490b27ba73e301b1470b8309f339569bdea3786"
        },
        {
          "alg": "SHA3-256",
          "content": "ea9aa8cf8a8e88ecba5b14ba58dd2c5929abb0855e4a6ea67513fb078dd23097"
        },
        {
          "alg": "SHA3-512",
          "content": "a901de954bb0c7ddb14af9d045785c050e1c0884121ec1421b5e0a473e031671a2523c92164588b64fabac2b7b22092f5c09f60c1a1178abd74cdac440cef541"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.21.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-dataformat-xml",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-dataformat-xml/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/FasterXML/jackson-dataformat-xml",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.activation",
      "name": "jakarta.activation-api",
      "version": "2.1.3",
      "description": "Jakarta Activation API 2.1 Specification",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "76e7b680375ea9f40f3ddbd702efcd25"
        },
        {
          "alg": "SHA-1",
          "content": "fa165bd70cda600368eee31555222776a46b881f"
        },
        {
          "alg": "SHA-256",
          "content": "01b176d718a169263e78290691fc479977186bcc6b333487325084d6586f4627"
        },
        {
          "alg": "SHA-512",
          "content": "aaabd4d6085a07035eaaae7b5a81aef429fea76e7fe1c8d29971e6595f0adad6bcf1088cff8a1c8936d739b0e3fce4b845323032f046b7edab2eaebd0e10a2ad"
        },
        {
          "alg": "SHA-384",
          "content": "4c4e73f59bf09342ca7691fd4855b41d3466da80618a5b7df059a2d89cf6d9779a4af751a6c4a9c48e5025c3ff75f42e"
        },
        {
          "alg": "SHA3-384",
          "content": "20be816700c87778e9453d41b6d8cb9dc992a092a308a9b7f2dfbf72e2393940a7d666c46625f130a2b57bc414df85ca"
        },
        {
          "alg": "SHA3-256",
          "content": "8a574b0a249842ea1b397d4cdef9b6d00b34ce8a849ea34184cdf45ac5aafe67"
        },
        {
          "alg": "SHA3-512",
          "content": "69cfb7dddda70ac1fca272ace0a3d5551b85dd60a6dbaf987ee777fbf573b420d13f06b8990ae70e8fe063f92b78c8a447cf9309ba516a5e993ba2d49cca8d23"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/jakartaee/jaf-api",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jakartaee/jaf-api/issues/",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jakartaee/jaf-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.servlet",
      "name": "jakarta.servlet-api",
      "version": "6.1.0",
      "description": "Eclipse Enterprise for Java (EE4J) is an open source initiative to create standard APIs, implementations of those APIs, and technology compatibility kits for Java runtimes that enable development, deployment, and management of server-side and cloud-native applications.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "314c930b3e40ac1abc3529c7c9942f09"
        },
        {
          "alg": "SHA-1",
          "content": "1169a246913fe3823782af7943e7a103634867c5"
        },
        {
          "alg": "SHA-256",
          "content": "8a31f465f3593bf2351531a5c952014eb839da96a605b5825b93dd54714c48c4"
        },
        {
          "alg": "SHA-512",
          "content": "8651fc14b79e284fe29dff5b2cadbf6748615ececde798c42687472f4f6fd1f80ee05ec53794021c62a11abed0c0170bb08b28d3f9cd7f562eb320bc9870ddec"
        },
        {
          "alg": "SHA-384",
          "content": "48b2a26351619286ffe41d25e5e61cbc0eb8a5a648a205d0f8db48178278cb16850469fe8dbc219aee0ee37f4081c248"
        },
        {
          "alg": "SHA3-384",
          "content": "2047f0b88a12619fb3f07a98048fc405e9cec4ddee6af2a2efc06c1172d2bebefc6c23bdb4df0a1054060f91d5cc5617"
        },
        {
          "alg": "SHA3-256",
          "content": "4b506d06772f32251cadc40251623ebd4f3144531249ce4821787b1a9c4a55b3"
        },
        {
          "alg": "SHA3-512",
          "content": "07632a67f7ca7b460cfc3042ecf97f9097e7d7638209434def89a3bd55da5a31e287f32def27ce776d5775ec0629979abb08fe2836d88d638802194af0320fe0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.servlet",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/servlet-api/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/servlet-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/servlet-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-server@12.1.9?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-server",
      "version": "12.1.9",
      "description": "Jetty Server Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "16bbb6d08db98909901b235e132a51f6"
        },
        {
          "alg": "SHA-1",
          "content": "d9b173609c17b7ff258b03f9dd79192c4684d12a"
        },
        {
          "alg": "SHA-256",
          "content": "5dfc3736056cd941a783b21e50c983c235c1b0a593d4b0d2954966173a3f6a3e"
        },
        {
          "alg": "SHA-512",
          "content": "5b9a29a4cc343f7db9f003a5560c786ef117b02369b8a55f0e672cc1cc6432c17669b3c97ff005b70552180a73c1abe36745794e26dc3e31d8d4896a5dde0e85"
        },
        {
          "alg": "SHA-384",
          "content": "d17b94811c3b33a21479cb6b5138eb916e503460b1ba84778295f4eea11c6cdee975ee0711a3ac2d5c4dc224ca4e7795"
        },
        {
          "alg": "SHA3-384",
          "content": "e63ecb4afb3b12696a88f09270f9bd5f1bf24e05eec7977118232659e54f6ed87f3be11bad705b670cb5619b6bad0466"
        },
        {
          "alg": "SHA3-256",
          "content": "4475067f71ce1fd538aea75882eedfaae6d835909b6e9236e31c8b4010e1b556"
        },
        {
          "alg": "SHA3-512",
          "content": "5f231e278d289a31995d9c883e180fb4ff00f24a54d22c1033ea20f963d0e23bda608bdef037196f243280fa005402b93671605f115f2ed3b6c49f5d254734cd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-server@12.1.9?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-server",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-server",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-http@12.1.9?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-http",
      "version": "12.1.9",
      "description": "Jetty HTTP Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "957922ad8031fa851fb697f866f30e8f"
        },
        {
          "alg": "SHA-1",
          "content": "d4c8ce16b394a2cbea4834781d734e314bf26cfb"
        },
        {
          "alg": "SHA-256",
          "content": "857eaf5e7823f9ee91099db5bedd179b7d3e93653ac288e27321544231014df0"
        },
        {
          "alg": "SHA-512",
          "content": "76fd6ba75fa2a2be9bcde0578303dff917cae8850957728f593b97110b7df665670f52aba8ed14719f334c3c2372de92a4db9b4491ffcf9026265be2fba3242f"
        },
        {
          "alg": "SHA-384",
          "content": "a37cc182c39ea15bb2d0be37368f746fe6327b3b422e9b1d9ef8351d4bc4b13b750170ec4d1ea0ab88c1705ae58aa4bc"
        },
        {
          "alg": "SHA3-384",
          "content": "435b0ec402af3907c216115c26282a211ca0f919f168759537eed04ed92d47d722d0d92d6c4fe647ba4747243352c181"
        },
        {
          "alg": "SHA3-256",
          "content": "cc2e25388af780b5ad283cdf995ba623830dbd058f63cd4a66d7e14f25592ec0"
        },
        {
          "alg": "SHA3-512",
          "content": "886f0bfddbd019759b588b08a8242128a4fbc064284b4b8d5682f1a2cca223e556e4feda76061cb3fe035679bd6808f6cb5b4b9f2d698cb62587f285ab4d3e5e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-http@12.1.9?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-http",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-http",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-util@12.1.9?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-util",
      "version": "12.1.9",
      "description": "Jetty Utilities Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5a450ba05c7252a83c57e727f273c501"
        },
        {
          "alg": "SHA-1",
          "content": "d8a512027f8ccf8aa2299d4fdd5cd7ca1edc6fa1"
        },
        {
          "alg": "SHA-256",
          "content": "bb228358d4ae45c004d949edc397de1eb8aabc7adc5f9b9cbc833336e70a23bd"
        },
        {
          "alg": "SHA-512",
          "content": "bb2878f56eafbdb024644bd4cad7813f86f2be75c559c8cfe285ca698b78deb08498fe4f5e73c2d18fa485c961479a9ce5aedc251274421ab92019beb1a3ae13"
        },
        {
          "alg": "SHA-384",
          "content": "195e01855ef7b179dfce12c8cc2a2d43e4eff4fbbc37ff92247e5c723c0f0c6fe6db5601497a5a5b8936e945e4468b14"
        },
        {
          "alg": "SHA3-384",
          "content": "802e40fc483e2deef0f387bba58b06276c6f201285b20fe66d8ab8bf1ae947f44feba324a630d5df79233da03dd9c55e"
        },
        {
          "alg": "SHA3-256",
          "content": "c597615133d62662e3daaba93c09eb785cf09759898ed407d73145d4061a6f5a"
        },
        {
          "alg": "SHA3-512",
          "content": "77c0b5a9baf83a9293012e9d13968e2a8f1de974052a6b5cbe14033f5945731dde3101290899411be5a2e3f26d0146d99f80cc6ec7a49bc093bd94544c7d0aa1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-util@12.1.9?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-util",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-util",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-io@12.1.9?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-io",
      "version": "12.1.9",
      "description": "Jetty I/O Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e2b075927f922ce8bb84ae7742a5bcab"
        },
        {
          "alg": "SHA-1",
          "content": "eded2b009448a5e44e16addd2fbb66701fe6456b"
        },
        {
          "alg": "SHA-256",
          "content": "904c1680e74705794c15f9df2a9ccfb155152bdd3067521fd6522df009bfa9d9"
        },
        {
          "alg": "SHA-512",
          "content": "8cda5c20b675f9fcbd0ca3032183f954d44e2d353325afed631f56a41e85b1c872bab05f549f7efd1eb95f334468ce599e40ea1a2d8f0836538031646f625497"
        },
        {
          "alg": "SHA-384",
          "content": "9fffd7cd604f06e58529b817df0bf017ab57771ccdc3776e2e3c72cf2004fbc09a9bf9b760993db7e135b6add16eb1f6"
        },
        {
          "alg": "SHA3-384",
          "content": "4177dcffaa33f121832ae6afe93b688f64b082f00d752f2adc8e313d8bd874bb2a0187697c09ef288d0de75ad6cd89d5"
        },
        {
          "alg": "SHA3-256",
          "content": "29bc9d192834b1db69a0dc804a610f70ced31740f36f81b79857c4c3d2f4751d"
        },
        {
          "alg": "SHA3-512",
          "content": "b3b4396e11594b070c697b1fddd2b1d7d84da1e43d4552c7ac1ed50849a663eba2de02e88a17c76eecce73b869a0e1a29c3d41d309bbe3d9449818444791ed95"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-io@12.1.9?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-io",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-io",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty.compression/jetty-compression-gzip@12.1.9?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty.compression",
      "name": "jetty-compression-gzip",
      "version": "12.1.9",
      "description": "Jetty Compression Gzip Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "3c95592a52488248b09dabc25c39b769"
        },
        {
          "alg": "SHA-1",
          "content": "7433139b49e24d51cf5e75102d78b3d39c43dd97"
        },
        {
          "alg": "SHA-256",
          "content": "ce9754ca916c696d26d750ae6702a8d22ec1a03b8053e5c5502d409142da87f3"
        },
        {
          "alg": "SHA-512",
          "content": "ea51180bb322c22558a26bd4bb33e7e8f50f8c09d46398c71000af741d2d9290b947a9b404b686badabc7943fff883ddb9ba6c272ee175a8c5100ab133b7dc53"
        },
        {
          "alg": "SHA-384",
          "content": "12ca06f4f5eebb88980aaa3a8f33058a77e19b7bfe13652803e5e809716a1bef233bdbdad49e22bc217af7605609b588"
        },
        {
          "alg": "SHA3-384",
          "content": "b2db1b0f4d12fabfee8d7314bfd8dd664c9c1d9816dc9cbdd04c445f55167d390da023a6d600e523a98525f87d3c64dc"
        },
        {
          "alg": "SHA3-256",
          "content": "3dbdcef6b42c4786b02ff173e944f4ebf4fa47e8314db3dca5d330240e795318"
        },
        {
          "alg": "SHA3-512",
          "content": "cd31fdd0bcf278f5ccfe6632ced4b9b839d32b1cf44fe7adf59cb2b96efcca7d17092e063e437a61935279831b66a987be5c37fb6bbfab4948adf1499fc7d400"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty.compression/jetty-compression-gzip@12.1.9?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-compression/jetty-compression-gzip",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-compression/jetty-compression-gzip",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty.compression/jetty-compression-common@12.1.9?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty.compression",
      "name": "jetty-compression-common",
      "version": "12.1.9",
      "description": "Jetty Compression Common Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "eef60a9aa64796c32dd9ee284f43cb18"
        },
        {
          "alg": "SHA-1",
          "content": "b5d45ac4d8396a78ec879d44bec19c4efaddf60d"
        },
        {
          "alg": "SHA-256",
          "content": "0c54ab8f546235088ef8cd6552f7ed876b1d204f75d6de3ae614142338b4c934"
        },
        {
          "alg": "SHA-512",
          "content": "f5f38534072a8d08ac0e3ee68837a4d11116603554c7a31f21e6073a5b5209738443bfb4a3e8cb3e4c6397fb715322c1a4c930ff67e2581af159d9083a258a43"
        },
        {
          "alg": "SHA-384",
          "content": "7e20e040e6cabf3cdb5c9d09053ec4eb8f6afeff41a68eca54ca669e791cda8903494b5df1ab3d36dab6a12ff747ac87"
        },
        {
          "alg": "SHA3-384",
          "content": "2638ff53825049aa9978c724731a4d978888add0eeaa56a4a6e31b3ac9e4ded5194b4a714ba1e5144ca8b25d3ed44287"
        },
        {
          "alg": "SHA3-256",
          "content": "118272ca2f13ceed35330e9a3967f691e6d27f705b8a5d27d1f39ad4f109607d"
        },
        {
          "alg": "SHA3-512",
          "content": "eb938fc8a8b118df1ee237a96a171fee480b4d2df6fcfc3054d02194134492c380bf2d4afc19e097643613c1586cc1e4ffcf3ed5abd3521134635fc5cb79b0b7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty.compression/jetty-compression-common@12.1.9?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-compression/jetty-compression-common",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-compression/jetty-compression-common",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty.compression/jetty-compression-server@12.1.9?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty.compression",
      "name": "jetty-compression-server",
      "version": "12.1.9",
      "description": "Jetty Compression Server Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0d0dc8548e7df7b9927bbda34b261924"
        },
        {
          "alg": "SHA-1",
          "content": "5a4de89661cc1cbd803d01bf8737ecf41cfe48f1"
        },
        {
          "alg": "SHA-256",
          "content": "0aa0fb2032b156334a13d83631fb18936154368b2a426ad2359f226bcfda7fe6"
        },
        {
          "alg": "SHA-512",
          "content": "4deda5f459f31c4840afc5f388c38a380716889a1975312c245a586f55050265b3c5c5509954b8cc95de50a9e9e34a70115f4c2513b10cb990e44a42d9956398"
        },
        {
          "alg": "SHA-384",
          "content": "77bf21423405d031b1cb0fdcf5abfe8f79630436af7eb0ac415ff3ffe25a5e8a0068099f6e8fe1ec03cda2fe49c62a11"
        },
        {
          "alg": "SHA3-384",
          "content": "3377daf3f0abeb709b80f51bdbb46876d8ea43cedfd029d425b62cd972094df75b647ee3e4b3c2f7ca10ecba5b718a9b"
        },
        {
          "alg": "SHA3-256",
          "content": "ef408cf4a802f33600054fb1758bad91fc6088247a3a7ce730a98cbbccef3753"
        },
        {
          "alg": "SHA3-512",
          "content": "8fa6824c24b03d8a0dd0f94669266868bf3ba24ce211241333c7206f84df8bd6b943bd376cc58b6322297b8fe2fa13882882416a70531e1039b9cc8ae48cda8d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty.compression/jetty-compression-server@12.1.9?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-compression/jetty-compression-server",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-compression/jetty-compression-server",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty.ee11/jetty-ee11-servlet@12.1.9?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty.ee11",
      "name": "jetty-ee11-servlet",
      "version": "12.1.9",
      "description": "Jetty Servlet Container",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "534eecb2b7fb229c24e83a5f1b51161c"
        },
        {
          "alg": "SHA-1",
          "content": "6b6a8fec7a0681f98a0925f8d4e69265fdc977d6"
        },
        {
          "alg": "SHA-256",
          "content": "adc8811e16e3c255f291c8ef20075a4c70b1a56a1fa723eb65733f662f23e5b6"
        },
        {
          "alg": "SHA-512",
          "content": "f9bcee843a9461fdd3652786fdff64469120cf7dddb8e79bd873ca683c1b774c57f294864b7a298508237d93b52d69899b161b1eeb2afd40782e3941fb9866e4"
        },
        {
          "alg": "SHA-384",
          "content": "3f3b7219914e3f4d455df92aaac15cc13b3fbb4e56ca7288aea7dee1cafabcbb9fd164be8fc6450656c83cfe5d93f2e5"
        },
        {
          "alg": "SHA3-384",
          "content": "d8e3f79b02045519143d59b45c9d327668839ea5c87fa93dc1828a529a2d27a58868a2f29057ce9b7ff5f0d9c0a28358"
        },
        {
          "alg": "SHA3-256",
          "content": "28f746847c536aaf2c006db49d10008de52390ad6e3a54879775a9c31558230c"
        },
        {
          "alg": "SHA3-512",
          "content": "fa24b6d12f41a8a2cb84f6a59c1e24c30b8781c1f291015e87bf5d87544524fd197d1700684d3a8ebeb7b638de9e9666ae7e5f28956e83cfba31a8b6f005577e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty.ee11/jetty-ee11-servlet@12.1.9?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-ee11/jetty-ee11-servlet",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-ee11/jetty-ee11-servlet",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-security@12.1.9?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-security",
      "version": "12.1.9",
      "description": "Jetty Server Security Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9b5837463c49ba4d850af991b31c479b"
        },
        {
          "alg": "SHA-1",
          "content": "da8049b28929f428a3945049be0d6956f2ab5363"
        },
        {
          "alg": "SHA-256",
          "content": "00dcd3f9258d7eb41fc1c1cbcbaa33a1a47710783e30ad512816f0c051423142"
        },
        {
          "alg": "SHA-512",
          "content": "ebefa6bdec3a936f2ff2f2cc484911277caafd0f53b7e6b62ecc25b2542c113a90c3210297f2b3dd22b8afe27432c55556742862206d76cd8d8a973166b1da76"
        },
        {
          "alg": "SHA-384",
          "content": "065f1c0bc6298cdcbfab0b5a937c7d334369cf770028a049ae64589dbd342a09cb692ec0ff5483729ef1313167c668c6"
        },
        {
          "alg": "SHA3-384",
          "content": "80c297fa55f57bc9bf0ededa6d001e9e32684bada76a4030f601b586b35b77f09f16a63722cd3e58e19f150bf64ab61a"
        },
        {
          "alg": "SHA3-256",
          "content": "09703d966a29694ff55122674f02f22563d12a8d1936d8798ad9196c90aa36ef"
        },
        {
          "alg": "SHA3-512",
          "content": "90c12fef39041932ab9c2fc28d4a893da0c607501be7a49f583a2597cdca815babf4b2b6d910da94e3a428399d4b16afb5fadd776418267690a026dc1cd56508"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-security@12.1.9?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-security",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-security",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-session@12.1.9?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-session",
      "version": "12.1.9",
      "description": "Jetty Session Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2c40adc4e4ec0aa38818c65a5410cbb0"
        },
        {
          "alg": "SHA-1",
          "content": "e21cde48bb64be19453015ab7d3c79c205b0edd4"
        },
        {
          "alg": "SHA-256",
          "content": "121a9c2c9ba7274d751fe3e0d5408612c95b46df2ed20910cfecced5ae7b1659"
        },
        {
          "alg": "SHA-512",
          "content": "4c3667d17d0a46ea7e04c3058a01941bda22de784d22ac6b466796040552723113b83a7ba0f7476fa11b9080d82b126aae7316382a8ab8b0fe6b9326dd142e24"
        },
        {
          "alg": "SHA-384",
          "content": "fd1424983969111a58198797ffe34fd33c4b555f5e199c2e659544ac256d45a16ab95704685cab53f7f1179758211fe8"
        },
        {
          "alg": "SHA3-384",
          "content": "5547d1fb57e55c3a9718ab8a63e815bf81ed9e6202d44502b558c5af6f7a049497d08b35ec9ad76faf60c6c085f886cb"
        },
        {
          "alg": "SHA3-256",
          "content": "224414f40005c94cbba2bea2158b8b4aabf28ca15a6c2d73fbbbe97d5cd0f2b0"
        },
        {
          "alg": "SHA3-512",
          "content": "343cbccd69e94bb5ffffa2c09a1c9108027ca2a3e2621b5a0fadf166c4d5768b7ad887dceaf57c3a35d2a7b6562d49597198fce9f2848607250de13b34dcbd03"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-session@12.1.9?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-session",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-session",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.slf4j/jul-to-slf4j@2.0.18?type=jar",
      "publisher": "QOS.ch",
      "group": "org.slf4j",
      "name": "jul-to-slf4j",
      "version": "2.0.18",
      "description": "JUL to SLF4J bridge",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f339bf7648049b2105e180cab6c45c9d"
        },
        {
          "alg": "SHA-1",
          "content": "79739c98001d5c9d078d087d5a348ec9e474ec8f"
        },
        {
          "alg": "SHA-256",
          "content": "cbb7d1aaaa9e871eb1a06594abd911bf97027152976edf1edc315be75239204e"
        },
        {
          "alg": "SHA-512",
          "content": "fd6019636513f7b121d0321f0897667713e7d9a0d21f6d15c3b55d2bc804687c1d264ad3d79aa227e9712169e4d6b4d05d5d8746399e900c933ce330f1850569"
        },
        {
          "alg": "SHA-384",
          "content": "0d6d600cab9a960b2b5de8e8591fbba648c155f19c5d10d11eb4eee0572edd9670ed5a63197412bfeb9d58ce4a72259f"
        },
        {
          "alg": "SHA3-384",
          "content": "cedd50402de6b6f146b3f2b71a253a24a17b17eb7f632d555f287da572d8ee157dfd154169f3b3c9a2b2b917a2001f23"
        },
        {
          "alg": "SHA3-256",
          "content": "0c8f1bf469bbfda88c4a601408e40116eb8a27e89bb77f82f7feeee409d4b12e"
        },
        {
          "alg": "SHA3-512",
          "content": "0b25b9049a933eeadca90876ba1d499bf53779063846367870b5ef69c916b041354c33d256bdba9d4f87143d1e07dad9ec66fe502a9bba0858c23e9fca416066"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl": "pkg:maven/org.slf4j/jul-to-slf4j@2.0.18?type=jar",
      "externalReferences": [
        {
          "url": "http://www.slf4j.org",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/qos-ch/slf4j/slf4j-parent/jul-to-slf4j",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.swagger.core.v3/swagger-annotations-jakarta@2.2.50?type=jar",
      "group": "io.swagger.core.v3",
      "name": "swagger-annotations-jakarta",
      "version": "2.2.50",
      "description": "swagger-annotations-jakarta",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "89b8ef9d76a45e676106750cff90a89f"
        },
        {
          "alg": "SHA-1",
          "content": "70163c80b74224c887a63367b34a69c877515346"
        },
        {
          "alg": "SHA-256",
          "content": "e31028d4271c8753b316523c04e426988a0a5c9baa6220d7f1ac62a00d95f481"
        },
        {
          "alg": "SHA-512",
          "content": "c522842a69476abc55452c74e0a01ede97f81c7751cee061525a31602e62863ee7c9f5b4d34f52086d730b46888ab968792f7224bcbcad3717e81ecc9f2cc790"
        },
        {
          "alg": "SHA-384",
          "content": "bc201ce700503d888a790c29e9eb94c00ab1c7e23a3101347ad1a6aad3131dafbca22c813e2cb9cd5b291fa6f5784802"
        },
        {
          "alg": "SHA3-384",
          "content": "0867f423f5a4cacdabe3e69a90c146dfd4e406bfddeaefd79669637f77ce6e3e17ef3d24a770ddfa9cff515fc5694641"
        },
        {
          "alg": "SHA3-256",
          "content": "23d0a590f752c23befd61effdfe28b9da41d1c9de5308a04c3979f956307fa78"
        },
        {
          "alg": "SHA3-512",
          "content": "442595ad57af14375b11ea70a991915c2e49da8d423ebd555cff107462e7b786537f70b43b5906a7336670fbbc0ebb5baf869adf6dc623f9eb155698ab0dafb2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.swagger.core.v3/swagger-annotations-jakarta@2.2.50?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/swagger-api/swagger-core/modules/swagger-annotations-jakarta",
          "type": "website"
        },
        {
          "url": "https://github.com/swagger-api/swagger-core/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://groups.google.com/forum/#!forum/swagger-swaggersocket",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/swagger-api/swagger-core/modules/swagger-annotations-jakarta",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.21.3?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.datatype",
      "name": "jackson-datatype-jsr310",
      "version": "2.21.3",
      "description": "Add-on module to support JSR-310 (Java 8 Date \u0026 Time API) data types.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "307bd11fde09b891e4c9d99b82e9dc3a"
        },
        {
          "alg": "SHA-1",
          "content": "a0958ebdaba836d31e5462ebc37b6349a0725ff9"
        },
        {
          "alg": "SHA-256",
          "content": "c6f721d6ea16f5557567a476069f7c08c598ff8f02766f229b45fe1e87139a20"
        },
        {
          "alg": "SHA-512",
          "content": "b8f37ae5fed1516dcc0ea2e8b7ab8d1a46b9348cc5edbb047c253c7efec16be283ad45734104634d932c3d1377e9cfad6d2933573825699f2bddc03d605197b8"
        },
        {
          "alg": "SHA-384",
          "content": "1a4a5d4813b3112131c0bdeb79fc92b5c617107206f352a2129e3b072853353ad4514cbc6751ad0374d0cc1607e09543"
        },
        {
          "alg": "SHA3-384",
          "content": "820b992bcaedc879bf519eafb06d081875efe0bb6d77022dadc3a6447f8f42bb02093549a7ae979bf5c20529e743ef4b"
        },
        {
          "alg": "SHA3-256",
          "content": "5a7dac689d0a57a807dcdc0c9652e748ee2424de8fcd599186c4ac2da70c1fb1"
        },
        {
          "alg": "SHA3-512",
          "content": "7afc3468f40ad0ca1416d76ac2b61c81cc68ca24699b24d42aa94eaa5d009b0d5c8517f435c19a857c983b01561e6a3663709ea067236c9bdbc228a4782336a7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.21.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jsr310",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-modules-java8/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jsr310",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
      "group": "com.github.package-url",
      "name": "packageurl-java",
      "version": "1.5.0",
      "description": "The official Java implementation of the PackageURL specification. PackageURL (purl) is a minimal specification for describing a package via a \u0022mostly universal\u0022 URL.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "90856d8bb5b17e08fdf03b6a2f93b81c"
        },
        {
          "alg": "SHA-1",
          "content": "e6bf530f52feab911f4032604ca0b8216f7ff337"
        },
        {
          "alg": "SHA-256",
          "content": "e45551727707acc0c56ac62d56964332ea0f138d6cc3656d988b9369150f5247"
        },
        {
          "alg": "SHA-512",
          "content": "8064df400154caa110b8845bd17e6cea2683307e575ce88e40d7c0c8965ea0af6c150a376d8b9ba7354676c41b52c94535f30c6e830447613299ccf5fc7aa959"
        },
        {
          "alg": "SHA-384",
          "content": "0597100022f72e020c9d929bf57ecef91af7574610fb03b4019feba4b25f491a076f03577be2009e66d9001c4c0f8ab0"
        },
        {
          "alg": "SHA3-384",
          "content": "bbdd55a31a4755ef589bcb176283fe03e3c9089d315eab577fef3a9c2d02e632c6ac3fdebbc90a2f0f8ed7974b9f397c"
        },
        {
          "alg": "SHA3-256",
          "content": "c9881b69bde35ea6ff4006877b9fbf91462f911b5b142aa699a45a00867d413a"
        },
        {
          "alg": "SHA3-512",
          "content": "2b9caf58deef687a9bf01abd61a7af4abdb61247a8a966683a18157ee948f1ea424602598dc8f665bf24f7e1e516866298ef0507e9d697cb20dcf60eff2095ca"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl": "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/package-url/packageurl-java",
          "type": "website"
        },
        {
          "url": "https://travis-ci.com/package-url/packageurl-java",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/package-url/packageurl-java/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/package-url/packageurl-java.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/net.javacrumbs.shedlock/shedlock-provider-jdbc@7.7.0?type=jar",
      "group": "net.javacrumbs.shedlock",
      "name": "shedlock-provider-jdbc",
      "version": "7.7.0",
      "description": "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "be976e84ada0e336910aed4f4fa02bf4"
        },
        {
          "alg": "SHA-1",
          "content": "8bd511ed6419d718146d442fd8aece3c7bbf9a53"
        },
        {
          "alg": "SHA-256",
          "content": "41477248807b1a25b24e7633b9c929a9d2bd2c424794e0fc81e31a4d159575c0"
        },
        {
          "alg": "SHA-512",
          "content": "8712c0a391126952ad589bda8e98491ce40ca73280f4b34ce04f38bb976b45dbcfffdaf4e29aa9c282e94bc4e5f992483424a6ad30fbdca194246e30a43fc3e7"
        },
        {
          "alg": "SHA-384",
          "content": "e27593b50d29412c2e3729907eefcde3b7f46dec3a1ee1f5ce6a4494329d67bef06d9e6b9665afacce7140dfba4ec3a2"
        },
        {
          "alg": "SHA3-384",
          "content": "2ae37e773d8380aba2052e8302d2d649b023572222c290f30253c6117fca9769e4fc05d20bc27b0c72b0845a6fc7f0a8"
        },
        {
          "alg": "SHA3-256",
          "content": "bf22c2543e1600da819cfe7231c12622360fdc48f8dba19ac60232ba3553e314"
        },
        {
          "alg": "SHA3-512",
          "content": "021e2e39286f4703ac746c73fe2631fa93c082ca3e248dbfde55af854a6334e85bd43197ebd1d5f3d196300d62eb9bbbf8c0ef84d3e4dae3df3089c04206d9a9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/net.javacrumbs.shedlock/shedlock-provider-jdbc@7.7.0?type=jar",
      "externalReferences": [
        {
          "url": "http://nexus.sonatype.org/oss-repository-hosting.html/shedlock-parent/providers/jdbc/shedlock-provider-jdbc",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "scm:git:git@github.com:lukas-krecan/ShedLock.git/providers/jdbc/shedlock-provider-jdbc",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/net.javacrumbs.shedlock/shedlock-provider-jdbc-internal@7.7.0?type=jar",
      "group": "net.javacrumbs.shedlock",
      "name": "shedlock-provider-jdbc-internal",
      "version": "7.7.0",
      "description": "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "51c9259b028488fa416005aeb06c9ee8"
        },
        {
          "alg": "SHA-1",
          "content": "703763c8b22a6d1bec383554dff36e1e51e0dc20"
        },
        {
          "alg": "SHA-256",
          "content": "1ec4b9f61035476c7aea1adfc96db2106849cff3f5835630c78991a1e8fadad9"
        },
        {
          "alg": "SHA-512",
          "content": "ee12ecc068ea62cd00142a223530e46e52b9325787b37a948354c31785978123a35793dceb56025fe8e3f4f2b096ba27265373eeae7cb137b83e25048b7b17dc"
        },
        {
          "alg": "SHA-384",
          "content": "7fbaf9e0afdd56088fd8bef03b1f0430aa3028fedd19a3685b20175034210380ed70457707c4178e08a025413b950d73"
        },
        {
          "alg": "SHA3-384",
          "content": "e19d302c092c7649ca9bb2841ee59ce2395125cb4cf31999d17216b8f0d14b8ba31fbf4d06b99dad8bcf0a4f2d9fe889"
        },
        {
          "alg": "SHA3-256",
          "content": "25132c4883097acd467a32e7f36ba67f8d5b09bb68847c8c4d7d98e406538ae6"
        },
        {
          "alg": "SHA3-512",
          "content": "120cf87c990ef7db3f3da9d192d37e9b7dec39c5060d6e165781d90f456241290cc0e46cd018389f7ab547e218eecf80b075399d9cae4fc34d906c8a644a8e9a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/net.javacrumbs.shedlock/shedlock-provider-jdbc-internal@7.7.0?type=jar",
      "externalReferences": [
        {
          "url": "http://nexus.sonatype.org/oss-repository-hosting.html/shedlock-parent/providers/jdbc/shedlock-provider-jdbc-internal",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "scm:git:git@github.com:lukas-krecan/ShedLock.git/providers/jdbc/shedlock-provider-jdbc-internal",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/net.javacrumbs.shedlock/shedlock-core@7.7.0?type=jar",
