{
  "bomFormat": "CycloneDX",
  "specVersion": "1.5",
  "serialNumber": "urn:uuid:1c0fa770-e301-41ee-8868-b9d57b263ebb",
  "version": 1,
  "metadata": {
    "tools": {
      "components": [
        {
          "type": "library",
          "author": "OWASP Foundation",
          "group": "org.cyclonedx",
          "name": "cyclonedx-maven-plugin",
          "version": "2.9.1",
          "description": "CycloneDX Maven plugin",
          "hashes": [
            {
              "alg": "MD5",
              "content": "9c7a565cf28cce58557d0c621c5ea4b1"
            },
            {
              "alg": "SHA-1",
              "content": "be882d5a22050bfa9d19090b1420c188617d0e1c"
            },
            {
              "alg": "SHA-256",
              "content": "698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249"
            },
            {
              "alg": "SHA-512",
              "content": "c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0"
            },
            {
              "alg": "SHA-384",
              "content": "d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb"
            },
            {
              "alg": "SHA3-384",
              "content": "80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f"
            },
            {
              "alg": "SHA3-256",
              "content": "142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699"
            },
            {
              "alg": "SHA3-512",
              "content": "af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b"
            }
          ]
        }
      ]
    },
    "component": {
      "type": "application",
      "bom-ref": "pkg:maven/org.dependencytrack/dependency-track@4.14.0?type=war",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "dependency-track",
      "version": "4.14.0",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/dependency-track@4.14.0?type=war",
      "externalReferences": [
        {
          "url": "https://github.com/DependencyTrack/dependency-track/security/advisories",
          "type": "advisories"
        },
        {
          "url": "https://dependencytrack.org/slack",
          "type": "chat"
        },
        {
          "url": "https://docs.dependencytrack.org/",
          "type": "documentation"
        },
        {
          "url": "https://docs.dependencytrack.org/changelog/",
          "type": "release-notes"
        },
        {
          "url": "mailto:security@dependencytrack.org",
          "type": "security-contact"
        },
        {
          "url": "https://www.linkedin.com/company/owasp-dependency-track",
          "type": "social"
        },
        {
          "url": "https://x.com/dependencytrack",
          "type": "social"
        },
        {
          "url": "https://dependencytrack.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git",
          "type": "vcs"
        }
      ]
    }
  },
  "components": [
    {
      "type": "framework",
      "bom-ref": "pkg:maven/us.springett/alpine-common@3.7.0?type=jar",
      "group": "us.springett",
      "name": "alpine-common",
      "version": "3.7.0",
      "description": "An opinionated scaffolding library that jumpstarts Java projects with an API-first design, secure defaults, and minimal dependencies.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "79cb652650992a243dd658528d804ac3"
        },
        {
          "alg": "SHA-1",
          "content": "7838446d27a26478a6a63e7a12ab9e8541f1acbf"
        },
        {
          "alg": "SHA-256",
          "content": "640c003829168311ca44b2082c323bdc3f1e7e22b0e621e7ce74f42144fa4a23"
        },
        {
          "alg": "SHA-512",
          "content": "b09694e9dcd1584669cd29704073dca2d43f67e9483b8203ce56578e07b6b70cc5e81d014906c22a11a06820bfe2cf07ad7319bdb351c41ff79ed8e284042f08"
        },
        {
          "alg": "SHA-384",
          "content": "1ef8511ba764fea8a5d1a51ca6ed176a8fa432ad7d948f486c8222fd4bd7a35997fe66c633e3da267f5f1174fd00c615"
        },
        {
          "alg": "SHA3-384",
          "content": "31b7088a1c13c7c54a59e569877fbad43f7dd54e0a5a55019f250a3290305e318276d48e2bd7a7b60a2c74c82895e5ee"
        },
        {
          "alg": "SHA3-256",
          "content": "cedf979d1fa531e9b3d7ad8c47613e176579ce41fcd52ed6de665d720b142e89"
        },
        {
          "alg": "SHA3-512",
          "content": "881cdf1dcdb7e66c09fcc0df3b4bcb043153d67b5b78bccc62e8708abc470ab933a36498719e397796cf38ea7d8b8c22f4ad87e511c6f32cf8cc7df6aae31c00"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/us.springett/alpine-common@3.7.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/Alpine/alpine-common",
          "type": "website"
        },
        {
          "url": "https://github.com/stevespringett/Alpine/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/stevespringett/Alpine/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/alpine-common",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
      "publisher": "QOS.ch",
      "group": "org.slf4j",
      "name": "slf4j-api",
      "version": "2.0.17",
      "description": "The slf4j API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b6480d114a23683498ac3f746f959d2f"
        },
        {
          "alg": "SHA-1",
          "content": "d9e58ac9c7779ba3bf8142aff6c830617a7fe60f"
        },
        {
          "alg": "SHA-256",
          "content": "7b751d952061954d5abfed7181c1f645d336091b679891591d63329c622eb832"
        },
        {
          "alg": "SHA-512",
          "content": "9a3e79db6666a6096a3021bb2e1d918f30f589d8de51d6b600f8ebd92515a510ae2d8f87919cc2dfa8365d64f10194cac8dfa0fb950160eef0e9da06f6caaeb9"
        },
        {
          "alg": "SHA-384",
          "content": "6ea24f814a9b6ece428cfd0535e2f3b8927005745ef61006b50fdb5a90126ee5ea05650155382b3b755c5bce38ef3944"
        },
        {
          "alg": "SHA3-384",
          "content": "9b1015052f0ec43f9be09764e131834157599611cb52f6fe591c4ac6a8ab4817518f2a4b8871e5e738c8678e93af5557"
        },
        {
          "alg": "SHA3-256",
          "content": "00559b4f4066b4917ba4fe2a6f23111eaeada321112d030910d218ced9084b5e"
        },
        {
          "alg": "SHA3-512",
          "content": "9579c2f7e7516e177c2d493ccc9eb8150978cf19f6f09b28d116f6935239fd56dc6af2b62b3336f79b0b462445550cd1fb5377a07001a6f44aaab6a32fa2fa47"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl": "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
      "externalReferences": [
        {
          "url": "http://www.slf4j.org",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/qos-ch/slf4j/slf4j-parent/slf4j-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.commons",
      "name": "commons-lang3",
      "version": "3.20.0",
      "description": "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang\u0027s hierarchy, or are considered to be so standard as to justify existence in java.lang. The code is tested using the latest revision of the JDK for supported LTS releases: 8, 11, 17, 21 and 25 currently. See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml Please ensure your build environment is up-to-date and kindly report any build issues.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4b29562ded527aa074e1d44f8646dac5"
        },
        {
          "alg": "SHA-1",
          "content": "65897b3e5731220962e659e001904af3c3cbeba9"
        },
        {
          "alg": "SHA-256",
          "content": "69e5c9fa35da7a51a5fd2099dfe56a2d8d32cf233e2f6d770e796146440263f4"
        },
        {
          "alg": "SHA-512",
          "content": "1c72db334ea44f932c35e602b78907865f5bab43e30c871c9be67c8184eaa778f32d7bc3ab525d5921cd28619d3f9babfd483f17de54f007ee07db2e074b0307"
        },
        {
          "alg": "SHA-384",
          "content": "77dd27c4d5e9372c002bd6878d2cfaaec3cf46dd57d65de63d7f2e09351344531cfa81a537b56628ac6db18adee7e484"
        },
        {
          "alg": "SHA3-384",
          "content": "3456de40eef224b3ad195d2f218dd28eacb0da07607aee7ead94bd8d54bd8311d51c28d4066db4bf8b69a2df48c415f5"
        },
        {
          "alg": "SHA3-256",
          "content": "36e3f71352fa14bc580db45a05b09b063392c6d39acf9e24ffa6a67bbc07a336"
        },
        {
          "alg": "SHA3-512",
          "content": "6ecbc05bb5cd3f7537078b0cf51b0a5f7189dfa60c22e5ec0d6b9e2fd3f7fa7566770b5da87e0c9929f48769933c3e3a473fd5cc7231672fca36ab1fee1f8670"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
      "externalReferences": [
        {
          "url": "https://commons.apache.org/proper/commons-lang/",
          "type": "website"
        },
        {
          "url": "https://github.com/apache/commons-lang/actions",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://issues.apache.org/jira/browse/LANG",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/commons-user/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitbox.apache.org/repos/asf/commons-lang.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.micrometer/micrometer-registry-prometheus@1.16.4?type=jar",
      "group": "io.micrometer",
      "name": "micrometer-registry-prometheus",
      "version": "1.16.4",
      "description": "MeterRegistry implementation for Prometheus using io.prometheus:prometheus-metrics-core. If you have compatibility issues with this module, you can go back to io.micrometer:micrometer-registry-prometheus-simpleclient that uses io.prometheus:simpleclient_common.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "04f92fcee5a55881fff40c615764e817"
        },
        {
          "alg": "SHA-1",
          "content": "5d70e8325eaf49000ad83bb7aa3e239f7341df67"
        },
        {
          "alg": "SHA-256",
          "content": "b73390fb0907f11c2a837a6d58eadf9afe45e67b9bc6cc413e89a43659dc9613"
        },
        {
          "alg": "SHA-512",
          "content": "15fd939fb5b7cd7d46aa1852a5215721166ee1db93850617445e44a9feb94cda0d7ab7ddfbe5ebf842bffe769168090bcd973e06d334b515eecfb04000aa24c5"
        },
        {
          "alg": "SHA-384",
          "content": "235b250c6a16a1c86eb464fdbc3f287cda1447fa5d6e69ba488fea05cf07a25c20f21f51c37b05612e163a1dd9e424ce"
        },
        {
          "alg": "SHA3-384",
          "content": "cce1dee2c09f5f0bd9b417cc29c1c65adce9f6c6384e1bd9e8f8a2ec0655373b2499f66e892595db576f058e66124945"
        },
        {
          "alg": "SHA3-256",
          "content": "c596b94bcd59caf73c77f493e55792225aa4085549950f1d2893668d231ab34c"
        },
        {
          "alg": "SHA3-512",
          "content": "37922be7b96cf8c19a1685adb750a691a6b7bdfaa927b1b34600741adc3218dfc8bbb9bcba927c5618c9282cc87a5a0153e0600616205b7825b3c230f3f007b3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.micrometer/micrometer-registry-prometheus@1.16.4?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/micrometer-metrics/micrometer",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/prometheus-metrics-core@1.4.3?type=jar",
      "group": "io.prometheus",
      "name": "prometheus-metrics-core",
      "version": "1.4.3",
      "description": "Core Prometheus metric types",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "bd35856a8c8dbab69058b5638b8e1815"
        },
        {
          "alg": "SHA-1",
          "content": "1f00dc12e0bef05dff593a9abd7a4d626b675b0b"
        },
        {
          "alg": "SHA-256",
          "content": "7ecd546d5238e3d3f5f312f580eaaab10cb05d147597978ab90b78080cc58255"
        },
        {
          "alg": "SHA-512",
          "content": "97dcc911da43133feb5e524d4e0dbb7c1d042370fc67fd2b1bb8241f3bc751759aabff2aed108f43f688dcbe726e9243469f94772d119ae169e32a218b38a79c"
        },
        {
          "alg": "SHA-384",
          "content": "80c74150bce417bc4cda2bd7448e7cafbc4bbc0b39752022d0040f6b5a0f6ed0982515b0a3eaeee095a1be75965d6838"
        },
        {
          "alg": "SHA3-384",
          "content": "04f0961a3d7d8dfccd937810937ff2e0b0912186dd92e159fa5fe92a0136f32bf56f34aab14724a75a3a83918e95e193"
        },
        {
          "alg": "SHA3-256",
          "content": "4e3fb28aea02be1db29ecd1c5dd4dc0e48516ff138db7cea78535628d890ed2c"
        },
        {
          "alg": "SHA3-512",
          "content": "f4e7924728bb79a4175bac660c0a10127198a4679e97d513d2c84d8a9fb55909e49325ab861cf76b9c4a62b293cb121d8dd8d6ff5bf73c73969ef49f74944503"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/prometheus-metrics-core@1.4.3?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/client_java/prometheus-metrics-core",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/prometheus-metrics-model@1.4.3?type=jar",
      "group": "io.prometheus",
      "name": "prometheus-metrics-model",
      "version": "1.4.3",
      "description": "Data model for read-only immutable Prometheus metrics snapshots.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9cfd3913946e59885a5eae3a0b6a5b98"
        },
        {
          "alg": "SHA-1",
          "content": "b18da634ccdc033468c0a17e56996de09b4e6b36"
        },
        {
          "alg": "SHA-256",
          "content": "bc3f1825014a14006626086ea779b62893e647e71d1eab075c0bb65057c245f8"
        },
        {
          "alg": "SHA-512",
          "content": "c3ecdece7d799167f263d138d49b005c057e1b8dc6691f25249c1f549c4163fd9a0e5826c7fee4ec5cdae0c9ac6384c508e620079644ed452e8106cc4f3b6cb4"
        },
        {
          "alg": "SHA-384",
          "content": "4eed4d22e71361672f36e816654361baec9412f796bdb6a21c8dcb31ba4e373478439cef845aaa3a8bc83ac3ade11de5"
        },
        {
          "alg": "SHA3-384",
          "content": "9e8d91a3da0d427b69050744a603bec1054b6a175978c9593924b8f70f63347b1d85da5bc9e02ce36d06e850eeb79a29"
        },
        {
          "alg": "SHA3-256",
          "content": "3b66de4314d08ec0db1a30d3c80f5bb2174c96fc6b6b98e64bbadcb4f6d1d9a8"
        },
        {
          "alg": "SHA3-512",
          "content": "0f8f675852b477df72f63366420579a2334cc3538c89f3a91a98024a0e242c83d65e1901de4a0a000734dda210eb968aaafa6b30d0f367db9700bd5eced4f175"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/prometheus-metrics-model@1.4.3?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/client_java/prometheus-metrics-model",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/prometheus-metrics-config@1.4.3?type=jar",
      "group": "io.prometheus",
      "name": "prometheus-metrics-config",
      "version": "1.4.3",
      "description": "Configuration for Prometheus metrics and exposition formats.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "46714aa1ccfd6a75a06d05b1a5e0c8fb"
        },
        {
          "alg": "SHA-1",
          "content": "785bf741491702f0e755a6a5c9c58a8127db0683"
        },
        {
          "alg": "SHA-256",
          "content": "3da2d5f0123af9e313bcf26f04c1248afeacd1b0d5c3a35f220034604ac0ec47"
        },
        {
          "alg": "SHA-512",
          "content": "d18dd2816af8213c280db992992445768d5d34a3584fe9cbcba2653d937e4f219924090e5686bdcbd05c4b8c877f841a6954414818ca2f9dc7b9eddc7ee4749d"
        },
        {
          "alg": "SHA-384",
          "content": "5676dd8618f7308e00b7b606fec152f33275e9e1bec3186ea9d09564d5ff918cbebd0f9b7763659dd48ad659b7aaeb85"
        },
        {
          "alg": "SHA3-384",
          "content": "f9990db914a472f3487b6d519a5b71fec0fe8b8f90ab5403f79893a33b7563824afe99c886f5a51836a2ac8df181b189"
        },
        {
          "alg": "SHA3-256",
          "content": "ba418ae84eed564ccf0a15800f3bb8cd810aefb637a37b46571d9874bd62eaba"
        },
        {
          "alg": "SHA3-512",
          "content": "2319cec2303024d11b22078a996ce11405d5a352caff41bdd8a0c3c809ab163da1d7ae9564644a1ab8d4112eaee9c0e1f5969c1031f133e1656bed00219f064a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/prometheus-metrics-config@1.4.3?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/client_java/prometheus-metrics-config",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/prometheus-metrics-tracer-common@1.4.3?type=jar",
      "group": "io.prometheus",
      "name": "prometheus-metrics-tracer-common",
      "version": "1.4.3",
      "description": "Common Module for Prometheus integrations with distributed tracing libraries.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "36367a2c2f7e05aa1ec584d6dd9669a1"
        },
        {
          "alg": "SHA-1",
          "content": "67af5fc22c23e695d986a6301e61964efe9c9f80"
        },
        {
          "alg": "SHA-256",
          "content": "b816aaf84e45d591e5f66c5b94c7a789dedf2d705e5bf3eec2ae8730f76c68cd"
        },
        {
          "alg": "SHA-512",
          "content": "ff3367cb1b68fe794bb29cc3b1816910ec490cdf3733f6c785686496a4e74aa76946ef8fa2da5375d0a424cbc62aeb8e6d6dcb8d40e7a75d6f500060fa79fdb1"
        },
        {
          "alg": "SHA-384",
          "content": "407bca99b65a3429653b280feddcf5264fa6676dc8f342eb59f66c5f9fa5d860b5518f3f56381196363ded2757665d69"
        },
        {
          "alg": "SHA3-384",
          "content": "b5c819d9cbc2735e40b01f62ae4b7f656e60767da404c07c555198fd89f1785fd621d3672985d23517b12b03be1f00a5"
        },
        {
          "alg": "SHA3-256",
          "content": "17ca88fec98f41802a5bd882167aeb4276fd610400d3c1edb040a50ed93e63e1"
        },
        {
          "alg": "SHA3-512",
          "content": "078abbce1b31b0bc1a6ad0a7c4673ce93fa86bb42edf7921f3738f99190187a2342f94565219604d4c185f5ddd15876462b747c6039dd56decbbfe35015f5bec"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/prometheus-metrics-tracer-common@1.4.3?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/client_java/prometheus-metrics-tracer/prometheus-metrics-tracer-common",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/prometheus-metrics-exposition-formats@1.4.3?type=jar",
      "group": "io.prometheus",
      "name": "prometheus-metrics-exposition-formats",
      "version": "1.4.3",
      "description": "Prometheus exposition formats.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f1b9f4969a6d4b64ea5b7f1dfab22d0b"
        },
        {
          "alg": "SHA-1",
          "content": "14eeb4e0a6a366d6b7562e4457e2a863b837b5bd"
        },
        {
          "alg": "SHA-256",
          "content": "502ad6b37c44b1a6311f6070a18fc921ffa2e26abb43eaaaf7626aa1b97984b6"
        },
        {
          "alg": "SHA-512",
          "content": "09d85562737dad8c357d3656b0115f558a6c8913d0785fabdbb7b0ecf2115b4f082eb925eef7357ace9999b43aad4954cfa80130d0d89236628a68988ee47b50"
        },
        {
          "alg": "SHA-384",
          "content": "48afc8b8ed11e01d4bdaf6541947e79e71366b2801c76acfbf3c56b323495e9ed6bf0279ae14a9dac4f3ea6a383e0aab"
        },
        {
          "alg": "SHA3-384",
          "content": "fa613e63bff1450cc28567c2fb994aa555e2fb190af0dcd2c15ca1328802113535cea192801a015ed0c68a3012b01315"
        },
        {
          "alg": "SHA3-256",
          "content": "c9d9fdfa4eba30ef26bc168fe33a79e15e2d0f5ac62d03e1ca62689eb02fc7bb"
        },
        {
          "alg": "SHA3-512",
          "content": "e4119826244f67bbccd75d44befc552afa9cba82f76eea28ffd75d1ababde9c20ccd7800b0d46c9f23c0f0b57dc606d3b8ca22fe190508a81b54dd00a9e8f2f2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/prometheus-metrics-exposition-formats@1.4.3?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/client_java/prometheus-metrics-exposition-formats",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/prometheus-metrics-exposition-textformats@1.4.3?type=jar",
      "group": "io.prometheus",
      "name": "prometheus-metrics-exposition-textformats",
      "version": "1.4.3",
      "description": "Prometheus exposition text formats.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "fa00ec1b5682dbc5c6386f7f2d4e8e75"
        },
        {
          "alg": "SHA-1",
          "content": "3a4f58da44fdb1a26bbda60cf38930db62f2f887"
        },
        {
          "alg": "SHA-256",
          "content": "4aeee30d937ae5baf34ca9daced0f84400ec0f034e7beaa8331d9c519d84e3d7"
        },
        {
          "alg": "SHA-512",
          "content": "f37f6e16149f6ac1ce4107dcabaffe6c43ec62ea75a63ef08ef75349a4af15153dcd66798fb3ed99a1681add5c35f719689c980fd235606f0a175dc6a997b4a6"
        },
        {
          "alg": "SHA-384",
          "content": "ba9eeb5adb96935687011e2fadab72e61fc43fab2ee2c3c2b6fee4925da7a6114e69eb9fe09bee1ed401551b82bb4956"
        },
        {
          "alg": "SHA3-384",
          "content": "02c8ebe69c4ca2d42379682c0dd158e6861cdafb8a33aee225d3cfe94815e4e2c799e2d32864579e42c63832f2eb95d5"
        },
        {
          "alg": "SHA3-256",
          "content": "91ed1a0732fba9a4aaa5d11e76415917b02dd4e855e42a3411ab45263d7b3ee8"
        },
        {
          "alg": "SHA3-512",
          "content": "e59e4c7a0a1ad144195315bf10e8d8709759b3d15967e45e42c9823d3ead859e4109a87040bbca6d93a99548d2063251715500ea8ff3da16f97faf1a128ff7ac"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/prometheus-metrics-exposition-textformats@1.4.3?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/client_java/prometheus-metrics-exposition-textformats",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.micrometer/micrometer-registry-prometheus-simpleclient@1.16.4?type=jar",
      "group": "io.micrometer",
      "name": "micrometer-registry-prometheus-simpleclient",
      "version": "1.16.4",
      "description": "MeterRegistry implementation for Prometheus using io.prometheus:simpleclient_common. This module is deprecated in favor of io.micrometer:micrometer-registry-prometheus that uses io.prometheus:prometheus-metrics-core.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e4d4edf2e4988a9a1a8db8a04f8d2813"
        },
        {
          "alg": "SHA-1",
          "content": "e4f065156a1bd82b2a4fb53a8747de498a4a0e0b"
        },
        {
          "alg": "SHA-256",
          "content": "5eb5c7423fdb12476b2de60ea48bbacb00f5c484527777f8e6cf33bce0564bd3"
        },
        {
          "alg": "SHA-512",
          "content": "9f2f095fd934ba3e1decf4c9679c349bcd0f4e884e3912bafa73c6e835b796e4e7d07018d30f3341d43fe4e2e993e540415fa89fe8fc622a76f2b3e8ca6a1b7f"
        },
        {
          "alg": "SHA-384",
          "content": "efd31995f086fb60ee31fbd79b04af9bc626b3b1c5c5494d11a6dc0d91788de3d85f83b59403108e9f04f7b99df9ca0d"
        },
        {
          "alg": "SHA3-384",
          "content": "04143018b57bcd8ba8d093f1fcd40be84c02dcc31b94cc3194d74bb68d6a2cf0c3e8dcdd0975306c293c81a55d7d55da"
        },
        {
          "alg": "SHA3-256",
          "content": "57b39337b73fa9e30ab38c89d9dac4010ea0472598bf945c2f36b75d4f351a13"
        },
        {
          "alg": "SHA3-512",
          "content": "f5caffc9876212ec7d955637208e773296fe6bcf5e3ab30e55089d5821ae5011b25e081cf9f91a279fa9b5b3716919a848dcf5be2aa9d83d8a13c9a35f09623d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.micrometer/micrometer-registry-prometheus-simpleclient@1.16.4?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/micrometer-metrics/micrometer",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/simpleclient_common@0.16.0?type=jar",
      "group": "io.prometheus",
      "name": "simpleclient_common",
      "version": "0.16.0",
      "description": "Common code used by various modules of the Simpleclient.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "bef35be6eef09775ffe092c267729478"
        },
        {
          "alg": "SHA-1",
          "content": "a09a8c790a20309b942a9fdbfe77da22407096e6"
        },
        {
          "alg": "SHA-256",
          "content": "eba6ec26ce7e40cbb8725e05fb83247a9f4f44945b9e7522e3375dde67b9f059"
        },
        {
          "alg": "SHA-512",
          "content": "21eb5680598ebb8c1257990d9aae98069c17b38dba4bf8fbed37ec2a287020401380ea7854430978546529f636bd75455eb65f01b1040630b0b12d191a44be22"
        },
        {
          "alg": "SHA-384",
          "content": "011c23fdaaaf4eaa125cae68fe43573167c7cdd82562ea6cbe553270148a75f901e5e73708f16783b915d8872fc0b943"
        },
        {
          "alg": "SHA3-384",
          "content": "201268d47ebee613ec4645a748a3e968ba2cb7fbddce904b2056129351a4d9d5fbe9103727efc31416eb656271c29acf"
        },
        {
          "alg": "SHA3-256",
          "content": "43b3bdf4aecfb55ac802f6001ad90ef6e4706c12cafd8b95d504b331ae8a873a"
        },
        {
          "alg": "SHA3-512",
          "content": "dbb907bbbc68387cdefb1e251c8e319caf227d4e096de33f693f6fecdd844b273e7b549eca10ffafebe29e1ae4d9aee72eed5ead2b32cebec8dcc103680d20ec"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/simpleclient_common@0.16.0?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/simpleclient_common",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        }
      ]
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/us.springett/alpine-model@3.7.0?type=jar",
      "group": "us.springett",
      "name": "alpine-model",
      "version": "3.7.0",
      "description": "An opinionated scaffolding library that jumpstarts Java projects with an API-first design, secure defaults, and minimal dependencies.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ddb9deb7a5e67de315f904cf4ad02061"
        },
        {
          "alg": "SHA-1",
          "content": "1bd7bee69b44e31bc97eed22568bfe2c9cd0d9f9"
        },
        {
          "alg": "SHA-256",
          "content": "a1f323fae435f957b3ac64b82c93031b9105150a4c90bdb133333a63315b1c0a"
        },
        {
          "alg": "SHA-512",
          "content": "b3826e6ab08a2ed0cd7975402bd884a603cc2eb052f1bdef0ff04ebfaaea72153867159a65f338c789e0790a3ba507bd549c75dd90ccc72a4a9ff858c14a6937"
        },
        {
          "alg": "SHA-384",
          "content": "b2251403a9084e7c33374b856ddc513aceb1f4eefe3df6e65e1ac5dd26e6c5a4a787033169c794eae27fa3df9f71c4bb"
        },
        {
          "alg": "SHA3-384",
          "content": "8d28b838d40526573c2ccb83ed20128588012758928635df26448736d59701cbf8c7d15577d59f55895652a2cddb29c1"
        },
        {
          "alg": "SHA3-256",
          "content": "e2d40454c8d2f043843bcc2a94944d793e6b6ee76cface6549903d20d498c834"
        },
        {
          "alg": "SHA3-512",
          "content": "82d5f06f28693b1798e46a7f013ad1e82f83a86a67afeff12272d292e92b1f19f6e6cc856be348d838346fc077fd564eb91ea87a3a55cb4b09a89e80e12679a9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/us.springett/alpine-model@3.7.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/Alpine/alpine-model",
          "type": "website"
        },
        {
          "url": "https://github.com/stevespringett/Alpine/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/stevespringett/Alpine/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/alpine-model",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.datanucleus/datanucleus-api-jdo@6.0.5?type=jar",
      "group": "org.datanucleus",
      "name": "datanucleus-api-jdo",
      "version": "6.0.5",
      "description": "Plugin providing DataNucleus implementation of the JDO API.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9b7448a21838cae99a8b9f3875d93a08"
        },
        {
          "alg": "SHA-1",
          "content": "30f49348795e1d2e9a8e1613e9dbc6c3f851f1ca"
        },
        {
          "alg": "SHA-256",
          "content": "423ea8da36763d6c17d55434477b7ab2339d3cef5acf67dd30198ef1dd0ed477"
        },
        {
          "alg": "SHA-512",
          "content": "5262a518ccc344692af86a30d51e4d1d9ee2b3167dc16657b37e8cfb2affc3fd73db4df9df5463e4a25097d9eff27c9f305407239e19381cd32c0c7f9f01aaab"
        },
        {
          "alg": "SHA-384",
          "content": "96e3ee21e3958259fcbc3bcd8af53d0814415f027a73bb1a1025c9112406564e65eaff74c874f02d994e6239562a7202"
        },
        {
          "alg": "SHA3-384",
          "content": "8c88668e57a4ccf381e6fb3a9859e8fe15376bd9a0fd4d9b9d771c9f7712459e97edc219dcdf008971f0d06363592d09"
        },
        {
          "alg": "SHA3-256",
          "content": "54562d403842a670b5f4cfa2a272bbb05789bd39f278b52732f1df540c7e33b3"
        },
        {
          "alg": "SHA3-512",
          "content": "55accaf6c0e8a6082d09619351596707df28223929dd313bbfe25abd1f8693c2eb195c0dada149f11dd0aecdfca724edfd67de84152e0a2aa8c39383fbc8b8d2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.datanucleus/datanucleus-api-jdo@6.0.5?type=jar",
      "externalReferences": [
        {
          "url": "http://www.datanucleus.org/#/datanucleus-api-jdo",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/datanucleus/datanucleus-api-jdo",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.datanucleus/datanucleus-core@6.0.11?type=jar",
      "group": "org.datanucleus",
      "name": "datanucleus-core",
      "version": "6.0.11",
      "description": "DataNucleus Core provides the primary components of a heterogenous Java persistence solution. It supports persistence API\u0027s being layered on top of the core functionality.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2493fed928c1eade5a38f4016f1ba7c0"
        },
        {
          "alg": "SHA-1",
          "content": "87fae77204b7032165d6cfb468cb5dafacf39200"
        },
        {
          "alg": "SHA-256",
          "content": "2e2a23d21100e82a8bd0822eebe8bb9f39a8e3ea1ba5e2bb068c24cb0515bd08"
        },
        {
          "alg": "SHA-512",
          "content": "969e5e8b3330e1bd675af05d106f0081dbef25bfea99689a6a051eac96e81907dc8d42e574b464b33fe467c5024a282416f114946ed4374510b4abe7897027d3"
        },
        {
          "alg": "SHA-384",
          "content": "286413cbd9c681561bf5c7d83839893879a9476a0a2a9b60e60d6e161a665e92bef6db57cd9e18b4d13a6ed2a75bbe73"
        },
        {
          "alg": "SHA3-384",
          "content": "afcc830fdadc3c4b7130921ad521f4e0a7fe23b57614ac61f4c2a1d9eae47b56e6a0df82d1ebef82c1cbe1d2244c547d"
        },
        {
          "alg": "SHA3-256",
          "content": "02b169414ef4c5a9d7c79e6e98e86e21071054f035ce4a1ca8fde85aa5f726ef"
        },
        {
          "alg": "SHA3-512",
          "content": "1de064ff2de6452618e7a9f3bc83e91228105722697597e4dc0b836349d21c3d71ff6ee4613433f7da795efba9b56be7bfa3c6854a02587271cd7d4a6001bdb5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.datanucleus/datanucleus-core@6.0.11?type=jar",
      "externalReferences": [
        {
          "url": "http://www.datanucleus.org/#/datanucleus-core",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/datanucleus/datanucleus-core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.datanucleus/javax.jdo@3.2.1?type=jar",
      "group": "org.datanucleus",
      "name": "javax.jdo",
      "version": "3.2.1",
      "description": "The Java Data Objects API (JDO) : a standard interface-based Java model abstraction of persistence, developed by the JCP.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "79f1e95e6d7f1eb191edce207ac6ecd8"
        },
        {
          "alg": "SHA-1",
          "content": "e8d1af5779f95d3c85b641184b605725762a36c3"
        },
        {
          "alg": "SHA-256",
          "content": "61646f544baf75fc7a305410443c5f5f7d219fa7a2cabe3b782950a350ca5d3f"
        },
        {
          "alg": "SHA-512",
          "content": "29580963b5478646b0f3b47ae3387d0bdb5bd86da37afceef6841c32b9db3a4407186fc257855c5c47efbbf1f1bfbff0b45b6ad45101b6dfbed7946a9251fe43"
        },
        {
          "alg": "SHA-384",
          "content": "1845d95a87e9fb954ff3e0c80a0dae62eca817abb3f727d65edc9296a0992e60a7fa57db0a72858afaf9e2d872f6435f"
        },
        {
          "alg": "SHA3-384",
          "content": "e4f04e5be64a1a58ef475cf5b155e6169307dd9636cd4fe6661dd394fe28a0a9ee9dee426291bff62d66885ae35ab2c8"
        },
        {
          "alg": "SHA3-256",
          "content": "3703404351c56d4a658de2012266838fea9741cceb09e7304b4c323e33d88ca3"
        },
        {
          "alg": "SHA3-512",
          "content": "da4b8c30667d67651469ed1a750004a3afbaad1ce8c6697ac29889fd2e78dadbcde07d414161e42bc972017afe83e690329d4ede5e94a67553377ee7c2a7929a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.datanucleus/javax.jdo@3.2.1?type=jar",
      "externalReferences": [
        {
          "url": "http://www.datanucleus.org/#/javax.jdo",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/datanucleus/javax.jdo",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/javax.transaction/javax.transaction-api@1.3?type=jar",
      "publisher": "GlassFish Community",
      "group": "javax.transaction",
      "name": "javax.transaction-api",
      "version": "1.3",
      "description": "Project GlassFish Java Transaction API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6e9cb1684621821248b6823143ae26c0"
        },
        {
          "alg": "SHA-1",
          "content": "e006adf5cf3cca2181d16bd640ecb80148ec0fce"
        },
        {
          "alg": "SHA-256",
          "content": "603df5e4fc1eeae8f5e5d363a8be6c1fa47d0df1df8739a05cbcb9fafd6df2da"
        },
        {
          "alg": "SHA-512",
          "content": "3497cf77352aa1317c70ad1d28e8e7da51337d844c8227a35707209c750ba6f5d644a4ffdbdb10e5fbde204003aa43ff80e9e2ff3164584a7a34d8292266b2bc"
        },
        {
          "alg": "SHA-384",
          "content": "7044d8d5829a777d85e1a987c3e346eb535dd321366bdf32a9e8ed4f52facd0610ac2f3f58b4a1b001893f01fddc5eae"
        },
        {
          "alg": "SHA3-384",
          "content": "d0c1807001e02ce47320be657be055b4777b8b5673c22a78b0574955f7a6105dacc42b46b86ab967dc382cf332da59d8"
        },
        {
          "alg": "SHA3-256",
          "content": "c7c48884317a2d0e1596f201763acbca4ef76462af9172fd5e68aca3465303e1"
        },
        {
          "alg": "SHA3-512",
          "content": "bf053d4fe995cb5c1d6c01320fc73530017ee364de6ae21eb98fa0372b2aa6eff2fa4ac2d9cd5f692c930ee573c2f6226441918123fcfc48b5b4a126d350928c"
        }
      ],
      "licenses": [
        {
          "expression": "(CDDL-1.0 OR GPL-2.0-with-classpath-exception)"
        }
      ],
      "purl": "pkg:maven/javax.transaction/javax.transaction-api@1.3?type=jar",
      "externalReferences": [
        {
          "url": "http://jta-spec.java.net",
          "type": "website"
        },
        {
          "url": "https://maven.java.net/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/javaee/javax.transaction/issues",
          "type": "issue-tracker"
        },
        {
          "url": "javaee-spec@javaee.groups.io",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/javaee/javax.transaction",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.corba/glassfish-corba-omgapi@4.2.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.corba",
      "name": "glassfish-corba-omgapi",
      "version": "4.2.2",
      "description": "A CORBA ORB for Glassfish",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b2eb806fc90b71d6d15391a1c887ae1f"
        },
        {
          "alg": "SHA-1",
          "content": "6e0f5735a51bda8f72dda0e58ba766d16678c7b8"
        },
        {
          "alg": "SHA-256",
          "content": "2d964250e13aa77b5e687669ef4981d44c7b92496b28e439e5fbcc5c7882e0f5"
        },
        {
          "alg": "SHA-512",
          "content": "0e99c7e659bf2613d0436805476c5ed265afbd35648f6367bcd8227c0052b024b675f4c9eb3ec590e24c8f0b989d0392a4c53ec3cb1ce666a7ae566489841482"
        },
        {
          "alg": "SHA-384",
          "content": "253cd42b07fd905e5c5651a0d78d1b33cac48abfdfa8fc2592e982c4e385481ccead57d8bcbe32407f498de1e26f3558"
        },
        {
          "alg": "SHA3-384",
          "content": "cf14029429a406ec32481ac73a7580a4e34f1216f7f85ea29cb35dba8b8ca1e20b59b81b66778ac5b16a3975fcf6f2d8"
        },
        {
          "alg": "SHA3-256",
          "content": "76b8b17d5659c5638709d866cb78ee75b78cbaf53beb649f4ec1b15a47c65347"
        },
        {
          "alg": "SHA3-512",
          "content": "2d8b9be6f6a7149663107ade523c8e274b1f24710132ae09d09591632ceb108296f26214f9c9ce4cec40f074bf97f715284d136cb01ce886e8745b38eb5b3f48"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.corba/glassfish-corba-omgapi@4.2.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/proposals/eclipse-orb/glassfish-corba-omgapi",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/eclipse-ee4j/orb/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/orb-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/orb/glassfish-corba-omgapi",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.ext/jersey-bean-validation@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.ext",
      "name": "jersey-bean-validation",
      "version": "4.0.2",
      "description": "Jersey extension module providing support for Bean Validation (JSR-349) API.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "254cf1628fdd8561cab876a729c98564"
        },
        {
          "alg": "SHA-1",
          "content": "db93aaf2cd038fbb77f0184b1df866782592e2df"
        },
        {
          "alg": "SHA-256",
          "content": "e92fa0ab1e4882e9c749b09ec7f5019ec3f165bdcef3888f0a1988c1da7347ae"
        },
        {
          "alg": "SHA-512",
          "content": "d127fdeba362dcb5677ee4d68bfd7e53b2636087de4769cff73c43553a5b39a6588b83d971147fa6c73af18fc2946c0c7349af221523a162c30094c7dcb5ecc9"
        },
        {
          "alg": "SHA-384",
          "content": "bb1940e39ab4580e898c652b4cc3b74560ac7eecaf97e4e06f0023ff0193d288f4407625ee713ede5604163b97515441"
        },
        {
          "alg": "SHA3-384",
          "content": "ac63c81e85bd6cd0dd05b6185b99c79552a57ac696d49b4f4abeb97b86c01572c07483e6acc9a81ef244c3fb086b39d3"
        },
        {
          "alg": "SHA3-256",
          "content": "10b67f4c5c7790e224b48885ca67c27802468a8505bc7ab039041322b27637c4"
        },
        {
          "alg": "SHA3-512",
          "content": "e2628bac3fbd61793d403f4cf5e93ca5a1c8e1c2a9210c4a1b02ed8bc314f7c06ef4bf340b0bd0b62a15f2999552016f3aa5b68cd00e2cbd6f14afbfc1545e08"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.ext/jersey-bean-validation@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-bean-validation",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "http://localhost",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/project/jersey-bean-validation",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.inject",
      "name": "jakarta.inject-api",
      "version": "2.0.1",
      "description": "Jakarta Dependency Injection",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "72003bf6efcc8455d414bbd7da86c11c"
        },
        {
          "alg": "SHA-1",
          "content": "4c28afe1991a941d7702fe1362c365f0a8641d1e"
        },
        {
          "alg": "SHA-256",
          "content": "f7dc98062fccf14126abb751b64fab12c312566e8cbdc8483598bffcea93af7c"
        },
        {
          "alg": "SHA-512",
          "content": "f186b2ada470abba1cc3b4f8c4373d940fb7c71a051b2c26f7c204ad4dfb69235fbf3f9c33da36d744cb90f52d921c51d76c0ff263bacb35eafb66cab83dc47d"
        },
        {
          "alg": "SHA-384",
          "content": "405bd297a73901f013d48a0da028d04d400f3e61f4997c0e7297eb08120670a0e242e0002db8f130c33ab16cb02feb2d"
        },
        {
          "alg": "SHA3-384",
          "content": "4db7e54434d0a208c876868f5595b808f2728c0455feaa752ab7b569a2186fc37cb891c9aa0076de3d08f6da6ff06eba"
        },
        {
          "alg": "SHA3-256",
          "content": "3a5aba9f1ff1a130b76af886123eb375fa578498490df3dc60bb7ce7d59e9404"
        },
        {
          "alg": "SHA3-512",
          "content": "00bba8efc2d6e7f0a509b321868d75f1aaf0681a750d089d913bde8424ab7bb88aadf49de6e291e352523e4f8c117b1b48033ff31d4d665dcc43c4c6ea000ba9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/injection-api",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/eclipse-ee4j/ee4j/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/injection-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.core",
      "name": "jersey-common",
      "version": "4.0.2",
      "description": "Jersey core common packages",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "727c798720203d12c8e41bbefcd3e66d"
        },
        {
          "alg": "SHA-1",
          "content": "0f45e98ad8798ee80a3904d32fffdab62c1cbbd6"
        },
        {
          "alg": "SHA-256",
          "content": "83466815c46d8f813509411986a22d1d3a2abe572b15b03078f98bc020154538"
        },
        {
          "alg": "SHA-512",
          "content": "8deadb5f070eea6d25523d8e634394f13183124aa673e5b08751371c558c49bb428452d07c74cfb477f7da53e3827818bb0ff3715fa97a19b515976a9d9fd65a"
        },
        {
          "alg": "SHA-384",
          "content": "fe3592ead798bfbe2d28093e589f2f73d73314e134f49e186ebf338c6f4ca030def8b982fc0b5fc6f9dc0c4d090d6cf7"
        },
        {
          "alg": "SHA3-384",
          "content": "17afad77ae4b187499349ffdaa877b80cf51da0e573407ab3ff550ff8f4e44f60de4861cce0a8c7ffc9f02edd688e5b9"
        },
        {
          "alg": "SHA3-256",
          "content": "5920f7c36054a487d8a66a8541fd69cf60fb01d96f6c9da1f05a52f6fbd56d50"
        },
        {
          "alg": "SHA3-512",
          "content": "fd0dc5c6ba36eae0cfaac1f2cc02676c87cf899bff7f21d3f367499a7695dab26aaa122a9a442156cd86b86dfd8a158bbaa832bfd1be89b2b902bddde043e7cb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "name": "The GNU General Public License (GPL), Version 2, With Classpath Exception",
            "url": "https://www.gnu.org/software/classpath/license.html"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/jersey-common",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "http://localhost",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/jersey-common",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.hk2/osgi-resource-locator@3.0.0?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.hk2",
      "name": "osgi-resource-locator",
      "version": "3.0.0",
      "description": "Eclipse Enterprise for Java (EE4J) is an open source initiative to create standard APIs, implementations of those APIs, and technology compatibility kits for Java runtimes that enable development, deployment, and management of server-side and cloud-native applications.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "de9e96f2606a6f86def8659e9762c163"
        },
        {
          "alg": "SHA-1",
          "content": "5483c94aa9a7e16319abaec0a6c74c999678feac"
        },
        {
          "alg": "SHA-256",
          "content": "a1866ccfddaa29f18da5d39df662894ab2dd9902994a5000e7644f6cc1e37e55"
        },
        {
          "alg": "SHA-512",
          "content": "ff7e7fc1656bd6f938f69186aa6be1379aacdd4ba9724735c7613d76edf4496d5ff74589bbb83d42c98a22620c6eaa17319d77f878f206744be3e8677f3cba09"
        },
        {
          "alg": "SHA-384",
          "content": "65739334c0f2f3f877a4a14b4d8009711f05d37d9ab4ad3e89560c0a7635011e3dc24ab3ee31ad3f19396bc320d9962b"
        },
        {
          "alg": "SHA3-384",
          "content": "dc6237482f129cb62e8bc16233174d36d76c114b2a51de64505374105a7099454143d18e4e2700e34f6aa497740dcbc4"
        },
        {
          "alg": "SHA3-256",
          "content": "b02549e92eb21dc206488d6d7cade6f94867c537646c9ab3009fd4c119a73c2c"
        },
        {
          "alg": "SHA3-512",
          "content": "d0ed41c9b5d0fe75a12d8dbfa65df17e6d2380c25e52436929d9eaa8154f474e66447e518dbee445c4c94660882a20f509b6f69aff8081805802b7a34d518f1c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.hk2/osgi-resource-locator@3.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j/hk2-extra-parent/osgi-resource-locator",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/eclipse-ee4j/ee4j/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2-extra/osgi-resource-locator",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.core",
      "name": "jersey-server",
      "version": "4.0.2",
      "description": "Jersey core server implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d938a53dc417de9bc60f3158068dd1c4"
        },
        {
          "alg": "SHA-1",
          "content": "5b684689d7d36001b883eca81b00e4597f31f414"
        },
        {
          "alg": "SHA-256",
          "content": "c92030c36d6b72cea53464f954e23260ed1ad3559cbb653264497d83882a9aba"
        },
        {
          "alg": "SHA-512",
          "content": "df351826bf9b32dc4f76293029f9202b9141d939532e839afe1bfa504137644ef5156874eefa299db2f7e17fa204e2f7a390b87a3f3ad62282db622078546cd4"
        },
        {
          "alg": "SHA-384",
          "content": "4e00f26790de2a10b90285f7bc3ff0b094c8fb3c1870ef556920f698dcdb61809d2929448c044a686520256e007645d6"
        },
        {
          "alg": "SHA3-384",
          "content": "152cdbab19536c2c3f3d3189e58143253e4cbf35146314097da457cefacf0b96dc6aba4eb3c37195baa87fb8550f1744"
        },
        {
          "alg": "SHA3-256",
          "content": "71d88e8db96d993601980beeaf55d28e5bbbac8ba3438bd6e409ee8fed7e51dd"
        },
        {
          "alg": "SHA3-512",
          "content": "555f64a84060dd85c5ed5df97221e2a5d38d465f58a1cd60f33ad602163d858f6d08b44cf2a3e40b466db2b839e5c1a902b6ad1997edc04ea993fa15cf10c2c5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "name": "The GNU General Public License (GPL), Version 2, With Classpath Exception",
            "url": "https://www.gnu.org/software/classpath/license.html"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/jersey-server",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "http://localhost",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/jersey-server",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.hibernate.validator/hibernate-validator@8.0.2.Final?type=jar",
      "group": "org.hibernate.validator",
      "name": "hibernate-validator",
      "version": "8.0.2.Final",
      "description": "Hibernate\u0027s Jakarta Bean Validation reference implementation.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1adda123292ba2627d03a696d8c7e76a"
        },
        {
          "alg": "SHA-1",
          "content": "220e64815dd87535525331de20570017f899eb13"
        },
        {
          "alg": "SHA-256",
          "content": "2f2224a5a19bdcfa73540e9ff5c971b6c425ad80415876f305259fe873a15b2f"
        },
        {
          "alg": "SHA-512",
          "content": "3b4c68e41a245050addba3d5a856fad838e6a27fb0b8c13d34200274e13e0b3aa04c3f3d3cd883ceed880f0683093022625ed4db9522fc557782b8ad9668902d"
        },
        {
          "alg": "SHA-384",
          "content": "4addce04dd4599547dd81a02bb38426087edc11fc929ddc04790536264aa4bd4a62337b0f91604fe47b2b898039828f7"
        },
        {
          "alg": "SHA3-384",
          "content": "bcd829d013c6bb110a5d9dee2b4249678e41d670c9a7beb8b0c7ac52b7fae90be75997ef54a17900e8ef42e7afc171de"
        },
        {
          "alg": "SHA3-256",
          "content": "a1ff9dd13a537d46735504b4b3074277102c31f1b13eef40ba65537c25e1a9e6"
        },
        {
          "alg": "SHA3-512",
          "content": "db82be4ff0ca253beac177cf9fe474e3d448081a439e85e949f8f1d3a857b41c249c1bbebad1219b45a4ed580284b444c0aade591e907457e2d43fdc3f56cb60"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.hibernate.validator/hibernate-validator@8.0.2.Final?type=jar",
      "externalReferences": [
        {
          "url": "http://hibernate.org/validator/hibernate-validator",
          "type": "website"
        },
        {
          "url": "http://ci.hibernate.org/view/Validator/",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://hibernate.atlassian.net/projects/HV/summary",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/hibernate/hibernate-validator/hibernate-validator",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml/classmate@1.5.1?type=jar",
      "publisher": "fasterxml.com",
      "group": "com.fasterxml",
      "name": "classmate",
      "version": "1.5.1",
      "description": "Library for introspecting types with full generic information including resolving of field and method types.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e91fcd30ba329fd1b0b6dc5321fd067c"
        },
        {
          "alg": "SHA-1",
          "content": "3fe0bed568c62df5e89f4f174c101eab25345b6c"
        },
        {
          "alg": "SHA-256",
          "content": "aab4de3006808c09d25dd4ff4a3611cfb63c95463cfd99e73d2e1680d229a33b"
        },
        {
          "alg": "SHA-512",
          "content": "7fc4764eb65227f5ba614698a5cf2f9430133f42ec6e2ae53b4c724ee53f258541a0109fe0659e0b9e45729b46c95c00227e696b8d1addcd772c85f877658c9a"
        },
        {
          "alg": "SHA-384",
          "content": "28b4780b2353ebc08dbc02c9a343527a9062a0455bfb4ab135cb639c03e5dfd9c2250a835c44d5f17d275667c2009694"
        },
        {
          "alg": "SHA3-384",
          "content": "b194ace8f1f49f410286bd859866678b95a1b2c6f73e41f48291eb7438dffea57aaa9b177459038b6997771ce4d1cee1"
        },
        {
          "alg": "SHA3-256",
          "content": "50234c94efed4c816eb77bd2f70b869c9f89ddf8ee73dc25e354f4d0b81b3e1f"
        },
        {
          "alg": "SHA3-512",
          "content": "9886421726066b313a62283a6811b76d904ea1c1e9b7b2d850cb47afa189b03cdef053c8f7f6b79e77f2269c45f8cc2ed75c3389e96594b50987fef311d5a25f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml/classmate@1.5.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/java-classmate",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/FasterXML/classmate/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/java-classmate",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jboss.logging/jboss-logging@3.6.1.Final?type=jar",
      "publisher": "JBoss by Red Hat",
      "group": "org.jboss.logging",
      "name": "jboss-logging",
      "version": "3.6.1.Final",
      "description": "The JBoss Logging Framework",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "acab989faf62db02c092448e95614fab"
        },
        {
          "alg": "SHA-1",
          "content": "886afbb445b4016a37c8960a7aef6ebd769ce7e5"
        },
        {
          "alg": "SHA-256",
          "content": "5e08a4b092dc85b337f0910a740571d8720cfa565fabd880a8caf94a657ca416"
        },
        {
          "alg": "SHA-512",
          "content": "3dee7fadc04407538248def38fd0ae885c2aa454e2a38ecaaf7ef74abc1505f4efcd3e1a4e024c9f28d37fabb663c19cc3f29b7641b3094d5a504e93730c4a22"
        },
        {
          "alg": "SHA-384",
          "content": "26b1ba129bd9cd1777ba90da087d343698b1f7fa48b855ce0a1030afc1c7ae81433f75e7b8293eb42fc063ce35386280"
        },
        {
          "alg": "SHA3-384",
          "content": "7fbed126ae79578a4136d769f31d9d879e14cd0f0b78ec91515be7cfce5fea7f1c1ca10bf752d19edd5511d3d4ef5254"
        },
        {
          "alg": "SHA3-256",
          "content": "0de02a61df5dc9fbb8e9a344a8744356f3e867b4567ca2baa0bbf16a8763de01"
        },
        {
          "alg": "SHA3-512",
          "content": "2c7b522c04afab22900222f287da17c1526b3b3fd6a9376298613112918afb050af3d8ead2239be3e7dc3337ae74a636bf1963a1bc56426996b0f7283681bb3c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jboss.logging/jboss-logging@3.6.1.Final?type=jar",
      "externalReferences": [
        {
          "url": "http://www.jboss.org",
          "type": "website"
        },
        {
          "url": "https://issues.redhat.com/",
          "type": "issue-tracker"
        },
        {
          "url": "http://lists.jboss.org/pipermail/jboss-user/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jboss-logging/jboss-logging/tree/main/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.el/jakarta.el-api@6.0.1?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.el",
      "name": "jakarta.el-api",
      "version": "6.0.1",
      "description": "Jakarta Expression Language defines an expression language for Java applications",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a98f097e059552a75748fcdd067e5c16"
        },
        {
          "alg": "SHA-1",
          "content": "c7c4a2eb1e40e0ff45ab5e2e52bd77d8c7a75176"
        },
        {
          "alg": "SHA-256",
          "content": "7e84b5bed49de32b79cc5e85d90b6f5adb1a953ac67283adbb41c1e297f9c605"
        },
        {
          "alg": "SHA-512",
          "content": "fbab7bdf18e9bfb316b519a8c3b3d1f2e769e3f318b72e46cf33621f2942b84eede9b97970ff46fe29b54f8d61cb0df9e584d371f10e56bf0050d7727eb0ee23"
        },
        {
          "alg": "SHA-384",
          "content": "8c9c0712f90e359567fb2f080a18d38227ebd3096730980aeec86ee290b79f79cb4cf9888f72944ac240c01330828344"
        },
        {
          "alg": "SHA3-384",
          "content": "3c82d728737f09f400956a25664b008a307a359f33084ae9304ecf850b2b8448b27a7f017a6630299b7bd7ea4dddc239"
        },
        {
          "alg": "SHA3-256",
          "content": "2e870db1b8d460705534cba4ccd57b2d8247db1ff9bba831e2b2aef28261b4ea"
        },
        {
          "alg": "SHA3-512",
          "content": "d7eba15a92c49d1061ed4ac4c6a298dcd5b17896d8de214d5ad560624c2e2c855e9846626821754c47b898dea656ab516138d0ef607d5faf7c1dbed8c660ee6f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "name": "GNU General Public License, version 2 with the GNU Classpath Exception",
            "url": "https://www.gnu.org/software/classpath/license.html"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.el/jakarta.el-api@6.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.el",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/eclipse-ee4j/el-ri/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/el-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/el-ri",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.expressly/expressly@5.0.0?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.expressly",
      "name": "expressly",
      "version": "5.0.0",
      "description": "Jakarta Expression Language Implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d4448c69fe69ebca37b2c76e62e385c3"
        },
        {
          "alg": "SHA-1",
          "content": "78637fec7db6414c3ad32f3aa9e5d6610a299e5b"
        },
        {
          "alg": "SHA-256",
          "content": "b0c872737bb8381921b304d0952854666d1ba320b9b3c5bf4d70a09a86b61524"
        },
        {
          "alg": "SHA-512",
          "content": "8abd592d1fd70ef7fac5d0c1debe59dddea59dd82262bae016b44c506ceb68bb0619f464a07e553cc6885d527e1b8b8571e8975ca040c7864baba2349f30b725"
        },
        {
          "alg": "SHA-384",
          "content": "dc233d0838d2912d2473b8b6f5988145f4116dc2b139ea0378e78f260ed4c7609c954875c21fa579c4901f3202b3ca61"
        },
        {
          "alg": "SHA3-384",
          "content": "d946ffea99369b9933d07076f88a605a8b724edbc1d771ec92db145e6a68e447ac261efd9a4cdb74dce38827f75bd7d4"
        },
        {
          "alg": "SHA3-256",
          "content": "a46f1d62e482167ead93bc3f1261852cbd968e8fc7b68b399685d0bf6eb095d7"
        },
        {
          "alg": "SHA3-512",
          "content": "5e23912f838fe9487d5c0ab44d806e05f1754df1d18f1f7231a32975a73d7747edab4166903b5cbdc6ef002efc4a768b10baa4d7dabcb1c29bca61e9ab923347"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "name": "GNU General Public License, version 2 with the GNU Classpath Exception",
            "url": "https://www.gnu.org/software/classpath/license.html"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.expressly/expressly@5.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.expressly",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/eclipse-ee4j/expressly-ri/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/expressly-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/expressly-ri",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.ws.rs",
      "name": "jakarta.ws.rs-api",
      "version": "4.0.0",
      "description": "Jakarta RESTful Web Services",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9b7cc90c000f193157d60d95caf45972"
        },
        {
          "alg": "SHA-1",
          "content": "c27a67f84ca491efcb3fa68f4df926e8a110069e"
        },
        {
          "alg": "SHA-256",
          "content": "6368b126cbcf34e694bb9ba5b9fe3e5040b7acea7ce622e636d698bb085fd2a6"
        },
        {
          "alg": "SHA-512",
          "content": "e423f90e5f20d133986c60c3fc2f63cfc74531d51b57bf38942cf8e603d8c6817005708117b0bb07e242eae3ba6e1cf23c6ded8fb2776274a9382505ea726ac1"
        },
        {
          "alg": "SHA-384",
          "content": "494b2962ad17d9477d58125cd99d4c0e52e58e10b7ad81e66196649da6651a3187d1ccf64e642083d0a6e54c70f07401"
        },
        {
          "alg": "SHA3-384",
          "content": "1803d40582c05b6956cfeb2cfc7b39c03f2211d4d8511b2b9df2fc4c5830f5a1f8e05d86731f4b168caa3a78bae28d69"
        },
        {
          "alg": "SHA3-256",
          "content": "5e91619ebc4cc811f1639acf926dc4935ac38808d5d834b6d6f26784d7299e9b"
        },
        {
          "alg": "SHA3-512",
          "content": "48c8ed0acd56c83a0d9413bdaa950c92345ac0f36491745e8675b96909c35311fcb05bd80839d0d1247eb5b373754ce5d922d99d06cd1ef9f6063a491e51d671"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception",
            "url": "https://www.gnu.org/software/classpath/license.html"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/jakartaee/rest/jakarta.ws.rs-api",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/jakartaee/rest/issues",
          "type": "issue-tracker"
        },
        {
          "url": "jaxrs-dev@eclipse.org",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jakartaee/rest/jakarta.ws.rs-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.swagger.core.v3/swagger-annotations-jakarta@2.2.44?type=jar",
      "group": "io.swagger.core.v3",
      "name": "swagger-annotations-jakarta",
      "version": "2.2.44",
      "description": "swagger-annotations-jakarta",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "14e8f05ac19cd6847ae6e3b4040a21d1"
        },
        {
          "alg": "SHA-1",
          "content": "217714238dd714197c0cb5beba98cfc20da6d26a"
        },
        {
          "alg": "SHA-256",
          "content": "b992385c1ec3b8f5f0d273c3038d279a051f53a34e07b40e641d9fd6d50cde3a"
        },
        {
          "alg": "SHA-512",
          "content": "141f74c5d20312acea7e8a7fb4c73c4056fba78a812d31ae737d272b13206a635a455a100c509327f2c7780117840796786941e7e9b396ce14cd002562ee69b4"
        },
        {
          "alg": "SHA-384",
          "content": "89ccc676712035e723fd92092d28023965b901639bdbae646caa87e81e936f49804dc082cf4116d1b7e10070dfab1279"
        },
        {
          "alg": "SHA3-384",
          "content": "40a8fd2e84be00bc23890b79cbd25b2aba2eab752378bc2971f73a48c6280b62d26ed350f8b7ee80cd2eec6ebfb991d7"
        },
        {
          "alg": "SHA3-256",
          "content": "7b73e03e7bdcb52fe04a9594019fdd85e440ea00dedba38b5b4d6e5112a8d605"
        },
        {
          "alg": "SHA3-512",
          "content": "b76a01c0c462e754184108bb1e6fcad9612c2177aa522f033896bdcb7e9d8e9b85f5c5bb781e8310676fd1909cdb2b18900d2b19e04a07a9c8962173f3171ccf"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.swagger.core.v3/swagger-annotations-jakarta@2.2.44?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/swagger-api/swagger-core/modules/swagger-annotations-jakarta",
          "type": "website"
        },
        {
          "url": "https://github.com/swagger-api/swagger-core/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://groups.google.com/forum/#!forum/swagger-swaggersocket",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/swagger-api/swagger-core/modules/swagger-annotations-jakarta",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/us.springett/alpine-infra@3.7.0?type=jar",
      "group": "us.springett",
      "name": "alpine-infra",
      "version": "3.7.0",
      "description": "An opinionated scaffolding library that jumpstarts Java projects with an API-first design, secure defaults, and minimal dependencies.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6e3135647a2870048aa8a1686039d352"
        },
        {
          "alg": "SHA-1",
          "content": "6a3b8c977a03eb93ae4c804ad419999554318085"
        },
        {
          "alg": "SHA-256",
          "content": "2ba2a75eec7aec0b9bc7d21414dd3f00389092b312fb62d0a246d7177a7e522a"
        },
        {
          "alg": "SHA-512",
          "content": "5807efd0ad72604d7798541ee772aea6a9c81dd5899337480a764c945b13a61df414371db7e5d5d4207407fc96f707d3ffc9afdafec2cebebfefef5fc9680793"
        },
        {
          "alg": "SHA-384",
          "content": "0e2d3789df45355ddfc583fe5aa0267a6e8ded6006de6f1860fdc97f6fde3de0e4afad1f5439adbcc0f978cb1f20d6b1"
        },
        {
          "alg": "SHA3-384",
          "content": "b93987d07891226fabcac716b7919fd20458b290908802ef5fa75cc33b05c5258e128fcddaf403f4b158286b91bfdbb8"
        },
        {
          "alg": "SHA3-256",
          "content": "cd128fad42d668be906daff68cfc4aa663773e8c0239ed407e4af92374ad86a6"
        },
        {
          "alg": "SHA3-512",
          "content": "2ec9925d7ef30557908d86f8aa0a531a64ed456557fb9f838067ef02ffb32a1bf67c6647188c273941cfd48489c0f3be7645d4e25a01b093e79267184ede4201"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/us.springett/alpine-infra@3.7.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/Alpine/alpine-infra",
          "type": "website"
        },
        {
          "url": "https://github.com/stevespringett/Alpine/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/stevespringett/Alpine/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/alpine-infra",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.commons",
      "name": "commons-collections4",
      "version": "4.5.0",
      "description": "The Apache Commons Collections package contains types that extend and augment the Java Collections Framework.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d564105594035b363b193d8ce3c18b98"
        },
        {
          "alg": "SHA-1",
          "content": "e5cf89f0c6e132fc970bd9a465fdcb8dbe94f75a"
        },
        {
          "alg": "SHA-256",
          "content": "00f93263c267be201b8ae521b44a7137271b16688435340bf629db1bac0a5845"
        },
        {
          "alg": "SHA-512",
          "content": "ee43c513ac9dcbd7dd23b5cbb4ea5f65a2e10cdfbb403d080b87e778b3b45062315522297c41eca514a9a946228ad7650f0a572d5b78effb8260dd8084131988"
        },
        {
          "alg": "SHA-384",
          "content": "73db8eb3e79569b3fa62aefdce413e6ea250b9853953cb75b9d5ce0f2f35b59b6e86ef708326a608ff20d95bdade8522"
        },
        {
          "alg": "SHA3-384",
          "content": "7a9c035fa846cdcebd4331eb86ed31a67595518299a8bee54597c1eb663aee63214553a561a510b929035266c2a4800b"
        },
        {
          "alg": "SHA3-256",
          "content": "614c41bfd8f9c6c1c1e5667c5be45587c3021b780937ad62f54d17051f425086"
        },
        {
          "alg": "SHA3-512",
          "content": "3cfd12ec2d03ed29b682123cedae422a4c6dc459034a7e0ab5f00ccd422cb9a2ec423a08b953119c426569b888157a6d80aa0e0c63debea50c5c54c481e2eff5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar",
      "externalReferences": [
        {
          "url": "https://commons.apache.org/proper/commons-collections/",
          "type": "website"
        },
        {
          "url": "https://github.com/apache/commons-parent/actions",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://issues.apache.org/jira/browse/COLLECTIONS",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/commons-user/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitbox.apache.org/repos/asf?p=commons-collections.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.datanucleus/datanucleus-rdbms@6.0.10?type=jar",
      "group": "org.datanucleus",
      "name": "datanucleus-rdbms",
      "version": "6.0.10",
      "description": "Plugin for DataNucleus providing persistence to RDBMS datastores.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "00e2a7b9d8b69091a931d7195b4c6b50"
        },
        {
          "alg": "SHA-1",
          "content": "0bf9d3ef17d21993bc75c8fdd6e99b2ce8bdbfc8"
        },
        {
          "alg": "SHA-256",
          "content": "b3970a11dbd48679f47ba781d5e5c7b0a626a8bff469010ed49c533f39dd0ce3"
        },
        {
          "alg": "SHA-512",
          "content": "ce8a40aef9a0c8bf25f0e836a773dc5f3e9170531e41c065357148994afa0eff794e36ab5e0e68ebca588320b68195e77c2171628e1f2d2ba1c888a081bb6709"
        },
        {
          "alg": "SHA-384",
          "content": "4ee5ba2bb88fdff371a6aca813a410b3e2a4f82916fb9cc64cf6ae388df7b328b72f00e2b89ae1487bbb8d69d542d79d"
        },
        {
          "alg": "SHA3-384",
          "content": "691f3864219f2cdfb977de6e92c846c9489f4461396bbd960d023fa63077bff31187f95475c1492cdee10cdf8b80fe31"
        },
        {
          "alg": "SHA3-256",
          "content": "05208a086d05ade5c69dba5127e9b68531db033b01db2c75874c947ae2a09cdc"
        },
        {
          "alg": "SHA3-512",
          "content": "01ee02f06db751705bdb56520527fc92656bf2d43d8ddf329c8b47b9b86d6ac9c1731ae6675240da3c42d9c10cfe16875855da75eecc26b03ea6f8a02ef4655f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.datanucleus/datanucleus-rdbms@6.0.10?type=jar",
      "externalReferences": [
        {
          "url": "http://www.datanucleus.org/#/datanucleus-rdbms",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/datanucleus/datanucleus-rdbms",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.zaxxer/HikariCP@7.0.2?type=jar",
      "publisher": "Zaxxer.com",
      "group": "com.zaxxer",
      "name": "HikariCP",
      "version": "7.0.2",
      "description": "Ultimate JDBC Connection Pool",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c36937c742c20cbdc7bcb47019e33151"
        },
        {
          "alg": "SHA-1",
          "content": "c2b43c946b86a14a96342379e22b004c56c6166d"
        },
        {
          "alg": "SHA-256",
          "content": "f1e612fa27345be3107a85431e8a8aeb205c15364ab2f2d411e40a9d7bb08095"
        },
        {
          "alg": "SHA-512",
          "content": "fab69440ecf96687ac9cd69d19503a824f7bec74d97329ee6f8568981200799a1503df5517b9e0322a8d139fc71d6af193314890716ff8f0fd52163dad6f0c6c"
        },
        {
          "alg": "SHA-384",
          "content": "b14c735ebeeb00e113c159cbc22b579ebe9676949a0c50f478bdc54daad8370d13954fc8df7b751ce6b3ab978fbfc43c"
        },
        {
          "alg": "SHA3-384",
          "content": "ecbcb443c087f455cc0e15f65736f9559a79e6375c4686830ede2e653d9dc79c36bb99b537f242f0f8a8acf3d5f22d56"
        },
        {
          "alg": "SHA3-256",
          "content": "3ff38f8630222d165d6ac18696a780e19d8e70019210a59a1dbff293de0b2db2"
        },
        {
          "alg": "SHA3-512",
          "content": "7ca91f467a107c528c8da8ea75a3503d8aa88fc4ac521e2d5d0359c28c4f8997bf472bc0445089a77f1a0efa0513fd9304de9bfd6ed4b14288b87461046b2e1b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.zaxxer/HikariCP@7.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/brettwooldridge/HikariCP",
          "type": "website"
        },
        {
          "url": "https://github.com/brettwooldridge/HikariCP/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/brettwooldridge/HikariCP",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.javassist/javassist@3.30.2-GA?type=jar",
      "publisher": "Shigeru Chiba, www.javassist.org",
      "group": "org.javassist",
      "name": "javassist",
      "version": "3.30.2-GA",
      "description": "Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation simple. It is a class library for editing bytecodes in Java.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f5b827b8ddec0629cc7a6d7dafc45999"
        },
        {
          "alg": "SHA-1",
          "content": "284580b5e42dfa1b8267058566435d9e93fae7f7"
        },
        {
          "alg": "SHA-256",
          "content": "eba37290994b5e4868f3af98ff113f6244a6b099385d9ad46881307d3cb01aaf"
        },
        {
          "alg": "SHA-512",
          "content": "046c5b87732ef28540c56f88891238e49ac15fcc23e1f13e0b12de816831ba3de54e68a727b6163877a7b19b13f1362c0e6affa2664af1fdac5748632ed7a09e"
        },
        {
          "alg": "SHA-384",
          "content": "d1dfb87ac4d7797ea07098b7814190eed3aa16e86dd792916ff7f86c30ad456dd153f9ae4e77f13cee03e23dd3cfb24b"
        },
        {
          "alg": "SHA3-384",
          "content": "f70abfcb1b0d9e7903171bf52fe34b33ceffa9c53b697fabac9f2d3e02b8621446f7b2471d44e2cb70862e559b4d36b2"
        },
        {
          "alg": "SHA3-256",
          "content": "cf3f1d9150d71a6f23a749c24d355accb133991a9272110c5fa0ccff73220367"
        },
        {
          "alg": "SHA3-512",
          "content": "e294c989c20271f42a4bf0c63cbb691cb2fa284088c8a846983aa0e4948b4325131b8829b210214f539d30eb4e20b14c06f4b164208488719512739d78dfd454"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MPL-1.1"
          }
        },
        {
          "license": {
            "id": "LGPL-2.1-only"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.javassist/javassist@3.30.2-GA?type=jar",
      "externalReferences": [
        {
          "url": "https://www.javassist.org/",
          "type": "website"
        },
        {
          "url": "https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://jira.jboss.org/jira/browse/JASSIST/",
          "type": "issue-tracker"
        },
        {
          "url": "scm:git:git@github.com:jboss-javassist/javassist.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.jsonwebtoken/jjwt@0.13.0?type=jar",
      "publisher": "jsonwebtoken.io",
      "group": "io.jsonwebtoken",
      "name": "jjwt",
      "version": "0.13.0",
      "description": "Legacy dependency. Please update your dependencies as documented here: https://github.com/jwtk/jjwt#installation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ff80a0df149223b573a5b1591ff2154d"
        },
        {
          "alg": "SHA-1",
          "content": "e04acb8858ec802101ad8471add3cb10a00ec966"
        },
        {
          "alg": "SHA-256",
          "content": "d9eed7982516f6ee3072ed8b7f3183d79422d4bcdf0595f4f68260e32b205113"
        },
        {
          "alg": "SHA-512",
          "content": "76572c4b48137ef5ebfe79f445738bf4e64ff37042b4643e14b3ddfa6f28832ca62ed5d992793567da2c288f6bb4f402d3cd861a65759a4df74e032ddfcb0731"
        },
        {
          "alg": "SHA-384",
          "content": "8e7e0d36ad0c2b2de66c16ce9abb897e923e0f1837da361db6724ecfc9865ded7a6efb11776a6bbcf14ac5619783d4f3"
        },
        {
          "alg": "SHA3-384",
          "content": "56bbc9525d82fb243bd200f5fd789710edb6cc6f7b90a7a83870bfe413ef31c35232ed47d466b39e178400794f4e118b"
        },
        {
          "alg": "SHA3-256",
          "content": "edb6e5dceacffadbad39e988e088a495b14d1492e0e16218d2d3101267fbc10d"
        },
        {
          "alg": "SHA3-512",
          "content": "e59654adb704cd1f56bb8052ebbf8b1c3e167f909940ee674e19be9b1ab8d388c64b3194300d7305b2d7fd8afdc3ce314d138b01e78a38f622ef1ba63a23bb77"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.jsonwebtoken/jjwt@0.13.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/jwtk/jjwt/jjwt",
          "type": "website"
        },
        {
          "url": "https://travis-ci.org/jwtk/jjwt",
          "type": "build-system"
        },
        {
          "url": "https://ossrh-staging-api.central.sonatype.com/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/jwtk/jjwt/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/jwtk/jjwt.git/jjwt",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.jsonwebtoken/jjwt-api@0.13.0?type=jar",
      "publisher": "jsonwebtoken.io",
      "group": "io.jsonwebtoken",
      "name": "jjwt-api",
      "version": "0.13.0",
      "description": "JSON Web Token support for the JVM and Android",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a9a60d4e3c640348092beff5b4d88a6a"
        },
        {
          "alg": "SHA-1",
          "content": "ce631a0342b08953355f333b488d2b03445b9f3e"
        },
        {
          "alg": "SHA-256",
          "content": "5af8a971c7215acb6c3708794a3912c56eb7066ca3b1ee73f87988c9e0d6c067"
        },
        {
          "alg": "SHA-512",
          "content": "b76e643bab5da0116484bb636e5f139d53e3c580aa07fa9ff9efb9f552b19f14a0902111ebca65094647f6f2d9ba45805e3185d149f0d9d13b8e84e5f575c84e"
        },
        {
          "alg": "SHA-384",
          "content": "e08e26e44ac341dff5058c57b9d6c1ce25db5b8f06b44d3e65cb53febccbb9ad6a58aaa0af88c84c9a5c541c4b9b2cd4"
        },
        {
          "alg": "SHA3-384",
          "content": "4e208f7f2c8706ea1881741b79057b64df0dc4205130bd9ce2babfb29c72dd3d37f442807e2baa69d1c4ea81a156f443"
        },
        {
          "alg": "SHA3-256",
          "content": "aba4649f871a7b0817d7b347270f2c6bd3e877e4cb62bf9e7ecb19ed73d48c22"
        },
        {
          "alg": "SHA3-512",
          "content": "80a6cac7a45fb7801b46a30bf66112c6c67308789c51bfc148692b736de21505178f1ace84c82747380f8a93b5d581d212ed7b9ea3872a9101ab0c59fcbefbd2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.jsonwebtoken/jjwt-api@0.13.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/jwtk/jjwt/jjwt-api",
          "type": "website"
        },
        {
          "url": "https://travis-ci.org/jwtk/jjwt",
          "type": "build-system"
        },
        {
          "url": "https://ossrh-staging-api.central.sonatype.com/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/jwtk/jjwt/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/jwtk/jjwt.git/jjwt-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.jsonwebtoken/jjwt-impl@0.13.0?type=jar",
      "publisher": "jsonwebtoken.io",
      "group": "io.jsonwebtoken",
      "name": "jjwt-impl",
      "version": "0.13.0",
      "description": "JSON Web Token support for the JVM and Android",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e3ca3f21f21b8a1c78cd3977adadfdf2"
        },
        {
          "alg": "SHA-1",
          "content": "9e7c70dd7014909556755fb01c465dd184b4b1d9"
        },
        {
          "alg": "SHA-256",
          "content": "b351baaa302889a416e83683f110948017cee671303262522d4ba477688ca89f"
        },
        {
          "alg": "SHA-512",
          "content": "70c4e43e41f93a9a9ec47fb74b115bb2a7df7df25ea3413208799802af2b91c9e606042a8b64cf85684914deac9f12b5ef65f4377702668a9562dbecdd65ef4f"
        },
        {
          "alg": "SHA-384",
          "content": "edb3d6c04da1ef6e61d665d08078a249a80b6e6372ed70d0416c6e645af3eae295cfa5d8bc53d4cd7ddc321ab95ca824"
        },
        {
          "alg": "SHA3-384",
          "content": "ff0dd699b2b00f6bda970837d5d284e60a873e178c53a0677a01c2fdcc5d31474b3e2285c9b2dda8c8ece0c08693504e"
        },
        {
          "alg": "SHA3-256",
          "content": "24d1fd3a57b1939be928690dd5899b012f6593825090226ae315c7aac7c52c9e"
        },
        {
          "alg": "SHA3-512",
          "content": "70d93cee82b7b5fb6383335395f4e59a50acd8e7add35543649c2e1c8b680285b5aa8ebcb05f97d1fc0c3b93558e01c3b54ae5608a34944bd7d997280a68fe94"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.jsonwebtoken/jjwt-impl@0.13.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/jwtk/jjwt/jjwt-impl",
          "type": "website"
        },
        {
          "url": "https://travis-ci.org/jwtk/jjwt",
          "type": "build-system"
        },
        {
          "url": "https://ossrh-staging-api.central.sonatype.com/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/jwtk/jjwt/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/jwtk/jjwt.git/jjwt-impl",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.jsonwebtoken/jjwt-jackson@0.13.0?type=jar",
      "publisher": "jsonwebtoken.io",
      "group": "io.jsonwebtoken",
      "name": "jjwt-jackson",
      "version": "0.13.0",
      "description": "JSON Web Token support for the JVM and Android",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "da00e5b45c15207041a11488ce975c97"
        },
        {
          "alg": "SHA-1",
          "content": "cfe37531887657716ec20b5ef22f22b32e8bf4a8"
        },
        {
          "alg": "SHA-256",
          "content": "e5ca43b49deca1ad818b2572f0af4d902370205089bdcd15d5dbb6095d17416b"
        },
        {
          "alg": "SHA-512",
          "content": "e7cb878ab8718edc00cf6faa11342c3719dad5e7e1146d20357cd6d4096ed25efec1f7ba0bdfc8a0d8eb4fda0ad35cc47cf14381b298653ae35a5d83258850b1"
        },
        {
          "alg": "SHA-384",
          "content": "cb393894e5cac96b108aa78470a016887d623a9031a02455618474a280bd04488172fc75e74fe7ffa906bab739540f1f"
        },
        {
          "alg": "SHA3-384",
          "content": "bfccb8d80ce4bb09d38f3c0afccf8a400f7d2a63a60940ab6736fe8e041644cc4216046f9253871ca84bce92147e08fe"
        },
        {
          "alg": "SHA3-256",
          "content": "8565b5e5f12b4da2043a4e9f4d8817c12afb705db35529d0600b21f076893aff"
        },
        {
          "alg": "SHA3-512",
          "content": "c42344232296ee46346639aec5a07816144feba63c72413ca9d5275f7eaf27dcf6aed5d06ae2e8a5a3eb59e16bf35b4fcda0b3b5215dd869ca012586e6cc41d9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.jsonwebtoken/jjwt-jackson@0.13.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/jwtk/jjwt/jjwt-jackson",
          "type": "website"
        },
        {
          "url": "https://travis-ci.org/jwtk/jjwt",
          "type": "build-system"
        },
        {
          "url": "https://ossrh-staging-api.central.sonatype.com/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/jwtk/jjwt/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/jwtk/jjwt.git/jjwt-jackson",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/us.springett/alpine-server@3.7.0?type=jar",
      "group": "us.springett",
      "name": "alpine-server",
      "version": "3.7.0",
      "description": "An opinionated scaffolding library that jumpstarts Java projects with an API-first design, secure defaults, and minimal dependencies.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "41485831378671690a22213d0a868cc6"
        },
        {
          "alg": "SHA-1",
          "content": "0ffe21fd9bb3170db6b2a1c82097593175a0a1a9"
        },
        {
          "alg": "SHA-256",
          "content": "d4ca57726fef7c3be0fcf7997f18c189c1c8e35747e7992296eb17c401808c9c"
        },
        {
          "alg": "SHA-512",
          "content": "48e2ff8faddd39cb1d23a79e308f528c0de3ed8941a51996e19452a079188e4391c3cb3519e22fce5a34251e2695b591848e69f6ca5e33f86a30fe4481668eee"
        },
        {
          "alg": "SHA-384",
          "content": "198c733cb1d9c00710f82224b2ea9c5c1310df7fd52a76f8593bbef60c5357147e8291047fcce567001d9b2c96b8317f"
        },
        {
          "alg": "SHA3-384",
          "content": "95539a01a44c6e77af7baad775f2769ba453dae5d605f36d088a7262da4e8873381cd6908dabc39d631317eb72c217af"
        },
        {
          "alg": "SHA3-256",
          "content": "158f6f279ea04786ab5fb357807148adc20e2135e83bb2947d18361400929945"
        },
        {
          "alg": "SHA3-512",
          "content": "f5ce3b5354289f49a4789934273457d614d6e7c289f5015e1327b8e35b1a8f52ad0ff77b230df230e6504e16972da916df0dc2d92e236a67956cf15c9b474ad4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/us.springett/alpine-server@3.7.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/Alpine",
          "type": "website"
        },
        {
          "url": "https://github.com/stevespringett/Alpine/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/stevespringett/Alpine/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/alpine-server",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/commons-io/commons-io@2.21.0?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "commons-io",
      "name": "commons-io",
      "version": "2.21.0",
      "description": "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "bc7e020873f086ede85f97bd9f013215"
        },
        {
          "alg": "SHA-1",
          "content": "52a6f68fe5afe335cde95461dd5c3412f04996f7"
        },
        {
          "alg": "SHA-256",
          "content": "7d643a2afea8b058b762aa6fb90e5b256f6c729739f8b3784c3370ddc609e88d"
        },
        {
          "alg": "SHA-512",
          "content": "7ac1aa4d834cd7cdecaee223a64c63d481810c73dfdb5109f402234a05cadf754e414cead99072f5140d4f7042ee084161935fb28129a631d908d989c5bbac5d"
        },
        {
          "alg": "SHA-384",
          "content": "97c07e5c4f62484c98b6777f63ab032ee09eeb1c9ddae8332890126df9c665afb9cd554db02495171738720d23c53732"
        },
        {
          "alg": "SHA3-384",
          "content": "e3e44c9f4a5f4075fb62a438a84015fe2abf878e9793835a7816dc3c35141bb79fe96dfdc6bb5aef96b7c5bbbcf453c1"
        },
        {
          "alg": "SHA3-256",
          "content": "1f8f4ce25b7169452dabb10ce843b3246378ea55c1971acd2300e417747b3a68"
        },
        {
          "alg": "SHA3-512",
          "content": "175630adf10305aeb31d737f833021a25582ffe2ef66fda6e7f694598af9c68cebbd205ade469eca4faaf6b9d349244289e62179d9cf48d93427090e2c008cf8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/commons-io/commons-io@2.21.0?type=jar",
      "externalReferences": [
        {
          "url": "https://commons.apache.org/proper/commons-io/",
          "type": "website"
        },
        {
          "url": "https://github.com/apache/commons-io/actions",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://issues.apache.org/jira/browse/IO",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/commons-user/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitbox.apache.org/repos/asf?p=commons-io.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.core/jersey-client@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.core",
      "name": "jersey-client",
      "version": "4.0.2",
      "description": "Jersey core client implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9c61cbd9c4fc6749f0dc2338ea0eb870"
        },
        {
          "alg": "SHA-1",
          "content": "15a14c04c458dc9eafc12af7d33ed43fd78dab04"
        },
        {
          "alg": "SHA-256",
          "content": "91fd986ee7c7fa468b2f601d7a2cdf9bfad6ce4fa0fbf5d4f7e6d0c07c12a023"
        },
        {
          "alg": "SHA-512",
          "content": "3121c7fa53d914bb2af504ca183b245bc3184fb080f1d1b2cc0721c733be3e6c4b8cda1c4860ce0646ccd921ea83f6d145af529fa595fe6aacb4bc14644b7250"
        },
        {
          "alg": "SHA-384",
          "content": "754112b2b37246559223abb5d8cf6828ef82507b732c2abe2bdbf28c343cd1815266ddfedb7e8a16797547cda70cd053"
        },
        {
          "alg": "SHA3-384",
          "content": "334b0e0352e584761bedab51a1220f6d1ba8d4cd4221a9cc6fd1ce90d528e5f00c1fe716bdf06b9babb8f757f0740ea0"
        },
        {
          "alg": "SHA3-256",
          "content": "4ea8a1ec58dfa91a85277f085b64b3d5c979984bb50ebe60900b335f21f5ebf5"
        },
        {
          "alg": "SHA3-512",
          "content": "808a3272d41658fcfe831cc2b482968d3962544ffcf8d00d45096f80bfb37b4415b6cb72e1f608f42f04a397ba843f677a8970fcb18267aede08b1c8ad20c928"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.core/jersey-client@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/jersey-client",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "http://localhost",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/jersey-client",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.containers",
      "name": "jersey-container-servlet",
      "version": "4.0.2",
      "description": "Jersey core Servlet 3.x implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "25818f2d34a03809a4e2a1a4949aa3c5"
        },
        {
          "alg": "SHA-1",
          "content": "e49f6b43e8f35fc42d78aadebf9ce675be83eb2a"
        },
        {
          "alg": "SHA-256",
          "content": "9317b4c9cc8f86906fe6f64b2ae613d7b586d7fb396cd13eaf615a2d5bb142ae"
        },
        {
          "alg": "SHA-512",
          "content": "f881cd95bd25fae560bf52771a3e869cfe732c5ac99aae1645a014da92a2f5db7b6e2353dfdfa595e3f39aa85a1516a0b45b71b33d226d5af8fb1aaca3a9492b"
        },
        {
          "alg": "SHA-384",
          "content": "a71eea737f5a1a65ba648fe4e315f5f7a5731649199fa4c925146592639642ee48b15939f30277c8b27022294394dc1a"
        },
        {
          "alg": "SHA3-384",
          "content": "b4ca6ab8e6eb625bbafe472a8c5be3aa3b93e296345243e4ef5f8a29b37a517954b41829a7d9a214bdc0c02976d3a48a"
        },
        {
          "alg": "SHA3-256",
          "content": "49b2b2914f513aa873f17692bb67b324c9109ce9b8ea95db11e2c92101c4e4fa"
        },
        {
          "alg": "SHA3-512",
          "content": "887968d759326a48839b736ed1f44cc444f6c6e2895219c4886323eb417ae8ef824e4d87b9739906e84fd101073be0eddb2b0e1e2b9a66f19cb7ef37b86bd193"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-container-servlet",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "http://localhost",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/project/jersey-container-servlet",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.media/jersey-media-json-jackson@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.media",
      "name": "jersey-media-json-jackson",
      "version": "4.0.2",
      "description": "Jersey JSON Jackson (2.x) entity providers support module.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "35bc0ebd87e351b294c4c2d80a49637d"
        },
        {
          "alg": "SHA-1",
          "content": "49a43c8e343340e8a91671d14a4e71bf6bcca832"
        },
        {
          "alg": "SHA-256",
          "content": "efa2fdad26e994adde4f827c11e44ab5fd3cf3c3e0aa4f99e8eefd1b83449fa7"
        },
        {
          "alg": "SHA-512",
          "content": "c57f5a439c0fec721d8776afe4947d004bb77a3beae809bf71cfe621f6a3aad3342450529a0e0d0696dce691bf3ab35c167829aa60829db903f5b5b73998b5ba"
        },
        {
          "alg": "SHA-384",
          "content": "f324740990411a83622cd12bdefb3e89cfb02c4ea703f4b6a693033b906f0c51b36ff28bb6ff38e5de1553b8e56b8e09"
        },
        {
          "alg": "SHA3-384",
          "content": "67024bf3a7e0eb78074482c54a6bb8edde46152a8421b0018948592358b548c653049d1cfea3c46d2f2e6a43696d260c"
        },
        {
          "alg": "SHA3-256",
          "content": "929d16ec5a727e2fb44e970048f7b9afb15af7e3cfe8ae6927faf9214ce1bc9e"
        },
        {
          "alg": "SHA3-512",
          "content": "9e21c8523d65bb618302f96ab10914fe217e60d18ec6ef3ebea51fdccd8c0fe8c5e6b159a59d257134448c152dde8496e4b23e054d55254465f0797fa5e1a703"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "name": "The GNU General Public License (GPL), Version 2, With Classpath Exception",
            "url": "https://www.gnu.org/software/classpath/license.html"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.media/jersey-media-json-jackson@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-media-json-jackson",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "http://localhost",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/project/jersey-media-json-jackson",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.ext/jersey-entity-filtering@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.ext",
      "name": "jersey-entity-filtering",
      "version": "4.0.2",
      "description": "Jersey extension module providing support for Entity Data Filtering.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6a9d18c10c375eaf87da84354bdbea31"
        },
        {
          "alg": "SHA-1",
          "content": "ebe669571bf00ea4030cfd17c3593ad1d334662d"
        },
        {
          "alg": "SHA-256",
          "content": "633afbf5f3c1ae53aeffbec1f486a878446f19ec8df42b2f795cb06620d1db90"
        },
        {
          "alg": "SHA-512",
          "content": "db48c6417f847d2f51b41d15315c6e73ed3a50e8b3f3b767f05c3f50827bc64359a9132a76283913ea753e840bfb96b0aa602e92b8b8818cb80d47fed11eb4f9"
        },
        {
          "alg": "SHA-384",
          "content": "c290248a96e5ccbc7bda48f0ac8312f829c801921aa1614066595b0f7395af94d67732bb4684834db85c1fa59db96d76"
        },
        {
          "alg": "SHA3-384",
          "content": "53d6d7c09162840e7bed9f1fb7a4bbf761c641b9701d8d562b3233e866cb424887120e7933dbcaea37d9951b67579773"
        },
        {
          "alg": "SHA3-256",
          "content": "189e43a565898a7fa96814e1c2430033a3e85f053958dc5c9c803e26385f899c"
        },
        {
          "alg": "SHA3-512",
          "content": "8789df3ed80682cc9bcdc0706c967a6749490a7b00f2a017fb9c5f1a500a14f2ddd2ff3596a95c0e44d86b156eb1be4b75a4b8bdb44aa4087323b6908716fd09"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.ext/jersey-entity-filtering@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-entity-filtering",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "http://localhost",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/project/jersey-entity-filtering",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.module/jackson-module-jakarta-xmlbind-annotations@2.21.1?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.module",
      "name": "jackson-module-jakarta-xmlbind-annotations",
      "version": "2.21.1",
      "description": "Support for using Jakarta XML Bind (aka JAXB 3.0) annotations as an alternative to \u0022native\u0022 Jackson annotations, for configuring data-binding.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "86fb4aae0fdeab4b6de1503bba801e37"
        },
        {
          "alg": "SHA-1",
          "content": "8b90392be110f279a22e6103aefef54b4274e863"
        },
        {
          "alg": "SHA-256",
          "content": "d859fc54a54578521fab875815e90c4fb93d547af1c30311dad5eb7363e4a837"
        },
        {
          "alg": "SHA-512",
          "content": "cf61516eca8852a56b56f3f676fedf3901d9ce52050c9c864e5fc62c0b4c1bb0a2ba74896cf78f825308db0b4b7f1a7561c7bb285a845b1d3c713fc730e03fa8"
        },
        {
          "alg": "SHA-384",
          "content": "62d0ba935594e1e34e637c6ea483fe51bec6c521d5ce9ad1250cffbb024b35807d25e88b08279b466263aa8d462ce899"
        },
        {
          "alg": "SHA3-384",
          "content": "de21eec40bd772c994af1ba8e23dabc3f63de9e0200a5b0ef1f37fd9b82db4b51bc244b7976a19fbe81dabff0074c68b"
        },
        {
          "alg": "SHA3-256",
          "content": "37aae76b5d9654fff363632406465746874966e99ac9ead04fe655de710f0e73"
        },
        {
          "alg": "SHA3-512",
          "content": "6c651c5b0f6ab544a662f62cdc37ea4f1a7df07d646b7be283082cf795841045218e21a8eab64345805b68f92be5d291ea767979da88f615c10efe4078e2c5f9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.module/jackson-module-jakarta-xmlbind-annotations@2.21.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-modules-base",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/FasterXML/jackson-modules-base/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-modules-base/jackson-module-jakarta-xmlbind-annotations",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.xml.bind",
      "name": "jakarta.xml.bind-api",
      "version": "4.0.2",
      "description": "Jakarta XML Binding API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0c8f9991081def819435c3ff36e4d93f"
        },
        {
          "alg": "SHA-1",
          "content": "6cd5a999b834b63238005b7144136379dc36cad2"
        },
        {
          "alg": "SHA-256",
          "content": "0d6bcfe47763e85047acf7c398336dc84ff85ebcad0a7cb6f3b9d3e981245406"
        },
        {
          "alg": "SHA-512",
          "content": "2e57ce867ae3592959243ab9d7d064b09d9587933c98f89f5d5eeb8fe70556a53fea6db91520a2e086555684e8917f4001741bd8ffb07d26c59fe95c13d71fa0"
        },
        {
          "alg": "SHA-384",
          "content": "7ac5da337fccfa426b48691febed0d874a8e9a6a230bb7a53169f902e5b499778106f7b710afbe133dbd7bfacca693a0"
        },
        {
          "alg": "SHA3-384",
          "content": "fc952425a51459a5d18dc7b6315625c55889e1b92e700450c84205506e5107ca4c7c8bc449190220bf471db3dcbf9c8a"
        },
        {
          "alg": "SHA3-256",
          "content": "a78dd7c5883b16cf899495930e653650005c71b4d9b509e56cac4665778d715e"
        },
        {
          "alg": "SHA3-512",
          "content": "bdf9db79b8ade9421c3f5fc497ebe13a552be5852d99cedfa38bb6c760c8bf190f88204ab6e02442db5fb24378afc6112297c5a582d4e721de71285405a6429d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/jakartaee/jaxb-api/jakarta.xml.bind-api",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/jakartaee/jaxb-api/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jaxb-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jakartaee/jaxb-api.git/jakarta.xml.bind-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.media/jersey-media-multipart@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.media",
      "name": "jersey-media-multipart",
      "version": "4.0.2",
      "description": "Jersey Multipart entity providers support module.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "aae6111826bc8092f33c8e80de9c120d"
        },
        {
          "alg": "SHA-1",
          "content": "f5400fc442af3cdcc46f0204f2b6072402aaca9d"
        },
        {
          "alg": "SHA-256",
          "content": "b9bbd74fa5337753c1f96e2ef1e9ab5c7ab1ad3b8fe1c4f719a311e8f3821aed"
        },
        {
          "alg": "SHA-512",
          "content": "75a380ec7fee2a1a04327cc765ea6a52e1b70da3a91dc921cbc221085b1541e68e40d5c743a6227c86d2d74a65cfe68b05ec1fbce42ac739f6a5e4498c8dcdd6"
        },
        {
          "alg": "SHA-384",
          "content": "f09f5dcd92f1960593f1909c13813774658f735e8a875502c9061c51cc6a78d5195d1973ea346809d837d25e3dff2ee4"
        },
        {
          "alg": "SHA3-384",
          "content": "07030c4ab91f627b75f8d93460e45e4966db068a6a06fc2108a2cde14360685717d4669d0311885687d787085e79c97a"
        },
        {
          "alg": "SHA3-256",
          "content": "d4110cad7c9d2fb29775aa789b662dfda3b70755706d90815eaaf0ee0c3f5d4d"
        },
        {
          "alg": "SHA3-512",
          "content": "ecd7b48b0e3069d4441f9a9f357552ba7f15a952fab0d71e52bfac349c04492c80687f849b88d2b22b85ee1dc902d56a9b7cf1c20d9c0440bfea5113798d290c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.media/jersey-media-multipart@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-media-multipart",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "http://localhost",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/project/jersey-media-multipart",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jvnet.mimepull/mimepull@1.9.15?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.jvnet.mimepull",
      "name": "mimepull",
      "version": "1.9.15",
      "description": "Provides a streaming API to access attachments parts in a MIME message.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "fdc35a1eae84c5a60c95d617551d4a06"
        },
        {
          "alg": "SHA-1",
          "content": "60f9a7991ad9ec1a280db8deea216a91c10aae74"
        },
        {
          "alg": "SHA-256",
          "content": "b9f586bf8844b14a33e75fe7a4b94896dc80d80b732d128777e287af14c836fa"
        },
        {
          "alg": "SHA-512",
          "content": "d80e7f2550272edefe8eebace17c8b836d72602bfff67007c6463d4c7b02a36b97467f23d358601d97882160533ed110da938082994434e2312fb0c4e0f2a19e"
        },
        {
          "alg": "SHA-384",
          "content": "dea380fc137e9784a6c6d114c0a12d4a415baa21e2ce188b952ee1bfa59baaa53e133a0c5fcde9ff1abdbf4dbe93a58b"
        },
        {
          "alg": "SHA3-384",
          "content": "c4d8fc6eff8b9325c07f037484d49e1a52ad580237ba247eec92617e15be03501862b7f64b334919077e124bb94975c5"
        },
        {
          "alg": "SHA3-256",
          "content": "648e6b07265e79912cf8191efdaf316a7f2d317e79d7e4e9b7e323556da74fac"
        },
        {
          "alg": "SHA3-512",
          "content": "14672a4a8dd2a5fe1d437a1204de922eb668ff76c72dae0acc4438fa54eb25a2f6232c75038a391428544b3e77a0a6290d84a99b9c60ea7ce743561ca9b4e1ba"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.jvnet.mimepull/mimepull@1.9.15?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/metro-mimepull",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/eclipse-ee4j/metro-mimepull/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/metro-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/metro-mimepull",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@4.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.inject",
      "name": "jersey-hk2",
      "version": "4.0.2",
      "description": "HK2 InjectionManager implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "295f464e22b0303c2c5dc23888194042"
        },
        {
          "alg": "SHA-1",
          "content": "8283989a7a36b51f31c5f35b354881d106bee6b3"
        },
        {
          "alg": "SHA-256",
          "content": "5df758fc55d0d7cdb431b4c9ab50fbf613965ce0a7898d1a923d957e3a93df2c"
        },
        {
          "alg": "SHA-512",
          "content": "846c8d018bb0059eda93b8b1f464f7bf14d284b36d871df0233b6655486344168373a31b8a778891d2de0d8e4141446e04b0845b21bce793ce728c0d93bda512"
        },
        {
          "alg": "SHA-384",
          "content": "1b3d5da027e60c1cd2d0c97069350cef3e42b45b4814976ce8185dcf57b1dac907375835f8a34f25f59fdcd0c394e4fb"
        },
        {
          "alg": "SHA3-384",
          "content": "fd5e03a684c044960e176577371ce74cadabc5673d558f96a7d1dff56b59bef6809a897913c99660bcdcc8c27fe43be4"
        },
        {
          "alg": "SHA3-256",
          "content": "b9c053c2b3cd0fe0c1bd0c8b78ac4a7a1b97ce5c80f7722483b70d40c1cfb476"
        },
        {
          "alg": "SHA3-512",
          "content": "087e8d0583f2db5c0b877188d8bd85e15af42e0e6bdb10e5363639a8e721cf128874fdeaead7ad5d2b5c6b2e2741708d4bddd3638c7f27275b11c3a96095c2ef"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@4.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-hk2",
          "type": "website"
        },
        {
          "url": "https://ci.eclipse.org/jersey",
          "type": "build-system"
        },
        {
          "url": "http://localhost",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/project/jersey-hk2",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.hk2/hk2-locator@4.0.0-M3?type=jar",
      "publisher": "Oracle Corporation",
      "group": "org.glassfish.hk2",
      "name": "hk2-locator",
      "version": "4.0.0-M3",
      "description": "ServiceLocator Default Implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b4208d604d4c23e3acae9f6300aafd4c"
        },
        {
          "alg": "SHA-1",
          "content": "64a198be0ce5a86c6e6e439188fc4e7187416588"
        },
        {
          "alg": "SHA-256",
          "content": "290027395d95bfcbb5f40c992376a6f21c75bf63c9c8d4df3cfc034ba1a85ded"
        },
        {
          "alg": "SHA-512",
          "content": "cb3280c9af78f7fa19cf537448bb28be7e1981733fbf2bc1e86823288539def8c856cb915c921c9cd6ef490b39bb93aba998eb35ed967aa3c0a11d7a65b05cad"
        },
        {
          "alg": "SHA-384",
          "content": "a0a74b0787b7240632ac04fb635bfb8cdb8ce7529ebeca5a03f3157ee5ccdd902ce83300995eff2e44ff5d58e0ed330b"
        },
        {
          "alg": "SHA3-384",
          "content": "f260e2b328e7be64987ac4b2f72b7f627eac5dbfb318ae40ae5c7cd08a5cb4a8e2b60cd2e5863bfb54782200563a7f6c"
        },
        {
          "alg": "SHA3-256",
          "content": "a3bd95277a4f2f33a9e8b0fec11ef6b7e7e57efe6454bb35a8b9a9474c7d8818"
        },
        {
          "alg": "SHA3-512",
          "content": "1a4eb5c85a9346ee214f5f9afc1a9fa5bc9b0d8bcf4261370a6dc6efd595b3a3ff50ad89eb85a4c6693ebf86590d362d58fbffdc5c399c7746524caef25ad24b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.hk2/hk2-locator@4.0.0-M3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/hk2-locator",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/hk2-locator",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@4.0.0-M3?type=jar",
      "publisher": "Oracle Corporation",
      "group": "org.glassfish.hk2.external",
      "name": "aopalliance-repackaged",
      "version": "4.0.0-M3",
      "description": "Dependency Injection Kernel",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "265ded5507ff1db7cd2184d4846fc85b"
        },
        {
          "alg": "SHA-1",
          "content": "71779579326f1648524a86fdee77bdf1d2d45336"
        },
        {
          "alg": "SHA-256",
          "content": "65c0abb946d2ab3a1237c610f24bf15f04696151e9cafbe1afa6cee52fbed5ed"
        },
        {
          "alg": "SHA-512",
          "content": "e45784cc801cef6726c4c74ba6158f34de84b6ee7b3c4823be16b9a53aee22f0b251c8c0144953c8c09d4e8169c2134a1530baece93169efbb33c0c118af7de5"
        },
        {
          "alg": "SHA-384",
          "content": "de80c2803aafdedaddb185277ca9946c5ea24e8f3f10f172abedf8cf9fd2de61d4ac022ae466cbe9fc54ffff3a43acd8"
        },
        {
          "alg": "SHA3-384",
          "content": "af3ce290b4aecad2cf4f5b163a484013732d2891b640b927169e9dfdaec19254404b5ce9a0162842a1d915024fa5752a"
        },
        {
          "alg": "SHA3-256",
          "content": "9043468d2fa46fd4b156845bcfa8a5ed350dcab0929a970aa2d4f885c62f69c6"
        },
        {
          "alg": "SHA3-512",
          "content": "88722b8a289ecbe9753c9801ffadc909089879b4c3d71edd4ec298eb5d6fddb5a6bd0d56fa01ae6fad5f9826460d0809a6d0f4aabc009a1d2d4377f03fb507ed"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@4.0.0-M3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/external/aopalliance-repackaged",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/external/aopalliance-repackaged",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.hk2/hk2-api@4.0.0-M3?type=jar",
      "publisher": "Oracle Corporation",
      "group": "org.glassfish.hk2",
      "name": "hk2-api",
      "version": "4.0.0-M3",
      "description": "HK2 API module",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4a7799f8b0c76121478fdbfd3fa481cb"
        },
        {
          "alg": "SHA-1",
          "content": "4b9520d9c4ecdc8b688a50968c19b54b55fc1274"
        },
        {
          "alg": "SHA-256",
          "content": "66f859916e6a7de3622973acf7f672a895c9bac81622080dfbb95ac9b021b1f8"
        },
        {
          "alg": "SHA-512",
          "content": "f202d82a2493430495b7c0d2006f21b3435f5367b6e24f7ef41736c2fb0d551a8ab4a269808dec7f8c8df8b3bb62fc05f148740ca5b4f642becac6216971ba12"
        },
        {
          "alg": "SHA-384",
          "content": "be02adf52ba9a8cfc1fa5792b4b2ede0a577e8f55d7589740c563ddd3c6fcbabf9ed9d9a310f5f8ac4aac91b09cecc58"
        },
        {
          "alg": "SHA3-384",
          "content": "0c5d90d77991c80953945914bbc2cf22420765396edf899863f16dc50527cb251c04c8e3ee6b68a44e657ce76a97c7e3"
        },
        {
          "alg": "SHA3-256",
          "content": "25692ba0b74506800453bed8bc69f98b6b8ebe75cf78984cb5af1047a0e3f028"
        },
        {
          "alg": "SHA3-512",
          "content": "e4d89788416d7f29a91758f03715fc3bc5c85023bc0e0f2093852d72c0437308bb53e71c5710f6e8f0841a1eaece0af1351ea0bce5ca075f9b2c19af8508b9d6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.hk2/hk2-api@4.0.0-M3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/hk2-api",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/hk2-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.hk2/hk2-utils@4.0.0-M3?type=jar",
      "publisher": "Oracle Corporation",
      "group": "org.glassfish.hk2",
      "name": "hk2-utils",
      "version": "4.0.0-M3",
      "description": "HK2 Implementation Utilities",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8bc6984bd681f30286f4d95ee8795b61"
        },
        {
          "alg": "SHA-1",
          "content": "d0017a4fffdb8184582d579c15e4d90765e4d11b"
        },
        {
          "alg": "SHA-256",
          "content": "ba7087827fe89af3d824fc26556c985ce9afa0cc30faa24e8b65145ca0fefcf1"
        },
        {
          "alg": "SHA-512",
          "content": "b39a525b64d012ae99e09809ecd906bab9fc98baf027005b86f964b2baf2ca455e4fca655bca1b147ddc8225b0f6abda32859beed920d59f813bf4c3a5de7a43"
        },
        {
          "alg": "SHA-384",
          "content": "08d57c36622c3cfd6471b0552653aea5194d491e7cef0a8946ebc7c26195e640c6fe54c5db4829e71f5a213294fc5a6c"
        },
        {
          "alg": "SHA3-384",
          "content": "b5d5b9bb24d31585a42052571cb6cad2b10035a3439ec6f66689dff03034cab04d81a3b0187c3917158f1e6332ae75e5"
        },
        {
          "alg": "SHA3-256",
          "content": "0d635ee61147b0fcf9ec3208926e86e14752e390f45ec26828d427a12b0cf15e"
        },
        {
          "alg": "SHA3-512",
          "content": "5280173e2349d1490362b2b320cbbd17e56f751d995ac20e2867de2c7955118c3d12f852c784e0e8dce21854c534a0c1721245e8b4ab1d96a97788a3dc006372"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.hk2/hk2-utils@4.0.0-M3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/hk2-utils",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/hk2-utils",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.annotation",
      "name": "jakarta.annotation-api",
      "version": "3.0.0",
      "description": "Jakarta Annotations API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "7faffaab962918da4cf5ddfd76609dd2"
        },
        {
          "alg": "SHA-1",
          "content": "54f928fadec906a99d558536756d171917b9d936"
        },
        {
          "alg": "SHA-256",
          "content": "b01f55552284cfb149411e64eabca75e942d26d2e1786b32914250e4330afaa2"
        },
        {
          "alg": "SHA-512",
          "content": "2bd5a16684c4e8144897ba6dc467628d1b8a85326235240e4c20101b6df3681d23aeebc30ca99e395ec848f33cb5244085031b2a0fbce746c8ede7148a5e7c1d"
        },
        {
          "alg": "SHA-384",
          "content": "1a12cb78019d310eb08314f863c2a0e48aa2845bde844f8204e653ec50713bf135cc58cce882e14ef631327952b5ad99"
        },
        {
          "alg": "SHA3-384",
          "content": "a0dd7dd32e8dc5ed679589f6066f16593b52334b9947a71381aeab44b3cbe295ec24dfef4fbfa5514ba24ea60fe042a9"
        },
        {
          "alg": "SHA3-256",
          "content": "6ae915a05b483f75c51f3a109cf368842d186b2996758b8a106377a7a9485c12"
        },
        {
          "alg": "SHA3-512",
          "content": "52f611aa0a98812e525be2b9d5a5712aef660598cff64282dbd9afc237560f442ab745fc95c919216f9cb4197c224ba6c7317282962c638fee956925bfa031c0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.ca",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/jakartaee/common-annotations-api/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/ca-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jakartaee/common-annotations-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.activation",
      "name": "jakarta.activation-api",
      "version": "2.1.3",
      "description": "Jakarta Activation API 2.1 Specification",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "76e7b680375ea9f40f3ddbd702efcd25"
        },
        {
          "alg": "SHA-1",
          "content": "fa165bd70cda600368eee31555222776a46b881f"
        },
        {
          "alg": "SHA-256",
          "content": "01b176d718a169263e78290691fc479977186bcc6b333487325084d6586f4627"
        },
        {
          "alg": "SHA-512",
          "content": "aaabd4d6085a07035eaaae7b5a81aef429fea76e7fe1c8d29971e6595f0adad6bcf1088cff8a1c8936d739b0e3fce4b845323032f046b7edab2eaebd0e10a2ad"
        },
        {
          "alg": "SHA-384",
          "content": "4c4e73f59bf09342ca7691fd4855b41d3466da80618a5b7df059a2d89cf6d9779a4af751a6c4a9c48e5025c3ff75f42e"
        },
        {
          "alg": "SHA3-384",
          "content": "20be816700c87778e9453d41b6d8cb9dc992a092a308a9b7f2dfbf72e2393940a7d666c46625f130a2b57bc414df85ca"
        },
        {
          "alg": "SHA3-256",
          "content": "8a574b0a249842ea1b397d4cdef9b6d00b34ce8a849ea34184cdf45ac5aafe67"
        },
        {
          "alg": "SHA3-512",
          "content": "69cfb7dddda70ac1fca272ace0a3d5551b85dd60a6dbaf987ee777fbf573b420d13f06b8990ae70e8fe063f92b78c8a447cf9309ba516a5e993ba2d49cca8d23"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/jakartaee/jaf-api",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/jakartaee/jaf-api/issues/",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jakartaee/jaf-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.json/jakarta.json-api@2.1.3?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.json",
      "name": "jakarta.json-api",
      "version": "2.1.3",
      "description": "Jakarta JSON Processing defines a Java(R) based framework for parsing, generating, transforming, and querying JSON documents.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "596997520702889d4afef9cffbd4b71a"
        },
        {
          "alg": "SHA-1",
          "content": "4febd83e1d9d1561d078af460ecd19532383735c"
        },
        {
          "alg": "SHA-256",
          "content": "bc934142805ea1d794f1440563965a3861a2a9fb7414ecd3fe44f26500734414"
        },
        {
          "alg": "SHA-512",
          "content": "5a6566f0ceaa8b0ca40ae643942c0d46acd118a3b4d85af5f3a977e738465e8c8d4bc977f0c3e4b51f4471e408c28f66dbc0b19adf61237f6f6f7fa1d0dacc31"
        },
        {
          "alg": "SHA-384",
          "content": "1a17b8a416692ba0e485d7290782b2b5c4de8cb65c2043f221381deee668953655c221dc3efa29d3c65c8b2c1fab173f"
        },
        {
          "alg": "SHA3-384",
          "content": "4c009f9fec6b1e14b2c675ee7addb49ebd047d71d7aaf31601ccea3ffe4af1d82838a3452b0e5d7c2814e27861cd3ffd"
        },
        {
          "alg": "SHA3-256",
          "content": "5b839f4645dbac0d1bc76a91e168a52574c2bb6de0b7e92cd14aafd0ad6a28b0"
        },
        {
          "alg": "SHA3-512",
          "content": "fedcd8618f44ab0b771bef7d2fcb61d49021eb2e592d8d3058d3f57e7fe0ed1a9239cac859fe534dd0629aaf577fb8f77841412dbb3ae58b8d8cd0754da2ec48"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "name": "GNU General Public License, version 2 with the GNU Classpath Exception",
            "url": "https://projects.eclipse.org/license/secondary-gpl-2.0-cp"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.json/jakarta.json-api@2.1.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/jsonp",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/eclipse-ee4j/ee4j/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jsonp",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.parsson/jakarta.json@1.1.7?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.eclipse.parsson",
      "name": "jakarta.json",
      "version": "1.1.7",
      "description": "Default provider for Jakarta JSON Processing",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "68b696da0b95318047ff3a2403bfd86d"
        },
        {
          "alg": "SHA-1",
          "content": "91a668f91f296fe82c6a25cb0175b733e9e05fe7"
        },
        {
          "alg": "SHA-256",
          "content": "5905f52283a7491e06ba58556103d45c3199a42602abcd36d510ceda65490ff0"
        },
        {
          "alg": "SHA-512",
          "content": "32d57ea7b52edd91967e13f2812ddea03785d3b2b75f1a35e7567ece81b95b015ce9372fe044d8cdfe5a2cfe27df5a124cb653f5750332a7a9f583c9c429e076"
        },
        {
          "alg": "SHA-384",
          "content": "9b41d27f58cd2f3f787a7ff744f366b5cfe2f23892983bee8305a45c75c846da935155e67132b16e510261c6573611ec"
        },
        {
          "alg": "SHA3-384",
          "content": "2fa091c2f4c818e1296eb3652b212a866c86a804e003cfa81f7c2a328e38b4cfeea3601899321ea3a23671bc8dd5c032"
        },
        {
          "alg": "SHA3-256",
          "content": "6c61679b2f56bf5921c12244452f1dd2a555f73888258f66b8af026f71bfcd87"
        },
        {
          "alg": "SHA3-512",
          "content": "a39ffc271743b687342ef32a2b5be3f5cbfe97b6a09b9832ce5262008af6f77e7fd2f249f141a6ffc295f9e02a444f090dc5187db8b8744d0c32ece338e261c7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "name": "GNU General Public License, version 2 with the GNU Classpath Exception",
            "url": "https://projects.eclipse.org/license/secondary-gpl-2.0-cp"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.parsson/jakarta.json@1.1.7?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/parsson/parsson-bundles/jakarta.json",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/eclipse-ee4j/ee4j/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/parsson/parsson-bundles/jakarta.json",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.h2database/h2@2.4.240?type=jar",
      "group": "com.h2database",
      "name": "h2",
      "version": "2.4.240",
      "description": "H2 Database Engine",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "fb14a47b07dfd4381a608d3adb89dc25"
        },
        {
          "alg": "SHA-1",
          "content": "686180ad33981ad943fdc0ab381e619b2c2fdfe5"
        },
        {
          "alg": "SHA-256",
          "content": "29b70e427cc1c40cdc376283adbb0cc62853073797bb5fe5761f81fe73d57ce0"
        },
        {
          "alg": "SHA-512",
          "content": "dfe71fb621ae7e3b737da883325ff557a03db185d0b5e27800911e8512866cf4fc4e555de7be1d93cc5abb5903d9588a10d746812438a8e019bc9729131df218"
        },
        {
          "alg": "SHA-384",
          "content": "89ffc001b299d9aa9017e30c901539042c1bceadfb329073395ba97d59068d6dbfdf50486507d977086eddad7760dfea"
        },
        {
          "alg": "SHA3-384",
          "content": "fe8e25377fa6fd15dbfb2f81673d20a199a7cdbb8c36de512820c6d41d45933044d6e508235ca946dc8fa4c1e83efd66"
        },
        {
          "alg": "SHA3-256",
          "content": "655173946406292168468f9f805f3642c920dcb48cb7a59a2efcd9f0a3738c0e"
        },
        {
          "alg": "SHA3-512",
          "content": "e2de4ce8067df0c23746f6357952afd8b0a73018b2a7eea77bc85a1bc21f1baff2aee69d829a15dcf83670079802d46be71f071c185f431908db974e88958f52"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MPL-2.0"
          }
        },
        {
          "license": {
            "name": "EPL 1.0",
            "url": "https://opensource.org/licenses/eclipse-1.0.php"
          }
        }
      ],
      "purl": "pkg:maven/com.h2database/h2@2.4.240?type=jar",
      "externalReferences": [
        {
          "url": "https://h2database.com",
          "type": "website"
        },
        {
          "url": "https://github.com/h2database/h2database",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.mindrot/jbcrypt@0.4?type=jar",
      "group": "org.mindrot",
      "name": "jbcrypt",
      "version": "0.4",
      "description": "OpenBSD-style Blowfish password hashing for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d2b39d874e0d512f85386a72b0083682"
        },
        {
          "alg": "SHA-1",
          "content": "af7e61017f73abb18ac4e036954f9f28c6366c07"
        },
        {
          "alg": "SHA-256",
          "content": "e183f6f59404fc1e12073cfea4ace7ea103c900463cd21fb609a7c617ecdf624"
        },
        {
          "alg": "SHA-512",
          "content": "95ffe1f6593f83da047ff289a52b5ef73adcaca4a9a990a47744fbd50a52fce39958c17ed393e95d64093b2acbcaba39ba0b5b983a2e0ad98ce5c6e9282a67cd"
        },
        {
          "alg": "SHA-384",
          "content": "66a24af2134e6fcee1f4232c2c4bab43ab97d0c8ffbbc009f9bb0e5ef2a7d8795a6da3c6b47c583675b98036958aa729"
        },
        {
          "alg": "SHA3-384",
          "content": "33cf5e13897f25c525017888e7fcd2faf9a0f25135be03a65dd154feb11455e33c1df31963470b2ecaaba5267f6ad652"
        },
        {
          "alg": "SHA3-256",
          "content": "a347c842385e1d76780f9afe2200a7b9815bcd873b2a9fdd2652d0b0a5e0d324"
        },
        {
          "alg": "SHA3-512",
          "content": "5a71c6f1fde98865302e8c9ee6c99ace9efa220c0193bcdd56423015d1c73e54bd65f19a9a3ba3199b242589eb9ccc96b1d6c0d413387f8e8fbed7c691fc8790"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://www.isc.org/licenses/"
          }
        }
      ],
      "purl": "pkg:maven/org.mindrot/jbcrypt@0.4?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/djmdjm/jBCrypt",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/djmdjm/jBCrypt.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.nimbusds/oauth2-oidc-sdk@11.34?type=jar",
      "publisher": "Connect2id Ltd.",
      "group": "com.nimbusds",
      "name": "oauth2-oidc-sdk",
      "version": "11.34",
      "description": "OAuth 2.0 SDK with OpenID Connection extensions for developing client and server applications.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "148ee8eea5cb2a5e995fc614562790af"
        },
        {
          "alg": "SHA-1",
          "content": "8b822f6498e3ce93ad3629917ef4ad535c4e9ab5"
        },
        {
          "alg": "SHA-256",
          "content": "49c5f9ffd66d3d4128a690d1797e16af323cb045172e9f3d18b1e5d4f40b6978"