      "group": "net.javacrumbs.shedlock",
      "name": "shedlock-core",
      "version": "7.7.0",
      "description": "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "cd38af43906990b9f64842178f1b5278"
        },
        {
          "alg": "SHA-1",
          "content": "b879c2f05da958870064c63f7524f21fb1bab929"
        },
        {
          "alg": "SHA-256",
          "content": "b2ca6f358b5dcbadc641a7c5ef6217b8c5f91bc2b49e89d715fdd5443cc48166"
        },
        {
          "alg": "SHA-512",
          "content": "7e22efd79550391e86284a832cb5a0cd7e90907110d93396a93000acb584dcfa9600a9284d2e54bb1636752e7c2583e159d064e40be4dc6ee99df28bb3c7f39a"
        },
        {
          "alg": "SHA-384",
          "content": "02b6f7a4ac8e296d222e0d718f603afb14845c858afe4ec5bea9eb0504060511dfe375b12fe9efca2dba3fb7f3248eaa"
        },
        {
          "alg": "SHA3-384",
          "content": "cfc397055508ccd08ce4a1cad12a123a31a791eb363f77c9cd941b60a9ccb25426fe1bfee4a2b7dbaa2a44eec97c3b27"
        },
        {
          "alg": "SHA3-256",
          "content": "ca284bcee2c2dbf913ca0d007b0d644540a1e2070b0b5405e47d0391c5e4bdeb"
        },
        {
          "alg": "SHA3-512",
          "content": "573f455e7ba3f0d0f014bb668f897cb465b199da763872031df09f2845beba8a39f8d38904fe18240d5bd6a009b2b1fd83fde4a9013c38a8a65a3091dbe549b4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/net.javacrumbs.shedlock/shedlock-core@7.7.0?type=jar",
      "externalReferences": [
        {
          "url": "http://nexus.sonatype.org/oss-repository-hosting.html/shedlock-parent/shedlock-core",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "scm:git:git@github.com:lukas-krecan/ShedLock.git/shedlock-core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/net.javacrumbs.shedlock/shedlock-sql-support@7.7.0?type=jar",
      "group": "net.javacrumbs.shedlock",
      "name": "shedlock-sql-support",
      "version": "7.7.0",
      "description": "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "80193c91a8a353c074bb007e7e1e6715"
        },
        {
          "alg": "SHA-1",
          "content": "743e51533c82fe825f002724186bda751a80d3d3"
        },
        {
          "alg": "SHA-256",
          "content": "2a1ee14df0f02b08aaf6532ac73f5aeef02429ea81fee7eff232cae8b5ac3169"
        },
        {
          "alg": "SHA-512",
          "content": "dbad6c2dd72ab40323f68086eccec0fe79cb62dc3da0aad85aca58299099bc86f86f58feaf3f6814946b66bcf3f18ffad6569e97f0a6c823df25314e82111bc3"
        },
        {
          "alg": "SHA-384",
          "content": "37462338f08011e78f20e9541889439010f617cf663029f3db574888033714b8e8a5353faf7074e2c18595e8127ef0e3"
        },
        {
          "alg": "SHA3-384",
          "content": "a0df0c765439cc66a2a11b520146743571387bf05e9d86173b6ca22b0389d1cc036372c017362aac937e946f158e6fa5"
        },
        {
          "alg": "SHA3-256",
          "content": "8ab4d9088aedf434644843ffb7ddc5646d38b87c8c018b10fec6dfa04b741459"
        },
        {
          "alg": "SHA3-512",
          "content": "99c6069ac9341ad36967d4b511b24c0375d0b9ed293a733d98dd326fafaa59ed23861fc00a39f41a45c0d2332662204b28d5de840d2cb72faa6c740d91c80525"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/net.javacrumbs.shedlock/shedlock-sql-support@7.7.0?type=jar",
      "externalReferences": [
        {
          "url": "http://nexus.sonatype.org/oss-repository-hosting.html/shedlock-parent/providers/sql/shedlock-sql-support",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "scm:git:git@github.com:lukas-krecan/ShedLock.git/providers/sql/shedlock-sql-support",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.asahaf.javacron/javacron@1.4.0?type=jar",
      "group": "com.asahaf.javacron",
      "name": "javacron",
      "version": "1.4.0",
      "description": "A java library for parsing crontab expressions and calculating the next run time",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5129700c6b2af8e972d52829faae173c"
        },
        {
          "alg": "SHA-1",
          "content": "2291bf1f0996c6ba0dbe6783aa8a473f09cec3d9"
        },
        {
          "alg": "SHA-256",
          "content": "c1866f1c6dc28cec113c3388101d4d0a3816cb3a9025c07d2e71f668a2845538"
        },
        {
          "alg": "SHA-512",
          "content": "b64c450770445f349f2e76f696ed5599ea87c32d5006818122e59b412792a4d71b19a7c13ecbee3b5dbf86dfb0b7350cb1e32615bd5d910e2839e165dcd9b5ca"
        },
        {
          "alg": "SHA-384",
          "content": "0f66c5ddf22ebc720cd2b765c45c639843a00a882e2d19c89e562c564878a5d40a374d491cdff275187156c2dd464724"
        },
        {
          "alg": "SHA3-384",
          "content": "a854ed19a5cf790abd511f309a1674d1050c94567fce257da250de541a63215f78aa7629d6fe53ec1291c59011f3922e"
        },
        {
          "alg": "SHA3-256",
          "content": "a9b1643fdf1d81eab85d8cdc51d02f77dd36860c04f2d0ff717ebddb9cee5b3e"
        },
        {
          "alg": "SHA3-512",
          "content": "8f860b34f901cb5b3feb74037cbe852f5723256c8f5c44c25bb34cda5148fc511a240b9c0f34cd934d3843d55960a3600dd95ba7b0ae0fde5af569ce232ae645"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl": "pkg:maven/com.asahaf.javacron/javacron@1.4.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/asahaf/javacron",
          "type": "website"
        },
        {
          "url": "https://github.com/asahaf/javacron",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.micrometer/micrometer-java11@1.16.5?type=jar",
      "group": "io.micrometer",
      "name": "micrometer-java11",
      "version": "1.16.5",
      "description": "Micrometer core classes that require Java 11",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "02b3ed5b4b18575ca44d7b6657912d23"
        },
        {
          "alg": "SHA-1",
          "content": "87bd7ec1f4c60cffad9f908ffe7348c4574604bd"
        },
        {
          "alg": "SHA-256",
          "content": "b79008266b2151244fdf5b175b736da80e16d400a770ce78e7fdbf8cd0878b16"
        },
        {
          "alg": "SHA-512",
          "content": "cb1a325d4c1f2f11f7ce78a1151cf0f41658f93e89387e8eb772b3466f7284ef07ebaada1d51570650ec48743485fef92bff63d0289fc4655e3d4aa3592afa09"
        },
        {
          "alg": "SHA-384",
          "content": "e27368ffa9d13f08641ee38454dfc2c60f761311dd5f3aa62473376bf6ea0ac8ff6e77a98b9b79bf72ef8535a64a3ff4"
        },
        {
          "alg": "SHA3-384",
          "content": "182df91fc62d7700b888ee0c0f71c2471869911416e1ad183c9ddffa8795650a10b99222129a19f5352496a095ac02c2"
        },
        {
          "alg": "SHA3-256",
          "content": "f5ab8b3f2d1b7ac744d69fd5d1bc0710cc0843b18505a98679a3c6959950525a"
        },
        {
          "alg": "SHA3-512",
          "content": "3fce1f681f207471226156378a65978a24ccebc5298dc423d7f20c4906b27a28777691076704a419c206db1ca0241d2eeaa89ff58d6b6ed2f3b9e8afab5e6e4c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.micrometer/micrometer-java11@1.16.5?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/micrometer-metrics/micrometer",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.micrometer/micrometer-registry-prometheus@1.16.5?type=jar",
      "group": "io.micrometer",
      "name": "micrometer-registry-prometheus",
      "version": "1.16.5",
      "description": "MeterRegistry implementation for Prometheus using io.prometheus:prometheus-metrics-core. If you have compatibility issues with this module, you can go back to io.micrometer:micrometer-registry-prometheus-simpleclient that uses io.prometheus:simpleclient_common.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c8891265c7cf404435627fd58c3c6e26"
        },
        {
          "alg": "SHA-1",
          "content": "cde72d1c305727e20397170a8c46c2fa88c12e9e"
        },
        {
          "alg": "SHA-256",
          "content": "c8ee6627baa1458a625eee3aaf000555cb4af37935d0b8c36b1ec0cc3dd31bab"
        },
        {
          "alg": "SHA-512",
          "content": "53cda336f70ce7f0877a8fa7eb95b58809d608a714fee8c806507c9171fa052071ffdc95a8f2a67b764cb503ba19bfb8164c814ae342140267593e30c9d937f4"
        },
        {
          "alg": "SHA-384",
          "content": "3fdc8c84600728dda0ad4ecf9fdbac6427164ddd3bbd4b3234b54d6986a5f12d9cd98452436d9cacdfb41a215214b89a"
        },
        {
          "alg": "SHA3-384",
          "content": "b995fc6b3f8b88bc20156297dae965a93d2536df42a9bc7747ee10b5b74d7fb5cd71ace4764b66892bdda9874210c296"
        },
        {
          "alg": "SHA3-256",
          "content": "9790d44e7fdbe8a1aea2192782f94c52a06ee45628fc481db1054ead462ba9ac"
        },
        {
          "alg": "SHA3-512",
          "content": "9c0ca499324cbc6a45e6032c18129190c3c80e56eb5222a782ce4ce80a479d8d80698289af685eadd3d5954ae4f27bfb4b530e5590ac932f6090b1739785a094"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.micrometer/micrometer-registry-prometheus@1.16.5?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/micrometer-metrics/micrometer",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/prometheus-metrics-core@1.6.1?type=jar",
      "group": "io.prometheus",
      "name": "prometheus-metrics-core",
      "version": "1.6.1",
      "description": "Core Prometheus metric types",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8d61d62a57454c761c5893b5961417d3"
        },
        {
          "alg": "SHA-1",
          "content": "0ab30b3530abb5fc3761a4f1cca820bbb47345ca"
        },
        {
          "alg": "SHA-256",
          "content": "ce22ed0d82a79451876b8d5c600b3b14100d95846ef7d647a3189543fa648f59"
        },
        {
          "alg": "SHA-512",
          "content": "47ce685ead110e1bd5d539a295d015e0a3f1b5a7cdf8637e8ebb743a76afae5b10f086170058eccb7f5b8497b74789e8f97e6717265ee6175475597451c9d1f0"
        },
        {
          "alg": "SHA-384",
          "content": "256309e1f7a4ff37025370c9fb8f5598b7bc19b37551d0a6592b338ca878693f0db5f5b5c8f4afa187949c72884f985c"
        },
        {
          "alg": "SHA3-384",
          "content": "42fefc99d1a4cd55a7aeed4c166c6662e384cb24691984c96377770c34731b98bc4695ca8dc3d02ca6f2f4d30feeca5c"
        },
        {
          "alg": "SHA3-256",
          "content": "bc4fde8b36ab54591ef2769232690c3355e11481265d047d260913c96c2f71d1"
        },
        {
          "alg": "SHA3-512",
          "content": "0f5fd87d98559e2d1c95e0baf2229fb1f542bb6ddd23752e8014e39e5c246216ee691115a90f38f7e2b3c0a1d2f35b2e53d09f8412a6a56f2519ec1a69b61de2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/prometheus-metrics-core@1.6.1?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/client_java/prometheus-metrics-core",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/prometheus-metrics-model@1.6.1?type=jar",
      "group": "io.prometheus",
      "name": "prometheus-metrics-model",
      "version": "1.6.1",
      "description": "Data model for read-only immutable Prometheus metrics snapshots.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "69c49c7e39a124a570da372ec92edff1"
        },
        {
          "alg": "SHA-1",
          "content": "72825c7aa87dc98b140d6d5dd45b5f22bbb00878"
        },
        {
          "alg": "SHA-256",
          "content": "b2814fc72a1851f57cf4a6babdb47dcfd0095682d6d8a683606027344121b3b5"
        },
        {
          "alg": "SHA-512",
          "content": "25e18fdf12998927b69918f202538849c1328842d90f2cdcaf8e5d51f447b90f1b02688c31764ee9f170031112ac1dbe7325bce7c6ac34beb3a64223355dd7cc"
        },
        {
          "alg": "SHA-384",
          "content": "94dfce1f0d66aa888da225a2e770a5820191ccb6792eae1c198bfda09bc41f63c8a72366877081f848b3d07009408b5a"
        },
        {
          "alg": "SHA3-384",
          "content": "44730fc21bddd202fb6de2d6690afdce9e2904f03e372ed37c288e02880ed07faf2f7f527c15574f12a45707984f5839"
        },
        {
          "alg": "SHA3-256",
          "content": "4b6ce67ace6417a6d5ce11912c603f1c328efcf1ee6bd72e9545e4ddd58d47bf"
        },
        {
          "alg": "SHA3-512",
          "content": "c2734e6231fa6a477e5ee5e2c81ddf5b440fd5d43fcde10efdf9bc7c18be4a65fc6538d68d2c791397a955d9aa72fdb09c561ec870dcc5eacb58ade34aadb401"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/prometheus-metrics-model@1.6.1?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/client_java/prometheus-metrics-model",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/prometheus-metrics-config@1.6.1?type=jar",
      "group": "io.prometheus",
      "name": "prometheus-metrics-config",
      "version": "1.6.1",
      "description": "Configuration for Prometheus metrics and exposition formats.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ba8208dd5ed196e4821f1e218a170739"
        },
        {
          "alg": "SHA-1",
          "content": "ab47af126e8e2f933d790dfa62beb5825e7576a6"
        },
        {
          "alg": "SHA-256",
          "content": "1c24880b2bbc1a408b5038d85056407fde330d8c0d863cf3631e3743fca4904d"
        },
        {
          "alg": "SHA-512",
          "content": "13fd3229c4503097df2a4c39e67f3ae23da553d3466829de8470d3525136738e43fc681392da9b14fa4e322d0121d1a48bf2138de0a831aabd0af69a01be1990"
        },
        {
          "alg": "SHA-384",
          "content": "ed603c7db40463410824fa963ab7dba6e10d5bf289644b62b2fd6ade2ce2117c0784568af705399f169a360af96be17c"
        },
        {
          "alg": "SHA3-384",
          "content": "ce1a9ed3fa67961dd0f12d15d87beb59f16ed0f4fa15b09a10f621691b7fcc0d00f97351ef3061295c72ac1b9fa30dc6"
        },
        {
          "alg": "SHA3-256",
          "content": "31afefe3aec3826c10ae7b935bf6b416521c5093378d51c4213eb06576d432a1"
        },
        {
          "alg": "SHA3-512",
          "content": "19c95e7afc3645f29f680fda09e7466e42724a1f36ed0cefd78ccbaf085e45c9f73d986ca299960022cc36c9784d1ce706a08831054d7d8259329b89ce9185fa"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/prometheus-metrics-config@1.6.1?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/client_java/prometheus-metrics-config",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/prometheus-metrics-tracer-common@1.6.1?type=jar",
      "group": "io.prometheus",
      "name": "prometheus-metrics-tracer-common",
      "version": "1.6.1",
      "description": "Common Module for Prometheus integrations with distributed tracing libraries.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f2c137b72d71a46b50d5504176a4970f"
        },
        {
          "alg": "SHA-1",
          "content": "39c53d67fb9e35cd6f9ee4de75c2b1cdb8821e1f"
        },
        {
          "alg": "SHA-256",
          "content": "1b8688e02aa00bf49824f424c8ce379c4597e635ad6cfdef81a9d670a45d04ed"
        },
        {
          "alg": "SHA-512",
          "content": "8d04ab38d19ad0bf01bf14eb5bb351349d8d887f86d6223d22afa313ba73d93d3b1543c1ff06ed38e6704f5c6d01cdc101d75b2a95f921c5cb314960e5c5e879"
        },
        {
          "alg": "SHA-384",
          "content": "f417f3395ceee0aa0b585f263d648a01f9cba0186aae339b2e72234dd6da527abf10c39c3751205fbdb5277d0e615d28"
        },
        {
          "alg": "SHA3-384",
          "content": "23c55d880e129bcd56c8c23bbee5d0684aee96e7c1da6282810e33e76c825ad8a31197cea0bba3426bef84480cc2200d"
        },
        {
          "alg": "SHA3-256",
          "content": "a7b8e32d087616ebb26dc8c3a5905ee391e80b61b6b4536c8d811b7710cff93b"
        },
        {
          "alg": "SHA3-512",
          "content": "2e104dc3e8e636e67b5a45e32df25fc4ec492d53289070d6c3a9146135cc9b19f303f8f15286c9ab5fbebc945455e7ede1e27a363c3e7f4823f730c57be18410"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/prometheus-metrics-tracer-common@1.6.1?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/client_java/prometheus-metrics-tracer/prometheus-metrics-tracer-common",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/prometheus-metrics-exposition-formats@1.6.1?type=jar",
      "group": "io.prometheus",
      "name": "prometheus-metrics-exposition-formats",
      "version": "1.6.1",
      "description": "Prometheus exposition formats.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "3b55ec3e09c0e92af9b0023af112a312"
        },
        {
          "alg": "SHA-1",
          "content": "0d6886b9d45b126b37215bbaffa2598c187f95b2"
        },
        {
          "alg": "SHA-256",
          "content": "75a2581eb831e22b3df9da5345ab266e0632dab9ed050ef44de6968d135edede"
        },
        {
          "alg": "SHA-512",
          "content": "5bc3249cbb103a5c01474e9645fffd65ae0d70bd6035ea7c0ee5592785e43727498e8be91cfa0c41c25ed08213a965df8d799d010dd4bfcd92b7d91f2aadaf2b"
        },
        {
          "alg": "SHA-384",
          "content": "82f8eeda223e9e5db150104afa3b62c28764539179573e281a62973f4d1dc27c0b95e916947d862b6d2ad056a9a67ca5"
        },
        {
          "alg": "SHA3-384",
          "content": "ef649a4ee47c5102630543da63c4deaf857c5264c375a0e912c78987e81f7cc9465b8fe1b939371dd58250ec3273ffe5"
        },
        {
          "alg": "SHA3-256",
          "content": "6e243905555fffbc348a571a23f1a6c89bc7650aa7efd5c05b52bbc6213004da"
        },
        {
          "alg": "SHA3-512",
          "content": "efb967fc95c9a48eb3ecf157f21521b1ed7fbd543d2f393da112bdf60cc5220365cf1e40b45c8c4bb7c8754cc5b53c83e91531d4ed7ff5309f5e831a4e028ffd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/prometheus-metrics-exposition-formats@1.6.1?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/client_java/prometheus-metrics-exposition-formats",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/prometheus-metrics-exposition-textformats@1.6.1?type=jar",
      "group": "io.prometheus",
      "name": "prometheus-metrics-exposition-textformats",
      "version": "1.6.1",
      "description": "Prometheus exposition text formats.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4234f154932b99f3fd6d357a22472562"
        },
        {
          "alg": "SHA-1",
          "content": "606b727a9cb02a162a8418d96b788430c3037e44"
        },
        {
          "alg": "SHA-256",
          "content": "22b23c4a74a72e2b317ac378adfa917137934b898d6c3ba9d32697abe5484477"
        },
        {
          "alg": "SHA-512",
          "content": "c4d2d47902fcc35603011a27f830455ce65901acfb67788cd004ec51d9ced4fa9e2c0f87ae73099f17e8ff16e3d2f6add84557ab91dce339eaadab5d0089b102"
        },
        {
          "alg": "SHA-384",
          "content": "294755712eb71eb4488271c8bc7c77905353a84b7aa19eaf6b1f5e3be6c8fd2c526e5d9bf90bdfb4096d8c88b788f70f"
        },
        {
          "alg": "SHA3-384",
          "content": "f133c18a895874a55ce756467653aacf46aca789b7f40e5cf7c3ac1b94341b56cfb60f732465136e5c313086431830e4"
        },
        {
          "alg": "SHA3-256",
          "content": "040dd54a293e0d9ffbb04a340103e292d18c50662411cc2c5309a92eb6f3e5a0"
        },
        {
          "alg": "SHA3-512",
          "content": "532b6307622f37873e1991d75038d11d64a8fe529fa310fa36a775b650ee6cd647bab5d313740e6c0c64861feeba483379653dfd003c8b896aa9c1870ba48226"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/prometheus-metrics-exposition-textformats@1.6.1?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/client_java/prometheus-metrics-exposition-textformats",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.micrometer/micrometer-registry-prometheus-simpleclient@1.16.5?type=jar",
      "group": "io.micrometer",
      "name": "micrometer-registry-prometheus-simpleclient",
      "version": "1.16.5",
      "description": "MeterRegistry implementation for Prometheus using io.prometheus:simpleclient_common. This module is deprecated in favor of io.micrometer:micrometer-registry-prometheus that uses io.prometheus:prometheus-metrics-core.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0c43ffa895eed6cc0e9b9a29b37b4d2b"
        },
        {
          "alg": "SHA-1",
          "content": "c7524a2fce3f96bd4b096ba33f24bdb9214ce7ec"
        },
        {
          "alg": "SHA-256",
          "content": "086538fd9c2cc189ae3d5fc2469ae7ea71467deb1c313ddf63318c772a0d0738"
        },
        {
          "alg": "SHA-512",
          "content": "c230347cdb408a94c078761fb3414e53efa5a35cff243c3a9fd50c0bf7e166270787320d8fc4d67a7ec99c4909e59fc72a18a118a90a59ee7b4011db17d33654"
        },
        {
          "alg": "SHA-384",
          "content": "f644d20a4e7fdc6241543f294146a7c38141eb845fe7e59a7997328fc7d7ae2167479eea0569b9ec57205f3548295024"
        },
        {
          "alg": "SHA3-384",
          "content": "856b4c367aa6e12f1aca2f65cf8846f4b7be093fb0735f674c3c9ccd1bce4d4843221a764277511836f1f421306aee60"
        },
        {
          "alg": "SHA3-256",
          "content": "96dde2fcff655a69ae2a4e0b1c248223442137adc28435d22c7eb31391b9ca65"
        },
        {
          "alg": "SHA3-512",
          "content": "6f679ca242e78dd4cd1927f26f22e2bd446bca06c67ec5c6ef44ae121a398a02904e87de9e91b739381c19e2467930184df16d1a39996ee7eed213e0480cbae3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.micrometer/micrometer-registry-prometheus-simpleclient@1.16.5?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/micrometer-metrics/micrometer",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/simpleclient_common@0.16.0?type=jar",
      "group": "io.prometheus",
      "name": "simpleclient_common",
      "version": "0.16.0",
      "description": "Common code used by various modules of the Simpleclient.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "bef35be6eef09775ffe092c267729478"
        },
        {
          "alg": "SHA-1",
          "content": "a09a8c790a20309b942a9fdbfe77da22407096e6"
        },
        {
          "alg": "SHA-256",
          "content": "eba6ec26ce7e40cbb8725e05fb83247a9f4f44945b9e7522e3375dde67b9f059"
        },
        {
          "alg": "SHA-512",
          "content": "21eb5680598ebb8c1257990d9aae98069c17b38dba4bf8fbed37ec2a287020401380ea7854430978546529f636bd75455eb65f01b1040630b0b12d191a44be22"
        },
        {
          "alg": "SHA-384",
          "content": "011c23fdaaaf4eaa125cae68fe43573167c7cdd82562ea6cbe553270148a75f901e5e73708f16783b915d8872fc0b943"
        },
        {
          "alg": "SHA3-384",
          "content": "201268d47ebee613ec4645a748a3e968ba2cb7fbddce904b2056129351a4d9d5fbe9103727efc31416eb656271c29acf"
        },
        {
          "alg": "SHA3-256",
          "content": "43b3bdf4aecfb55ac802f6001ad90ef6e4706c12cafd8b95d504b331ae8a873a"
        },
        {
          "alg": "SHA3-512",
          "content": "dbb907bbbc68387cdefb1e251c8e319caf227d4e096de33f693f6fecdd844b273e7b549eca10ffafebe29e1ae4d9aee72eed5ead2b32cebec8dcc103680d20ec"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/simpleclient_common@0.16.0?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/simpleclient_common",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/simpleclient@0.16.0?type=jar",
      "group": "io.prometheus",
      "name": "simpleclient",
      "version": "0.16.0",
      "description": "Core instrumentation library for the simpleclient.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0d7e4aec0a8ba8ba66c87f06e3d439da"
        },
        {
          "alg": "SHA-1",
          "content": "28b0eaf7c500c506976da8d0fc9cad6c278e8d87"
        },
        {
          "alg": "SHA-256",
          "content": "22c374f237f7bc4fdb1f0ec2da379c0ba00e69ad2ffe8b6ade543d73062d377f"
        },
        {
          "alg": "SHA-512",
          "content": "2ce92dde047afc954d25326a7f573959be5be48209c687a4739b078c4083b4f1c31739d8d5bfc050844520fe8c41fdddaaf7aced8f9e6d18d3399a9101a410a7"
        },
        {
          "alg": "SHA-384",
          "content": "7f13ada603732139efb752367586be3941422f4caa3982e74e3c0aeb994113dd9a5e60d733c66101ad866cb3bbad3b73"
        },
        {
          "alg": "SHA3-384",
          "content": "2f192df969841ac644700e33e1c574277985887dc0c65bd9c66413c2b227eb4c4a1cc8777a82035af99179b46f022bc2"
        },
        {
          "alg": "SHA3-256",
          "content": "65403743a2a54a2f0c3dc5373c73b78e44732ad9e15cd4ee8a79d3e5ad5e2cf0"
        },
        {
          "alg": "SHA3-512",
          "content": "67a4bc85bb4fab76fbbe77b305e36eb3042b8aa74906ad6637e64d03a577a29305ba21d6dcb7f99e8bc96dc6344256a3fbff05f6826e08f036f91c258363a00d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/simpleclient@0.16.0?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/simpleclient",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/simpleclient_tracer_otel@0.16.0?type=jar",
      "group": "io.prometheus",
      "name": "simpleclient_tracer_otel",
      "version": "0.16.0",
      "description": "The Prometheus Java Suite: Client Metrics, Exposition, and Examples",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "55959da7c8ad68257c11d23f0de6a52f"
        },
        {
          "alg": "SHA-1",
          "content": "cc3d2b7b7cb6f077e3b1ee1d3e99eb54fddfa151"
        },
        {
          "alg": "SHA-256",
          "content": "a2a84c59bef3796bb7f9c6f2ae8b7de8b905313ef28180ac3de7ff61dd68df3f"
        },
        {
          "alg": "SHA-512",
          "content": "48aed68de446dc550346b6746b1378d570aa0d1cdef04d49e1f1de55f3b625bbf5873f7caff6e55a0eee3d7fad1bec6046a9fdf6d2c65f61d1a82df9bb2b0342"
        },
        {
          "alg": "SHA-384",
          "content": "50e97cdd886a166f6a12eda030b11044492582307f3b37bd5f5ea97f6c4de1c01f3c2d535fb52dea7c325595e303c297"
        },
        {
          "alg": "SHA3-384",
          "content": "0ef419b322cd233172c94716b75d514c02ca990f708b7a4d9e08662aa6220071561788e5c3c2b09ed9b98442f380c272"
        },
        {
          "alg": "SHA3-256",
          "content": "39cc794427fe6fa645bcb7127d6dfa264ddbbfe6c5154458b415f6eb1a07d8e6"
        },
        {
          "alg": "SHA3-512",
          "content": "5a5e4626d06ea30c6f56382759688def90e95c595c9011f158d16b2d033896b1fb1123f79268b62c0c99f9bd387b24400a20185e540139cb9ba3caaf29e51370"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/simpleclient_tracer_otel@0.16.0?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/simpleclient_tracer/simpleclient_tracer_otel",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/simpleclient_tracer_common@0.16.0?type=jar",
      "group": "io.prometheus",
      "name": "simpleclient_tracer_common",
      "version": "0.16.0",
      "description": "The Prometheus Java Suite: Client Metrics, Exposition, and Examples",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "80ee58e0fd6a13feacded45d0fc52f53"
        },
        {
          "alg": "SHA-1",
          "content": "dec00ef7c6155c4ca1109ec8248f7ff58d8f6cd3"
        },
        {
          "alg": "SHA-256",
          "content": "e84a784ac8e24f182ee62da80b6b5c8140774b75bfa4bf9cc3d3b8390db625f6"
        },
        {
          "alg": "SHA-512",
          "content": "506b8bb090bcccf020ba8dcbfec047d71927b400a06a0f2e669ee8c2b3746a3b2cd9abeb2b5562308367e93b643c4f239324943523d7b713b767137bd227baba"
        },
        {
          "alg": "SHA-384",
          "content": "917fbba98756ae774218480a9d1a028b97d185b52781c3d1d3006849a48e6a6bfbfab9ba6b524e97ed6efd1371dab51e"
        },
        {
          "alg": "SHA3-384",
          "content": "93a993bb7058582832f81656e1c8fe5ded242ced8f791225089d861801fc6be62f74de9b7ddc164f95fac267bb0aeccb"
        },
        {
          "alg": "SHA3-256",
          "content": "9fd8671d77d01cfdcc3bfa65dacebefbed8e72e63f13a524f40f4945fcf156f3"
        },
        {
          "alg": "SHA3-512",
          "content": "47c56b4f03f023c38e1af61591f7081a9dbe657f93c7b067089362e88054a03fadae12ed410e6c554e4faaca577f480f53e387f6e8488208b33fd8e779cb766f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/simpleclient_tracer_common@0.16.0?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/simpleclient_tracer/simpleclient_tracer_common",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/simpleclient_tracer_otel_agent@0.16.0?type=jar",
      "group": "io.prometheus",
      "name": "simpleclient_tracer_otel_agent",
      "version": "0.16.0",
      "description": "The Prometheus Java Suite: Client Metrics, Exposition, and Examples",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c655a6b67747cebfc80375560a549059"
        },
        {
          "alg": "SHA-1",
          "content": "009d724771e339ff7ec6cd7c0cc170d3470904c5"
        },
        {
          "alg": "SHA-256",
          "content": "7ad2bb40df74a772d9f5445a3d03579b49d6b37a47d5e90f6cf3f59ecf41ad06"
        },
        {
          "alg": "SHA-512",
          "content": "e4b6a97354c32675069cf644e97a21c797875d5c855940ec169baf552f2858b413b2dae5da7ba43c75eda7c021c6695a21fda8fe7441a87bb9a07773cd63def8"
        },
        {
          "alg": "SHA-384",
          "content": "7f8632749d3b2b5a1197e5ca5fd73be9f8a3843a3c0d9eef38fac0203a41d168f77762413594cd63155743197300a8d9"
        },
        {
          "alg": "SHA3-384",
          "content": "743de884471ef70418bb93f876ac6b6bca294ae9eae6fd7f4be93fb5ebc93512f1ab45fe54fc54f281747821a0b54384"
        },
        {
          "alg": "SHA3-256",
          "content": "50834225cefc4d290ead0d5d9660bac8c28d78cc3cf6fd230cab92896aba9e51"
        },
        {
          "alg": "SHA3-512",
          "content": "922397ce19decd78caba0a17b0a8b87365108cb66a2b3768df2f235bc3868eb46cdd90f09d7e8b59cf18e008d48c1d8963a2c28dafad2f26f048c38569f46baf"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/simpleclient_tracer_otel_agent@0.16.0?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/simpleclient_tracer/simpleclient_tracer_otel_agent",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.mweirauch/micrometer-jvm-extras@0.3.0?type=jar",
      "group": "io.github.mweirauch",
      "name": "micrometer-jvm-extras",
      "version": "0.3.0",
      "description": "A set of additional JVM process metrics for micrometer.io.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c63df9d0f3a3f2297052741dfd275e94"
        },
        {
          "alg": "SHA-1",
          "content": "86fce8e8a3bffaa50f87e5d67427419b7b5c72d3"
        },
        {
          "alg": "SHA-256",
          "content": "9e9699ddddf1d1be033eb99ac2b7b4a2f2213b7ce2ad946b13e943990e8bf223"
        },
        {
          "alg": "SHA-512",
          "content": "d71d7ea0868c7d55ab0c0f668d5461ff4b27e36ebe60c12036a652690ca12d701f941fa44f075c8ad3bf0e10a7706c90fa42db378b99df6a2594f050fbe8f054"
        },
        {
          "alg": "SHA-384",
          "content": "36353c016cb1be7637eb202b60bfa2a2eb2044506e8f5855eedae96c1e1f610dcdf1ca0539b81e99d39844b6c4b2b2d5"
        },
        {
          "alg": "SHA3-384",
          "content": "2067d2f63917f8cfde473c081ccf8b5d0ff7428ad0904d2649b65822e6d3de1e96c29b4956f445c34319de522af8a87a"
        },
        {
          "alg": "SHA3-256",
          "content": "c7131c9c0dcc8fc90e60e5ea5b9ca94844c391fb9afc83ac9cce2f0296caf3b9"
        },
        {
          "alg": "SHA3-512",
          "content": "bc5e6b0ee1c4ab411114585b8bd26fc19a9c14861811bdea97b83c02bc4ae17498cbbd9d7198e9b3c23040d566a41f1500a0980d63847fe85b5cf0bdd357f1b5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.mweirauch/micrometer-jvm-extras@0.3.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/mweirauch/micrometer-jvm-extras",
          "type": "website"
        },
        {
          "url": "https://github.com/mweirauch/micrometer-jvm-extras",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.pebbletemplates/pebble@4.1.1?type=jar",
      "group": "io.pebbletemplates",
      "name": "pebble",
      "version": "4.1.1",
      "description": "Templating engine for Java.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "155784323535e68cf19ed52a491c5301"
        },
        {
          "alg": "SHA-1",
          "content": "3ef33f88360ab0c54e201933e59a490547e2834c"
        },
        {
          "alg": "SHA-256",
          "content": "3b1ceff69a50cefa135c71e88f69f305a370c2460e15e97cd7572ddb37824b47"
        },
        {
          "alg": "SHA-512",
          "content": "793534b0fafd57783380817e15d454a08c5e5a23c79d3c78b171ea1fe197fe0032c77b8238455fc35cf70089442fe00307d156756b43c0dbc9a9e91f76f562bb"
        },
        {
          "alg": "SHA-384",