        },
        {
          "alg": "SHA-512",
          "content": "613a75bb528580e022360b5f63e2f606b2cacb1bc16468c4975b31242d6f7804efc94f8fd25f66282937998f6c2edb3625e08a06230670fa168b08a69af3c375"
        },
        {
          "alg": "SHA-384",
          "content": "397b4041727bb44cd29c96cb199d006bca6306a156e578d54cfb0460df2b89176d20e625a41bc4c45e7ceaf8319159ea"
        },
        {
          "alg": "SHA3-384",
          "content": "dd122b8fc513212f0cb61cb7a7572c054961ed042633113980823d45c2b246bf7ac3a729b8b71775692f6156edaa89af"
        },
        {
          "alg": "SHA3-256",
          "content": "95380a3d86ec34d745fc53420ba15223cb1ecd2b91384d59ec2599e3f03a837f"
        },
        {
          "alg": "SHA3-512",
          "content": "c25c14f23df38e67f7b3f34b11295d706c12cb339888caf6a67d98e074dd098cee16e0b3726fa0f3a106b6923e36b9cdb363a9a62bce5729f030503d9b878a8a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.nimbusds/oauth2-oidc-sdk@11.34?type=jar",
      "externalReferences": [
        {
          "url": "https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar",
      "group": "com.github.stephenc.jcip",
      "name": "jcip-annotations",
      "version": "1.0-1",
      "description": "A clean room implementation of the JCIP Annotations based entirely on the specification provided by the javadocs.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d62dbfa8789378457ada685e2f614846"
        },
        {
          "alg": "SHA-1",
          "content": "ef31541dd28ae2cefdd17c7ebf352d93e9058c63"
        },
        {
          "alg": "SHA-256",
          "content": "4fccff8382aafc589962c4edb262f6aa595e34f1e11e61057d1c6a96e8fc7323"
        },
        {
          "alg": "SHA-512",
          "content": "02fcd16a30d0e68b3e9e4899731181c6abb7117baa15c096ca940e01dde08bb86101cbeae552c497f8a90d923b5fa2f2b6f3850baf8dc94dbd399887924a9069"
        },
        {
          "alg": "SHA-384",
          "content": "88b0ecfde391a3d8468349c70e1539569768dfac3233dfe0b4660904df04e6c6bf26ed9c0784b9b22c122c3448e2a6b6"
        },
        {
          "alg": "SHA3-384",
          "content": "487b53f48b55b98a61ae60abedc43543887944867aa6bcb78d5ed46e2d0d7c19510c5fcadc362d939313feafdcfc55e1"
        },
        {
          "alg": "SHA3-256",
          "content": "3e79c8f58865d2d58a5311a8bb45772007f07e7f3ed2780784d1e4382dc934d0"
        },
        {
          "alg": "SHA3-512",
          "content": "ff32665e1b6d8176ccc7e8c836ca7343c2603dab053e42d79b4258d51a14ff63933c67d24034169ac91e11ebda21cc2c84a2a540072e656d2a8e6fcea7808421"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar",
      "externalReferences": [
        {
          "url": "http://stephenc.github.com/jcip-annotations",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "http://github.com/stephenc/jcip-annotations/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/stephenc/jcip-annotations/tree/master/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.nimbusds/content-type@2.3?type=jar",
      "publisher": "Connect2id Ltd.",
      "group": "com.nimbusds",
      "name": "content-type",
      "version": "2.3",
      "description": "Java library for Content (Media) Type representation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f0fc0d6be73e838863e2197c03a27c3f"
        },
        {
          "alg": "SHA-1",
          "content": "e3aa0be212d7a42839a8f3f506f5b990bcce0222"
        },
        {
          "alg": "SHA-256",
          "content": "60349793e006fba96b532cb0c21e10e969fe0db8d87f91c3b9eaf82ba2998895"
        },
        {
          "alg": "SHA-512",
          "content": "58f7fe3b4303cecd6eac73c3345af71536479ce4bc38c88153bdcf6176a7cf5a0875420ea4a6024b4e734b78de08a8e544014b435cb63416c759b957ad3818e4"
        },
        {
          "alg": "SHA-384",
          "content": "9dbe31f543aaf807093fe1dd18a0ed33346252e2f6fce598e1b193b9d73fcebf79608fce6a620ede8ea7adf45f1a7422"
        },
        {
          "alg": "SHA3-384",
          "content": "67b8b5d051230739ee85678006758450cd6510c5fb9a6b3134d43f644c2d70bc6dc3cff6133b132b5b158a1f346880a9"
        },
        {
          "alg": "SHA3-256",
          "content": "b8046b3dd12321400b4643ff0c47ea5c1e77d6252177bdd8be6f0e0b234c80bf"
        },
        {
          "alg": "SHA3-512",
          "content": "734a6a5a383aac8dcfaca09c8e37637f74334ce2d5c050b519277ad7c20f065fad44b5a6417cdc32d6cd43f80c0e1e0c37d9daa9279651facb6c38cb88376396"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.nimbusds/content-type@2.3?type=jar",
      "externalReferences": [
        {
          "url": "https://bitbucket.org/connect2id/nimbus-content-type",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://bitbucket.org/connect2id/nimbus-content-type",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/net.minidev/json-smart@2.5.2?type=jar",
      "publisher": "Chemouni Uriel",
      "group": "net.minidev",
      "name": "json-smart",
      "version": "2.5.2",
      "description": "JSON (JavaScript Object Notation) is a lightweight data-interchange format. It is easy for humans to read and write. It is easy for machines to parse and generate. It is based on a subset of the JavaScript Programming Language, Standard ECMA-262 3rd Edition - December 1999. JSON is a text format that is completely language independent but uses conventions that are familiar to programmers of the C-family of languages, including C, C\u002B\u002B, C#, Java, JavaScript, Perl, Python, and many others. These properties make JSON an ideal data-interchange language.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e3ad34c55c0d2627255f79f4411c6bdd"
        },
        {
          "alg": "SHA-1",
          "content": "95d166b18f95907be0f46cdb9e1c0695eed03387"
        },
        {
          "alg": "SHA-256",
          "content": "4fbdedb0105cedc7f766b95c297d2e88fb6a560da48f3bbaa0cc538ea8b7bf71"
        },
        {
          "alg": "SHA-512",
          "content": "087931c6f254c7e54ff75b6e94983d062b62b68356a988a5ed276819bcb4fafbad2f0bbc363e16c8daa09ed8189241f08eff6e8e5f5f3ddc770b541d96fc8e2d"
        },
        {
          "alg": "SHA-384",
          "content": "25562d80d717cde53ae3c8049f14fb74a85c86ef14ece2e8136b604edbd3a67df8a46628dc36e6a07dcf5949d9ce1451"
        },
        {
          "alg": "SHA3-384",
          "content": "3aaa1b156a994fa858f7e46c1ebedebe9063e9afbd72c9ca886dd41f3c4ca8dcdd6dd457daa5ed167929d3741aed075c"
        },
        {
          "alg": "SHA3-256",
          "content": "e387c386e5f81247ea4add698626d06e8a2c2fe5768b7440a0fd6fb56ad99d75"
        },
        {
          "alg": "SHA3-512",
          "content": "aa2a4c9daa3bff63615ed483e9faa978b0131758c541a9591e6da8186af73d32f73a38e954272f2f0aa1606b38555f6471ea232eebc146a4fb83151bbae60484"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/net.minidev/json-smart@2.5.2?type=jar",
      "externalReferences": [
        {
          "url": "https://urielch.github.io/",
          "type": "website"
        },
        {
          "url": "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/netplex/json-smart-v2",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/net.minidev/accessors-smart@2.5.2?type=jar",
      "publisher": "Chemouni Uriel",
      "group": "net.minidev",
      "name": "accessors-smart",
      "version": "2.5.2",
      "description": "Java reflect give poor performance on getter setter an constructor calls, accessors-smart use ASM to speed up those calls.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "24191e0bb215c72902e89f46dde839e1"
        },
        {
          "alg": "SHA-1",
          "content": "ce16fd235cfee48e67eda33e684423bba09f7d07"
        },
        {
          "alg": "SHA-256",
          "content": "9b8a7bc43861d6156c021166d941fb7dddbe4463e2fa5ee88077e4b01452a836"
        },
        {
          "alg": "SHA-512",
          "content": "3bbd29761622714ac61dbe02b8351188573f819bdabfb4025196a3f1561bfe52cc308af9208184f7339c66988e7f8ad323c5cd7b0fa8463321b6bb03e4a9181e"
        },
        {
          "alg": "SHA-384",
          "content": "9640df1f3b1bc02ca025e990776727ca3265de08db88e9d08072567e08cb4c1083e8a1644f053caeb4f21fdd2e48ec4b"
        },
        {
          "alg": "SHA3-384",
          "content": "90e220e6dfb5c39a208c3395aa525de2a59ff4525de57a5a496d683be3fc0c58f8ce38411e875434aa3042394dc46e24"
        },
        {
          "alg": "SHA3-256",
          "content": "fa935f2190565214b4fce84be12d4f9b052e9bbf5b1116fa82bcc7f9d7f4c301"
        },
        {
          "alg": "SHA3-512",
          "content": "da0fe2eb9ce26fd44decb2d735fb04597b31225e9c6b76b4678db29ec48292fccc9fcbcc72c5f3b7854aeef9d797da2016b61dd86802c07e1c6f6e4afea872ad"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/net.minidev/accessors-smart@2.5.2?type=jar",
      "externalReferences": [
        {
          "url": "https://urielch.github.io/",
          "type": "website"
        },
        {
          "url": "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/netplex/json-smart-v2",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.ow2.asm/asm@9.7.1?type=jar",
      "publisher": "OW2",
      "group": "org.ow2.asm",
      "name": "asm",
      "version": "9.7.1",
      "description": "ASM, a very small and fast Java bytecode manipulation framework",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e2cdd32d198ad31427d298eee9d39d8d"
        },
        {
          "alg": "SHA-1",
          "content": "f0ed132a49244b042cd0e15702ab9f2ce3cc8436"
        },
        {
          "alg": "SHA-256",
          "content": "8cadd43ac5eb6d09de05faecca38b917a040bb9139c7edeb4cc81c740b713281"
        },
        {
          "alg": "SHA-512",
          "content": "4767b01603dad5c79cc1e2b5f3722f72b1059d928f184f446ba11badeb1b381b3a3a9a801cc43d25d396df950b09d19597c73173c411b1da890de808b94f1f50"
        },
        {
          "alg": "SHA-384",
          "content": "166e2be10a19ca6a6d7cadb542eb1c948562483f02557b467a50a3d19d01318e12e5c3b495c482f3f5369be1b7f20eed"
        },
        {
          "alg": "SHA3-384",
          "content": "e301862376e84df61c3547dbf637252750224fb5b74feb82f20e1527a8e3152c45f620192a9111a2db5e2f0e73ebd7ca"
        },
        {
          "alg": "SHA3-256",
          "content": "7edcc4ff09b3ace15091a8c550f552a324b5cee6c1527944db5823df7eba8d64"
        },
        {
          "alg": "SHA3-512",
          "content": "9d220edc5528e4d788605721490f3d29483dd4bd506765e85d781048419aa89b686a70e316b82ef2a856ead56bb7be6b5d52d77b7ca6f27d5e0e347e9669d731"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.ow2.asm/asm@9.7.1?type=jar",
      "externalReferences": [
        {
          "url": "http://asm.ow2.io/",
          "type": "website"
        },
        {
          "url": "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail.ow2.org/wws/arc/asm/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.nimbusds/lang-tag@1.7?type=jar",
      "publisher": "Connect2id Ltd.",
      "group": "com.nimbusds",
      "name": "lang-tag",
      "version": "1.7",
      "description": "Java implementation of \u0022Tags for Identifying Languages\u0022 (RFC 5646)",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "31b8a4f76fdbf21f1d667f9d6618e0b2"
        },
        {
          "alg": "SHA-1",
          "content": "97c73ecd70bc7e8eefb26c5eea84f251a63f1031"
        },
        {
          "alg": "SHA-256",
          "content": "e8c1c594e2425bdbea2d860de55c69b69fc5d59454452449a0f0913c2a5b8a31"
        },
        {
          "alg": "SHA-512",
          "content": "494267766c974ce16a99cb221953edc91fde8db0c920230758ecea0ea9d3006e95d86ad46f7a9d61b810d85b0fa6da9a3ce2b507cdbe4be320c499eaea93666b"
        },
        {
          "alg": "SHA-384",
          "content": "fdc2cde39a1b07a2542cbc07222afd6292ae19cb1f9ae008476f7ec1b8ebe1e3e84aca08e47e1ef81887a23ac5267d00"
        },
        {
          "alg": "SHA3-384",
          "content": "b0e673087533f60173a11a55b0fde554c0830e7b3b6609e1ea6546de19fc9a97fbfe6eee73580d09b2de66989d0603c7"
        },
        {
          "alg": "SHA3-256",
          "content": "ea208d4eb55212ce9835a9be60396861b0fc33f4161efee3736c3e7159acb9f7"
        },
        {
          "alg": "SHA3-512",
          "content": "450f819981d73711c30d838261ff55a7f1988c8b965c786708dc27fbd10a2018cfde82b8fee5d7d1022eacf085dfdabe22d9de92462eba80e2c15a116c3c73ed"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.nimbusds/lang-tag@1.7?type=jar",
      "externalReferences": [
        {
          "url": "https://bitbucket.org/connect2id/nimbus-language-tags",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://bitbucket.org/connect2id/nimbus-language-tags.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.nimbusds/nimbus-jose-jwt@10.6?type=jar",
      "publisher": "Connect2id Ltd.",
      "group": "com.nimbusds",
      "name": "nimbus-jose-jwt",
      "version": "10.6",
      "description": "Java library for Javascript Object Signing and Encryption (JOSE) and JSON Web Tokens (JWT)",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "29a05ec4aa6b46b8d8dee66701052108"
        },
        {
          "alg": "SHA-1",
          "content": "6c0b9c9b420ec7def22994c839ca85969e4e68ff"
        },
        {
          "alg": "SHA-256",
          "content": "7ef3b0dd4a27407639d469cd75e7770463b4ee36e2c13535465da175d3b8f964"
        },
        {
          "alg": "SHA-512",
          "content": "900ef75998356eb28de8a161cc849d215c36f296133c905a317346962e81250c8e02e2e0d7e8d90fb9a3153ca449a0b71356570ab79b02c19061479778d9b5f6"
        },
        {
          "alg": "SHA-384",
          "content": "f09f6f783f7ba7401e93d109cae6b437a2eb73d6c429b7be3a4d385674ab1745b16a378804ee9056ff0ed2b09a615b6d"
        },
        {
          "alg": "SHA3-384",
          "content": "272d8f5a90196e7071fa8fd4e21f12dcb1af0a62beaa7ef10199f1fe317713a9844d6018a7e164617bdab834d3e3a7cf"
        },
        {
          "alg": "SHA3-256",
          "content": "fd54cd445d1da32ae21b4804f46e000fdb173a4fd2e2fa2f63869ef56df500d0"
        },
        {
          "alg": "SHA3-512",
          "content": "653a5ccd77bee1e188239eeb1247e8aa7867f4e6fef983fde674ba119d6df78478a82f6bd27dfe06bea1236d3c1fa515e04f51b381f1d1e7299447796334e298"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.nimbusds/nimbus-jose-jwt@10.6?type=jar",
      "externalReferences": [
        {
          "url": "https://bitbucket.org/connect2id/nimbus-jose-jwt",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://bitbucket.org/connect2id/nimbus-jose-jwt",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-base@2.21.1?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.jakarta.rs",
      "name": "jackson-jakarta-rs-base",
      "version": "2.21.1",
      "description": "Pile of code that is shared by all Jackson-based Jakarta-RS providers.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "33e7824e0ffc5486670847a36a6359b7"
        },
        {
          "alg": "SHA-1",
          "content": "245fe19628c14605b0ecf818956711f1ebe3968e"
        },
        {
          "alg": "SHA-256",
          "content": "18d78ed50435615d71c16e156ed08d043776082965da0bbeb8f78986634c6665"
        },
        {
          "alg": "SHA-512",
          "content": "6c281d4c7188e9da2646bb574d7764c515a1cde0ac0b601dbf12cfa45b4695238ecf3fb5b5128544a992682c49b704e597926c80e0ba173ca1f949a064ec8920"
        },
        {
          "alg": "SHA-384",
          "content": "5c7f7f14a39c46ff1f12f91ed9b1cce418b5957c6569932a6e91bdb620455054327905e9abee649c013586f8b491a898"
        },
        {
          "alg": "SHA3-384",
          "content": "4659810b44752c33b1ae59af0b3b5d690995d0e8dab8f2a7c8071ec723e50224c4517070ea197f285f9905e05e321020"
        },
        {
          "alg": "SHA3-256",
          "content": "387c5d5acdce50ca3f25f1faf913b59c9beb726f92dcf94cd7334bec35d2bd1d"
        },
        {
          "alg": "SHA3-512",
          "content": "86b0283625c86559ddfde3a4947bb2dda593cb5cadeb132dfc68447bddae9333b87b9a2258bd4732548498c1598fd30b59d2cb5e824dcc12fe2c41d6ec304a96"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-base@2.21.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-jakarta-rs-providers/jackson-jakarta-rs-base",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/FasterXML/jackson-jakarta-rs-base/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-jakarta-rs-providers/jackson-jakarta-rs-base",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-json-provider@2.21.1?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.jakarta.rs",
      "name": "jackson-jakarta-rs-json-provider",
      "version": "2.21.1",
      "description": "Functionality to handle JSON input/output for Jakarta-RS implementations (like Jersey and RESTeasy) using standard Jackson data binding.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5c80a3551c2a05f400809642ae1002e3"
        },
        {
          "alg": "SHA-1",
          "content": "7ba318b714bffc156e002366a12864b209d98ef3"
        },
        {
          "alg": "SHA-256",
          "content": "ab7a1af1e9261f498356f78e90f39da28ff579e6aade710a160c356122ed3563"
        },
        {
          "alg": "SHA-512",
          "content": "aac4033052e26136012626fe69f571db562b7cac2dddbeedc3ba9247ff745a5376a9cf9d97b22dfe12e0ac688559421d9d9487abe4b183f6c61dec7cbe7d015c"
        },
        {
          "alg": "SHA-384",
          "content": "a51d2e6441640ecfc779feec3aee0a9f67b9abfd408b5542c5b1d16dda55a055ce75c67182203063f09da283e20233be"
        },
        {
          "alg": "SHA3-384",
          "content": "0c1fb6e9434d18d9f7fa761ea1d500ea33336310d46653f93e11faaf199193ac2c1649320f127d141d59d0cb1095be35"
        },
        {
          "alg": "SHA3-256",
          "content": "8aeaec48762f4b6afee11c2865d5e06c6a186673de042e06140c9b50698e2c86"
        },
        {
          "alg": "SHA3-512",
          "content": "195000559ccc2193e69dbfac408d40ccb0908dc8d282d76c528859fa9fb4e984601a53a9ab9b98b60c6a04dbb3a2de853c47f065c64ba6cca823f242308f43d1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-json-provider@2.21.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-jakarta-rs-providers/jackson-jakarta-rs-json-provider",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/FasterXML/jackson-jakarta-rs-json-provider/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-jakarta-rs-providers/jackson-jakarta-rs-json-provider",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.21.1?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.datatype",
      "name": "jackson-datatype-jdk8",
      "version": "2.21.1",
      "description": "Add-on module for Jackson (https://github.com/FasterXML/jackson) to support JDK 8 data types.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1f62b4a0b53f10b2a53ab2f0f562b0c3"
        },
        {
          "alg": "SHA-1",
          "content": "1c7b514d1608e560c0ccddacc63f5594f3ca19c9"
        },
        {
          "alg": "SHA-256",
          "content": "e39839e058fa982d3899a5698107d4ed1425c08ebade43e9a1cd308472a80587"
        },
        {
          "alg": "SHA-512",
          "content": "309ecf83551119d4df730ed5c33a0137b8ab3641dd3f4437f9eb6a7bd8ba43875ec9e843efafe7ce4ff496817f67109a0099695bb7de7d4f383bfefc51def93f"
        },
        {
          "alg": "SHA-384",
          "content": "fc708a4a98aaaa0965b891495510341b29ab48e7ff4be65966ed4c0f53caea36358eb40b28d7daa0d6a1bcbc28286fb0"
        },
        {
          "alg": "SHA3-384",
          "content": "2ede2621faef010a0a08e7ad7715247ed0a39ee0df09809f5c5e10f6ac8d27136454b26fd4680173a12cc7f85c562b4f"
        },
        {
          "alg": "SHA3-256",
          "content": "8bf9f0e8bf1644b07f9d6db85eae2c5c2a56ffaaea4f536841fe0c176190cb0c"
        },
        {
          "alg": "SHA3-512",
          "content": "ddf36d5278a0591d417ce4cd535fab6b42d4d0ba928cb66428b5cb7d2a70af71ada6dec85f6395307c4dda7f93945dcfb0d332106eb6066f4f233d30a5b882e9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.21.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jdk8",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/FasterXML/jackson-modules-java8/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jdk8",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/ch.qos.logback/logback-classic@1.5.32?type=jar",
      "publisher": "QOS.ch",
      "group": "ch.qos.logback",
      "name": "logback-classic",
      "version": "1.5.32",
      "description": "logback-classic module",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "cc1b628dcb1f44089d0decf8a4cf9009"
        },
        {
          "alg": "SHA-1",
          "content": "2b1042c50f508f2eb402bd4d22ccbdf94cc37d2e"
        },
        {
          "alg": "SHA-256",
          "content": "2d4cf592db78be2de4d6140434c2fec170dcb16a09e8c8b7b207dbf5e31b848a"
        },
        {
          "alg": "SHA-512",
          "content": "6f28dbc23ce773773fdd73801aaa9491c3300fa0888efdbc48909a60f191df4536328d2aeb6f0e91f05275bfd55b2b220ed2c30ce5ed4f31012f42eb11d79d7c"
        },
        {
          "alg": "SHA-384",
          "content": "aa437c8f4b8a66d0e072a1c41cd7f747631554b565246b7e250e392984195d2b284307070728b0aef32d9e85736a3508"
        },
        {
          "alg": "SHA3-384",
          "content": "72f659c00d07f50367b08b21cc16679ddd3c8945d3fdab1ccbeeda930cc71d873837e56dcdc4cbf0b3d546a75889c58e"
        },
        {
          "alg": "SHA3-256",
          "content": "84cbb3d39ed018e0aeded02e37f4e6d4646aa7555134c7f071e7f2f6457cb35e"
        },
        {
          "alg": "SHA3-512",
          "content": "414f83d924ed37fbd89b1ac08f3357dbfa9ed7051871c427918f7c5c868826e60ff4a27a954554463137d15f8aef7a6d7e142b8b6aedfa4131ce2124dde1bdc7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "name": "GNU Lesser General Public License",
            "url": "https://www.gnu.org/licenses/old-licenses/lgpl-2.1.html"
          }
        }
      ],
      "purl": "pkg:maven/ch.qos.logback/logback-classic@1.5.32?type=jar",
      "externalReferences": [
        {
          "url": "http://logback.qos.ch/logback-classic",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/qos-ch/logback/logback-classic",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/ch.qos.logback/logback-core@1.5.32?type=jar",
      "publisher": "QOS.ch",
      "group": "ch.qos.logback",
      "name": "logback-core",
      "version": "1.5.32",
      "description": "logback-core module",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "053d4a28d6ba4c9b6247c6fd859ca64f"
        },
        {
          "alg": "SHA-1",
          "content": "fdfb3ff9a842303d4a95207294a6c6bc64e2605d"
        },
        {
          "alg": "SHA-256",
          "content": "6a904d5778d0e361a9692f9cbe68b1b0620ae0f3eda2ec2ed09102755bf036c4"
        },
        {
          "alg": "SHA-512",
          "content": "7e118f88ff9f6bdd2854a4218c4d8e2a1a031eb0cbff7eb2b181fc162d5004b6d89e7b4586616fffd922b4b7a432395892b9caa04916b114a87b518a1abd5157"
        },
        {
          "alg": "SHA-384",
          "content": "b6ae51522d03a94d9dd33fdae4dbd81d9567c2e9191d7dafe20bc711148aaf77c0eaaae64bf3c9cf9a33aebf0755644d"
        },
        {
          "alg": "SHA3-384",
          "content": "2c899f38f50f14529a3710c703a430bfaeefdded4acc6d48caa8ee680d2e6f7f1ffae3911f059007fbba4c7ce57748a4"
        },
        {
          "alg": "SHA3-256",
          "content": "8369c927a69ba6d40db79c3156b17f4a24c31f3ff24c2f67f325e903310fc935"
        },
        {
          "alg": "SHA3-512",
          "content": "9d952bde380b128f5446eb2d040b73f44f019f50f05d31e08e1aac645c6014067b0787aa3362188a7babf74a976d5e58cd6cfeb3dfc7bdc3259ac50d0e3fcd96"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "name": "GNU Lesser General Public License",
            "url": "https://www.gnu.org/licenses/old-licenses/lgpl-2.1.html"
          }
        }
      ],
      "purl": "pkg:maven/ch.qos.logback/logback-core@1.5.32?type=jar",
      "externalReferences": [
        {
          "url": "http://logback.qos.ch/logback-core",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/qos-ch/logback/logback-core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.microprofile.health/microprofile-health-api@4.0.1?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.eclipse.microprofile.health",
      "name": "microprofile-health-api",
      "version": "4.0.1",
      "description": "MicroProfile Health :: API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1d023ee3b9b8545318fdeebe98d66d74"
        },
        {
          "alg": "SHA-1",
          "content": "395ea08f4f636696fb23b84a18ba81430cfebe7c"
        },
        {
          "alg": "SHA-256",
          "content": "b89ca4b6c4f7a044250d31c0673f6bc221e40fd669fc5871dbad5e5a0769ca47"
        },
        {
          "alg": "SHA-512",
          "content": "87ea9c7443bf0dbe0a3d38f3f7fd5287e24440f6285fcafdaade6312380fcce802bfe083646669207d11d36b660f05a6ef6e27ab03f3093905821d44024e5764"
        },
        {
          "alg": "SHA-384",
          "content": "4ddaceabea79f53c70fd17c6140453a19d4a9dfc1c3e8910449ce32ddef4b9023dbccbd6dbfbad49b50316389df25c8c"
        },
        {
          "alg": "SHA3-384",
          "content": "893eef36f7b7edf98be7835597d06c81055887f7a59ea70550274032a5b7ebb1822600a185d626db36d38160d0632e6f"
        },
        {
          "alg": "SHA3-256",
          "content": "94ea43765310e56d62888eafd32d4595c1e8d91a4183ad3455f51f1b52a6d2eb"
        },
        {
          "alg": "SHA3-512",
          "content": "79ba68099a777dbd5e596d9697358bc122c53cd52cb5ba5ce3a2be1086abb1f45c2f7289540f1693c1950efe6189ff8f57a91f1d53915be3fa5abbb22597d15a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.microprofile.health/microprofile-health-api@4.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://microprofile.io/project/eclipse/microprofile-health/microprofile-health-api",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/eclipse/microprofile-health/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse/microprofile-health/microprofile-health-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.owasp.encoder/encoder@1.4.0?type=jar",
      "publisher": "OWASP (Open Web-Application Security Project)",
      "group": "org.owasp.encoder",
      "name": "encoder",
      "version": "1.4.0",
      "description": "The OWASP Encoders package is a collection of high-performance low-overhead contextual encoders, that when utilized correctly, is an effective tool in preventing Web Application security vulnerabilities such as Cross-Site Scripting.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d26a36885af1fd62e8a3c18ec51ed39c"
        },
        {
          "alg": "SHA-1",
          "content": "41560c4db1cae2290402eee6ea0db544e8d48b7f"
        },
        {
          "alg": "SHA-256",
          "content": "90f9860925905dd97f313cffae065835eb02acc3e2e9b0051621693efd09025c"
        },
        {
          "alg": "SHA-512",
          "content": "7a5ac008d4270c23bd3c7c52aeeed39abc2af5258d5e70659110013e0c4c0bf59e209d4507501892a6876ac69934a9e35c96511a7e84d37c69eb658988b57075"
        },
        {
          "alg": "SHA-384",
          "content": "eeef2a55a390f90a59a0ec53d974d54fc460063283603b3acfea79b9be04d1660d1224191b16c1afd09f1d61e4727d86"
        },
        {
          "alg": "SHA3-384",
          "content": "3c8279a008453c25fda338d5c30e4a6ae68091fed4f823d79db8a3fa92d8536faae3fb45c87398888ddbd40513e71f40"
        },
        {
          "alg": "SHA3-256",
          "content": "fa62cdd394e11c16768268a10935d065cc45a5a6bc171ac6f89d018ba9493f64"
        },
        {
          "alg": "SHA3-512",
          "content": "97dcea1c07479b62b10c818f6a45945993e15f073eeb46a34bb3cd58431a7e635e9856a196bd6d269f15e1440c8211f2e8c9673f76716d14a9fc1a865c2d4db5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.owasp.encoder/encoder@1.4.0?type=jar",
      "externalReferences": [
        {
          "url": "https://www.owasp.org/index.php/OWASP_Java_Encoder_Project/encoder",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/owasp/owasp-java-encoder/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/owasp/owasp-java-encoder/encoder",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.owasp.encoder/encoder-jsp@1.4.0?type=jar",
      "publisher": "OWASP (Open Web-Application Security Project)",
      "group": "org.owasp.encoder",
      "name": "encoder-jsp",
      "version": "1.4.0",
      "description": "The OWASP Encoder JSP package contains JSP tag definitions and TLDs to allow easy use of the OWASP Encoder Project\u0027s core API. The TLDs contain both tag definitions and JSP EL functions.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6ef640c6c351d3d2ab219d832e332497"
        },
        {
          "alg": "SHA-1",
          "content": "cd53927f607fec2a2af2f6d9a0b3ac4d1a219b0b"
        },
        {
          "alg": "SHA-256",
          "content": "728b91691f0c23bf8d63454f0c6c092db96e1b401f0f530e308c22840c7c2bb4"
        },
        {
          "alg": "SHA-512",
          "content": "9c592028d131df8968ae15dc3cb11c785e07beaef81f5b29844adcbbb653f35a055a7a0ee4c2a6e6f6db62ff958204035fbfbecca76b6cc7f4e35ce704516479"
        },
        {
          "alg": "SHA-384",
          "content": "f4d336039835df388cf1b0d43d01755ebf7b38140d4ad322d79d928179d5229bad9ac1150e199906de0f45ce97e954fa"
        },
        {
          "alg": "SHA3-384",
          "content": "3ab6dbf62a6478000fda82b91b7f33e680a2481c138a6fe9e52e902a66955e061bfa5c5046c47e74a9a7fa679f809510"
        },
        {
          "alg": "SHA3-256",
          "content": "03cc5996149097f2749d15823e6b8270c1aac2ec0fb9ed53093e6e672d860e70"
        },
        {
          "alg": "SHA3-512",
          "content": "f730550a4edc76ff337e374c8197dfd491b5072801bacf97669c8ef73888090c8af3af4ca6ca9fb074452303e13852296c85439e6c626683cc07d9e3ac7aff21"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.owasp.encoder/encoder-jsp@1.4.0?type=jar",
      "externalReferences": [
        {
          "url": "https://www.owasp.org/index.php/OWASP_Java_Encoder_Project/encoder-jsp",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/owasp/owasp-java-encoder/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/owasp/owasp-java-encoder/encoder-jsp",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.mail/jakarta.mail-api@2.1.3?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.mail",
      "name": "jakarta.mail-api",
      "version": "2.1.3",
      "description": "Jakarta Mail API 2.1 Specification API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "288a687deb06b87602ce14cd03dddff4"
        },
        {
          "alg": "SHA-1",
          "content": "a327aa5f514ba86e80d54584417d7376ed2bde0e"
        },
        {
          "alg": "SHA-256",
          "content": "8051b58d75f982f9a5b963b3765426e824b2a64865ef0af17205e455b98db05c"
        },
        {
          "alg": "SHA-512",
          "content": "841a9784cfcfa1723d1c634b094280fabe6ecfdf640513a76a6a39b1ad29d59c1207c086cd66ec8e7f161ffaacd9e1dad12828ac4c57583e9d8593f12ae6460d"
        },
        {
          "alg": "SHA-384",
          "content": "dd18dbcf72559ea405946a6d73dc60e672b3bc222e32944b2bf51e81cd41348ad7873b5b2a9d86f0440b44bcd6e45176"
        },
        {
          "alg": "SHA3-384",
          "content": "c02d8861b3c9fee8f18bfcb41947d2a83eeaed4ea9d1bb8784525c7fedd2ccab6b704663ff5a452c78537d1b79fd960a"
        },
        {
          "alg": "SHA3-256",
          "content": "c10cb31acf35574a203d85427d81e36162edc44b9f6cd9b422c19144b8e7ae4b"
        },
        {
          "alg": "SHA3-512",
          "content": "4034e1d5280fde464902035e7491e997ffec62a327844deec6f7e64b7b2d8d1d9fe505f10691caf7223ec06e6d27ac263ae1341582a5c48adad1c7635c13f0d5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.mail/jakarta.mail-api@2.1.3?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j/jakarta.mail-api",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/jakartaee/mail-api/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jakartaee/mail-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.angus/angus-mail@2.0.5?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.eclipse.angus",
      "name": "angus-mail",
      "version": "2.0.5",
      "description": "Angus Mail Provider",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e965a2653568c0138457b4c6fc9e5d77"
        },
        {
          "alg": "SHA-1",
          "content": "427f6d52ec0782f7efaca0c0732042e347a6cb4f"
        },
        {
          "alg": "SHA-256",
          "content": "b4d8c30d35f455def6c7a05fe595a1e62ea2b80cac3efec1e9ccf4118b23168a"
        },
        {
          "alg": "SHA-512",
          "content": "500985e3045a7640049aa1ebb008d675983f537150605f192d2746ca2aa8c7a1b5231f782f950dfd968cc8ca26c32c6e93008cc7de309c5da4b17af0139baff7"
        },
        {
          "alg": "SHA-384",
          "content": "35c797fdc52800ccfbd36d7574c0919fbba1f820eafb1d236271eefb07266360c1b87c07c089f97c07d12a634e54037c"
        },
        {
          "alg": "SHA3-384",
          "content": "9a10dd9cf09af51c29d178d2dd87c6a796121753c91ca13b8c51843b8ed737803090fa93f41ec8689469550941e12473"
        },
        {
          "alg": "SHA3-256",
          "content": "7ac45dd92d65996c4de11701bf1a1130e393a3e33b4bc02af69bf627e54b122e"
        },
        {
          "alg": "SHA3-512",
          "content": "b45eb356f855b9777cfdf6be94c6797c33e86fe28e8e2e7fe7311e661f07d162e8c4e46a2f3dd67b7c0f8261ab5610c85f4f62cc874e64ee2a76eca3501e2e2d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.angus/angus-mail@2.0.5?type=jar",
      "externalReferences": [
        {
          "url": "http://eclipse-ee4j.github.io/angus-mail/angus-mail",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/eclipse-ee4j/angus-mail/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/angus-mail/angus-mail",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.angus/angus-activation@2.0.3?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.eclipse.angus",
      "name": "angus-activation",
      "version": "2.0.3",
      "description": "Angus Activation Registries Implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ad20392145690b36b4f950fe31a31a2a"
        },
        {
          "alg": "SHA-1",
          "content": "7f80607ea5014fef0b1779e6c33d63a88a45a563"
        },
        {
          "alg": "SHA-256",
          "content": "a6bd35c538cf90fff941ad6258c40c08fca0b5c9c3f536c657114f27ce0527a7"
        },
        {
          "alg": "SHA-512",
          "content": "efb987b781f665589b2a524d86826ffcf37eaf105b2f823be124fded85bd118098c0749b5d268373d00b1d3b8bf0f89f86670444f9990b91948704a7052376e1"
        },
        {
          "alg": "SHA-384",
          "content": "4086b356cdf168e28a09dfa2ee9cd54926491438d556e4608508ae6a895929adf63f3a259779c83624a9bb1f886efb6d"
        },
        {
          "alg": "SHA3-384",
          "content": "7b79721ec0b28964fad4bf56ffc3be67d81b62e45a4ac703917094e281c125834b9bebcc0623176d4904c5b50c94450e"
        },
        {
          "alg": "SHA3-256",
          "content": "aecadbd33e92abf894ae28c8cc609f5f85e8af736621c44fb71b84ca34e91247"
        },
        {
          "alg": "SHA3-512",
          "content": "ebdc07c3b3cf0817f6d9ee54bb23461657f213648b70f6c7f634a1028cdf1522d5b5a7e2168130f72afa112f36cb08858d1c94bb67b40a0f051f567b4d696d1e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.angus/angus-activation@2.0.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/angus-activation/angus-activation",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/eclipse-ee4j/angus-activation/issues/",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/angus-activation/angus-activation",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "group": "com.google.code.findbugs",
      "name": "jsr305",
      "version": "3.0.2",
      "description": "JSR305 Annotations for Findbugs",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "dd83accb899363c32b07d7a1b2e4ce40"
        },
        {
          "alg": "SHA-1",
          "content": "25ea2e8b0c338a877313bd4672d3fe056ea78f0d"
        },
        {
          "alg": "SHA-256",
          "content": "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7"
        },
        {
          "alg": "SHA-512",
          "content": "bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804"
        },
        {
          "alg": "SHA-384",
          "content": "ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4"
        },
        {
          "alg": "SHA3-384",
          "content": "9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1"
        },
        {
          "alg": "SHA3-256",
          "content": "223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff"
        },
        {
          "alg": "SHA3-512",
          "content": "3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "externalReferences": [
        {
          "url": "http://findbugs.sourceforge.net/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://code.google.com/p/jsr-305/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.2.3?type=jar",
      "group": "com.github.ben-manes.caffeine",
      "name": "caffeine",
      "version": "3.2.3",
      "description": "A high performance caching library",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0258f45d43968523cc11beeb01b240f2"
        },
        {
          "alg": "SHA-1",
          "content": "c097f0f6d21a0e6db88ea55836e26419b30dfe19"
        },
        {
          "alg": "SHA-256",
          "content": "ca70c90a5d1ce1511880ce9c93d4ad22108f61111d3daf91eb52762b571bd179"
        },
        {
          "alg": "SHA-512",
          "content": "7aa65de1cb087aa645d7217bd3162b3842fe40914b590238afc681b1d8b33647efb1fd948d21ed0210a40d4bbda882ed24f3e6d326f9a03131660ae9778bbb7b"
        },
        {
          "alg": "SHA-384",
          "content": "d5f32eb2dfc3a0dd1c60bf2a7b92b4e5fe90dd29c4a7bbd6b261f66976256e4026d4a6d60b2b81a774b28fde49901f2f"
        },
        {
          "alg": "SHA3-384",
          "content": "811dd5fe983a606177060e218a4982e2e64cd5f1715f5ad436316cd8bfab67e2cd77d83b8901ab40c133c9ad052a5557"
        },
        {
          "alg": "SHA3-256",
          "content": "306d252b82f5bb4d028feb2769662fde46564fdd2947f7e4d2a275346391644c"
        },
        {
          "alg": "SHA3-512",
          "content": "be545922c67934d4bc1a88bcd7338830919de5518cd10e02e64922f10fd8c3615d34a4345ba2500b40afba4d75b466342dfc2dad9efa179c48bf9bebc67cc970"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.2.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/ben-manes/caffeine",
          "type": "website"
        },
        {
          "url": "https://github.com/ben-manes/caffeine",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.metaeffekt.core/ae-security@0.153.1?type=jar",
      "publisher": "metaeffekt GmbH",
      "group": "org.metaeffekt.core",
      "name": "ae-security",
      "version": "0.153.1",
      "description": "Core project with fundamental runtime and build support.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "127716ece0d8a4848e5a4ad55d0ab262"
        },
        {
          "alg": "SHA-1",
          "content": "84bfea38aa2925ef1e1221283cbb5efe6a4862c2"
        },
        {
          "alg": "SHA-256",
          "content": "f6642d7fece22b6b3a2ebb6583ef094787ab1fbb41532072fdbbf314ffac0435"
        },
        {
          "alg": "SHA-512",
          "content": "0be930225eb04f2b4b4b9a7d93be3ff0070a94abab8d50a4d57b628b1dcc0c94b5b54d60e633b963ea2fc9e285921aa256261ea1564a395b0bce094c58c630ca"
        },
        {
          "alg": "SHA-384",
          "content": "49bcd7eeac0958a1899f0a9a162842933c624e519fc8d7476de58e6f7ada3cccc521f9a65f533124a6ef0ba0fd0d37ef"
        },
        {
          "alg": "SHA3-384",
          "content": "8dd8922dfb89cdaa33fb3e200d5583227f757a36d9881674135bc7014fb14c579e6889ea2c18773b4a79a87f08ba8ca5"
        },
        {
          "alg": "SHA3-256",
          "content": "9c0f759f2ad0eaf0285458f56aef859d02fa5a6d6dcd87d1ef790330c29e1059"
        },
        {
          "alg": "SHA3-512",
          "content": "1ee8af6fc6920843acd7237690f9e9177352f07ac5085561cc27597772ee1a703d24d0750275eda94c0078ec0a30d6ba597283f95fe807c1c50ffef4726aab9e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.metaeffekt.core/ae-security@0.153.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/org-metaeffekt/metaeffekt-core/ae-core-poms/ae-core-plugin-management-pom/ae-libraries/ae-security",
          "type": "website"
        },
        {
          "url": "https://github.com/org-metaeffekt/metaeffekt-core.git/ae-core-poms/ae-core-plugin-management-pom/ae-libraries/ae-security",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.17?type=jar",
      "publisher": "QOS.ch",
      "group": "org.slf4j",
      "name": "jcl-over-slf4j",
      "version": "2.0.17",
      "description": "JCL 1.2 implemented over SLF4J",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4fcd46ca51e55b9fd9b0db34474927e0"
        },
        {
          "alg": "SHA-1",
          "content": "76ea503eb688f06556a9ba69995d7eab63e34531"
        },
        {
          "alg": "SHA-256",
          "content": "affd06771589ebfe454bb11315a4f466ecaa135b95f3e7939534cf1d2fd7064c"
        },
        {
          "alg": "SHA-512",
          "content": "7efb2771bad2e643b0e814cd78ab4f9af3ea166643700776618c397e9755ca11f4b7c00030562a619932c9d2ec5114fd253ece3abbc3db2f1a064431d8990733"
        },
        {
          "alg": "SHA-384",
          "content": "96fd8b2732de79c40e5e6613e324d2845dc6e19bf31bc7f3e9fa6730fa527cd16579ba9eb7915481faae1e9a32dc82fd"
        },
        {
          "alg": "SHA3-384",
          "content": "252a3e6847dafd84955a71724d71641b5c6508bcbbc1f2457fdb18994b61f6d78b08cbd40d5c430743950e351ec79835"
        },
        {
          "alg": "SHA3-256",
          "content": "4c066cec2c40de9b5743f43d99b629d60de937718f69ffd837bbe5902682ee92"
        },
        {
          "alg": "SHA3-512",
          "content": "3334a1fff0751378abe8e010ca9716a85a15a90450265699c32886d2e8f9ff63df89237667a262350d860dbfb2f20fffff14e9a094f0bd2acf990dd543c2b86f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.17?type=jar",
      "externalReferences": [
        {
          "url": "http://www.slf4j.org",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/qos-ch/slf4j/slf4j-parent/jcl-over-slf4j",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/us.springett/owasp-risk-rating-calculator@1.0.1?type=jar",
      "group": "us.springett",
      "name": "owasp-risk-rating-calculator",
      "version": "1.0.1",
      "description": "A Java library for calculating OWASP Risk Rating scores",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f387d7ce91df7f1b56224b972b916ebe"
        },
        {
          "alg": "SHA-1",
          "content": "f4ae15b14d7a4c3686f6a8a8a93e30560472b1f8"
        },
        {
          "alg": "SHA-256",
          "content": "9b66d91d1ff61f99e320466ff451555696f139147260528591ff1718c5605d1c"
        },
        {
          "alg": "SHA-512",
          "content": "449331aaabc401a7c7ac42c6bba06d17a2c2dc8def07961b93de7bde8fb9f54aa2541cbab7e541b6fa1552977d46e5367a78277cffbafc60873bb7042facff65"
        },
        {
          "alg": "SHA-384",
          "content": "e83afc9976cfcb5419768fdba983815bf755101fef34df693b6033094e12a29d23127148edef4ba6db3573e0b2bb3871"
        },
        {
          "alg": "SHA3-384",
          "content": "07bed3d3cc524090d01da7711e684d7c645e9225e38225ca92da6f58f3ae86c9d9f2e1a45ad923f9345abecb609c0be1"
        },
        {
          "alg": "SHA3-256",
          "content": "153dbb661c502fd174cdbb735a0a89f69555365e165dd6a91d7c765226b9947a"
        },
        {
          "alg": "SHA3-512",
          "content": "6c6bb8298f8f3337395693f4963d08d21d7f76e6ef8802773e37efc64b1b25a6f8ec77169f730591f429cfa5ac5f6a1b2ef0948af67fa49f19cf7ba8a0223f25"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/us.springett/owasp-risk-rating-calculator@1.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/owasp-risk-rating-calculator",
          "type": "website"
        },
        {
          "url": "https://travis-ci.org/stevespringett/owasp-risk-rating-calculator",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/stevespringett/owasp-risk-rating-calculator/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/stevespringett/owasp-risk-rating-calculator.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/us.springett/cpe-parser@3.0.1?type=jar",
      "group": "us.springett",
      "name": "cpe-parser",
      "version": "3.0.1",
      "description": "A utility for validating and parsing Common Platform Enumeration (CPE) v2.2 and v2.3 as originally defined by MITRE and maintained by NIST.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "753b3f9a2223c44111f7098ff8a65e3f"
        },
        {
          "alg": "SHA-1",
          "content": "377c4cdca1c3c800dd1ff77d6b5cece16dbf1852"
        },
        {
          "alg": "SHA-256",
          "content": "f98a50dce0a381e08f0f0ac067801c7f4c51dc7f8f1fe7a3c9960c684a809705"
        },
        {
          "alg": "SHA-512",
          "content": "241e1a559ac01966f74e820d0af3fb4f79ec41b76590f26198929790a35579f5663d3d8f97b98e841665f57eb5bc6c51370969f0db34c99c3293c6d98093d9c2"
        },
        {
          "alg": "SHA-384",
          "content": "92929bc29a157cbe13d424875e5a66eacd52b2e20a412306ae48a43076123dca75f1cf0d6d075e140cec34e4bf7a5e25"
        },
        {
          "alg": "SHA3-384",
          "content": "bf36fd4e57aa02054d12018926b7fdb8f89b1fa669b1b4c7ff8327c3203c86843c53825facedd34b86c6d95455ce1907"
        },
        {
          "alg": "SHA3-256",
          "content": "064ece86c096355ca9a06fb4942fb3abac3555e8213653fce7ed1f7767b5531d"
        },
        {
          "alg": "SHA3-512",
          "content": "2f005c9caa28acb5a4f9d521a4b847316f949f9f377bbad4cf25ba485127104717bab5e2382238c4f7349d598eb4de073f08dea0838990d32b6d1f2741b33fc5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/us.springett/cpe-parser@3.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/CPE-Parser",
          "type": "website"
        },
        {
          "url": "https://github.com/stevespringett/CPE-Parser/actions/workflows/maven.yml",
          "type": "build-system"
        },
        {
          "url": "https://github.com/stevespringett/CPE-Parser/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/stevespringett/CPE-Parser.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.cyclonedx/cyclonedx-core-java@12.1.0?type=jar",
      "publisher": "OWASP Foundation",
      "group": "org.cyclonedx",
      "name": "cyclonedx-core-java",
      "version": "12.1.0",
      "description": "The CycloneDX core module provides a model representation of the BOM along with utilities to assist in creating, parsing, and validating BOMs.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "dabcf66c24dc633f2d7b88a69beeb16d"
        },
        {
          "alg": "SHA-1",
          "content": "449f227a8e1603880fff41789a8c1d3a090b42ec"
        },
        {
          "alg": "SHA-256",
          "content": "9f7c0dba25f5c02eccf3d79dea9566f1794e3e357655286c4831480952ab4788"
        },
        {
          "alg": "SHA-512",
          "content": "9691c6928c7681ec3b733b02febd2b95c1727d8fb8d25fe5dc116d0bbba33bfff688bcaf38b709d605516924bcc3156b404d699c94ca119682e362f8fcda4926"
        },
        {
          "alg": "SHA-384",
          "content": "57f1d23616aae2409e17165c172f290349a51a088189e37751460b97dc08e20028bd52121d9b4a97a98cf3d5b8245079"
        },
        {
          "alg": "SHA3-384",
          "content": "e7f119b0488c8f78e2afb47c253e6c39c5f1cc80beaa0c6c44924654362a0d475b885a4605253c0b8a3ca4ec1587d60e"
        },
        {
          "alg": "SHA3-256",
          "content": "f34c7330ac0e58fadd1c82c0f0cdc21984840b63f07fea340a7b8f2acdae3701"
        },
        {
          "alg": "SHA3-512",
          "content": "3fa4373bd6178acba5a6da96c137108ca1ece1fb916c2a804da935c5febd38cc02684284126884b925759a2d8aeff3c4611caca3a24e201630ef9b76567f4ce8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.cyclonedx/cyclonedx-core-java@12.1.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/CycloneDX/cyclonedx-core-java",
          "type": "website"
        },
        {
          "url": "https://github.com/CycloneDX/cyclonedx-core-java/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/CycloneDX/cyclonedx-core-java/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/commons-codec/commons-codec@1.21.0?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "commons-codec",
      "name": "commons-codec",
      "version": "1.21.0",
      "description": "The Apache Commons Codec component contains encoders and decoders for formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c49977029838babaf8a71485aa9aaef8"
        },
        {
          "alg": "SHA-1",
          "content": "d95f998db5f89900fe895daf6cd2cddcb2f1d64b"
        },
        {
          "alg": "SHA-256",
          "content": "4da851cb6abfb98bfe9eb77c5e5fc47f5414fa28b94e21b7fd9a646705dc167f"
        },
        {
          "alg": "SHA-512",
          "content": "3ceb4aa588d0b918e46b1ddda9ff41b5a765985bf66542d2728458fc3f83b9dedfd972ff5d919cf6f456fbaa9f8c4e5f0c0913848ec3a471c316374e683b1f2a"
        },
        {
          "alg": "SHA-384",
          "content": "05786582b0a85264688ad5b49ad6da09db1cdfe6301cf31ddea48f97f45b13ff25d9e3def1702890457fd5bbbd00f793"
        },
        {
          "alg": "SHA3-384",
          "content": "805bda170837bbedbecc5c63a5defc6a348777952906d8e6f33544866e86aa25c9d28f3b351e981d0fa49bb16e07884c"
        },
        {
          "alg": "SHA3-256",
          "content": "cbc2eafcba305c08e852133d0881d209799c4dc83d587869eed5f281d6bed4f3"
        },
        {
          "alg": "SHA3-512",
          "content": "244e6a342d4b5a6e7d077426427979f26320be305f1cb33d933672c926ea3a96fe4f284c9f592970f604928209fe0e149613b64990202d595bce01a669de418b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/commons-codec/commons-codec@1.21.0?type=jar",
      "externalReferences": [
        {
          "url": "https://commons.apache.org/proper/commons-codec/",
          "type": "website"
        },
        {
          "url": "https://github.com/apache/commons-codec/actions",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://issues.apache.org/jira/browse/CODEC",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/commons-user/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/commons-codec",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.21.1?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.dataformat",
      "name": "jackson-dataformat-xml",
      "version": "2.21.1",
      "description": "Data format extension for Jackson to offer alternative support for serializing POJOs as XML and deserializing XML as POJOs.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d9120cfeab371bded24af440a8f6415a"
        },
        {
          "alg": "SHA-1",
          "content": "73226950371cac1fb361b7ea217db52f9f3fdfb6"
        },
        {
          "alg": "SHA-256",
          "content": "93b9fb7d4d3f8b0f6876f50f3bf4931c28ed1a6aedbce93c52749068c38ab092"
        },
        {
          "alg": "SHA-512",
          "content": "b2cc9fb0d3816368d6601fc4bdbc0cbb9a02757c4637a0aa53dd4f1872bf3719956d6bdd46ad4e5e822b5219ff3957882a36fc55bcf91340a2c781b5d4d971cc"
        },
        {
          "alg": "SHA-384",
          "content": "5e3618565af79fe4d6a749495c08a09937190ff1c60f660a8b41c7875067747169d238dd72751c35f659666caf3711af"
        },
        {
          "alg": "SHA3-384",
          "content": "4378d4100f38ca2e2a2791ca0a6f434bd73d3175b3ddbfaa361f94ea50915d0018dd95e03d50cef47b2f80668dad38f2"
        },
        {
          "alg": "SHA3-256",
          "content": "e41aacbc675ee973178e025fd551baf286756c29f543de5f9d484211a2f6686c"
        },
        {
          "alg": "SHA3-512",
          "content": "c44c13f2326143e7e058754a7bf785db372ec77824c3661393419916dfb683ec2d506ba1664fd3c88e719a64f9c417f04fdc844ed3535816aca79c46ed112f66"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.21.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-dataformat-xml",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/FasterXML/jackson-dataformat-xml/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/FasterXML/jackson-dataformat-xml",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.networknt/json-schema-validator@1.5.9?type=jar",
      "group": "com.networknt",
      "name": "json-schema-validator",
      "version": "1.5.9",
      "description": "A json schema validator that supports draft v4, v6, v7, v2019-09 and v2020-12",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "84622292ac5001bac8f16dc5002a8b94"
        },
        {
          "alg": "SHA-1",
          "content": "6a2f9fe324b9dc8d8e0c3d7b435f7ae99595a556"
        },
        {
          "alg": "SHA-256",
          "content": "e0b8baeb78fd1ba027454ee3974d8a02f54447eaa510d3052820a7d2160d9ae4"
        },
        {
          "alg": "SHA-512",
          "content": "5ba210c135717a6ed043e0889d96f6381b3668f9e2a011bd0def8138ad327813f792259858ae5ed192cb8ec0645308113769aa8ebee903db1ccd82e98cb3009d"
        },
        {
          "alg": "SHA-384",
          "content": "21a4f4fb586959241ce92ad788cb4326d62232aafcddf6953ef7769efa5c6936487ffea51693ff44206f4d66c83ee753"
        },
        {
          "alg": "SHA3-384",
          "content": "36bb0b96a34254780e991440e879c1f44a0a62362e115a5c761df0ec1c8f2a9f64a7421ea3cb50a589ae501619fd3942"
        },
        {
          "alg": "SHA3-256",
          "content": "c97a2638d46c235056bacfe90d8e0b88a823a5622e88b608a31f481f3adb9ccf"
        },
        {
          "alg": "SHA3-512",
          "content": "08b256bb3ac49102d87c0e635d025699154bfa7785916d591173af6ec14dfde885e34500a7bd13159a00a7fe78dc859aefa9dc930d0719a64ea08209ccffb20a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.networknt/json-schema-validator@1.5.9?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/networknt/json-schema-validator",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/networknt/json-schema-validator/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/networknt/json-schema-validator.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.ethlo.time/itu@1.14.0?type=jar",
      "group": "com.ethlo.time",
      "name": "itu",
      "version": "1.14.0",
      "description": "Extremely fast date-time parser and formatter - RFC 3339 (ISO 8601 profile) and W3C format",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e537d0a2bc8066726f7e4654c253cf84"
        },
        {
          "alg": "SHA-1",
          "content": "c0f9f9d4f4404787e992ab3af5ae95f2fad79e47"
        },
        {
          "alg": "SHA-256",
          "content": "5cf40ab0cc77828ab2b875b1f3ecd71c8295d7721933476abc2e08fddcea164a"
        },
        {
          "alg": "SHA-512",
          "content": "aa69a6af3a7123eb41425bbaf6834e16dc3323172709e2338b8a21b970fd21333d996515f42da4aa0225251e30542ad7d9c8332bdf7d62ed96b42fadc8a1520d"
        },
        {
          "alg": "SHA-384",
          "content": "8d201334c39b68d13d66fc9df2440fa848b055a9b901e1c630ff66a47e70c8816484d106ae18c642d4257034f33e55f2"
        },
        {
          "alg": "SHA3-384",
          "content": "033715e1422cb3f22c1073bc7b058fd16d1436c6314f49f13480d81c86b656cb77a4d852cbba35542bc8f2ce49244ba6"
        },
        {
          "alg": "SHA3-256",
          "content": "f18d275dd2a0038a82432e06bb9f396151310136e3a316a869ef54d7fae834c5"
        },
        {
          "alg": "SHA3-512",
          "content": "8a51b3c6144eb2e363f8804da316d9e3dc246be07af4c0bb55e9540c2a0deb5eb9beb825120d3d203e3a561fd8a605ad64f3af5d233725e1b9c7e06232deaea9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.ethlo.time/itu@1.14.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/ethlo/itu",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/ethlo/itu",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.21.1?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.dataformat",
      "name": "jackson-dataformat-yaml",
      "version": "2.21.1",
      "description": "Support for reading and writing YAML-encoded data via Jackson abstractions.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f0a647f76bb70da49b12f9d862cc6d77"
        },
        {
          "alg": "SHA-1",
          "content": "334d9c06a7b63ae67b72b5926dd10fb35cff0c0d"
        },
        {
          "alg": "SHA-256",
          "content": "5c94fa55d4b93bd4ea9ac6f2cf4928ff50822d1c43e521e715d3abf23031a06d"
        },
        {
          "alg": "SHA-512",
          "content": "a4af873838cab58bdef7d953c4f081fae1d6354b05f8b1937ab62b30f61be73e576c998b01e712c1fa42fd7c3de951e302aa807b2d7f5fe362c3e3603410e1d9"
        },
        {
          "alg": "SHA-384",
          "content": "d7c90fb256fa1343abbc1733159d3791d9a085f6f7fc8eec2229d6f426a8aa1e657ead861ac5ee332d023a7a4faa8187"
        },
        {
          "alg": "SHA3-384",
          "content": "9e8eefd219caeb51edc21445309135a83d704750b279a81a84684698b566a62c0dded617523c5641b5756f811cb0d3bf"
        },
        {
          "alg": "SHA3-256",
          "content": "88d37442964c61d66bab334530de53e7a89889c6206d2258bcecfe55563f63ba"
        },
        {
          "alg": "SHA3-512",
          "content": "7ea2d5f81f786681482cd6cb5198b4e59eb86500f86e2aa9061d23850b447ac08f513f3f44938621cb726cde3b17e2d30c9fbd28c613d875ecd14502c1b51a8c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.21.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-dataformats-text",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/FasterXML/jackson-dataformats-text/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-dataformats-text/jackson-dataformat-yaml",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.json/json@20251224?type=jar",
      "group": "org.json",
      "name": "json",
      "version": "20251224",
      "description": "JSON is a light-weight, language independent, data interchange format. See http://www.JSON.org/ The files in this package implement JSON encoders/decoders in Java. It also includes the capability to convert between JSON and XML, HTTP headers, Cookies, and CDL. This is a reference implementation. There are a large number of JSON packages in Java. Perhaps someday the Java community will standardize on one. Until then, choose carefully.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "fec4b08b6ae3b07aa34ff719ee7a5cc3"
        },
        {
          "alg": "SHA-1",
          "content": "758adfe5ff5c3cc286d62c9d097cbca84f870536"
        },
        {
          "alg": "SHA-256",
          "content": "2a3438fbf9293174ea82bdfa35e83d8b965cfe6bddc034a1ac5d60107174c209"
        },
        {
          "alg": "SHA-512",
          "content": "575500a53668f4a4501fe224c686fc3e8b04b3d685bba2d1fe7c5fa2e24f5c069a18645bbaf7f9d17b4101f43b8aa0de5b453cbbee1c0bfaca12def376fb9c92"
        },
        {
          "alg": "SHA-384",
          "content": "37e930cb0b106f95577f8cacaa8d36aa794193fa27463eb20945c45922997cad46885116eafc6435996cf10b7c812b82"
        },
        {
          "alg": "SHA3-384",
          "content": "32484a4abfa6b039e2ffb92fac8be7dc0668889138747bd2315013f85979a39319aa62b87f7a7e5eafbf3eb68d6303b7"
        },
        {
          "alg": "SHA3-256",
          "content": "6e89eac8b1560427d383b93d455864976021f4f88d024c2848b990c3017ff868"
        },
        {
          "alg": "SHA3-512",
          "content": "1448da7d5fb272b96ecdf0abd64930ceff777e877a55d3535015905b3dca7c7cd7e55ec4bd3b1229fb5021a16ae8d53c04565f16cb4721c40c068b63c6ed8439"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "Public Domain",
            "url": "https://github.com/stleary/JSON-java/blob/master/LICENSE"
          }
        }
      ],
      "purl": "pkg:maven/org.json/json@20251224?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/douglascrockford/JSON-java",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/douglascrockford/JSON-java.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.servlet",
      "name": "jakarta.servlet-api",
      "version": "6.1.0",
      "description": "Eclipse Enterprise for Java (EE4J) is an open source initiative to create standard APIs, implementations of those APIs, and technology compatibility kits for Java runtimes that enable development, deployment, and management of server-side and cloud-native applications.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "314c930b3e40ac1abc3529c7c9942f09"
        },
        {
          "alg": "SHA-1",
          "content": "1169a246913fe3823782af7943e7a103634867c5"
        },
        {
          "alg": "SHA-256",
          "content": "8a31f465f3593bf2351531a5c952014eb839da96a605b5825b93dd54714c48c4"
        },
        {
          "alg": "SHA-512",
          "content": "8651fc14b79e284fe29dff5b2cadbf6748615ececde798c42687472f4f6fd1f80ee05ec53794021c62a11abed0c0170bb08b28d3f9cd7f562eb320bc9870ddec"
        },
        {
          "alg": "SHA-384",
          "content": "48b2a26351619286ffe41d25e5e61cbc0eb8a5a648a205d0f8db48178278cb16850469fe8dbc219aee0ee37f4081c248"
        },
        {
          "alg": "SHA3-384",
          "content": "2047f0b88a12619fb3f07a98048fc405e9cec4ddee6af2a2efc06c1172d2bebefc6c23bdb4df0a1054060f91d5cc5617"
        },
        {
          "alg": "SHA3-256",
          "content": "4b506d06772f32251cadc40251623ebd4f3144531249ce4821787b1a9c4a55b3"
        },
        {
          "alg": "SHA3-512",
          "content": "07632a67f7ca7b460cfc3042ecf97f9097e7d7638209434def89a3bd55da5a31e287f32def27ce776d5775ec0629979abb08fe2836d88d638802194af0320fe0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.servlet",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/eclipse-ee4j/servlet-api/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/servlet-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/servlet-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.validation/jakarta.validation-api@3.1.1?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.validation",
      "name": "jakarta.validation-api",
      "version": "3.1.1",
      "description": "Jakarta Validation API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "93ce96e77734f4280157edeffcae44e8"
        },
        {
          "alg": "SHA-1",
          "content": "ec8622148afc5564235d17af80ea80288d0e7f92"
        },
        {
          "alg": "SHA-256",
          "content": "63ce00156388c365f3ac1be71fcfaf114682fc0c452020b5df6e7ec236e142ab"
        },
        {
          "alg": "SHA-512",
          "content": "02483f9d631538a71f436982ed3842c5d054781ec58350ba33fd0e0db92db531caa17abd2e7aa25a062ba4cd5e85b63a27b615041df236ffb979a73fdd121e18"
        },
        {
          "alg": "SHA-384",
          "content": "8e4a235fb69ebf7327fe8947b0be32c76ae8ebb748d0b3195efb87cd1d57ea92402403a59e2c4312a11a3a2300bbb4d6"
        },
        {
          "alg": "SHA3-384",
          "content": "7f52280ddd46c87e00c6b10f708aa77d571e68942651ada952b4b9e58805a0216394a31a4666c88908af0a6408c9b64d"
        },
        {
          "alg": "SHA3-256",
          "content": "21e404a7897b223e9324f7b709c3038f4ca01599896a0e166cee4eb714b9e600"
        },
        {
          "alg": "SHA3-512",
          "content": "6bc15a9beecdbdb881c1ed5d7682156417db766898a14e205a496b8d7e0e552a4e4c2303727b1c4dbc2391d62257b1b9a9504827dc6b8ceff149225d94bf10a9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.validation/jakarta.validation-api@3.1.1?type=jar",
      "externalReferences": [
        {
          "url": "https://beanvalidation.org",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://hibernate.atlassian.net/projects/BVAL/",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jakartaee/validation",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
      "group": "com.github.package-url",
      "name": "packageurl-java",
      "version": "1.5.0",
      "description": "The official Java implementation of the PackageURL specification. PackageURL (purl) is a minimal specification for describing a package via a \u0022mostly universal\u0022 URL.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "90856d8bb5b17e08fdf03b6a2f93b81c"
        },
        {
          "alg": "SHA-1",
          "content": "e6bf530f52feab911f4032604ca0b8216f7ff337"
        },
        {
          "alg": "SHA-256",
          "content": "e45551727707acc0c56ac62d56964332ea0f138d6cc3656d988b9369150f5247"
        },
        {
          "alg": "SHA-512",
          "content": "8064df400154caa110b8845bd17e6cea2683307e575ce88e40d7c0c8965ea0af6c150a376d8b9ba7354676c41b52c94535f30c6e830447613299ccf5fc7aa959"
        },
        {
          "alg": "SHA-384",
          "content": "0597100022f72e020c9d929bf57ecef91af7574610fb03b4019feba4b25f491a076f03577be2009e66d9001c4c0f8ab0"
        },
        {
          "alg": "SHA3-384",
          "content": "bbdd55a31a4755ef589bcb176283fe03e3c9089d315eab577fef3a9c2d02e632c6ac3fdebbc90a2f0f8ed7974b9f397c"
        },
        {
          "alg": "SHA3-256",
          "content": "c9881b69bde35ea6ff4006877b9fbf91462f911b5b142aa699a45a00867d413a"
        },
        {
          "alg": "SHA3-512",
          "content": "2b9caf58deef687a9bf01abd61a7af4abdb61247a8a966683a18157ee948f1ea424602598dc8f665bf24f7e1e516866298ef0507e9d697cb20dcf60eff2095ca"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl": "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/package-url/packageurl-java",
          "type": "website"
        },
        {
          "url": "https://travis-ci.com/package-url/packageurl-java",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/package-url/packageurl-java/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/package-url/packageurl-java.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.lucene/lucene-core@8.11.4?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.lucene",
      "name": "lucene-core",
      "version": "8.11.4",
      "description": "Apache Lucene Java Core",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "93aa10ea2d06de0b4351dc35247bc301"
        },
        {
          "alg": "SHA-1",
          "content": "9b3465369c19260050c74270e908796882f8e468"
        },
        {
          "alg": "SHA-256",
          "content": "1a2aae423e3749578524dfdd94377dd8f24d94fa2685b41a34db0ebc1d04f00d"
        },
        {
          "alg": "SHA-512",
          "content": "759ae54ece3336e73b938bddbf921973ee9d1e98b05414f79c0a8838df5bed771e4e2d6aaf7b7895b0b0da453f42d717def8b4038d1173fa1c78ef96d58b18e7"
        },
        {
          "alg": "SHA-384",
          "content": "6b786bbd86677dc77c169fb0b6f34d49aba3d539b08beddef73228d14e532197a7f9072fceba80e81bdfa65feab5cd14"
        },
        {
          "alg": "SHA3-384",
          "content": "af1b5ea3a269dfb95dc2c8f7e1dd7e6af883bbb22b049035596dffc0986c6986e827a00dbe64f088c9d7a5fed03e7880"
        },
        {
          "alg": "SHA3-256",
          "content": "f6ad3714a5a5211cd5f697d38457d8aededfe253c10019489eb8b119786b86fc"
        },
        {
          "alg": "SHA3-512",
          "content": "3ce80736723207ca4ae8f35d409d03f2c96cb1dbe59d54a396cec5f623757f027343bc8e194a2dca69e7124485083f24765726ebecad9f95e8f76d5c80f59008"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.lucene/lucene-core@8.11.4?type=jar",
      "externalReferences": [
        {
          "url": "https://lucene.apache.org/lucene-parent/lucene-core",
          "type": "website"
        },
        {
          "url": "https://builds.apache.org/computer/lucene/",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://issues.apache.org/jira/browse/LUCENE",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/lucene-general/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitbox.apache.org/repos/asf?p=lucene-solr.git;f=lucene/core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.lucene/lucene-analyzers-common@8.11.4?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.lucene",
      "name": "lucene-analyzers-common",
      "version": "8.11.4",
      "description": "Additional Analyzers",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0897479eb80d2edeedd6b9add69d1c3f"
        },
        {
          "alg": "SHA-1",
          "content": "a74683594f32cb4d947b12fb6afc0a326b293952"
        },
        {
          "alg": "SHA-256",
          "content": "cdd75140d0033c8451d46b42ade5e7f2619a16dfc2cdc9cfc8d68adb752dd8f6"
        },
        {
          "alg": "SHA-512",
          "content": "643b4a518b52f53a09c616ff91e36a9427dbdae83914fc1d339b60ceb4df1c0dc3a273722c5719f5d12bb3383591ac24f3750a93758eb0040f3c05e41d794f77"
        },
        {
          "alg": "SHA-384",
          "content": "4dfda98deeb81a4de59eb08b84c8f220b42fd27c4d94e6d666e0720fea16b5dad60977ad75ae91a248613eb08d73f112"
        },
        {
          "alg": "SHA3-384",
          "content": "5edd4d32092349eec9383c665f7ef06a2bb1ae6b2aff0f93fcf19a44ad897388b5894dd4d94fb7afc95467d04275d973"
        },
        {
          "alg": "SHA3-256",
          "content": "9bbe9dae4383b8c5b167a27dc6c4de1d46648da5d71829ae9f5ff0d42d56e0cf"
        },
        {
          "alg": "SHA3-512",
          "content": "cc3af5e19ec696e49f39a92484f4ade91f1bd16ee4b245048d0bf293821b461c1859c976e6954e5c6848ec20d4b1497b0f8891aa7875b09bfc49fe07f0d9413e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.lucene/lucene-analyzers-common@8.11.4?type=jar",
      "externalReferences": [
        {
          "url": "https://lucene.apache.org/lucene-parent/lucene-analyzers-common",
          "type": "website"
        },
        {
          "url": "https://builds.apache.org/computer/lucene/",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://issues.apache.org/jira/browse/LUCENE",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/lucene-general/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitbox.apache.org/repos/asf?p=lucene-solr.git;f=lucene/analysis/common",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.lucene/lucene-queryparser@8.11.4?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.lucene",
      "name": "lucene-queryparser",
      "version": "8.11.4",
      "description": "Lucene QueryParsers module",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "98e49a1bdc4c7405d4da226d9be1f2c9"
        },
        {
          "alg": "SHA-1",
          "content": "6bb86c810e23fffb52c964d9c376b784db9c58d7"
        },
        {
          "alg": "SHA-256",
          "content": "08ef0c517f5ef756981ce954129e9c9ca764b1e3e6be57c723c665249f28e38d"
        },
        {
          "alg": "SHA-512",
          "content": "c969cf738c8b3638a99b87a57d4d1f85430fd0df2391634628ea7b93ca21a7d27a84610c49e76dce20ed11cb5eba50220070da79141967f162db9522fc2aa6c8"
        },
        {
          "alg": "SHA-384",
          "content": "8d8ac7ee5b268d7519ac10c8a3809d9fd9ffeed3b4b1f51ba8dd07a112d3c7a477fd013d815089112ec2780d1a3f1410"
        },
        {
          "alg": "SHA3-384",
          "content": "6294aac4a7706dfd4b5065c5e88f59b9c401b39f1e31130e8051e653c95c86047a188395cab7dfbaf5799f45aeb8ae8d"
        },
        {
          "alg": "SHA3-256",
          "content": "af19903c070e1ee0a4a16a5ecf4af22afe4e322a99a9f6c826793492c569b437"
        },
        {
          "alg": "SHA3-512",
          "content": "15aa9156895c11ab75890b4202d204073fe031b0020b0038cf5a61a9c2ba668838e0cbec600f7c17b2d699b477d00564bf69c6ea5add8b73832416627e6f89e0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.lucene/lucene-queryparser@8.11.4?type=jar",
      "externalReferences": [
        {
          "url": "https://lucene.apache.org/lucene-parent/lucene-queryparser",
          "type": "website"
        },
        {
          "url": "https://builds.apache.org/computer/lucene/",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://issues.apache.org/jira/browse/LUCENE",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/lucene-general/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitbox.apache.org/repos/asf?p=lucene-solr.git;f=lucene/queryparser",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.lucene/lucene-queries@8.11.4?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.lucene",
      "name": "lucene-queries",
      "version": "8.11.4",
      "description": "Lucene Queries Module",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "81e28127c4da716f096bf3aaebb668a6"
        },
        {
          "alg": "SHA-1",
          "content": "0d4e4dfe70df1c8979444c4614774a67513de1a2"
        },
        {
          "alg": "SHA-256",
          "content": "895870673ecbe05aec0fea72c0c686f272bdf90344b9f050d9fa1e814ce1577b"
        },
        {
          "alg": "SHA-512",
          "content": "274f9535c10c01db101a18194aace9b2b083938495821b76ebd3d0e8c5b6637399a329a406a61251b61bef472ab1ad5fa2c177b95963df8593e210250b5a2e96"
        },
        {
          "alg": "SHA-384",
          "content": "b716d24d31d7fab92ebb02eaad2ae5c933ebbc4a5cf45dd066208134c1965c795976058ac1fe98370782de4710d905d1"
        },
        {
          "alg": "SHA3-384",
          "content": "9ff47d3db01dbbc7abe2a6319bd9011f8c1b4194cda9c3ac9aac745c30364862f1232117044d0ce9f85cfb0e088ab5b1"
        },
        {
          "alg": "SHA3-256",
          "content": "4cfccdde163c86c336d3fa3554f7cda1c2ea91c0cecff2070f76ed67a4e09cf5"
        },
        {
          "alg": "SHA3-512",
          "content": "648cd0a56489b6628e626b411ddb09ef712699c056f097497fd6591b6e3c05135afd30d5cb68c02d0f3d1836ae9f86c8920af6c4e93dc18c2042196275ddd638"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.lucene/lucene-queries@8.11.4?type=jar",
      "externalReferences": [
        {
          "url": "https://lucene.apache.org/lucene-parent/lucene-queries",
          "type": "website"
        },
        {
          "url": "https://builds.apache.org/computer/lucene/",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://issues.apache.org/jira/browse/LUCENE",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/lucene-general/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitbox.apache.org/repos/asf?p=lucene-solr.git;f=lucene/queries",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.lucene/lucene-sandbox@8.11.4?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.lucene",
      "name": "lucene-sandbox",
      "version": "8.11.4",
      "description": "Lucene Sandbox",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "3c7e64e99b1fd1f755d1f1b1b2d48c07"
        },
        {
          "alg": "SHA-1",
          "content": "74a54dd996b9a00ec6d90aff1b6de105bee95c8b"
        },
        {
          "alg": "SHA-256",
          "content": "d925fd0275df1d8b0aba987c958024644a5670d468806098ef65bf6e054da665"
        },
        {
          "alg": "SHA-512",
          "content": "db44f2313408ff1bbe1c0259e3419c48a65d9355b5a37b85f7a28ac4d2c655d0e8d6b5e97349f42692bfa412d73b9f643cae5a942f579281d2c2a1ee4e63a6a4"
        },
        {
          "alg": "SHA-384",
          "content": "e3d152cda33468b34a564a300e2de172e7c07befc55af53fb27e6e3e86e4f3fe5a33beaaf305b8ef2301aa87f7e1e206"
        },
        {
          "alg": "SHA3-384",
          "content": "1f30eb20521792700e866f38154dd598a2bd61518aa2330aa47a0a42c98f666ce150e8ec36a8375c81e8b264594c594b"
        },
        {
          "alg": "SHA3-256",
          "content": "67e9737a98f7c470ae3033546e57a6f0d8b1a810dec0d28afb9ac1226b36d836"
        },
        {
          "alg": "SHA3-512",
          "content": "e3901bad37131a80c990bbed25175cd091b58ae8d08d2b518a91031b32d77e89905f1320d8e73a8838f24e50558ed20e6d96c4b22b9e3e8bd53cbf7d34f126c0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.lucene/lucene-sandbox@8.11.4?type=jar",
      "externalReferences": [
        {
          "url": "https://lucene.apache.org/lucene-parent/lucene-sandbox",
          "type": "website"
        },
        {
          "url": "https://builds.apache.org/computer/lucene/",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://issues.apache.org/jira/browse/LUCENE",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/lucene-general/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitbox.apache.org/repos/asf?p=lucene-solr.git;f=lucene/sandbox",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.jeremylong/open-vulnerability-clients@9.0.3?type=jar",
      "group": "io.github.jeremylong",
      "name": "open-vulnerability-clients",
      "version": "9.0.3",
      "description": "Clients for vulnerability sources",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "40a78f889b99cc6e37921daf0c7f58ec"
        },
        {
          "alg": "SHA-1",
          "content": "bc5b006328610de58b37ec3d6244560c51f12280"
        },
        {
          "alg": "SHA-256",
          "content": "14bb1bf38aa1cdb8164b6b0d6faf1feb174b4a663047e5733829d7f4159709e2"
        },
        {
          "alg": "SHA-512",
          "content": "5802c4e926dbf180370acd9c1c320c3665b1c681c8b741d73da3bebbc5464f6c24f93579128aab129891a137b58197347632717c9f365bed02e7a492797f830d"
        },
        {
          "alg": "SHA-384",
          "content": "9d268554ca5703b5f46757a508d972058961d95eeaf8e0deb28803884384899c68f2cada07b499a9a378aeeef6a5f0f2"
        },
        {
          "alg": "SHA3-384",
          "content": "5e2eaf4248e52761bbba3b8622957136ea3b49770d1c543967e072d6e0d5c3bb58c610e3877587ef92df8f937d03f777"
        },
        {
          "alg": "SHA3-256",
          "content": "44a653a4e29d085887c697994edf8ee460b87b9a5e5cbada53e8057c1556b677"
        },
        {
          "alg": "SHA3-512",
          "content": "8d97f06bdf45e81d331a69a82f9a843abda9d50b81e392f5d3363089669b11ff41fa98b52b02d0949b4d9d07738e8361ec1b93c6114cbae34d00a8ca67c432f0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.jeremylong/open-vulnerability-clients@9.0.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/jeremylong/open-vulnerability-clients/",
          "type": "website"
        },
        {
          "url": "https://github.com/jeremylong/open-vulnerability-clients",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
      "group": "org.jspecify",
      "name": "jspecify",
      "version": "1.0.0",
      "description": "An artifact of well-named and well-specified annotations to power static analysis checks",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9133aba420d0ca3b001dbb6ae9992cf6"
        },
        {
          "alg": "SHA-1",
          "content": "7425a601c1c7ec76645a78d22b8c6a627edee507"
        },
        {
          "alg": "SHA-256",
          "content": "1fad6e6be7557781e4d33729d49ae1cdc8fdda6fe477bb0cc68ce351eafdfbab"
        },
        {
          "alg": "SHA-512",
          "content": "efded31ef5b342f09422935076e599789076431e93a746685c0607e7de5592719ba6aacde0be670b3f064d1e85630d58d5bce6b34aed2a288fdb34f745efb7bc"
        },
        {
          "alg": "SHA-384",
          "content": "814f860e5a44ead6c457676841eef471a8b87be31b84c60a8a4477a18a9cbcb6e3c2ae700969d5c5e52309d961e0537a"
        },
        {
          "alg": "SHA3-384",
          "content": "c8844e5b71e5ecfbb7366097ce34af2f5863d86d5ccc3f9ec384d8ade4b60ccc8124c7fc88664f1afd2b0962fc8775bf"
        },
        {
          "alg": "SHA3-256",
          "content": "4b4f08ad7606a3ac62997779484919a302267b26d26ee19125f8a7eea60e8a71"
        },
        {
          "alg": "SHA3-512",
          "content": "65c6845ebae981cb81b61107707ced39f5b377dae970b47606ef482aaf10e3729def0da40d9377c43abbfb483a5ceae039b0d51c129c50a6d36ad351a5d6b01e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
      "externalReferences": [
        {
          "url": "http://jspecify.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/jspecify/jspecify/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.httpcomponents.client5/httpclient5-cache@5.6?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents.client5",
      "name": "httpclient5-cache",
      "version": "5.6",
      "description": "Apache HttpComponents HttpClient Cache",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8cec7f04887daf5db87b49a75037297f"
        },
        {
          "alg": "SHA-1",
          "content": "161f12ce409b84c92bd092a8e7509f57f0a5f31f"
        },
        {
          "alg": "SHA-256",
          "content": "1cceca0cad38592e30126b0655b050a737e92e48be70c3959cdc95347d0cb06a"
        },
        {
          "alg": "SHA-512",
          "content": "d411f5a9cbc53b3d50d7ac48410a34006d4b050793704ce1c5b415b212f81ab1018d2eec148b1a323723436f4cdcdb524c5f2872d8ba0cb52533f903a4d1c6e4"
        },
        {
          "alg": "SHA-384",
          "content": "549438ced92f3dcb0251284ccccda096ef41ac810bcbd5be9105b8730e8bb04ce453ea142470f2c8c31bf4f66a1e6013"
        },
        {
          "alg": "SHA3-384",
          "content": "66f328ef55cb03b58061a4e08be71d6b23745e786b31913b2d4fd66110819d7b5e01768cf3f09595e40186f08ce534df"
        },
        {
          "alg": "SHA3-256",
          "content": "0c389088e726c03bc80b25b0de1da4e409c82f7a4fe595f6b351b6923a99e16b"
        },
        {
          "alg": "SHA3-512",
          "content": "fdfeeebc941420b249284e2938bc786cf01446a33de542847f88176ec6e63c7f7f3b01a2841c364e1189254e608b260948fed01e7d9c57c9adf3a6e50ab12d8e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents.client5/httpclient5-cache@5.6?type=jar",
      "externalReferences": [
        {
          "url": "https://hc.apache.org/httpcomponents-client-5.5.x/5.6/httpclient5-cache/",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://issues.apache.org/jira/browse/HTTPCLIENT",
          "type": "issue-tracker"
        },
        {
          "url": "https://lists.apache.org/list.html?httpclient-users@hc.apache.org",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/httpcomponents-client/tree/5.6/httpclient5-cache",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.21.1?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.datatype",
      "name": "jackson-datatype-jsr310",
      "version": "2.21.1",
      "description": "Add-on module to support JSR-310 (Java 8 Date \u0026 Time API) data types.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5c77b5a5e1a82559ab88920c54ae8203"
        },
        {
          "alg": "SHA-1",
          "content": "115f5b1786b36e20a2b1108099f6b77617fb42ec"
        },
        {
          "alg": "SHA-256",
          "content": "4d63378b0a6b53733f086ebd301023ba211b9387e417bd584a5400320cd08b8d"
        },
        {
          "alg": "SHA-512",
          "content": "07113e899d0141df04b6f1183aff73cc58a411a19133b39352bc221ae58d28251ef114e48e039c938760b30c5e217a5bd443eac86fd607445f573cb290a0188b"
        },
        {
          "alg": "SHA-384",
          "content": "abe359f740ee3ee0937959614723465cb6e3e7e5f7ac96704be67a4fbcdfef364bf0bb116f034e8f1f252faa5776036a"
        },
        {
          "alg": "SHA3-384",
          "content": "de802d7879be6f97ac2e84d599e7338955055050c64f4b04f9ec5fd4adff3ae04d7d5a8a7aa5c23367979ec16981856a"
        },
        {
          "alg": "SHA3-256",
          "content": "3b6c1a15d8a44ffae0fa83799239bbc73c12c952e497e002832defb3f92e3933"
        },
        {
          "alg": "SHA3-512",
          "content": "42076f6aa613f04191e7e09af916cc271cf392d7699dbd0c848e4d9d69a8e04a2c3429cc7b4b5f8f74af2e171856194c993b8366f4e9952f2f2e1800894295bf"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.21.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jsr310",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/FasterXML/jackson-modules-java8/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jsr310",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.samskivert/jmustache@1.16?type=jar",
      "group": "com.samskivert",
      "name": "jmustache",
      "version": "1.16",
      "description": "A Java implementation of the Mustache templating language.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "7eff40c29c2fdf3faac3db921f07dc80"
        },
        {
          "alg": "SHA-1",
          "content": "979c7145a406b83bf28da32531f88a34c2d2919c"
        },
        {
          "alg": "SHA-256",
          "content": "3d4b984abd66908f05b38c9c892325cd4785d01ff33922569ff9b90c9ebfc475"
        },
        {
          "alg": "SHA-512",
          "content": "f245f8b979cf63fb4ad762e586a27468fa91b751aecf94f9f1dce32f551dec30c4b2dd881ea8b9b6a7eea3e9dfb34ceb96204d358bbb62120233416a4df382e1"
        },
        {
          "alg": "SHA-384",
          "content": "f53c07c96c4a4e8f9b424b17bbb152cc540dea8174db43b9bf5a12357d5207e5b8c0de506d83703fb46cfab13051c142"
        },
        {
          "alg": "SHA3-384",
          "content": "ac74164c34a0b40bf8e2d2c9f737bbae1b5c9c2c3a342487ca8271888379be51c5a0e3f45d1db57538eaed470bd7722f"
        },
        {
          "alg": "SHA3-256",
          "content": "2fdfe84999fe4930c399d5f78b678907881eea246fa30fd97f42f31ec90a2a8d"
        },
        {
          "alg": "SHA3-512",
          "content": "e213ee1cc34d3fde03785ac05a5df09c4b462fb1b1d0f02dff41e7b53522005df2e38b303bc193cff9203ab7f8a50764e1dea967035a454cf1988c056a615d57"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "The (New) BSD License",
            "url": "http://www.opensource.org/licenses/bsd-license.php"
          }
        }
      ],
      "purl": "pkg:maven/com.samskivert/jmustache@1.16?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/samskivert/jmustache",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "http://github.com/samskivert/jmustache/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/samskivert/jmustache",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.pebbletemplates/pebble@4.1.1?type=jar",
      "group": "io.pebbletemplates",
      "name": "pebble",
      "version": "4.1.1",
      "description": "Templating engine for Java.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "155784323535e68cf19ed52a491c5301"
        },
        {
          "alg": "SHA-1",
          "content": "3ef33f88360ab0c54e201933e59a490547e2834c"
        },
        {
          "alg": "SHA-256",
          "content": "3b1ceff69a50cefa135c71e88f69f305a370c2460e15e97cd7572ddb37824b47"
        },
        {
          "alg": "SHA-512",
          "content": "793534b0fafd57783380817e15d454a08c5e5a23c79d3c78b171ea1fe197fe0032c77b8238455fc35cf70089442fe00307d156756b43c0dbc9a9e91f76f562bb"
        },
        {
          "alg": "SHA-384",
          "content": "96d08cface1df37f816ca732124fd268c7411fe012b24878b8473e1e8ae32e323591fb7b30c4cdebb125d134952282d9"
        },
        {
          "alg": "SHA3-384",
          "content": "234931563517965d90ab790f1ad3ca974e77e24903d8464493798713f11f948ab61005517594bcf1a646ea7971c8684a"
        },
        {
          "alg": "SHA3-256",
          "content": "d8cdcab93c52712909bd58b616ed0b9f721a2b70b36fa1dba1f9dc453d86efba"
        },
        {
          "alg": "SHA3-512",
          "content": "6bf62672dab917ce94206d5f3e7111828900d4241ffd898251b536095e87c0128a02b6f114eeea7458620fb8c206658ff6de10dd87ca6094700504a8c82c6be1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/io.pebbletemplates/pebble@4.1.1?type=jar",
      "externalReferences": [
        {
          "url": "http://pebbletemplates.io",
          "type": "website"
        },
        {
          "url": "https://github.com/PebbleTemplates/pebble.git/pebble",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.unbescape/unbescape@1.1.6.RELEASE?type=jar",
      "publisher": "The UNBESCAPE team",
      "group": "org.unbescape",
      "name": "unbescape",
      "version": "1.1.6.RELEASE",
      "description": "Advanced yet easy-to-use escape/unescape library for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d95ed94e1624e307a1958ee105ccbf39"
        },
        {
          "alg": "SHA-1",
          "content": "7b90360afb2b860e09e8347112800d12c12b2a13"
        },
        {
          "alg": "SHA-256",
          "content": "597cf87d5b1a4f385b9d1cec974b7b483abb3ee85fc5b3f8b62af8e4bec95c2c"
        },
        {
          "alg": "SHA-512",
          "content": "6918e9579b06721942fdcd91e401f5b996fb4eac13056dbafdf594661f355a34874eb5266784bc2c4f82df9fdd9e219d71a96f52945a354f01665f85f8166bb3"
        },
        {
          "alg": "SHA-384",
          "content": "1b808b67c784b69afea64364ba4c0d433c7f042c512f5c18f07d5388fe7ac4741913f696424bd8fbde147383cfb3d8f9"
        },
        {
          "alg": "SHA3-384",
          "content": "6525bd20a12ff43a0089c0d59369574ae6c01e2b4b1aacf466847d4433ae403db08404a9b59be397c3034f972bcd6b06"
        },
        {
          "alg": "SHA3-256",
          "content": "a190c9bedccff959d08db12fe7080437fb4e98f05516b39d6540be718e151cc6"
        },
        {
          "alg": "SHA3-512",
          "content": "5d7b5edc0c2a0d47c9625936c14b4122330b96cdf54260fe2a6468289c2f4cbc4ee19770c1144acfa702f2f058a81544b4aea9258fe0e15166a1a331736d7b77"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.unbescape/unbescape@1.1.6.RELEASE?type=jar",
      "externalReferences": [
        {
          "url": "http://www.unbescape.org",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "scm:git:git@github.com:unbescape/unbescape.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.protobuf/protobuf-java@4.34.0?type=jar",
      "group": "com.google.protobuf",
      "name": "protobuf-java",
      "version": "4.34.0",
      "description": "Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an efficient yet extensible format.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1278c4e10413c75d2a653966b6ab3e2c"
        },
        {
          "alg": "SHA-1",
          "content": "304a7708305d3ba2cfdccf5bc92d8129a48b1d93"
        },
        {
          "alg": "SHA-256",
          "content": "c834d8c9b251f401c3c776b4ac51874e5195e9f2b317a26d6e49f4096de70965"
        },
        {
          "alg": "SHA-512",
          "content": "61d36fcc029df7490ba3c87e3528a9fbcc09d8e657fcf7aca08ecd68c4b59717427d09455d8cd3e2ae8deff7aff1a5985b07359c79f95a3476ec2b9dde8a5468"
        },
        {
          "alg": "SHA-384",
          "content": "85312e25845e4d97e073ff4b246f791896d1f69e2afc276563e82c274ae68ac20bf41537e9d4cc9debd027b5c4b2ca83"
        },
        {
          "alg": "SHA3-384",
          "content": "0f0436eb9dd1f0723fdca4129a290f67ecea37b6599a92fad769349fcf27b1f57aad8dbe691220a40007762f9ea07f2d"
        },
        {
          "alg": "SHA3-256",
          "content": "034d59d2665425d28b1b3c2ec5c6c61dd390d96fbd0eec58b823c6604393fad4"
        },
        {
          "alg": "SHA3-512",
          "content": "5912d61717d2294489389cd293eda21519ae6d82c8ff459e441a74ccac9d0e1fa674624951118f9b10738620a6a84d4d4830998b5c7f9a87bedac6ca12fb70c9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.google.protobuf/protobuf-java@4.34.0?type=jar",
      "externalReferences": [
        {
          "url": "https://developers.google.com/protocol-buffers/protobuf-java/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/protocolbuffers/protobuf/protobuf-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.protobuf/protobuf-java-util@4.34.0?type=jar",
      "group": "com.google.protobuf",
      "name": "protobuf-java-util",
      "version": "4.34.0",
      "description": "Utilities for Protocol Buffers",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0bb9b5cfe0d5543b064b4e0759a93d33"
        },
        {
          "alg": "SHA-1",
          "content": "8b3f2b6547ce8525d8045c0bfaea8102c19f4199"
        },
        {
          "alg": "SHA-256",
          "content": "b78284b88234d30b6e8c77308cbfc2f18fc17df67eefcd9ea083144df5a472f8"
        },
        {
          "alg": "SHA-512",
          "content": "5a73f3537c2efa6d6fa91d52d2ec0fd2662b06910b1b94c407c00713ebd82505df4c798d6af43b958ee413632d0e5621a6ce8de55f198a69604fcfdc4e362976"
        },
        {
          "alg": "SHA-384",
          "content": "80f43969caa5a708a9487e957bfe7e523db911a8ec0f7957a9d46ce7ae1582fbe19446f78414722cd055a0dd58775fff"
        },
        {
          "alg": "SHA3-384",
          "content": "3ee881264b2725a80c3ab6f5d57477933ab40bf046641251cc6660b8e8c1acad75604c2039022325e997761167b85440"
        },
        {
          "alg": "SHA3-256",
          "content": "3e91d0a778997d5e6d70d1d4e2833ffb97981ccd3cf77b73b1d80fe0d60e4605"
        },
        {
          "alg": "SHA3-512",
          "content": "d7fc818044a432a6d9f91b718ec1c3cdd474fa22de302f0c01a05880b52072745d978ca29b51085585595dd8192966c52f71533194385ccb4ac30b560bbcb868"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.google.protobuf/protobuf-java-util@4.34.0?type=jar",
      "externalReferences": [
        {
          "url": "https://developers.google.com/protocol-buffers/protobuf-java-util/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/protocolbuffers/protobuf/protobuf-java-util",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.code.gson/gson@2.8.9?type=jar",
      "group": "com.google.code.gson",
      "name": "gson",
      "version": "2.8.9",
      "description": "Gson JSON library",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e67627f67e03301092dc7de0a2d7cef8"
        },
        {
          "alg": "SHA-1",
          "content": "8a432c1d6825781e21a02db2e2c33c5fde2833b9"
        },
        {
          "alg": "SHA-256",
          "content": "d3999291855de495c94c743761b8ab5176cfeabe281a5ab0d8e8d45326fd703e"
        },
        {
          "alg": "SHA-512",
          "content": "46501e4dd34c9a6f33ff63aeeec45b049579365c5273490e5dfd5ea4effaeced907d0fc728204c619aa136e867ad826204582ff9ba3080d06693c1c675c8473f"
        },
        {
          "alg": "SHA-384",
          "content": "2f2897912784595e52d3f8e57741aed7dd866f16a69562d57e0604d85e2fef08b2a32e58afd00d264f66cc6ec775dc79"
        },
        {
          "alg": "SHA3-384",
          "content": "3ce084f79191afdbdb0a9aa83073b128f620cf585b65c2e81ba98080fd91e9f327db3f0952903094b7dd387bc802b5ba"
        },
        {
          "alg": "SHA3-256",
          "content": "e82ae9fa3a783ee683880d219ab529bb3d0b45ea721d002ee948fad99a67b4f0"
        },
        {
          "alg": "SHA3-512",
          "content": "25cfe43039c6d41344434f89e9a8ad6f93a341512baf93e894a14a9dfd3af1cb0f0afaed4ade6db3c719f910fd9dfbeb7bec8bcfd7f49ac572ab217bce9e595e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.code.gson/gson@2.8.9?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/gson/gson",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/google/gson/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/google/gson/gson/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.errorprone",
      "name": "error_prone_annotations",
      "version": "2.18.0",
      "description": "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "64145d0e7fee5a69ed7b84cf402de998"
        },
        {
          "alg": "SHA-1",
          "content": "89b684257096f548fa39a7df9fdaa409d4d4df91"
        },
        {
          "alg": "SHA-256",
          "content": "9e6814cb71816988a4fd1b07a993a8f21bb7058d522c162b1de849e19bea54ae"
        },
        {
          "alg": "SHA-512",
          "content": "3cea86be94bb8ae40d21ad4bf7d7f6b2233e89593b7b741ad84c78840cd3837bb5136f52e62fe9ae0953d7b190c46ad3edc102dfa97b4c7ea472a80206bf5db7"
        },
        {
          "alg": "SHA-384",
          "content": "7622eb33f83f03ab32b710b36c2fe836e24c5318f65fb8c0631a99507ca3ae65c2df8e33b63a5ce853b9cab6d9cb32e5"
        },
        {
          "alg": "SHA3-384",
          "content": "1ea52a5ce2a9ee1a960dc2a1bbe4b009d4d6a4448498e4cd76401605fa877662911e8c93b2b8bfda57bedc56c83f10a0"
        },
        {
          "alg": "SHA3-256",
          "content": "ed53f4295da75753267f241315352c4a39e60796f04e1c0c12d29c3a38be48ed"
        },
        {
          "alg": "SHA3-512",
          "content": "8266b313bd4e1170daf60642e838841370d99bc24b2a1f91825ca22037a6a30ff15cc76069f8e8770f1dc12772c277ee1320de67e815041697d93d6d7ba884fb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
      "externalReferences": [
        {
          "url": "https://errorprone.info/error_prone_annotations",
          "type": "website"
        },
        {
          "url": "https://github.com/google/error-prone/error_prone_annotations",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.swagger.core.v3/swagger-jaxrs2-jakarta@2.2.44?type=jar",
      "group": "io.swagger.core.v3",
      "name": "swagger-jaxrs2-jakarta",
      "version": "2.2.44",
      "description": "swagger-jaxrs2-jakarta",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "44f023a23e947d100aa1006921127acb"
        },
        {
          "alg": "SHA-1",
          "content": "d5fe7d4f49fc414903293e141f6a1a9f60514c84"
        },
        {
          "alg": "SHA-256",
          "content": "c1a99c0e6163f219c5ae0ab81a50b7d2f020a6db3deb41984062e7c729126420"
        },
        {
          "alg": "SHA-512",
          "content": "7e6032a734e563c8d19c409d6b1fa379ac3c1be3e2b6ce0ecc4d9776f7754a2188629aca4d221b512f171c1c829eb0a7e05cfe6835390d0f49e5ae2cf1897874"
        },
        {
          "alg": "SHA-384",
          "content": "0554d145b1986d99c8279279cc91535777902ccc5c2a41f3dea223c98f3ef4dbdff24a0436b18a386d489e0be95404a2"
        },
        {
          "alg": "SHA3-384",
          "content": "8c319820efa29e4580ce876a0cb1bc5b2f341345170f7db8f5cc691d7ea74e06358f14671d8a7a503e0a1711844ae38d"
        },
        {
          "alg": "SHA3-256",
          "content": "7623cca030bb049141ec2ca7233c527a80e53be4c738d7e476c55609044c93e7"
        },
        {
          "alg": "SHA3-512",
          "content": "db18c8e04d8ec12846286c7a1c7e66f195a78761ffad101f34cbdfc4c7d1833267ae379fb7ef21aef9bb76d3a93aec18849c754e8839644454bda45c91386b04"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.swagger.core.v3/swagger-jaxrs2-jakarta@2.2.44?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/swagger-api/swagger-core/modules/swagger-jaxrs2-jakarta",
          "type": "website"
        },
        {
          "url": "https://github.com/swagger-api/swagger-core/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://groups.google.com/forum/#!forum/swagger-swaggersocket",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/swagger-api/swagger-core/modules/swagger-jaxrs2-jakarta",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.classgraph/classgraph@4.8.184?type=jar",
      "group": "io.github.classgraph",
      "name": "classgraph",
      "version": "4.8.184",
      "description": "The uber-fast, ultra-lightweight classpath and module scanner for JVM languages.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f17699e5f6be5a692cde649b5d97b3a1"
        },
        {
          "alg": "SHA-1",
          "content": "a4f7ddec0f831dcf7ec3db32ae2c7e628c89f1a6"
        },
        {
          "alg": "SHA-256",
          "content": "6e564e29cec95a392268a609f09071d56199383d906ac70e91753a7998d1a3e8"
        },
        {
          "alg": "SHA-512",
          "content": "f53968600bcb89ea29508e3e340510da1d21d392c962a492b0ebe3b2e7e67af5535e69f4d6e5202c389213f844ace22860a5d9cff6716621fbf5d974eb689e55"
        },
        {
          "alg": "SHA-384",
          "content": "1d0a4d38e336dfd901b8ca1ad1c2c6eeb5e38629b5d814ed1be116a1469273858ade4172850db3098b38f7c12086a5df"
        },
        {
          "alg": "SHA3-384",
          "content": "048dceccbdb92eb24e612d5e2fa496a1ed9afec9c601a641040dcbf833deefcd1de6aaa3c5a9893feb0f930fca9f2a53"
        },
        {
          "alg": "SHA3-256",
          "content": "963877f72eb3c19e599ec0ee53f278a428dc555b9489094411e8413efd81ced0"
        },
        {
          "alg": "SHA3-512",
          "content": "b1594e178154b024d6650752fbe0da69afdcf468a010d88a86841675236f2c699cea2e1c211cb63fecda31475999bca61f5ac69de1ad06e8f9429875a069f38a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:maven/io.github.classgraph/classgraph@4.8.184?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/classgraph/classgraph",
          "type": "website"
        },
        {
          "url": "https://github.com/classgraph/classgraph/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/classgraph/classgraph",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.swagger.core.v3/swagger-models-jakarta@2.2.44?type=jar",
      "group": "io.swagger.core.v3",
      "name": "swagger-models-jakarta",
      "version": "2.2.44",
      "description": "swagger-models-jakarta",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9b4abff7577f188cf9ee321b8b9dc78c"
        },
        {
          "alg": "SHA-1",
          "content": "616a0e79e0af4bf7859a9f5afc7bdf59780dac8b"
        },
        {
          "alg": "SHA-256",
          "content": "0d28f0cac2f022c24c701d3f84f257b8699ae1ba0735e6e7589613585270526d"
        },
        {
          "alg": "SHA-512",
          "content": "dab2abfbb3e92306a243f085578d7408ab33a2b4e2340a0553995049dea06a555eb23f6fb41914e78b69a1f2309986c366e4db5897eccf7544ab3815a74a9789"
        },
        {
          "alg": "SHA-384",
          "content": "6334087528a84179d407772d5e1fc6d49d109f83c5dfc03282e58d329e4032bff82d26d1b164b1d07069085a82ba342f"
        },
        {
          "alg": "SHA3-384",
          "content": "35ca192f00fdf1643977bf13cfdad816d7f1c66b2e43e0d8de7b3eaf494ffd5dfd6e0cb220a9080e33914ae2739d9f7b"
        },
        {
          "alg": "SHA3-256",
          "content": "03c7abd85b51779e392af956fe85f155f39bfe0efa3b70d8de53cfeb32f883ab"
        },
        {
          "alg": "SHA3-512",
          "content": "7f8df6d4dc46d89ea2d94193e6446aff9dd40dc06cbd0483acb089274053e7fdbf52cc6fa381cae2075939914fa85a8922300b355b9abe7331b38dff0f8b3822"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.swagger.core.v3/swagger-models-jakarta@2.2.44?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/swagger-api/swagger-core/modules/swagger-models-jakarta",
          "type": "website"
        },
        {
          "url": "https://github.com/swagger-api/swagger-core/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://groups.google.com/forum/#!forum/swagger-swaggersocket",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/swagger-api/swagger-core/modules/swagger-models-jakarta",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.swagger.core.v3/swagger-integration-jakarta@2.2.44?type=jar",
      "group": "io.swagger.core.v3",
      "name": "swagger-integration-jakarta",
      "version": "2.2.44",
      "description": "swagger-integration-jakarta",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4d8265b152325e12c77a3d68eaa244ee"
        },
        {
          "alg": "SHA-1",
          "content": "39bf570dcdbed912e73c460c115d01bcfa11610d"
        },
        {
          "alg": "SHA-256",
          "content": "fb5495086a864a5fb8c8f5c2227adecd3444b0fe6e6b649ffb229e7307668711"
        },
        {
          "alg": "SHA-512",
          "content": "14499cee429ea92f1397bebf0b54b40ec14d10f1fb2304f655fce034b7e48821a49fec1846a98814213122686d1378c365c908fb52881047ed7dc95d98853e84"
        },
        {
          "alg": "SHA-384",
          "content": "a1af410437da1bbb683d55771585d738440da869ecdf47d5ec4f2c1720944a19b8e5e8905880a50f96611690d98b8e13"
        },
        {
          "alg": "SHA3-384",
          "content": "94c648740aefefa10bdd0637313d93e4afe793c13f8fa807b1ba954eddccf62859aea7a620431e502ffc918bbc1a9c4d"
        },
        {
          "alg": "SHA3-256",
          "content": "a083eea9bf347a6f2fe7b07402dfc48d4171ddf1d77dc9c75b84f3a029b0efbe"
        },
        {
          "alg": "SHA3-512",
          "content": "56b6fc427333b84f6f5bb86e006d2283a65f68bad8bfcb422de587edf93427ae7eb9d1d83d5988a00114c28ded2196d514aa54a1c17bd1fe3cfa6fb031a5eb36"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.swagger.core.v3/swagger-integration-jakarta@2.2.44?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/swagger-api/swagger-core/modules/swagger-integration-jakarta",
          "type": "website"
        },
        {
          "url": "https://github.com/swagger-api/swagger-core/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://groups.google.com/forum/#!forum/swagger-swaggersocket",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/swagger-api/swagger-core/modules/swagger-integration-jakarta",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.swagger.core.v3/swagger-core-jakarta@2.2.44?type=jar",
      "group": "io.swagger.core.v3",
      "name": "swagger-core-jakarta",
      "version": "2.2.44",
      "description": "swagger-core-jakarta",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6c797a860ccaabbde08da9a8b5671e21"
        },
        {
          "alg": "SHA-1",
          "content": "92d6b7bfa4a394ab0e558235842d3b970478540b"
        },
        {
          "alg": "SHA-256",
          "content": "f1495cbcf5b25b6f442cc80d6e26267df924edebf5fc03b6117f501483bbe28c"
        },
        {
          "alg": "SHA-512",
          "content": "757659ae8cdcff8d1a215931583f12c31148a95a922e290f298f5767c76a6ee9626f3db905439c96c5397f2dd454ddc7382a1f70a77fc2494e79dd65cd6d7ac0"
        },
        {
          "alg": "SHA-384",
          "content": "0004f94bb457f6092b9d3c2e5b3cad4aa4d80acdee211eeb60f7f758da5d146a0882531fa992a5feb5eb214a1a6ccb7b"
        },
        {
          "alg": "SHA3-384",
          "content": "17cd11d04046d12e0cc4af93c0444c0de0a94fe3ce3923ecd19363931c87bdf2ae773a041dee8ba14e3036639641fe38"
        },
        {
          "alg": "SHA3-256",
          "content": "ac966aabf06d772cce10955ac5adb42ca8d65cc2728d070f9a304734db0b7daa"
        },
        {
          "alg": "SHA3-512",
          "content": "85662a4059812ab1c1a8656cfdc4d267e01e4bccfdbf001d9b7813b29ea20774b5c1cada5bc39e153507e8381a1252cda0efaf119995b295ff0678062d00f688"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.swagger.core.v3/swagger-core-jakarta@2.2.44?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/swagger-api/swagger-core/modules/swagger-core-jakarta",
          "type": "website"
        },
        {
          "url": "https://github.com/swagger-api/swagger-core/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://groups.google.com/forum/#!forum/swagger-swaggersocket",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/swagger-api/swagger-core/modules/swagger-core-jakarta",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.yaml/snakeyaml@2.3?type=jar",
      "group": "org.yaml",
      "name": "snakeyaml",
      "version": "2.3",
      "description": "YAML 1.1 parser and emitter for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2a1c2ee8923dcd6bd6d025751af5df37"
        },
        {
          "alg": "SHA-1",
          "content": "936b36210e27320f920536f695cf1af210c44586"
        },
        {
          "alg": "SHA-256",
          "content": "63a76fe66b652360bd4c2c107e6f0258daa7d4bb492008ba8c26fcd230ff9146"
        },
        {
          "alg": "SHA-512",
          "content": "1c9c78f0d102ae49a7c06f9e20c6a79a4fb9a2af962230ee6e136bda0caf10dcbb9deadc1c3ab15f74a4982ec8f8266217115e357329fde5b3f4f1858882de0c"
        },
        {
          "alg": "SHA-384",
          "content": "77b1d06e83fd51b83b13372d5ef2eb43c5a66f193db857cee947ae4e900e4a4a0c66a8074435984b9a0b007a69cc2b4f"
        },
        {
          "alg": "SHA3-384",
          "content": "550c4e7a119fd690f750317dc0e20ad7bfc7fa28fa0409fc572bc745d51340a60e9e2ce2af97f458daa561155130bb97"
        },
        {
          "alg": "SHA3-256",
          "content": "d1b540ee39c34ab1484be27d2dd56a14aa48f88668905f9ad176932f4b2cd5d6"
        },
        {
          "alg": "SHA3-512",
          "content": "879ccb34343ebd4ac4888091d97f393c5f75cbb066cf8cf1b9b3eb03a3442cb17326c60bd0db1403aa66ed1f0a5a0d548c96dbce74ebc5c3d6d93950f24b417f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.yaml/snakeyaml@2.3?type=jar",
      "externalReferences": [
        {
          "url": "https://bitbucket.org/snakeyaml/snakeyaml",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://bitbucket.org/snakeyaml/snakeyaml/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://bitbucket.org/snakeyaml/snakeyaml/src",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents",
      "name": "httpclient",
      "version": "4.5.14",
      "description": "Apache HttpComponents Client",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2cb357c4b763f47e58af6cad47df6ba3"
        },
        {
          "alg": "SHA-1",
          "content": "1194890e6f56ec29177673f2f12d0b8e627dec98"
        },
        {
          "alg": "SHA-256",
          "content": "c8bc7e1c51a6d4ce72f40d2ebbabf1c4b68bfe76e732104b04381b493478e9d6"
        },
        {
          "alg": "SHA-512",
          "content": "a084ef30fb0a2a25397d8fab439fe68f67e294bf53153e2e1355b8df92886d40fe6abe35dc84f014245f7158e92641bcbd98019b4fbbd9e5a0db495b160b4ced"
        },
        {
          "alg": "SHA-384",
          "content": "c8ccaa1fa8ba7c421413e3c30375bd9c31284e837c476fd831e18043ad4187e92166f49554123108891241bed674b95d"
        },
        {
          "alg": "SHA3-384",
          "content": "9a17dfcf12b2af3a9b006ec369f9bc78ba322348bf1a01146e0d4f3fec2bed6cbe8b2193fac5b4d5a0c3036c06477510"
        },
        {
          "alg": "SHA3-256",
          "content": "48f0a61b691e22dec9d6db8e0b58be4ca17a42a2846c82f0875de21f72bb0faa"
        },
        {
          "alg": "SHA3-512",
          "content": "4ad2c9adc761b7e813330f0dcad3f9978702896c7d0cbf81f60a472d550e320b1527be425ba597c8c9352d587e32e1d46ceb4c73e99c70a6190df4c699a7c2a9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
      "externalReferences": [
        {
          "url": "http://hc.apache.org/httpcomponents-client-ga",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "http://issues.apache.org/jira/browse/HTTPCLIENT",
          "type": "issue-tracker"
        },
        {
          "url": "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/httpcomponents-client/tree/4.5.14/httpclient",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents",
      "name": "httpcore",
      "version": "4.4.16",
      "description": "Apache HttpComponents Core (blocking I/O)",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "28d2cd9bf8789fd2ec774fb88436ebd1"
        },
        {
          "alg": "SHA-1",
          "content": "51cf043c87253c9f58b539c9f7e44c8894223850"
        },
        {
          "alg": "SHA-256",
          "content": "6c9b3dd142a09dc468e23ad39aad6f75a0f2b85125104469f026e52a474e464f"
        },
        {
          "alg": "SHA-512",
          "content": "168026436a6bcf5e96c0c59606638abbdc30de4b405ae55afde70fdf2895e267a3d48bba6bdadc5a89f38e31da3d9a9dc91e1cab7ea76f5e04322cf1ec63b838"
        },
        {
          "alg": "SHA-384",
          "content": "ba9ceaee1a37ca3201d6a1315ecb0327b495489efd0baa155c219c475df8d3eb69fe77ab0026563db406497626da6562"
        },
        {
          "alg": "SHA3-384",
          "content": "b9dc44dcc7cc86d5036f26d54c4003a2d72808ae7b07a0808bb53505c6d4281b5ad213eb1f3d0fef1113dec57cb0dfe1"
        },
        {
          "alg": "SHA3-256",
          "content": "fd8ab51846476c6c18822151c9ec07b39a9633010b5d20ea937fc6910407bc64"
        },
        {
          "alg": "SHA3-512",
          "content": "b42fa528242981a9d70e4f68ab75a24292df5112c44c21b6f18cb9201ce747885ba1d4dc69bc3d14d0da46a6c2638f937c11bc45749abeb55dc89ddada90cdda"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
      "externalReferences": [
        {
          "url": "http://hc.apache.org/httpcomponents-core-ga",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "http://issues.apache.org/jira/browse/HTTPCORE",
          "type": "issue-tracker"
        },
        {
          "url": "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/httpcomponents-core/tree/4.4.16/httpcore",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "commons-logging",
      "name": "commons-logging",
      "version": "1.2",
      "description": "Apache Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "040b4b4d8eac886f6b4a2a3bd2f31b00"
        },
        {
          "alg": "SHA-1",
          "content": "4bfc12adfe4842bf07b657f0369c4cb522955686"
        },
        {
          "alg": "SHA-256",
          "content": "daddea1ea0be0f56978ab3006b8ac92834afeefbd9b7e4e6316fca57df0fa636"
        },
        {
          "alg": "SHA-512",
          "content": "ed00dbfabd9ae00efa26dd400983601d076fe36408b7d6520084b447e5d1fa527ce65bd6afdcb58506c3a808323d28e88f26cb99c6f5db9ff64f6525ecdfa557"
        },
        {
          "alg": "SHA-384",
          "content": "ac20720d7156131478205f1b454395abf84cfc8da2f163301af32f63bd3c4764bd26cb54ed53800f33193ae591f3ce9c"
        },
        {
          "alg": "SHA3-384",
          "content": "628eb4407e95dca84da1a06b08a6d9b832a49de8472b1b217e8607f08efeeed18b996232d64dd07f03e78e0e3bb4b078"
        },
        {
          "alg": "SHA3-256",
          "content": "9aab62deccf156ee6e324c925dfc30ecb53e8465802863a551901a461424e807"
        },
        {
          "alg": "SHA3-512",
          "content": "3fd76857f6d20c03799537cc961c1c4ddf1c375c6c192fb982363e3b9397ba138b77f24ef38b4202f44e37586789c0320e4de18fdadd2772304fd14a9b26d552"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
      "externalReferences": [
        {
          "url": "http://commons.apache.org/proper/commons-logging/",
          "type": "website"
        },
        {
          "url": "https://continuum-ci.apache.org/",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "http://issues.apache.org/jira/browse/LOGGING",
          "type": "issue-tracker"
        },
        {
          "url": "http://mail-archives.apache.org/mod_mbox/commons-user/",
          "type": "mailing-list"
        },
        {
          "url": "http://svn.apache.org/repos/asf/commons/proper/logging/trunk",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.6?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents.client5",
      "name": "httpclient5",
      "version": "5.6",
      "description": "Apache HttpComponents Client",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8e98420f56516748e455a2088b930d53"
        },
        {
          "alg": "SHA-1",
          "content": "f502ee00ba82d44a6a29bda06a18f5b959808e09"
        },
        {
          "alg": "SHA-256",
          "content": "0992b7dd57fbfc8334df2201e1788a2752ff11b6a638f5ce521915bef72ca4ad"
        },
        {
          "alg": "SHA-512",
          "content": "882c161383be70b737cc4e0a4cf0e324fdc431713402b74e05efd306d910e06d183308df869bb2aa5d4b22c83b556fed9b255fc3c0f5354f257401a92a0e0c41"
        },
        {
          "alg": "SHA-384",
          "content": "46ba01e4bb399ec9ef322ea7067b49681a0287cae68d56ced41c00f9cbc4cd0ffeabb28a200fc3282951c19682da6e14"
        },
        {
          "alg": "SHA3-384",
          "content": "ec05de27cc8246d09940f35db6ade82bc60d7b3f4eb33157ece989315a8e56b1dd7d0d232bac614fa51c8e374e5fc126"
        },
        {
          "alg": "SHA3-256",
          "content": "ac67b4264e06503cf0fcf38d149035a11fe216e6f5c7f45a94ef1b7cd7e19ac0"
        },
        {
          "alg": "SHA3-512",
          "content": "08d24970b969dfb409411e006029d06c47b174ca1cbc2a000fd2c841cafdd7b0f12def7b6282af1756537e266994f35d040a7d7688c2a21c72ffb9312b88f6c1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.6?type=jar",
      "externalReferences": [
        {
          "url": "https://hc.apache.org/httpcomponents-client-5.5.x/5.6/httpclient5/",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://issues.apache.org/jira/browse/HTTPCLIENT",
          "type": "issue-tracker"
        },
        {
          "url": "https://lists.apache.org/list.html?httpclient-users@hc.apache.org",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/httpcomponents-client/tree/5.6/httpclient5",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.4?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents.core5",
      "name": "httpcore5",
      "version": "5.4",
      "description": "Apache HttpComponents HTTP/1.1 core components",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "584964cc15b7390de975e97e8eb2e6e1"
        },
        {
          "alg": "SHA-1",
          "content": "e40011ec0dae056466399f8e414ede4772001621"
        },
        {
          "alg": "SHA-256",
          "content": "cec2981fa7f520efb63f0787c24f10af2679e31f9f75c448c4dde40a3ae8100d"
        },
        {
          "alg": "SHA-512",
          "content": "5d0dc9ea175373a6bbf76e48246bb3f4d3c43a4ca1cc4db0a10970736a30d3fd72996cce5fe07d675eabb0cad4da1e2fd6b3100d31e7d9d4507c617fc1bbe425"
        },
        {
          "alg": "SHA-384",
          "content": "7a9cf59bf40074c84dc395cd6dc91c2b2da630a2932eff8d42567bd870f0fc94f9605ea6c0725a83a7faf03f8d967305"