          "content": "96d08cface1df37f816ca732124fd268c7411fe012b24878b8473e1e8ae32e323591fb7b30c4cdebb125d134952282d9"
        },
        {
          "alg": "SHA3-384",
          "content": "234931563517965d90ab790f1ad3ca974e77e24903d8464493798713f11f948ab61005517594bcf1a646ea7971c8684a"
        },
        {
          "alg": "SHA3-256",
          "content": "d8cdcab93c52712909bd58b616ed0b9f721a2b70b36fa1dba1f9dc453d86efba"
        },
        {
          "alg": "SHA3-512",
          "content": "6bf62672dab917ce94206d5f3e7111828900d4241ffd898251b536095e87c0128a02b6f114eeea7458620fb8c206658ff6de10dd87ca6094700504a8c82c6be1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/io.pebbletemplates/pebble@4.1.1?type=jar",
      "externalReferences": [
        {
          "url": "http://pebbletemplates.io",
          "type": "website"
        },
        {
          "url": "https://github.com/PebbleTemplates/pebble.git/pebble",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.unbescape/unbescape@1.1.6.RELEASE?type=jar",
      "publisher": "The UNBESCAPE team",
      "group": "org.unbescape",
      "name": "unbescape",
      "version": "1.1.6.RELEASE",
      "description": "Advanced yet easy-to-use escape/unescape library for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d95ed94e1624e307a1958ee105ccbf39"
        },
        {
          "alg": "SHA-1",
          "content": "7b90360afb2b860e09e8347112800d12c12b2a13"
        },
        {
          "alg": "SHA-256",
          "content": "597cf87d5b1a4f385b9d1cec974b7b483abb3ee85fc5b3f8b62af8e4bec95c2c"
        },
        {
          "alg": "SHA-512",
          "content": "6918e9579b06721942fdcd91e401f5b996fb4eac13056dbafdf594661f355a34874eb5266784bc2c4f82df9fdd9e219d71a96f52945a354f01665f85f8166bb3"
        },
        {
          "alg": "SHA-384",
          "content": "1b808b67c784b69afea64364ba4c0d433c7f042c512f5c18f07d5388fe7ac4741913f696424bd8fbde147383cfb3d8f9"
        },
        {
          "alg": "SHA3-384",
          "content": "6525bd20a12ff43a0089c0d59369574ae6c01e2b4b1aacf466847d4433ae403db08404a9b59be397c3034f972bcd6b06"
        },
        {
          "alg": "SHA3-256",
          "content": "a190c9bedccff959d08db12fe7080437fb4e98f05516b39d6540be718e151cc6"
        },
        {
          "alg": "SHA3-512",
          "content": "5d7b5edc0c2a0d47c9625936c14b4122330b96cdf54260fe2a6468289c2f4cbc4ee19770c1144acfa702f2f058a81544b4aea9258fe0e15166a1a331736d7b77"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.unbescape/unbescape@1.1.6.RELEASE?type=jar",
      "externalReferences": [
        {
          "url": "http://www.unbescape.org",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "scm:git:git@github.com:unbescape/unbescape.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.protobuf/protobuf-java-util@4.34.1?type=jar",
      "group": "com.google.protobuf",
      "name": "protobuf-java-util",
      "version": "4.34.1",
      "description": "Utilities for Protocol Buffers",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "cc621c0eaaa83f7806bbe65c500d92fd"
        },
        {
          "alg": "SHA-1",
          "content": "229b622286699e974977b347e188138519241a37"
        },
        {
          "alg": "SHA-256",
          "content": "5d82fa744a6935bef1fce329e886b03d26c46389db7e3f5cd8363bc795908580"
        },
        {
          "alg": "SHA-512",
          "content": "8d8eb517d56e9a14d93bcb845b525bce51e9fb325321f0a89c2fe26b4a7aaf6ecc5ae021c6301392624090c33a7f478c695396baaa53a3461e327eef2f4eed89"
        },
        {
          "alg": "SHA-384",
          "content": "f0a3eb7204def714974bbcc1cd77ec80c08ce6a289e25dcc6d7780190746b2a47519ab277e16bc8c72bb555dc53e6d55"
        },
        {
          "alg": "SHA3-384",
          "content": "15af0fef601612b47631df20d526d0c58ee9c0cc3c9de2d6c0713986ebdabe5b70f6523ea892e4701c9333c21be8d443"
        },
        {
          "alg": "SHA3-256",
          "content": "e3b4bd792466d19b766caba2c377ae6a09738f1cca94ebcd7f39614f6cd40c69"
        },
        {
          "alg": "SHA3-512",
          "content": "f6bd5d7813c12523dcf27e3db297745b955b3889d45d9852bb7f5dad88664a0c0a27f443e279c568fadc3b8ecd7b8fe5442d243adf016f48b93570416e2b2791"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.google.protobuf/protobuf-java-util@4.34.1?type=jar",
      "externalReferences": [
        {
          "url": "https://developers.google.com/protocol-buffers/protobuf-java-util/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/protocolbuffers/protobuf/protobuf-java-util",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "group": "com.google.code.findbugs",
      "name": "jsr305",
      "version": "3.0.2",
      "description": "JSR305 Annotations for Findbugs",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "dd83accb899363c32b07d7a1b2e4ce40"
        },
        {
          "alg": "SHA-1",
          "content": "25ea2e8b0c338a877313bd4672d3fe056ea78f0d"
        },
        {
          "alg": "SHA-256",
          "content": "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7"
        },
        {
          "alg": "SHA-512",
          "content": "bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804"
        },
        {
          "alg": "SHA-384",
          "content": "ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4"
        },
        {
          "alg": "SHA3-384",
          "content": "9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1"
        },
        {
          "alg": "SHA3-256",
          "content": "223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff"
        },
        {
          "alg": "SHA3-512",
          "content": "3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "externalReferences": [
        {
          "url": "http://findbugs.sourceforge.net/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://code.google.com/p/jsr-305/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.code.gson/gson@2.8.9?type=jar",
      "group": "com.google.code.gson",
      "name": "gson",
      "version": "2.8.9",
      "description": "Gson JSON library",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e67627f67e03301092dc7de0a2d7cef8"
        },
        {
          "alg": "SHA-1",
          "content": "8a432c1d6825781e21a02db2e2c33c5fde2833b9"
        },
        {
          "alg": "SHA-256",
          "content": "d3999291855de495c94c743761b8ab5176cfeabe281a5ab0d8e8d45326fd703e"
        },
        {
          "alg": "SHA-512",
          "content": "46501e4dd34c9a6f33ff63aeeec45b049579365c5273490e5dfd5ea4effaeced907d0fc728204c619aa136e867ad826204582ff9ba3080d06693c1c675c8473f"
        },
        {
          "alg": "SHA-384",
          "content": "2f2897912784595e52d3f8e57741aed7dd866f16a69562d57e0604d85e2fef08b2a32e58afd00d264f66cc6ec775dc79"
        },
        {
          "alg": "SHA3-384",
          "content": "3ce084f79191afdbdb0a9aa83073b128f620cf585b65c2e81ba98080fd91e9f327db3f0952903094b7dd387bc802b5ba"
        },
        {
          "alg": "SHA3-256",
          "content": "e82ae9fa3a783ee683880d219ab529bb3d0b45ea721d002ee948fad99a67b4f0"
        },
        {
          "alg": "SHA3-512",
          "content": "25cfe43039c6d41344434f89e9a8ad6f93a341512baf93e894a14a9dfd3af1cb0f0afaed4ade6db3c719f910fd9dfbeb7bec8bcfd7f49ac572ab217bce9e595e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.code.gson/gson@2.8.9?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/gson/gson",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/google/gson/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/google/gson/gson/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.errorprone",
      "name": "error_prone_annotations",
      "version": "2.18.0",
      "description": "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "64145d0e7fee5a69ed7b84cf402de998"
        },
        {
          "alg": "SHA-1",
          "content": "89b684257096f548fa39a7df9fdaa409d4d4df91"
        },
        {
          "alg": "SHA-256",
          "content": "9e6814cb71816988a4fd1b07a993a8f21bb7058d522c162b1de849e19bea54ae"
        },
        {
          "alg": "SHA-512",
          "content": "3cea86be94bb8ae40d21ad4bf7d7f6b2233e89593b7b741ad84c78840cd3837bb5136f52e62fe9ae0953d7b190c46ad3edc102dfa97b4c7ea472a80206bf5db7"
        },
        {
          "alg": "SHA-384",
          "content": "7622eb33f83f03ab32b710b36c2fe836e24c5318f65fb8c0631a99507ca3ae65c2df8e33b63a5ce853b9cab6d9cb32e5"
        },
        {
          "alg": "SHA3-384",
          "content": "1ea52a5ce2a9ee1a960dc2a1bbe4b009d4d6a4448498e4cd76401605fa877662911e8c93b2b8bfda57bedc56c83f10a0"
        },
        {
          "alg": "SHA3-256",
          "content": "ed53f4295da75753267f241315352c4a39e60796f04e1c0c12d29c3a38be48ed"
        },
        {
          "alg": "SHA3-512",
          "content": "8266b313bd4e1170daf60642e838841370d99bc24b2a1f91825ca22037a6a30ff15cc76069f8e8770f1dc12772c277ee1320de67e815041697d93d6d7ba884fb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
      "externalReferences": [
        {
          "url": "https://errorprone.info/error_prone_annotations",
          "type": "website"
        },
        {
          "url": "https://github.com/google/error-prone/error_prone_annotations",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents",
      "name": "httpclient",
      "version": "4.5.14",
      "description": "Apache HttpComponents Client",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2cb357c4b763f47e58af6cad47df6ba3"
        },
        {
          "alg": "SHA-1",
          "content": "1194890e6f56ec29177673f2f12d0b8e627dec98"
        },
        {
          "alg": "SHA-256",
          "content": "c8bc7e1c51a6d4ce72f40d2ebbabf1c4b68bfe76e732104b04381b493478e9d6"
        },
        {
          "alg": "SHA-512",
          "content": "a084ef30fb0a2a25397d8fab439fe68f67e294bf53153e2e1355b8df92886d40fe6abe35dc84f014245f7158e92641bcbd98019b4fbbd9e5a0db495b160b4ced"
        },
        {
          "alg": "SHA-384",
          "content": "c8ccaa1fa8ba7c421413e3c30375bd9c31284e837c476fd831e18043ad4187e92166f49554123108891241bed674b95d"
        },
        {
          "alg": "SHA3-384",
          "content": "9a17dfcf12b2af3a9b006ec369f9bc78ba322348bf1a01146e0d4f3fec2bed6cbe8b2193fac5b4d5a0c3036c06477510"
        },
        {
          "alg": "SHA3-256",
          "content": "48f0a61b691e22dec9d6db8e0b58be4ca17a42a2846c82f0875de21f72bb0faa"
        },
        {
          "alg": "SHA3-512",
          "content": "4ad2c9adc761b7e813330f0dcad3f9978702896c7d0cbf81f60a472d550e320b1527be425ba597c8c9352d587e32e1d46ceb4c73e99c70a6190df4c699a7c2a9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
      "externalReferences": [
        {
          "url": "http://hc.apache.org/httpcomponents-client-ga",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "http://issues.apache.org/jira/browse/HTTPCLIENT",
          "type": "issue-tracker"
        },
        {
          "url": "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/httpcomponents-client/tree/4.5.14/httpclient",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents",
      "name": "httpcore",
      "version": "4.4.16",
      "description": "Apache HttpComponents Core (blocking I/O)",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "28d2cd9bf8789fd2ec774fb88436ebd1"
        },
        {
          "alg": "SHA-1",
          "content": "51cf043c87253c9f58b539c9f7e44c8894223850"
        },
        {
          "alg": "SHA-256",
          "content": "6c9b3dd142a09dc468e23ad39aad6f75a0f2b85125104469f026e52a474e464f"
        },
        {
          "alg": "SHA-512",
          "content": "168026436a6bcf5e96c0c59606638abbdc30de4b405ae55afde70fdf2895e267a3d48bba6bdadc5a89f38e31da3d9a9dc91e1cab7ea76f5e04322cf1ec63b838"
        },
        {
          "alg": "SHA-384",
          "content": "ba9ceaee1a37ca3201d6a1315ecb0327b495489efd0baa155c219c475df8d3eb69fe77ab0026563db406497626da6562"
        },
        {
          "alg": "SHA3-384",
          "content": "b9dc44dcc7cc86d5036f26d54c4003a2d72808ae7b07a0808bb53505c6d4281b5ad213eb1f3d0fef1113dec57cb0dfe1"
        },
        {
          "alg": "SHA3-256",
          "content": "fd8ab51846476c6c18822151c9ec07b39a9633010b5d20ea937fc6910407bc64"
        },
        {
          "alg": "SHA3-512",
          "content": "b42fa528242981a9d70e4f68ab75a24292df5112c44c21b6f18cb9201ce747885ba1d4dc69bc3d14d0da46a6c2638f937c11bc45749abeb55dc89ddada90cdda"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
      "externalReferences": [
        {
          "url": "http://hc.apache.org/httpcomponents-core-ga",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "http://issues.apache.org/jira/browse/HTTPCORE",
          "type": "issue-tracker"
        },
        {
          "url": "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/httpcomponents-core/tree/4.4.16/httpcore",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "commons-logging",
      "name": "commons-logging",
      "version": "1.2",
      "description": "Apache Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "040b4b4d8eac886f6b4a2a3bd2f31b00"
        },
        {
          "alg": "SHA-1",
          "content": "4bfc12adfe4842bf07b657f0369c4cb522955686"
        },
        {
          "alg": "SHA-256",
          "content": "daddea1ea0be0f56978ab3006b8ac92834afeefbd9b7e4e6316fca57df0fa636"
        },
        {
          "alg": "SHA-512",
          "content": "ed00dbfabd9ae00efa26dd400983601d076fe36408b7d6520084b447e5d1fa527ce65bd6afdcb58506c3a808323d28e88f26cb99c6f5db9ff64f6525ecdfa557"
        },
        {
          "alg": "SHA-384",
          "content": "ac20720d7156131478205f1b454395abf84cfc8da2f163301af32f63bd3c4764bd26cb54ed53800f33193ae591f3ce9c"
        },
        {
          "alg": "SHA3-384",
          "content": "628eb4407e95dca84da1a06b08a6d9b832a49de8472b1b217e8607f08efeeed18b996232d64dd07f03e78e0e3bb4b078"
        },
        {
          "alg": "SHA3-256",
          "content": "9aab62deccf156ee6e324c925dfc30ecb53e8465802863a551901a461424e807"
        },
        {
          "alg": "SHA3-512",
          "content": "3fd76857f6d20c03799537cc961c1c4ddf1c375c6c192fb982363e3b9397ba138b77f24ef38b4202f44e37586789c0320e4de18fdadd2772304fd14a9b26d552"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
      "externalReferences": [
        {
          "url": "http://commons.apache.org/proper/commons-logging/",
          "type": "website"
        },
        {
          "url": "https://continuum-ci.apache.org/",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "http://issues.apache.org/jira/browse/LOGGING",
          "type": "issue-tracker"
        },
        {
          "url": "http://mail-archives.apache.org/mod_mbox/commons-user/",
          "type": "mailing-list"
        },
        {
          "url": "http://svn.apache.org/repos/asf/commons/proper/logging/trunk",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.httpcomponents/httpmime@4.5.14?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents",
      "name": "httpmime",
      "version": "4.5.14",
      "description": "Apache HttpComponents HttpClient - MIME coded entities",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "714c4ae31c40e6633c0bcaa4e6264153"
        },
        {
          "alg": "SHA-1",
          "content": "6662758a1f1cb1149cf916bdac28332e0902ec44"
        },
        {
          "alg": "SHA-256",
          "content": "d401243d5c6eae928a37121b6e819158c8c32ea0584793e7285bb489ab2a3d17"
        },
        {
          "alg": "SHA-512",
          "content": "884b062028f68278389b74ccfbc35142caae489ceda5df01d2c60df884b9604cd4055bf4e1524e0358661fa0e88e93e614fb6be590cb940510b07a37c0b0a20c"
        },
        {
          "alg": "SHA-384",
          "content": "88ec9117630f714abcebae122c9e10852706f88917ac12c610b975538c14a10fd5b1ec9213163b0cb950e9c9b7a74fe6"
        },
        {
          "alg": "SHA3-384",
          "content": "8f1d2b58f6a74585833611b1219c78cb37737fc75e3e2cb58804d87df93a28107da6c49a86b139dff46a7973260fdf11"
        },
        {
          "alg": "SHA3-256",
          "content": "7fdd67408fb7beacf7c00415476e9b61903c90ad06a50a7d500aa045d5747bbd"
        },
        {
          "alg": "SHA3-512",
          "content": "5075045ce4e6faa77907d762ceb24660d13b225505bb81a1b0f101a736d4ad2f4c914ce7d04137d1506495eaa437aa64bb1ac08130f4b6a76e0025f8463f7353"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents/httpmime@4.5.14?type=jar",
      "externalReferences": [
        {
          "url": "http://hc.apache.org/httpcomponents-client-ga",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "http://issues.apache.org/jira/browse/HTTPCLIENT",
          "type": "issue-tracker"
        },
        {
          "url": "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/httpcomponents-client/tree/4.5.14/httpmime",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.1.1?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.woodstox",
      "name": "woodstox-core",
      "version": "7.1.1",
      "description": "Woodstox is a high-performance XML processor that implements Stax (JSR-173), SAX2 and Stax2 APIs",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "971ff236679f7b35a7c13c0d02c0170e"
        },
        {
          "alg": "SHA-1",
          "content": "76baad1b94513ea896e0a17388890a4c81edd0e0"
        },
        {
          "alg": "SHA-256",
          "content": "02b9d022e9d47704ff8a7a859a0dbfd3b2882a8311eb7ff1e180f760ccda2712"
        },
        {
          "alg": "SHA-512",
          "content": "28105d6409766966123d4e212dba555c4776bfeb538093d3739ef113de5c6d6e92453aabc16915bfb76124a5dcc82b57f3cd13b42ea2e4038a4495285c642d3a"
        },
        {
          "alg": "SHA-384",
          "content": "ca02f505f335a975e71c4a549bc3707c35b3592d2ac2fc2cf8887dfde44ae76b753ad2174e4971bb33bb1ab6c8c6b3c7"
        },
        {
          "alg": "SHA3-384",
          "content": "1efac262497c761e493337361dbc388ac01634dbda5322a8ee7742b0b25a26cc039c3e3653bf2302fbc31883c8030703"
        },
        {
          "alg": "SHA3-256",
          "content": "10a216995fc4e318dcb0be7b9ae00c07536fbc81e6119f0bf1e36716146f674d"
        },
        {
          "alg": "SHA3-512",
          "content": "924b1cb6ba79666c4fc13f1b057b376de471cfe60e68daca71ed51355abbd0de6799441ddd81df786317dd2c533cc1d3a9671f759e3a480d99c2d772eaa5ddda"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.1.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/woodstox",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/woodstox/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/woodstox",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar",
      "publisher": "fasterxml.com",
      "group": "org.codehaus.woodstox",
      "name": "stax2-api",
      "version": "4.2.2",
      "description": "Stax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6949cace015c0f408f0b846e3735d301"
        },
        {
          "alg": "SHA-1",
          "content": "b0d746cadea928e5264f2ea294ea9a1bf815bbde"
        },
        {
          "alg": "SHA-256",
          "content": "a61c48d553efad78bc01fffc4ac528bebbae64cbaec170b2a5e39cf61eb51abe"
        },
        {
          "alg": "SHA-512",
          "content": "1c0587ecb4c5a659ce2ae1fe36ffc12636a8ecba549a29f2cf91cb4d1d36a335c05f35776f480488d40d894230389f76aeeb363887026c6ef5c565995c17b7c6"
        },
        {
          "alg": "SHA-384",
          "content": "3b617db8307a081df858a4110f5b8fec51c06355762506cbc4be5557fb06959f0499f7e672103d46f71c66bae472a7bd"
        },
        {
          "alg": "SHA3-384",
          "content": "22a3150713f7072962e26c286a1ef97d849b10d7f1251c56ae34252f247127b56dd189daa758c64776b4196ee0060517"
        },
        {
          "alg": "SHA3-256",
          "content": "174868c81672068b42ccde35310d4dad60f457b795101e99588c28b0eebdefc2"
        },
        {
          "alg": "SHA3-512",
          "content": "c88de5a2137e3b63b632ef24799a677c998b76e736407f1e8c6af85d1b6a94c76bc20d26e6cac847d8383ab6760f1b5c2ae7574fba21e1e6a96de7cdd38f0e39"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/FasterXML/stax2-api",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/stax2-api/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/FasterXML/stax2-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.nscuro/versatile-core@0.18.1?type=jar",
      "group": "io.github.nscuro",
      "name": "versatile-core",
      "version": "0.18.1",
      "description": "Java implementation of vers, a mostly universal version range specifier",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e2cdcd003ab74b59b8d250f35ff3fb4e"
        },
        {
          "alg": "SHA-1",
          "content": "09c11e3fca0d0f9337e7d8e68eca33419406060c"
        },
        {
          "alg": "SHA-256",
          "content": "6e93ca4909d54d5419230158c611e15385904f3e226a0bf020f6dc3a2f37d971"
        },
        {
          "alg": "SHA-512",
          "content": "6dd202189145b01e8b321660aa1beffea06714abbc2ca7ce3905c08308ed8e7d47b4ddf2e525537ebc079bcde9ae24d6d1c6ad31852077aca42b4021d41fe01d"
        },
        {
          "alg": "SHA-384",
          "content": "a9031942066add5f0eef6b611243a823eef4edfd2424b5b1fa01454cc29b141dc7d8a5dc99b6c953c8e468693a9fc573"
        },
        {
          "alg": "SHA3-384",
          "content": "188291ce7486a2dbeb7e5983cdc5c573472ae49a34bd421d36f32be01426d6a57f0df186dbe20bab73d9d16513a273e0"
        },
        {
          "alg": "SHA3-256",
          "content": "27fe93d551ef5a5290f79da3c719d90ba2d5ea5c589ef84f17e0f79e0f88f3d4"
        },
        {
          "alg": "SHA3-512",
          "content": "21303ea8cabd0588c65f791fc3c6fc641798ec80dd55ea9752be1c58658a3727d5e27e45cd2c4d857c3235fd2e533cdabbe1ea6fcb54bf44d67e87ede7f0da90"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.nscuro/versatile-core@0.18.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/nscuro/versatile/versatile-core",
          "type": "website"
        },
        {
          "url": "https://github.com/nscuro/versatile/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver.git/versatile-core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.nscuro/versatile-spi@0.18.1?type=jar",
      "group": "io.github.nscuro",
      "name": "versatile-spi",
      "version": "0.18.1",
      "description": "Java implementation of vers, a mostly universal version range specifier",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9a3988b3891580e26324e260763df731"
        },
        {
          "alg": "SHA-1",
          "content": "0c926f34de821236dd8eac113777500601946f31"
        },
        {
          "alg": "SHA-256",
          "content": "f0e39a53095b6713d28f13e077c073353642fe7f99b373e258b1a7d65936f4e8"
        },
        {
          "alg": "SHA-512",
          "content": "6274ef8d75180ef75d7c91c30c807f3bb8d7499df36913d27c7fff68c62eb63bf1620f5e4cef7623aaf0a07ffd5cb10f54abdbab0074d5e1e486141ef77a6001"
        },
        {
          "alg": "SHA-384",
          "content": "bb3b477b1a6c9b8891cc335d611c430abf6c6ad0dd149e95eb92ca45197e32a32045afd0391462f352b6a62380445dcc"
        },
        {
          "alg": "SHA3-384",
          "content": "08d7c2220fe7e4b48c08760046bf87b5240dd2154963106be49cca3f5cd81d91aee96293ad55e2b65408729426012e1c"
        },
        {
          "alg": "SHA3-256",
          "content": "3f8f4a2c2deff195c79c94eaadece0b96e3f27985476f88dedc2ac73e5c0d041"
        },
        {
          "alg": "SHA3-512",
          "content": "c6c2707bda3e18adf018d68c354305b3a574bbfefad7ef1183de606175d597a5c38fbd99d756377f9802f92c73945a6faf2587f5989ed685dd079920e415e9f5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.nscuro/versatile-spi@0.18.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/nscuro/versatile/versatile-spi",
          "type": "website"
        },
        {
          "url": "https://github.com/nscuro/versatile/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/hyades-apiserver.git/versatile-spi",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.maven/maven-artifact@3.9.15?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.maven",
      "name": "maven-artifact",
      "version": "3.9.15",
      "description": "Maven is a software build management and comprehension tool. Based on the concept of a project object model: builds, dependency management, documentation creation, site publication, and distribution publication are all controlled from the declarative file. Maven can be extended by plugins to utilise a number of other development tools for reporting or the build process.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "705ca9659f4968ff4f19c710c510b0a4"
        },
        {
          "alg": "SHA-1",
          "content": "1bdd4eee8f1853fdfdefbdefdaac1bb708138c93"
        },
        {
          "alg": "SHA-256",
          "content": "f154c31f15ac97c37b9cdf9f8d63cde5053c470d2daf54df7dfd3bb3c9e501c6"
        },
        {
          "alg": "SHA-512",
          "content": "0aab778be865fe8483d9741cf927661e0b1cd8c289d0a31e8257939bf0a0fd25920c27b2d26edc1957eec7eeeba1862808d7143fd43d20e1c7b9eee23bb5a47f"
        },
        {
          "alg": "SHA-384",
          "content": "f7a07acd1019bbdd2e4210a3eac369e71533a71d32c992a7e51efac7cfe88cf1c77260501990225ebb90262273563fd4"
        },
        {
          "alg": "SHA3-384",
          "content": "0c6400837bccb9cf8cbf1ac6f4b98b14d6e742a6bb3082ee6e0c363af6e1c7e7bf3264d96bdc435c9eb4158c266ec7fb"
        },
        {
          "alg": "SHA3-256",
          "content": "f5655d4dc693d2b4129d947665c83f5d0b6678b68c8df5db965ed6364a0ee67f"
        },
        {
          "alg": "SHA3-512",
          "content": "50a4210271b9858ca2dac6f3654f998bf67687c9569ce1ba561d9bd0e1900c615e1c137afed2e8d43bed7b6a91a93f9e3c4be7f5efa99d0141dcda6f35f7708b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.maven/maven-artifact@3.9.15?type=jar",
      "externalReferences": [
        {
          "url": "https://maven.apache.org/ref/3.9.15/maven-artifact/",
          "type": "website"
        },
        {
          "url": "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/",
          "type": "build-system"
        },
        {
          "url": "https://maven.apache.org/download.html",
          "type": "distribution"
        },
        {
          "url": "https://github.com/apache/maven/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://lists.apache.org/list.html?users@maven.apache.org",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/maven/tree/maven-3.9.15/maven-artifact",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.codehaus.plexus/plexus-utils@3.6.1?type=jar",
      "publisher": "Codehaus Plexus",
      "group": "org.codehaus.plexus",
      "name": "plexus-utils",
      "version": "3.6.1",
      "description": "A collection of various utility classes to ease working with strings, files, command lines, XML and more.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "bf77c7ef462342bd42ce245be9648540"
        },
        {
          "alg": "SHA-1",
          "content": "9dce1b9c69b197f453223e45a2cb9fa0cd48b424"
        },
        {
          "alg": "SHA-256",
          "content": "05a63effd67e2d6b9d610cc82e2bd7473289d34802e57a529b28110f28af5679"
        },
        {
          "alg": "SHA-512",
          "content": "cdf52ae14e19fbc040a8ce9eb56f25fb6f3c1c2703b8cb7815329f06f675a284934e4fb19acedb49a24abc8ba28493fd5aedf15f0ac8033d123c71620de0ac98"
        },
        {
          "alg": "SHA-384",
          "content": "a02b453e4590c5028dcd94a72b818eb63ff7831cda8337daef63f774c1972b920b9eaae979867be34d9d4843e8296d42"
        },
        {
          "alg": "SHA3-384",
          "content": "28541c0fccf50c5eafa4b420c1453a77a8db9466b4da35f94ca745100f5b8b5a3f9ac2b3ab7f1008edb5ce33204a3ae2"
        },
        {
          "alg": "SHA3-256",
          "content": "f7353bfe893ab5932fe443ef26d2a9d9541f1f62105f35f923bd9b6b94808683"
        },
        {
          "alg": "SHA3-512",
          "content": "a7d95eaf9c02a688bcfaa1702c555eac1975190abda0ca626f3e41cec2492125e712c561a3cc67ed0d76a1b174ff03a8cd05afc0d377af1ff4c74a846546675f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.codehaus.plexus/plexus-utils@3.6.1?type=jar",
      "externalReferences": [
        {
          "url": "https://codehaus-plexus.github.io/plexus-utils/",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/codehaus-plexus/plexus-utils/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://groups.google.com/forum/#!forum/mojohaus-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/codehaus-plexus/plexus-utils/tree/plexus-utils-3.6.1/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.vdurmont/semver4j@3.1.0?type=jar",
      "group": "com.vdurmont",
      "name": "semver4j",
      "version": "3.1.0",
      "description": "Semantic versioning for Java apps.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b39112afda0af7dba1f160f7284d402f"
        },
        {
          "alg": "SHA-1",
          "content": "0de1248f09dfe8df3b021c84e0642ee222cceb13"
        },
        {
          "alg": "SHA-256",
          "content": "0f33724dd012099f0737e3d9203e28f4a804435526998d4f5841993058651cb8"
        },
        {
          "alg": "SHA-512",
          "content": "4b7cc68857eb7633d0ef8a6bd8101243d0300537e51fac1380ebb944a8708f0f75ec3fa10186845b7e3a2d7988ae0bf22369909a52b6d95b5faaa9bc96dbbe64"
        },
        {
          "alg": "SHA-384",
          "content": "5e193b3ae6a6f34fb38abca0a2f9124daa0401238bb18015f8dfe4431da87525afa82921dd57754a1095d30451dfc363"
        },
        {
          "alg": "SHA3-384",
          "content": "62d09d2c1151a5108b55f04c8cf520c1b1b9e96ff045973e7aa729ff79522cf6772af7808c7435e6679620bdd0b722bc"
        },
        {
          "alg": "SHA3-256",
          "content": "fa98f695faa97464ce8b90f8c93b0179843ab2cc8a9e09d09586523e1cf4f401"
        },
        {
          "alg": "SHA3-512",
          "content": "6b24821607cb2040dd649c569e01cb87af0b5b92488111655ef15eb675a1e9f33029616c154253b4a865c42906b699a44dacf36411f42d062f57ccc60a0b5d42"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:maven/com.vdurmont/semver4j@3.1.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/vdurmont/semver4j",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.postgresql/postgresql@42.7.11?type=jar",
      "publisher": "PostgreSQL Global Development Group",
      "group": "org.postgresql",
      "name": "postgresql",
      "version": "42.7.11",
      "description": "PostgreSQL JDBC Driver Postgresql",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b969f87f07d6434bd77cdc5e440da49a"
        },
        {
          "alg": "SHA-1",
          "content": "4c21cdd1b3938f400703716d37c4e8ca4d332808"
        },
        {
          "alg": "SHA-256",
          "content": "1981b31d3993c58702783c1cddf10a34e48c1f413d70ff1cb6def0a143484647"
        },
        {
          "alg": "SHA-512",
          "content": "7022c5eb9ca40612748af2d51fedaf773beeef60d46742c807ea0eb4a72107ea98bd1bb7fde484afa199f862b8be9dc827cc203a36c61df832fe6797413bf944"
        },
        {
          "alg": "SHA-384",
          "content": "71efac9613404865e11e81f96086aec5f851ebdf96b68b915bff57ccc8359b9a2114123e09ba897280518e64f6cfb0ad"
        },
        {
          "alg": "SHA3-384",
          "content": "65aa9b43829ac1998496b941fb12f2b8d1220ce025a426fcb93d68b83637a72fbd3d899195209d0f0b061f085d9b32da"
        },
        {
          "alg": "SHA3-256",
          "content": "1b7b5d4ac5792d6a8223d567790a2d6c999d3166813e41d3774c5e3f8619c988"
        },
        {
          "alg": "SHA3-512",
          "content": "2a4f18f20598ed0b8c0a7cc9f4b9b28be4856d03e4f6ae399b1aec07b3362e4632e6e8132dc2ca6e010faf92362e291d0acb2542c84a45c9c1dc746dd872b4e6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.postgresql/postgresql@42.7.11?type=jar",
      "externalReferences": [
        {
          "url": "https://jdbc.postgresql.org",
          "type": "website"
        },
        {
          "url": "https://github.com/pgjdbc/pgjdbc/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.postgresql.org/list/pgsql-jdbc/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/pgjdbc/pgjdbc",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.cloud.sql/postgres-socket-factory@1.28.3?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.cloud.sql",