        },
        {
          "alg": "SHA3-384",
          "content": "2acb353316cbf3d0649e7c2f0765591f3ab9bab2f3a4aa1029f86a15338e7806a9ec41b101fa06b7fb29111d807eb33d"
        },
        {
          "alg": "SHA3-256",
          "content": "47dea1de78d259c1fb903bac72dd61acce885fbe2ab8e6b6d4f6e2439710699e"
        },
        {
          "alg": "SHA3-512",
          "content": "37c162c8a37107846e5950b2b15168d3b5677a4338dbc37b2f178f6fb5d5ad21c5cd81a6178054efe007d8fd088c42e8b2398df3e8d636d973a5035a01306808"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.4?type=jar",
      "externalReferences": [
        {
          "url": "https://hc.apache.org/httpcomponents-core-5.4.x/5.4/httpcore5/",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://issues.apache.org/jira/browse/HTTPCORE",
          "type": "issue-tracker"
        },
        {
          "url": "https://lists.apache.org/list.html?httpclient-users@hc.apache.org",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/httpcomponents-core/tree/5.4/httpcore5",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.4?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents.core5",
      "name": "httpcore5-h2",
      "version": "5.4",
      "description": "Apache HttpComponents HTTP/2 Core Components",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a027e88d219ee744ddcdb32ed1e69633"
        },
        {
          "alg": "SHA-1",
          "content": "83cdd62ef3140664f46be59c2c2727141d1c5a32"
        },
        {
          "alg": "SHA-256",
          "content": "2e0f4ace15db2d1609c2b06eca6012e7582afe4a99ad8d15073f62dd8edb3460"
        },
        {
          "alg": "SHA-512",
          "content": "d9fed54460b52b68fc91502b1e7a0723cd97740455574b101929d6c77818f81340077fed7748a2b76a6d95e2dda711717caecf72f0f4d6331736fbad88ae66af"
        },
        {
          "alg": "SHA-384",
          "content": "e97a8a3cf311231461998c8b89ab037b08d6331283f12ee85bb82165f6977f21d9d56e1224bec7bc1cac73c92ef7a457"
        },
        {
          "alg": "SHA3-384",
          "content": "35bd22b763e02311f7419615c46e11ee029b3437127a573942e2441938ef0856c30853e8490e5ad3844d4c3920fd7752"
        },
        {
          "alg": "SHA3-256",
          "content": "bed09b6e99b25b6780b0ab0d2faa960ca7799e6b33a02ebac47adff6f70c441d"
        },
        {
          "alg": "SHA3-512",
          "content": "e812bcd3945a5559b676ead01c01a4f710ffc3c03fe4ee1e3332af960e58c1f4f87387242b9cd7c445a059a799c505f8ae5d397dacea722b020b6ed12064407c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.4?type=jar",
      "externalReferences": [
        {
          "url": "https://hc.apache.org/httpcomponents-core-5.4.x/5.4/httpcore5-h2/",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://issues.apache.org/jira/browse/HTTPCORE",
          "type": "issue-tracker"
        },
        {
          "url": "https://lists.apache.org/list.html?httpclient-users@hc.apache.org",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/httpcomponents-core/tree/5.4/httpcore5-h2",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/oauth.signpost/signpost-core@2.1.1?type=jar",
      "group": "oauth.signpost",
      "name": "signpost-core",
      "version": "2.1.1",
      "description": "A simple, light-weight, and modular OAuth client library for the Java platform.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ef778c731f9b6cbb8311a780b1f4094f"
        },
        {
          "alg": "SHA-1",
          "content": "e307e72ff918b775f797f364b1fd442f23b5408a"
        },
        {
          "alg": "SHA-256",
          "content": "2628d8c1928e512cea34001c1108bfe251049b1ef747ba284aa7c781c24b2e79"
        },
        {
          "alg": "SHA-512",
          "content": "9c3a0934458de2d79c00d53422b838e17369cece5e325b11709af1c74e368c58de1c175eed689a247f6ab622f2a67c2ccd06283864e64d95abdbc26629d0226d"
        },
        {
          "alg": "SHA-384",
          "content": "c4051510406394dd52cbb6170f20869e5cef2b026e88c672908bb2ceaeeb43cd88df2811dd75fbe6ad37f2c523f562cd"
        },
        {
          "alg": "SHA3-384",
          "content": "1a09cf0e64cd9366f19197b6a66b3a94bb4851efa596f94538890d01e3261a611a7ceb6768512e5e3c2fd8fc5d3d01c4"
        },
        {
          "alg": "SHA3-256",
          "content": "190333f0f7c94e3db5f4d49392d454f43c710e43266fbb6049b58f8e22dc1548"
        },
        {
          "alg": "SHA3-512",
          "content": "9f0c3184b752c9ed73ab4f34805e62cafde30dc4b94f2dc55aa9645c15921ebaeba3f2bf3202ed98e60f3bb66e47945b1449e07fd559e0654afbe92f2a6a94c5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/oauth.signpost/signpost-core@2.1.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/mttkay/signpost/releases/signpost-core",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/mttkay/signpost/pulls",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/mttkay/signpost/signpost-core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.brotli/dec@0.1.2?type=jar",
      "group": "org.brotli",
      "name": "dec",
      "version": "0.1.2",
      "description": "Brotli is a generic-purpose lossless compression algorithm.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4b1cd14cf29733941cc536b27e6aedfa"
        },
        {
          "alg": "SHA-1",
          "content": "0c26a897ae0d524809eef1c786cc6183b4ddcc3b"
        },
        {
          "alg": "SHA-256",
          "content": "615c0c3efef990d77831104475fba6a1f7971388691d4bad1471ad84101f6d52"
        },
        {
          "alg": "SHA-512",
          "content": "d4cd2b33f7c358012ff01db6a13ebfe1e8051a580698bffcd942c47451012cf53ce49a400b1c8bf7502b01e631d79d7c6417202a145622572d79fd145ccde61a"
        },
        {
          "alg": "SHA-384",
          "content": "d6b8ad9d0ee6baf8c3a29c1dc2911eaf207352e2c7de893a0185e987e7eae87827890c1d4dbf31c46f25846fbcdc08bb"
        },
        {
          "alg": "SHA3-384",
          "content": "d16c32130bf6b168ff4c8a3dedf1b17787f8d6f0eab9de21e51ed3ab1e7d85925dd02315972f6ca3a4493357aad545cb"
        },
        {
          "alg": "SHA3-256",
          "content": "962dc76a5c487de8d34308860ab65927bf91f50ccb12f37bffb036a7a05145a4"
        },
        {
          "alg": "SHA3-512",
          "content": "a82a3f79b57d30613606ca51dc432b097fa75aab5c87fb45eabec6d80ddeff1b329100b325bb07005aebaec166952c4599a863d4bfd5a684bad21103a2046311"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl": "pkg:maven/org.brotli/dec@0.1.2?type=jar",
      "externalReferences": [
        {
          "url": "http://brotli.org/dec",
          "type": "website"
        },
        {
          "url": "https://github.com/google/brotli/dec",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.httpcomponents/httpmime@4.5.14?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents",
      "name": "httpmime",
      "version": "4.5.14",
      "description": "Apache HttpComponents HttpClient - MIME coded entities",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "714c4ae31c40e6633c0bcaa4e6264153"
        },
        {
          "alg": "SHA-1",
          "content": "6662758a1f1cb1149cf916bdac28332e0902ec44"
        },
        {
          "alg": "SHA-256",
          "content": "d401243d5c6eae928a37121b6e819158c8c32ea0584793e7285bb489ab2a3d17"
        },
        {
          "alg": "SHA-512",
          "content": "884b062028f68278389b74ccfbc35142caae489ceda5df01d2c60df884b9604cd4055bf4e1524e0358661fa0e88e93e614fb6be590cb940510b07a37c0b0a20c"
        },
        {
          "alg": "SHA-384",
          "content": "88ec9117630f714abcebae122c9e10852706f88917ac12c610b975538c14a10fd5b1ec9213163b0cb950e9c9b7a74fe6"
        },
        {
          "alg": "SHA3-384",
          "content": "8f1d2b58f6a74585833611b1219c78cb37737fc75e3e2cb58804d87df93a28107da6c49a86b139dff46a7973260fdf11"
        },
        {
          "alg": "SHA3-256",
          "content": "7fdd67408fb7beacf7c00415476e9b61903c90ad06a50a7d500aa045d5747bbd"
        },
        {
          "alg": "SHA3-512",
          "content": "5075045ce4e6faa77907d762ceb24660d13b225505bb81a1b0f101a736d4ad2f4c914ce7d04137d1506495eaa437aa64bb1ac08130f4b6a76e0025f8463f7353"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents/httpmime@4.5.14?type=jar",
      "externalReferences": [
        {
          "url": "http://hc.apache.org/httpcomponents-client-ga",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "http://issues.apache.org/jira/browse/HTTPCLIENT",
          "type": "issue-tracker"
        },
        {
          "url": "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/httpcomponents-client/tree/4.5.14/httpmime",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.1.1?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.woodstox",
      "name": "woodstox-core",
      "version": "7.1.1",
      "description": "Woodstox is a high-performance XML processor that implements Stax (JSR-173), SAX2 and Stax2 APIs",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "971ff236679f7b35a7c13c0d02c0170e"
        },
        {
          "alg": "SHA-1",
          "content": "76baad1b94513ea896e0a17388890a4c81edd0e0"
        },
        {
          "alg": "SHA-256",
          "content": "02b9d022e9d47704ff8a7a859a0dbfd3b2882a8311eb7ff1e180f760ccda2712"
        },
        {
          "alg": "SHA-512",
          "content": "28105d6409766966123d4e212dba555c4776bfeb538093d3739ef113de5c6d6e92453aabc16915bfb76124a5dcc82b57f3cd13b42ea2e4038a4495285c642d3a"
        },
        {
          "alg": "SHA-384",
          "content": "ca02f505f335a975e71c4a549bc3707c35b3592d2ac2fc2cf8887dfde44ae76b753ad2174e4971bb33bb1ab6c8c6b3c7"
        },
        {
          "alg": "SHA3-384",
          "content": "1efac262497c761e493337361dbc388ac01634dbda5322a8ee7742b0b25a26cc039c3e3653bf2302fbc31883c8030703"
        },
        {
          "alg": "SHA3-256",
          "content": "10a216995fc4e318dcb0be7b9ae00c07536fbc81e6119f0bf1e36716146f674d"
        },
        {
          "alg": "SHA3-512",
          "content": "924b1cb6ba79666c4fc13f1b057b376de471cfe60e68daca71ed51355abbd0de6799441ddd81df786317dd2c533cc1d3a9671f759e3a480d99c2d772eaa5ddda"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.1.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/woodstox",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/FasterXML/woodstox/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/woodstox",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar",
      "publisher": "fasterxml.com",
      "group": "org.codehaus.woodstox",
      "name": "stax2-api",
      "version": "4.2.2",
      "description": "Stax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6949cace015c0f408f0b846e3735d301"
        },
        {
          "alg": "SHA-1",
          "content": "b0d746cadea928e5264f2ea294ea9a1bf815bbde"
        },
        {
          "alg": "SHA-256",
          "content": "a61c48d553efad78bc01fffc4ac528bebbae64cbaec170b2a5e39cf61eb51abe"
        },
        {
          "alg": "SHA-512",
          "content": "1c0587ecb4c5a659ce2ae1fe36ffc12636a8ecba549a29f2cf91cb4d1d36a335c05f35776f480488d40d894230389f76aeeb363887026c6ef5c565995c17b7c6"
        },
        {
          "alg": "SHA-384",
          "content": "3b617db8307a081df858a4110f5b8fec51c06355762506cbc4be5557fb06959f0499f7e672103d46f71c66bae472a7bd"
        },
        {
          "alg": "SHA3-384",
          "content": "22a3150713f7072962e26c286a1ef97d849b10d7f1251c56ae34252f247127b56dd189daa758c64776b4196ee0060517"
        },
        {
          "alg": "SHA3-256",
          "content": "174868c81672068b42ccde35310d4dad60f457b795101e99588c28b0eebdefc2"
        },
        {
          "alg": "SHA3-512",
          "content": "c88de5a2137e3b63b632ef24799a677c998b76e736407f1e8c6af85d1b6a94c76bc20d26e6cac847d8383ab6760f1b5c2ae7574fba21e1e6a96de7cdd38f0e39"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/FasterXML/stax2-api",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/FasterXML/stax2-api/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/FasterXML/stax2-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.maven/maven-artifact@3.9.13?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.maven",
      "name": "maven-artifact",
      "version": "3.9.13",
      "description": "Maven is a software build management and comprehension tool. Based on the concept of a project object model: builds, dependency management, documentation creation, site publication, and distribution publication are all controlled from the declarative file. Maven can be extended by plugins to utilise a number of other development tools for reporting or the build process.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1e1bec55516f134769f28f68125ea2e5"
        },
        {
          "alg": "SHA-1",
          "content": "84700887f5cace819b2d5020b04f18317c57f812"
        },
        {
          "alg": "SHA-256",
          "content": "0f36114d92c38ab18413b2487372a2eed4fdbd91b201cf01f720772857faf2c8"
        },
        {
          "alg": "SHA-512",
          "content": "9bb3d854105e7567a2849051c2ee05c98dd53ff6b785a04f5f1785fddaaf0a69a7e41c8ed37621b2ee02cc6078e475a4d55a2747b79ad0707abe56f78d12c3cf"
        },
        {
          "alg": "SHA-384",
          "content": "efb1f6934ccd9ed940b97a43e5ae2c25f8aa9752847a4540e9c00bd565eff36d86b8c6dcd050d99ea3ce78268cec1ed6"
        },
        {
          "alg": "SHA3-384",
          "content": "b0ce466e0b65bfb02c875bc53f6d1776ef9c1ad0c3691daf00f9d89a84b4b4f2b0a0562daff7afd5c83ce9ce6e7d4688"
        },
        {
          "alg": "SHA3-256",
          "content": "5394e2bad86225d53853db28e60d09cef2afff215d9805681bc87e729b36b7bf"
        },
        {
          "alg": "SHA3-512",
          "content": "84f86577d6d4ec3c6b66649e203a05e5dfb453ec9a011408d4aba1a8e3e6022daf0f3c57f11c549d58e174798c06f64a4160a6e11d15b6a31416e4649d11b4cb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.maven/maven-artifact@3.9.13?type=jar",
      "externalReferences": [
        {
          "url": "https://maven.apache.org/ref/3.9.13/maven-artifact/",
          "type": "website"
        },
        {
          "url": "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/",
          "type": "build-system"
        },
        {
          "url": "https://maven.apache.org/download.html",
          "type": "distribution"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/apache/maven/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://lists.apache.org/list.html?users@maven.apache.org",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/maven/tree/maven-3.9.13/maven-artifact",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.codehaus.plexus/plexus-utils@3.6.0?type=jar",
      "publisher": "Codehaus Plexus",
      "group": "org.codehaus.plexus",
      "name": "plexus-utils",
      "version": "3.6.0",
      "description": "A collection of various utility classes to ease working with strings, files, command lines, XML and more.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1d5893fecbc7ec13f205a1c5893e90ce"
        },
        {
          "alg": "SHA-1",
          "content": "e8bc129728f22671a36fff3b604edcd39073a7b1"
        },
        {
          "alg": "SHA-256",
          "content": "27ef130e32c236090e408fb5498d94cb9ea26d14070fb1c8985d607b62d098d1"
        },
        {
          "alg": "SHA-512",
          "content": "ff2baf6b717bbd6f64b7f82e6e499a6c38e7b55b63fd363894dc08fbc0edfd7d9d05ed7341f391c24ac90f90e6e8fe6469906f9074a01a98a1b0cc65f4a280ee"
        },
        {
          "alg": "SHA-384",
          "content": "c2080dc3c99c8ad7cb94eaa8ab9d2bb1c2a1404ae76e08de066be1c587a2ea8f9b4d6b1fe13a202e708f0f74e0a246de"
        },
        {
          "alg": "SHA3-384",
          "content": "4f433a3ff4467b8cf8ef2905cd615b68f437dac7a46d64435a778ae5e69c1401f0d4cdd9be389d4d76efd8a9edd696ef"
        },
        {
          "alg": "SHA3-256",
          "content": "d22be143fd169673efaeb9b21c884803803585f26494fff7d51d6da4effcfac4"
        },
        {
          "alg": "SHA3-512",
          "content": "eac2553fde2d6a0ad1a11c7487f5762870b666d619f52970b6baf1fd23ffca356d6584d02295db7bc472654b2909d3e2220a05a54f720f0f99553da7c0256a9e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.codehaus.plexus/plexus-utils@3.6.0?type=jar",
      "externalReferences": [
        {
          "url": "https://codehaus-plexus.github.io/plexus-utils/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/codehaus-plexus/plexus-utils/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://groups.google.com/forum/#!forum/mojohaus-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/codehaus-plexus/plexus-utils/tree/plexus-utils-3.6.0/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.microsoft.sqlserver/mssql-jdbc@13.2.1.jre11?type=jar",
      "publisher": "Microsoft Corporation",
      "group": "com.microsoft.sqlserver",
      "name": "mssql-jdbc",
      "version": "13.2.1.jre11",
      "description": "Microsoft JDBC Driver for SQL Server.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6885a55fab61256d7d100b2f5a39d760"
        },
        {
          "alg": "SHA-1",
          "content": "406aa00b60c1b30e1bb02e469530dd2e21f2eace"
        },
        {
          "alg": "SHA-256",
          "content": "2d137aa308c78932878952fe3624ea090ecfe644414b8b23e71a305f425698c5"
        },
        {
          "alg": "SHA-512",
          "content": "f9cb7b4914d38ca8056c2ec3336d95cfcd295f10c343b531f075d0756960300e63588359eb0104359721092395b6a5a8543169194a2c57dc3e2c2ab23b9bf74f"
        },
        {
          "alg": "SHA-384",
          "content": "eca3476b3ede6ffa2df882c24600af0802d3f9caa3557bf67f63b1205ae2aa77425833c5161ade20bf90dfd378f584ad"
        },
        {
          "alg": "SHA3-384",
          "content": "316dbaf6fd3bfedc453a752fbb9d84cb76c1bb5f871ba546b6d6a6c4fbc6ab60c87f118a0856c8d613700f53d9ecc001"
        },
        {
          "alg": "SHA3-256",
          "content": "b6c3b6a579477a424dc4fa060b5ffdbb32bfb244bade623c6ab8feb423215d61"
        },
        {
          "alg": "SHA3-512",
          "content": "2b5b402cd226ba5f2e5b9ec7d91e3f4dd5d3b0121498e9364b41063701dc87346d7511b4c1704f0be99b435d50707948e2d5cb0110e5cda7d9ebdbb0d660117c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl": "pkg:maven/com.microsoft.sqlserver/mssql-jdbc@13.2.1.jre11?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/Microsoft/mssql-jdbc",
          "type": "website"
        },
        {
          "url": "https://github.com/Microsoft/mssql-jdbc",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.mysql/mysql-connector-j@8.2.0?type=jar",
      "publisher": "Oracle Corporation",
      "group": "com.mysql",
      "name": "mysql-connector-j",
      "version": "8.2.0",
      "description": "JDBC Type 4 driver for MySQL.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a331817ab5c572777e25539a70b51bb6"
        },
        {
          "alg": "SHA-1",
          "content": "56d34aea30915904b1c883f1cfae731dd2df6029"
        },
        {
          "alg": "SHA-256",
          "content": "06f14fbd664d0e382347489e66495ca27ab7e6c2e1d9969a496931736197465f"
        },
        {
          "alg": "SHA-512",
          "content": "d1a8d3c171f5295f4b695bb33417bd2cb0d2b48570e7c260fc90c646d7c1154ca87b947be2e1f47f5ea082bc3c885029f726e2f1d68023740498986d660d09d1"
        },
        {
          "alg": "SHA-384",
          "content": "db0e7020e9a5d395ec5d7df385f19f9260850fc6d426818fceebbcdb7eeaf5500f6a5caa2971e0c4490a0f244fd3cd24"
        },
        {
          "alg": "SHA3-384",
          "content": "4913d19adaae72c80f5bcc2068cbb0fcc19a4386073b487cba583f742ff8760ad77fa99ff91595e215cb4c588dc7f994"
        },
        {
          "alg": "SHA3-256",
          "content": "10bf2a9734315830f3ee4435bdc24cfd13b225c8ff2a35813c44f2fa2b0d5880"
        },
        {
          "alg": "SHA3-512",
          "content": "5d69c169c0cc43e9f9cf163c64594e342a8c53e7a428fa3a97f18c1739eae7538a33b2591ad71c8dea38f07b75317c533965a782c8dec5b5fbbfce4b35c56de9"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "The GNU General Public License, v2 with Universal FOSS Exception, v1.0"
          }
        }
      ],
      "purl": "pkg:maven/com.mysql/mysql-connector-j@8.2.0?type=jar",
      "externalReferences": [
        {
          "url": "http://dev.mysql.com/doc/connector-j/en/",
          "type": "website"
        },
        {
          "url": "https://github.com/mysql/mysql-connector-j",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.postgresql/postgresql@42.7.10?type=jar",
      "publisher": "PostgreSQL Global Development Group",
      "group": "org.postgresql",
      "name": "postgresql",
      "version": "42.7.10",
      "description": "PostgreSQL JDBC Driver Postgresql",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "46b64ac0888710f255fc6584f6facf68"
        },
        {
          "alg": "SHA-1",
          "content": "35100a3f0899551e27af8fed4a3414619a4663b3"
        },
        {
          "alg": "SHA-256",
          "content": "cab1cd67cfa25c25de4348e532298028288a877ba01c77d1619fe45416193387"
        },
        {
          "alg": "SHA-512",
          "content": "6dbc306a9e5dc05af4d3aae27329053003cd88652ab5749d05a01d15d8bb8b295fdef466b39357d5b4e06db9316fb9cfffbe24ba6f2e4880c2a2ef77934a1401"
        },
        {
          "alg": "SHA-384",
          "content": "051820472bb1b4039b5e163b24c6ec9644a097559745de4e062083e37b28bbe6c2408667c1aeccd50e81ff4c36213949"
        },
        {
          "alg": "SHA3-384",
          "content": "38ffcd4bacd58cc9fee30bf6a660a9f3bdc680bcbee6d5a63f6b9f195628a3d74c03fa6111b4278018e49ed9c457ceab"
        },
        {
          "alg": "SHA3-256",
          "content": "2219838479d12a12fb7e6389b3f04fc65eda76e726387d9a0cdc9135f831a1eb"
        },
        {
          "alg": "SHA3-512",
          "content": "a37a0f3af6e1bc2f9906a320f78c69494a7ee19824f166dcafc68d90c03b671a72bda15e8e2e1e79c144f51d05ebd40b3c58343a2100a4d0e92fdefaf6e0c6e1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.postgresql/postgresql@42.7.10?type=jar",
      "externalReferences": [
        {
          "url": "https://jdbc.postgresql.org",
          "type": "website"
        },
        {
          "url": "https://github.com/pgjdbc/pgjdbc/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.postgresql.org/list/pgsql-jdbc/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/pgjdbc/pgjdbc",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.checkerframework/checker-qual@3.52.0?type=jar",
      "group": "org.checkerframework",
      "name": "checker-qual",
      "version": "3.52.0",
      "description": "checker-qual contains annotations (type qualifiers) that a programmerwrites to specify Java code for type-checking by the Checker Framework.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d7eeaac6d7810375c2484fd4faeb2f69"
        },
        {
          "alg": "SHA-1",
          "content": "9c17f496846ab1fca8975c6a50ceac0b3bbe63f0"
        },
        {
          "alg": "SHA-256",
          "content": "0b5bb1a4bdc4e4b1217482fe598efcaab4e1fba7b37f9412639178fc8116fc05"
        },
        {
          "alg": "SHA-512",
          "content": "27a94a7d117913592074e4ac44f15379cfc9ce615acca29a326044b9ffb02655ea909ea45343d7d18f208f68606b478cc683ec07c28b679d6de9ac7eb755dce1"
        },
        {
          "alg": "SHA-384",
          "content": "616909e6f24b320b838de7ae2c93179ed7bbdd36c068c64eb0830209eb376592fec63c445641995751c113da88a74f1b"
        },
        {
          "alg": "SHA3-384",
          "content": "ae4fbdcaaada5a981b30ddcec8e8b6305a3dabafc248564c8aae8a579e570535eedd8a1e4cf5819e3e60da4b5ce88810"
        },
        {
          "alg": "SHA3-256",
          "content": "480754e2a2e57afd81c50afa1a4d062eae647b6be26b043c4f8147a1857cdcc4"
        },
        {
          "alg": "SHA3-512",
          "content": "973ede6bb29169b29a058c35141d87ecbc5b1df27c059c7d3b2a27f1ea94e4e79c245d7d56f5086dfe9500d40dd9cfdb52f6ae59404ab3ed8361c552ccc189aa"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:maven/org.checkerframework/checker-qual@3.52.0?type=jar",
      "externalReferences": [
        {
          "url": "https://checkerframework.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/typetools/checker-framework.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.cloud.sql/mysql-socket-factory-connector-j-8@1.28.1?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.cloud.sql",
      "name": "mysql-socket-factory-connector-j-8",
      "version": "1.28.1",
      "description": "Socket factory for the MySQL JDBC driver (version 8.x) that allows a user with the appropriate permissions to connect to a Cloud SQL database without having to deal with IP allowlisting or SSL certificates manually.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a52f0443afac03a1901d1316d0fd7939"
        },
        {
          "alg": "SHA-1",
          "content": "3ea6efdaf74d2864a5807a15a02f6a4fd60d21d7"
        },
        {
          "alg": "SHA-256",
          "content": "0a445780dc86846cf1e4a827a4eeec0c4b0d5099113d830aeb810b8397a0ec84"
        },
        {
          "alg": "SHA-512",
          "content": "e71738037442d2229b3c3286ccc43121ccb17151c72f62a9b324d71c75fa305d4583110eb194b190f4c175e131c7574d5a10df0317a77ad19f0aac5f67ddd5c7"
        },
        {
          "alg": "SHA-384",
          "content": "c3b4e0f4698a34769eafadc898b3c96b00796aa5bda13b155835f85ded6436315939092895b7202af754a74638fac033"
        },
        {
          "alg": "SHA3-384",
          "content": "f4a6830bd65441fd6cab5741dfaea6d3f6243562316466d3f8c4a805919ab6287c4c16f73820d9bc5edb7a2310d64183"
        },
        {
          "alg": "SHA3-256",
          "content": "ab862143a74434e030d49f498d73eb232f4164c9d54badde62442842477da98e"
        },
        {
          "alg": "SHA3-512",
          "content": "f93dc041c9cb003295b98a6fad04ae71c5b8f0ce4f8a74f68588fc960e7e73f7ad9d4b541ca12dd7be623141980b8e1081480f02c6bea616ee6642f25e76afd5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.cloud.sql/mysql-socket-factory-connector-j-8@1.28.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/GoogleCloudPlatform/cloud-sql-mysql-socket-factory/mysql-socket-factory-connector-j-8",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/googleapis/java-shared-config/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/GoogleCloudPlatform/cloud-sql-mysql-socket-factory.git/mysql-socket-factory-connector-j-8",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.cloud.sql/jdbc-socket-factory-core@1.28.1?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.cloud.sql",
      "name": "jdbc-socket-factory-core",
      "version": "1.28.1",
      "description": "Core library for establishing secure connections. End users should depend on the driver-specific socket factory artifacts.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "18839a6d316bcd86099322441ac2969e"
        },
        {
          "alg": "SHA-1",
          "content": "77e4f79121fd4e08e3566a27cf1bf1c1eaf0dd8b"
        },
        {
          "alg": "SHA-256",
          "content": "c7cd4de460e615dafbed5d3d118365ebdbe6cb35c7119bfe3b5906a50405219a"
        },
        {
          "alg": "SHA-512",
          "content": "ff2e1318fd56ea0cda63d96f962a7322eaba5e47de099fd94b278aae11242baa8dea610f921afb141dd4c9eff964f237301665d6e15eb2bf904a3c8b24ab7ed3"
        },
        {
          "alg": "SHA-384",
          "content": "18c27d9b5a7a012ffe8e6365f58c634ffedbae46d8e714e5b11b7a7c19c83169382b96ac2c8a44d9141a263e71028dd8"
        },
        {
          "alg": "SHA3-384",
          "content": "1749e95ae8b11c988cd3f969a8c6a292dd5fb7ba5211eac003beaa6c6eaedb0b002c335e3a09cfead89844820105f064"
        },
        {
          "alg": "SHA3-256",
          "content": "3f15ada8572f61ea9430a36a23171fbbfe88e75149276e020560595ce6f456bd"
        },
        {
          "alg": "SHA3-512",
          "content": "2f15ae4872789fbd329a94b0c4a8e84a017c53c5977dfbf08a2b6738d7239c5fb6519b62c5a99f1da9044c6df759979a6f3ecded3d946942c7924f3890528789"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.cloud.sql/jdbc-socket-factory-core@1.28.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/GoogleCloudPlatform/cloud-sql-mysql-socket-factory/jdbc-socket-factory-core",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/googleapis/java-shared-config/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/GoogleCloudPlatform/cloud-sql-mysql-socket-factory.git/jdbc-socket-factory-core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jnr-enxio@0.32.19?type=jar",
      "group": "com.github.jnr",
      "name": "jnr-enxio",
      "version": "0.32.19",
      "description": "Native I/O access for java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "35a8afd310a07999ab79d75e64dcde59"
        },
        {
          "alg": "SHA-1",
          "content": "5c5bb09c9a14529685bff4fb8cd4f441007f3b1b"
        },
        {
          "alg": "SHA-256",
          "content": "896bf0fd60289c67d20f83cc472449d0a840d79158e3255bcafc4fee206560bb"
        },
        {
          "alg": "SHA-512",
          "content": "303322086b0ad5db6cc476258913c36f104afa79eb33aa86f2091f179d2fd255ad79bab36880d91c91a33e77a234a7c603e49e44ccd4f2b7bd2e6095bbac8cdf"
        },
        {
          "alg": "SHA-384",
          "content": "9d2920729a0e40aae8c28981ba8203b153278fbec2857d153cf08a7d920a2affac43189ddadd1098d294dbb80092cc49"
        },
        {
          "alg": "SHA3-384",
          "content": "2aae969c434658f23f06417f3c3e631794ef5250b9429d6d152c2d983195ca478217b1d8677a2773e6ed8e36730e7f67"
        },
        {
          "alg": "SHA3-256",
          "content": "e402acc18aa3b0ed9dbe045b6c24e2de589db6cf0833f41293ead5e024f4920e"
        },
        {
          "alg": "SHA3-512",
          "content": "ef52478271fcbe2322edcb91a6dd025f6d347c71b17a3f4b3b78d14e0edc7869ef4cb6a3d61e10899fdf5846935cb0700b2dc26f7d2a33a0dcada69e088c7b81"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jnr-enxio@0.32.19?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/jnr/jnr-enxio",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jnr-constants@0.10.4?type=jar",
      "group": "com.github.jnr",
      "name": "jnr-constants",
      "version": "0.10.4",
      "description": "A set of platform constants (e.g. errno values)",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a5a4036fd334522540041b062b304abc"
        },
        {
          "alg": "SHA-1",
          "content": "09f6f23763bf40ea7b56391791f574174914430a"
        },
        {
          "alg": "SHA-256",
          "content": "9a5b8cf9798d9d0331b8d8966c5235a22c4307676e35803a24659e6d76096f78"
        },
        {
          "alg": "SHA-512",
          "content": "608b2c53914aeb3fb36e2fb81a948e5dbec835a9d220d50a4bb9693d4a534414d1bc4c5e5582b196793317fb64fe7617d78d5ec974e6413732940e141201fdba"
        },
        {
          "alg": "SHA-384",
          "content": "dfe87e3b585304854d0dd23d2d5b3a4f00ca47fc52e8e28c6c75f976cc12bbe627cdfcca5fccaf6cb3b2591cf70dee89"
        },
        {
          "alg": "SHA3-384",
          "content": "8d1bf7084c5f34d13fab9b9b77dd095f43f105a7722a0d95fcc4e050e41f608f426914c3ff63573da053a9188e7f30bc"
        },
        {
          "alg": "SHA3-256",
          "content": "842f986856d42bf3703b2b9b8a5db9c8cbd166fafb94d81739dc3ff9469b8ae0"
        },
        {
          "alg": "SHA3-512",
          "content": "b87d2ffb045ed6bcf0d1976933e8ec258132f43b705388c905805e27e6f3b547d212c4eed37dec53541eebf17669365fa88519e8436f22545e56f8fc4215eda6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jnr-constants@0.10.4?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/jnr/jnr-constants",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jnr-ffi@2.2.18?type=jar",
      "group": "com.github.jnr",
      "name": "jnr-ffi",
      "version": "2.2.18",
      "description": "A library for invoking native functions from java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "79438f02c3e561bb8b3f8b9a62ad283f"
        },
        {
          "alg": "SHA-1",
          "content": "7560cca3ad3136688e5553add7ea9ae59e7ca3ee"
        },
        {
          "alg": "SHA-256",
          "content": "d64ad9007fe01b3c5a2fe65a8a9873714e2d6ce4f32f2d45296a8f7e15c8ad74"
        },
        {
          "alg": "SHA-512",
          "content": "44e432dfe01eb36b56849f389131a28ffa85711c94fd1f85ba080b107405d318aa42f3bc5457f72705cf931678f2f4febc3856c81f58237d46b8033ab9bf06bd"
        },
        {
          "alg": "SHA-384",
          "content": "b39282bbda618db393cfe9d3e585eed1ef121cd5c8c4bd2d0ce4aeb56f26e42d27b39bf54afd0df526a626fb30f1902a"
        },
        {
          "alg": "SHA3-384",
          "content": "c2a5df207599c7df1cb78c1a8997a220b3f3d56698a769c09ecc2f06d3d4b46d369e60ed8691787beb1b6c4ad1bcdd2e"
        },
        {
          "alg": "SHA3-256",
          "content": "d08185363e60b71e9fcd6c6deae3025ad9a413b3be37a0ed4e1297ecb2ea9c6d"
        },
        {
          "alg": "SHA3-512",
          "content": "2af2f4f9b4736cd182078c133b8fe4004c2885769e2c48e7f960b04ca735245ab800e7f8df7cc06207d5dc4c5670646b68b8cd6d3f6dcb0fef684f860f25ac10"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jnr-ffi@2.2.18?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/jnr/jnr-ffi",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jffi@1.3.14?type=jar",
      "group": "com.github.jnr",
      "name": "jffi",
      "version": "1.3.14",
      "description": "Java Foreign Function Interface",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9f65659b11b4d8b03e18d274d4957541"
        },
        {
          "alg": "SHA-1",
          "content": "e12b6a40e6d7cb7489cb28cd299d855bad277d54"
        },
        {
          "alg": "SHA-256",
          "content": "fe61cec21b07feec6191c0c7ff240f4b5048789d53ced4b2e06df0f7fad3df42"
        },
        {
          "alg": "SHA-512",
          "content": "d0be453ca344a5e6fd4e17f2122c998be9723d61010a53607b03f351099f481e030b4d8518c656415f3b02c30de03ff08663874637cbe7c89d552230bc718543"
        },
        {
          "alg": "SHA-384",
          "content": "7050a7bab139041c4b8ffed2efa9c3aeb6bf28a6d0cfc4e55fa426c43b6bd31ba527f3e85d963e558d80e11542de0d1e"
        },
        {
          "alg": "SHA3-384",
          "content": "fcc4ba34b16ef2f0ae466e796a4d2e5c0ae55b28986d97b5c854c944643d132aced72a1ac0cb75838d9651948f882793"
        },
        {
          "alg": "SHA3-256",
          "content": "80b7852b3abacc4fb343e217daf18a67f68279687eaade99d5bce02481626d85"
        },
        {
          "alg": "SHA3-512",
          "content": "f9b250829adc4687d89ec3e183d3bfd666fe09e73731504e06e1212f76cf74cf5a4459d71ef09a73c13cf3503fda221ef62652816720e67f4ae346d356914de8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "name": "GNU Lesser General Public License version 3",
            "url": "https://www.gnu.org/licenses/lgpl-3.0.txt"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jffi@1.3.14?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/jnr/jffi",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jffi@1.3.14?classifier=native\u0026type=jar",
      "group": "com.github.jnr",
      "name": "jffi",
      "version": "1.3.14",
      "description": "Java Foreign Function Interface",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "009ee73399bfbe58f146d98bcb041931"
        },
        {
          "alg": "SHA-1",
          "content": "c70bd3559a580d6bb4f0e1b63c00ce98618fff15"
        },
        {
          "alg": "SHA-256",
          "content": "d432bbd8b0773749cbec8bb59fd6963fedc6491163669196eb4108e4abc8cfd0"
        },
        {
          "alg": "SHA-512",
          "content": "3efde11bb89c9ebef3ef248405940b0f6af6f40d8c2c2269d86e73a184cab66553361f9113479e5e84ef35551e7d635f1105f91978954442ab06ba2310c86454"
        },
        {
          "alg": "SHA-384",
          "content": "ac66de0712e4b064ed3751860d4ba5f9c47efd99885f98bf4f4bebd6bf2d8220d98931b610358cbc76bf4905edab456c"
        },
        {
          "alg": "SHA3-384",
          "content": "5f32ab170206aa7e9d50d4685f1814e568c15238d0a351de5595430313d1eee4b41a0be2913a6d4c8080010c0742fc03"
        },
        {
          "alg": "SHA3-256",
          "content": "7e8b130b5148ba090f13d7dd2e53b29939eb2e22917c8acb93d78e0fbfbc9291"
        },
        {
          "alg": "SHA3-512",
          "content": "6c7c6b30460f189ac25c91b68b4f16d1bd0997e04f418e7d579711dd0a8e4952d5e9acfea3319d484c71672a429d59828ac95ba6b2af022fa751ec4a64275933"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "name": "GNU Lesser General Public License version 3",
            "url": "https://www.gnu.org/licenses/lgpl-3.0.txt"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jffi@1.3.14?classifier=native\u0026type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/jnr/jffi",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.ow2.asm/asm-commons@9.7.1?type=jar",
      "publisher": "OW2",
      "group": "org.ow2.asm",
      "name": "asm-commons",
      "version": "9.7.1",
      "description": "Usefull class adapters based on ASM, a very small and fast Java bytecode manipulation framework",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8344aea3c8b7d707e9d35a62710e77c9"
        },
        {
          "alg": "SHA-1",
          "content": "406c6a2225cfe1819f102a161e54cc16a5c24f75"
        },
        {
          "alg": "SHA-256",
          "content": "9a579b54d292ad9be171d4313fd4739c635592c2b5ac3a459bbd1049cddec6a0"
        },
        {
          "alg": "SHA-512",
          "content": "81daf5765e387e6aeec5d45c4b9e4e1b471fb4f350931e5a214845c7c657a2142768f6902765e49c0ce2c595962e5d008883cba2e4a40c4bdce8f2e92518d2db"
        },
        {
          "alg": "SHA-384",
          "content": "473ba9b72bd47d2000d127dababdd649fd7738d658cd5b818266cd978e8d3bb2589e431a52bfaa7fb8a03d2345a529f2"
        },
        {
          "alg": "SHA3-384",
          "content": "1a792b9567115e97b81242325de41d3757e8b11dc5c38b4f6b8c9aa34ef8a33b5ef9a7401c725574ee4c36ebb5c0f46a"
        },
        {
          "alg": "SHA3-256",
          "content": "2974918408bf8791d133c96cee74e86f4fa9659faa1faaf886eed3c586b7c717"
        },
        {
          "alg": "SHA3-512",
          "content": "21c2635f5cdee961ea6aedee78589603b0ff1d56ee295d4548e882abe4485a5818a82848a99851592de5a8d09e4c74e406fc0bea9f23e250e58e0e31986845af"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.ow2.asm/asm-commons@9.7.1?type=jar",
      "externalReferences": [
        {
          "url": "http://asm.ow2.io/",
          "type": "website"
        },
        {
          "url": "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail.ow2.org/wws/arc/asm/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.ow2.asm/asm-analysis@9.7.1?type=jar",
      "publisher": "OW2",
      "group": "org.ow2.asm",
      "name": "asm-analysis",
      "version": "9.7.1",
      "description": "Static code analysis API of ASM, a very small and fast Java bytecode manipulation framework",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4cd9e7178dfb85371bba3077e40cd514"
        },
        {
          "alg": "SHA-1",
          "content": "f97a3b319f0ed6a8cd944dc79060d3912a28985f"
        },
        {
          "alg": "SHA-256",
          "content": "85b29371884ba31bb76edf22323c2c24e172c3267a67152eba3d1ccc2e041ef2"
        },
        {
          "alg": "SHA-512",
          "content": "a8bd265c81d9bb4371cafd3f5d18f96ad79aec65031457d518c54599144d199d9feddf13b8dc822b2598b8b504a88edbd81d1f2c52991a70a6b343d8f5bb6fe5"
        },
        {
          "alg": "SHA-384",
          "content": "31620bb948127b811684769f966990170ced469f4b15f30bf22a7a0d28c7da644027cf7c9ffd10f80fcc4cdf377909d8"
        },
        {
          "alg": "SHA3-384",
          "content": "fe5920760dfcbe5dda26d7839ba9ad621a8d2b139994e0d2107873512651cfffdb73e85e635dbad0f9db7cfee55420d3"
        },
        {
          "alg": "SHA3-256",
          "content": "3fe7b153bea627308dbfb2ce682a3c10646a06eee5d34a13acd76e60a7cda240"
        },
        {
          "alg": "SHA3-512",
          "content": "1acd097141b321e440561a9ef759b5b5ab125b42ae02e5806fd026978727740124a483f608db230563fde701161e51f8548a662e29ba12d97ba3d24949b4c821"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.ow2.asm/asm-analysis@9.7.1?type=jar",
      "externalReferences": [
        {
          "url": "http://asm.ow2.io/",
          "type": "website"
        },
        {
          "url": "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail.ow2.org/wws/arc/asm/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.ow2.asm/asm-tree@9.7.1?type=jar",
      "publisher": "OW2",
      "group": "org.ow2.asm",
      "name": "asm-tree",
      "version": "9.7.1",
      "description": "Tree API of ASM, a very small and fast Java bytecode manipulation framework",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e85029f613b6469989cc7cf53fe06b74"
        },
        {
          "alg": "SHA-1",
          "content": "3a53139787663b139de76b627fca0084ab60d32c"
        },
        {
          "alg": "SHA-256",
          "content": "9929881f59eb6b840e86d54570c77b59ce721d104e6dfd7a40978991c2d3b41f"
        },
        {
          "alg": "SHA-512",
          "content": "e55008c392fdd35e95d3404766b12dd4b46e13d5c362fcd0ab42a65751a82737eaf0ebc857691d1916190d34407adfde4437615d69c278785416fd911e00978d"
        },
        {
          "alg": "SHA-384",
          "content": "4363d7d075700cbe6161bf86a0ff1b0e732fe96963010f1fc66f7701e8139673cc4fba81ae2937d25e0a5032368b0d5a"
        },
        {
          "alg": "SHA3-384",
          "content": "d22a3eeb20ee739bfbf3535655e7d25e3b3910f13ac86d9e4c29b4e0b19efd53ab65c1d843bbc0e289a8744d27e09453"
        },
        {
          "alg": "SHA3-256",
          "content": "9d57ddbdd10cda7f9bc45bc0bcb54143f7ea1b802540cf3029ab7e31dfc59df7"
        },
        {
          "alg": "SHA3-512",
          "content": "1352a6d8caca6649bc7e1c8e209a1e3864ac8eac8d6af2f11e2701eab5304a4cff41355828ed0c69adc8fc3b8d639d607bec574834e8e3185a3e3f81199e756a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.ow2.asm/asm-tree@9.7.1?type=jar",
      "externalReferences": [
        {
          "url": "http://asm.ow2.io/",
          "type": "website"
        },
        {
          "url": "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail.ow2.org/wws/arc/asm/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.ow2.asm/asm-util@9.7.1?type=jar",
      "publisher": "OW2",
      "group": "org.ow2.asm",
      "name": "asm-util",
      "version": "9.7.1",
      "description": "Utilities for ASM, a very small and fast Java bytecode manipulation framework",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "36d373a9cd6cad9b35db9f984c6b4bbb"
        },
        {
          "alg": "SHA-1",
          "content": "9e23359b598ec6b74b23e53110dd5c577adf2243"
        },
        {
          "alg": "SHA-256",
          "content": "f885be71b5c90556f5f1ad1c4f9276b29b96057c497d46666fe4ddbec3cb43c6"
        },
        {
          "alg": "SHA-512",
          "content": "522d793d15a2c5ea6504a50222cf0750f1eab7b881cf289675042539b1aba8b3868197b1bebe729de728dd10020eb028ae16252dcd5d84fdcbf7f925832bc269"
        },
        {
          "alg": "SHA-384",
          "content": "c073e7d64d5891d024860f638c3ee901aca60637b820ad05f9be7d33b4f4ad99fc448173dd9cb0b1cd0032485e813b24"
        },
        {
          "alg": "SHA3-384",
          "content": "2300d5572d929e6f20a7569dceb05bd9930b6ca18bcf11f648e37f28d00e78883f632ff60f4c4f9997aaa3d560a9450b"
        },
        {
          "alg": "SHA3-256",
          "content": "f5b3d45b832550fc3d1a675fdc4531a32eb8688db37b7102f0d544635f967ed2"
        },
        {
          "alg": "SHA3-512",
          "content": "ae097429b38febbc39a91d9697b6f709a49aad2fbc032ae2222e8f11c2907ef1a526afc4ee38d4dee46c09a7196f4f676f5704461dd3a0fe1e606bc9e3ef970a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.ow2.asm/asm-util@9.7.1?type=jar",
      "externalReferences": [
        {
          "url": "http://asm.ow2.io/",
          "type": "website"
        },
        {
          "url": "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail.ow2.org/wws/arc/asm/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jnr-a64asm@1.0.0?type=jar",
      "group": "com.github.jnr",
      "name": "jnr-a64asm",
      "version": "1.0.0",
      "description": "A pure-java A64 assembler",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6cb469cbbcf9eca78d50f7da595a8337"
        },
        {
          "alg": "SHA-1",
          "content": "0a1cb8dbe71b5a6a0288043c3ba3ca64545be165"
        },
        {
          "alg": "SHA-256",
          "content": "53ae5ea7fa5c284e8279aa348e7b9de4548b0cae10bfd058fa217c791875e4cf"
        },
        {
          "alg": "SHA-512",
          "content": "922bdf2883c6a9cd6491289020d404ab151fd9ffa78d2ec884a2ac3af739d397016f1f4596c3e6c58744ea600fdbc2d330c8f520a1a9ab0eef6af6b667b35b89"
        },
        {
          "alg": "SHA-384",
          "content": "933298b61960f09eccb672a0622a93a721d06cf85cdb29500ff6efdf874bad7b08aede29b6cf3b51141c16b38b250be2"
        },
        {
          "alg": "SHA3-384",
          "content": "2a7231c649f4805d34eb19c7e6b6dbb5ecdb663e29ef69a4523e2f7d2ae70740ca3aa03eba3476960d0fe344ea45df2d"
        },
        {
          "alg": "SHA3-256",
          "content": "fc270fd94a4e2b4fb1a9e4dd42ff4600c94e226ef3431aee998a915b62eb19ae"
        },
        {
          "alg": "SHA3-512",
          "content": "8ee64fec1b5e93ff9c2b596c0345ef120479217bea95d669c6e17f338a45945545b546813af2f58920a6bb2d607bd004870d10c8660a516261288d9f555fc850"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jnr-a64asm@1.0.0?type=jar",
      "externalReferences": [
        {
          "url": "http://nexus.sonatype.org/oss-repository-hosting.html/jnr-a64asm",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jnr-x86asm@1.0.2?type=jar",
      "group": "com.github.jnr",
      "name": "jnr-x86asm",
      "version": "1.0.2",
      "description": "A pure-java X86 and X86_64 assembler",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "00670735acb2a9d1421b506dc7d338bc"
        },
        {
          "alg": "SHA-1",
          "content": "006936bbd6c5b235665d87bd450f5e13b52d4b48"
        },
        {
          "alg": "SHA-256",
          "content": "39f3675b910e6e9b93825f8284bec9f4ad3044cd20a6f7c8ff9e2f8695ebf21e"
        },
        {
          "alg": "SHA-512",
          "content": "e928926b01ce545144c1bbf160edee9b923773e32f9a399a71c2ab5e8325d9cbcfb41f41c8f008b80d1beab8da1c4b74845996479c07ed73bc131959911d4762"
        },
        {
          "alg": "SHA-384",
          "content": "91839815885716f1202a824b195a475d4d7561690192b42cf05b8c6432556a3e7e2dab13b6e970986a97711fb7060844"
        },
        {
          "alg": "SHA3-384",
          "content": "ed27f9b39907e92805c2d6ae6a045e00e24f51544501df3b98b593177df4fe55fee2347c668df66c2ea6fae64c66ee0c"
        },
        {
          "alg": "SHA3-256",
          "content": "f2e4e4807f6674a5b428cebdbdd01e8cadbeee71b785a046bec2bec1de63a41b"
        },
        {
          "alg": "SHA3-512",
          "content": "0dfffcf0daac9513b347ab8bf22887360feea890428e12857d7d3400400ba498fdc61307d9fd9c6a5e1baa9a96279afc07bba08c6229ed4ede71569d710fd0f6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jnr-x86asm@1.0.2?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/jnr/jnr-x86asm",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jnr-unixsocket@0.38.24?type=jar",
      "group": "com.github.jnr",
      "name": "jnr-unixsocket",
      "version": "0.38.24",
      "description": "UNIX socket channels for java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "00aaa5c63da526e43cdce653bd24ab25"
        },
        {
          "alg": "SHA-1",
          "content": "f57f6163e4af6444668205ea38cc08ea60253045"
        },
        {
          "alg": "SHA-256",
          "content": "5bc5577cfab13af19b378253d7e25a081819021b2c8cb8db3ded3b168548d958"
        },
        {
          "alg": "SHA-512",
          "content": "eec8ad29a52057892c9ed2a84665509e76fe5c434db69e070bf81f34dc6617a477d3415eb3e4b0c84596bdad13b3a45ab3ac9c8917272d51a135463b53ecf8ac"
        },
        {
          "alg": "SHA-384",
          "content": "43efe4665519ce56616f67fc8ec2feadf5fc3dc899ab34f352918fab2da7515d719e1bf3d7fa4666ff1d368190ec4742"
        },
        {
          "alg": "SHA3-384",
          "content": "08da1182d5cc02f95bf7bf991b605a631013ae97691b652767d555212ac64e908f8a67655a456d2e6973683c17405f68"
        },
        {
          "alg": "SHA3-256",
          "content": "565d4cb114e28638eb3e87fa1c24a1ee1635442317fbee534f6dea06cec5e58b"
        },
        {
          "alg": "SHA3-512",
          "content": "ded413c4f9e93cc98f186404e1a3a2efca3b32878e109c4dee46d6273d61106841bd7e76fbc0affffdc0cb0b0fb6c8f03674e9fdbaa7fe64bd47164acc10f6c5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jnr-unixsocket@0.38.24?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/jnr/jnr-unixsocket",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jnr-posix@3.1.21?type=jar",
      "group": "com.github.jnr",
      "name": "jnr-posix",
      "version": "3.1.21",
      "description": "Common cross-project/cross-platform POSIX APIs",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "551caab65d9b6746657be2d14470c12b"
        },
        {
          "alg": "SHA-1",
          "content": "f6f953dfe8a53fbbda80ebaa0f65c48965d5a4ca"
        },
        {
          "alg": "SHA-256",
          "content": "cc9c83601eab9d52b9dcf3e19c33015fea33df88edb5764929e72978f8b2b4e5"
        },
        {
          "alg": "SHA-512",
          "content": "cc05287671c9dd231e949f254ef85bbe442983e151b968551ae21dbac16829bf7135f2be58aa41d3b1e2982ae49b07ed75003ad15880dbe0415a277e2666ade2"
        },
        {
          "alg": "SHA-384",
          "content": "e8eafd343915d4facae2af699fc001a8c2f26b698ec24d6ae3463dc9c6cc9941d5170db717c073b4d72f3556f1806fb4"
        },
        {
          "alg": "SHA3-384",
          "content": "2322bc1c132e54039bf0c5f0ff9bdca9c2b09661a798ebaeca143fbdaafdfba76c407391426f4154e65b7b6c231f52c2"
        },
        {
          "alg": "SHA3-256",
          "content": "5a82e7585377ac9d0f26e0fbce57b1f6211d0b8ad36dc6079ec6df944a9f9732"
        },
        {
          "alg": "SHA3-512",
          "content": "8429649c73d394aadf650e0dff255906d48cbfea10fc56f9305ce200ddda5bea59f915b0cad67059b93cdbb35dcd0e7b341659caee741c5f0ce4703d1d775d4f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "name": "GNU General Public License Version 2",
            "url": "http://www.gnu.org/copyleft/gpl.html"
          }
        },
        {
          "license": {
            "name": "GNU Lesser General Public License Version 2.1",
            "url": "http://www.gnu.org/licenses/lgpl.html"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jnr-posix@3.1.21?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/jnr/jnr-posix",
          "type": "website"
        },
        {
          "url": "http://github.com/jnr/jnr-posix/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.http-client/google-http-client@2.1.0-rc1?type=jar",
      "publisher": "Google",
      "group": "com.google.http-client",
      "name": "google-http-client",
      "version": "2.1.0-rc1",
      "description": "Google HTTP Client Library for Java. Functionality that works on all supported Java platforms, including Java 7 (or higher) desktop (SE) and web (EE), Android, and Google App Engine.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "487b3696a41f9cc2c13c4c1cda5816d4"
        },
        {
          "alg": "SHA-1",
          "content": "43db99b7dbabee78e51bedf651edb68102f456ad"
        },
        {
          "alg": "SHA-256",
          "content": "8868f14c73979e76a1b1744dd78ff589c3f1d8f8d6450f8c6a3e2618aebfd56f"
        },
        {
          "alg": "SHA-512",
          "content": "e8ad0a5507631ef98a67956005c8cf2245ff7616650d71d8020e1eda607a3ef4471d3d1b3de0e19ef38f6357a6a0f6f3ffdef0b63655b9425358290844c03330"
        },
        {
          "alg": "SHA-384",
          "content": "0da9d8649d314c4965c1ec6e669962f2f2ae23415c0848cca712cb58d337911165410a69fc38c624714c28a647a55065"
        },
        {
          "alg": "SHA3-384",
          "content": "e23669d0704dd357baf18dc8e6934568a9fefd6092ee1c72307a5b89bde3e5964ecb08143f6b0f819f5a1d7dfba49b19"
        },
        {
          "alg": "SHA3-256",
          "content": "54e2392dc869894199912f1f262ba32b189d977d77dc6c2666fffec27d4dab72"
        },
        {
          "alg": "SHA3-512",
          "content": "6f75d51136d7c4dc1e2e6f120e44f3a298af3ea19e5a818dd9352b91949e28a31b3e441361128c042e8f51fbdbed6ebb123253c7899ff922be50a4af092814fc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.http-client/google-http-client@2.1.0-rc1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-http-java-client/google-http-client",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/googleapis/google-http-java-client/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/google-http-java-client/google-http-client",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.grpc/grpc-context@1.70.0?type=jar",
      "group": "io.grpc",
      "name": "grpc-context",
      "version": "1.70.0",
      "description": "gRPC: Context",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b7e575dcff9de5208d81a29566a3d76a"
        },
        {
          "alg": "SHA-1",
          "content": "375570c198b9ff46f2202731d11271bb5cb396fa"
        },
        {
          "alg": "SHA-256",
          "content": "eb2824831c0ac03e741efda86b141aa863a481ebc4aaf5a5c1f13a481dbb40ff"
        },
        {
          "alg": "SHA-512",
          "content": "430cd53a07173fcfe8ac65d0b6f682a30eb7a50df9c33850a39dd2d48a159e63afec1e430471aeeb00c9c88e2354d4d5c456e451309ef5640c91a73def197fb7"
        },
        {
          "alg": "SHA-384",
          "content": "abf8b56a9d9848ec73c2567f1fca13bbb77e5c106b216a8112347b057caa2d9793804d6f1e1f235c9433fb7edd1c27a2"
        },
        {
          "alg": "SHA3-384",
          "content": "5c4c6b820f489296a340822b6891773e5d801d7e266f5ecde111b85c53be9e965094e80b98a396858c6fe2672688caf0"
        },
        {
          "alg": "SHA3-256",
          "content": "fa505119427ecd73239a401444f43654b5e7d2ed7c78a6bd7407b1d9f5cc3a58"
        },
        {
          "alg": "SHA3-512",
          "content": "56d7389a20562d264b1b759a7f0ff7057b3f832eee5a57eba65d4f2ba878fe7d1569b44ea22e42c9ae0abf5a79506a8dccffe5f51ce56563812d53442395e115"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.grpc/grpc-context@1.70.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/grpc/grpc-java",
          "type": "website"
        },
        {
          "url": "https://github.com/grpc/grpc-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.grpc/grpc-api@1.70.0?type=jar",
      "group": "io.grpc",
      "name": "grpc-api",
      "version": "1.70.0",
      "description": "gRPC: API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f4b23b6be4f2936c097e780cf6e8ef50"
        },
        {
          "alg": "SHA-1",
          "content": "c0d185f8435e2dbc9b0f430d1e89600858ee24ee"
        },
        {
          "alg": "SHA-256",
          "content": "45faf2ac1bf2791e8fdabce53684a86b62c99b84cba26fb13a5ba3f4abf80d6c"
        },
        {
          "alg": "SHA-512",
          "content": "011e0ce3870ade374954e5818f3a03ab22bd19fbbf171d2873bdf1ecdbdefae183a512043f9155aa120dce3e1c902680372b18c3dcf1bb64ae508ecfa7631677"
        },
        {
          "alg": "SHA-384",
          "content": "fd1b5f17eeeb4992c80f468e99d54d614ef0de8981d40d5a6e0e6801ce6d74844fb3e0769ba43b4e7507ae330e0c6312"
        },
        {
          "alg": "SHA3-384",
          "content": "6a74a79bef71b22bd1eb217c26ffa4a91fc571819f24af2b2fc6e2372b9289779c60ec98464c429c6bd91d50a8ff65b9"
        },
        {
          "alg": "SHA3-256",
          "content": "0a726d7583e90d3076f1d805850366c6bd2dc2bbe4d836d209247c50c062eedf"
        },
        {
          "alg": "SHA3-512",
          "content": "c47e25067c30a0a01dc0e92e0b5bf3c6c8fe0ed4738b85af6e261ccf62cecb66e7b537ba1493434dfd479633e6a3d72bb51b15868e96bdce3da5696d8b294878"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.grpc/grpc-api@1.70.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/grpc/grpc-java",
          "type": "website"
        },
        {
          "url": "https://github.com/grpc/grpc-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.opencensus/opencensus-api@0.31.1?type=jar",
      "group": "io.opencensus",
      "name": "opencensus-api",
      "version": "0.31.1",
      "description": "null",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a5e7092bb89baaaee424f5a7b20d1bad"
        },
        {
          "alg": "SHA-1",
          "content": "66a60c7201c2b8b20ce495f0295b32bb0ccbbc57"
        },
        {
          "alg": "SHA-256",
          "content": "f1474d47f4b6b001558ad27b952e35eda5cc7146788877fc52938c6eba24b382"
        },
        {
          "alg": "SHA-512",
          "content": "aac98ed2de298609bac9cb5a69ac16df0ca9c9fc82f429720ddcfdd769fdae96b707ed81c8d8c37380de846b302aacaac80156ef75567061aed3f77cc3c3b725"
        },
        {
          "alg": "SHA-384",
          "content": "d8dfdbc7d584809f00b5a4239cbaf575e8924a176e92a44230e8ac1e9dc85e458b63fad69b0b445d8d2e8c1a70e7633a"
        },
        {
          "alg": "SHA3-384",
          "content": "5cb3db9b30adb23c2b33ce0ded61a69e5347a4531d0563fc9185aba11aab7a639bf40286fc8d0f52a73c50add15775c7"
        },
        {
          "alg": "SHA3-256",
          "content": "733221e8a1dc4476c53fee92837757bfd468afe25f57bbce79d25c60f2e240f6"
        },
        {
          "alg": "SHA3-512",
          "content": "cdb61cef7324e1173f297867ec9274c6439779cdd674a442d26724de047258a64f3f76ad4e496f7afde785b5dbdf5d03f0b0f1d4424868cf14ebc1fd3b63dc76"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.opencensus/opencensus-api@0.31.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/census-instrumentation/opencensus-java",
          "type": "website"
        },
        {
          "url": "https://github.com/census-instrumentation/opencensus-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.opencensus/opencensus-contrib-http-util@0.31.1?type=jar",