      "name": "postgres-socket-factory",
      "version": "1.28.3",
      "description": "Socket factory for the Postgres JDBC driver that allows a user with the appropriate permissions to connect to a Cloud SQL database without having to deal with IP allowlisting or SSL certificates manually.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "fa00f6ea71f76a7b327f7e4a9b86d6d9"
        },
        {
          "alg": "SHA-1",
          "content": "31287a3a6b06f7b1ff9da2de19cdfdab2025aaf9"
        },
        {
          "alg": "SHA-256",
          "content": "0a9008bf529d5810ac944d6e8b40b0db4e39a0054f3e8e052075965a8405e45f"
        },
        {
          "alg": "SHA-512",
          "content": "c1d2050d8df2918d45c3814670e8f5b21407b9a432259ddb19beea93d7ea9c393ccc8c04a4df241e9790d527b100396a205b950630ebdbd6fcf2f70f29f5652f"
        },
        {
          "alg": "SHA-384",
          "content": "431891990f4d6ca84093a6bb43753260d5fe4fe0d18501a9245b001e85598b87aa6403edd9e0590305e61cec92816dcf"
        },
        {
          "alg": "SHA3-384",
          "content": "c7fcbfa6df29d75d3cc2a63a37e267c04c6c830e3cb6b5912c88d0032415e30db4b67b24a26c27486e0669e3c137142b"
        },
        {
          "alg": "SHA3-256",
          "content": "aa385d441b9b4472ff99b07e3e6c88353e11528337008a06496b5c5746b91706"
        },
        {
          "alg": "SHA3-512",
          "content": "81a04c064e6bbe11c21569bb04b203ffbc469d72ec0ac5d79fbee0fdc65315b01ae0045986653852f60c2118e9b521c4c727ae6cda925161a0fe724265885f7c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.cloud.sql/postgres-socket-factory@1.28.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/GoogleCloudPlatform/cloud-sql-mysql-socket-factory/postgres-socket-factory",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/googleapis/java-shared-config/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/GoogleCloudPlatform/cloud-sql-mysql-socket-factory.git/postgres-socket-factory",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.cloud.sql/jdbc-socket-factory-core@1.28.3?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.cloud.sql",
      "name": "jdbc-socket-factory-core",
      "version": "1.28.3",
      "description": "Core library for establishing secure connections. End users should depend on the driver-specific socket factory artifacts.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "48bc954954b52342dee364635de30b84"
        },
        {
          "alg": "SHA-1",
          "content": "4fc190438fb6cfaccbb3e9575dcc89fb8c1c5915"
        },
        {
          "alg": "SHA-256",
          "content": "080a85fda0fde4ebebdf8ce3d221b753b169cd00da01ad83637d90e61353ab7f"
        },
        {
          "alg": "SHA-512",
          "content": "04a9f299c33648b35b77be463d00d3f6d27b61e9f8f020e782cdc55cff188ea4f620b66c1af5ec20b1764020f6d17ad0a15c19a759c9472baedff6faf22542a0"
        },
        {
          "alg": "SHA-384",
          "content": "023856fee9bac7aeac9f09adaab6740e2f02ab133ccc3df9f1d4a8c90a74548aedd51ff236a6374f6176c182ed028c4f"
        },
        {
          "alg": "SHA3-384",
          "content": "58a9cf6e80e5afd8017533989b9b18eeab641e5173d0762aad3fcd5b26c5ef99840835bcdd4f600cdda5a7013c746d65"
        },
        {
          "alg": "SHA3-256",
          "content": "549aa9c80ee944518cfaa5550b7b48215e9a1f7ffc34f17b7cfec5a4cf211409"
        },
        {
          "alg": "SHA3-512",
          "content": "e765459a1c86800dc457f1c87d5784bc8b206ca59ea959c93f161b5ceb95aa7cec0c6d877d610d16d9baf6fde4fcf103206364688cd07d51a0d0d200231e63e3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.cloud.sql/jdbc-socket-factory-core@1.28.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/GoogleCloudPlatform/cloud-sql-mysql-socket-factory/jdbc-socket-factory-core",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/googleapis/java-shared-config/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/GoogleCloudPlatform/cloud-sql-mysql-socket-factory.git/jdbc-socket-factory-core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jnr-enxio@0.32.20?type=jar",
      "group": "com.github.jnr",
      "name": "jnr-enxio",
      "version": "0.32.20",
      "description": "Native I/O access for java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "cb5113570f8674c401a3025784239528"
        },
        {
          "alg": "SHA-1",
          "content": "b2cec8e40691976e1e2686d92edefa7e060a7798"
        },
        {
          "alg": "SHA-256",
          "content": "8f3062892a5edf03922eaee282ba9ac69d6e3142ad036810a50b15919a85d8b8"
        },
        {
          "alg": "SHA-512",
          "content": "a15f42e4ce45ea4ac903e8e355e672bf0de1d539b510b2ac0ed952a7cd7b0f35c54495c4a8925ed2a4a44f754f105686361dd6d5d9887230d4eb886af90b8a2d"
        },
        {
          "alg": "SHA-384",
          "content": "7983451dcd76d6bcfd2a0307ff963aa87882ab20a308f0affa85a53ff9186fc0442bd279fc3027aaa621465e32e8ea61"
        },
        {
          "alg": "SHA3-384",
          "content": "62b00e6937e6d2497514d0d755ff49b36468c7a2a49451772a98c656ad4330665b03f351b5c81c21acea4cefa89c431e"
        },
        {
          "alg": "SHA3-256",
          "content": "7ac41d4747670bd1e9d670adafeafc0e7a24d409320a827d7d77c3bbdf64789e"
        },
        {
          "alg": "SHA3-512",
          "content": "2750b642fe87f11210e891f5905149349546d9a65adf4436ff58aba89cdddcbd5d1e8fc60e47cba584f19bdc42a531d4f5f73da370b776e035627307d90dd1d0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jnr-enxio@0.32.20?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/jnr/jnr-enxio",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jnr-constants@0.10.4?type=jar",
      "group": "com.github.jnr",
      "name": "jnr-constants",
      "version": "0.10.4",
      "description": "A set of platform constants (e.g. errno values)",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a5a4036fd334522540041b062b304abc"
        },
        {
          "alg": "SHA-1",
          "content": "09f6f23763bf40ea7b56391791f574174914430a"
        },
        {
          "alg": "SHA-256",
          "content": "9a5b8cf9798d9d0331b8d8966c5235a22c4307676e35803a24659e6d76096f78"
        },
        {
          "alg": "SHA-512",
          "content": "608b2c53914aeb3fb36e2fb81a948e5dbec835a9d220d50a4bb9693d4a534414d1bc4c5e5582b196793317fb64fe7617d78d5ec974e6413732940e141201fdba"
        },
        {
          "alg": "SHA-384",
          "content": "dfe87e3b585304854d0dd23d2d5b3a4f00ca47fc52e8e28c6c75f976cc12bbe627cdfcca5fccaf6cb3b2591cf70dee89"
        },
        {
          "alg": "SHA3-384",
          "content": "8d1bf7084c5f34d13fab9b9b77dd095f43f105a7722a0d95fcc4e050e41f608f426914c3ff63573da053a9188e7f30bc"
        },
        {
          "alg": "SHA3-256",
          "content": "842f986856d42bf3703b2b9b8a5db9c8cbd166fafb94d81739dc3ff9469b8ae0"
        },
        {
          "alg": "SHA3-512",
          "content": "b87d2ffb045ed6bcf0d1976933e8ec258132f43b705388c905805e27e6f3b547d212c4eed37dec53541eebf17669365fa88519e8436f22545e56f8fc4215eda6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jnr-constants@0.10.4?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/jnr/jnr-constants",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jnr-ffi@2.2.19?type=jar",
      "group": "com.github.jnr",
      "name": "jnr-ffi",
      "version": "2.2.19",
      "description": "A library for invoking native functions from java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "3f14d83a07419b92cf5a4474c2a9e080"
        },
        {
          "alg": "SHA-1",
          "content": "2b0e946924b7f63b5375840398bfaec50265626d"
        },
        {
          "alg": "SHA-256",
          "content": "0896484223ef8dede16ff08c97f000b4f29a40db18151ad8b9bd8c0b89b7c847"
        },
        {
          "alg": "SHA-512",
          "content": "650443269242324bfe8ba0adb33bd743448a3dfea3a1029e0c892c6405d6379ab7d3fd97a78156a2b1e097dd21c6219559e92d6bb3596247915ad0d7c4cb8448"
        },
        {
          "alg": "SHA-384",
          "content": "f9c827f2477bc2c5358c13893f315acd535e6d21fd2865587f35e1ad22c5ac5eac57bffd8fa710635054c90af0a8a0f5"
        },
        {
          "alg": "SHA3-384",
          "content": "6dbb707f0a8d67e40adceaaf44d2a7288c74623b655f064fe69129bc275ec105cb28d998125f8a0a90c8e19c27557493"
        },
        {
          "alg": "SHA3-256",
          "content": "36946349d7af6c6d2ef4e3847d293fa07a2efbbe68568675550cca0a0d6a07ab"
        },
        {
          "alg": "SHA3-512",
          "content": "a404d027b7da956cfe9ef300cf3339d523073df1dbf818cc6265d73b7c08438eeb150a2d34232d0662314bbe1a3ca35509a314dd41e6add844cb58042bae3e9e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jnr-ffi@2.2.19?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/jnr/jnr-ffi",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jffi@1.3.15?type=jar",
      "group": "com.github.jnr",
      "name": "jffi",
      "version": "1.3.15",
      "description": "Java Foreign Function Interface",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "661a5bc9ace0463ca2125c357cb2def7"
        },
        {
          "alg": "SHA-1",
          "content": "4d5016e7a6042b8b01ec4e55803ef79f684b217e"
        },
        {
          "alg": "SHA-256",
          "content": "ed247e2325586ae036532a46f130811d0af73a0b494c8303fc30ead7d653ca86"
        },
        {
          "alg": "SHA-512",
          "content": "e49b61931371213cf1b30daa1c9ed47c6ab12cce81d248fccbb0fbbedcdf73f626b322cea647510bee1bcd5e0d4cfdc06c78147d424f2a2ef7fe3d6d86183139"
        },
        {
          "alg": "SHA-384",
          "content": "9a91c8e76c5c3d00bd6694f29031534928800e5ed233eef748e540c074067c82c26c01f5a68b73d29c8438a09860799e"
        },
        {
          "alg": "SHA3-384",
          "content": "8d8359c05c08cabff8ce0e6c2b5e555d5172974134500be984531c54df20c58f54d4c67920f52c1aa7ed7fa0d1f463c4"
        },
        {
          "alg": "SHA3-256",
          "content": "966ad023c42aa93fb0716b2f2d0c11665327bb79543264afb4d98a5987cc26c8"
        },
        {
          "alg": "SHA3-512",
          "content": "7f0c6a3e4a00c248731f26d81eed30d88ffe37cf0a4827cf87944736c13f05903903bb7260c70fae46ce80e07e243a92f2378485049b4ba4c02534a84283dbb7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "name": "GNU Lesser General Public License version 3",
            "url": "https://www.gnu.org/licenses/lgpl-3.0.txt"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jffi@1.3.15?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/jnr/jffi",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jffi@1.3.15?classifier=native\u0026type=jar",
      "group": "com.github.jnr",
      "name": "jffi",
      "version": "1.3.15",
      "description": "Java Foreign Function Interface",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5e070ba8b9ee448e4effbddc53bca984"
        },
        {
          "alg": "SHA-1",
          "content": "561b84cb4e96bb8d21b35a3a5bae725ad88d4b1b"
        },
        {
          "alg": "SHA-256",
          "content": "dd54a800877593cfd033d6bdae1b67ebb9b5ca38f9e9b4ae7ea080375371e41a"
        },
        {
          "alg": "SHA-512",
          "content": "f230e39d8c239858821df194ddb0c9c159e39475ee8c6ebeb81dc72f162729c4e3a2d4ff277905dd82a494cbfdadc3ff7cf3f69be1e898b0f1fa4bb848fd1f43"
        },
        {
          "alg": "SHA-384",
          "content": "ab5d732df66611a3697a2a9c3d6359d21ccaeb2616e5216ec4a1ba905a921425d59ba9b5a5268f2bc404e877b6455220"
        },
        {
          "alg": "SHA3-384",
          "content": "028a768f557931875833c4d125ec35a1f9db4ddc82fad41905494ef00d60b13fe3d9bf2a431948dfe296e455bff820cf"
        },
        {
          "alg": "SHA3-256",
          "content": "4b77d991ef1a3ac77397bc0c129ec321d894d00c5480d7cce5d3865e047cffcf"
        },
        {
          "alg": "SHA3-512",
          "content": "6673f10f0e8592f2bf90e1ced2df086a51adafdab57e50c13abd1f6bf504ae6b58cf3c13e78d26922352fac2e2758b465a9e4590a7ef1ed6e921f86d9750e3d3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "name": "GNU Lesser General Public License version 3",
            "url": "https://www.gnu.org/licenses/lgpl-3.0.txt"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jffi@1.3.15?classifier=native\u0026type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/jnr/jffi",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.ow2.asm/asm-commons@9.7.1?type=jar",
      "publisher": "OW2",
      "group": "org.ow2.asm",
      "name": "asm-commons",
      "version": "9.7.1",
      "description": "Usefull class adapters based on ASM, a very small and fast Java bytecode manipulation framework",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8344aea3c8b7d707e9d35a62710e77c9"
        },
        {
          "alg": "SHA-1",
          "content": "406c6a2225cfe1819f102a161e54cc16a5c24f75"
        },
        {
          "alg": "SHA-256",
          "content": "9a579b54d292ad9be171d4313fd4739c635592c2b5ac3a459bbd1049cddec6a0"
        },
        {
          "alg": "SHA-512",
          "content": "81daf5765e387e6aeec5d45c4b9e4e1b471fb4f350931e5a214845c7c657a2142768f6902765e49c0ce2c595962e5d008883cba2e4a40c4bdce8f2e92518d2db"
        },
        {
          "alg": "SHA-384",
          "content": "473ba9b72bd47d2000d127dababdd649fd7738d658cd5b818266cd978e8d3bb2589e431a52bfaa7fb8a03d2345a529f2"
        },
        {
          "alg": "SHA3-384",
          "content": "1a792b9567115e97b81242325de41d3757e8b11dc5c38b4f6b8c9aa34ef8a33b5ef9a7401c725574ee4c36ebb5c0f46a"
        },
        {
          "alg": "SHA3-256",
          "content": "2974918408bf8791d133c96cee74e86f4fa9659faa1faaf886eed3c586b7c717"
        },
        {
          "alg": "SHA3-512",
          "content": "21c2635f5cdee961ea6aedee78589603b0ff1d56ee295d4548e882abe4485a5818a82848a99851592de5a8d09e4c74e406fc0bea9f23e250e58e0e31986845af"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.ow2.asm/asm-commons@9.7.1?type=jar",
      "externalReferences": [
        {
          "url": "http://asm.ow2.io/",
          "type": "website"
        },
        {
          "url": "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail.ow2.org/wws/arc/asm/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.ow2.asm/asm-analysis@9.7.1?type=jar",
      "publisher": "OW2",
      "group": "org.ow2.asm",
      "name": "asm-analysis",
      "version": "9.7.1",
      "description": "Static code analysis API of ASM, a very small and fast Java bytecode manipulation framework",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4cd9e7178dfb85371bba3077e40cd514"
        },
        {
          "alg": "SHA-1",
          "content": "f97a3b319f0ed6a8cd944dc79060d3912a28985f"
        },
        {
          "alg": "SHA-256",
          "content": "85b29371884ba31bb76edf22323c2c24e172c3267a67152eba3d1ccc2e041ef2"
        },
        {
          "alg": "SHA-512",
          "content": "a8bd265c81d9bb4371cafd3f5d18f96ad79aec65031457d518c54599144d199d9feddf13b8dc822b2598b8b504a88edbd81d1f2c52991a70a6b343d8f5bb6fe5"
        },
        {
          "alg": "SHA-384",
          "content": "31620bb948127b811684769f966990170ced469f4b15f30bf22a7a0d28c7da644027cf7c9ffd10f80fcc4cdf377909d8"
        },
        {
          "alg": "SHA3-384",
          "content": "fe5920760dfcbe5dda26d7839ba9ad621a8d2b139994e0d2107873512651cfffdb73e85e635dbad0f9db7cfee55420d3"
        },
        {
          "alg": "SHA3-256",
          "content": "3fe7b153bea627308dbfb2ce682a3c10646a06eee5d34a13acd76e60a7cda240"
        },
        {
          "alg": "SHA3-512",
          "content": "1acd097141b321e440561a9ef759b5b5ab125b42ae02e5806fd026978727740124a483f608db230563fde701161e51f8548a662e29ba12d97ba3d24949b4c821"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.ow2.asm/asm-analysis@9.7.1?type=jar",
      "externalReferences": [
        {
          "url": "http://asm.ow2.io/",
          "type": "website"
        },
        {
          "url": "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail.ow2.org/wws/arc/asm/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.ow2.asm/asm-tree@9.7.1?type=jar",
      "publisher": "OW2",
      "group": "org.ow2.asm",
      "name": "asm-tree",
      "version": "9.7.1",
      "description": "Tree API of ASM, a very small and fast Java bytecode manipulation framework",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e85029f613b6469989cc7cf53fe06b74"
        },
        {
          "alg": "SHA-1",
          "content": "3a53139787663b139de76b627fca0084ab60d32c"
        },
        {
          "alg": "SHA-256",
          "content": "9929881f59eb6b840e86d54570c77b59ce721d104e6dfd7a40978991c2d3b41f"
        },
        {
          "alg": "SHA-512",
          "content": "e55008c392fdd35e95d3404766b12dd4b46e13d5c362fcd0ab42a65751a82737eaf0ebc857691d1916190d34407adfde4437615d69c278785416fd911e00978d"
        },
        {
          "alg": "SHA-384",
          "content": "4363d7d075700cbe6161bf86a0ff1b0e732fe96963010f1fc66f7701e8139673cc4fba81ae2937d25e0a5032368b0d5a"
        },
        {
          "alg": "SHA3-384",
          "content": "d22a3eeb20ee739bfbf3535655e7d25e3b3910f13ac86d9e4c29b4e0b19efd53ab65c1d843bbc0e289a8744d27e09453"
        },
        {
          "alg": "SHA3-256",
          "content": "9d57ddbdd10cda7f9bc45bc0bcb54143f7ea1b802540cf3029ab7e31dfc59df7"
        },
        {
          "alg": "SHA3-512",
          "content": "1352a6d8caca6649bc7e1c8e209a1e3864ac8eac8d6af2f11e2701eab5304a4cff41355828ed0c69adc8fc3b8d639d607bec574834e8e3185a3e3f81199e756a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.ow2.asm/asm-tree@9.7.1?type=jar",
      "externalReferences": [
        {
          "url": "http://asm.ow2.io/",
          "type": "website"
        },
        {
          "url": "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail.ow2.org/wws/arc/asm/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.ow2.asm/asm-util@9.7.1?type=jar",
      "publisher": "OW2",
      "group": "org.ow2.asm",
      "name": "asm-util",
      "version": "9.7.1",
      "description": "Utilities for ASM, a very small and fast Java bytecode manipulation framework",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "36d373a9cd6cad9b35db9f984c6b4bbb"
        },
        {
          "alg": "SHA-1",
          "content": "9e23359b598ec6b74b23e53110dd5c577adf2243"
        },
        {
          "alg": "SHA-256",
          "content": "f885be71b5c90556f5f1ad1c4f9276b29b96057c497d46666fe4ddbec3cb43c6"
        },
        {
          "alg": "SHA-512",
          "content": "522d793d15a2c5ea6504a50222cf0750f1eab7b881cf289675042539b1aba8b3868197b1bebe729de728dd10020eb028ae16252dcd5d84fdcbf7f925832bc269"
        },
        {
          "alg": "SHA-384",
          "content": "c073e7d64d5891d024860f638c3ee901aca60637b820ad05f9be7d33b4f4ad99fc448173dd9cb0b1cd0032485e813b24"
        },
        {
          "alg": "SHA3-384",
          "content": "2300d5572d929e6f20a7569dceb05bd9930b6ca18bcf11f648e37f28d00e78883f632ff60f4c4f9997aaa3d560a9450b"
        },
        {
          "alg": "SHA3-256",
          "content": "f5b3d45b832550fc3d1a675fdc4531a32eb8688db37b7102f0d544635f967ed2"
        },
        {
          "alg": "SHA3-512",
          "content": "ae097429b38febbc39a91d9697b6f709a49aad2fbc032ae2222e8f11c2907ef1a526afc4ee38d4dee46c09a7196f4f676f5704461dd3a0fe1e606bc9e3ef970a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.ow2.asm/asm-util@9.7.1?type=jar",
      "externalReferences": [
        {
          "url": "http://asm.ow2.io/",
          "type": "website"
        },
        {
          "url": "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail.ow2.org/wws/arc/asm/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jnr-a64asm@1.0.0?type=jar",
      "group": "com.github.jnr",
      "name": "jnr-a64asm",
      "version": "1.0.0",
      "description": "A pure-java A64 assembler",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6cb469cbbcf9eca78d50f7da595a8337"
        },
        {
          "alg": "SHA-1",
          "content": "0a1cb8dbe71b5a6a0288043c3ba3ca64545be165"
        },
        {
          "alg": "SHA-256",
          "content": "53ae5ea7fa5c284e8279aa348e7b9de4548b0cae10bfd058fa217c791875e4cf"
        },
        {
          "alg": "SHA-512",
          "content": "922bdf2883c6a9cd6491289020d404ab151fd9ffa78d2ec884a2ac3af739d397016f1f4596c3e6c58744ea600fdbc2d330c8f520a1a9ab0eef6af6b667b35b89"
        },
        {
          "alg": "SHA-384",
          "content": "933298b61960f09eccb672a0622a93a721d06cf85cdb29500ff6efdf874bad7b08aede29b6cf3b51141c16b38b250be2"
        },
        {
          "alg": "SHA3-384",
          "content": "2a7231c649f4805d34eb19c7e6b6dbb5ecdb663e29ef69a4523e2f7d2ae70740ca3aa03eba3476960d0fe344ea45df2d"
        },
        {
          "alg": "SHA3-256",
          "content": "fc270fd94a4e2b4fb1a9e4dd42ff4600c94e226ef3431aee998a915b62eb19ae"
        },
        {
          "alg": "SHA3-512",
          "content": "8ee64fec1b5e93ff9c2b596c0345ef120479217bea95d669c6e17f338a45945545b546813af2f58920a6bb2d607bd004870d10c8660a516261288d9f555fc850"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jnr-a64asm@1.0.0?type=jar",
      "externalReferences": [
        {
          "url": "http://nexus.sonatype.org/oss-repository-hosting.html/jnr-a64asm",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jnr-x86asm@1.0.2?type=jar",
      "group": "com.github.jnr",
      "name": "jnr-x86asm",
      "version": "1.0.2",
      "description": "A pure-java X86 and X86_64 assembler",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "00670735acb2a9d1421b506dc7d338bc"
        },
        {
          "alg": "SHA-1",
          "content": "006936bbd6c5b235665d87bd450f5e13b52d4b48"
        },
        {
          "alg": "SHA-256",
          "content": "39f3675b910e6e9b93825f8284bec9f4ad3044cd20a6f7c8ff9e2f8695ebf21e"
        },
        {
          "alg": "SHA-512",
          "content": "e928926b01ce545144c1bbf160edee9b923773e32f9a399a71c2ab5e8325d9cbcfb41f41c8f008b80d1beab8da1c4b74845996479c07ed73bc131959911d4762"
        },
        {
          "alg": "SHA-384",
          "content": "91839815885716f1202a824b195a475d4d7561690192b42cf05b8c6432556a3e7e2dab13b6e970986a97711fb7060844"
        },
        {
          "alg": "SHA3-384",
          "content": "ed27f9b39907e92805c2d6ae6a045e00e24f51544501df3b98b593177df4fe55fee2347c668df66c2ea6fae64c66ee0c"
        },
        {
          "alg": "SHA3-256",
          "content": "f2e4e4807f6674a5b428cebdbdd01e8cadbeee71b785a046bec2bec1de63a41b"
        },
        {
          "alg": "SHA3-512",
          "content": "0dfffcf0daac9513b347ab8bf22887360feea890428e12857d7d3400400ba498fdc61307d9fd9c6a5e1baa9a96279afc07bba08c6229ed4ede71569d710fd0f6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jnr-x86asm@1.0.2?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/jnr/jnr-x86asm",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jnr-unixsocket@0.38.25?type=jar",
      "group": "com.github.jnr",
      "name": "jnr-unixsocket",
      "version": "0.38.25",
      "description": "UNIX socket channels for java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6128f5bfe53ea584f3f90ddc00572273"
        },
        {
          "alg": "SHA-1",
          "content": "e8e0a87d80789510109337d6b66df7d8f90dfbee"
        },
        {
          "alg": "SHA-256",
          "content": "9961504058668059d7fbfcc050252afd99901604c4c954bfe7c1325be06a34c0"
        },
        {
          "alg": "SHA-512",
          "content": "6be26fa405fdf161b4a999899c7f1d926628059d0af310531b6d093e27233dba8b310b3dd0a5828a722b0a89f637820d71c1f257aba528e314f63062e63558d5"
        },
        {
          "alg": "SHA-384",
          "content": "b36b8d31ca8157b374b93ef17365c137283aa8871c2168c7dca1019dfc120f0074f610171abeb7ce3b4d5a2f6a3370ad"
        },
        {
          "alg": "SHA3-384",
          "content": "561ac4ec50fa1a2a2c8732c7e1c42c370bff3efdb200f29c67c354f060d250162c5118b4f03985700dd22889b7ef4b01"
        },
        {
          "alg": "SHA3-256",
          "content": "383bd00ba498176a5a2281f6be887858bf5a6a718dc9aad37e6429aae0c5840b"
        },
        {
          "alg": "SHA3-512",
          "content": "8ec7eaf87ee1857e57d92b17146bdeeea464e3265c4ffb99a270a1d5ea855adad201ea8ec6c8971d1638116df7ed179fe68bd9f4bb0fce4ddcdc4b130ff17a9f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jnr-unixsocket@0.38.25?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/jnr/jnr-unixsocket",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jnr-posix@3.1.22?type=jar",
      "group": "com.github.jnr",
      "name": "jnr-posix",
      "version": "3.1.22",
      "description": "Common cross-project/cross-platform POSIX APIs",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2afdc7365d26adf44fc0bb96feeadc24"
        },
        {
          "alg": "SHA-1",
          "content": "f11ed8edba66935b0ddb76c2caa0e57d2653ddeb"
        },
        {
          "alg": "SHA-256",
          "content": "392645f602af36cd38ff0542838125e7ce39e577d09d911991f7834e7d56d8ff"
        },
        {
          "alg": "SHA-512",
          "content": "af8e8d5b385dfcaba27afafa0c0d2f4b88b80b638f47f2ed37e52550061be7925d47fbe22c95bda185127810afe50d06c379653db8120c865c7feb75ffe3309c"
        },
        {
          "alg": "SHA-384",
          "content": "ced641298c07ffd7b55bbcc45f9d4012935c65aa3185017604983a4fb1d1ad664f8cf16271271fdc838205270e56839e"
        },
        {
          "alg": "SHA3-384",
          "content": "398f2f09a6dee392b6e28a648f27e91eba786fbc7e98e29c9ab3c1fb15f03a0e63c4e5aad5f4c2ab37be4098ab7bef02"
        },
        {
          "alg": "SHA3-256",
          "content": "741556840e7bdadbbf9cd747b882ab98b4d1aa875eb3a7ecb8cbb213dd3b5f60"
        },
        {
          "alg": "SHA3-512",
          "content": "fc14db60dd4cbe7fa0bf007abc77294f12b5a0041ee678713aaeb7a78c20f6fc0099b23cad5661802be694ee2eed0c54ae7d49f2741eda51350c672d6a9734b6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "name": "GNU General Public License Version 2",
            "url": "http://www.gnu.org/copyleft/gpl.html"
          }
        },
        {
          "license": {
            "name": "GNU Lesser General Public License Version 2.1",
            "url": "http://www.gnu.org/licenses/lgpl.html"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jnr-posix@3.1.22?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/jnr/jnr-posix",
          "type": "website"
        },
        {
          "url": "http://github.com/jnr/jnr-posix/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.http-client/google-http-client@2.1.0?type=jar",
      "publisher": "Google",
      "group": "com.google.http-client",
      "name": "google-http-client",
      "version": "2.1.0",
      "description": "Google HTTP Client Library for Java. Functionality that works on all supported Java platforms, including Java 7 (or higher) desktop (SE) and web (EE), Android, and Google App Engine.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "7217e647aa20c034bc81e2a3341b2434"
        },
        {
          "alg": "SHA-1",
          "content": "f4c08fa160a5199af19f81080fbaa921ae2193c7"
        },
        {
          "alg": "SHA-256",
          "content": "20aa0948f6ceb5cfa9b2b3adddd9b7e990ab40230e084081642cbb81235d3eef"
        },
        {
          "alg": "SHA-512",
          "content": "0eb1d146ccd4abaff14178e1d3628d4df4e946caa9fd0f0b78ccf308b8fa56b653ff32de9b77227abe3def63587140917067110868f0bdf67ba11447560547ba"
        },
        {
          "alg": "SHA-384",
          "content": "27668ee79c00120f325c82c7da35a2592487a862f99e30c64bf5221952ba9887a13838852666bb3b82de5535d600f9f1"
        },
        {
          "alg": "SHA3-384",
          "content": "7d28728d58a73cb89683b0389c8ed383a4f5b578076051ba6de441a6f64c1b619692bf1d51072b9b7e9c5e71b8959b96"
        },
        {
          "alg": "SHA3-256",
          "content": "3248473756643cb20f99dae47170411c2f38a529c4483c68a08feb3a34baef4d"
        },
        {
          "alg": "SHA3-512",
          "content": "1d6c79cfb2b92bc781c4c5d3fbec390f596293d862b687c309a3f7581f698ff778b0c040773cc6cb2e87c9723e01501bbb5a9081327736c5eca721939110a661"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.http-client/google-http-client@2.1.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-http-java-client/google-http-client",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/googleapis/google-http-java-client/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/google-http-java-client/google-http-client",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.grpc/grpc-context@1.70.0?type=jar",
      "group": "io.grpc",
      "name": "grpc-context",
      "version": "1.70.0",
      "description": "gRPC: Context",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b7e575dcff9de5208d81a29566a3d76a"
        },
        {
          "alg": "SHA-1",
          "content": "375570c198b9ff46f2202731d11271bb5cb396fa"
        },
        {
          "alg": "SHA-256",
          "content": "eb2824831c0ac03e741efda86b141aa863a481ebc4aaf5a5c1f13a481dbb40ff"
        },
        {
          "alg": "SHA-512",
          "content": "430cd53a07173fcfe8ac65d0b6f682a30eb7a50df9c33850a39dd2d48a159e63afec1e430471aeeb00c9c88e2354d4d5c456e451309ef5640c91a73def197fb7"
        },
        {
          "alg": "SHA-384",
          "content": "abf8b56a9d9848ec73c2567f1fca13bbb77e5c106b216a8112347b057caa2d9793804d6f1e1f235c9433fb7edd1c27a2"
        },
        {
          "alg": "SHA3-384",
          "content": "5c4c6b820f489296a340822b6891773e5d801d7e266f5ecde111b85c53be9e965094e80b98a396858c6fe2672688caf0"
        },
        {
          "alg": "SHA3-256",
          "content": "fa505119427ecd73239a401444f43654b5e7d2ed7c78a6bd7407b1d9f5cc3a58"
        },
        {
          "alg": "SHA3-512",
          "content": "56d7389a20562d264b1b759a7f0ff7057b3f832eee5a57eba65d4f2ba878fe7d1569b44ea22e42c9ae0abf5a79506a8dccffe5f51ce56563812d53442395e115"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.grpc/grpc-context@1.70.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/grpc/grpc-java",
          "type": "website"
        },
        {
          "url": "https://github.com/grpc/grpc-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.grpc/grpc-api@1.70.0?type=jar",
      "group": "io.grpc",
      "name": "grpc-api",
      "version": "1.70.0",
      "description": "gRPC: API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f4b23b6be4f2936c097e780cf6e8ef50"
        },
        {
          "alg": "SHA-1",
          "content": "c0d185f8435e2dbc9b0f430d1e89600858ee24ee"
        },
        {
          "alg": "SHA-256",
          "content": "45faf2ac1bf2791e8fdabce53684a86b62c99b84cba26fb13a5ba3f4abf80d6c"
        },
        {
          "alg": "SHA-512",
          "content": "011e0ce3870ade374954e5818f3a03ab22bd19fbbf171d2873bdf1ecdbdefae183a512043f9155aa120dce3e1c902680372b18c3dcf1bb64ae508ecfa7631677"
        },
        {
          "alg": "SHA-384",
          "content": "fd1b5f17eeeb4992c80f468e99d54d614ef0de8981d40d5a6e0e6801ce6d74844fb3e0769ba43b4e7507ae330e0c6312"
        },
        {
          "alg": "SHA3-384",
          "content": "6a74a79bef71b22bd1eb217c26ffa4a91fc571819f24af2b2fc6e2372b9289779c60ec98464c429c6bd91d50a8ff65b9"
        },
        {
          "alg": "SHA3-256",
          "content": "0a726d7583e90d3076f1d805850366c6bd2dc2bbe4d836d209247c50c062eedf"
        },
        {
          "alg": "SHA3-512",
          "content": "c47e25067c30a0a01dc0e92e0b5bf3c6c8fe0ed4738b85af6e261ccf62cecb66e7b537ba1493434dfd479633e6a3d72bb51b15868e96bdce3da5696d8b294878"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.grpc/grpc-api@1.70.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/grpc/grpc-java",
          "type": "website"
        },
        {
          "url": "https://github.com/grpc/grpc-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.opencensus/opencensus-api@0.31.1?type=jar",
      "group": "io.opencensus",
      "name": "opencensus-api",