      "group": "io.opencensus",
      "name": "opencensus-contrib-http-util",
      "version": "0.31.1",
      "description": "null",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9ecc9c428eb87dc734ae8d07b820ce26"
        },
        {
          "alg": "SHA-1",
          "content": "3c13fc5715231fadb16a9b74a44d9d59c460cfa8"
        },
        {
          "alg": "SHA-256",
          "content": "3ea995b55a4068be22989b70cc29a4d788c2d328d1d50613a7a9afd13fdd2d0a"
        },
        {
          "alg": "SHA-512",
          "content": "3192532e4989a26d9a69f4246ef994b35058d155e199b500196d14427d1b46b1515f872a36500cb84768524870297388c90272ffa61dc8448f6f7571c4f86b27"
        },
        {
          "alg": "SHA-384",
          "content": "46f9dcc71f71f33be99a00fdd9a2ba602eb547b56b6e8177660d3a44d3dd974609bf16d2a1b58359a0f39797cb3ee683"
        },
        {
          "alg": "SHA3-384",
          "content": "21d66f5efa2511de4e4b4f3ea18d37aeb954ea1b4315f1e11cd84a11a95e9bb9841addee4d1230c3813f06144a675a1c"
        },
        {
          "alg": "SHA3-256",
          "content": "8352c7dcd73fced7e49425d70f6955579f5c24fafd4529e5f5e54ef5a88a3c83"
        },
        {
          "alg": "SHA3-512",
          "content": "f8ec86e5728b9acbdaa684cbf385ab3834006e44363de43f9af4b50dca71d4e0d77d0d8b2e7bb97435581dda6572691b1d263835e4e97256999df550b9efc13b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.opencensus/opencensus-contrib-http-util@0.31.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/census-instrumentation/opencensus-java",
          "type": "website"
        },
        {
          "url": "https://github.com/census-instrumentation/opencensus-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.http-client/google-http-client-gson@2.1.0-rc1?type=jar",
      "publisher": "Google",
      "group": "com.google.http-client",
      "name": "google-http-client-gson",
      "version": "2.1.0-rc1",
      "description": "Google HTTP Client Library for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e67b03ead8ade4cf3c22d2d9eafef1dd"
        },
        {
          "alg": "SHA-1",
          "content": "66df5b0312bc64bc29a4a04a25e394c8752273ba"
        },
        {
          "alg": "SHA-256",
          "content": "7ef0e39bee6d7973caaad492cda343ef536c408be5a1985b5910cacc4e89f46a"
        },
        {
          "alg": "SHA-512",
          "content": "5651ed06749b87c3570aee68e07d862cbc7e74d74b4d4c50121f580733ee74b33761a01b0e8ed194bf5dc97e1d7445f813e672b00e1bac6f6e108dd202d4b73e"
        },
        {
          "alg": "SHA-384",
          "content": "550d3aae2f595753169a752b7d7ad14695a729c3df995ce5b8d05148a12930b02264e7d0e13959eea0b4bff33571cb20"
        },
        {
          "alg": "SHA3-384",
          "content": "6575bbcc57fbd219213f34969dcd368052d7d86101648aa1ef569a594960d0f3516b1f68efed7256c515b010ef4b98f9"
        },
        {
          "alg": "SHA3-256",
          "content": "aa840f30ee93c526b3952f5697971d59e36113a550537cd1b9a1dcb8c87c8d09"
        },
        {
          "alg": "SHA3-512",
          "content": "427daf35e4ab5f32a0dbc9f7e7f3a8160fc859c1d6d3f7cb6ee75aaec4a1c042f4613077990334468b5c816b3b02b5f4181e624667f489249e1fa9c3036ca078"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.http-client/google-http-client-gson@2.1.0-rc1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-http-java-client/google-http-client-gson",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/googleapis/google-http-java-client/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/google-http-java-client/google-http-client-gson",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.api-client/google-api-client@2.8.1?type=jar",
      "publisher": "Google",
      "group": "com.google.api-client",
      "name": "google-api-client",
      "version": "2.8.1",
      "description": "The Google APIs Client Library for Java is a Java client library for accessing any HTTP-based API on the web",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6527c9adde0fe045be0fb065dea8fc0a"
        },
        {
          "alg": "SHA-1",
          "content": "926bf96b546311d4ce18672d00bc8766ecfd72d1"
        },
        {
          "alg": "SHA-256",
          "content": "f19a438e0ccec1d2f05f3a1d9272dac0cd7fca30ba6d4259bbe81559bd44f170"
        },
        {
          "alg": "SHA-512",
          "content": "af54078405c2b85e1ed34a5be7f04957f63daf2849cda9ab4f7f80729047e782ced98620a120770d75cb1bc1867ef262a1e9d7fa64a40e14de3363cd1da27ec7"
        },
        {
          "alg": "SHA-384",
          "content": "b3bda4694c446235ea51ce8d15cbb0021ec05d32c842e9bd377f967732095983e6875eb537f0c4d7e609e0cbde1fc6d0"
        },
        {
          "alg": "SHA3-384",
          "content": "ffff4830d038aa43334f9e4510d4bb39c756532dff1f0fa562b2e5326221b0354e32d19c0cc9f1c4eb285dbea4976817"
        },
        {
          "alg": "SHA3-256",
          "content": "4ce30bc165fae2c03a4ece1aee2d065774d2d4ffa4e7d1fbcc5a1040ef35aa08"
        },
        {
          "alg": "SHA3-512",
          "content": "c92199b20fdedb1ad95ff54aa39bc369adc700a592a65f0235e32e064513f26a810b11f8c3dc6d124e5dbd9d66c0746b4477a2532c13e2fbaa89dc1916c957a5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.api-client/google-api-client@2.8.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-api-java-client/google-api-client",
          "type": "website"
        },
        {
          "url": "https://github.com/googleapis/google-api-java-client/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/google-api-java-client/google-api-client",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.http-client/google-http-client-apache-v2@2.0.0?type=jar",
      "publisher": "Google",
      "group": "com.google.http-client",
      "name": "google-http-client-apache-v2",
      "version": "2.0.0",
      "description": "Google HTTP Client Library for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2eea96e72c1d01d74e0f93c9b677519b"
        },
        {
          "alg": "SHA-1",
          "content": "9d7ec2f47541ac747bce141c0d04b07c01a9f820"
        },
        {
          "alg": "SHA-256",
          "content": "9dfeedb952d2f0351dabc3327c42d87431acba63ad15eee272282af56ec033ab"
        },
        {
          "alg": "SHA-512",
          "content": "a6c7f96546105edbeff39373eace61893f0c53a6efca1de071ee481ca0a2b8845c2c5fc7c0f8a24f9dd7a0a1e69e177ac00f28aefbf54aca29a681470a523a17"
        },
        {
          "alg": "SHA-384",
          "content": "c5e0867f05fa5961d761c57a0f2a799bb20b3544a35ff5192ed17e220c07e43fc5eba7a9758130c0976d48f854790bd0"
        },
        {
          "alg": "SHA3-384",
          "content": "08a2b32fa6656f17a65983de440a7789c904616371458f200a8bbf7e8b9dbabd5c8720e9d83a490247289d6759e89cb3"
        },
        {
          "alg": "SHA3-256",
          "content": "edd458343dec03285dcedf4a29f094678b9295085dba2b9c7ab13faa06e80c3c"
        },
        {
          "alg": "SHA3-512",
          "content": "cda69daafb9b6743c32b3a4e9c1267454c98d35102fb1534d4dd0d7b4f6ee28f89c2d8121ec00155d35324e73b9e22ad32e437072d49075187b7d79f2e95fdb4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.http-client/google-http-client-apache-v2@2.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-http-java-client/google-http-client-apache-v2",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/googleapis/google-http-java-client/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/google-http-java-client/google-http-client-apache-v2",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.apis/google-api-services-sqladmin@v1beta4-rev20251201-2.0.0?type=jar",
      "publisher": "Google",
      "group": "com.google.apis",
      "name": "google-api-services-sqladmin",
      "version": "v1beta4-rev20251201-2.0.0",
      "description": "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "7f80cc793fd3775b602b7e4cf4cdcc2d"
        },
        {
          "alg": "SHA-1",
          "content": "f4412f9683a673b1ca29757afd8b8f05b7b3eb75"
        },
        {
          "alg": "SHA-256",
          "content": "affe05c4803f484ddc109b7751fb82bd0f7eb599a0bd6e85ad1df78f52c7f832"
        },
        {
          "alg": "SHA-512",
          "content": "1c16b7491d6e8594efc284a2e8db157da59228869b2f56ac16520d8d2b6b3e0d8844ad260dd20654595ceeeffec7dcd8ad7c20479df4be912eeffe0f1ae8bc42"
        },
        {
          "alg": "SHA-384",
          "content": "25ece0f1aa0fb81f6cee5166b7b475112b7d8f5c594ecd7b67c5241d4ead102712841761019c4e919c383424db475d56"
        },
        {
          "alg": "SHA3-384",
          "content": "efa0eda30f8eca6f1fae77aabffcf3018fcbb826bbeb655e1e3eb90bf1ddd037af99e84f813586a0e743817f110d9e74"
        },
        {
          "alg": "SHA3-256",
          "content": "6efb50ae52a7b0f1673ab4cf5343fe1b4031e4e52f1daa7daf4d81adfff2bea0"
        },
        {
          "alg": "SHA3-512",
          "content": "0cd8fe3bc32f913d722b499c6b99e4f5aa6651a6ef1ed38756cd314abf28e21909b022e430600ef7530378ba1ed4916ff33deab33b87ebcf7789f2accb5e5dc6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.apis/google-api-services-sqladmin@v1beta4-rev20251201-2.0.0?type=jar",
      "externalReferences": [
        {
          "url": "http://nexus.sonatype.org/oss-repository-hosting.html/google-api-services-sqladmin",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "http://svn.sonatype.org/spice/tags/oss-parent-7/google-api-services-sqladmin",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.auth/google-auth-library-credentials@1.42.0-rc1?type=jar",
      "publisher": "Google",
      "group": "com.google.auth",
      "name": "google-auth-library-credentials",
      "version": "1.42.0-rc1",
      "description": "Client libraries providing authentication and authorization to enable calling Google APIs.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "dafb756071d8869a7a2746b21e7310fe"
        },
        {
          "alg": "SHA-1",
          "content": "8b68d8b68751265427166b97b791d738b1eab967"
        },
        {
          "alg": "SHA-256",
          "content": "a62ecf1fc689c260207229af483aee5ee8663661d2007a763763f6b7eeb48453"
        },
        {
          "alg": "SHA-512",
          "content": "3a1ce9928899639ad5b4bd9a26895b9d925470c12f658046459f53ddc9df77e4c9f37df4c506cbc234902ad8d7791e4eb87f884fc0ba8762f8981fb74775faed"
        },
        {
          "alg": "SHA-384",
          "content": "6b6ebf520bef6bb29b5c538a6825bb92cab48fc46fe7a0a0f4b07dcb8134b857defe95cc5f35affdf416e98fa812f116"
        },
        {
          "alg": "SHA3-384",
          "content": "48a6dd77eb0d34184d8747878931100e263fdf0048745943a7b61d855a2273f6d3f7f62109d1180e4e0172baf09a2709"
        },
        {
          "alg": "SHA3-256",
          "content": "f49db23b7ce5712ad6eaef475f4e6faefac27dc490d2d8d56a61e984fcd20823"
        },
        {
          "alg": "SHA3-512",
          "content": "b0160e675a2ef7dacd1b7c8101e695d94209319c2e6321967bc7949f26475e87c3997ddfaf359d386ec10ebe1b4afa153a3d6b2608b539faae45a5aa97d9376f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.google.auth/google-auth-library-credentials@1.42.0-rc1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-auth-library-java/google-auth-library-credentials",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/googleapis/java-shared-config/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/google-auth-library-java/google-auth-library-credentials",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.auth/google-auth-library-oauth2-http@1.42.0-rc1?type=jar",
      "publisher": "Google",
      "group": "com.google.auth",
      "name": "google-auth-library-oauth2-http",
      "version": "1.42.0-rc1",
      "description": "Client libraries providing authentication and authorization to enable calling Google APIs.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "aeb5a1fc7dc00aa1604a792696118bfb"
        },
        {
          "alg": "SHA-1",
          "content": "f5bb9cacad923f4fce84e39296c66fb9a62246cf"
        },
        {
          "alg": "SHA-256",
          "content": "7e160b69ffe1838beb66656b9b52ecc63fb0e92822e0e39ea5dabb46cc937283"
        },
        {
          "alg": "SHA-512",
          "content": "213a1e1fa8ca062c2a4e5e723d77b5877e60f098f6978e83f5328688826a3a582b3b5db58273a4e303ba96e463bc54e2d070973decc0933f6d0a354c01eb53cd"
        },
        {
          "alg": "SHA-384",
          "content": "bb64ab2544d26e260ef3623c3f6f58af2e5622f267381eff404b3cfe097a3fecdeead58abc75b8cd82f1751119e6d27f"
        },
        {
          "alg": "SHA3-384",
          "content": "fd8d7e769cdcb38bad46b96046f8598a5c0b18c16e1122ae762ccf30f2d3f1c6a5ab776a776779ed45c03d3e694fea19"
        },
        {
          "alg": "SHA3-256",
          "content": "22dc6158862e3e12c29c1a9b1f11a44eb2eeda77ae4e82a0eb930a410a7895b7"
        },
        {
          "alg": "SHA3-512",
          "content": "bb8af0510a3ca4a972b80e1959d2127bece29e6875d508c3a09aa2a2361b271e7132d48116ade8e728fad91c03114cff7cebd08dab2297c579887531cfaa0c70"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.google.auth/google-auth-library-oauth2-http@1.42.0-rc1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-auth-library-java/google-auth-library-oauth2-http",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/googleapis/java-shared-config/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/google-auth-library-java/google-auth-library-oauth2-http",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.0?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.auto.value",
      "name": "auto-value-annotations",
      "version": "1.11.0",
      "description": "Immutable value-type code generation for Java 8\u002B.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8fc3c2d0bbdef8927f08a5c7c829a768"
        },
        {
          "alg": "SHA-1",
          "content": "f0d047931d07cfbc6fa4079854f181ff62891d6f"
        },
        {
          "alg": "SHA-256",
          "content": "5a055ce4255333b3346e1a8703da5bf8ff049532286fdcd31712d624abe111dd"
        },
        {
          "alg": "SHA-512",
          "content": "339742a85491c0fe529e97668cd86d9c3a7a80061d226e1a51eae45fb9c466e10ee2a4d4fc3b502b96aa473ac4e03850aef8a3b744d3972a934b279ceb80816e"
        },
        {
          "alg": "SHA-384",
          "content": "626c76525b939a087be13919b760b447ef6b8668004634650e9c98105c7b31412c205e022a8ba15ea7bc1c7061a6367c"
        },
        {
          "alg": "SHA3-384",
          "content": "f5c85d8934f52d108217ce20c0641c7692023c657049e40b4916185cd3f9d4386f4404dbc13a0694c9bb13fdf9b687e5"
        },
        {
          "alg": "SHA3-256",
          "content": "549eac3adc58ec5271c45ff9390bbfc0b30c3af27a8d74392ca0a46c19062ed7"
        },
        {
          "alg": "SHA3-512",
          "content": "9f65f28e7b022ea782b45939fd1170d6d0a175f639ca8cf66363f87390b642046da5d5bb0c8adc679b6b9533c9d8cd4b4dfefb7f09d6fb5028219c96fb37d508"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/auto/tree/main/value",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "http://github.com/google/auto/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/google/auto",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.api/api-common@2.53.0?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.api",
      "name": "api-common",
      "version": "2.53.0",
      "description": "Common utilities for Google APIs in Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9ee05b70e837dea0aa8cf25967c017f9"
        },
        {
          "alg": "SHA-1",
          "content": "96e6ff53548b176c5d046049dc8fb1c64546a96a"
        },
        {
          "alg": "SHA-256",
          "content": "f7073fb389c2aa329981ee65241db7947e8744c988e6c4d975f18bf2748b935a"
        },
        {
          "alg": "SHA-512",
          "content": "8651f8bf699c8e088b72b9e800c61871d0732f73e227aa9451b78a0049f5ba1a125e9026eb34a7b4400f976e463b2ba816e9f33d0023ceafe9eeaccb3addbee1"
        },
        {
          "alg": "SHA-384",
          "content": "afed7f9faae0ec5fcf50162a4a16f13cff7dfdca7b959e866b84cc714de708674cb26481164d34c91576c96e5b7abb95"
        },
        {
          "alg": "SHA3-384",
          "content": "8672cb69fac3cfb97168f85a173fd1fbbeb991e845a16f3396518c67f097f8b0835c47a64043c4e17f836c2563a07dba"
        },
        {
          "alg": "SHA3-256",
          "content": "f59d897bb46c3059d491000646b59ced385c642437641f12ed1cd0cb6bbfa4a4"
        },
        {
          "alg": "SHA3-512",
          "content": "1a5f6b534a5c65f52ca5472c9d1c9a1527d8b285abb0c1c0e5b5216459bc0cb2b8d87d991384e265b490ff375d920fe530a15b979d1c112ec4bb24abf69135fa"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.google.api/api-common@2.53.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/sdk-platform-java",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/googleapis/sdk-platform-java/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/sdk-platform-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar",
      "publisher": "GlassFish Community",
      "group": "javax.annotation",
      "name": "javax.annotation-api",
      "version": "1.3.2",
      "description": "Common Annotations for the JavaTM Platform API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2ab1973eefffaa2aeec47d50b9e40b9d"
        },
        {
          "alg": "SHA-1",
          "content": "934c04d3cfef185a8008e7bf34331b79730a9d43"
        },
        {
          "alg": "SHA-256",
          "content": "e04ba5195bcd555dc95650f7cc614d151e4bcd52d29a10b8aa2197f3ab89ab9b"
        },
        {
          "alg": "SHA-512",
          "content": "679cf44c3b9d635b43ed122a555d570292c3f0937c33871c40438a1a53e2058c80578694ec9466eac9e280e19bfb7a95b261594cc4c1161c85dc97df6235e553"
        },
        {
          "alg": "SHA-384",
          "content": "fc0058495e54efb6e05a34e3ff422e7c8347bcc77d6d9b87e9253424968dee6ef6a215c318d7e54f8705276be81f0682"
        },
        {
          "alg": "SHA3-384",
          "content": "ed6464b715de6ced0d9981a3f28140824946a4b7a02ffaff6116c833bb36e8f77a6282ce63c0d82cfe841d4fd6916891"
        },
        {
          "alg": "SHA3-256",
          "content": "ecfc9bef24ae28cf94c6775ecf6e2086d90a25d8d5476a4f6bb24001601b6cd0"
        },
        {
          "alg": "SHA3-512",
          "content": "f2b333527faedf504f60aa70a3d491972fa76f7e61e6351027f74613f41001157656824fe312b6e1df6dc4979704fe2a745b618d5368a97fe0bf8749739de9e2"
        }
      ],
      "licenses": [
        {
          "expression": "(CDDL-1.0 OR GPL-2.0-with-classpath-exception)"
        }
      ],
      "purl": "pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar",
      "externalReferences": [
        {
          "url": "http://jcp.org/en/jsr/detail?id=250",
          "type": "website"
        },
        {
          "url": "https://maven.java.net/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/javaee/javax.annotation/issues",
          "type": "issue-tracker"
        },
        {
          "url": "javaee-spec@javaee.groups.io",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/javaee/javax.annotation",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.oauth-client/google-oauth-client@1.39.0?type=jar",
      "publisher": "Google",
      "group": "com.google.oauth-client",
      "name": "google-oauth-client",
      "version": "1.39.0",
      "description": "Google OAuth Client Library for Java. Functionality that works on all supported Java platforms, including Java 7 (or higher) desktop (SE) and web (EE), Android, and Google App Engine.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "cf4992aee304401b66f6d03e654ab981"
        },
        {
          "alg": "SHA-1",
          "content": "99f02f3c46c68c01dfc95878456b009a13229c88"
        },
        {
          "alg": "SHA-256",
          "content": "27fc61ee2d526e33d31350b5ea383091c0879345e261f9b2e6fcc97a20c86f88"
        },
        {
          "alg": "SHA-512",
          "content": "f8973ab9ddda79746cc4e5d6c156e571604304627db7ebc2a570f56679cdeeddad86ce8e36a8acb7593a215c9a55cd8b8f86d85d9bec67b71c15b27eb1af45fd"
        },
        {
          "alg": "SHA-384",
          "content": "a3ef0821a2964960487e39747c2a69ec2030ac04e0fd1bae025c5c71036ffa6dc8a1c99effb7c5a63fe9ce81b742e9d0"
        },
        {
          "alg": "SHA3-384",
          "content": "c3c37f7e6c0f7d107c8e52546c8ec9e4f726308dfb065e9cdd8265904ca1a06d401b29fa6b84d3df67c420b8604b6330"
        },
        {
          "alg": "SHA3-256",
          "content": "44c05e415db8bdfef87fb2207b5d4d02c115aa661b334cf26ef9b97be29d019e"
        },
        {
          "alg": "SHA3-512",
          "content": "abd5c4d3fe3a17103f09c70f6adaf130b59690d8639fd771ed03588451bd061c3d38782dd178ff1999806942a950b584d016b77a4bab0fa28e66b64052e08d60"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.oauth-client/google-oauth-client@1.39.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-oauth-java-client/google-oauth-client",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/googleapis/google-oauth-java-client/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/google-oauth-java-client/google-oauth-client",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/dnsjava/dnsjava@3.6.3?type=jar",
      "publisher": "dnsjava.org",
      "group": "dnsjava",
      "name": "dnsjava",
      "version": "3.6.3",
      "description": "dnsjava is an implementation of DNS in Java. It supports all defined record types (including the DNSSEC types), and unknown types. It can be used for queries, zone transfers, and dynamic updates. It includes a cache which can be used by clients, and a minimal implementation of a server. It supports TSIG authenticated messages, partial DNSSEC verification, and EDNS0.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "44e6d636a89a9bdaecddfaf7222db39d"
        },
        {
          "alg": "SHA-1",
          "content": "fd04d3dfd5b2054a0d1faf6dfed49d5751e0b26f"
        },
        {
          "alg": "SHA-256",
          "content": "ce279b5acb753f58661756b6dcacdcc4dee76748cff04d2abf14edcc7e26a8de"
        },
        {
          "alg": "SHA-512",
          "content": "cff86782947a4c5182c6e07816546844ce0832a39be75e92014b7371020d1a7b75684df99edd529fb553f9491c7b4256b91fb65c365c63ef53ac6cb8375d1886"
        },
        {
          "alg": "SHA-384",
          "content": "2c419ccd5a0509b251ac1123da3167f9f8d1498f5f896dbab7272ead390346510289698ddf6a48023d8d12a8429a08f8"
        },
        {
          "alg": "SHA3-384",
          "content": "97797f2eb1428ca13ad931dbd94e854b572989ec497b3ddf14330bcefe72c8fbacc51854529750862ab8b1fd82e2c6dc"
        },
        {
          "alg": "SHA3-256",
          "content": "08e467b28a01cacfa8fac93d292cb9ce1f3434799d54d3a1853c0eec7d20a862"
        },
        {
          "alg": "SHA3-512",
          "content": "85185b70ec988defdb3ba5c5c0dbc8d5ad36e23b7f00d2b8d2772adf1e2e942b168c90aa34e975087bae663bd6c43074839c18112752f0acaa2218927030ec0a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/dnsjava/dnsjava@3.6.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/dnsjava/dnsjava",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/dnsjava/dnsjava",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.api/gax@2.73.0-rc1?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.api",
      "name": "gax",
      "version": "2.73.0-rc1",
      "description": "Google Api eXtensions for Java (Core)",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "7e8982a75716d683039f01402440fcb1"
        },
        {
          "alg": "SHA-1",
          "content": "c29f948d14f6a4ccf19399642c9a01457f32d9bc"
        },
        {
          "alg": "SHA-256",
          "content": "3cc67d6a34a6647430cc3b9430830f8e8008d3dc1a01181d5ad108371cf638ac"
        },
        {
          "alg": "SHA-512",
          "content": "4e3264e01916359f0326a6ccf7975ecf9b0df73988068753627334c7ef5e1b91d0923351a6aeab09a48881a3d2b7f35afa0b4a7037f916b399295dedb04f6108"
        },
        {
          "alg": "SHA-384",
          "content": "766bcfd65b9b00a51c07e34ebebb675270c6c23d95fcd9eb7fff96e71eabafcc6a95a26bbbf04fb6a5a6af65e7a4abb5"
        },
        {
          "alg": "SHA3-384",
          "content": "08a0d6b24190955c0f4f03ddeb9319868be41d036a73478a4604ce447ebeda372563e95f8c5e795b0949d214bbdab368"
        },
        {
          "alg": "SHA3-256",
          "content": "9697060e7f5300baebe549c02eefbaf46321f87d90c23e14b52cdf5c5b2aa9c0"
        },
        {
          "alg": "SHA3-512",
          "content": "fd2c221aecba2aec53ee720f43e28bd1901a0d1143d3797085f79cf80f2b9460a2d6edd01a8ae1fb25f7b837d5885ba6abffdb72a5d7ca088c59af245c5ef0cf"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.google.api/gax@2.73.0-rc1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/sdk-platform-java",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/googleapis/sdk-platform-java/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/sdk-platform-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.cloud.sql/postgres-socket-factory@1.28.1?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.cloud.sql",
      "name": "postgres-socket-factory",
      "version": "1.28.1",
      "description": "Socket factory for the Postgres JDBC driver that allows a user with the appropriate permissions to connect to a Cloud SQL database without having to deal with IP allowlisting or SSL certificates manually.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0cf636c4713e0d00bedaef393a337982"
        },
        {
          "alg": "SHA-1",
          "content": "47c0193b32a9ef443bc5cbf725d6edf3f9565876"
        },
        {
          "alg": "SHA-256",
          "content": "5d02d469b28ad792b6345b2560a225beed32426c4f2e82803e0b174512dc67f9"
        },
        {
          "alg": "SHA-512",
          "content": "4906cc3f334197af9df37447b607a4b0e11496e0ef3f2ceb2d0810bcaaaecd1f3bc30ce337411eff4ac276bda724ee3c4080c5a21bf287804f25b57fc323ce11"
        },
        {
          "alg": "SHA-384",
          "content": "c1a035639e8e8bea0d11e23bdb45a00b39cd9881b574cc3bada26f6f620ffbda2aad7b2cb9f79e1ce4cefc90d384a4f2"
        },
        {
          "alg": "SHA3-384",
          "content": "9b3dd16aa2d7756eac4271f5c0772cb62867820ab61f67981b6f89d41aaeec87ab3d5b4312dc2877ab46e7a57cc1ea8e"
        },
        {
          "alg": "SHA3-256",
          "content": "a82493ff6765bbba9f60e392e57c5c1026a987d5c5f4477d5f615412de521bdf"
        },
        {
          "alg": "SHA3-512",
          "content": "1f09e16325e5ae5abfb5bca4f1e9c33198f3eb2c18368a380b680945bbf13bfc8daeb7dad485721a55353600b3e6b24c35be365c0c3b6416c29a401d7fe810ae"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.cloud.sql/postgres-socket-factory@1.28.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/GoogleCloudPlatform/cloud-sql-mysql-socket-factory/postgres-socket-factory",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/googleapis/java-shared-config/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/GoogleCloudPlatform/cloud-sql-mysql-socket-factory.git/postgres-socket-factory",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.cloud.sql/cloud-sql-connector-jdbc-sqlserver@1.28.1?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.cloud.sql",
      "name": "cloud-sql-connector-jdbc-sqlserver",
      "version": "1.28.1",
      "description": "Socket factory for the Microsoft JDBC Driver for SQL Server that allows a user with the appropriate permissions to connect to a Cloud SQL database without having to deal with IP allowlisting or SSL certificates manually.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2a150238a7a84cf496f1739b5096ee29"
        },
        {
          "alg": "SHA-1",
          "content": "ab6db0e71e3deb82a502212578630ebf2a676d08"
        },
        {
          "alg": "SHA-256",
          "content": "cae528b2e7010a91e90cb7a88843a1c248c4ba126821c2d2bd80dd07bcd5ff48"
        },
        {
          "alg": "SHA-512",
          "content": "056507fcca29740b67c535bf76bb959fbb70599d0f0828b4df6ebaead2938b369baf4aa31246919c359b70394954eda168789e4d2f9a4264ff2f5abb71279274"
        },
        {
          "alg": "SHA-384",
          "content": "5edd0bba6151f3aa0524faf728a9a42ae9374619ea4b5f9692d8469c3e78d7348642afac8cab3e9b88764a16a85f248f"
        },
        {
          "alg": "SHA3-384",
          "content": "8ecf6c2e7abd9f83a4817d44a6a591d56aec6c64c9f441cb30d1a996263e01b9e283249c1e4a32a99c1e8fa551c3d1b2"
        },
        {
          "alg": "SHA3-256",
          "content": "f3187a93610e5f2a56bfe8470e652f00eab37d08bae116ba3cc0281f9a070594"
        },
        {
          "alg": "SHA3-512",
          "content": "2e55712497e5db0941fae62f60a40fe6feb15a4e0f942fc3607c761e3f7a3a8897ec922f82fa00380e40b5311808e2013ed5b9a61a4c9fcdb7e5b6e6c2d63aa2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.cloud.sql/cloud-sql-connector-jdbc-sqlserver@1.28.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/GoogleCloudPlatform/cloud-sql-mysql-socket-factory/cloud-sql-connector-jdbc-sqlserver",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/googleapis/java-shared-config/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/GoogleCloudPlatform/cloud-sql-mysql-socket-factory.git/cloud-sql-connector-jdbc-sqlserver",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
      "group": "com.google.guava",
      "name": "guava",
      "version": "33.5.0-jre",
      "description": "Guava is a suite of core and expanded libraries that include utility classes, Google\u0027s collections, I/O classes, and much more.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d9fbf39a41a5bab891348f07668e18c5"
        },
        {
          "alg": "SHA-1",
          "content": "8699de25f2f979108d6c1b804a7ba38cda1116bc"
        },
        {
          "alg": "SHA-256",
          "content": "1e301f0c52ac248b0b14fdc3d12283c77252d4d6f48521d572e7d8c4c2cc4ac7"
        },
        {
          "alg": "SHA-512",
          "content": "994a4dbcbd8e528ad3b4a7acf49b631a40dcebb03d9a8f5e1d3b74351f805f77774e9a19f7233e42036cb415b7838710f207ac1e18335e4a219b7f99ea22a44f"
        },
        {
          "alg": "SHA-384",
          "content": "9dabff6e543ead881b20d38a533e9151aaa83999239cf0ace3e712cf678e7976c3a50d79e3f3c57afc05a3b9ff14ad90"
        },
        {
          "alg": "SHA3-384",
          "content": "9f65d4d942113facb2eb25229c1530b79dd3b8994574034b8d4a1c2b39ed8ee5bb4d415ec690d3d87cee0d8cb2283564"
        },
        {
          "alg": "SHA3-256",
          "content": "fedafab2279bdf6eff66314fc61b056e92312695678e66dc1e25fe1d18af5a36"
        },
        {
          "alg": "SHA3-512",
          "content": "e64f3c49f9030358554bb0b8abdff729394988f1e3247b05a86302014eeff4a2855acf46d9bf1c683cbecc33a24173a20a103d3c82c94f8cabd6676a01b40fb6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/guava",
          "type": "website"
        },
        {
          "url": "https://github.com/google/guava/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/google/guava/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/google/guava/guava",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar",
      "group": "com.google.guava",
      "name": "failureaccess",
      "version": "1.0.3",
      "description": "Contains com.google.common.util.concurrent.internal.InternalFutureFailureAccess and InternalFutures. Most users will never need to use this artifact. Its classes are conceptually a part of Guava, but they\u0027re in this separate artifact so that Android libraries can use them without pulling in all of Guava (just as they can use ListenableFuture by depending on the listenablefuture artifact).",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "29a782e90f6b37218b18bb880d2a8f4a"
        },
        {
          "alg": "SHA-1",
          "content": "aeaffd00d57023a2c947393ed251f0354f0985fc"
        },
        {
          "alg": "SHA-256",
          "content": "cbfc3906b19b8f55dd7cfd6dfe0aa4532e834250d7f080bd8d211a3e246b59cb"
        },
        {
          "alg": "SHA-512",
          "content": "72be228e7805da5623e42bf024ded7d9147023c66b22f4dbd04ac6898201af46ee82e1f92ea51eb0595f1b49151c4b8ecb862653d4906c17609c42544ee97abf"
        },
        {
          "alg": "SHA-384",
          "content": "9dd1a2a08efda311604992d3e7cee64873bc8c64de3b423b1b3a3dcc1f7f0810bb03901fbfe39a5f835accb0646f4ad8"
        },
        {
          "alg": "SHA3-384",
          "content": "ffd67766c165ee77e96824e06de2c19864a6e61f785b2085eb825f308f173d71f2555559d90d910f33f3367378ace0e3"
        },
        {
          "alg": "SHA3-256",
          "content": "08a77b528a72ca412b36e4004692705ebfd75cfb4897c88632d367d08a34b09f"
        },
        {
          "alg": "SHA3-512",
          "content": "7cba6c266babbe8272f029eea6e2cbddadee96eb1a16916a6eb2441a55837867ce717385d4388735fd83f2f6555931077c0ebda011a1ee9a37ac38c8c0c43a65"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/guava/failureaccess",
          "type": "website"
        },
        {
          "url": "https://github.com/google/guava/actions",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/google/guava/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/google/guava/failureaccess",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "group": "com.google.guava",
      "name": "listenablefuture",
      "version": "9999.0-empty-to-avoid-conflict-with-guava",
      "description": "An empty artifact that Guava depends on to signal that it is providing ListenableFuture -- but is also available in a second \u0022version\u0022 that contains com.google.common.util.concurrent.ListenableFuture class, without any other Guava classes. The idea is: - If users want only ListenableFuture, they depend on listenablefuture-1.0. - If users want all of Guava, they depend on guava, which, as of Guava 27.0, depends on listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-... version number is enough for some build systems (notably, Gradle) to select that empty artifact over the \u0022real\u0022 listenablefuture-1.0 -- avoiding a conflict with the copy of ListenableFuture in guava itself. If users are using an older version of Guava or a build system other than Gradle, they may see class conflicts. If so, they can solve them by manually excluding the listenablefuture artifact or manually forcing their build systems to use 9999.0-....",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d094c22570d65e132c19cea5d352e381"
        },
        {
          "alg": "SHA-1",
          "content": "b421526c5f297295adef1c886e5246c39d4ac629"
        },
        {
          "alg": "SHA-256",
          "content": "b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99"
        },
        {
          "alg": "SHA-512",
          "content": "c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f"
        },
        {
          "alg": "SHA-384",
          "content": "caff9b74079f95832ca7f6029346b34b606051cc8c5a4389fac263511d277ada0c55f28b0d43011055b268c6eb7184d5"
        },
        {
          "alg": "SHA3-384",
          "content": "e939f08df0545847ea0d3e4b04a114b08499ad069ba8ec9461d1779f87a56e0c37273630a0f4c14e78c348d3ac7eb97f"
        },
        {
          "alg": "SHA3-256",
          "content": "1f0a8b1177773b3a8ace839df5eed63cbf56b24a38714898a6e4ed065c42559f"
        },
        {
          "alg": "SHA3-512",
          "content": "6b495ecc2a18b17365cb08d124a0da47f04bcdde81927b5245edf3edd8e498c3c3fb92ce6a4127f660bac851bb1d3e4510e5c20d03be47ce99dc296d360db285"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/guava/listenablefuture",
          "type": "website"
        },
        {
          "url": "https://travis-ci.org/google/guava",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/google/guava/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/google/guava/listenablefuture",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar",
      "group": "com.google.j2objc",
      "name": "j2objc-annotations",
      "version": "3.1",
      "description": "A set of annotations that provide additional information to the J2ObjC translator to modify the result of translation.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "abe8bd3abff622b9a8b15c3a737aa741"
        },
        {
          "alg": "SHA-1",
          "content": "a892ca9507839bbdb900d64310ac98256cab992f"
        },
        {
          "alg": "SHA-256",
          "content": "84d3a150518485f8140ea99b8a985656749629f6433c92b80c75b36aba3b099b"
        },
        {
          "alg": "SHA-512",
          "content": "34ee5aad57b0b507e89c897306f73043f80fa0eb02b453e54d9052feb0808a0d2ed835d888946211921d2bf733780b19ff636479ce19b9f48814ba6008733ce1"
        },
        {
          "alg": "SHA-384",
          "content": "7b760a346a586d6a3fa4477807e2f02f091e61898fc9a6ff449e43c55b6465fbbc17720663183c84c41d4d8814085e51"
        },
        {
          "alg": "SHA3-384",
          "content": "a2166c1c08f947c0e60aa7c9167602942e7bac37ba45863d34c0132a1f352e7807a382588d350b93bdbbbbe315a3573f"
        },
        {
          "alg": "SHA3-256",
          "content": "3d4d3b8bfd2ad13351a53610aa4bf1c5a69d2bde4272c281003120ed9bcddb8c"
        },
        {
          "alg": "SHA3-512",
          "content": "0a574b379a3f8022f0b88252c87d0e6b6cfa434fdb981efd1b24387025a962d7ac4e90161e8bd048df142bf52f4fc41e4a0c1d45e4eeb872c5954aad552988e9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/j2objc/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "http://github.com/google/j2objc",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.commons",
      "name": "commons-compress",
      "version": "1.28.0",
      "description": "Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f33efe616d561f8281ef7bf9f2576ad0"
        },
        {
          "alg": "SHA-1",
          "content": "e482f2c7a88dac3c497e96aa420b6a769f59c8d7"
        },
        {
          "alg": "SHA-256",
          "content": "e1522945218456f3649a39bc4afd70ce4bd466221519dba7d378f2141a4642ca"
        },
        {
          "alg": "SHA-512",
          "content": "f1f140f4f40ab3cf3265919db9dbb95a631a29aa784e305f291de4e68876bb711d9217d62d7937cddddd393982decdf71a608b4b3ab7f4e6375cf28af2893d7f"
        },
        {
          "alg": "SHA-384",
          "content": "afe6a8fc8e7486c4ecce95276bb1467763d7ff7d941c7bcff8661bbbd4bff442fd0899ff7a11bc540cda86818ee4a8f0"
        },
        {
          "alg": "SHA3-384",
          "content": "6afb636ad0805e522913cfd91c8293c485b7f4eff5e45dd3a17a716c3f4b8ab8969e9c00927559a5fb762cba1fdb3d3f"
        },
        {
          "alg": "SHA3-256",
          "content": "4420e0b462b5dcc45077e95e012a82a5ae17659e5abe8a685fa086dab6995298"
        },
        {
          "alg": "SHA3-512",
          "content": "23e37d13c8ee6c7369e407c29d1f9ee1bb44eca9f09a6f9742f6b4cf3d38dd7a0509fe0142536cd8087b68a76e71d819105af2c23f2aeed08acc58eb93cf7e61"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar",
      "externalReferences": [
        {
          "url": "https://commons.apache.org/proper/commons-compress/",
          "type": "website"
        },
        {
          "url": "https://github.com/apache/commons-compress/actions",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://issues.apache.org/jira/browse/COMPRESS",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/commons-user/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitbox.apache.org/repos/asf?p=commons-compress.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.commons/commons-text@1.15.0?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.commons",
      "name": "commons-text",
      "version": "1.15.0",
      "description": "Apache Commons Text is a set of utility functions and reusable components for processing and manipulating text in a Java environment.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "756b7c5438d89a0c311d811c1a06d19a"
        },
        {
          "alg": "SHA-1",
          "content": "9899093aa40f0199d6c39b131b8f087cdb37e399"
        },
        {
          "alg": "SHA-256",
          "content": "58d2da30f058512a1e7f914e39241deca4dff5c27a085b4ed2faa9e7208067f6"
        },
        {
          "alg": "SHA-512",
          "content": "be41b2c3a347bfd6eea3a957fb9a8d631c32b973fbbbe3e097d544d893ab4e587c3dfc38e89b4039b815b17d268cc7940e1ffb464050c7924acb56cc422613fb"
        },
        {
          "alg": "SHA-384",
          "content": "d3df5a4656967277d738e9d981d7b065dcda91f25553f8fc5c3d26edf07079cc5526508b0951da45ef614663ee9d471d"
        },
        {
          "alg": "SHA3-384",
          "content": "bedce93fea6c4aaaf7feb52f75d4265c41b3b0d39976248b4d9d5b879d18403335364b3f845585ce5fceb80a34c592df"
        },
        {
          "alg": "SHA3-256",
          "content": "48fd7a8921eca0e1dc185a0ad5f8e89ab3399f0327bc57cd9e09988fce75d1ef"
        },
        {
          "alg": "SHA3-512",
          "content": "f996b808d5f7bff8ac7aa79a2f73b93a4edb687cace7b54089246b6b4005ebbaab00f752a79205479023c802a56e42605806113d6af36e28469fa6a63ae710d2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-text@1.15.0?type=jar",
      "externalReferences": [
        {
          "url": "https://commons.apache.org/proper/commons-text",
          "type": "website"
        },
        {
          "url": "https://github.com/apache/commons-text/actions",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://issues.apache.org/jira/browse/TEXT",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/commons-user/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitbox.apache.org/repos/asf?p=commons-text.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-retry@2.3.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-retry",
      "version": "2.3.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "90e38e550fe95bb2e1d5a1248238ba69"
        },
        {
          "alg": "SHA-1",
          "content": "1953682ce8b7e69ff5a02d3772ef9c932f2bab3e"
        },
        {
          "alg": "SHA-256",
          "content": "0020f75c269706a796e4b9d7e85c31acc0ab4e2776fd8e56f571c3fe204333fa"
        },
        {
          "alg": "SHA-512",
          "content": "9735437a83d34420138686ece810247644f68b067473eb4bc0dab51307f91db4dc8c898138efb2a9e05ebd6696f12a9c9d0b3a6e17ca6bbe669ca192b3e21481"
        },
        {
          "alg": "SHA-384",
          "content": "89a3fb6e22b9c9fd212fb011f6c647009d04237f91907cbb906fe908ea4f3cd1417505c8604dfd18eefdbcc74ae0f999"
        },
        {
          "alg": "SHA3-384",
          "content": "fc97c26b65d3e976653f30552bc560bd44f91ccf6e139fd597275be9a42db07d7abe140521d62c60ff8e2c8995781822"
        },
        {
          "alg": "SHA3-256",
          "content": "0a5fa09e18483c0b2a2879c81bf68ead786835c8d019709a84d89bb8badb14da"
        },
        {
          "alg": "SHA3-512",
          "content": "bef695bfc00420665f981a076ef41df132a920a80d510819001ea234a12f3f8ca6502ca046cc3494767cecc91e89be390857808184b60ecb97a7df0eb3ba619d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-retry@2.3.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-core@2.3.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-core",
      "version": "2.3.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8a1db78c7c9b214531f24e89b0ac9837"
        },
        {
          "alg": "SHA-1",
          "content": "04df5e76f2e2b15db6971d5102ffa9b494e38cfe"
        },
        {
          "alg": "SHA-256",
          "content": "bdaf2c553265b9c1ac6967acf598e3f433cc592e85e7872bd24d1e6264a97b93"
        },
        {
          "alg": "SHA-512",
          "content": "d9fc287e9de2b6fbec54e119b30ea8f903d43fea8edbc10fa8e9732e09bcd8efa0fe08123c5cf559cd08da416d3226577816d4caaccc013995cc293224d1ff81"
        },
        {
          "alg": "SHA-384",
          "content": "126c7f669c52d1293582b54abaa8d5fc6b2564a8311a1eb746eee8d86e806fdf73164017d35d58eceeb38fba13dc3b50"
        },
        {
          "alg": "SHA3-384",
          "content": "ec96d685bc52a2a767f0099e26c5825faf9b5c0b39525c33ac3509f2470b2cfb598cba659d2d94dd25da08182d4ef394"
        },
        {
          "alg": "SHA3-256",
          "content": "b5a44bb9ef375d23ef62676502c75529c941704473fe92c8ef4cfc4b82668ffa"
        },
        {
          "alg": "SHA3-512",
          "content": "af14d510c5a67608536b0e64ca33540e9b48671d63feb028abb16f292c264e1aaf7c3a7abe1b5af76afa163024fe5de88c73389edd7572a277a47da66d39aa11"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-core@2.3.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.9.0?type=jar",
      "group": "org.jetbrains.kotlin",
      "name": "kotlin-stdlib-jdk8",
      "version": "1.9.0",
      "description": "Kotlin Standard Library JDK 8 extension",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "839527b2163b53e249924f77ad207216"
        },
        {
          "alg": "SHA-1",
          "content": "e000bd084353d84c9e888f6fb341dc1f5b79d948"
        },
        {
          "alg": "SHA-256",
          "content": "a59fa24fdf1ffb594baecdbf0fd10010f977cea10236d487fe3464977a7377fa"
        },
        {
          "alg": "SHA-512",
          "content": "af80d0d9785f0bdbc0b00cecf61861fcb4a3ed91510b4d936fd129c0212571247eb7662066a3e5bfb3108442806b1e9053f2cbafc2fe9630e6eb796635b5eac8"
        },
        {
          "alg": "SHA-384",
          "content": "0517e780d6737d6fa8e225c4a15b4bb69f97e3deb535205dcd07d89711d3e41cce6090a6a3812fae0ff5048927b040d3"
        },
        {
          "alg": "SHA3-384",
          "content": "cc6102c9c3216504df174db6ebe59446c0b8e50473eb999ae68a0b934dbaa076f711369aa153014b82d54198bace911a"
        },
        {
          "alg": "SHA3-256",
          "content": "db304a6cf5b6db761fd81ac73629198c7a4b5f9530fdce896f08c77428e83892"
        },
        {
          "alg": "SHA3-512",
          "content": "46fa4b406690789c8140051f5e490de1e06cc169d52b074d6b77a335af75620db9dd447a96507bbf750805c316d5f1069c4644fdd7ac2d3025c577a57dae913c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.9.0?type=jar",
      "externalReferences": [
        {
          "url": "https://kotlinlang.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/JetBrains/kotlin",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@1.9.0?type=jar",
      "group": "org.jetbrains.kotlin",
      "name": "kotlin-stdlib",
      "version": "1.9.0",
      "description": "Kotlin Standard Library for JVM",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b00176dfa441dc78b9f121cafa3ab29f"
        },
        {
          "alg": "SHA-1",
          "content": "8ee15ef0c67dc83d874f412d84378d7f0eb50b63"
        },
        {
          "alg": "SHA-256",
          "content": "35aeffbe2db5aa446072cee50fcee48b7fa9e2fc51ca37c0cc7d7d0bc39d952e"
        },
        {
          "alg": "SHA-512",
          "content": "7bdebd4a20a510ab798ff25e8a93c90f15cb18f3cfbd10b5bc59b4db65268a8efa215839bf6770a449cfd706be30eea3ba6c3fa3a9f45a81ee39ee94c0412aac"
        },
        {
          "alg": "SHA-384",
          "content": "25f8230e8f72882a4fd3c197ab25a35e6a57e2abc5b4f10163eef3d508f4b5de791aed077dd0f13e24c4f951d0c3dcd2"
        },
        {
          "alg": "SHA3-384",
          "content": "f6c98d2571b6a16bc413760c28d25bf745532364090a3dbf5d59f33096284fcbb8078d4de5f4cedf75642f00734ac0e7"
        },
        {
          "alg": "SHA3-256",
          "content": "836d5bcb55d7158993f76ed4719c5a7dbdee8e0e7f787ce2396e6498fe1f15bc"
        },
        {
          "alg": "SHA3-512",
          "content": "819b2615a5c707136634a4e1735d4f500a7615af3e1954e37fabfcafd515aafd9cb77d7898d485bac47b3e4dafd750ce912ae22946cd9e62e5bd6877697dc27e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@1.9.0?type=jar",
      "externalReferences": [
        {
          "url": "https://kotlinlang.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/JetBrains/kotlin",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-common@1.9.0?type=jar",
      "group": "org.jetbrains.kotlin",
      "name": "kotlin-stdlib-common",
      "version": "1.9.0",
      "description": "Kotlin Common Standard Library",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6186241401652aed01bcc024bc3a92c5"
        },
        {
          "alg": "SHA-1",
          "content": "cd65c21cfd1eec4d44ef09f9f52b6d9f8a720636"
        },
        {
          "alg": "SHA-256",
          "content": "283274204bd7c020789ec46f8f8e72af4244d7f550b3392a57e5ca006ad7aa2c"
        },
        {
          "alg": "SHA-512",
          "content": "84410504a412febbfa37cd749c1b1d99b70aa2e53855d398a0edb91c198dda4028d26880d9b7411c9b02c049b71004818e8b0c53ec96b4f71e99c661687bdc83"
        },
        {
          "alg": "SHA-384",
          "content": "2e1130ee090039a9e91b54cdc8488afd078d1043fc02052319b88db49fac959498d56a469e7dcc207255d0121ba5f04d"
        },
        {
          "alg": "SHA3-384",
          "content": "b52b9cc5eddee7f04671f45ab8b093bb86a3e04603d3fafd0ee62dd098adb891ed048cb3c71446764bee6876a629b18c"
        },
        {
          "alg": "SHA3-256",
          "content": "b24caa7d11d6d00ccbeb441fc61ed5b57b331b594d22cb378756dbb7cf2294a3"
        },
        {
          "alg": "SHA3-512",
          "content": "d999ea459f4bf60a35cc8d2013d1aea549c069ba4aa4185384681b0342beb429f8448a5f53e536a2d8ffdeb9040882af4503d298177b9fd76cc95fe3fcde4f7b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-common@1.9.0?type=jar",
      "externalReferences": [
        {
          "url": "https://kotlinlang.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/JetBrains/kotlin",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk7@1.9.0?type=jar",
      "group": "org.jetbrains.kotlin",
      "name": "kotlin-stdlib-jdk7",
      "version": "1.9.0",
      "description": "Kotlin Standard Library JDK 7 extension",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "da269e4d8ff4ad661fef2b48449865c7"
        },
        {
          "alg": "SHA-1",
          "content": "f320478990d05e0cfaadd74f9619fd6027adbf37"
        },
        {
          "alg": "SHA-256",
          "content": "b7979a7aac94055f0d9f1fd3b47ce5ffe1cb6032a842ba9fbe7186f085289178"
        },
        {
          "alg": "SHA-512",
          "content": "d5ee083f9c11d351b0fdc6ae38c9c5d117a9fe98ba13ece06b774f50bff8f67f1f651401aeb57ced4f51a82d37196732780abd99fac16c6c9173d586153cb27a"
        },
        {
          "alg": "SHA-384",
          "content": "eb50b745f9820d30c3e2e3b53aa92063ef85d60826e6b0d313256247c5d67bc09efdf8af5ccfffb461286dd1f177a576"
        },
        {
          "alg": "SHA3-384",
          "content": "cc7b5a8c24da5e358c27d4d61fb8bb7ed8d33b83c44e5e85fdb171861bd222cf8592ee8c1b54912646abbfa68d2586df"
        },
        {
          "alg": "SHA3-256",
          "content": "cd52ecc97ba79b0319794a3264af9e1148fa3c397f1b421171b857916e3c0546"
        },
        {
          "alg": "SHA3-512",
          "content": "9efa9ab89b88e20f341d524af3881a8114629fa3dc96d8fd9ecc9443f1cea245679ce4d2d9faa03ca3c3a891e1e8b800cf4ca196beaa1736bbb01ede5b758184"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk7@1.9.0?type=jar",
      "externalReferences": [
        {
          "url": "https://kotlinlang.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/JetBrains/kotlin",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-ratelimiter@2.3.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-ratelimiter",
      "version": "2.3.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0ad3005ef14c58c1774d89a146d3a37d"
        },
        {
          "alg": "SHA-1",
          "content": "6c303d40dd6320c009e780b427942871107d8c26"
        },
        {
          "alg": "SHA-256",
          "content": "938381e4e2fe570dd920391df769f8aaca06b1fa769657eb1b0672fe68f350e1"
        },
        {
          "alg": "SHA-512",
          "content": "0f4afe859a4668fd2a6f693abf592b0abdba289d18e763b6379e7e27ad40ac889cb2f45d288dbed7987bbabe815e94683734dc045ebeb20247982d2809131ef7"
        },
        {
          "alg": "SHA-384",
          "content": "d076f1964b2dac0c8b9c1142b9134ab6031d210575742b874de13377f1d0deda33c12f56a3cc73149b7a4d9fe2511c62"
        },
        {
          "alg": "SHA3-384",
          "content": "caff784f468990707e6b2637a7b432eeb0232daa0fcab9f5e19a4441738b37c889501e0248e6db739e1d14be223f01fe"
        },
        {
          "alg": "SHA3-256",
          "content": "85ec489a3990443c2a3c21a43463e9990323cbacd033a8e508c84f05cf075bc6"
        },
        {
          "alg": "SHA3-512",
          "content": "2d392d7ab1b9a3e2598d842bd12fccdd37280224109bf9752e96fc5944a37b4a2b567203e556d152c353da6e8178bdcc89fd8c8d0617feb8ade414b455f0442d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-ratelimiter@2.3.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-micrometer@2.3.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-micrometer",
      "version": "2.3.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a529138587f654b68d6ccb14df5dc9dd"
        },
        {
          "alg": "SHA-1",
          "content": "79fbfe7fc77683bc0ecba5bfeb73709d5e0759ad"
        },
        {
          "alg": "SHA-256",
          "content": "fecb499507e27fc7b4183e1218444150a6a399659c5b1e09ce48dfad8bae79cf"
        },
        {
          "alg": "SHA-512",
          "content": "8024c6a1101b67eb06415b8514ae461cb475817c28e3c57d70443e766bc5dcc5cadf511d1d6b7375039846c0a40d3c707eca7093dc0230a8f0f8804674ad172d"
        },
        {
          "alg": "SHA-384",
          "content": "c71f55d57b35ddac86e139c82deb2f36782b3fbe2d170c7ef82fde22f7034c3c7b3b6cba3e41512e2f704972233373a7"
        },
        {
          "alg": "SHA3-384",
          "content": "1d7abacc176d6e3ae8ff181806be9ad5b81c8e2f52f1db5f335bbc69382b90295a0e5733595a9c868fbcda27aaf3bc31"
        },
        {
          "alg": "SHA3-256",
          "content": "a2e92d5e2c743ecb598b3ffc67701321ea6eb7082c9cda02238c7281be523612"
        },
        {
          "alg": "SHA3-512",
          "content": "ec98743659e98054510a59cbc8ce1f16f213ca71747f3b904f1a9f85445e7f35ab3313651724dc29bdd4da635887eb3b7acaf707c862037095b0c58c81bbc01c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-micrometer@2.3.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.micrometer/micrometer-core@1.16.4?type=jar",
      "group": "io.micrometer",
      "name": "micrometer-core",
      "version": "1.16.4",
      "description": "Core module of Micrometer containing instrumentation API and implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0d40a6d82ecbea31fd51c5655ff26552"
        },
        {
          "alg": "SHA-1",
          "content": "dce674d15f271ae4cd0d5826ec0e4056aef778de"
        },
        {
          "alg": "SHA-256",
          "content": "c7e6008f0fc870b94128a121ca0e5277ce24ac9b41641e8a3abb4c2539994995"
        },
        {
          "alg": "SHA-512",
          "content": "8e18d8a2812de3d7a10d85c6c44fec37b026e004aa3e3e58d1b3eed926de59412ec50882070cb4e9daec5f899deb88dc098d6720657b862a82c9a03446f88a93"
        },
        {
          "alg": "SHA-384",
          "content": "8b2bd33c50ce93fed2dc66566b3dc71eb6fdf8e0fd4fd52639c843d61b30c3e8e343315daaf751f4181944ce56eb7e7c"
        },
        {
          "alg": "SHA3-384",
          "content": "4cb81aad151aece199ec379f045d431e5639d2c07672683f89119b5c6dc2ea547211d2a6587dcc464a3548d48a5d68ac"
        },
        {
          "alg": "SHA3-256",
          "content": "bcf743ca81a3fddf2a602b098b4dba2f49406218d71fe7576421d2bebc674650"
        },
        {
          "alg": "SHA3-512",
          "content": "c1632d513e7372da224e95430aefb62e714ddd365fb6cdbeffb1b41eeb268b40c05a1136a4c2e581fd06b36784c51b5626be982d30cf2e706909fd5a2b5f4840"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.micrometer/micrometer-core@1.16.4?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/micrometer-metrics/micrometer",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.micrometer/micrometer-commons@1.16.4?type=jar",
      "group": "io.micrometer",
      "name": "micrometer-commons",
      "version": "1.16.4",
      "description": "Module containing common code",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "afbe1e6f6a034873cf8e9d006d3f0853"
        },
        {
          "alg": "SHA-1",
          "content": "b6a0e350a714f4cd973d760e68104c9602b4564c"
        },
        {
          "alg": "SHA-256",
          "content": "d13307840a8078abedc5979168c0be7877d2dba4c7db6c01665be457571213c4"
        },
        {
          "alg": "SHA-512",
          "content": "4d5c4a7caee884fb9b634b205978fc38ec6864d4aa507d5a49620f0358c89da05ada1f8761f2275af2afdbe0a8dff88e7d7c2460a70303d54e92d500b42cd87d"
        },
        {
          "alg": "SHA-384",
          "content": "da1b75209d305df1d63449fe38382b1e943ef7a30d2b213821976e850dcec96dee8c43f8390143f97e655014ade2c72f"
        },
        {
          "alg": "SHA3-384",
          "content": "a96f4c08e6ef76439a2cc27a7de77cc3bd08033a8d17b1c08524ee6fd620a608a83e59b95ec3cd6c8cb3d78dae3a2767"
        },
        {
          "alg": "SHA3-256",
          "content": "a436063efe0f91c82fd35e9b657072315e8004d837065ce091a35802c68c7aac"
        },
        {
          "alg": "SHA3-512",
          "content": "3e1bd7067e04d63b4e0a3bf69e84e59a52986f22378b8561c0a7ed027a853ee0b8d059ef9a54aa51c0b9738451383041f80419f6daa79f639bafdfeaf7115f82"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.micrometer/micrometer-commons@1.16.4?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/micrometer-metrics/micrometer",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.hdrhistogram/HdrHistogram@2.2.2?type=jar",
      "group": "org.hdrhistogram",
      "name": "HdrHistogram",
      "version": "2.2.2",
      "description": "HdrHistogram supports the recording and analyzing sampled data value counts across a configurable integer value range with configurable value precision within the range. Value precision is expressed as the number of significant digits in the value recording, and provides control over value quantization behavior across the value range and the subsequent value resolution at any given level.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "41f807bf0c681d6f692c408a6e217eaf"
        },
        {
          "alg": "SHA-1",
          "content": "7959933ebcc0f05b2eaa5af0a0c8689fa257b15c"
        },
        {
          "alg": "SHA-256",
          "content": "22d1d4316c4ec13a68b559e98c8256d69071593731da96136640f864fa14fad8"
        },
        {
          "alg": "SHA-512",
          "content": "fb28f1bc3a3d4430474ea87a0833d56dc3d1303c98918122d93c630ebdb0d1323bbf8feb9ffdc7dddd1908105858e6959bdfdd3889ca5803cecde93a974ab6b7"
        },
        {
          "alg": "SHA-384",
          "content": "fa19cf4674dee37cb5114689cccafeadbb7989e17768b814cb431806a0f69c7b37093b6e100430bd571a45d87a319758"
        },
        {
          "alg": "SHA3-384",
          "content": "fc0a9e2e5284bc2f911c5e2fdf9eec6cfa1973b6cfb1362822580d6c8768c73ebd1c8056b6e4e5302940f6b5ec4c74b7"
        },
        {
          "alg": "SHA3-256",
          "content": "79af553410abf4d3bbfa64374dfdf8777ce49d28b4c67a615e6d4a78e97d0498"
        },
        {
          "alg": "SHA3-512",
          "content": "5b2b1795ed1ea55b5a3566bb1f4170a4367b7893256809fdb428df9405857c8454196badf3681abaf536260ed6f293c096a3f3c9d72f0f04830e8fe71d49410a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "CC0-1.0"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.hdrhistogram/HdrHistogram@2.2.2?type=jar",
      "externalReferences": [
        {
          "url": "http://hdrhistogram.github.io/HdrHistogram/",
          "type": "website"
        },
        {
          "url": "https://github.com/HdrHistogram/HdrHistogram/issues",
          "type": "issue-tracker"
        },
        {
          "url": "scm:git:git://github.com/HdrHistogram/HdrHistogram.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.latencyutils/LatencyUtils@2.0.3?type=jar",
      "group": "org.latencyutils",
      "name": "LatencyUtils",
      "version": "2.0.3",
      "description": "LatencyUtils is a package that provides latency recording and reporting utilities.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2ad12e1ef7614cecfb0483fa9ac6da73"
        },
        {
          "alg": "SHA-1",
          "content": "769c0b82cb2421c8256300e907298a9410a2a3d3"
        },
        {
          "alg": "SHA-256",
          "content": "a32a9ffa06b2f4e01c5360f8f9df7bc5d9454a5d373cd8f361347fa5a57165ec"
        },
        {
          "alg": "SHA-512",
          "content": "bb81a42498c65389366205f4e07cee336920e2f05cc0daae213f2784b1d0ce9a908b038daec20478f23eb00b2bf704f96c5b00f63c99615193ab2a3cc4a9f890"
        },
        {
          "alg": "SHA-384",
          "content": "16ca4640dc9d848e6c6d15441897e1b5a9f27f34207b0bb456dd54d8f267b73b348092e548e78634144de44ba3515205"
        },
        {
          "alg": "SHA3-384",
          "content": "406c2b5c6f64b0c090568e479b5e6136a04a4e77f8eea65d32b4e2b01deebcdf6a0a851240cdb740c25b5a5e61e6c179"
        },
        {
          "alg": "SHA3-256",
          "content": "50ae828358301033542fd7c412e86ee318d5451f89a182e2a679aaf18099d26d"
        },
        {
          "alg": "SHA3-512",
          "content": "456c337b9fb385579aae707409ed6a04d08e5fc87b1a46733dca617c22c625bf253dc4747e0cdbf5e7d8b48102d2938cb482b6b688a79aab645a7459c592258f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "CC0-1.0"
          }
        }
      ],
      "purl": "pkg:maven/org.latencyutils/LatencyUtils@2.0.3?type=jar",
      "externalReferences": [
        {
          "url": "http://latencyutils.github.io/LatencyUtils/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/LatencyUtils/LatencyUtils/issues",
          "type": "issue-tracker"
        },
        {
          "url": "scm:git:git://github.com/LatencyUtils/LatencyUtils.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.micrometer/micrometer-observation@1.16.4?type=jar",
      "group": "io.micrometer",
      "name": "micrometer-observation",
      "version": "1.16.4",
      "description": "Module containing Observation related code",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "21a66d76bd0afd7d3592fa7ca73eddd3"
        },
        {
          "alg": "SHA-1",
          "content": "64b57332a68b75ba36d9bf9b4cfd62610d0fb158"
        },
        {
          "alg": "SHA-256",
          "content": "dd410c6a4225731a3466e56b81ff097d14cd092dbc9b97384fd96feec1cc36af"
        },
        {
          "alg": "SHA-512",
          "content": "41f34800102e913fe455e99c802b37d38da24ad01d69b0d8d14e7d90ed0e748d4115eb1df715efcf71b56c2326c3088cbe520e942daeb66b47febf974e6c528a"
        },
        {
          "alg": "SHA-384",
          "content": "77f88d526d888004c34c1a81a469cfda395a620b766c15227864351d31dc10ba2127843787f7e1a02a3cba917fcbf564"
        },
        {
          "alg": "SHA3-384",
          "content": "5c5040843c1eca6c8f5f45bd6b0099f82433a4436549292b1edcff351936ef72f4fb3a6ce456bdb54ad9382a9e16f46a"
        },
        {
          "alg": "SHA3-256",
          "content": "8dca54d216523756db2ff762b98d5902ba644208f472046f297aa1b82e9d63e9"
        },
        {
          "alg": "SHA3-512",
          "content": "1c33011fd5d718ede776faddb04be284dd5d87fc68fcbd04ee13e6a6f40cb72c87b990112b4f4c7aa72f5009f5982ab528c8a53dad1624de0f7784db1df6324f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.micrometer/micrometer-observation@1.16.4?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/micrometer-metrics/micrometer",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-bulkhead@2.3.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-bulkhead",
      "version": "2.3.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "39446409a41d010efb73874939f16a8d"
        },
        {
          "alg": "SHA-1",
          "content": "3e3cc6330e2c6088316f06e58f6d0b2c7fdc5b5b"
        },
        {
          "alg": "SHA-256",
          "content": "1ca4b0f7e15bd8da6a936571d09368d74fa0a3c2f117180c55fb806f3c4ae16a"
        },
        {
          "alg": "SHA-512",
          "content": "c1aa54a6056f10bbc7a4ad702dce0d756a1829df1c7b6693a5fa6b3568c25d72f67cb6cd0507a3670f6d43a047a8577c968706f4a19bb52105e69f383f4c0474"
        },
        {
          "alg": "SHA-384",
          "content": "818d8a4b366ae8b3e88038c7715f86ecb80b74145fcc8428cd845b155c470ee5aef4e2d2bec855877b837e6dfe26daa3"
        },
        {
          "alg": "SHA3-384",
          "content": "63a5c25caac990f733703c19554720bb8c1b1055962bc45d78c1f8ee668121cabc2577bc92dd723a689f70b912b4934e"
        },
        {
          "alg": "SHA3-256",
          "content": "832f33e66fa1e5b8a250bde7455fa8058716e20255b8293a0f4d72f4a4a1b27c"
        },
        {
          "alg": "SHA3-512",
          "content": "cb58c2d05122cf9725e010471f675e4ec530481fb510349634411d2887ea2c691e111b89de5811c45d7dcf7f31095dc71e8b62a974df89d880520d4d80fdad78"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-bulkhead@2.3.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-circuitbreaker@2.3.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-circuitbreaker",
      "version": "2.3.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1f7adf6345e130f5d30647369e69de36"
        },
        {
          "alg": "SHA-1",
          "content": "995e75097efdd303cf4b2403841fe27a32d9e939"
        },
        {
          "alg": "SHA-256",
          "content": "5e9d6b821cf620b26b9144c5ea8d92a80c717ebda1500061231eed5017f56927"
        },
        {
          "alg": "SHA-512",
          "content": "8109ebd0e4b1489125f56fbdb32ad350f4c3b64815de5c33488efa090afbc27a7bca49b8a0760139d2188cf2e69e54d1e17a027c4079070ba0b10f813caaa9ec"
        },
        {
          "alg": "SHA-384",
          "content": "5751a882d62e398b0f4ebe2fee16d22050f88170cfeb42946cfdc4d54d51e9cad24be4a3ab8e4e4c99d648eead7857d9"
        },
        {
          "alg": "SHA3-384",
          "content": "9fdf7214b3711d7be926d9799c9b94b5966a896583d74000c85caa7da871bc82c26a3fa644e4d05ccce137236274cd09"
        },
        {
          "alg": "SHA3-256",
          "content": "e2ebe716a05291f327ee036af95365750d467031c0eaf95af19ac20c2e62a47b"
        },
        {
          "alg": "SHA3-512",
          "content": "36495e71ef34405d02cb888c7ee1f7741d6d686d9cceeadd2bb433385ff296d6f4bfef574a8b0f8780ffd0e8fc6b42df5288f2a4edf4b8e12a85a966a15a63c7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-circuitbreaker@2.3.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-timelimiter@2.3.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-timelimiter",
      "version": "2.3.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "44e07d069bec3d7ea97a802b1887eb8a"
        },
        {
          "alg": "SHA-1",
          "content": "2de3016bd43ed1149ff1c035f1de11c9bbbec7fc"
        },
        {
          "alg": "SHA-256",
          "content": "93f991fc710bfa4310a8a7713fabc48ceef64df119dc7d7cbadb38483a39a6c9"
        },
        {
          "alg": "SHA-512",
          "content": "7cb20173d0ed4ecc23deecac80451927def6e1bd346213f45cb3272f9825196d8f14199b4e4c3c6a360909611951df6be1759e7e588290efab4982a1aa9e1fc0"
        },
        {
          "alg": "SHA-384",
          "content": "dfd48b1553a3145c798b4f4fe4ee6d70ad4091faadba7ee3fd3a8e165a50b855389770f6a3b1c6cdab2b30dbe9566b6b"
        },
        {
          "alg": "SHA3-384",
          "content": "7ec4a99cac47c04064b2be80e1246f783d8cfff3dbd0852ddd7db6e11c6cb3c6d4cdbeafe3220c8ac620731eb27006df"
        },
        {
          "alg": "SHA3-256",
          "content": "c3c17822111b283f478031e5588ec42d6fa7ef7bbe12866e945aeec25ee13120"
        },
        {
          "alg": "SHA3-512",
          "content": "f6b3353f9226f7c1e5ef41f6d7da1b7890f4f137a7d0fbc69e4aebfa5924ac7abb3bae87771c6c738aa97f3d07cfcf81a5e69eaa0ec70a2f23b30ef6d1b9bffa"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-timelimiter@2.3.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.slf4j/log4j-over-slf4j@2.0.17?type=jar",
      "publisher": "QOS.ch",
      "group": "org.slf4j",
      "name": "log4j-over-slf4j",
      "version": "2.0.17",
      "description": "Log4j implemented over SLF4J",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ec3cf11fe022ffd852ab84e9b8b69a96"
        },
        {
          "alg": "SHA-1",
          "content": "55e55c79a0b89ccc9e411049005c02b7514e0cf9"
        },
        {
          "alg": "SHA-256",
          "content": "cbf30eaf95357ab7babf9be123da9cc702f0fe83b23392b7a62589d60b5862d1"
        },
        {
          "alg": "SHA-512",
          "content": "b30293841a75c89a31cde5f756eba6b4aeb97774be9475691b2d4a7a412ff9a98f5ada1c60649a8404efb36c0091f70ced8f6389fd58fd876122f94be9169407"
        },
        {
          "alg": "SHA-384",
          "content": "38745d5c8a475079f925bda9edfe7e4d4e5cf2f916d7db025f0f9fb55390c746171975cf40decdefd1c19f34db4c794a"
        },
        {
          "alg": "SHA3-384",
          "content": "9a1274543c477f273a9cee53b5b53851588513b4975b641c8fe0cdc3f0a410e99e3d1a8ac13d5aeaf0652cc12893a819"
        },
        {
          "alg": "SHA3-256",
          "content": "4c2a8896f96b0dca903d8f1ec33b146ce2ca592f3dac0d1278bfc63430c0faa1"
        },
        {
          "alg": "SHA3-512",
          "content": "6d9d9a4f3f915a4712401d4c9b9739b4681f7804912204a7ca5ba84686decd3e9290c1db0753d7d207a1644ce8fee39cdd7539ef0929ec14c09683423010488a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.slf4j/log4j-over-slf4j@2.0.17?type=jar",
      "externalReferences": [
        {
          "url": "http://www.slf4j.org",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/qos-ch/slf4j/slf4j-parent/log4j-over-slf4j",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.kohsuke/github-api@1.330?type=jar",
      "group": "org.kohsuke",
      "name": "github-api",
      "version": "1.330",
      "description": "GitHub API for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f8ebe6ff87d378d300b5625c98bd5ca1"
        },
        {
          "alg": "SHA-1",
          "content": "945f6083d42b9a848e4d4470da74a370955b4c36"
        },
        {
          "alg": "SHA-256",
          "content": "740cbe21fddcd88b3baa9e006e50e5759db160822b12e93154f79013cf6d1e31"
        },
        {
          "alg": "SHA-512",
          "content": "4d9141f2935d71a618ff07e6d9b36cfd051b12d1900ab240bdbfd141e305a8112b5dd9e86c2d6f89f5df8dd95d670748037dd12f2fd050825c48d6aa75a5e4f6"
        },
        {
          "alg": "SHA-384",
          "content": "0144429d8f982986be3a0fa5dc5f626ba12b93341ba6bba60f02a6c5a8bedfa17ea760a60bd169d40a5f4ace58e5d9e5"
        },
        {
          "alg": "SHA3-384",
          "content": "01c272c916c55e9ae0295eb82ee412c1c65a0097c1649d23c77cbffe0d14e31c765c86138fdbe5b31a628bef0607c23c"
        },
        {
          "alg": "SHA3-256",
          "content": "681b6de0e1528919f4868101adc1a49659a472e08628b1ea8cee747862d162e9"
        },
        {
          "alg": "SHA3-512",
          "content": "b12f3e128cf0a6879d5d92c1218c2cd452c4e6ab57b4c93aef1439bf85d0d15d0aa9ada0213d609c658e8a531d25fa02d260762c7d31a170798db38ec888bd71"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:maven/org.kohsuke/github-api@1.330?type=jar",
      "externalReferences": [
        {
          "url": "https://github-api.kohsuke.org/",
          "type": "website"
        },
        {
          "url": "https://ossrh-staging-api.central.sonatype.com/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://groups.google.com/forum/#!forum/github-api",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/hub4j/github-api/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.asahaf.javacron/javacron@1.4.0?type=jar",
      "group": "com.asahaf.javacron",
      "name": "javacron",
      "version": "1.4.0",
      "description": "A java library for parsing crontab expressions and calculating the next run time",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5129700c6b2af8e972d52829faae173c"
        },
        {
          "alg": "SHA-1",
          "content": "2291bf1f0996c6ba0dbe6783aa8a473f09cec3d9"
        },
        {
          "alg": "SHA-256",
          "content": "c1866f1c6dc28cec113c3388101d4d0a3816cb3a9025c07d2e71f668a2845538"
        },
        {
          "alg": "SHA-512",
          "content": "b64c450770445f349f2e76f696ed5599ea87c32d5006818122e59b412792a4d71b19a7c13ecbee3b5dbf86dfb0b7350cb1e32615bd5d910e2839e165dcd9b5ca"
        },
        {
          "alg": "SHA-384",
          "content": "0f66c5ddf22ebc720cd2b765c45c639843a00a882e2d19c89e562c564878a5d40a374d491cdff275187156c2dd464724"
        },
        {
          "alg": "SHA3-384",
          "content": "a854ed19a5cf790abd511f309a1674d1050c94567fce257da250de541a63215f78aa7629d6fe53ec1291c59011f3922e"
        },
        {
          "alg": "SHA3-256",
          "content": "a9b1643fdf1d81eab85d8cdc51d02f77dd36860c04f2d0ff717ebddb9cee5b3e"
        },
        {
          "alg": "SHA3-512",
          "content": "8f860b34f901cb5b3feb74037cbe852f5723256c8f5c44c25bb34cda5148fc511a240b9c0f34cd934d3843d55960a3600dd95ba7b0ae0fde5af569ce232ae645"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl": "pkg:maven/com.asahaf.javacron/javacron@1.4.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/asahaf/javacron",
          "type": "website"
        },
        {
          "url": "https://github.com/asahaf/javacron",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.nscuro/versatile-core@0.16.1?type=jar",
      "group": "io.github.nscuro",
      "name": "versatile-core",
      "version": "0.16.1",
      "description": "Java implementation of vers, a mostly universal version range specifier",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0c039ebfa548d23614f56555a1e8325e"
        },
        {
          "alg": "SHA-1",
          "content": "8353bc94a9cbfb0ba32d58b6379a817cd8e931d7"
        },
        {
          "alg": "SHA-256",
          "content": "b9774c6ccd5b0115f36566dbf1fa46e995ec6fdb5a25929aa55fd66787aead1d"
        },
        {
          "alg": "SHA-512",
          "content": "502295e85cb40b18da314b330bd3870c1abef11058f142b4de85fbf73a39f603b44a92f87e040dec445a086fc36fb8d918023e6dd6347f0d61c2f38e379066f9"
        },
        {
          "alg": "SHA-384",
          "content": "714fb032765a48befe022dac0066dbcd5b217ad0eab653345cdecf7f851fe4b4fd9dfcbcc2fe9240b0948afb51887640"
        },
        {
          "alg": "SHA3-384",
          "content": "a9875bd88fccc8ed840f5eec271f9306f613ee20153d73497135e961f97bf433b88825827e15e992cf0104c319725c72"
        },
        {
          "alg": "SHA3-256",
          "content": "f38385e3fc73e53d9de10be4ea1db3fe10b6250d750e16c553800c3dae33c03e"
        },
        {
          "alg": "SHA3-512",
          "content": "fb3cbbc1797bdd333725a0600972ba6f0d2896d06b87083a0338fd142703440603551b047cb783f3754e46f5a3d535a10f98fe8a0386d6acd2354611354dcbd8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.nscuro/versatile-core@0.16.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/nscuro/versatile/versatile-core",
          "type": "website"
        },
        {
          "url": "https://github.com/nscuro/versatile/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/versatile-core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.nscuro/versatile-spi@0.16.1?type=jar",
      "group": "io.github.nscuro",
      "name": "versatile-spi",
      "version": "0.16.1",
      "description": "Java implementation of vers, a mostly universal version range specifier",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a8478b44f991c2b246638ccb8da69126"
        },
        {
          "alg": "SHA-1",
          "content": "39c12c771a1c3dbf12605bd2716278417384b42e"
        },
        {
          "alg": "SHA-256",
          "content": "14f67e18614abcf13f601e7d6dd9a1022fdc2cbe243ae7aeb648e02cbade0f42"
        },
        {
          "alg": "SHA-512",
          "content": "dbac4c52b32e90defcb009e8929e80170417df4e173512e4d74bfa6b0a1ced68186cb71ec29be94632875a23db43e94504ce475c277014e06dbb81364d53ec61"
        },
        {
          "alg": "SHA-384",
          "content": "3cb97fe6004b084095ebef5db77e93623ca188416dae38d169d13453672cd5a1134eddc6468a2cf302582341adc24b2f"
        },
        {
          "alg": "SHA3-384",
          "content": "940c53458c74d045b551ba6ae554314d3378c7d6b7694e4f0b1f548e45bae6361edfc4610f28df7355c93dee019a2f86"
        },
        {
          "alg": "SHA3-256",
          "content": "58fdad361a5dc3efb14d95b385a691c5fe5dc3c910a065b8c11f3c4d050d8d21"
        },
        {
          "alg": "SHA3-512",
          "content": "7483597e18e62922ed5cd60529eaae2025668e3bf8c83bdec5bf7e09114eb9852858784ad95f4bbb8993813f5082d4cc22a4e930261d18266981aaf51200f5d1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.nscuro/versatile-spi@0.16.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/nscuro/versatile/versatile-spi",
          "type": "website"
        },
        {
          "url": "https://github.com/nscuro/versatile/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/versatile-spi",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.vdurmont/semver4j@3.1.0?type=jar",
      "group": "com.vdurmont",
      "name": "semver4j",
      "version": "3.1.0",
      "description": "Semantic versioning for Java apps.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b39112afda0af7dba1f160f7284d402f"
        },
        {
          "alg": "SHA-1",
          "content": "0de1248f09dfe8df3b021c84e0642ee222cceb13"
        },
        {
          "alg": "SHA-256",
          "content": "0f33724dd012099f0737e3d9203e28f4a804435526998d4f5841993058651cb8"
        },
        {
          "alg": "SHA-512",
          "content": "4b7cc68857eb7633d0ef8a6bd8101243d0300537e51fac1380ebb944a8708f0f75ec3fa10186845b7e3a2d7988ae0bf22369909a52b6d95b5faaa9bc96dbbe64"
        },
        {
          "alg": "SHA-384",
          "content": "5e193b3ae6a6f34fb38abca0a2f9124daa0401238bb18015f8dfe4431da87525afa82921dd57754a1095d30451dfc363"
        },
        {
          "alg": "SHA3-384",
          "content": "62d09d2c1151a5108b55f04c8cf520c1b1b9e96ff045973e7aa729ff79522cf6772af7808c7435e6679620bdd0b722bc"
        },
        {
          "alg": "SHA3-256",
          "content": "fa98f695faa97464ce8b90f8c93b0179843ab2cc8a9e09d09586523e1cf4f401"
        },
        {
          "alg": "SHA3-512",
          "content": "6b24821607cb2040dd649c569e01cb87af0b5b92488111655ef15eb675a1e9f33029616c154253b4a865c42906b699a44dacf36411f42d062f57ccc60a0b5d42"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:maven/com.vdurmont/semver4j@3.1.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/vdurmont/semver4j",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/simpleclient@0.16.0?type=jar",
      "group": "io.prometheus",
      "name": "simpleclient",
      "version": "0.16.0",
      "description": "Core instrumentation library for the simpleclient.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0d7e4aec0a8ba8ba66c87f06e3d439da"
        },
        {
          "alg": "SHA-1",
          "content": "28b0eaf7c500c506976da8d0fc9cad6c278e8d87"
        },
        {
          "alg": "SHA-256",
          "content": "22c374f237f7bc4fdb1f0ec2da379c0ba00e69ad2ffe8b6ade543d73062d377f"
        },
        {
          "alg": "SHA-512",
          "content": "2ce92dde047afc954d25326a7f573959be5be48209c687a4739b078c4083b4f1c31739d8d5bfc050844520fe8c41fdddaaf7aced8f9e6d18d3399a9101a410a7"
        },
        {
          "alg": "SHA-384",
          "content": "7f13ada603732139efb752367586be3941422f4caa3982e74e3c0aeb994113dd9a5e60d733c66101ad866cb3bbad3b73"
        },
        {
          "alg": "SHA3-384",
          "content": "2f192df969841ac644700e33e1c574277985887dc0c65bd9c66413c2b227eb4c4a1cc8777a82035af99179b46f022bc2"
        },
        {
          "alg": "SHA3-256",
          "content": "65403743a2a54a2f0c3dc5373c73b78e44732ad9e15cd4ee8a79d3e5ad5e2cf0"
        },
        {
          "alg": "SHA3-512",
          "content": "67a4bc85bb4fab76fbbe77b305e36eb3042b8aa74906ad6637e64d03a577a29305ba21d6dcb7f99e8bc96dc6344256a3fbff05f6826e08f036f91c258363a00d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/simpleclient@0.16.0?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/simpleclient",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/simpleclient_tracer_otel@0.16.0?type=jar",
      "group": "io.prometheus",
      "name": "simpleclient_tracer_otel",
      "version": "0.16.0",
      "description": "The Prometheus Java Suite: Client Metrics, Exposition, and Examples",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "55959da7c8ad68257c11d23f0de6a52f"
        },
        {
          "alg": "SHA-1",
          "content": "cc3d2b7b7cb6f077e3b1ee1d3e99eb54fddfa151"
        },
        {
          "alg": "SHA-256",
          "content": "a2a84c59bef3796bb7f9c6f2ae8b7de8b905313ef28180ac3de7ff61dd68df3f"
        },
        {
          "alg": "SHA-512",
          "content": "48aed68de446dc550346b6746b1378d570aa0d1cdef04d49e1f1de55f3b625bbf5873f7caff6e55a0eee3d7fad1bec6046a9fdf6d2c65f61d1a82df9bb2b0342"
        },
        {
          "alg": "SHA-384",
          "content": "50e97cdd886a166f6a12eda030b11044492582307f3b37bd5f5ea97f6c4de1c01f3c2d535fb52dea7c325595e303c297"
        },
        {
          "alg": "SHA3-384",
          "content": "0ef419b322cd233172c94716b75d514c02ca990f708b7a4d9e08662aa6220071561788e5c3c2b09ed9b98442f380c272"
        },
        {
          "alg": "SHA3-256",
          "content": "39cc794427fe6fa645bcb7127d6dfa264ddbbfe6c5154458b415f6eb1a07d8e6"
        },
        {
          "alg": "SHA3-512",
          "content": "5a5e4626d06ea30c6f56382759688def90e95c595c9011f158d16b2d033896b1fb1123f79268b62c0c99f9bd387b24400a20185e540139cb9ba3caaf29e51370"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/simpleclient_tracer_otel@0.16.0?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/simpleclient_tracer/simpleclient_tracer_otel",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/simpleclient_tracer_common@0.16.0?type=jar",
      "group": "io.prometheus",
      "name": "simpleclient_tracer_common",
      "version": "0.16.0",
      "description": "The Prometheus Java Suite: Client Metrics, Exposition, and Examples",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "80ee58e0fd6a13feacded45d0fc52f53"
        },
        {
          "alg": "SHA-1",
          "content": "dec00ef7c6155c4ca1109ec8248f7ff58d8f6cd3"
        },
        {
          "alg": "SHA-256",
          "content": "e84a784ac8e24f182ee62da80b6b5c8140774b75bfa4bf9cc3d3b8390db625f6"
        },
        {
          "alg": "SHA-512",
          "content": "506b8bb090bcccf020ba8dcbfec047d71927b400a06a0f2e669ee8c2b3746a3b2cd9abeb2b5562308367e93b643c4f239324943523d7b713b767137bd227baba"
        },
        {
          "alg": "SHA-384",
          "content": "917fbba98756ae774218480a9d1a028b97d185b52781c3d1d3006849a48e6a6bfbfab9ba6b524e97ed6efd1371dab51e"
        },
        {
          "alg": "SHA3-384",
          "content": "93a993bb7058582832f81656e1c8fe5ded242ced8f791225089d861801fc6be62f74de9b7ddc164f95fac267bb0aeccb"
        },
        {
          "alg": "SHA3-256",
          "content": "9fd8671d77d01cfdcc3bfa65dacebefbed8e72e63f13a524f40f4945fcf156f3"
        },
        {
          "alg": "SHA3-512",
          "content": "47c56b4f03f023c38e1af61591f7081a9dbe657f93c7b067089362e88054a03fadae12ed410e6c554e4faaca577f480f53e387f6e8488208b33fd8e779cb766f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/simpleclient_tracer_common@0.16.0?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/simpleclient_tracer/simpleclient_tracer_common",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/simpleclient_tracer_otel_agent@0.16.0?type=jar",
      "group": "io.prometheus",
      "name": "simpleclient_tracer_otel_agent",
      "version": "0.16.0",
      "description": "The Prometheus Java Suite: Client Metrics, Exposition, and Examples",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c655a6b67747cebfc80375560a549059"
        },
        {
          "alg": "SHA-1",
          "content": "009d724771e339ff7ec6cd7c0cc170d3470904c5"
        },
        {
          "alg": "SHA-256",
          "content": "7ad2bb40df74a772d9f5445a3d03579b49d6b37a47d5e90f6cf3f59ecf41ad06"
        },
        {
          "alg": "SHA-512",
          "content": "e4b6a97354c32675069cf644e97a21c797875d5c855940ec169baf552f2858b413b2dae5da7ba43c75eda7c021c6695a21fda8fe7441a87bb9a07773cd63def8"
        },
        {
          "alg": "SHA-384",
          "content": "7f8632749d3b2b5a1197e5ca5fd73be9f8a3843a3c0d9eef38fac0203a41d168f77762413594cd63155743197300a8d9"
        },
        {
          "alg": "SHA3-384",
          "content": "743de884471ef70418bb93f876ac6b6bca294ae9eae6fd7f4be93fb5ebc93512f1ab45fe54fc54f281747821a0b54384"
        },
        {
          "alg": "SHA3-256",
          "content": "50834225cefc4d290ead0d5d9660bac8c28d78cc3cf6fd230cab92896aba9e51"
        },
        {
          "alg": "SHA3-512",
          "content": "922397ce19decd78caba0a17b0a8b87365108cb66a2b3768df2f235bc3868eb46cdd90f09d7e8b59cf18e008d48c1d8963a2c28dafad2f26f048c38569f46baf"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/simpleclient_tracer_otel_agent@0.16.0?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/simpleclient_tracer/simpleclient_tracer_otel_agent",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jetbrains/annotations@17.0.0?type=jar",
      "group": "org.jetbrains",
      "name": "annotations",
      "version": "17.0.0",
      "description": "A set of annotations used for code inspection support and code documentation.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "7b06437ed47fa7b4a8ec8909f4fb9022"
        },
        {
          "alg": "SHA-1",
          "content": "8ceead41f4e71821919dbdb7a9847608f1a938cb"
        },
        {
          "alg": "SHA-256",
          "content": "195fb0da046d55bb042e91543484cf1da68b02bb7afbfe031f229e45ac84b3f2"
        },
        {
          "alg": "SHA-512",
          "content": "839ec18d4a6f930ecd39827ebd4013c13a7176003543b8f60056770179032648faf1651e9e73109e811881b68a39757ca7e39731a61ff4a3461637b196fe4f7b"
        },
        {
          "alg": "SHA-384",
          "content": "c9d045a68ef2b0d5b12aa00b636e43af22de4c02f4dfcc6b5b7b04fdd57c98c7246decd2e5dc3eb9f1b10d929ac33a11"
        },
        {
          "alg": "SHA3-384",
          "content": "25ad733b460552705dd624634191beb909a6ed35f2475723faa06551d9542b87e724266f5f6003350c39965a92b5e54c"
        },
        {
          "alg": "SHA3-256",
          "content": "f731cde48fa6a20e57e97a829184492cfa5fe0e14a5082e7810205c2b9f1ac1c"
        },
        {
          "alg": "SHA3-512",
          "content": "b6698f9d65c0a364854717e64edd5df4fb1c97300d4dc3cc7ae7194b0b7b9e826b3d800dd362e2ad05417dac6ee3b2164294796c3ae46f4cbed840c2481b79b1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jetbrains/annotations@17.0.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/JetBrains/java-annotations",
          "type": "website"
        },
        {
          "url": "https://github.com/JetBrains/java-annotations",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "framework",
      "bom-ref": "pkg:maven/us.springett/alpine-executable-war@3.7.0?type=jar",
      "group": "us.springett",
      "name": "alpine-executable-war",
      "version": "3.7.0",
      "description": "An opinionated scaffolding library that jumpstarts Java projects with an API-first design, secure defaults, and minimal dependencies.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "77c9a79c594b1d525f35c62fcaba09d0"
        },
        {
          "alg": "SHA-1",
          "content": "c135664bf7a2ba0eccc84a27abbb2568e7d4d9b0"
        },
        {
          "alg": "SHA-256",
          "content": "cf5cf4503a43f4854f45039111d7ae0bd92365db4637e98ab223672ad0f75220"
        },
        {
          "alg": "SHA-512",
          "content": "7d58e3564ff65c326f2916aa82394af82a5d6799bb2b6638f2322719066eee71561a4fd3b4438895805fe8e52ba4556e05a38df3078e0dda01902dbb91b5e7c2"
        },
        {
          "alg": "SHA-384",
          "content": "a9921f0dd56d7ebe2ba8e8c88174f6c3cd027bb2f1fdec4a7829c5805eea5c474a24d426575df9f9cd6ee58c99a7752d"
        },
        {
          "alg": "SHA3-384",
          "content": "126fde6050f20e8a3c23949fa8dbad9d100d8b0f42ddadec706771ef1ff19b4e552745db6468136c96e731819000eef9"
        },
        {
          "alg": "SHA3-256",
          "content": "b94f5257eb8aa53ae9afc0526346474874b51dcac5563fe2031ded4865212153"
        },
        {
          "alg": "SHA3-512",
          "content": "d18cc395f06700d337d2bb9680db635b681977dd648b36f1742abb0eb3b7cdfe91b0dc0edc45da0fd1cc4cc08435a5d21abe258733234941c32e3e1ebd3285bb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/us.springett/alpine-executable-war@3.7.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/Alpine/alpine-executable-war",
          "type": "website"
        },
        {
          "url": "https://github.com/stevespringett/Alpine/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/stevespringett/Alpine/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git/alpine-executable-war",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-server@12.1.7?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-server",
      "version": "12.1.7",
      "description": "Jetty Server Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "3a48f22b2c19d62f70c768f21af07588"
        },
        {
          "alg": "SHA-1",
          "content": "34a9c55eeef4b19114ce9c1cd92b2699e1406886"
        },
        {
          "alg": "SHA-256",
          "content": "c0a4f4debb237cc183d82a948184efe1829a5aa1cd6ef23a37d5639bf33fa9f3"
        },
        {
          "alg": "SHA-512",
          "content": "e23ea9c4ee2727bbad54e7c0f2aa2e5d8757eafc170366b9e2f13296c69227a0b25a53a2945a8ace450f6aaef8749bc354b9fab2b1199c41bdf5c3e902d04e0d"
        },
        {
          "alg": "SHA-384",
          "content": "1b1877dff1458e379310a1c27e28cfcf649d24a122f5f3a20cee4ef55e1f44a8973f701689cdcc0f0b4dfa17a17bcbca"
        },
        {
          "alg": "SHA3-384",
          "content": "f475fced12a5d6900d756fc68f15c0b9234c3389464decdeb2cd873a5913fa231903894df4966cfad5a1255296b43ce4"
        },
        {
          "alg": "SHA3-256",
          "content": "2d3564592805758f361b6d489b95bb3b4dec8d0fe9607654bed7517ffd66bed8"
        },
        {
          "alg": "SHA3-512",
          "content": "10a8d6554d406edb46ce5fb84f66e261cbf71c6361287317209231527cffd97536dd56356a43edacfd887526fc3b23e1d66f2b350c6eaf52e4335faab9d68fc5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-server@12.1.7?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-server",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-server",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-http@12.1.7?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-http",
      "version": "12.1.7",
      "description": "Jetty HTTP Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2107d3b363337ef2d59b0991744221e9"
        },
        {
          "alg": "SHA-1",
          "content": "56169da55d29a2cd3ba89b6773a6779ecbc8b481"
        },
        {
          "alg": "SHA-256",
          "content": "8f0ed1d8ec189cbcaa16d972fc3e1296b97ff9dfe2b280eff72a5bb0a35fca7d"
        },
        {
          "alg": "SHA-512",
          "content": "136e7882220810071e6f7f52a96cbcd918de8876ac92f58454d305f66d75bf24472a515e256d8276fe84ea68fc0f432befe6575a53ec541b73cdf415db5f5ec0"
        },
        {
          "alg": "SHA-384",
          "content": "f0435f3ebedf81c6860b125bc748ad49dd1f026f7dd7b5d06813d549550b87945a15fe364fa2ba1ee9d56943f68fad87"
        },
        {
          "alg": "SHA3-384",
          "content": "92db8bd4cf1a2df1089bc83fb45113fe3d95dd47bbff2b7c6d361ebce7b878ac4e42679301ad2a659f06bbbe6f597e6b"
        },
        {
          "alg": "SHA3-256",
          "content": "c61aba36fd4f90b4eda03e3f4ab9f2c80f3fc4fdb86ffc116aef171e3f5acfc0"
        },
        {
          "alg": "SHA3-512",
          "content": "3c08c244c142f7575fcae87fd123333df4d199b2e6f17e49018aa22f017ca4b59046ec93d1bb8f7e90f27a95f3e8df15220676bd5efb83d01f7a09641dd55bbd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-http@12.1.7?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-http",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-http",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-util@12.1.7?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-util",
      "version": "12.1.7",
      "description": "Jetty Utilities Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0ba4b9992d440514c08e789a4528a223"
        },
        {
          "alg": "SHA-1",
          "content": "0dcc5e534f0d5db255787b711ffa1aed853f67cc"
        },
        {
          "alg": "SHA-256",
          "content": "8cb85d80e49c9a9df211ae4f750fbeb5cff6b259aa5e495a36c62f2ec7970c70"
        },
        {
          "alg": "SHA-512",
          "content": "b2b27919968f25c2556ae79bde820bcc1e10599c5d0c5191e6c88d26801e8cec0c5b122706149889a11a319e959610c307eccd12ff2523b09c6c742d1d0d5c55"
        },
        {
          "alg": "SHA-384",
          "content": "bb5b39faece2bf168cce751e0025cf5315ea8919f06339a13318b631d10488a8a91ebad0db6ad90faa7e16d976477c31"
        },
        {
          "alg": "SHA3-384",
          "content": "0f01157b2994766c55199ef36cfed83549a17c1e315dde7be84fc60d9b24b29e27c60e6d0c6865d06dd303bfb9aa6e92"
        },
        {
          "alg": "SHA3-256",
          "content": "d58b7067377e1e873625d60f26bdbfa99dc8879f2152c54b13bcc6d04da52304"
        },
        {
          "alg": "SHA3-512",
          "content": "ef5c03bb4175a658316232e900b5c9b8bcfc02658726b6618eb319de4aa19f24e997b1577b5bb8833cddea3d92e17a7c15c35357139cc041a0195a86e4014083"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-util@12.1.7?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-util",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-util",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-io@12.1.7?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-io",
      "version": "12.1.7",
      "description": "Jetty I/O Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0d13344cedca5787ad8d6e0c1c3d10de"
        },
        {
          "alg": "SHA-1",
          "content": "0886c0555e8c67d144916adb840e7b48a72143e1"
        },
        {
          "alg": "SHA-256",
          "content": "a09fbb65b46b96ec42d6210dab650a6d04879cba335aa92106bf5dff9d0aa6e9"
        },
        {
          "alg": "SHA-512",
          "content": "55f5105a1376e784f9897ef3cb904ef79a973a1780a4d9fd612903f1ffeba04bdead20dde374040b12c5be88501259beb42b387303a4affa1fd4af932fc1aa4a"
        },
        {
          "alg": "SHA-384",
          "content": "ba8f369b7734876b05f121b7e7f5ef391c42c26863f1eed996773a25b93ccd31ac1e22494ee80878c726ac51f739fc44"
        },
        {
          "alg": "SHA3-384",
          "content": "aed6616d3aa60bf693aa1292dd8c80d4f85ece6537dbd6df3a78f9b2d0c48c7780298a4ac51ace5438d93762bbf07c93"
        },
        {
          "alg": "SHA3-256",
          "content": "aa38559e70732e22e18a6beb9462a9bc5f55c2586b43bb489a7821c59aa4d59a"
        },
        {
          "alg": "SHA3-512",
          "content": "aee7b76d4bfaf58fb6289921c38f4aaa67dc86dc9249e187d0bd597ff7e0d05624a25004f6bd9a270dfa91ce84a2128dedd4e11462be14252f9c093127ba4f60"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-io@12.1.7?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-io",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-io",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty.ee11/jetty-ee11-webapp@12.1.7?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty.ee11",
      "name": "jetty-ee11-webapp",
      "version": "12.1.7",
      "description": "Jetty web application support",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "65c5e497406e1f83c85c00de002a7ba3"
        },
        {
          "alg": "SHA-1",
          "content": "65ae37f254d844ef216907bf38622a99d7d6403e"
        },
        {
          "alg": "SHA-256",
          "content": "21531440161990bec59ec090c5d6e090b7ff524c818792ca685152373b207a3d"
        },
        {
          "alg": "SHA-512",
          "content": "32480faadb438464ee67d411b389d477b1d0ac2cd72a3fdd79b7460ec96146a2d233e496b3964d743de9b1c655f70ff824050e1f167b137e1c15abffea038211"
        },
        {
          "alg": "SHA-384",
          "content": "f38baf6b308037d565d90f7ad2e89ab1fda6f2a4681bb062472c4604784045efdce911f72f2497f30a45a1b6eb034602"
        },
        {
          "alg": "SHA3-384",
          "content": "f6ecc544d6435c6fd7114b7a0e15e407e7d2f3f456dc615b551a648820172b3a7b56b05ea3fe5afdeb1ae5d823e03f7c"
        },
        {
          "alg": "SHA3-256",
          "content": "138a37b84943c223aafbbf878f7fe585eb2660815bc4a1dbb863ed884ae4e9af"
        },
        {
          "alg": "SHA3-512",
          "content": "7db643f71dbce1c04f8838518333af51ff4f784724d47887856f023dc468623a91bd3810be620f19dc26f4269d6b61cdee6e6acd9b9f247298df47b8eec9ccd7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty.ee11/jetty-ee11-webapp@12.1.7?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-ee11/jetty-ee11-webapp",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-ee11/jetty-ee11-webapp",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-session@12.1.7?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-session",
      "version": "12.1.7",
      "description": "Jetty Session Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "98eccc29fa70d4533ec5ad003b66704d"
        },
        {
          "alg": "SHA-1",
          "content": "a8356ba242d59e5f3f41f9662e2918b20916141f"
        },
        {
          "alg": "SHA-256",
          "content": "666463a0abfed5fb956e89bdefff9f0866cf62f58df3caf1ad2f027d7d9bf605"
        },
        {
          "alg": "SHA-512",
          "content": "f371609d8332a4d871a78c57280d2a5057a79b848a8fa5f4546bae621fa56dcd1f52db4fa949434f29a048fb246e016b556304f6f4ef35ba661be82acda46c14"
        },
        {
          "alg": "SHA-384",
          "content": "94142c71b0186c209205ead09dadf67fe751af95f14d76148eb6129f65c037c0fedb04e76a6ca0dd4d06efa1b129dbb4"
        },
        {
          "alg": "SHA3-384",
          "content": "d95dcbe9dc9059a58a2a81ac314ef9f47b49ced3c8b5b7d26fcaca0098384643c71cbf6301bfef831829d107925500f8"
        },
        {
          "alg": "SHA3-256",
          "content": "967111fe42ed0ab369edd7f9838a044c22788ef0e90e6afac4b370cb7623e54b"
        },
        {
          "alg": "SHA3-512",
          "content": "f8d07b1996cb89e3b418ada9ebbfd25175a827ebe62c1cd7da33deff222af9649ba5380f7528ff23c2a1052f573aae5a0995895288912360abc5b2d1925f0dd5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-session@12.1.7?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-session",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-session",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-xml@12.1.7?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-xml",
      "version": "12.1.7",
      "description": "Jetty XML Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c9c916609cee13680bae90d4ac9ae76c"
        },
        {
          "alg": "SHA-1",
          "content": "a0e8a3fb0b476fc5f067d5a69aa7370095c45ff6"
        },
        {
          "alg": "SHA-256",
          "content": "b1a667c6247384805c9a2db822442f74b1ded2fec5695bb66183fd8193b0905e"
        },
        {
          "alg": "SHA-512",
          "content": "d47ba75d66e34e1b801d6f9b4903a8c9f12dc5b042087acc70456e7a39feb56121233685dc608a900e9fe8c5d5a1acc6ba191879f736f568f3cca58129e391eb"
        },
        {
          "alg": "SHA-384",
          "content": "99f5414fd3e4e7edf94df696c8240b3a457d15bb78a5b595cbe36dde009ef5dcc88efa07a8429f1e366bc466787b500e"
        },
        {
          "alg": "SHA3-384",
          "content": "40ae87f66e378cd57d08a07066dcd5d22d3647afcaef78f7e1c12e361df55b803bb2e89322d58ed0f48d5a7382230365"
        },
        {
          "alg": "SHA3-256",
          "content": "e2ee2b735d88e35538c9c1ee2ba6da376d2f5d185a16d349de26f537aa32e1a3"
        },
        {
          "alg": "SHA3-512",
          "content": "fb392e68990a9cd5896e34dbdfe81fad79175d64981002bfc47b08d02878ad8385a5b213bb540b6ba3ced15e354ac66d2c3195690913db44d73acadb77625471"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-xml@12.1.7?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-xml",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-xml",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty.ee/jetty-ee-webapp@12.1.7?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty.ee",
      "name": "jetty-ee-webapp",
      "version": "12.1.7",
      "description": "Jetty EE Web Application Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "932c69b6685c564836dec038cef24fe7"
        },
        {
          "alg": "SHA-1",
          "content": "f36f032d421844ccf2746522cdabb1d16b3f7e9b"
        },
        {
          "alg": "SHA-256",
          "content": "09366d40e6dba3f235a4592cba53166f4b89baadaf23f62d07a82bd9e5dadd34"
        },
        {
          "alg": "SHA-512",
          "content": "3176a094976079b18cf97870a85011277d2f6173d8bec0277ca6efb894ce85465b5ddd128c507e8674348793ac4054bbd0357fcd4e39a580673f5d188ef9ac7b"
        },
        {
          "alg": "SHA-384",
          "content": "718ef20b2b7b800e1a8065da288e8aac2828731f34f97f646e39d1133ac9f0dddd69865d31d3b5e5ad12e55c2461536b"
        },
        {
          "alg": "SHA3-384",
          "content": "505bcc486c45c6934cf153fa589e52d7c02ee3ed19d45ffca0a5699f791d07a4a5cf4efdfa79fff3b75a517db08dbf51"
        },
        {
          "alg": "SHA3-256",
          "content": "ecbc47e40106ab9c0cb6ff605ef33f36e9b4b63460c68194a32b1f20c7d8bff0"
        },
        {
          "alg": "SHA3-512",
          "content": "630b65a5d07dd67b449d0512d8a9ca1dddc02c44d9235b2c6236aeb80914007913c2d9572e92110c9872534eabfbe8a730aaa92d7d2f294eba8ec6d6524a8c3f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty.ee/jetty-ee-webapp@12.1.7?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-ee/jetty-ee-webapp",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-ee/jetty-ee-webapp",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty.ee11/jetty-ee11-servlet@12.1.7?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty.ee11",
      "name": "jetty-ee11-servlet",
      "version": "12.1.7",
      "description": "Jetty Servlet Container",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "7bb05fd515854df9bc6d119df8c6ba73"
        },
        {
          "alg": "SHA-1",
          "content": "83641ffdb0b63b8ac2018528068784ca3110a86c"
        },
        {
          "alg": "SHA-256",
          "content": "8a075f61b316cd31e5d1aa62bcaf26358961b00e4d38bf8b269f7133cf734f02"
        },
        {
          "alg": "SHA-512",
          "content": "d9c38fd8b3a99f274046d5f701bbe366eff7b1941cb45631cf0a6ad0610664bb9fb78247a6acc7a2b17bd29f7d1b1444f756aef80451c0e82aaeecdf452f5d53"
        },
        {
          "alg": "SHA-384",
          "content": "322a8bf272d02aeabc1ac5f088142576981163d73d9e30f24cf3d1894a1e155b4e0f2efb95031fb9e64b116c5fe40eb6"
        },
        {
          "alg": "SHA3-384",
          "content": "3d25a396234a60e784d6eb606b11de32ecad59b2ad28f21bd7bad28ce1b133f83a303a72ec4c39e4f2ac784c64a0323f"
        },
        {
          "alg": "SHA3-256",
          "content": "1874475e496096d139111d54a0a7f1700599320c975b9ca87b392119a43b2ef1"
        },
        {
          "alg": "SHA3-512",
          "content": "d32c3870e8f5650979c5b44f147769b37a187cb21ae61e7c0eeb3d68c548b44aa9e17138b038671a51806ef3749418d99d19a79c777de25cedfef61c00641663"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty.ee11/jetty-ee11-servlet@12.1.7?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-ee11/jetty-ee11-servlet",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-ee11/jetty-ee11-servlet",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-security@12.1.7?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-security",
      "version": "12.1.7",
      "description": "Jetty Server Security Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5f4f2f0b5f683b14b85dc68a51af49c5"
        },
        {
          "alg": "SHA-1",
          "content": "1f45a5acf7c96a460a249351b70cc5b8f2f4a5ca"
        },
        {
          "alg": "SHA-256",
          "content": "586ac360ce3b432d6471e0040651db576491dd429bd4f2086f2a65cccacbbfb9"
        },
        {
          "alg": "SHA-512",
          "content": "f829f438de999e5a8e859ff37626e9d8a721a6c54a20e593124c4660d513bcdd290d6ebf5ae7205f5ac74f6d82099a00ce5a64efb453548479a78f6cb24271f2"
        },
        {
          "alg": "SHA-384",
          "content": "a1c2a099119e1d48943ef6245114a5583def89a76063dc8ce4ee64f7b55deb475787f8d4d54dbcd24f8ad4fa478ae44e"
        },
        {
          "alg": "SHA3-384",
          "content": "0f691309fb164e9adfc25b37fd0f3d1b53a99cddc4b2e0f75e515f75832a7b8a35c111f4f2cd4eff0570fd625009f700"
        },
        {
          "alg": "SHA3-256",
          "content": "1046f3ad95a923f0947a26b37c3aab056fc7d4a21140e95e4ceac477dbbfd05a"
        },
        {
          "alg": "SHA3-512",
          "content": "63e11341c1597e21c3c4e1f4778a496c8f427d0554aed623e95959ba62f5420b359deb85596eeca8c3a571bfc2ab41d6406d9b7db4b2106046a07a8e2df6795e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-security@12.1.7?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-security",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-security",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-deploy@12.1.7?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-deploy",
      "version": "12.1.7",
      "description": "Jetty Deployer Artifact",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a0bfc8f1a152905a29231d72428a979e"
        },
        {
          "alg": "SHA-1",
          "content": "3988f793fb24b9ebb635ec9946b628f883dd3bbd"
        },
        {
          "alg": "SHA-256",
          "content": "5754948dd025afd384cd70947e81342217a74dbceefb600ecbef9fb4eb230b98"
        },
        {
          "alg": "SHA-512",
          "content": "9d56330bc40018a2ed52779a35976b5484d5366ab090d90d16a7c3fc5b658ca24d3fba8c774627987f4b8b7ba5e384c2bfff78151439a72e83dd246f18e4d201"
        },
        {
          "alg": "SHA-384",
          "content": "c7ee0808eda00a42e502a1aade525c6fdf7eb4631db74b71590f8bda19f31bec766be3900bc7e8b702e900cd9de8c92c"
        },
        {
          "alg": "SHA3-384",
          "content": "0277b3c86280a32f52d57b39418f7101f943f7b1fe8bbadbc735a2a2df4dfaa800f28e234ef64cc79e379403d8171a5f"
        },
        {
          "alg": "SHA3-256",
          "content": "afd8c1cd702f0ff0cc3442872cca3582261eff9ff607400542e0682cd36399f3"
        },
        {
          "alg": "SHA3-512",
          "content": "f24d8ae69a408e9a6684665cbd0c92c15cccd3c295533d5eb315e19435922764ee5058dc484601c070c8068b23ab50f16faaae249f0c63946a4eb754870f3f93"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0",
            "url": "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-deploy@12.1.7?type=jar",
      "externalReferences": [
        {
          "url": "https://jetty.org/jetty-core/jetty-deploy",
          "type": "website"
        },
        {
          "url": "https://repo.maven.apache.org/maven2",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/jetty/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jetty/jetty.project/jetty-core/jetty-deploy",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.slf4j/jul-to-slf4j@2.0.17?type=jar",
      "publisher": "QOS.ch",
      "group": "org.slf4j",
      "name": "jul-to-slf4j",
      "version": "2.0.17",
      "description": "JUL to SLF4J bridge",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a42936c56611e4794c42908fb3d3a647"
        },
        {
          "alg": "SHA-1",
          "content": "524cb6ccc2b68a57604750e1ab8b13b5a786a6aa"
        },
        {
          "alg": "SHA-256",
          "content": "a7afcd23b9cfd1475e55c94f943b808c5922035e7e2c2a5c65a487a4106bc538"
        },
        {
          "alg": "SHA-512",
          "content": "623426fb3a0a34c88b1fce686cbfaa8d17bf013f3583886dc94273bf2f767492044b48db6557988d764f0450129c9d496dd3c10ad548099879d80e3945f2f636"
        },
        {
          "alg": "SHA-384",
          "content": "fe66fb82c6f9dca6f8fb1d61e1fc6f4d8bc9b616cf89aa5b54fab933e1a55506a2400e8e9b1c92cb2787ac69731103f4"
        },
        {
          "alg": "SHA3-384",
          "content": "6f537049a039795f0f4c0653d2ab959fe0bfeae53f629148773db1a819b2308e16ef6e3f9d49a5741e9adf0ce5c34eda"
        },
        {
          "alg": "SHA3-256",
          "content": "f25e1333214a362f95ef31c8465f6d89b4bb7399638f4c4ad53a6d9f0ecbd649"
        },
        {
          "alg": "SHA3-512",
          "content": "a831c814c1064b39ead500e542de1decfe302688936b93c9aa781938bb0ae884907137ea34f18f99436f24fb9ddbbcecaf32df543c691d6311671f7e8b81dbc7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl": "pkg:maven/org.slf4j/jul-to-slf4j@2.0.17?type=jar",
      "externalReferences": [
        {
          "url": "http://www.slf4j.org",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/qos-ch/slf4j/slf4j-parent/jul-to-slf4j",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.owasp/security-logging-common@1.1.7?type=jar",
      "group": "org.owasp",
      "name": "security-logging-common",
      "version": "1.1.7",
      "description": "The OWASP Security Logging project provides developers and ops personnel with APIs for logging security-related events.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9f11b84aefd2f2dcf48f8443a6213619"
        },
        {
          "alg": "SHA-1",
          "content": "4717c0c2225a2aad898b2fbdf717ec6e034d48f8"
        },
        {
          "alg": "SHA-256",
          "content": "ef9c6e4fefcf8ffcee7590239a8e8c56b192fc71c183fd8a943cf177e01b07eb"
        },
        {
          "alg": "SHA-512",
          "content": "d30fa0cce5b75758289a255946f165418786d96c5de3dbb12084d6da6bb75e556e43e002050ea114e3adb0ca15dc16e28b6218f5b2fcf993eadcb37076fb522a"
        },
        {
          "alg": "SHA-384",
          "content": "f10fbb5250849634a79477a536eb7f4a07aa66d5d1234e18caf5dbd2ab9473a4e26baa4fe381af9240eb6f9471cbb937"
        },
        {
          "alg": "SHA3-384",
          "content": "fee72e5c1e41740264f6d0f1fcfd72731c92df25af3d529509a006ce8330430390ab1139b8798c8cd6b78bcc0656d4e4"
        },
        {
          "alg": "SHA3-256",
          "content": "2c7bf9e688071240437f106b05955c298c9ee42f6c119cd918460af5a3a82a48"
        },
        {
          "alg": "SHA3-512",
          "content": "0ff1a2d6da110ca1a1713b052bab481bf052033e9cef7362a69a30e485d4a8ae8ba78ecd02278f4f81558d9cd2f12402108f82668754eade77fde3670433740c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.owasp/security-logging-common@1.1.7?type=jar",
      "externalReferences": [
        {
          "url": "https://www.owasp.org/index.php/OWASP_Security_Logging_Project",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/javabeanz/owasp-security-logging",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.owasp/security-logging-logback@1.1.7?type=jar",
      "group": "org.owasp",
      "name": "security-logging-logback",
      "version": "1.1.7",
      "description": "The OWASP Security Logging project provides developers and ops personnel with APIs for logging security-related events.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c1148e1a96d53351f39b407185a59e06"
        },
        {
          "alg": "SHA-1",
          "content": "e609fe8531b96fcd559c9e146342aa3a56d16231"
        },
        {
          "alg": "SHA-256",
          "content": "100f5e85cbf9cf395983d85355cc17ed1d19d77176d93c58a14f339e62382168"
        },
        {
          "alg": "SHA-512",
          "content": "9bdb7df787ae5264e509082aa3b6f865ec543801587270eb582c3cb430a15f019c24a25e5a1d4df462a2dec0e6e82ce636807b055d5e72b73d67d90805e9e5d1"
        },
        {
          "alg": "SHA-384",
          "content": "8502c6a84746dfd8b9960d599cd476dd3b2c0017b2e8eba169411f7adbfea4236323ada03cb7e005812456976e673a7b"
        },
        {
          "alg": "SHA3-384",
          "content": "283c28b7760973dc0195fcd2127294c4c77a2a8c95bcc597401f00ffbd8c5367788ae9c9b6874deac178526fe93c1265"
        },
        {
          "alg": "SHA3-256",
          "content": "5a2f21e6fe6fe4bc45c439d7dbb5a16d07cc56ecf15b10a60125ee777bac1122"
        },
        {
          "alg": "SHA3-512",
          "content": "f2fa575c8838d7dcb5d11678cff9afaeb65d3bb227f501cf86541e4131c7a3cb72921d8ff8d28f91f7a6d5d3ac08d579f1fba73e8a7627c7a46371ed0a62fad9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.owasp/security-logging-logback@1.1.7?type=jar",
      "externalReferences": [
        {
          "url": "https://www.owasp.org/index.php/OWASP_Security_Logging_Project",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/javabeanz/owasp-security-logging",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/net.logstash.logback/logstash-logback-encoder@8.1?type=jar",
      "group": "net.logstash.logback",
      "name": "logstash-logback-encoder",
      "version": "8.1",
      "description": "Provides logback encoders, layouts, and appenders to log in JSON and other formats supported by Jackson",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "08a18cd6a4737221773acc1d2a5c9e3a"
        },
        {
          "alg": "SHA-1",
          "content": "aca81cdb03c48f4e0213d3e351ab1befafa9991e"
        },
        {
          "alg": "SHA-256",
          "content": "2716cb6a3e83ec2f296395b8752063f502d10a90de1a88f711f06ae5b6ecefb7"
        },
        {
          "alg": "SHA-512",
          "content": "71c73ef76d1f1562a54ba2f0fe8335f5e5a4938dc7896bcb58abd8a2b466e8c46640361d63ea475a5d37b12334335fd3e2827eda54fd17b0384027d955cdec7b"
        },
        {
          "alg": "SHA-384",
          "content": "5c332ad34b65c15869217e79c5e505502df624b0e76f47a7a9eba4d323a1ca4ea34dabb1ef75de489b329e2f94deba1d"
        },
        {
          "alg": "SHA3-384",
          "content": "cd44829a3e71f245a300f9b5a6d9b1e7838835b5f16dcb3d5c01c3cdcf23f76693abe517014bb5318d528e74a0ea150e"
        },
        {
          "alg": "SHA3-256",
          "content": "a5fd0008198d89b57aff757173ea60f1aa0e3cc2ea4ff043b2a73c5bf200244e"
        },
        {
          "alg": "SHA3-512",
          "content": "e3769fe9dbdc066f346b3f38cd3738d6d19bc5a0551164bb7593bf3dfa2deeb338d24ae664fda0b7f20510127fddb9875b4621b8f63cf76c851369711ea4e79a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl": "pkg:maven/net.logstash.logback/logstash-logback-encoder@8.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/logfellow/logstash-logback-encoder",
          "type": "website"
        },
        {
          "url": "https://github.com/logfellow/logstash-logback-encoder",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.1?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-core",
      "version": "2.21.1",
      "description": "Core Jackson processing abstractions (aka Streaming API), implementation for JSON",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a526a530a07fd25140dee4695e686051"
        },
        {
          "alg": "SHA-1",
          "content": "47b013fc85dbb819f3ba51e95a5560d0f1c4121c"
        },
        {
          "alg": "SHA-256",
          "content": "1edd5f2e49dca5f8e4519957c24b7b3050bd1c7ee883920da33cff031ff1f7c0"
        },
        {
          "alg": "SHA-512",
          "content": "f4b153a0a7c974620dec3fcfe4a4869c2632ab97f73c2662041af7d0eb0c42ad462bfee8cdcab5542842175b96197df1d910a8841067654f6e763b370c18ccfa"
        },
        {
          "alg": "SHA-384",
          "content": "22047a20191a34eba9c83e3b6d5df5b74b160eea9c5279e3d32d7688e2dcdd791083db1d661ebb7aaf872fe603460f30"
        },
        {
          "alg": "SHA3-384",
          "content": "44632cb6d9783d4dd883081507ff220c19bd620041791e8f1e63671aa57400d2bc03af732a9a12728b5918e4e7a415e2"
        },
        {
          "alg": "SHA3-256",
          "content": "a39b1a208b640982042b4ad6f7606a7b6ea537d23034fafd7d3330252e85c178"
        },
        {
          "alg": "SHA3-512",
          "content": "a712ad471cd591149a8d9e8d2ad1795915d1098332d521c32be26e76ea9b18eb84d22d3dd1dd3f008bfb223b89d7a6c33cd621385933735f67d758cb191be9ca"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-core",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/FasterXML/jackson-core/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-annotations",
      "version": "2.21",