      "version": "0.31.1",
      "description": "null",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a5e7092bb89baaaee424f5a7b20d1bad"
        },
        {
          "alg": "SHA-1",
          "content": "66a60c7201c2b8b20ce495f0295b32bb0ccbbc57"
        },
        {
          "alg": "SHA-256",
          "content": "f1474d47f4b6b001558ad27b952e35eda5cc7146788877fc52938c6eba24b382"
        },
        {
          "alg": "SHA-512",
          "content": "aac98ed2de298609bac9cb5a69ac16df0ca9c9fc82f429720ddcfdd769fdae96b707ed81c8d8c37380de846b302aacaac80156ef75567061aed3f77cc3c3b725"
        },
        {
          "alg": "SHA-384",
          "content": "d8dfdbc7d584809f00b5a4239cbaf575e8924a176e92a44230e8ac1e9dc85e458b63fad69b0b445d8d2e8c1a70e7633a"
        },
        {
          "alg": "SHA3-384",
          "content": "5cb3db9b30adb23c2b33ce0ded61a69e5347a4531d0563fc9185aba11aab7a639bf40286fc8d0f52a73c50add15775c7"
        },
        {
          "alg": "SHA3-256",
          "content": "733221e8a1dc4476c53fee92837757bfd468afe25f57bbce79d25c60f2e240f6"
        },
        {
          "alg": "SHA3-512",
          "content": "cdb61cef7324e1173f297867ec9274c6439779cdd674a442d26724de047258a64f3f76ad4e496f7afde785b5dbdf5d03f0b0f1d4424868cf14ebc1fd3b63dc76"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.opencensus/opencensus-api@0.31.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/census-instrumentation/opencensus-java",
          "type": "website"
        },
        {
          "url": "https://github.com/census-instrumentation/opencensus-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.opencensus/opencensus-contrib-http-util@0.31.1?type=jar",
      "group": "io.opencensus",
      "name": "opencensus-contrib-http-util",
      "version": "0.31.1",
      "description": "null",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9ecc9c428eb87dc734ae8d07b820ce26"
        },
        {
          "alg": "SHA-1",
          "content": "3c13fc5715231fadb16a9b74a44d9d59c460cfa8"
        },
        {
          "alg": "SHA-256",
          "content": "3ea995b55a4068be22989b70cc29a4d788c2d328d1d50613a7a9afd13fdd2d0a"
        },
        {
          "alg": "SHA-512",
          "content": "3192532e4989a26d9a69f4246ef994b35058d155e199b500196d14427d1b46b1515f872a36500cb84768524870297388c90272ffa61dc8448f6f7571c4f86b27"
        },
        {
          "alg": "SHA-384",
          "content": "46f9dcc71f71f33be99a00fdd9a2ba602eb547b56b6e8177660d3a44d3dd974609bf16d2a1b58359a0f39797cb3ee683"
        },
        {
          "alg": "SHA3-384",
          "content": "21d66f5efa2511de4e4b4f3ea18d37aeb954ea1b4315f1e11cd84a11a95e9bb9841addee4d1230c3813f06144a675a1c"
        },
        {
          "alg": "SHA3-256",
          "content": "8352c7dcd73fced7e49425d70f6955579f5c24fafd4529e5f5e54ef5a88a3c83"
        },
        {
          "alg": "SHA3-512",
          "content": "f8ec86e5728b9acbdaa684cbf385ab3834006e44363de43f9af4b50dca71d4e0d77d0d8b2e7bb97435581dda6572691b1d263835e4e97256999df550b9efc13b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.opencensus/opencensus-contrib-http-util@0.31.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/census-instrumentation/opencensus-java",
          "type": "website"
        },
        {
          "url": "https://github.com/census-instrumentation/opencensus-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.http-client/google-http-client-gson@2.1.0?type=jar",
      "publisher": "Google",
      "group": "com.google.http-client",
      "name": "google-http-client-gson",
      "version": "2.1.0",
      "description": "Google HTTP Client Library for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1416246dac1dae9f117f63c38ec6ce9c"
        },
        {
          "alg": "SHA-1",
          "content": "e65ea98fe4e8d3a512559698a0d8664908fd36f3"
        },
        {
          "alg": "SHA-256",
          "content": "3cf72c7b88375a34bf721c664f42edc8e096e2370e4126c9b8933c3c92e591f3"
        },
        {
          "alg": "SHA-512",
          "content": "16056abdea4d5accabf3e50aa572c485ea25dfca2dfe19e5258e87eef78121a5270eda3cd8c690bac9823dc8a89872de0e81fc9da62113707ec7df7f5ae88e5d"
        },
        {
          "alg": "SHA-384",
          "content": "1dc17d9a9faae3c38fdafba685600e00da33386150c5df126f450a360d26017940fcc5af2d8cb561b817195020bf1008"
        },
        {
          "alg": "SHA3-384",
          "content": "4f50fff2b447dc08918878ddc59a448383097c777fed59a0f12de85b07660faad6f5f1db0be72706806d73d162e2377d"
        },
        {
          "alg": "SHA3-256",
          "content": "23f4dbdc62afd307e7bb3354ba97a7ba614259441453fc2acdcf51f60e67d801"
        },
        {
          "alg": "SHA3-512",
          "content": "0b79e4f60953d3a8fb06c53016473c365fb019cf7c7a2a873a0ef94b2ff51c32f0b6b26044fcebc719bff7522fbeef28514d8fda568dc6d9a0a8b88362d97f3e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.http-client/google-http-client-gson@2.1.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-http-java-client/google-http-client-gson",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/googleapis/google-http-java-client/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/google-http-java-client/google-http-client-gson",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.api-client/google-api-client@2.9.0?type=jar",
      "publisher": "Google",
      "group": "com.google.api-client",
      "name": "google-api-client",
      "version": "2.9.0",
      "description": "The Google APIs Client Library for Java is a Java client library for accessing any HTTP-based API on the web",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ea5f238f3ad4f44eb2261e66a2dcfc9d"
        },
        {
          "alg": "SHA-1",
          "content": "d5729efe51f8d0d03314749079921ddf69507082"
        },
        {
          "alg": "SHA-256",
          "content": "461377a5c904e8e4e0091cd1b4752bc9ef58b7223d608886d9642436d4b21273"
        },
        {
          "alg": "SHA-512",
          "content": "f2071c5d1da4220d3ea1127802cb569ba5558cedc820f092d1db44a52a60bf444eb523a1593335a12f7dab5f9f1942b1d3f989850d6e35419b52ee28c9743b6e"
        },
        {
          "alg": "SHA-384",
          "content": "6b9cfcf0a7dd6fd93b5bb8d77457a7994144f971a4cd6c82e024b34879c0cc03d6a8e873e6f886be16604161204153f5"
        },
        {
          "alg": "SHA3-384",
          "content": "832023844ea373aa06b8a59ed71a77b5189c86ee8d6b2a8bff66bf9a19868475f39a8739210af63cca01c241d02a029c"
        },
        {
          "alg": "SHA3-256",
          "content": "1125d8a859a8dff49278597119cf238a26513c2c784ae5b83791d44aa0e77bda"
        },
        {
          "alg": "SHA3-512",
          "content": "5058fe8f99b63f9fe25e76d04be905f0c39910afc3e1dabaa3a75837455e2ba324d78270dffef52b15bbd2653e2ccaaf684479df512118092e0b56a5c8db0692"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.api-client/google-api-client@2.9.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-api-java-client/google-api-client",
          "type": "website"
        },
        {
          "url": "https://github.com/googleapis/google-api-java-client/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/google-api-java-client/google-api-client",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.http-client/google-http-client-apache-v2@2.0.0?type=jar",
      "publisher": "Google",
      "group": "com.google.http-client",
      "name": "google-http-client-apache-v2",
      "version": "2.0.0",
      "description": "Google HTTP Client Library for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2eea96e72c1d01d74e0f93c9b677519b"
        },
        {
          "alg": "SHA-1",
          "content": "9d7ec2f47541ac747bce141c0d04b07c01a9f820"
        },
        {
          "alg": "SHA-256",
          "content": "9dfeedb952d2f0351dabc3327c42d87431acba63ad15eee272282af56ec033ab"
        },
        {
          "alg": "SHA-512",
          "content": "a6c7f96546105edbeff39373eace61893f0c53a6efca1de071ee481ca0a2b8845c2c5fc7c0f8a24f9dd7a0a1e69e177ac00f28aefbf54aca29a681470a523a17"
        },
        {
          "alg": "SHA-384",
          "content": "c5e0867f05fa5961d761c57a0f2a799bb20b3544a35ff5192ed17e220c07e43fc5eba7a9758130c0976d48f854790bd0"
        },
        {
          "alg": "SHA3-384",
          "content": "08a2b32fa6656f17a65983de440a7789c904616371458f200a8bbf7e8b9dbabd5c8720e9d83a490247289d6759e89cb3"
        },
        {
          "alg": "SHA3-256",
          "content": "edd458343dec03285dcedf4a29f094678b9295085dba2b9c7ab13faa06e80c3c"
        },
        {
          "alg": "SHA3-512",
          "content": "cda69daafb9b6743c32b3a4e9c1267454c98d35102fb1534d4dd0d7b4f6ee28f89c2d8121ec00155d35324e73b9e22ad32e437072d49075187b7d79f2e95fdb4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.http-client/google-http-client-apache-v2@2.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-http-java-client/google-http-client-apache-v2",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/googleapis/google-http-java-client/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/google-http-java-client/google-http-client-apache-v2",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.apis/google-api-services-sqladmin@v1beta4-rev20260317-2.0.0?type=jar",
      "publisher": "Google",
      "group": "com.google.apis",
      "name": "google-api-services-sqladmin",
      "version": "v1beta4-rev20260317-2.0.0",
      "description": "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "11fcdc6922c3b79d6d7ebf53bf83ab0d"
        },
        {
          "alg": "SHA-1",
          "content": "745c8df5db2227bef7142c57461d0a8010b881b1"
        },
        {
          "alg": "SHA-256",
          "content": "59707a1559d7c6388907354e506e099993a8e775dd3bd9caaa9c1c8ea014d4b4"
        },
        {
          "alg": "SHA-512",
          "content": "7e7dea7d0e3ba996553b5e108a3e84d0c9a3aecfb1610a7b75a69efda616e6ec69028bcb0935025575021ab1c9eec8f2d53ce6b34dac5642389017032409f089"
        },
        {
          "alg": "SHA-384",
          "content": "310b74dcd5098435134218c3d02377625a975842f84b915b55cb09fd926fb0b8a04dfdab576613618128c3ee0bf1e6ea"
        },
        {
          "alg": "SHA3-384",
          "content": "a9b074155bf7f57af4cf00ed0afab5102ea0d0944e03305beb4f91d03e2ec7ce1b0b4ea509f41c733fa48526a9cfe37c"
        },
        {
          "alg": "SHA3-256",
          "content": "91f36d5925208a69e01d7aa52ec08bf39d674a66de6cb469acf8e12f420eef41"
        },
        {
          "alg": "SHA3-512",
          "content": "adebfb54ad7b84ea6f7c34d657623f5b07ec338d05083be85e830088b11e05f391c873618ff8334af0eecfecf4389c6cf0343429e9349853e1e1c2b653092233"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.apis/google-api-services-sqladmin@v1beta4-rev20260317-2.0.0?type=jar",
      "externalReferences": [
        {
          "url": "http://nexus.sonatype.org/oss-repository-hosting.html/google-api-services-sqladmin",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "http://svn.sonatype.org/spice/tags/oss-parent-7/google-api-services-sqladmin",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.auth/google-auth-library-credentials@1.46.0?type=jar",
      "publisher": "Google",
      "group": "com.google.auth",
      "name": "google-auth-library-credentials",
      "version": "1.46.0",
      "description": "Client libraries providing authentication and authorization to enable calling Google APIs.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5b7cf063a2df1d9939ed26c7ec02da77"
        },
        {
          "alg": "SHA-1",
          "content": "b4a034dd289c23fd37fa337f40e2617fc902669b"
        },
        {
          "alg": "SHA-256",
          "content": "6364caa01ce016378dadf81f2501866d065a5840763821644e1405baaa8d929e"
        },
        {
          "alg": "SHA-512",
          "content": "94c0d13dc036e2125249fdffba8bb20bb741092e79474beea5bae3a74896eec35b21703c27e1b2ec60804233e5c8e9650ea41fc447bbb5f6074cb17788a90951"
        },
        {
          "alg": "SHA-384",
          "content": "5ca28130a0010eca684cfea77566a502542359156cf150792e67405363d948b4cfa9ad7051d07eb1edf875dfdfcf3d2d"
        },
        {
          "alg": "SHA3-384",
          "content": "ff73bd51533eb5737ebdd42d89f309b0f36514acc1b9f96c69aa8e579ab5e408cd1fd4b8d5b0f6dde9b47e1b12f6fc80"
        },
        {
          "alg": "SHA3-256",
          "content": "583e5f46a6c1fece80a379517015bb716f6ea28804fac14d502061df482917c7"
        },
        {
          "alg": "SHA3-512",
          "content": "67789ebbbfa9a794dd73d32b41437e924d16d35719a29ff74d353985ffe7e78cd591d927040310c888db6215dbae84420567ffaafdaa1e8c2b99cf5926e13951"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.google.auth/google-auth-library-credentials@1.46.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-cloud-java/google-auth-library-credentials",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/googleapis/java-shared-config/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/google-cloud-java/google-auth-library-credentials",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.auth/google-auth-library-oauth2-http@1.46.0?type=jar",
      "publisher": "Google",
      "group": "com.google.auth",
      "name": "google-auth-library-oauth2-http",
      "version": "1.46.0",
      "description": "Client libraries providing authentication and authorization to enable calling Google APIs.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "bd0db7e3ba6e7858aa0d16cd559d2067"
        },
        {
          "alg": "SHA-1",
          "content": "afaa62d0ad2c6ba82c0dae4f2b791b0d43e2db51"
        },
        {
          "alg": "SHA-256",
          "content": "f9d24c965bc08d27ada083fdccb62b956cd19f852fc2b3520af863bbdfc8999c"
        },
        {
          "alg": "SHA-512",
          "content": "b451e3cba2d1659e5ab55a224e3e7717db58609c589da266ed848217f3726334699e9eac92d5ca19ef17dd47e36c87a3cfc69f6d3575dcac2f7033ee5c099342"
        },
        {
          "alg": "SHA-384",
          "content": "b55799fa2b0242abf6b654891d8c9513b2ac79c7faec37ff311b14e531233b979f503363f2da237a6496b196399effe6"
        },
        {
          "alg": "SHA3-384",
          "content": "bc6e30ad8f36f4cdcb2bfbbec1fe49b40240b424e5257afbe7c67a162d62ff3aec21ce12cead46158063a6ca0d838e74"
        },
        {
          "alg": "SHA3-256",
          "content": "f82995ecd00027ccccc1ee5e0578200e0e0913fd186d93d1b10a8690e25576b8"
        },
        {
          "alg": "SHA3-512",
          "content": "7c85a1a24119fa3817992e621231a9ffd8910038211394dd978484cc43f98847a09a92d484791ade3a4551c0ee8c06fa8c2bbce23f0aafc0548c2cc78313238e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.google.auth/google-auth-library-oauth2-http@1.46.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-cloud-java/google-auth-library-oauth2-http",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/googleapis/java-shared-config/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/google-cloud-java/google-auth-library-oauth2-http",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.api/api-common@2.53.0?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.api",
      "name": "api-common",
      "version": "2.53.0",
      "description": "Common utilities for Google APIs in Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9ee05b70e837dea0aa8cf25967c017f9"
        },
        {
          "alg": "SHA-1",
          "content": "96e6ff53548b176c5d046049dc8fb1c64546a96a"
        },
        {
          "alg": "SHA-256",
          "content": "f7073fb389c2aa329981ee65241db7947e8744c988e6c4d975f18bf2748b935a"
        },
        {
          "alg": "SHA-512",
          "content": "8651f8bf699c8e088b72b9e800c61871d0732f73e227aa9451b78a0049f5ba1a125e9026eb34a7b4400f976e463b2ba816e9f33d0023ceafe9eeaccb3addbee1"
        },
        {
          "alg": "SHA-384",
          "content": "afed7f9faae0ec5fcf50162a4a16f13cff7dfdca7b959e866b84cc714de708674cb26481164d34c91576c96e5b7abb95"
        },
        {
          "alg": "SHA3-384",
          "content": "8672cb69fac3cfb97168f85a173fd1fbbeb991e845a16f3396518c67f097f8b0835c47a64043c4e17f836c2563a07dba"
        },
        {
          "alg": "SHA3-256",
          "content": "f59d897bb46c3059d491000646b59ced385c642437641f12ed1cd0cb6bbfa4a4"
        },
        {
          "alg": "SHA3-512",
          "content": "1a5f6b534a5c65f52ca5472c9d1c9a1527d8b285abb0c1c0e5b5216459bc0cb2b8d87d991384e265b490ff375d920fe530a15b979d1c112ec4bb24abf69135fa"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.google.api/api-common@2.53.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/sdk-platform-java",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/googleapis/sdk-platform-java/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/sdk-platform-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar",
      "publisher": "GlassFish Community",
      "group": "javax.annotation",
      "name": "javax.annotation-api",
      "version": "1.3.2",
      "description": "Common Annotations for the JavaTM Platform API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2ab1973eefffaa2aeec47d50b9e40b9d"
        },
        {
          "alg": "SHA-1",
          "content": "934c04d3cfef185a8008e7bf34331b79730a9d43"
        },
        {
          "alg": "SHA-256",
          "content": "e04ba5195bcd555dc95650f7cc614d151e4bcd52d29a10b8aa2197f3ab89ab9b"
        },
        {
          "alg": "SHA-512",
          "content": "679cf44c3b9d635b43ed122a555d570292c3f0937c33871c40438a1a53e2058c80578694ec9466eac9e280e19bfb7a95b261594cc4c1161c85dc97df6235e553"
        },
        {
          "alg": "SHA-384",
          "content": "fc0058495e54efb6e05a34e3ff422e7c8347bcc77d6d9b87e9253424968dee6ef6a215c318d7e54f8705276be81f0682"
        },
        {
          "alg": "SHA3-384",
          "content": "ed6464b715de6ced0d9981a3f28140824946a4b7a02ffaff6116c833bb36e8f77a6282ce63c0d82cfe841d4fd6916891"
        },
        {
          "alg": "SHA3-256",
          "content": "ecfc9bef24ae28cf94c6775ecf6e2086d90a25d8d5476a4f6bb24001601b6cd0"
        },
        {
          "alg": "SHA3-512",
          "content": "f2b333527faedf504f60aa70a3d491972fa76f7e61e6351027f74613f41001157656824fe312b6e1df6dc4979704fe2a745b618d5368a97fe0bf8749739de9e2"
        }
      ],
      "licenses": [
        {
          "expression": "(CDDL-1.0 OR GPL-2.0-with-classpath-exception)"
        }
      ],
      "purl": "pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar",
      "externalReferences": [
        {
          "url": "http://jcp.org/en/jsr/detail?id=250",
          "type": "website"
        },
        {
          "url": "https://maven.java.net/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/javaee/javax.annotation/issues",
          "type": "issue-tracker"
        },
        {
          "url": "javaee-spec@javaee.groups.io",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/javaee/javax.annotation",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.oauth-client/google-oauth-client@1.39.0?type=jar",
      "publisher": "Google",
      "group": "com.google.oauth-client",
      "name": "google-oauth-client",
      "version": "1.39.0",
      "description": "Google OAuth Client Library for Java. Functionality that works on all supported Java platforms, including Java 7 (or higher) desktop (SE) and web (EE), Android, and Google App Engine.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "cf4992aee304401b66f6d03e654ab981"
        },
        {
          "alg": "SHA-1",
          "content": "99f02f3c46c68c01dfc95878456b009a13229c88"
        },
        {
          "alg": "SHA-256",
          "content": "27fc61ee2d526e33d31350b5ea383091c0879345e261f9b2e6fcc97a20c86f88"
        },
        {
          "alg": "SHA-512",
          "content": "f8973ab9ddda79746cc4e5d6c156e571604304627db7ebc2a570f56679cdeeddad86ce8e36a8acb7593a215c9a55cd8b8f86d85d9bec67b71c15b27eb1af45fd"
        },
        {
          "alg": "SHA-384",
          "content": "a3ef0821a2964960487e39747c2a69ec2030ac04e0fd1bae025c5c71036ffa6dc8a1c99effb7c5a63fe9ce81b742e9d0"
        },
        {
          "alg": "SHA3-384",
          "content": "c3c37f7e6c0f7d107c8e52546c8ec9e4f726308dfb065e9cdd8265904ca1a06d401b29fa6b84d3df67c420b8604b6330"
        },
        {
          "alg": "SHA3-256",
          "content": "44c05e415db8bdfef87fb2207b5d4d02c115aa661b334cf26ef9b97be29d019e"
        },
        {
          "alg": "SHA3-512",
          "content": "abd5c4d3fe3a17103f09c70f6adaf130b59690d8639fd771ed03588451bd061c3d38782dd178ff1999806942a950b584d016b77a4bab0fa28e66b64052e08d60"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.oauth-client/google-oauth-client@1.39.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-oauth-java-client/google-oauth-client",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/googleapis/google-oauth-java-client/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/google-oauth-java-client/google-oauth-client",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/dnsjava/dnsjava@3.6.4?type=jar",
      "publisher": "dnsjava.org",
      "group": "dnsjava",
      "name": "dnsjava",
      "version": "3.6.4",
      "description": "dnsjava is an implementation of DNS in Java. It supports all defined record types (including the DNSSEC types), and unknown types. It can be used for queries, zone transfers, and dynamic updates. It includes a cache which can be used by clients, and a minimal implementation of a server. It supports TSIG authenticated messages, partial DNSSEC verification, and EDNS0.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "fedfa4856a051e3616b78ed7c146b1e3"
        },
        {
          "alg": "SHA-1",
          "content": "27b921d4fe745d2dcaf7185ac261b06d4a39e35b"
        },
        {
          "alg": "SHA-256",
          "content": "39d50d2b5bdee1161978bf85a1b01e95fee490e92bbe98d76d3ceb9642183570"
        },
        {
          "alg": "SHA-512",
          "content": "6a60c2dec294ba289f00afb5d919e90abea72f79067e4934bee164392f2200b292c3f004f6171ce87a7e869295c6b1a6a7e4a9880bdb1728d7661f18863f9ec8"
        },
        {
          "alg": "SHA-384",
          "content": "5bcc35e7c584ebb877fc4deb5897246f00ba4f32251555052a923ac1b555dc128e13d0a6165001b130ac7e83f678930c"
        },
        {
          "alg": "SHA3-384",
          "content": "dd26275406e2ee9a5d5fb02b252316b4ee8aebdd5567880097437c01445d489e4f01d4b0fbedf0f0f053256554175ba3"
        },
        {
          "alg": "SHA3-256",
          "content": "dec33c58965d9366771ad71c817a545838939ebe3fd3384fff95b5e6409d16d5"
        },
        {
          "alg": "SHA3-512",
          "content": "493ff36f6992cce2a78e8dc992592af45358f3acc10a1cafde2c6a1e1ab9cb824a338e949cf1a5be6524c401d625d3b253b6ee4494b87c1f7fcac01e9bbf74cb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/dnsjava/dnsjava@3.6.4?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/dnsjava/dnsjava",
          "type": "website"
        },
        {
          "url": "https://github.com/dnsjava/dnsjava",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.api/gax@2.79.0?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.api",
      "name": "gax",
      "version": "2.79.0",
      "description": "Google Api eXtensions for Java (Core)",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "82a44857a04c4794db48fe077efd0c57"
        },
        {
          "alg": "SHA-1",
          "content": "ae533be5c421a718e73fa5a7f04909f8036ac729"
        },
        {
          "alg": "SHA-256",
          "content": "05cc74a70456dcf20ae4484c444212d0f47d59b67fe2b3c6df9a79fad657d7fc"
        },
        {
          "alg": "SHA-512",
          "content": "b179a029b92b905e26a74b8f8012de44acc7828f61a2dcb4483e090561d102071c4c2e7d1f4c7b62d5efd81d0f5b8f0b54ba49d608807b02481268e71bba1f6a"
        },
        {
          "alg": "SHA-384",
          "content": "4d84ed6b16922d78d77bf480f4953909eb28e88caeef47a2ada2ae6f33d66dc2c90e622cd447476b172e2f9237b89bf4"
        },
        {
          "alg": "SHA3-384",
          "content": "24ee3ae26b78796b26fd2c049ed7ac966d21c5ea3beb90c2d4f3be92356ca2f2057dbb00f8ac0663a408ca58a7c40ad8"
        },
        {
          "alg": "SHA3-256",
          "content": "3db46f95dc14e6161d976fe34eb0d8028cf356937353a5e7d4120858deb88a1b"
        },
        {
          "alg": "SHA3-512",
          "content": "e9b5091f2f685f2a6516b34811348908425a9796d359ed3a07c8da14f65d8a3cd0c917126ff86750ddcdfa5633a7bb951ab2ebc1cb6440ccd4a33a102ea685f4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.google.api/gax@2.79.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/sdk-platform-java",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/googleapis/sdk-platform-java/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/sdk-platform-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.commons",
      "name": "commons-compress",
      "version": "1.28.0",
      "description": "Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f33efe616d561f8281ef7bf9f2576ad0"
        },
        {
          "alg": "SHA-1",
          "content": "e482f2c7a88dac3c497e96aa420b6a769f59c8d7"
        },
        {
          "alg": "SHA-256",
          "content": "e1522945218456f3649a39bc4afd70ce4bd466221519dba7d378f2141a4642ca"
        },
        {
          "alg": "SHA-512",
          "content": "f1f140f4f40ab3cf3265919db9dbb95a631a29aa784e305f291de4e68876bb711d9217d62d7937cddddd393982decdf71a608b4b3ab7f4e6375cf28af2893d7f"
        },
        {
          "alg": "SHA-384",
          "content": "afe6a8fc8e7486c4ecce95276bb1467763d7ff7d941c7bcff8661bbbd4bff442fd0899ff7a11bc540cda86818ee4a8f0"
        },
        {
          "alg": "SHA3-384",
          "content": "6afb636ad0805e522913cfd91c8293c485b7f4eff5e45dd3a17a716c3f4b8ab8969e9c00927559a5fb762cba1fdb3d3f"
        },
        {
          "alg": "SHA3-256",
          "content": "4420e0b462b5dcc45077e95e012a82a5ae17659e5abe8a685fa086dab6995298"
        },
        {
          "alg": "SHA3-512",
          "content": "23e37d13c8ee6c7369e407c29d1f9ee1bb44eca9f09a6f9742f6b4cf3d38dd7a0509fe0142536cd8087b68a76e71d819105af2c23f2aeed08acc58eb93cf7e61"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar",
      "externalReferences": [
        {
          "url": "https://commons.apache.org/proper/commons-compress/",
          "type": "website"
        },
        {
          "url": "https://github.com/apache/commons-compress/actions",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/COMPRESS",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/commons-user/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitbox.apache.org/repos/asf?p=commons-compress.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-retry@2.4.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-retry",
      "version": "2.4.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0cdac2f0d96184c09dfe3e4f1705e963"
        },
        {
          "alg": "SHA-1",
          "content": "7072ed9351dc3a38a7c5a4a1ca21d3355e1f6453"
        },
        {
          "alg": "SHA-256",
          "content": "13cd52c89b69b9dbd68188877f16bdbeb3ae524d351a2d947f31ae07684c420a"
        },
        {
          "alg": "SHA-512",
          "content": "1e60cc69111eee4fe1d18d9c36e1baad62cc6ea06aa065cdce461fbd3cdc8c625f4ef818750def5b31469a80af2f8f52d4441aa946205b3203cafceed55655c0"
        },
        {
          "alg": "SHA-384",
          "content": "a1373917623fd647255c0c29533604d69d4f8395b8b7c50c95830447871d52d983df4a16a58990f9f7d6c242fdbb2903"
        },
        {
          "alg": "SHA3-384",
          "content": "b405c2ddefb6b78aa8d936c5c581e62cfdefc719c892da1625d82a624a6ac5afc60aa78251ccccbf056e8b6b4a4ce766"
        },
        {
          "alg": "SHA3-256",
          "content": "320682e81e53f54397c029244f5b1ee1b0cd589f88e57b00643e300c924f4623"
        },
        {
          "alg": "SHA3-512",
          "content": "9bc37b4a7fc968fc2c2f6f17b1083208b95a82aa5f826974a110cd9b057040071f02b850b32099f7657b20e36198da8eec5dd46e203a574338428d2f84d0845e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-retry@2.4.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-micrometer@2.4.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-micrometer",
      "version": "2.4.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b89d1f870641d912bbb350339b63bd94"
        },
        {
          "alg": "SHA-1",
          "content": "4d81d22237b84c5c075f805a0c7d4640bbd7ca33"
        },
        {
          "alg": "SHA-256",
          "content": "728613147bbbc0c329f69f5423b760778322e2f9af345cb0bd69b3fc89b17e88"
        },
        {
          "alg": "SHA-512",
          "content": "ec0f842b57a23b8536f9672c0c3eeb6831c9e9951be5862141ee029c6ff51994e9c3a046343ae985286acb3ab35766a770507fbaf35735aafc269fb28cf4fad4"
        },
        {
          "alg": "SHA-384",
          "content": "2187703d3e99f7f8b86f5d3280b3a247721752c38ef0dab42962729bf3ef6d88aff5eb34c6349e4b3f9e524d77ff1433"
        },
        {
          "alg": "SHA3-384",
          "content": "38f298fca66df6f9421b7cc92cfa13a537c49f57aa3651dd680684ca452fd764bc2e51e0d00b5774eb45b6126ebcf0da"
        },
        {
          "alg": "SHA3-256",
          "content": "2a57abc1c0ab88009c34b48f4135ce4e23974fc37deb33b99e4310cb8f0ff0a4"
        },
        {
          "alg": "SHA3-512",
          "content": "8b0f573a05168383121e9590c73c3263b43e9fc8f84b6813034baf07841d23661a965aa0abd348bc1c5b0166c9d3e50b896c8462b9d9381d60a7d1c08a10c9fe"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-micrometer@2.4.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.micrometer/micrometer-observation@1.16.5?type=jar",
      "group": "io.micrometer",
      "name": "micrometer-observation",
      "version": "1.16.5",
      "description": "Module containing Observation related code",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d4b4161bdbf3e4f0770f67fe11050f37"
        },
        {
          "alg": "SHA-1",
          "content": "9dff48a7a9dd84d9083e30a36855bb21a7d6836e"
        },
        {
          "alg": "SHA-256",
          "content": "4406f33535185ff896375e9a81a4b8694e28bf20c1089b24de0325d87f63dfe7"
        },
        {
          "alg": "SHA-512",
          "content": "7d9bb9f951a2434674f6e15bb14f538738679b4f74bf2459ee0b948a66d3744352ce32330f2c50898665314dc59aace193761654f7253f333b663179bb60df47"
        },
        {
          "alg": "SHA-384",
          "content": "dcfaf90f35dc2e53eb4b6abe63e5241245b365b0d9feba844f260b939dff556996486bd3e9b8b096d2c2628aca33800b"
        },
        {
          "alg": "SHA3-384",
          "content": "5a71f6b17a53b80448ec6e707664dc10894534456a307f8802397ca54200667010b20104de9704f9d79ea9ed89a65646"
        },
        {
          "alg": "SHA3-256",
          "content": "f32412cbdd25965394c0a46a0768c2ccbb6e3160c7d4db1c241571a1eba9700c"
        },
        {
          "alg": "SHA3-512",
          "content": "1c8318abbee580bb9cc2d4f9380db2567842ef2ecddef0b867b10c820cb443311c8e3fb69c0355f2da8d0546894d582a49207240b9028646d23ea4aef77dc93e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.micrometer/micrometer-observation@1.16.5?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/micrometer-metrics/micrometer",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-bulkhead@2.4.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-bulkhead",
      "version": "2.4.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "dfd76f43ef9c2d7912a99c128af344bb"
        },
        {
          "alg": "SHA-1",
          "content": "eb8ba5861207fcaec13468eab5a4dbe1d9e9e66f"
        },
        {
          "alg": "SHA-256",
          "content": "d718b601cedd94946c7572caafac1d93f5c9695bad61e0e4b6518e3f5f7c6ccc"
        },
        {
          "alg": "SHA-512",
          "content": "00b42a5110c37bcef4df56a807882f1d6919ceb9fc53e0daca2564258d7dafd299925f2f5ef9ac65c076c2757a934f48e88028f7bf839a956d44350ecfd4d28e"
        },
        {
          "alg": "SHA-384",
          "content": "03455782043e549dcb307f728281cfc8ecb4a8d6dd96d944db0d8cdb9bf80bed43cef1370b65f32e71dc52505a0803f1"
        },
        {
          "alg": "SHA3-384",