      "description": "Core annotations used for value types, used by Jackson data binding package.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e0d0c3e7300954f73e43c67d933aaea4"
        },
        {
          "alg": "SHA-1",
          "content": "b1bc1868bf02dc0bd6c7836257a036a331005309"
        },
        {
          "alg": "SHA-256",
          "content": "53ca085f4a150f703f49e1aabd935bd03b43e1ea3d55d135438292af22cef56b"
        },
        {
          "alg": "SHA-512",
          "content": "d832a99867acc2d5afb2596da760c50e6a6b54c1bbc8e6c4186f267a16e1d55c7a916ef8b034ad6b277c41e3342b91dcdc2e3dcea8bdccfe89e7c147894591be"
        },
        {
          "alg": "SHA-384",
          "content": "30b15d68f8da6f6c26aa9f6c95d09152b6c1a8092cd976cf600d63d1751509a73865f937e0ad97d8d55bf20f6a749b44"
        },
        {
          "alg": "SHA3-384",
          "content": "5205b51f6ed689cf31b58b98a61ca9e17a439c15d669dcb408ec4d430e77ac9ac57d39d5ca1f9973e8d184f6dd57ec4f"
        },
        {
          "alg": "SHA3-256",
          "content": "d6782d188a72b2bb96e4b595343e783012b3f98c30f7b9950244c21739334509"
        },
        {
          "alg": "SHA3-512",
          "content": "b648f1e9ffe818227d53fbde409e61858ac22d3f78705eaf08065587ed512c9b33b0f5e2222356bfb33fb2973bb5a3184e31d2a7099f8fc8d2fd23eb4612a4bf"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/FasterXML/jackson-annotations/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-annotations",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.1?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-databind",
      "version": "2.21.1",
      "description": "General data-binding functionality for Jackson: works on core streaming API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "35fe6cc9ff7990e67f86a92092aa0569"
        },
        {
          "alg": "SHA-1",
          "content": "5615fb77652bfd386d87b95a1d663e1c0e38b372"
        },
        {
          "alg": "SHA-256",
          "content": "b011eb5202d9ec889e27f1dcbdf6c63f06a76e7a16c0a1b30c6048d556c9a28e"
        },
        {
          "alg": "SHA-512",
          "content": "837a94e20474d0ad3630663c0112e982914e5cfa3bbf397b8c31d00b68d7fc8e4514458b75dd39cf74edda7e33339504fa845864476786e94812bd36a5a428ee"
        },
        {
          "alg": "SHA-384",
          "content": "42101498ef71f5b506c2b445217722949c57f634bc7cd5ca4a7d112faa8edb98b9ff1cce06a23d65389315da0e79cc31"
        },
        {
          "alg": "SHA3-384",
          "content": "0ca6e7f95c5600ff88712faec79a9f45438908abfdbb9367ceef7e3ccf37256212db617509fc68efae0d919418210777"
        },
        {
          "alg": "SHA3-256",
          "content": "fb7b4d84416fc38f1b90b3e4dcd4ad6ffe484e4092530ac459d18b48a146479d"
        },
        {
          "alg": "SHA3-512",
          "content": "17eb42ce90e339d66509adbb429296eafd283c72229c81deec2ca78e9e941c692b4ace7595f0fe5c5eb54b5bac93c7b3ab146be992ba9d974d2e388a2a964543"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson",
          "type": "website"
        },
        {
          "url": "https://central.sonatype.com/api/v1/publisher",
          "type": "distribution-intake"
        },
        {
          "url": "https://github.com/FasterXML/jackson-databind/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-databind",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "application",
      "bom-ref": "pkg:maven/org.dependencytrack/dependency-track@4.14.0?type=war",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "dependency-track",
      "version": "4.14.0",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/dependency-track@4.14.0?type=war",
      "externalReferences": [
        {
          "url": "https://github.com/DependencyTrack/dependency-track/security/advisories",
          "type": "advisories"
        },
        {
          "url": "https://dependencytrack.org/slack",
          "type": "chat"
        },
        {
          "url": "https://docs.dependencytrack.org/",
          "type": "documentation"
        },
        {
          "url": "https://docs.dependencytrack.org/changelog/",
          "type": "release-notes"
        },
        {
          "url": "mailto:security@dependencytrack.org",
          "type": "security-contact"
        },
        {
          "url": "https://www.linkedin.com/company/owasp-dependency-track",
          "type": "social"
        },
        {
          "url": "https://x.com/dependencytrack",
          "type": "social"
        },
        {
          "url": "https://dependencytrack.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git",
          "type": "vcs"
        }
      ]
    }
  ],
  "services": [
    {
      "bom-ref": "service:gov.nist.nvd",
      "provider": {
        "name": "National Institute of Standards and Technology (NIST)",
        "url": [
          "https://nist.gov"
        ],
        "contact": [
          {
            "email": "nvd@nist.gov"
          }
        ]
      },
      "group": "gov.nist.nvd",
      "name": "National Vulnerability Database (NVD)",
      "description": "The NVD is the U.S. government repository of standards based vulnerability management data represented using the Security Content Automation Protocol (SCAP). This data enables automation of vulnerability management, security measurement, and compliance. The NVD includes databases of security checklist references, security-related software flaws, misconfigurations, product names, and impact metrics.",
      "endpoints": [
        "https://nvd.nist.gov/feeds"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "Public domain"
          }
        }
      ]
    },
    {
      "bom-ref": "service:org.sonatype.ossindex",
      "provider": {
        "name": "Sonatype",
        "url": [
          "https://sonatype.com"
        ],
        "contact": [
          {
            "email": "ossindex@sonatype.org"
          }
        ]
      },
      "group": "org.sonatype.ossindex",
      "name": "OSS Index",
      "description": "The NVD is the U.S. government repository of standards based vulnerability management data represented using the Security Content Automation Protocol (SCAP). This data enables automation of vulnerability management, security measurement, and compliance. The NVD includes databases of security checklist references, security-related software flaws, misconfigurations, product names, and impact metrics.",
      "endpoints": [
        "https://ossindex.sonatype.org/api/v3/component-report",
        "https://ossindex.sonatype.org/api/v3/version"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:com.cyberriskanalytics.vulndb",
      "provider": {
        "name": "Risk Based Security",
        "url": [
          "https://riskbasedsecurity.com/"
        ],
        "contact": [
          {
            "email": "support@riskbasedsecurity.com"
          },
          {
            "email": "sales@riskbasedsecurity.com",
            "phone": "1-855-RBS-RISK"
          }
        ]
      },
      "group": "com.cyberriskanalytics.vulndb",
      "name": "VulnDB",
      "description": "VulnDB is the most comprehensive and timely vulnerability intelligence available and provides actionable information about the latest in security vulnerabilities via an easy-to-use SaaS Portal, or a RESTful API that allows easy integration into GRC tools and ticketing systems. VulnDB allows organizations to search and be alerted on the latest vulnerabilities, both in end-user software and the 3rd Party Libraries or dependencies. A subscription to VulnDB provides organizations with simple to understand ratings and metrics on their vendors and products, and how each contributes to the organization\u2019s risk-profile and cost of ownership.",
      "endpoints": [
        "https://vulndb.flashpoint.io/api/v1/account_status",
        "https://vulndb.flashpoint.io/api/v1/vendors/",
        "https://vulndb.flashpoint.io/api/v1/products/",
        "https://vulndb.flashpoint.io/api/v1/versions/by_product_id",
        "https://vulndb.flashpoint.io/api/v1/vulnerabilities/",
        "https://vulndb.flashpoint.io/api/v1/vulnerabilities/find_by_cpe"
      ],
      "authenticated": true,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:com.github.api",
      "provider": {
        "name": "GitHub",
        "url": [
          "https://github.com/"
        ]
      },
      "group": "com.github.api",
      "name": "GitHub Advisories",
      "description": "Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.",
      "endpoints": [
        "https://api.github.com/graphql"
      ],
      "authenticated": true,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:io.crates",
      "provider": {
        "name": "Crates.io",
        "url": [
          "https://crates.io"
        ]
      },
      "group": "io.crates",
      "name": "Crates.io",
      "description": "The Rust community\u2019s crate registry",
      "endpoints": [
        "https://crates.io/api/v1/crates"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.packagist.repo",
      "provider": {
        "name": "Packagist",
        "url": [
          "https://packagist.org"
        ]
      },
      "group": "org.packagist.repo",
      "name": "Crates.io",
      "description": "The PHP Package Repository",
      "endpoints": [
        "https://repo.packagist.org/p/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.rubygems",
      "provider": {
        "name": "RubyGems",
        "url": [
          "https://rubygems.org"
        ]
      },
      "group": "org.rubygems",
      "name": "RubyGems",
      "description": "RubyGems.org is the Ruby community\u2019s gem hosting service.",
      "endpoints": [
        "https://rubygems.org/api/v1/versions"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.golang.proxy",
      "provider": {
        "name": "Google",
        "url": [
          "https://go.dev/"
        ]
      },
      "group": "org.golang.proxy",
      "name": "Go Module Mirror, Index, and Checksum Database",
      "description": "The Go team is providing the following services run by Google: a module mirror for accelerating Go module downloads, an index for discovering new modules, and a global go.sum database for authenticating module content.",
      "endpoints": [
        "https://proxy.golang.org/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:pm.hex",
      "provider": {
        "name": "Six Colors AB.",
        "url": [
          "https://hex.pm"
        ],
        "contact": [
          {
            "name": "Eric Meadows-J\u00F6nsson",
            "phone": "\u002B46 070-893 94 01"
          }
        ]
      },
      "group": "pm.hex",
      "name": "hex",
      "description": "The package manager for the Erlang ecosystem.",
      "endpoints": [
        "https://hex.pm/api/packages"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.maven.repo1",
      "provider": {
        "name": "Sonatype",
        "url": [
          "https://sonatype.com"
        ]
      },
      "group": "org.maven.repo1",
      "name": "Maven Central",
      "description": "Package repository for the Java ecosystem.",
      "endpoints": [
        "https://repo1.maven.org/maven2"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:com.atlassian.maven",
      "provider": {
        "name": "Atlassian",
        "url": [
          "https://atlassian.com"
        ]
      },
      "group": "com.atlassian.maven",
      "name": "Atlassian Public",
      "description": "Package repository for the Java ecosystem.",
      "endpoints": [
        "https://packages.atlassian.com/content/repositories/atlassian-public/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.jboss.repository",
      "provider": {
        "name": "RedHat",
        "url": [
          "https://redhat.com"
        ]
      },
      "group": "org.jboss.repository",
      "name": "JBoss Releases",
      "description": "Package repository for the Java ecosystem.",
      "endpoints": [
        "https://repository.jboss.org/nexus/content/repositories/releases/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.clojars.repo",
      "provider": {
        "name": "Clojars",
        "url": [
          "https://clojars.org/"
        ]
      },
      "group": "org.clojars.repo",
      "name": "Clojars",
      "description": "Clojars is an easy to use community repository for open source Clojure libraries",
      "endpoints": [
        "https://repo.clojars.org/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:com.google.maven",
      "provider": {
        "name": "Google",
        "url": [
          "https://google.com"
        ]
      },
      "group": "com.google.maven",
      "name": "Google\u0027s Maven Repository",
      "endpoints": [
        "https://maven.google.com/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.npmjs.registry",
      "provider": {
        "name": "npm",
        "url": [
          "https://www.npmjs.com/"
        ]
      },
      "group": "org.npmjs.registry",
      "name": "NPM Registry",
      "description": "Package repository for the Node.js and JavaScript ecosystems.",
      "endpoints": [
        "https://registry.npmjs.org/-/package/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.nuget.api",
      "provider": {
        "name": "Microsoft",
        "url": [
          "https://www.microsoft.com/"
        ],
        "contact": [
          {
            "email": "support@nuget.org"
          }
        ]
      },
      "group": "org.nuget.api",
      "name": "NuGet Registry",
      "description": "Package repository for the .NET ecosystem.",
      "endpoints": [
        "https://api.nuget.org/v3-flatcontainer/",
        "https://api.nuget.org/v3/registration3/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:dev.osv",
      "provider": {
        "name": "Google",
        "url": [
          "https://google.com"
        ]
      },
      "group": "dev.osv",
      "name": "OSV",
      "description": "OSV is a distributed vulnerability database for Open Source",
      "endpoints": [
        "https://osv-vulnerabilities.storage.googleapis.com"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.pypi",
      "provider": {
        "name": "Python Software Foundation",
        "url": [
          "https://www.python.org/psf/"
        ],
        "contact": [
          {
            "email": "psf@python.org"
          }
        ]
      },
      "group": "org.pypi",
      "name": "PyPI",
      "description": "The Python Package Index (PyPI) is a repository of software for the Python programming language.",
      "endpoints": [
        "https://pypi.org/pypi/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:io.snyk",
      "provider": {
        "name": "Snyk",
        "url": [
          "https://snyk.io"
        ]
      },
      "group": "io.snyk",
      "name": "Snyk",
      "description": "Snyk is a developer security platform. Integrating directly into development tools, workflows, and automation pipelines, Snyk makes it easy for teams to find, prioritize, and fix security vulnerabilities in code, dependencies, containers, and infrastructure as code. Supported by industry-leading application and security intelligence, Snyk puts security expertise in any developer\u0027s toolkit.",
      "endpoints": [
        "https://api.snyk.io"
      ],
      "authenticated": true,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:com.aquasec",
      "provider": {
        "name": "Trivy"
      },
      "group": "com.aquasec",
      "name": "Trivy",
      "description": "Trivy is a comprehensive and versatile security scanner. Trivy has scanners that look for security issues, and targets where it can find those issues.",
      "authenticated": true,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.dependencytrack.metrics",
      "provider": {
        "name": "OWASP"
      },
      "group": "org.dependencytrack",
      "name": "metrics",
      "description": "Dependency-Track telemetry service.",
      "endpoints": [
        "https://metrics.dependencytrack.org"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ],
      "externalReferences": [
        {
          "url": "https://docs.dependencytrack.org/getting-started/telemetry/",
          "type": "documentation"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.dependencytrack/dependency-track@4.14.0?type=war",
      "dependsOn": [
        "pkg:maven/us.springett/alpine-common@3.7.0?type=jar",
        "pkg:maven/us.springett/alpine-model@3.7.0?type=jar",
        "pkg:maven/us.springett/alpine-infra@3.7.0?type=jar",
        "pkg:maven/us.springett/alpine-server@3.7.0?type=jar",
        "pkg:maven/org.metaeffekt.core/ae-security@0.153.1?type=jar",
        "pkg:maven/us.springett/owasp-risk-rating-calculator@1.0.1?type=jar",
        "pkg:maven/us.springett/cpe-parser@3.0.1?type=jar",
        "pkg:maven/org.cyclonedx/cyclonedx-core-java@12.1.0?type=jar",
        "pkg:maven/org.json/json@20251224?type=jar",
        "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar",
        "pkg:maven/jakarta.validation/jakarta.validation-api@3.1.1?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
        "pkg:maven/org.apache.lucene/lucene-core@8.11.4?type=jar",
        "pkg:maven/org.apache.lucene/lucene-analyzers-common@8.11.4?type=jar",
        "pkg:maven/org.apache.lucene/lucene-queryparser@8.11.4?type=jar",
        "pkg:maven/org.apache.lucene/lucene-queries@8.11.4?type=jar",
        "pkg:maven/org.apache.lucene/lucene-sandbox@8.11.4?type=jar",
        "pkg:maven/io.github.jeremylong/open-vulnerability-clients@9.0.3?type=jar",
        "pkg:maven/io.pebbletemplates/pebble@4.1.1?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.34.0?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.34.0?type=jar",
        "pkg:maven/io.swagger.core.v3/swagger-jaxrs2-jakarta@2.2.44?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
        "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.6?type=jar",
        "pkg:maven/oauth.signpost/signpost-core@2.1.1?type=jar",
        "pkg:maven/org.brotli/dec@0.1.2?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpmime@4.5.14?type=jar",
        "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.1.1?type=jar",
        "pkg:maven/org.apache.maven/maven-artifact@3.9.13?type=jar",
        "pkg:maven/com.microsoft.sqlserver/mssql-jdbc@13.2.1.jre11?type=jar",
        "pkg:maven/com.mysql/mysql-connector-j@8.2.0?type=jar",
        "pkg:maven/org.postgresql/postgresql@42.7.10?type=jar",
        "pkg:maven/com.google.cloud.sql/mysql-socket-factory-connector-j-8@1.28.1?type=jar",
        "pkg:maven/com.google.cloud.sql/postgres-socket-factory@1.28.1?type=jar",
        "pkg:maven/com.google.cloud.sql/cloud-sql-connector-jdbc-sqlserver@1.28.1?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar",
        "pkg:maven/org.apache.commons/commons-text@1.15.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-retry@2.3.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-ratelimiter@2.3.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-micrometer@2.3.0?type=jar",
        "pkg:maven/org.slf4j/log4j-over-slf4j@2.0.17?type=jar",
        "pkg:maven/org.kohsuke/github-api@1.330?type=jar",
        "pkg:maven/com.asahaf.javacron/javacron@1.4.0?type=jar",
        "pkg:maven/io.github.nscuro/versatile-core@0.16.1?type=jar",
        "pkg:maven/us.springett/alpine-executable-war@3.7.0?type=jar",
        "pkg:maven/org.owasp/security-logging-common@1.1.7?type=jar",
        "pkg:maven/org.owasp/security-logging-logback@1.1.7?type=jar",
        "pkg:maven/net.logstash.logback/logstash-logback-encoder@8.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/us.springett/alpine-common@3.7.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
        "pkg:maven/io.micrometer/micrometer-registry-prometheus@1.16.4?type=jar",
        "pkg:maven/io.micrometer/micrometer-registry-prometheus-simpleclient@1.16.4?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.micrometer/micrometer-registry-prometheus@1.16.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/io.micrometer/micrometer-core@1.16.4?type=jar",
        "pkg:maven/io.prometheus/prometheus-metrics-core@1.4.3?type=jar",
        "pkg:maven/io.prometheus/prometheus-metrics-tracer-common@1.4.3?type=jar",
        "pkg:maven/io.prometheus/prometheus-metrics-exposition-formats@1.4.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.micrometer/micrometer-core@1.16.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/io.micrometer/micrometer-commons@1.16.4?type=jar",
        "pkg:maven/io.micrometer/micrometer-observation@1.16.4?type=jar",
        "pkg:maven/org.hdrhistogram/HdrHistogram@2.2.2?type=jar",
        "pkg:maven/org.latencyutils/LatencyUtils@2.0.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.micrometer/micrometer-commons@1.16.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.micrometer/micrometer-observation@1.16.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/io.micrometer/micrometer-commons@1.16.4?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.hdrhistogram/HdrHistogram@2.2.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.latencyutils/LatencyUtils@2.0.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.prometheus/prometheus-metrics-core@1.4.3?type=jar",
      "dependsOn": [
        "pkg:maven/io.prometheus/prometheus-metrics-model@1.4.3?type=jar",
        "pkg:maven/io.prometheus/prometheus-metrics-config@1.4.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.prometheus/prometheus-metrics-model@1.4.3?type=jar",
      "dependsOn": [
        "pkg:maven/io.prometheus/prometheus-metrics-config@1.4.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.prometheus/prometheus-metrics-config@1.4.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.prometheus/prometheus-metrics-tracer-common@1.4.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.prometheus/prometheus-metrics-exposition-formats@1.4.3?type=jar",
      "dependsOn": [
        "pkg:maven/io.prometheus/prometheus-metrics-exposition-textformats@1.4.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.prometheus/prometheus-metrics-exposition-textformats@1.4.3?type=jar",
      "dependsOn": [
        "pkg:maven/io.prometheus/prometheus-metrics-model@1.4.3?type=jar",
        "pkg:maven/io.prometheus/prometheus-metrics-config@1.4.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.micrometer/micrometer-registry-prometheus-simpleclient@1.16.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/io.micrometer/micrometer-core@1.16.4?type=jar",
        "pkg:maven/io.prometheus/simpleclient_common@0.16.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.prometheus/simpleclient_common@0.16.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.prometheus/simpleclient@0.16.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.prometheus/simpleclient@0.16.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.prometheus/simpleclient_tracer_otel@0.16.0?type=jar",
        "pkg:maven/io.prometheus/simpleclient_tracer_otel_agent@0.16.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.prometheus/simpleclient_tracer_otel@0.16.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.prometheus/simpleclient_tracer_common@0.16.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.prometheus/simpleclient_tracer_common@0.16.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.prometheus/simpleclient_tracer_otel_agent@0.16.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.prometheus/simpleclient_tracer_common@0.16.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/us.springett/alpine-model@3.7.0?type=jar",
      "dependsOn": [
        "pkg:maven/us.springett/alpine-common@3.7.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-api-jdo@6.0.5?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-core@6.0.11?type=jar",
        "pkg:maven/org.datanucleus/javax.jdo@3.2.1?type=jar",
        "pkg:maven/org.glassfish.jersey.ext/jersey-bean-validation@4.0.2?type=jar",
        "pkg:maven/io.swagger.core.v3/swagger-annotations-jakarta@2.2.44?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.datanucleus/datanucleus-api-jdo@6.0.5?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.datanucleus/datanucleus-core@6.0.11?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.datanucleus/javax.jdo@3.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/javax.transaction/javax.transaction-api@1.3?type=jar",
        "pkg:maven/org.glassfish.corba/glassfish-corba-omgapi@4.2.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/javax.transaction/javax.transaction-api@1.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.corba/glassfish-corba-omgapi@4.2.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.ext/jersey-bean-validation@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.2?type=jar",
        "pkg:maven/jakarta.validation/jakarta.validation-api@3.1.1?type=jar",
        "pkg:maven/org.hibernate.validator/hibernate-validator@8.0.2.Final?type=jar",
        "pkg:maven/org.jboss.logging/jboss-logging@3.6.1.Final?type=jar",
        "pkg:maven/jakarta.el/jakarta.el-api@6.0.1?type=jar",
        "pkg:maven/org.glassfish.expressly/expressly@5.0.0?type=jar",
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar",
        "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar",
        "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
        "pkg:maven/org.glassfish.hk2/osgi-resource-locator@3.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.hk2/osgi-resource-locator@3.0.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-client@4.0.2?type=jar",
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar",
        "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar",
        "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
        "pkg:maven/jakarta.validation/jakarta.validation-api@3.1.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.core/jersey-client@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
        "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.validation/jakarta.validation-api@3.1.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.hibernate.validator/hibernate-validator@8.0.2.Final?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml/classmate@1.5.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml/classmate@1.5.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.jboss.logging/jboss-logging@3.6.1.Final?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/jakarta.el/jakarta.el-api@6.0.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.expressly/expressly@5.0.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.swagger.core.v3/swagger-annotations-jakarta@2.2.44?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/us.springett/alpine-infra@3.7.0?type=jar",
      "dependsOn": [
        "pkg:maven/us.springett/alpine-common@3.7.0?type=jar",
        "pkg:maven/us.springett/alpine-model@3.7.0?type=jar",
        "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar",
        "pkg:maven/org.datanucleus/javax.jdo@3.2.1?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-api-jdo@6.0.5?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-core@6.0.11?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-rdbms@6.0.10?type=jar",
        "pkg:maven/com.zaxxer/HikariCP@7.0.2?type=jar",
        "pkg:maven/org.javassist/javassist@3.30.2-GA?type=jar",
        "pkg:maven/io.jsonwebtoken/jjwt@0.13.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.datanucleus/datanucleus-rdbms@6.0.10?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.zaxxer/HikariCP@7.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.javassist/javassist@3.30.2-GA?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.jsonwebtoken/jjwt@0.13.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.jsonwebtoken/jjwt-api@0.13.0?type=jar",
        "pkg:maven/io.jsonwebtoken/jjwt-impl@0.13.0?type=jar",
        "pkg:maven/io.jsonwebtoken/jjwt-jackson@0.13.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.jsonwebtoken/jjwt-api@0.13.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.jsonwebtoken/jjwt-impl@0.13.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.jsonwebtoken/jjwt-api@0.13.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.jsonwebtoken/jjwt-jackson@0.13.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.jsonwebtoken/jjwt-api@0.13.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/us.springett/alpine-server@3.7.0?type=jar",
      "dependsOn": [
        "pkg:maven/us.springett/alpine-common@3.7.0?type=jar",
        "pkg:maven/us.springett/alpine-infra@3.7.0?type=jar",
        "pkg:maven/us.springett/alpine-model@3.7.0?type=jar",
        "pkg:maven/commons-io/commons-io@2.21.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
        "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-client@4.0.2?type=jar",
        "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@4.0.2?type=jar",
        "pkg:maven/org.glassfish.jersey.media/jersey-media-json-jackson@4.0.2?type=jar",
        "pkg:maven/org.glassfish.jersey.media/jersey-media-multipart@4.0.2?type=jar",
        "pkg:maven/org.glassfish.jersey.ext/jersey-bean-validation@4.0.2?type=jar",
        "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@4.0.2?type=jar",
        "pkg:maven/jakarta.json/jakarta.json-api@2.1.3?type=jar",
        "pkg:maven/org.eclipse.parsson/jakarta.json@1.1.7?type=jar",
        "pkg:maven/io.swagger.core.v3/swagger-annotations-jakarta@2.2.44?type=jar",
        "pkg:maven/org.datanucleus/javax.jdo@3.2.1?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-api-jdo@6.0.5?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-core@6.0.11?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-rdbms@6.0.10?type=jar",
        "pkg:maven/com.zaxxer/HikariCP@7.0.2?type=jar",
        "pkg:maven/org.javassist/javassist@3.30.2-GA?type=jar",
        "pkg:maven/com.h2database/h2@2.4.240?type=jar",
        "pkg:maven/io.jsonwebtoken/jjwt@0.13.0?type=jar",
        "pkg:maven/org.mindrot/jbcrypt@0.4?type=jar",
        "pkg:maven/com.nimbusds/oauth2-oidc-sdk@11.34?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
        "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-base@2.21.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-json-provider@2.21.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.21.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
        "pkg:maven/ch.qos.logback/logback-classic@1.5.32?type=jar",
        "pkg:maven/ch.qos.logback/logback-core@1.5.32?type=jar",
        "pkg:maven/org.owasp/security-logging-common@1.1.7?type=jar",
        "pkg:maven/org.owasp/security-logging-logback@1.1.7?type=jar",
        "pkg:maven/net.logstash.logback/logstash-logback-encoder@8.1?type=jar",
        "pkg:maven/org.eclipse.microprofile.health/microprofile-health-api@4.0.1?type=jar",
        "pkg:maven/org.owasp.encoder/encoder@1.4.0?type=jar",
        "pkg:maven/org.owasp.encoder/encoder-jsp@1.4.0?type=jar",
        "pkg:maven/jakarta.mail/jakarta.mail-api@2.1.3?type=jar",
        "pkg:maven/org.eclipse.angus/angus-mail@2.0.5?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.2.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/commons-io/commons-io@2.21.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-server@4.0.2?type=jar",
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.media/jersey-media-json-jackson@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
        "pkg:maven/org.glassfish.jersey.ext/jersey-entity-filtering@4.0.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.module/jackson-module-jakarta-xmlbind-annotations@2.21.1?type=jar",
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.ext/jersey-entity-filtering@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@4.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.module/jackson-module-jakarta-xmlbind-annotations@2.21.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.media/jersey-media-multipart@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
        "pkg:maven/org.jvnet.mimepull/mimepull@1.9.15?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jvnet.mimepull/mimepull@1.9.15?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@4.0.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.jersey.core/jersey-common@4.0.2?type=jar",
        "pkg:maven/org.glassfish.hk2/hk2-locator@4.0.0-M3?type=jar",
        "pkg:maven/org.javassist/javassist@3.30.2-GA?type=jar",
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2?type=jar",
        "pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0?type=jar",
        "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.hk2/hk2-locator@4.0.0-M3?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@4.0.0-M3?type=jar",
        "pkg:maven/org.glassfish.hk2/hk2-api@4.0.0-M3?type=jar",
        "pkg:maven/org.glassfish.hk2/hk2-utils@4.0.0-M3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@4.0.0-M3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.hk2/hk2-api@4.0.0-M3?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.hk2/hk2-utils@4.0.0-M3?type=jar",
        "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@4.0.0-M3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.hk2/hk2-utils@4.0.0-M3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/jakarta.json/jakarta.json-api@2.1.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.eclipse.parsson/jakarta.json@1.1.7?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.h2database/h2@2.4.240?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.mindrot/jbcrypt@0.4?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.nimbusds/oauth2-oidc-sdk@11.34?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar",
        "pkg:maven/com.nimbusds/content-type@2.3?type=jar",
        "pkg:maven/net.minidev/json-smart@2.5.2?type=jar",
        "pkg:maven/com.nimbusds/lang-tag@1.7?type=jar",
        "pkg:maven/com.nimbusds/nimbus-jose-jwt@10.6?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.nimbusds/content-type@2.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/net.minidev/json-smart@2.5.2?type=jar",
      "dependsOn": [
        "pkg:maven/net.minidev/accessors-smart@2.5.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/net.minidev/accessors-smart@2.5.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.ow2.asm/asm@9.7.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.ow2.asm/asm@9.7.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.nimbusds/lang-tag@1.7?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.nimbusds/nimbus-jose-jwt@10.6?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-base@2.21.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-json-provider@2.21.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-base@2.21.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.module/jackson-module-jakarta-xmlbind-annotations@2.21.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.21.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/ch.qos.logback/logback-classic@1.5.32?type=jar",
      "dependsOn": [
        "pkg:maven/ch.qos.logback/logback-core@1.5.32?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/ch.qos.logback/logback-core@1.5.32?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.owasp/security-logging-common@1.1.7?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.owasp/security-logging-logback@1.1.7?type=jar",
      "dependsOn": [
        "pkg:maven/org.owasp/security-logging-common@1.1.7?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
        "pkg:maven/ch.qos.logback/logback-classic@1.5.32?type=jar",
        "pkg:maven/ch.qos.logback/logback-core@1.5.32?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.21.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/commons-codec/commons-codec@1.21.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/net.logstash.logback/logstash-logback-encoder@8.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.microprofile.health/microprofile-health-api@4.0.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.owasp.encoder/encoder@1.4.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.owasp.encoder/encoder-jsp@1.4.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.owasp.encoder/encoder@1.4.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.mail/jakarta.mail-api@2.1.3?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.angus/angus-mail@2.0.5?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar",
        "pkg:maven/jakarta.mail/jakarta.mail-api@2.1.3?type=jar",
        "pkg:maven/org.eclipse.angus/angus-activation@2.0.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.angus/angus-activation@2.0.3?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.2.3?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.metaeffekt.core/ae-security@0.153.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
        "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.17?type=jar",
        "pkg:maven/commons-io/commons-io@2.21.0?type=jar",
        "pkg:maven/org.json/json@20251224?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.17?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.json/json@20251224?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/us.springett/owasp-risk-rating-calculator@1.0.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/us.springett/cpe-parser@3.0.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.cyclonedx/cyclonedx-core-java@12.1.0?type=jar",
      "dependsOn": [
        "pkg:maven/commons-codec/commons-codec@1.21.0?type=jar",
        "pkg:maven/commons-io/commons-io@2.21.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
        "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.21.1?type=jar",
        "pkg:maven/com.networknt/json-schema-validator@1.5.9?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.21.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.1?type=jar",
        "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar",
        "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.1.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.1.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.networknt/json-schema-validator@1.5.9?type=jar",
      "dependsOn": [
        "pkg:maven/com.ethlo.time/itu@1.14.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.21.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.ethlo.time/itu@1.14.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.21.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.1?type=jar",
        "pkg:maven/org.yaml/snakeyaml@2.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.yaml/snakeyaml@2.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.apache.lucene/lucene-core@8.11.4?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.apache.lucene/lucene-analyzers-common@8.11.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.lucene/lucene-core@8.11.4?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.lucene/lucene-queryparser@8.11.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.lucene/lucene-core@8.11.4?type=jar",
        "pkg:maven/org.apache.lucene/lucene-queries@8.11.4?type=jar",
        "pkg:maven/org.apache.lucene/lucene-sandbox@8.11.4?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.lucene/lucene-queries@8.11.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.lucene/lucene-core@8.11.4?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.lucene/lucene-sandbox@8.11.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.lucene/lucene-core@8.11.4?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.jeremylong/open-vulnerability-clients@9.0.3?type=jar",
      "dependsOn": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.6?type=jar",
        "pkg:maven/org.apache.httpcomponents.client5/httpclient5-cache@5.6?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.21.1?type=jar",
        "pkg:maven/com.samskivert/jmustache@1.16?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.6?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.4?type=jar",
        "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.4?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.4?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.4?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents.client5/httpclient5-cache@5.6?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.6?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.21.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.samskivert/jmustache@1.16?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.pebbletemplates/pebble@4.1.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.unbescape/unbescape@1.1.6.RELEASE?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.unbescape/unbescape@1.1.6.RELEASE?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.protobuf/protobuf-java@4.34.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.protobuf/protobuf-java-util@4.34.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.protobuf/protobuf-java@4.34.0?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.8.9?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.code.gson/gson@2.8.9?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.swagger.core.v3/swagger-jaxrs2-jakarta@2.2.44?type=jar",
      "dependsOn": [
        "pkg:maven/io.github.classgraph/classgraph@4.8.184?type=jar",
        "pkg:maven/org.javassist/javassist@3.30.2-GA?type=jar",
        "pkg:maven/io.swagger.core.v3/swagger-models-jakarta@2.2.44?type=jar",
        "pkg:maven/io.swagger.core.v3/swagger-annotations-jakarta@2.2.44?type=jar",
        "pkg:maven/io.swagger.core.v3/swagger-integration-jakarta@2.2.44?type=jar",
        "pkg:maven/org.yaml/snakeyaml@2.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.jakarta.rs/jackson-jakarta-rs-json-provider@2.21.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.classgraph/classgraph@4.8.184?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.swagger.core.v3/swagger-models-jakarta@2.2.44?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.swagger.core.v3/swagger-integration-jakarta@2.2.44?type=jar",
      "dependsOn": [
        "pkg:maven/io.github.classgraph/classgraph@4.8.184?type=jar",
        "pkg:maven/io.swagger.core.v3/swagger-core-jakarta@2.2.44?type=jar",
        "pkg:maven/io.swagger.core.v3/swagger-models-jakarta@2.2.44?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.swagger.core.v3/swagger-core-jakarta@2.2.44?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
        "pkg:maven/io.swagger.core.v3/swagger-annotations-jakarta@2.2.44?type=jar",
        "pkg:maven/io.swagger.core.v3/swagger-models-jakarta@2.2.44?type=jar",
        "pkg:maven/org.yaml/snakeyaml@2.3?type=jar",
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2?type=jar",
        "pkg:maven/jakarta.validation/jakarta.validation-api@3.1.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.21.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.21.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.21.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/oauth.signpost/signpost-core@2.1.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.brotli/dec@0.1.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents/httpmime@4.5.14?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.maven/maven-artifact@3.9.13?type=jar",
      "dependsOn": [
        "pkg:maven/org.codehaus.plexus/plexus-utils@3.6.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.codehaus.plexus/plexus-utils@3.6.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.microsoft.sqlserver/mssql-jdbc@13.2.1.jre11?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.mysql/mysql-connector-j@8.2.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.postgresql/postgresql@42.7.10?type=jar",
      "dependsOn": [
        "pkg:maven/org.checkerframework/checker-qual@3.52.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.checkerframework/checker-qual@3.52.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.cloud.sql/mysql-socket-factory-connector-j-8@1.28.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.cloud.sql/jdbc-socket-factory-core@1.28.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.cloud.sql/jdbc-socket-factory-core@1.28.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.jnr/jnr-enxio@0.32.19?type=jar",
        "pkg:maven/com.github.jnr/jnr-unixsocket@0.38.24?type=jar",
        "pkg:maven/com.google.http-client/google-http-client@2.1.0-rc1?type=jar",
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
        "pkg:maven/com.google.http-client/google-http-client-gson@2.1.0-rc1?type=jar",
        "pkg:maven/com.google.api-client/google-api-client@2.8.1?type=jar",
        "pkg:maven/com.google.apis/google-api-services-sqladmin@v1beta4-rev20251201-2.0.0?type=jar",
        "pkg:maven/com.google.auth/google-auth-library-credentials@1.42.0-rc1?type=jar",
        "pkg:maven/com.google.auth/google-auth-library-oauth2-http@1.42.0-rc1?type=jar",
        "pkg:maven/com.google.oauth-client/google-oauth-client@1.39.0?type=jar",
        "pkg:maven/dnsjava/dnsjava@3.6.3?type=jar",
        "pkg:maven/com.google.api/gax@2.73.0-rc1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.34.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.jnr/jnr-enxio@0.32.19?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.jnr/jnr-constants@0.10.4?type=jar",
        "pkg:maven/com.github.jnr/jnr-ffi@2.2.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.jnr/jnr-constants@0.10.4?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.github.jnr/jnr-ffi@2.2.18?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.jnr/jffi@1.3.14?type=jar",
        "pkg:maven/com.github.jnr/jffi@1.3.14?classifier=native\u0026type=jar",
        "pkg:maven/org.ow2.asm/asm@9.7.1?type=jar",
        "pkg:maven/org.ow2.asm/asm-commons@9.7.1?type=jar",
        "pkg:maven/org.ow2.asm/asm-analysis@9.7.1?type=jar",
        "pkg:maven/org.ow2.asm/asm-tree@9.7.1?type=jar",
        "pkg:maven/org.ow2.asm/asm-util@9.7.1?type=jar",
        "pkg:maven/com.github.jnr/jnr-a64asm@1.0.0?type=jar",
        "pkg:maven/com.github.jnr/jnr-x86asm@1.0.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.jnr/jffi@1.3.14?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.github.jnr/jffi@1.3.14?classifier=native\u0026type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.ow2.asm/asm-commons@9.7.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.ow2.asm/asm@9.7.1?type=jar",
        "pkg:maven/org.ow2.asm/asm-tree@9.7.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.ow2.asm/asm-tree@9.7.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.ow2.asm/asm@9.7.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.ow2.asm/asm-analysis@9.7.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.ow2.asm/asm-tree@9.7.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.ow2.asm/asm-util@9.7.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.ow2.asm/asm@9.7.1?type=jar",
        "pkg:maven/org.ow2.asm/asm-tree@9.7.1?type=jar",
        "pkg:maven/org.ow2.asm/asm-analysis@9.7.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.jnr/jnr-a64asm@1.0.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.github.jnr/jnr-x86asm@1.0.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.github.jnr/jnr-unixsocket@0.38.24?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.jnr/jnr-ffi@2.2.18?type=jar",
        "pkg:maven/com.github.jnr/jnr-constants@0.10.4?type=jar",
        "pkg:maven/com.github.jnr/jnr-enxio@0.32.19?type=jar",
        "pkg:maven/com.github.jnr/jnr-posix@3.1.21?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.jnr/jnr-posix@3.1.21?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.jnr/jnr-ffi@2.2.18?type=jar",
        "pkg:maven/com.github.jnr/jnr-constants@0.10.4?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.http-client/google-http-client@2.1.0-rc1?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
        "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar",
        "pkg:maven/io.grpc/grpc-context@1.70.0?type=jar",
        "pkg:maven/io.opencensus/opencensus-api@0.31.1?type=jar",
        "pkg:maven/io.opencensus/opencensus-contrib-http-util@0.31.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar",
        "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
        "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.grpc/grpc-context@1.70.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.grpc/grpc-api@1.70.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.grpc/grpc-api@1.70.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.opencensus/opencensus-api@0.31.1?type=jar",
      "dependsOn": [
        "pkg:maven/io.grpc/grpc-context@1.70.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.opencensus/opencensus-contrib-http-util@0.31.1?type=jar",
      "dependsOn": [
        "pkg:maven/io.opencensus/opencensus-api@0.31.1?type=jar",
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.http-client/google-http-client-gson@2.1.0-rc1?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.http-client/google-http-client@2.1.0-rc1?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.8.9?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.api-client/google-api-client@2.8.1?type=jar",
      "dependsOn": [
        "pkg:maven/commons-codec/commons-codec@1.21.0?type=jar",
        "pkg:maven/com.google.auth/google-auth-library-credentials@1.42.0-rc1?type=jar",
        "pkg:maven/com.google.auth/google-auth-library-oauth2-http@1.42.0-rc1?type=jar",
        "pkg:maven/com.google.http-client/google-http-client-gson@2.1.0-rc1?type=jar",
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
        "pkg:maven/com.google.http-client/google-http-client-apache-v2@2.0.0?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
        "pkg:maven/com.google.http-client/google-http-client@2.1.0-rc1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.auth/google-auth-library-credentials@1.42.0-rc1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.auth/google-auth-library-oauth2-http@1.42.0-rc1?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.0?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/com.google.auth/google-auth-library-credentials@1.42.0-rc1?type=jar",
        "pkg:maven/com.google.http-client/google-http-client@2.1.0-rc1?type=jar",
        "pkg:maven/com.google.http-client/google-http-client-gson@2.1.0-rc1?type=jar",
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
        "pkg:maven/com.google.api/api-common@2.53.0?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.8.9?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.api/api-common@2.53.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.auto.value/auto-value-annotations@1.11.0?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar",
        "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.http-client/google-http-client-apache-v2@2.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.http-client/google-http-client@2.1.0-rc1?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.apis/google-api-services-sqladmin@v1beta4-rev20251201-2.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.api-client/google-api-client@2.8.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.oauth-client/google-oauth-client@1.39.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.http-client/google-http-client@2.1.0-rc1?type=jar",
        "pkg:maven/com.google.http-client/google-http-client-gson@2.1.0-rc1?type=jar",
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/dnsjava/dnsjava@3.6.3?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.api/gax@2.73.0-rc1?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.protobuf/protobuf-java-util@4.34.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.cloud.sql/postgres-socket-factory@1.28.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.cloud.sql/jdbc-socket-factory-core@1.28.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.cloud.sql/cloud-sql-connector-jdbc-sqlserver@1.28.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.cloud.sql/jdbc-socket-factory-core@1.28.1?type=jar",
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.commons/commons-compress@1.28.0?type=jar",
      "dependsOn": [
        "pkg:maven/commons-codec/commons-codec@1.21.0?type=jar",
        "pkg:maven/commons-io/commons-io@2.21.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.commons/commons-text@1.15.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-retry@2.3.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.3.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-core@2.3.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.9.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.9.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@1.9.0?type=jar",
        "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk7@1.9.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@1.9.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-common@1.9.0?type=jar",
        "pkg:maven/org.jetbrains/annotations@17.0.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-common@1.9.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.jetbrains/annotations@17.0.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk7@1.9.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@1.9.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-ratelimiter@2.3.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.3.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-micrometer@2.3.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.micrometer/micrometer-core@1.16.4?type=jar",
        "pkg:maven/io.micrometer/micrometer-observation@1.16.4?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-bulkhead@2.3.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-circuitbreaker@2.3.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-retry@2.3.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-ratelimiter@2.3.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-timelimiter@2.3.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-bulkhead@2.3.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.3.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-circuitbreaker@2.3.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.3.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-timelimiter@2.3.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.3.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.slf4j/log4j-over-slf4j@2.0.17?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.kohsuke/github-api@1.330?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.1?type=jar",
        "pkg:maven/commons-io/commons-io@2.21.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.asahaf.javacron/javacron@1.4.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.github.nscuro/versatile-core@0.16.1?type=jar",
      "dependsOn": [
        "pkg:maven/io.github.nscuro/versatile-spi@0.16.1?type=jar",
        "pkg:maven/org.apache.maven/maven-artifact@3.9.13?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar",
        "pkg:maven/com.vdurmont/semver4j@3.1.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.nscuro/versatile-spi@0.16.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.vdurmont/semver4j@3.1.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/us.springett/alpine-executable-war@3.7.0?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-server@12.1.7?type=jar",
        "pkg:maven/org.eclipse.jetty.ee11/jetty-ee11-webapp@12.1.7?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-deploy@12.1.7?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
        "pkg:maven/ch.qos.logback/logback-classic@1.5.32?type=jar",
        "pkg:maven/org.slf4j/log4j-over-slf4j@2.0.17?type=jar",
        "pkg:maven/org.slf4j/jul-to-slf4j@2.0.17?type=jar",
        "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-server@12.1.7?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-http@12.1.7?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-io@12.1.7?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-http@12.1.7?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-io@12.1.7?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-util@12.1.7?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-io@12.1.7?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-util@12.1.7?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-util@12.1.7?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty.ee11/jetty-ee11-webapp@12.1.7?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-session@12.1.7?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-xml@12.1.7?type=jar",
        "pkg:maven/org.eclipse.jetty.ee/jetty-ee-webapp@12.1.7?type=jar",
        "pkg:maven/org.eclipse.jetty.ee11/jetty-ee11-servlet@12.1.7?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-session@12.1.7?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-server@12.1.7?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-xml@12.1.7?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-util@12.1.7?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty.ee/jetty-ee-webapp@12.1.7?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-server@12.1.7?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty.ee11/jetty-ee11-servlet@12.1.7?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-security@12.1.7?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-server@12.1.7?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-session@12.1.7?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-security@12.1.7?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-server@12.1.7?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-deploy@12.1.7?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-server@12.1.7?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-xml@12.1.7?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.slf4j/jul-to-slf4j@2.0.17?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    }
  ]
}