          "content": "af46a0541107931e8f5f7995d0f40f35914c66b8944f56417aff9605d29f888f571a1afcca1ea81f384eb747cd350e40"
        },
        {
          "alg": "SHA3-256",
          "content": "b00fd36b17bfb3db6b0ee095f9980af4829df095fdf326f78b0a26163a4d3916"
        },
        {
          "alg": "SHA3-512",
          "content": "de367c0a1d1bfe4c38333f8668567416adee1eba420e80c4524842180da9e2dc09579d4b2063edbab2da1e468f1fd093e42adfe174b0afa372cd33f421f9146c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-bulkhead@2.4.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-ratelimiter@2.4.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-ratelimiter",
      "version": "2.4.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6a450ca57c1c0172ffc32c2355d4885d"
        },
        {
          "alg": "SHA-1",
          "content": "4017079c1f73b0cc73fcc53a25306f3f8743e64c"
        },
        {
          "alg": "SHA-256",
          "content": "09a3c33cced3e1135cefda8667914b32b7304429c509b07fca771bd92d0c1780"
        },
        {
          "alg": "SHA-512",
          "content": "d50e1bcb0700963bfe2b4802301cdf2156a553f29caae07aa8192a44e0a2abac703fa190b1527a9aeae1412ae9215d701b494220ee3f3edfdeb9d3b3652f71ae"
        },
        {
          "alg": "SHA-384",
          "content": "6ee2786d1c40380381393adb6beef91b978bc9ba66647b16316ab448e3c97e2eb486521ebfdb965c5db6aae7c72e0fb6"
        },
        {
          "alg": "SHA3-384",
          "content": "189831d7d92301ca5f1211909d8787cb4a2fa6d9f267e3af9b0d9900dfe718ec75130d26110c21b34c59674e1f2720e4"
        },
        {
          "alg": "SHA3-256",
          "content": "8ac8f08bc4c21b1dcff1e8561364e5c7149523cdd658cecc426eb9fcfc4114d0"
        },
        {
          "alg": "SHA3-512",
          "content": "c078763d56a7190c102719fac6c012bd4c4d6e4e1b61c8201a8ed9909b4c7736c9d681163a0c46d99251ac1d2186d158ffd6539666bccf8b5ac759825dc2f755"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-ratelimiter@2.4.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-timelimiter@2.4.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-timelimiter",
      "version": "2.4.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2d421c59f3f87eaee243997f529cf5b4"
        },
        {
          "alg": "SHA-1",
          "content": "28351433fa75cccb0e0c8154676a427b5b4a3340"
        },
        {
          "alg": "SHA-256",
          "content": "946237017a5f52a878cfad8227c3eb6b957482be30d25a409cb8004e13237d38"
        },
        {
          "alg": "SHA-512",
          "content": "74e100e06388785058cd506459a0190bef879953dfd2ae2e3f16dcc83e76c5ecff62880d8ac7b96fcdf4087e863f4f3423b44290010a15a5b64c60808d2544f1"
        },
        {
          "alg": "SHA-384",
          "content": "586453333996b3d2b8150277eb41dbb7e2146b8e2a877e7cf8932cdddfe8a0e7c690335ba6e53e7051b0265a5016ecfa"
        },
        {
          "alg": "SHA3-384",
          "content": "b99c965e83e8f57bded1e66856b1278525947bea15c905dda5e13333ab9b82ebc5d0c27f14e6a8961ee32a0861995772"
        },
        {
          "alg": "SHA3-256",
          "content": "8709bedf51af90c9ee3c31b64fb893a199ef5defe54670507825b15551312737"
        },
        {
          "alg": "SHA3-512",
          "content": "865aa0e62b990fda80679824ae9ba32b631fe6cd72ea437201e0ce43bbae1b3a5c23fcdfe7454736822a7e6a38ba68456494f694775fc7b06a1077847357e988"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-timelimiter@2.4.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.slf4j/log4j-over-slf4j@2.0.18?type=jar",
      "publisher": "QOS.ch",
      "group": "org.slf4j",
      "name": "log4j-over-slf4j",
      "version": "2.0.18",
      "description": "Log4j implemented over SLF4J",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "98ec26919bc690052e2912dad2ee2abd"
        },
        {
          "alg": "SHA-1",
          "content": "9346cfcbbe1cd58c8f80ca04de4c709fba22052c"
        },
        {
          "alg": "SHA-256",
          "content": "d030643b4b3371ac79ce9a5bf2e4f82b65ee5621e2c0c6bbfb254d74c9a90df6"
        },
        {
          "alg": "SHA-512",
          "content": "1af189c18a92a946d3d0e657dc028afaa80bbc03d26fcda5b76c237edf30d2ab3b98f949706ed4751f369ad8334d2ecf8e199ca0f5173d35096bf764859e8021"
        },
        {
          "alg": "SHA-384",
          "content": "744a93867dd330e545ed505f383d87cc6ec3b928a7f99f69932a06a3e35d38d3ed094ad46970c8efe3ad19c8f8a1a1d5"
        },
        {
          "alg": "SHA3-384",
          "content": "d5a54ea78edabc28151f4b27b7c918030fa2964182684229547314acae1e8af5d70299bfd2fd9302e31a80a34ef5806d"
        },
        {
          "alg": "SHA3-256",
          "content": "e2ade27d9fa1565c7d9612eeebc127587bf9d257a159a23c0a42d7e3a568dd0b"
        },
        {
          "alg": "SHA3-512",
          "content": "8b25d1c720684f872afdd3318b452b0887ddc0f5d31a9290cba8414aef58a91ed8315db600a46d7502117e71fed0d6783cda2f783985051b6b8df68ade90e54d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.slf4j/log4j-over-slf4j@2.0.18?type=jar",
      "externalReferences": [
        {
          "url": "http://www.slf4j.org",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/qos-ch/slf4j/slf4j-parent/log4j-over-slf4j",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.21.3?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.dataformat",
      "name": "jackson-dataformat-yaml",
      "version": "2.21.3",
      "description": "Support for reading and writing YAML-encoded data via Jackson abstractions.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "cf0f62bbc7708e1e956ee88da2e9971b"
        },
        {
          "alg": "SHA-1",
          "content": "400fe3e019f87353512e1fec1c4cd61653456676"
        },
        {
          "alg": "SHA-256",
          "content": "f0aa297d46f9364af8b3617f8f16ee3d687bc11a8b20ea6266590a21e021c3a4"
        },
        {
          "alg": "SHA-512",
          "content": "7cabeadc6d1026f147c50c58747f8467705bfaba1b3f882d859dfe8d81ada2e1803613a8c15abf5d11db4b4877c1892f697d0e5ec957fa2857c8c8df4e418dc6"
        },
        {
          "alg": "SHA-384",
          "content": "5648576874e31ac219ddfe503a5774b9c318bd0f6a7d70e7f0fb0800f13813fa9a957e46258c7606530b4bbe91f8f6f3"
        },
        {
          "alg": "SHA3-384",
          "content": "11e3c1f4bd5c4c7bf4f85c558e17c94d7bf5384df997c884d697b5af1337244527d57f9911170441c72f66597b336b70"
        },
        {
          "alg": "SHA3-256",
          "content": "1f1195bfcaead393e794bfd258ab20fad46eefd3a57f9c0b7a9a2e6a43c7a6e9"
        },
        {
          "alg": "SHA3-512",
          "content": "ee039d7c901598aa0a0202a808ceae2f9563da49be1e01f68c868457aaa6316da940970494786f16cd7a02c718b0ef8c1ece510ca880b8af8362b8dad60f4470"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.21.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-dataformats-text",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-dataformats-text/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-dataformats-text/jackson-dataformat-yaml",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.minio/minio@9.0.0?type=jar",
      "group": "io.minio",
      "name": "minio",
      "version": "9.0.0",
      "description": "MinIO Java SDK for Amazon S3 Compatible Cloud Storage",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "bcfd83c16d5385850c39042b9865cecf"
        },
        {
          "alg": "SHA-1",
          "content": "14e9aa679a9f3634ece771ab4fff98a66bfce7c4"
        },
        {
          "alg": "SHA-256",
          "content": "cc90db7f86e43dabf845c53304089be4dd4a802ab579874b3694a22ffeefb860"
        },
        {
          "alg": "SHA-512",
          "content": "61da675008c03ac9673fabb202bf2ccda67f7586d9283b6c7f99ebaac2daece19162d49cfaca67b16a7bcf778c6dead3de17e535398ffdde0ccc626170f876ea"
        },
        {
          "alg": "SHA-384",
          "content": "e1884229cb3a30ba5cfaf7f2ceaaa1a8c2be0e0e23197207082d412dc0fd01120dc8d02732d7d0777a1af76b0fabfb83"
        },
        {
          "alg": "SHA3-384",
          "content": "25db692bfb0750f3b84d4f86ba08f3d2866429615d56a44a8632002499a291a3cb2dfd15fb36d72d0b6db1d198e4e9fe"
        },
        {
          "alg": "SHA3-256",
          "content": "d09ced3dd252303758d3a7dff5d91f94c9b47a9585ee69ba8aecbb72ed124b29"
        },
        {
          "alg": "SHA3-512",
          "content": "25719d2fca75f02faaecd377f6024135fb248ffd01fee5922d8e593703b718d8c15c130f20dd613b8ce2d872e1587c56d2cfca1056f7ed3eda26cdd75af60fc8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.minio/minio@9.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/minio/minio-java",
          "type": "website"
        },
        {
          "url": "http://github.com/minio/minio-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.carrotsearch.thirdparty/simple-xml-safe@2.7.1?type=jar",
      "publisher": "Carrot Search s.c.",
      "group": "com.carrotsearch.thirdparty",
      "name": "simple-xml-safe",
      "version": "2.7.1",
      "description": "A fork of Niall Gallagher\u0027s simple-xml library with web-safe defaults",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "150936ed745f2c207db42931d7d5839b"
        },
        {
          "alg": "SHA-1",
          "content": "045fda5ac6087bc82a209d8cdb73f8d0dbdcfc7b"
        },
        {
          "alg": "SHA-256",
          "content": "4506e4bb57d41481936f0ac684468ca4b2cc9e002ca8466ee19e23228d455957"
        },
        {
          "alg": "SHA-512",
          "content": "d13c25a9c4b7ce07e6b096e37591b37e415332d3e1adcb65c753238f1c3d968a98293223a720101b0af0d76c4bd9f8a0d487de9b0122172187b59e923877592a"
        },
        {
          "alg": "SHA-384",
          "content": "a96086b4fe29a470978638f14d5508daa1f1f2a629de4cc424964e8c05a7d0d6960650b5536aee098fda03c6b5a8acae"
        },
        {
          "alg": "SHA3-384",
          "content": "3975d435b3f32c32dfdebc88625c7226d5052275269f4b0533f0d2cca05fd7d91c9a7ca58eb9559a6f4855166d3fd4bc"
        },
        {
          "alg": "SHA3-256",
          "content": "ed6f680d21c9fc1cd9606dc0dfcbbbed7baa71d41c51654b32159fef896d8806"
        },
        {
          "alg": "SHA3-512",
          "content": "d35d823731ce1d4bd9dbfca093f59ab91346b2b7f901c43c5aabe36fdc6ad5e1af130129da75dc9d731c3d9597e53afe888efefd752891b4f09f3eb2a8a6a5f5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.carrotsearch.thirdparty/simple-xml-safe@2.7.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/dweiss/simplexml",
          "type": "website"
        },
        {
          "url": "https://github.com/dweiss/simplexml",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.squareup.okhttp3/okhttp@5.2.1?type=jar",
      "group": "com.squareup.okhttp3",
      "name": "okhttp",
      "version": "5.2.1",
      "description": "Square\u2019s meticulous HTTP client for Java and Kotlin.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "7cefaebda364337f3770168187124f31"
        },
        {
          "alg": "SHA-1",
          "content": "6891a4fd19bcab6f69fe091c2bc6077edec5258e"
        },
        {
          "alg": "SHA-256",
          "content": "e720a383fdc3eb1df4aac77a085e61b7730837364151de867093fdbcafcb44aa"
        },
        {
          "alg": "SHA-512",
          "content": "165c65503bded11490b09c46935864aa71ee8b9fc4ea1c01e1cb91b209a64af97e92d5d8fd9b4bc78209a8949a79f37ff49edd992171d25ba6f7e0d968cee87c"
        },
        {
          "alg": "SHA-384",
          "content": "c17bcf23262c3979a72e2c1746757b0f67ddad0b060c95d655a3d912136654b2468c96bd1921b316f4f05f43ce86c872"
        },
        {
          "alg": "SHA3-384",
          "content": "2bde1832a1b0bb7bb1a0eac22a2af8c4c25059dc98584667247c6efd3e8de3c4350b5ba9d378d689b285d05604601d81"
        },
        {
          "alg": "SHA3-256",
          "content": "07a360a76512ec19d3220d3ed9b594638ff63f8be6fb0bca1eee93057cd23861"
        },
        {
          "alg": "SHA3-512",
          "content": "fbb062b8370d6b9547edc1c3bf9a0a3bedf65b33e644cdc05e8c8101482757c8371f98616c13391cad7dfab3a01dac8a174ffcd99ebcc515a384aa8f022de8c3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.squareup.okhttp3/okhttp@5.2.1?type=jar",
      "externalReferences": [
        {
          "url": "https://square.github.io/okhttp/",
          "type": "website"
        },
        {
          "url": "https://github.com/square/okhttp",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.squareup.okio/okio@3.16.1?type=jar",
      "group": "com.squareup.okio",
      "name": "okio",
      "version": "3.16.1",
      "description": "A modern I/O library for Android, Java, and Kotlin Multiplatform.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ca878d553dd4cdae891d16df87cdae7d"
        },
        {
          "alg": "SHA-1",
          "content": "dbd63ccb67502e388975c9b5e4fb029638aecc78"
        },
        {
          "alg": "SHA-256",
          "content": "c9964f394c4cd32b79bf338afbfa2f2297221eee08311787061cea55f87dd60e"
        },
        {
          "alg": "SHA-512",
          "content": "d848277d1da157f22b4ba2dd42bea11c7569aab1107181b886e97943dbb6058851e78d6582eb13bdfc05350b1f82c8d4b681a42435eee0f631d126dd8f3b39ee"
        },
        {
          "alg": "SHA-384",
          "content": "edad8c48669ffbb1b079bc8f7f4ee5d3671dc4563df0598cc0e27b5d50ced49a90f2f510ea963051a2ffbfc95eb91159"
        },
        {
          "alg": "SHA3-384",
          "content": "68a3fe67b2e285fbb352e262dfea29c03151dbfa934c1ac900cd7ab2ad8a1a9c0e7cac4aa718a7677fe7ee391ac65027"
        },
        {
          "alg": "SHA3-256",
          "content": "8544496fbf4ead4fc95b999eb2bf5f7af01dab0809a806c080a226ddee50011b"
        },
        {
          "alg": "SHA3-512",
          "content": "2a39fe798a87a2b89f73b2c3b9143003dbc93434bce334d0cb55f422bb048e4cd39a05c9ab2c53411cab9138b84cb72510dd08f516e9c46438a8644cc7c974f6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.squareup.okio/okio@3.16.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/square/okio/",
          "type": "website"
        },
        {
          "url": "https://github.com/square/okio/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.82?type=jar",
      "group": "org.bouncycastle",
      "name": "bcprov-jdk18on",
      "version": "1.82",
      "description": "The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains the JCA/JCE provider and low-level API for the BC Java version 1.82 for Java 1.8 and later.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "73520ba13118979db17136db32a8c401"
        },
        {
          "alg": "SHA-1",
          "content": "e1118397395d21909a1b7b15120d0c2a68d7fd0c"
        },
        {
          "alg": "SHA-256",
          "content": "14cde2fdfaa8890480a8e5b67aceef0c90f96682c1e23c133bafdc9e0b3255ce"
        },
        {
          "alg": "SHA-512",
          "content": "acf5e383a93cb16b3ad5a531b86acda3c7fad306c655b1090bad576898707ac4516b2681fc4993ee1dbe3ecbeb05156b836e17cb0f6db811d81d1e3d762a4151"
        },
        {
          "alg": "SHA-384",
          "content": "17937df1cc7f2bc82b1d3be96ae9e411c8c6be9fba12f45a00016136539594584c0c3414fcbf22635e8aa958773eb3c9"
        },
        {
          "alg": "SHA3-384",
          "content": "a1f9cf6c9a75ba5b83cbcee081f1482383a0fe111eeb6a5663feaeef9046fe2b46c1299b8355fc99987e0053317b911d"
        },
        {
          "alg": "SHA3-256",
          "content": "a5678d424b2754823a997ddac7727d51294218c8a831eb30e4d12d00abf02704"
        },
        {
          "alg": "SHA3-512",
          "content": "ad5ad754087d6b089d3060deff7b8dd9fa2a3ea82d57c62c3d4f5336212447e882f489ada58f69858bd84f347cc0f5575141d8895a29e7da6c546412b40ec344"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "Bouncy Castle Licence",
            "url": "https://www.bouncycastle.org/licence.html"
          }
        }
      ],
      "purl": "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.82?type=jar",
      "externalReferences": [
        {
          "url": "https://www.bouncycastle.org/download/bouncy-castle-java/",
          "type": "website"
        },
        {
          "url": "https://github.com/bcgit/bc-java/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/bcgit/bc-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.8?type=jar",
      "publisher": "xerial.org",
      "group": "org.xerial.snappy",
      "name": "snappy-java",
      "version": "1.1.10.8",
      "description": "snappy-java: A fast compression/decompression library",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a25bd213d1ca2f3c605c5f03050db070"
        },
        {
          "alg": "SHA-1",
          "content": "ccbaa2b5ea6a023a27c44daf2d6cdec0e138592d"
        },
        {
          "alg": "SHA-256",
          "content": "50485d06037fea3d6e40c968386feeca6338cc9872e25549593ff3eb352cefcc"
        },
        {
          "alg": "SHA-512",
          "content": "c7133f726f366b9f06df98d94b4dd7c91c7702c543e1a318055a886af5e625d8231b0a6728250596181bc20a6c4147855eeb02ed55c447fe13ff2156e29985a9"
        },
        {
          "alg": "SHA-384",
          "content": "aeb78b3f4c56ce769f5fda9cfabe00be77d21b93637f70601c28b16eef41405e1291001c3a6e45001b356543e33b664b"
        },
        {
          "alg": "SHA3-384",
          "content": "6137f6354b574d8decb579ad9147dd9463e3a9f62d1e929266bee1adc020f57382973d0a1abf9daeb2007bb32671fed8"
        },
        {
          "alg": "SHA3-256",
          "content": "f44a4a8cffe82ce6c99b401e9d822e71cdfc63c1b279b278282eda07243b2a94"
        },
        {
          "alg": "SHA3-512",
          "content": "655731ef3b20a2cec213138c170f7dc7182c2a09536d74c1d8a13224bb204dd706a35749bf99b51c4b945b75784a0a26c60931a158d27e1378ccd1c8ac7a0783"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.8?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/xerial/snappy-java",
          "type": "website"
        },
        {
          "url": "https://github.com/xerial/snappy-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.squareup.okhttp3/okhttp-jvm@5.3.2?type=jar",
      "group": "com.squareup.okhttp3",
      "name": "okhttp-jvm",
      "version": "5.3.2",
      "description": "Square\u2019s meticulous HTTP client for Java and Kotlin.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "827a887aa959c1f1d6b12f3345df2484"
        },
        {
          "alg": "SHA-1",
          "content": "f31e8de27feebe1e56d6c9d354a0986b65be0e1d"
        },
        {
          "alg": "SHA-256",
          "content": "c771f48075b763f6c322055e21129a94b7de4c1faf3f8f58ace320b0c9517a30"
        },
        {
          "alg": "SHA-512",
          "content": "302cba8ec649ecb20512b4878b9f347645cdeada2001e7469363b21ca251bbb05c00e48e426449a88780f0ec25c672f214112b101d8dfd059b5275999ab48768"
        },
        {
          "alg": "SHA-384",
          "content": "a2bc92e52d8e1b2b9be40b0955828313f32a4276717bf7e1cace0aefa3bf5fad17997e409aeca7f68f335c9d975f1073"
        },
        {
          "alg": "SHA3-384",
          "content": "e585ea8e1ffbd6599654b5f7e9b1210ff972799f5019420652a0215b7dde6660b3a15e56b39d4702b42e307b3040b5d1"
        },
        {
          "alg": "SHA3-256",
          "content": "4737bb453c46672bef36c86ea7292a46f9552caaccfd7e6799bb9b3c508c4467"
        },
        {
          "alg": "SHA3-512",
          "content": "08ed5b2a6449ca0b8cced909bc2ded5cf20314b5bf8f8b094ed8641c5dd90e6b738fc66c917dd0eafbcf1e51497ba05ca154cc3d6fb4832a0ebc350a35c26abe"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.squareup.okhttp3/okhttp-jvm@5.3.2?type=jar",
      "externalReferences": [
        {
          "url": "https://square.github.io/okhttp/",
          "type": "website"
        },
        {
          "url": "https://github.com/square/okhttp",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.squareup.okio/okio-jvm@3.16.4?type=jar",
      "group": "com.squareup.okio",
      "name": "okio-jvm",
      "version": "3.16.4",
      "description": "A modern I/O library for Android, Java, and Kotlin Multiplatform.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "34d866f45bb2a65bf601cde52b72d096"
        },
        {
          "alg": "SHA-1",
          "content": "ceb794cf0bbf8d0d20f49aa91ce20db7fd77675d"
        },
        {
          "alg": "SHA-256",
          "content": "2196b993cd34dbbd919e7e01f57a4781b58bee80f86106163e287c20343a96a7"
        },
        {
          "alg": "SHA-512",
          "content": "1a7158538ae341b8a61fe7292506e12ca6063c5a51a1c122d0e934164395c7da585dc31b26ed88a993c47aeca89f6a854042c67a4bc7d771d35a0ece6c4dbde0"
        },
        {
          "alg": "SHA-384",
          "content": "37949576947630aba9caf7b24ffb00677f4b21b29a98543a0a66043340d20bb42128419d2bebc4b2f2b93569f35f9ada"
        },
        {
          "alg": "SHA3-384",
          "content": "32830517d7f960b4c86229f5347e40033658999029162aad0f273636640ed8b7130689de57277aaff169ac9f227885be"
        },
        {
          "alg": "SHA3-256",
          "content": "3f65833b5d5128064f885b68da6a3955667cf4c31a098da08431561949fe398b"
        },
        {
          "alg": "SHA3-512",
          "content": "ee404499bb148b817e575c22049cb5487531605413bf38edf8fd2cecf0d15f899de42e37d7dafa5dc8bc5493e24b7a976c2bc14c42d6d7056af410bd72513ad3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.squareup.okio/okio-jvm@3.16.4?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/square/okio/",
          "type": "website"
        },
        {
          "url": "https://github.com/square/okio/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@2.3.21?type=jar",
      "group": "org.jetbrains.kotlin",
      "name": "kotlin-stdlib",
      "version": "2.3.21",
      "description": "Kotlin Standard Library",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "67d962e3bcffbbb88f84b4d49e47fc56"
        },
        {
          "alg": "SHA-1",
          "content": "a2ee2c4e220fee522f0451b723bab2a43f3481a7"
        },
        {
          "alg": "SHA-256",
          "content": "6f64eac736db9434dd6925b4a518b9d1d17177652320c37916cf9ba3ce7d7d7a"
        },
        {
          "alg": "SHA-512",
          "content": "5564b17f006a9fdf93c93439b357e1fb82742c72d23b7aaa2e50d6db730d0b40426257e4e40eca7c70f9d514367b0057e51b84e1d0e49817002bc463939fee59"
        },
        {
          "alg": "SHA-384",
          "content": "f035eb7c781464e1355ee0b82e73eb7eabce67c37f469b35573c3047e46198904498110a05b4e207c78fb7766cf3524a"
        },
        {
          "alg": "SHA3-384",
          "content": "3fbc298ec3e9f816a889f69fa9fb95599866993059d16fdd108241ae70d70f0960fa2901081d0ebbb9a091c9964559c9"
        },
        {
          "alg": "SHA3-256",
          "content": "ac878d6d6b3394c66b0f5082d965649c243633d4fd8ba6a0926da346e3e23f0b"
        },
        {
          "alg": "SHA3-512",
          "content": "95fa621de32a1cf23c9aad2a872afada708a8feb8c554cc37c2730fe43c64a324ffb9262f62782bbb9558f7c1c22abec2ce26379f9b798b328f13f46fdc9eff1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@2.3.21?type=jar",
      "externalReferences": [
        {
          "url": "https://kotlinlang.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/JetBrains/kotlin",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jetbrains/annotations@13.0?type=jar",
      "group": "org.jetbrains",
      "name": "annotations",
      "version": "13.0",
      "description": "A set of annotations used for code inspection support and code documentation.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f4fb462172517b46b6cd90003508515a"
        },
        {
          "alg": "SHA-1",
          "content": "919f0dfe192fb4e063e7dacadee7f8bb9a2672a9"
        },
        {
          "alg": "SHA-256",
          "content": "ace2a10dc8e2d5fd34925ecac03e4988b2c0f851650c94b8cef49ba1bd111478"
        },
        {
          "alg": "SHA-512",
          "content": "5622d0ffe410e7272e2bb9fae1006caedeb86d0c62d2d9f3929a3b3cdcdef1963218fcf0cede82e95ef9f4da3ed4a173fa055ee6e4038886376181e0423e02ff"
        },
        {
          "alg": "SHA-384",
          "content": "6bcde3a6e471d416522e6288474bc4f9115e2e8abf8ce5d300829bee4aa98dff73be7d8c6f0607f3d6d423c7f5abbf90"
        },
        {
          "alg": "SHA3-384",
          "content": "f4d5a5d5a76b24c4751c8c52f2879b097d2430c3571c59b4630e8c871c9bdb08e24e803a14c24fc8d3378417f29b7244"
        },
        {
          "alg": "SHA3-256",
          "content": "b4a80ea81c4bc7e364e07981465f547e8ed83031806eaf3b97dfb38f894f5b6f"
        },
        {
          "alg": "SHA3-512",
          "content": "15b23bce818b4399b334dd632eb85de5a1b70c47fb9260561e70b1f726211c83bddbc957f3b4c32a1d8c687f9bc6c38d0a638c731cb5daf5b619aa725d6050c2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jetbrains/annotations@13.0?type=jar",
      "externalReferences": [
        {
          "url": "http://www.jetbrains.org",
          "type": "website"
        },
        {
          "url": "http://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/JetBrains/intellij-community",
          "type": "vcs"
        }
      ]
    }
  ],
  "services": [
    {
      "bom-ref": "service:gov.nist.nvd",
      "provider": {
        "name": "National Institute of Standards and Technology (NIST)",
        "url": [
          "https://nist.gov"
        ],
        "contact": [
          {
            "email": "nvd@nist.gov"
          }
        ]
      },
      "group": "gov.nist.nvd",
      "name": "National Vulnerability Database (NVD)",
      "description": "Used as a vulnerability data source. CVE feeds are mirrored to Dependency-Track.",
      "endpoints": [
        "https://nvd.nist.gov/feeds"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "Public domain"
          }
        }
      ]
    },
    {
      "bom-ref": "service:org.sonatype.ossindex",
      "provider": {
        "name": "Sonatype",
        "url": [
          "https://sonatype.com"
        ],
        "contact": [
          {
            "email": "ossindex@sonatype.org"
          }
        ]
      },
      "group": "org.sonatype.ossindex",
      "name": "OSS Index",
      "description": "Optional vulnerability analyzer. Queried by component package URL to retrieve known vulnerabilities.",
      "endpoints": [
        "https://ossindex.sonatype.org/api/v3/component-report",
        "https://ossindex.sonatype.org/api/v3/version"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:com.cyberriskanalytics.vulndb",
      "provider": {
        "name": "Risk Based Security",
        "url": [
          "https://riskbasedsecurity.com/"
        ],
        "contact": [
          {
            "email": "support@riskbasedsecurity.com"
          },
          {
            "email": "sales@riskbasedsecurity.com",
            "phone": "1-855-RBS-RISK"
          }
        ]
      },
      "group": "com.cyberriskanalytics.vulndb",
      "name": "VulnDB",
      "description": "Optional commercial vulnerability analyzer. Queried for component vulnerabilities. Requires a paid subscription.",
      "endpoints": [
        "https://vulndb.cyberriskanalytics.com/api/v1/account_status",
        "https://vulndb.cyberriskanalytics.com/api/v1/vendors/",
        "https://vulndb.cyberriskanalytics.com/api/v1/products/",
        "https://vulndb.cyberriskanalytics.com/api/v1/versions/by_product_id",
        "https://vulndb.cyberriskanalytics.com/api/v1/vulnerabilities/",
        "https://vulndb.cyberriskanalytics.com/api/v1/vulnerabilities/find_by_cpe"
      ],
      "authenticated": true,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:com.github.api",
      "provider": {
        "name": "GitHub",
        "url": [
          "https://github.com/"
        ]
      },
      "group": "com.github.api",
      "name": "GitHub Advisories",
      "description": "Used as a vulnerability data source. GitHub Security Advisories are mirrored to Dependency-Track via GraphQL. Also queried for repository metadata of packages hosted on GitHub.",
      "endpoints": [
        "https://api.github.com/graphql",
        "https://api.github.com/repos/"
      ],
      "authenticated": true,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:io.crates",
      "provider": {
        "name": "Crates.io",
        "url": [
          "https://crates.io"
        ]
      },
      "group": "io.crates",
      "name": "Crates.io",
      "description": "Queried for package metadata and latest version information of Rust crates.",
      "endpoints": [
        "https://crates.io/api/v1/crates"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.packagist.repo",
      "provider": {
        "name": "Packagist",
        "url": [
          "https://packagist.org"
        ]
      },
      "group": "org.packagist.repo",
      "name": "Packagist",
      "description": "Queried for latest version information of PHP Composer packages.",
      "endpoints": [
        "https://repo.packagist.org/p/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.rubygems",
      "provider": {
        "name": "RubyGems",
        "url": [
          "https://rubygems.org"
        ]
      },
      "group": "org.rubygems",
      "name": "RubyGems",
      "description": "Queried for package metadata and latest version information of Ruby gems.",
      "endpoints": [
        "https://rubygems.org/api/v1/versions"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.golang.proxy",
      "provider": {
        "name": "Google",
        "url": [
          "https://go.dev/"
        ]
      },
      "group": "org.golang.proxy",
      "name": "Go Module Mirror, Index, and Checksum Database",
      "description": "Queried for package metadata and latest version information of Go modules.",
      "endpoints": [
        "https://proxy.golang.org/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:pm.hex",
      "provider": {
        "name": "Six Colors AB.",
        "url": [
          "https://hex.pm"
        ],
        "contact": [
          {
            "name": "Eric Meadows-J\u00F6nsson",
            "phone": "\u002B46 070-893 94 01"
          }
        ]
      },
      "group": "pm.hex",
      "name": "hex",
      "description": "Queried for package metadata and latest version information of Erlang and Elixir packages.",
      "endpoints": [
        "https://hex.pm/api/packages"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.maven.repo1",
      "provider": {
        "name": "Sonatype",
        "url": [
          "https://sonatype.com"
        ]
      },
      "group": "org.maven.repo1",
      "name": "Maven Central",
      "description": "Queried for package metadata and latest version information of Java artifacts.",
      "endpoints": [
        "https://repo1.maven.org/maven2"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:com.atlassian.maven",
      "provider": {
        "name": "Atlassian",
        "url": [
          "https://atlassian.com"
        ]
      },
      "group": "com.atlassian.maven",
      "name": "Atlassian Public",
      "description": "Queried for latest version information of Atlassian-published Maven artifacts.",
      "endpoints": [
        "https://packages.atlassian.com/content/repositories/atlassian-public/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.jboss.repository",
      "provider": {
        "name": "RedHat",
        "url": [
          "https://redhat.com"
        ]
      },
      "group": "org.jboss.repository",
      "name": "JBoss Releases",
      "description": "Queried for latest version information of JBoss-published Maven artifacts.",
      "endpoints": [
        "https://repository.jboss.org/nexus/content/repositories/releases/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.clojars.repo",
      "provider": {
        "name": "Clojars",
        "url": [
          "https://clojars.org/"
        ]
      },
      "group": "org.clojars.repo",
      "name": "Clojars",
      "description": "Queried for latest version information of Clojure libraries.",
      "endpoints": [
        "https://repo.clojars.org/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:com.google.maven",
      "provider": {
        "name": "Google",
        "url": [
          "https://google.com"
        ]
      },
      "group": "com.google.maven",
      "name": "Google\u0027s Maven Repository",
      "description": "Queried for latest version information of Google and Android Maven artifacts.",
      "endpoints": [
        "https://maven.google.com/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.npmjs.registry",
      "provider": {
        "name": "npm",
        "url": [
          "https://www.npmjs.com/"
        ]
      },
      "group": "org.npmjs.registry",
      "name": "NPM Registry",
      "description": "Queried for package metadata and latest version information of npm packages.",
      "endpoints": [
        "https://registry.npmjs.org/-/package/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.nuget.api",
      "provider": {
        "name": "Microsoft",
        "url": [
          "https://www.microsoft.com/"
        ],
        "contact": [
          {
            "email": "support@nuget.org"
          }
        ]
      },
      "group": "org.nuget.api",
      "name": "NuGet Registry",
      "description": "Queried for package metadata and latest version information of NuGet packages.",
      "endpoints": [
        "https://api.nuget.org/v3-flatcontainer/",
        "https://api.nuget.org/v3/registration3/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:dev.osv",
      "provider": {
        "name": "Google",
        "url": [
          "https://google.com"
        ]
      },
      "group": "dev.osv",
      "name": "OSV",
      "description": "Used as a vulnerability data source. Per-ecosystem OSV feeds are mirrored to Dependency-Track.",
      "endpoints": [
        "https://osv-vulnerabilities.storage.googleapis.com"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.pypi",
      "provider": {
        "name": "Python Software Foundation",
        "url": [
          "https://www.python.org/psf/"
        ],
        "contact": [
          {
            "email": "psf@python.org"
          }
        ]
      },
      "group": "org.pypi",
      "name": "PyPI",
      "description": "Queried for package metadata and latest version information of Python packages.",
      "endpoints": [
        "https://pypi.org/pypi/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.dependencytrack.metrics",
      "provider": {
        "name": "OWASP",
        "url": [
          "https://owasp.org"
        ]
      },
      "group": "org.dependencytrack.metrics",
      "name": "Dependency-Track Telemetry",
      "description": "Receives anonymous usage telemetry submitted by this Dependency-Track instance. Optional.",
      "endpoints": [
        "https://metrics.dependencytrack.org"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "outbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:io.snyk",
      "provider": {
        "name": "Snyk",
        "url": [
          "https://snyk.io"
        ]
      },
      "group": "io.snyk",
      "name": "Snyk",
      "description": "Optional commercial vulnerability analyzer. Queried for component vulnerabilities. Requires a paid subscription.",
      "endpoints": [
        "https://api.snyk.io"
      ],
      "authenticated": true,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:com.empiricalsecurity.epss",
      "provider": {
        "name": "Empirical Security",
        "url": [
          "https://www.first.org/epss/"
        ]
      },
      "group": "com.empiricalsecurity.epss",
      "name": "EPSS",
      "description": "Used as a source of EPSS exploit prediction scores for CVEs. Feeds are mirrored to Dependency-Track.",
      "endpoints": [
        "https://epss.empiricalsecurity.com/epss_scores-current.csv.gz"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.metacpan",
      "provider": {
        "name": "The Perl Foundation",
        "url": [
          "https://metacpan.org"
        ]
      },
      "group": "org.metacpan",
      "name": "MetaCPAN",
      "description": "Queried for latest version information of Perl modules on CPAN.",
      "endpoints": [
        "https://fastapi.metacpan.org/v1/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.haskell.hackage",
      "provider": {
        "name": "Haskell.org",
        "url": [
          "https://www.haskell.org"
        ]
      },
      "group": "org.haskell.hackage",
      "name": "Hackage",
      "description": "Queried for latest version information of Haskell packages.",
      "endpoints": [
        "https://hackage.haskell.org/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.nixos.channels",
      "provider": {
        "name": "NixOS Foundation",
        "url": [
          "https://nixos.org"
        ]
      },
      "group": "org.nixos.channels",
      "name": "Nixpkgs",
      "description": "Queried for latest version information of Nixpkgs packages.",
      "endpoints": [
        "https://channels.nixos.org/nixpkgs-unstable/packages.json.br"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.dependencytrack/apiserver@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/api@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/org.dependencytrack/cache-api@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/org.dependencytrack/cache-provider-database@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/org.dependencytrack/common-init@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/org.dependencytrack/common-pagination@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/org.dependencytrack/datanucleus-plugin@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/org.dependencytrack/migration@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/org.dependencytrack/notification-api@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/org.dependencytrack/notification-publishing@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/org.dependencytrack/notification-templating@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/org.dependencytrack/plugin-api@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/org.dependencytrack/plugin-config@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/org.dependencytrack/plugin-runtime@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/org.dependencytrack/proto@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/org.dependencytrack/secret-management@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/org.dependencytrack/vuln-analysis-api@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/org.dependencytrack/vuln-analyzer-internal@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/org.dependencytrack/package-metadata-api@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/org.dependencytrack/package-metadata-resolution@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/org.dependencytrack/vuln-analyzer-oss-index@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/org.dependencytrack/vuln-analyzer-snyk@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/org.dependencytrack/vuln-analyzer-trivy@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/org.dependencytrack/vuln-analyzer-vuln-db@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/org.dependencytrack/dex-engine@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/org.dependencytrack/file-storage-api@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/org.dependencytrack/file-storage-provider-local@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/org.dependencytrack/file-storage-provider-memory@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/org.dependencytrack/file-storage-provider-s3@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/org.dependencytrack/vuln-data-source-api@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/org.dependencytrack/vuln-data-source-github@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/org.dependencytrack/vuln-data-source-nvd@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/org.dependencytrack/vuln-data-source-osv@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/org.dependencytrack/alpine-common@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/org.dependencytrack/alpine-model@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/org.dependencytrack/alpine-infra@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/org.dependencytrack/alpine-server@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/dev.cel/cel@0.12.0?type=jar",
        "pkg:maven/dev.cel/extensions@0.4.1?type=jar",
        "pkg:maven/org.metaeffekt.core/ae-security@0.154.0?type=jar",
        "pkg:maven/org.dependencytrack/jdbi-support@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/org.jdbi/jdbi3-core@3.53.0?type=jar",
        "pkg:maven/org.jdbi/jdbi3-jackson2@3.53.0?type=jar",
        "pkg:maven/org.jdbi/jdbi3-sqlobject@3.53.0?type=jar",
        "pkg:maven/org.jdbi/jdbi3-postgres@3.53.0?type=jar",
        "pkg:maven/org.jdbi/jdbi3-freemarker@3.53.0?type=jar",
        "pkg:maven/org.glassfish.jersey.ext/jersey-micrometer@4.0.2?type=jar",
        "pkg:maven/us.springett/owasp-risk-rating-calculator@1.0.1?type=jar",
        "pkg:maven/us.springett/cpe-parser@3.0.1?type=jar",
        "pkg:maven/org.cyclonedx/cyclonedx-core-java@12.1.0?type=jar",
        "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar",
        "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-server@12.1.9?type=jar",
        "pkg:maven/org.eclipse.jetty.compression/jetty-compression-gzip@12.1.9?type=jar",
        "pkg:maven/org.eclipse.jetty.compression/jetty-compression-server@12.1.9?type=jar",
        "pkg:maven/org.eclipse.jetty.ee11/jetty-ee11-servlet@12.1.9?type=jar",
        "pkg:maven/org.slf4j/jul-to-slf4j@2.0.18?type=jar",
        "pkg:maven/io.swagger.core.v3/swagger-annotations-jakarta@2.2.50?type=jar",
        "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.21.3?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
        "pkg:maven/net.javacrumbs.shedlock/shedlock-provider-jdbc@7.7.0?type=jar",
        "pkg:maven/net.javacrumbs.shedlock/shedlock-provider-jdbc-internal@7.7.0?type=jar",
        "pkg:maven/com.asahaf.javacron/javacron@1.4.0?type=jar",
        "pkg:maven/io.micrometer/micrometer-java11@1.16.5?type=jar",
        "pkg:maven/io.micrometer/micrometer-registry-prometheus@1.16.5?type=jar",
        "pkg:maven/io.micrometer/micrometer-registry-prometheus-simpleclient@1.16.5?type=jar",
        "pkg:maven/io.github.mweirauch/micrometer-jvm-extras@0.3.0?type=jar",
        "pkg:maven/io.pebbletemplates/pebble@4.1.1?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.34.1?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpmime@4.5.14?type=jar",
        "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.1.1?type=jar",
        "pkg:maven/io.github.nscuro/versatile-core@0.18.1?type=jar",
        "pkg:maven/org.postgresql/postgresql@42.7.11?type=jar",
        "pkg:maven/com.google.cloud.sql/postgres-socket-factory@1.28.3?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-retry@2.4.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-micrometer@2.4.0?type=jar",
        "pkg:maven/org.slf4j/log4j-over-slf4j@2.0.18?type=jar",
        "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.21.3?type=jar",
        "pkg:maven/io.minio/minio@9.0.0?type=jar",
        "pkg:maven/com.squareup.okhttp3/okhttp-jvm@5.3.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/api@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/cache-api@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@3.1.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@3.1.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/cache-provider-database@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/common-datasource@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/io.micrometer/micrometer-core@1.16.5?type=jar",
        "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@3.1.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/common-datasource@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/common-health@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/com.zaxxer/HikariCP@7.0.2?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/io.micrometer/micrometer-core@1.16.5?type=jar",
        "pkg:maven/org.postgresql/postgresql@42.7.11?type=jar",
        "pkg:maven/io.smallrye.config/smallrye-config-core@3.17.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/common-health@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.eclipse.microprofile.health/microprofile-health-api@4.0.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.microprofile.health/microprofile-health-api@4.0.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.zaxxer/HikariCP@7.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.micrometer/micrometer-core@1.16.5?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/io.micrometer/micrometer-commons@1.16.5?type=jar",
        "pkg:maven/io.micrometer/micrometer-observation@1.16.5?type=jar",
        "pkg:maven/org.hdrhistogram/HdrHistogram@2.2.2?type=jar",
        "pkg:maven/org.latencyutils/LatencyUtils@2.0.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.micrometer/micrometer-commons@1.16.5?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.micrometer/micrometer-observation@1.16.5?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/io.micrometer/micrometer-commons@1.16.5?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.hdrhistogram/HdrHistogram@2.2.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.latencyutils/LatencyUtils@2.0.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.postgresql/postgresql@42.7.11?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.smallrye.config/smallrye-config-core@3.17.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@3.1.1?type=jar",
        "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar",
        "pkg:maven/io.smallrye.common/smallrye-common-annotation@2.17.1?type=jar",
        "pkg:maven/io.smallrye.common/smallrye-common-expression@2.17.1?type=jar",
        "pkg:maven/io.smallrye.common/smallrye-common-constraint@2.17.1?type=jar",
        "pkg:maven/io.smallrye.common/smallrye-common-classloader@2.17.1?type=jar",
        "pkg:maven/org.jboss.logging/jboss-logging@3.6.1.Final?type=jar",
        "pkg:maven/org.ow2.asm/asm@9.9.1?type=jar",
        "pkg:maven/io.smallrye.config/smallrye-config-common@3.17.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.smallrye.common/smallrye-common-annotation@2.17.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.smallrye.common/smallrye-common-expression@2.17.1?type=jar",
      "dependsOn": [
        "pkg:maven/io.smallrye.common/smallrye-common-function@2.17.1?type=jar",
        "pkg:maven/org.jboss.logging/jboss-logging@3.6.1.Final?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.smallrye.common/smallrye-common-function@2.17.1?type=jar",
      "dependsOn": [
        "pkg:maven/io.smallrye.common/smallrye-common-constraint@2.17.1?type=jar",
        "pkg:maven/org.jboss.logging/jboss-logging@3.6.1.Final?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.smallrye.common/smallrye-common-constraint@2.17.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.jboss.logging/jboss-logging@3.6.1.Final?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jboss.logging/jboss-logging@3.6.1.Final?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.smallrye.common/smallrye-common-classloader@2.17.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.ow2.asm/asm@9.9.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.smallrye.config/smallrye-config-common@3.17.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@3.1.1?type=jar",
        "pkg:maven/io.smallrye.common/smallrye-common-classloader@2.17.1?type=jar",
        "pkg:maven/org.jboss.logging/jboss-logging@3.6.1.Final?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/common-init@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@3.1.1?type=jar",
        "pkg:maven/org.eclipse.microprofile.health/microprofile-health-api@4.0.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/common-pagination@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-cbor@2.21.3?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-cbor@2.21.3?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/datanucleus-plugin@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.uuid/java-uuid-generator@5.2.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.uuid/java-uuid-generator@5.2.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/migration@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "dependsOn": [
        "pkg:maven/org.flywaydb/flyway-core@12.6.0?type=jar",
        "pkg:maven/org.flywaydb/flyway-database-postgresql@12.6.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.flywaydb/flyway-core@12.6.0?type=jar",
      "dependsOn": [
        "pkg:maven/tools.jackson.core/jackson-databind@3.1.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/tools.jackson.core/jackson-databind@3.1.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
        "pkg:maven/tools.jackson.core/jackson-core@3.1.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/tools.jackson.core/jackson-core@3.1.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.flywaydb/flyway-database-postgresql@12.6.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.flywaydb/flyway-core@12.6.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/notification-api@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.uuid/java-uuid-generator@5.2.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.34.1?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.34.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.protobuf/protobuf-java@4.34.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.protobuf/protobuf-java-util@4.34.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.protobuf/protobuf-java@4.34.1?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.8.9?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.code.gson/gson@2.8.9?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/notification-publishing@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.angus/angus-mail@2.0.5?type=jar",
        "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.2.4?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.apache.kafka/kafka-clients@4.2.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.angus/angus-mail@2.0.5?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar",
        "pkg:maven/jakarta.mail/jakarta.mail-api@2.1.3?type=jar",
        "pkg:maven/org.eclipse.angus/angus-activation@2.0.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/jakarta.mail/jakarta.mail-api@2.1.3?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.angus/angus-activation@2.0.3?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.2.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.kafka/kafka-clients@4.2.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.luben/zstd-jni@1.5.7-8?type=jar",
        "pkg:maven/at.yawk.lz4/lz4-java@1.10.1?type=jar",
        "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.8?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.luben/zstd-jni@1.5.7-8?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/at.yawk.lz4/lz4-java@1.10.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.8?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/notification-templating@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.2.4?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/io.pebbletemplates/pebble@4.1.1?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.34.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.pebbletemplates/pebble@4.1.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.unbescape/unbescape@1.1.6.RELEASE?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.unbescape/unbescape@1.1.6.RELEASE?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/plugin-api@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/cache-api@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/plugin-config@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
        "pkg:maven/com.networknt/json-schema-validator@1.5.9?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.networknt/json-schema-validator@1.5.9?type=jar",
      "dependsOn": [
        "pkg:maven/com.ethlo.time/itu@1.14.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.21.3?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.ethlo.time/itu@1.14.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.21.3?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
        "pkg:maven/org.yaml/snakeyaml@2.5?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.yaml/snakeyaml@2.5?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/plugin-runtime@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/cache-api@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/org.dependencytrack/common-config@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/org.dependencytrack/plugin-config@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
        "pkg:maven/org.jdbi/jdbi3-core@3.53.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@3.1.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/common-config@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/io.smallrye.config/smallrye-config-core@3.17.2?type=jar",
        "pkg:maven/org.dependencytrack/smallrye-config-secret-handler-file@5.7.0-alpha.9-SNAPSHOT?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/smallrye-config-secret-handler-file@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.jdbi/jdbi3-core@3.53.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/io.leangen.geantyref/geantyref@2.0.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.leangen.geantyref/geantyref@2.0.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/proto@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/cyclonedx-proto@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/org.dependencytrack/file-storage-api@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/org.dependencytrack/notification-api@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.34.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/cyclonedx-proto@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.protobuf/protobuf-java@4.34.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/file-storage-api@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.34.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/secret-management@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/common-datasource@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/org.dependencytrack/common-pagination@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.postgresql/postgresql@42.7.11?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/com.google.crypto.tink/tink@1.21.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.crypto.tink/tink@1.21.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.8.9?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.34.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-analysis-api@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/cyclonedx-proto@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/org.dependencytrack/plugin-api@5.7.0-alpha.9-SNAPSHOT?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-analyzer-internal@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/jdbi-support@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/org.dependencytrack/os-distro-metadata@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
        "pkg:maven/org.jdbi/jdbi3-core@3.53.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/io.github.nscuro/versatile-core@0.18.1?type=jar",
        "pkg:maven/us.springett/cpe-parser@3.0.1?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/jdbi-support@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/os-distro-metadata@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.nscuro/versatile-core@0.18.1?type=jar",
      "dependsOn": [
        "pkg:maven/io.github.nscuro/versatile-spi@0.18.1?type=jar",
        "pkg:maven/org.apache.maven/maven-artifact@3.9.15?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
        "pkg:maven/com.vdurmont/semver4j@3.1.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.nscuro/versatile-spi@0.18.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.apache.maven/maven-artifact@3.9.15?type=jar",
      "dependsOn": [
        "pkg:maven/org.codehaus.plexus/plexus-utils@3.6.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.codehaus.plexus/plexus-utils@3.6.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.vdurmont/semver4j@3.1.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/us.springett/cpe-parser@3.0.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/package-metadata-api@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/plugin-api@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/package-metadata-resolution@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "dependsOn": [
        "pkg:maven/org.brotli/dec@0.1.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.21.3?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.34.1?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/io.github.nscuro/versatile-core@0.18.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.brotli/dec@0.1.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.21.3?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-analyzer-oss-index@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "dependsOn": [
        "pkg:maven/org.metaeffekt.core/ae-security@0.154.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.metaeffekt.core/ae-security@0.154.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.18?type=jar",
        "pkg:maven/commons-io/commons-io@2.22.0?type=jar",
        "pkg:maven/org.json/json@20231013?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.18?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/commons-io/commons-io@2.22.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.json/json@20231013?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-analyzer-snyk@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "dependsOn": [
        "pkg:maven/org.metaeffekt.core/ae-security@0.154.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.34.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-analyzer-trivy@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.34.1?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.34.1?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-analyzer-vuln-db@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "dependsOn": [
        "pkg:maven/org.metaeffekt.core/ae-security@0.154.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/dex-engine@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/dex-api@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/org.dependencytrack/dex-engine-api@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/org.dependencytrack/dex-engine-migration@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.2.4?type=jar",
        "pkg:maven/com.fasterxml.uuid/java-uuid-generator@5.2.0?type=jar",
        "pkg:maven/org.jdbi/jdbi3-core@3.53.0?type=jar",
        "pkg:maven/org.jdbi/jdbi3-freemarker@3.53.0?type=jar",
        "pkg:maven/org.jdbi/jdbi3-jackson2@3.53.0?type=jar",
        "pkg:maven/org.jdbi/jdbi3-postgres@3.53.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/io.micrometer/micrometer-core@1.16.5?type=jar",
        "pkg:maven/org.postgresql/postgresql@42.7.11?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.34.1?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.34.1?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-circuitbreaker@2.4.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.4.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-micrometer@2.4.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/dex-api@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.34.1?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.34.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/dex-engine-api@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/common-pagination@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/org.dependencytrack/dex-api@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/io.micrometer/micrometer-core@1.16.5?type=jar",
        "pkg:maven/org.eclipse.microprofile.health/microprofile-health-api@4.0.1?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.4.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-core@2.4.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/dex-engine-migration@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "dependsOn": [
        "pkg:maven/org.flywaydb/flyway-core@12.6.0?type=jar",
        "pkg:maven/org.flywaydb/flyway-database-postgresql@12.6.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jdbi/jdbi3-freemarker@3.53.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.jdbi/jdbi3-core@3.53.0?type=jar",
        "pkg:maven/org.freemarker/freemarker@2.3.34?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.freemarker/freemarker@2.3.34?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.jdbi/jdbi3-jackson2@3.53.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.jdbi/jdbi3-core@3.53.0?type=jar",
        "pkg:maven/org.jdbi/jdbi3-json@3.53.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jdbi/jdbi3-json@3.53.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.jdbi/jdbi3-core@3.53.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jdbi/jdbi3-postgres@3.53.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.jdbi/jdbi3-core@3.53.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-circuitbreaker@2.4.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.4.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-micrometer@2.4.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.micrometer/micrometer-core@1.16.5?type=jar",
        "pkg:maven/io.micrometer/micrometer-observation@1.16.5?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-bulkhead@2.4.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-circuitbreaker@2.4.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-retry@2.4.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-ratelimiter@2.4.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-timelimiter@2.4.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-bulkhead@2.4.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.4.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-retry@2.4.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.4.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-ratelimiter@2.4.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.4.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-timelimiter@2.4.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.4.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/file-storage-provider-local@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.luben/zstd-jni@1.5.7-8?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/file-storage-provider-memory@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/file-storage-provider-s3@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "dependsOn": [
        "pkg:maven/io.minio/minio@9.0.0?type=jar",
        "pkg:maven/com.squareup.okhttp3/okhttp-jvm@5.3.2?type=jar",
        "pkg:maven/com.github.luben/zstd-jni@1.5.7-8?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.minio/minio@9.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.carrotsearch.thirdparty/simple-xml-safe@2.7.1?type=jar",
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
        "pkg:maven/com.squareup.okhttp3/okhttp@5.2.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
        "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.82?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.21.0?type=jar",
        "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.8?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.carrotsearch.thirdparty/simple-xml-safe@2.7.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar",
        "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
        "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.squareup.okhttp3/okhttp@5.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@2.3.21?type=jar",
        "pkg:maven/com.squareup.okio/okio@3.16.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@2.3.21?type=jar",
      "dependsOn": [
        "pkg:maven/org.jetbrains/annotations@13.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jetbrains/annotations@13.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.squareup.okio/okio@3.16.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.squareup.okio/okio-jvm@3.16.4?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.squareup.okio/okio-jvm@3.16.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@2.3.21?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.82?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar",
      "dependsOn": [
        "pkg:maven/commons-codec/commons-codec@1.21.0?type=jar",
        "pkg:maven/commons-io/commons-io@2.22.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/commons-codec/commons-codec@1.21.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.squareup.okhttp3/okhttp-jvm@5.3.2?type=jar",
      "dependsOn": [
        "pkg:maven/com.squareup.okio/okio-jvm@3.16.4?type=jar",
        "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@2.3.21?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-data-source-api@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/plugin-api@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/org.dependencytrack/cyclonedx-proto@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-data-source-github@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
        "pkg:maven/org.metaeffekt.core/ae-security@0.154.0?type=jar",
        "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.6.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
        "pkg:maven/io.github.jeremylong/open-vulnerability-clients@9.0.5?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.34.1?type=jar",
        "pkg:maven/io.github.nscuro/versatile-core@0.18.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.6.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.4?type=jar",
        "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.4?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.4?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.4?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.jeremylong/open-vulnerability-clients@9.0.5?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.6.1?type=jar",
        "pkg:maven/org.apache.httpcomponents.client5/httpclient5-cache@5.6?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.21.3?type=jar",
        "pkg:maven/com.samskivert/jmustache@1.16?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents.client5/httpclient5-cache@5.6?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.6.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.samskivert/jmustache@1.16?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-data-source-nvd@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "dependsOn": [
        "pkg:maven/us.springett/cpe-parser@3.0.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.21.3?type=jar",
        "pkg:maven/io.github.jeremylong/open-vulnerability-clients@9.0.5?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.34.1?type=jar",
        "pkg:maven/io.github.nscuro/versatile-core@0.18.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/vuln-data-source-osv@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/os-distro-metadata@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
        "pkg:maven/org.metaeffekt.core/ae-security@0.154.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.21.3?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.34.1?type=jar",
        "pkg:maven/io.github.nscuro/versatile-core@0.18.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/alpine-common@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/common-config@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.dependencytrack/alpine-model@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/alpine-common@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-api-jdo@6.0.5?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-core@6.0.11?type=jar",
        "pkg:maven/org.datanucleus/javax.jdo@3.2.1?type=jar",
        "pkg:maven/org.glassfish.jersey.ext/jersey-bean-validation@4.0.2?type=jar",
        "pkg:maven/io.swagger.core.v3/swagger-annotations-jakarta@2.2.50?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.datanucleus/datanucleus-api-jdo@6.0.5?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.datanucleus/datanucleus-core@6.0.11?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.datanucleus/javax.jdo@3.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/javax.transaction/javax.transaction-api@1.3?type=jar",
        "pkg:maven/org.glassfish.corba/glassfish-corba-omgapi@4.2.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/javax.transaction/javax.transaction-api@1.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.corba/glassfish-corba-omgapi@4.2.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.ext/jersey-bean-validation@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.2?type=jar",
        "pkg:maven/jakarta.validation/jakarta.validation-api@3.1.1?type=jar",
        "pkg:maven/org.hibernate.validator/hibernate-validator@8.0.2.Final?type=jar",
        "pkg:maven/org.jboss.logging/jboss-logging@3.6.1.Final?type=jar",
        "pkg:maven/jakarta.el/jakarta.el-api@6.0.1?type=jar",
        "pkg:maven/org.glassfish.expressly/expressly@5.0.0?type=jar",
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar",
        "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar",
        "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
        "pkg:maven/org.glassfish.hk2/osgi-resource-locator@3.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.hk2/osgi-resource-locator@3.0.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-client@4.0.2?type=jar",
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar",
        "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar",
        "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
        "pkg:maven/jakarta.validation/jakarta.validation-api@3.1.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.core/jersey-client@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
        "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.validation/jakarta.validation-api@3.1.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.hibernate.validator/hibernate-validator@8.0.2.Final?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml/classmate@1.5.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml/classmate@1.5.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/jakarta.el/jakarta.el-api@6.0.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.expressly/expressly@5.0.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.swagger.core.v3/swagger-annotations-jakarta@2.2.50?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/alpine-infra@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/alpine-common@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/org.dependencytrack/alpine-model@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar",
        "pkg:maven/io.micrometer/micrometer-core@1.16.5?type=jar",
        "pkg:maven/org.datanucleus/javax.jdo@3.2.1?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-api-jdo@6.0.5?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-core@6.0.11?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-rdbms@6.0.11?type=jar",
        "pkg:maven/com.zaxxer/HikariCP@7.0.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.datanucleus/datanucleus-rdbms@6.0.11?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.dependencytrack/alpine-server@5.7.0-alpha.9-SNAPSHOT?type=jar",
      "dependsOn": [
        "pkg:maven/org.dependencytrack/common-datasource@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/org.dependencytrack/alpine-common@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/org.dependencytrack/alpine-infra@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/org.dependencytrack/alpine-model@5.7.0-alpha.9-SNAPSHOT?type=jar",
        "pkg:maven/commons-io/commons-io@2.22.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
        "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar",
        "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@4.0.2?type=jar",
        "pkg:maven/org.glassfish.jersey.media/jersey-media-json-jackson@4.0.2?type=jar",
        "pkg:maven/org.glassfish.jersey.media/jersey-media-multipart@4.0.2?type=jar",
        "pkg:maven/org.glassfish.jersey.ext/jersey-bean-validation@4.0.2?type=jar",
        "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@4.0.2?type=jar",
        "pkg:maven/jakarta.json/jakarta.json-api@2.1.3?type=jar",
        "pkg:maven/org.eclipse.parsson/jakarta.json@1.1.7?type=jar",
        "pkg:maven/io.swagger.core.v3/swagger-annotations-jakarta@2.2.50?type=jar",
        "pkg:maven/org.datanucleus/javax.jdo@3.2.1?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-api-jdo@6.0.5?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-core@6.0.11?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-rdbms@6.0.11?type=jar",
        "pkg:maven/com.zaxxer/HikariCP@7.0.2?type=jar",
        "pkg:maven/org.mindrot/jbcrypt@0.4?type=jar",
        "pkg:maven/com.nimbusds/oauth2-oidc-sdk@11.37.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
        "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-base@2.21.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-json-provider@2.21.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.21.3?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/ch.qos.logback/logback-classic@1.5.32?type=jar",
        "pkg:maven/ch.qos.logback/logback-core@1.5.32?type=jar",
        "pkg:maven/org.owasp/security-logging-common@1.1.7?type=jar",
        "pkg:maven/org.owasp/security-logging-logback@1.1.7?type=jar",
        "pkg:maven/net.logstash.logback/logstash-logback-encoder@8.1?type=jar",
        "pkg:maven/org.eclipse.microprofile.health/microprofile-health-api@4.0.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.2?type=jar",
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.media/jersey-media-json-jackson@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
        "pkg:maven/org.glassfish.jersey.ext/jersey-entity-filtering@4.0.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.module/jackson-module-jakarta-xmlbind-annotations@2.21.3?type=jar",
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.ext/jersey-entity-filtering@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.module/jackson-module-jakarta-xmlbind-annotations@2.21.3?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.media/jersey-media-multipart@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
        "pkg:maven/org.jvnet.mimepull/mimepull@1.9.15?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jvnet.mimepull/mimepull@1.9.15?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
        "pkg:maven/org.glassfish.hk2/hk2-locator@4.0.0-M3?type=jar",
        "pkg:maven/org.javassist/javassist@3.30.2-GA?type=jar",
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2?type=jar",
        "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar",
        "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.hk2/hk2-locator@4.0.0-M3?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@4.0.0-M3?type=jar",
        "pkg:maven/org.glassfish.hk2/hk2-api@4.0.0-M3?type=jar",
        "pkg:maven/org.glassfish.hk2/hk2-utils@4.0.0-M3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@4.0.0-M3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.hk2/hk2-api@4.0.0-M3?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.hk2/hk2-utils@4.0.0-M3?type=jar",
        "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@4.0.0-M3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.hk2/hk2-utils@4.0.0-M3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.javassist/javassist@3.30.2-GA?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/jakarta.json/jakarta.json-api@2.1.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.eclipse.parsson/jakarta.json@1.1.7?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.mindrot/jbcrypt@0.4?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.nimbusds/oauth2-oidc-sdk@11.37.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar",
        "pkg:maven/com.nimbusds/content-type@2.3?type=jar",
        "pkg:maven/net.minidev/json-smart@2.5.2?type=jar",
        "pkg:maven/com.nimbusds/lang-tag@1.7?type=jar",
        "pkg:maven/com.nimbusds/nimbus-jose-jwt@10.9?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.nimbusds/content-type@2.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/net.minidev/json-smart@2.5.2?type=jar",
      "dependsOn": [
        "pkg:maven/net.minidev/accessors-smart@2.5.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/net.minidev/accessors-smart@2.5.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.ow2.asm/asm@9.9.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.nimbusds/lang-tag@1.7?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.nimbusds/nimbus-jose-jwt@10.9?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-base@2.21.3?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-json-provider@2.21.3?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-base@2.21.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.module/jackson-module-jakarta-xmlbind-annotations@2.21.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.21.3?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/ch.qos.logback/logback-classic@1.5.32?type=jar",
      "dependsOn": [
        "pkg:maven/ch.qos.logback/logback-core@1.5.32?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/ch.qos.logback/logback-core@1.5.32?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.owasp/security-logging-common@1.1.7?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.owasp/security-logging-logback@1.1.7?type=jar",
      "dependsOn": [
        "pkg:maven/org.owasp/security-logging-common@1.1.7?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/ch.qos.logback/logback-classic@1.5.32?type=jar",
        "pkg:maven/ch.qos.logback/logback-core@1.5.32?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.21.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/net.logstash.logback/logstash-logback-encoder@8.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/dev.cel/cel@0.12.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.0?type=jar",
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.34.1?type=jar",
        "pkg:maven/com.google.re2j/re2j@1.8?type=jar",
        "pkg:maven/dev.cel/common@0.12.0?type=jar",
        "pkg:maven/dev.cel/compiler@0.12.0?type=jar",
        "pkg:maven/dev.cel/protobuf@0.12.0?type=jar",
        "pkg:maven/dev.cel/runtime@0.12.0?type=jar",
        "pkg:maven/dev.cel/v1alpha1@0.12.0?type=jar",
        "pkg:maven/org.antlr/antlr4-runtime@4.13.2?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.threeten/threeten-extra@1.8.0?type=jar",
        "pkg:maven/org.yaml/snakeyaml@2.5?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.re2j/re2j@1.8?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/dev.cel/common@0.12.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.0?type=jar",
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.34.1?type=jar",
        "pkg:maven/com.google.re2j/re2j@1.8?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/dev.cel/compiler@0.12.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.0?type=jar",
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.34.1?type=jar",
        "pkg:maven/com.google.re2j/re2j@1.8?type=jar",
        "pkg:maven/dev.cel/common@0.12.0?type=jar",
        "pkg:maven/dev.cel/protobuf@0.12.0?type=jar",
        "pkg:maven/org.antlr/antlr4-runtime@4.13.2?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/dev.cel/protobuf@0.12.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.0?type=jar",
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.34.1?type=jar",
        "pkg:maven/dev.cel/common@0.12.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.antlr/antlr4-runtime@4.13.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/dev.cel/runtime@0.12.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.0?type=jar",
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.34.1?type=jar",
        "pkg:maven/com.google.re2j/re2j@1.8?type=jar",
        "pkg:maven/dev.cel/common@0.12.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.threeten/threeten-extra@1.8.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.threeten/threeten-extra@1.8.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/dev.cel/v1alpha1@0.12.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.0?type=jar",
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.34.1?type=jar",
        "pkg:maven/dev.cel/common@0.12.0?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/dev.cel/extensions@0.4.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.34.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jdbi/jdbi3-sqlobject@3.53.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.jdbi/jdbi3-core@3.53.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.ext/jersey-micrometer@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/io.micrometer/micrometer-core@1.16.5?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.2?type=jar",
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/us.springett/owasp-risk-rating-calculator@1.0.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.cyclonedx/cyclonedx-core-java@12.1.0?type=jar",
      "dependsOn": [
        "pkg:maven/commons-codec/commons-codec@1.21.0?type=jar",
        "pkg:maven/commons-io/commons-io@2.22.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
        "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.21.3?type=jar",
        "pkg:maven/com.networknt/json-schema-validator@1.5.9?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.21.3?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.3?type=jar",
        "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar",
        "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.1.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.1.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-server@12.1.9?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-http@12.1.9?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-io@12.1.9?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-http@12.1.9?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-io@12.1.9?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-util@12.1.9?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-io@12.1.9?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-util@12.1.9?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-util@12.1.9?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty.compression/jetty-compression-gzip@12.1.9?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty.compression/jetty-compression-common@12.1.9?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty.compression/jetty-compression-common@12.1.9?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-http@12.1.9?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-io@12.1.9?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-util@12.1.9?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty.compression/jetty-compression-server@12.1.9?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-server@12.1.9?type=jar",
        "pkg:maven/org.eclipse.jetty.compression/jetty-compression-common@12.1.9?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty.ee11/jetty-ee11-servlet@12.1.9?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-security@12.1.9?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-server@12.1.9?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-session@12.1.9?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-security@12.1.9?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-server@12.1.9?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-session@12.1.9?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-server@12.1.9?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.slf4j/jul-to-slf4j@2.0.18?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/net.javacrumbs.shedlock/shedlock-provider-jdbc@7.7.0?type=jar",
      "dependsOn": [
        "pkg:maven/net.javacrumbs.shedlock/shedlock-provider-jdbc-internal@7.7.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/net.javacrumbs.shedlock/shedlock-provider-jdbc-internal@7.7.0?type=jar",
      "dependsOn": [
        "pkg:maven/net.javacrumbs.shedlock/shedlock-core@7.7.0?type=jar",
        "pkg:maven/net.javacrumbs.shedlock/shedlock-sql-support@7.7.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/net.javacrumbs.shedlock/shedlock-core@7.7.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/net.javacrumbs.shedlock/shedlock-sql-support@7.7.0?type=jar",
      "dependsOn": [
        "pkg:maven/net.javacrumbs.shedlock/shedlock-core@7.7.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.asahaf.javacron/javacron@1.4.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.micrometer/micrometer-java11@1.16.5?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/io.micrometer/micrometer-core@1.16.5?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.micrometer/micrometer-registry-prometheus@1.16.5?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/io.micrometer/micrometer-core@1.16.5?type=jar",
        "pkg:maven/io.prometheus/prometheus-metrics-core@1.6.1?type=jar",
        "pkg:maven/io.prometheus/prometheus-metrics-tracer-common@1.6.1?type=jar",
        "pkg:maven/io.prometheus/prometheus-metrics-exposition-formats@1.6.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.prometheus/prometheus-metrics-core@1.6.1?type=jar",
      "dependsOn": [
        "pkg:maven/io.prometheus/prometheus-metrics-model@1.6.1?type=jar",
        "pkg:maven/io.prometheus/prometheus-metrics-config@1.6.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.prometheus/prometheus-metrics-model@1.6.1?type=jar",
      "dependsOn": [
        "pkg:maven/io.prometheus/prometheus-metrics-config@1.6.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.prometheus/prometheus-metrics-config@1.6.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.prometheus/prometheus-metrics-tracer-common@1.6.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.prometheus/prometheus-metrics-exposition-formats@1.6.1?type=jar",
      "dependsOn": [
        "pkg:maven/io.prometheus/prometheus-metrics-exposition-textformats@1.6.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.prometheus/prometheus-metrics-exposition-textformats@1.6.1?type=jar",
      "dependsOn": [
        "pkg:maven/io.prometheus/prometheus-metrics-model@1.6.1?type=jar",
        "pkg:maven/io.prometheus/prometheus-metrics-config@1.6.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.micrometer/micrometer-registry-prometheus-simpleclient@1.16.5?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/io.micrometer/micrometer-core@1.16.5?type=jar",
        "pkg:maven/io.prometheus/simpleclient_common@0.16.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.prometheus/simpleclient_common@0.16.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.prometheus/simpleclient@0.16.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.prometheus/simpleclient@0.16.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.prometheus/simpleclient_tracer_otel@0.16.0?type=jar",
        "pkg:maven/io.prometheus/simpleclient_tracer_otel_agent@0.16.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.prometheus/simpleclient_tracer_otel@0.16.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.prometheus/simpleclient_tracer_common@0.16.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.prometheus/simpleclient_tracer_common@0.16.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.prometheus/simpleclient_tracer_otel_agent@0.16.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.prometheus/simpleclient_tracer_common@0.16.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.mweirauch/micrometer-jvm-extras@0.3.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.21.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents/httpmime@4.5.14?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.cloud.sql/postgres-socket-factory@1.28.3?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.cloud.sql/jdbc-socket-factory-core@1.28.3?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.cloud.sql/jdbc-socket-factory-core@1.28.3?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.jnr/jnr-enxio@0.32.20?type=jar",
        "pkg:maven/com.github.jnr/jnr-unixsocket@0.38.25?type=jar",
        "pkg:maven/com.google.http-client/google-http-client@2.1.0?type=jar",
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
        "pkg:maven/com.google.http-client/google-http-client-gson@2.1.0?type=jar",
        "pkg:maven/com.google.api-client/google-api-client@2.9.0?type=jar",
        "pkg:maven/com.google.apis/google-api-services-sqladmin@v1beta4-rev20260317-2.0.0?type=jar",
        "pkg:maven/com.google.auth/google-auth-library-credentials@1.46.0?type=jar",
        "pkg:maven/com.google.auth/google-auth-library-oauth2-http@1.46.0?type=jar",
        "pkg:maven/com.google.oauth-client/google-oauth-client@1.39.0?type=jar",
        "pkg:maven/dnsjava/dnsjava@3.6.4?type=jar",
        "pkg:maven/com.google.api/gax@2.79.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.34.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.jnr/jnr-enxio@0.32.20?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.jnr/jnr-constants@0.10.4?type=jar",
        "pkg:maven/com.github.jnr/jnr-ffi@2.2.19?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.jnr/jnr-constants@0.10.4?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.github.jnr/jnr-ffi@2.2.19?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.jnr/jffi@1.3.15?type=jar",
        "pkg:maven/com.github.jnr/jffi@1.3.15?classifier=native\u0026type=jar",
        "pkg:maven/org.ow2.asm/asm@9.9.1?type=jar",
        "pkg:maven/org.ow2.asm/asm-commons@9.7.1?type=jar",
        "pkg:maven/org.ow2.asm/asm-analysis@9.7.1?type=jar",
        "pkg:maven/org.ow2.asm/asm-tree@9.7.1?type=jar",
        "pkg:maven/org.ow2.asm/asm-util@9.7.1?type=jar",
        "pkg:maven/com.github.jnr/jnr-a64asm@1.0.0?type=jar",
        "pkg:maven/com.github.jnr/jnr-x86asm@1.0.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.jnr/jffi@1.3.15?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.github.jnr/jffi@1.3.15?classifier=native\u0026type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.ow2.asm/asm-commons@9.7.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.ow2.asm/asm@9.9.1?type=jar",
        "pkg:maven/org.ow2.asm/asm-tree@9.7.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.ow2.asm/asm-tree@9.7.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.ow2.asm/asm@9.9.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.ow2.asm/asm-analysis@9.7.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.ow2.asm/asm-tree@9.7.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.ow2.asm/asm-util@9.7.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.ow2.asm/asm@9.9.1?type=jar",
        "pkg:maven/org.ow2.asm/asm-tree@9.7.1?type=jar",
        "pkg:maven/org.ow2.asm/asm-analysis@9.7.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.jnr/jnr-a64asm@1.0.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.github.jnr/jnr-x86asm@1.0.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.github.jnr/jnr-unixsocket@0.38.25?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.jnr/jnr-ffi@2.2.19?type=jar",
        "pkg:maven/com.github.jnr/jnr-constants@0.10.4?type=jar",
        "pkg:maven/com.github.jnr/jnr-enxio@0.32.20?type=jar",
        "pkg:maven/com.github.jnr/jnr-posix@3.1.22?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.jnr/jnr-posix@3.1.22?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.jnr/jnr-ffi@2.2.19?type=jar",
        "pkg:maven/com.github.jnr/jnr-constants@0.10.4?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.http-client/google-http-client@2.1.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
        "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar",
        "pkg:maven/io.grpc/grpc-context@1.70.0?type=jar",
        "pkg:maven/io.opencensus/opencensus-api@0.31.1?type=jar",
        "pkg:maven/io.opencensus/opencensus-contrib-http-util@0.31.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.grpc/grpc-context@1.70.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.grpc/grpc-api@1.70.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.grpc/grpc-api@1.70.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.opencensus/opencensus-api@0.31.1?type=jar",
      "dependsOn": [
        "pkg:maven/io.grpc/grpc-context@1.70.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.opencensus/opencensus-contrib-http-util@0.31.1?type=jar",
      "dependsOn": [
        "pkg:maven/io.opencensus/opencensus-api@0.31.1?type=jar",
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.http-client/google-http-client-gson@2.1.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.http-client/google-http-client@2.1.0?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.8.9?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.api-client/google-api-client@2.9.0?type=jar",
      "dependsOn": [
        "pkg:maven/commons-codec/commons-codec@1.21.0?type=jar",
        "pkg:maven/com.google.auth/google-auth-library-credentials@1.46.0?type=jar",
        "pkg:maven/com.google.auth/google-auth-library-oauth2-http@1.46.0?type=jar",
        "pkg:maven/com.google.http-client/google-http-client-gson@2.1.0?type=jar",
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
        "pkg:maven/com.google.http-client/google-http-client-apache-v2@2.0.0?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
        "pkg:maven/com.google.http-client/google-http-client@2.1.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.auth/google-auth-library-credentials@1.46.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.auth/google-auth-library-oauth2-http@1.46.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
        "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.0?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/com.google.auth/google-auth-library-credentials@1.46.0?type=jar",
        "pkg:maven/com.google.http-client/google-http-client@2.1.0?type=jar",
        "pkg:maven/com.google.http-client/google-http-client-gson@2.1.0?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
        "pkg:maven/com.google.api/api-common@2.53.0?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.8.9?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.api/api-common@2.53.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
        "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.0?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
        "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.http-client/google-http-client-apache-v2@2.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.http-client/google-http-client@2.1.0?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.apis/google-api-services-sqladmin@v1beta4-rev20260317-2.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.api-client/google-api-client@2.9.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.oauth-client/google-oauth-client@1.39.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.http-client/google-http-client@2.1.0?type=jar",
        "pkg:maven/com.google.http-client/google-http-client-gson@2.1.0?type=jar",
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/dnsjava/dnsjava@3.6.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.api/gax@2.79.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.34.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.slf4j/log4j-over-slf4j@2.0.18?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    }
  ]
}